Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
2024-09-20 09_ Sandbox .png

Overview

General Information

Sample name:	2024-09-20 09_ Sandbox .png
Analysis ID:	1514605
MD5:	cf1761ed623c5c952e30148f89d91e87
SHA1:	64bea490d68ba09fdbe579e80c5b5b5ab3f51580
SHA256:	9f04f2d1444951ad0337caaee3134e889f2219919cab74621e8c79e10f1e3e6d
Infos:

Detection

HTMLPhisher

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Yara detected HtmlPhish10

AI detected phishing page (advanced reasoning)

HTML page contains hidden URLs

Phishing site detected (based on favicon image match)

Phishing site or detected (based on various text indicators)

Detected hidden input values containing email addresses (often used in phishing pages)

Detected non-DNS traffic on DNS port

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Stores files to the Windows start menu directory

Classification

×

Process Tree

System is w10x64_ra

chrome.exe (PID: 6212 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://us-east-2.protection.sophos.com/?d=cudasvc.com&u=aHR0cHM6Ly9saW5rcHJvdGVjdC5jdWRhc3ZjLmNvbS91cmw_YT1odHRwcyUzYSUyZiUyZjBvQlQubWVudXMtdW5saW1pdGVkLmNvbSUyZnU4dzV2JmM9RSwxLDNMZjFnY0lEMmR3OUkyLXVKRDBDeGxiYnR1bkk1dkJsWGVCYXNuLTFGZWRjazY1MEJKU211cW9fR2FoVC1ucldtTHVOUzhvbW5ZdUZJZXIwM0VfWjJnQmFjTVpMaFJKZThFSmNxMVphT3NocyZ0eXBvPTE=&i=NWZhMzIyNDYxN2RkOWQwZTA5ZGFiYTQ4&t=bW5wRlRmNkZQMDh0c012RnRzQnR6eVRLWXRVSFFORXhvTG1DZ2FvVWNvaz0#/CMjrbGm/c2RlbHNtYW5AZ2tsYXcuY29t MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3016 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2184 --field-trial-handle=1952,i,1790333140127612858,1956491159581477358,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
6.7.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://agence-immobiliere-luberon.com/5a117d63-e078-4d65-be0b-fa7ab24a9f8f/CIUIhu3Il%5Ej8d~hCXGBXQyj488CBOiZ1sBu85VOVjdrfR0wHePNTggGPy9a3-=Zwh5%5E7n9pEiH6Zv30Ct5r9X-BK3djTxG2Fz5OB

LLM: Score: 8 Reasons: The domain name 'agence-immobiliere-luberon.com' is a partial match for the legitimate domain name 'godfrey-kahn.com'. The brand name 'GODFREY-KAHN' is not commonly associated with the given domain 'agence-immobiliere-luberon.com', which suggests a potential phishing attempt. DOM: 6.7.pages.csv

Yara detected HtmlPhish10

Source: Yara match

File source: 6.7.pages.csv, type: HTML

AI detected phishing page (advanced reasoning)

Source: https://agence-immobiliere-luberon.com/5a117d63-e078-4d65-be0b-fa7ab24a9f8f/CIUIhu3Il%5Ej8d~hCXGBXQyj488CBOiZ1sBu85VOVjdrfR0wHePNTggGPy9a3-=Zwh5%5E7n9pEiH6Zv30Ct5r9X-BK3djTxG2Fz5OB

LLM: Score: 9 DOM: 6.7.pages.csv

HTML page contains hidden URLs

Source: https://agence-immobiliere-luberon.com/5a117d63-e078-4d65-be0b-fa7ab24a9f8f/CIUIhu3Il%5Ej8d~hCXGBXQyj488CBOiZ1sBu85VOVjdrfR0wHePNTggGPy9a3-=Zwh5%5E7n9pEiH6Zv30Ct5r9X-BK3djTxG2Fz5OB

HTTP Parser: https://agence-immobiliere-luberon.com/5a117d63-e078-4d65-be0b-fa7ab24a9f8f/admin/lifeattach

Phishing site detected (based on favicon image match)

Source: https://agence-immobiliere-luberon.com	Matcher: Template: microsoft matched with high similarity
Source: https://agence-immobiliere-luberon.com/5a117d63-e078-4d65-be0b-fa7ab24a9f8f/CIUIhu3Il%5Ej8d~hCXGBXQyj488CBOiZ1sBu85VOVjdrfR0wHePNTggGPy9a3-=Zwh5%5E7n9pEiH6Zv30Ct5r9X-BK3djTxG2Fz5OB	Matcher: Template: microsoft matched with high similarity

Phishing site or detected (based on various text indicators)

Source: Chrome DOM: 0.2	OCR Text: Microsoft Microsaft needs to review the security of your connectian before proceeding Verify you are human by completing the action below. Verifying CLOUDFLARE Ten-Ils 13: 0374424923470 2024 Microsoft Ccrpcrtaticr All Rights Reserved
Source: Chrome DOM: 6.6	OCR Text: Verifying v. CLOUDFLARE Ten-ns Microsoft

Source: https://agence-immobiliere-luberon.com/5a117d63-e078-4d65-be0b-fa7ab24a9f8f/CIUIhu3Il%5Ej8d~hCXGBXQyj488CBOiZ1sBu85VOVjdrfR0wHePNTggGPy9a3-=Zwh5%5E7n9pEiH6Zv30Ct5r9X-BK3djTxG2Fz5OB

HTTP Parser: sdelsman@gklaw.com

Source: https://agence-immobiliere-luberon.com/5a117d63-e078-4d65-be0b-fa7ab24a9f8f/CIUIhu3Il%5Ej8d~hCXGBXQyj488CBOiZ1sBu85VOVjdrfR0wHePNTggGPy9a3-=Zwh5%5E7n9pEiH6Zv30Ct5r9X-BK3djTxG2Fz5OB	HTTP Parser: Number of links: 0
Source: https://passwordreset.microsoftonline.com/?ru=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQIIAYWSu4vTAADGm_au1zvQO0VEEeQGBxXS5tU8Kg49m0uba5LWJO0lgyVt0jyaV9u0aTIdTo43OdwkIg4nLk4iiDffdIuLoyCIgxxOiou9v8Dlgw9-fMv321jDi2QRKkL3c3ARrtzBUKysEX0KpDQcBTEKhkANQ3AQLaM4ikCwXobQydWNrQP6258nN7_Sr3efvnn1-fzvMXDbiqJwWimV4jguBsOhPTCKg8AruZqv2775HgDOAOA7ABxlVw0flMXj7BRHCRzFSJzCcQzBYAinigrCJbzE2mqXjlSmjSgJBPEevWhKZswz7YhH5ITzOJj3VFeoWY66ZHlGhjlmyTs0xj1a8qluNbuspUijiPd4m5eqsSApy53O6Et2U6jOIgu5iGBip8av7PowmHi9MJhGR7nn2YlpRA1nFOm2WWtFCian7LSh2qbLNxGQjOtE0yL0RJtbLT1g91TIjljHpgYttGeIC7_pDQfueMF1zJDSGMVE6WqDEXFWwtvKUBLS_VQQSXjIk464GzHJqDkLU6xOmi5EJCEqzOmpk87mCYmEYrutN4ZUn9ujPTcZDagIdvpwYKhpDZwlrTFIWb3I1H1kZIug2yCEMcu0SEXq-QuC1z153JrLUoDAEYjUFTFs99vYXOt03J2eXN-btYxJzbGZVNUbEJ4ws2RB7ldHeNmtph6PonKP6gwm83A6ZQPJEbvxu1x-eaYX-Ke5y0Fo-La-HU6Coe0aZyvAj5XrhfxW4UZmO3P3GpSrFAobW5mL9nsFeLm6tEU-qDz4ufmRfvvi3q2TT4eZ09VSXVW7jiA1-qQSsIsBYcCxxPnCTuQmlkSNISTAm_N-jdEI7CFcgQ_zwGE-f5q_0qj1eFoSpSpfqz6uIT3oPA88W8t8WP-PfyeXMv8A0&mkt...	HTTP Parser: Number of links: 0

Source: https://agence-immobiliere-luberon.com/5a117d63-e078-4d65-be0b-fa7ab24a9f8f/CIUIhu3Il%5Ej8d~hCXGBXQyj488CBOiZ1sBu85VOVjdrfR0wHePNTggGPy9a3-=Zwh5%5E7n9pEiH6Zv30Ct5r9X-BK3djTxG2Fz5OB

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://0obt.menus-unlimited.com/u8w5v#/CMjrbGm/c2RlbHNtYW5AZ2tsYXcuY29t

HTTP Parser: Base64 decoded: {"version":3,"sources":["/cfsetup_build/src/orchestrator/turnstile/templates/turnstile.scss","%3Cinput%20css%20qtFLbZ%3E"],"names":[],"mappings":"AAmCA,gBACI,GACI,uBClCN,CACF,CDqCA,kBACI,GACI,mBCnCN,CACF,CDsCA,iBACI,MAEI,cCrCN,CDwCE,IACI,mBCtCN,CACF,CDyCA...

Source: https://agence-immobiliere-luberon.com/5a117d63-e078-4d65-be0b-fa7ab24a9f8f/CIUIhu3Il%5Ej8d~hCXGBXQyj488CBOiZ1sBu85VOVjdrfR0wHePNTggGPy9a3-=Zwh5%5E7n9pEiH6Zv30Ct5r9X-BK3djTxG2Fz5OB

HTTP Parser: Title: Sign in to your account does not match URL

Source: https://agence-immobiliere-luberon.com/5a117d63-e078-4d65-be0b-fa7ab24a9f8f/CIUIhu3Il%5Ej8d~hCXGBXQyj488CBOiZ1sBu85VOVjdrfR0wHePNTggGPy9a3-=Zwh5%5E7n9pEiH6Zv30Ct5r9X-BK3djTxG2Fz5OB

HTTP Parser: <input type="password" .../> found

Source: https://0obt.menus-unlimited.com/u8w5v#/CMjrbGm/c2RlbHNtYW5AZ2tsYXcuY29t	HTTP Parser: No favicon
Source: https://0obt.menus-unlimited.com/u8w5v#/CMjrbGm/c2RlbHNtYW5AZ2tsYXcuY29t	HTTP Parser: No favicon
Source: https://0obt.menus-unlimited.com/u8w5v#/CMjrbGm/c2RlbHNtYW5AZ2tsYXcuY29t	HTTP Parser: No favicon

Source: https://agence-immobiliere-luberon.com/5a117d63-e078-4d65-be0b-fa7ab24a9f8f/CIUIhu3Il%5Ej8d~hCXGBXQyj488CBOiZ1sBu85VOVjdrfR0wHePNTggGPy9a3-=Zwh5%5E7n9pEiH6Zv30Ct5r9X-BK3djTxG2Fz5OB	HTTP Parser: No <meta name="author".. found
Source: https://agence-immobiliere-luberon.com/5a117d63-e078-4d65-be0b-fa7ab24a9f8f/CIUIhu3Il%5Ej8d~hCXGBXQyj488CBOiZ1sBu85VOVjdrfR0wHePNTggGPy9a3-=Zwh5%5E7n9pEiH6Zv30Ct5r9X-BK3djTxG2Fz5OB	HTTP Parser: No <meta name="author".. found
Source: https://agence-immobiliere-luberon.com/5a117d63-e078-4d65-be0b-fa7ab24a9f8f/CIUIhu3Il%5Ej8d~hCXGBXQyj488CBOiZ1sBu85VOVjdrfR0wHePNTggGPy9a3-=Zwh5%5E7n9pEiH6Zv30Ct5r9X-BK3djTxG2Fz5OB	HTTP Parser: No <meta name="author".. found
Source: https://passwordreset.microsoftonline.com/?ru=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQIIAYWSu4vTAADGm_au1zvQO0VEEeQGBxXS5tU8Kg49m0uba5LWJO0lgyVt0jyaV9u0aTIdTo43OdwkIg4nLk4iiDffdIuLoyCIgxxOiou9v8Dlgw9-fMv321jDi2QRKkL3c3ARrtzBUKysEX0KpDQcBTEKhkANQ3AQLaM4ikCwXobQydWNrQP6258nN7_Sr3efvnn1-fzvMXDbiqJwWimV4jguBsOhPTCKg8AruZqv2775HgDOAOA7ABxlVw0flMXj7BRHCRzFSJzCcQzBYAinigrCJbzE2mqXjlSmjSgJBPEevWhKZswz7YhH5ITzOJj3VFeoWY66ZHlGhjlmyTs0xj1a8qluNbuspUijiPd4m5eqsSApy53O6Et2U6jOIgu5iGBip8av7PowmHi9MJhGR7nn2YlpRA1nFOm2WWtFCian7LSh2qbLNxGQjOtE0yL0RJtbLT1g91TIjljHpgYttGeIC7_pDQfueMF1zJDSGMVE6WqDEXFWwtvKUBLS_VQQSXjIk464GzHJqDkLU6xOmi5EJCEqzOmpk87mCYmEYrutN4ZUn9ujPTcZDagIdvpwYKhpDZwlrTFIWb3I1H1kZIug2yCEMcu0SEXq-QuC1z153JrLUoDAEYjUFTFs99vYXOt03J2eXN-btYxJzbGZVNUbEJ4ws2RB7ldHeNmtph6PonKP6gwm83A6ZQPJEbvxu1x-eaYX-Ke5y0Fo-La-HU6Coe0aZyvAj5XrhfxW4UZmO3P3GpSrFAobW5mL9nsFeLm6tEU-qDz4ufmRfvvi3q2TT4eZ09VSXVW7jiA1-qQSsIsBYcCxxPnCTuQmlkSNISTAm_N-jdEI7CFcgQ_zwGE-f5q_0qj1eFoSpSpfqz6uIT3oPA88W8t8WP-PfyeXMv8A0&mkt	HTTP Parser: No <meta name="author".. found
Source: https://passwordreset.microsoftonline.com/?ru=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQIIAYWSu4vTAADGm_au1zvQO0VEEeQGBxXS5tU8Kg49m0uba5LWJO0lgyVt0jyaV9u0aTIdTo43OdwkIg4nLk4iiDffdIuLoyCIgxxOiou9v8Dlgw9-fMv321jDi2QRKkL3c3ARrtzBUKysEX0KpDQcBTEKhkANQ3AQLaM4ikCwXobQydWNrQP6258nN7_Sr3efvnn1-fzvMXDbiqJwWimV4jguBsOhPTCKg8AruZqv2775HgDOAOA7ABxlVw0flMXj7BRHCRzFSJzCcQzBYAinigrCJbzE2mqXjlSmjSgJBPEevWhKZswz7YhH5ITzOJj3VFeoWY66ZHlGhjlmyTs0xj1a8qluNbuspUijiPd4m5eqsSApy53O6Et2U6jOIgu5iGBip8av7PowmHi9MJhGR7nn2YlpRA1nFOm2WWtFCian7LSh2qbLNxGQjOtE0yL0RJtbLT1g91TIjljHpgYttGeIC7_pDQfueMF1zJDSGMVE6WqDEXFWwtvKUBLS_VQQSXjIk464GzHJqDkLU6xOmi5EJCEqzOmpk87mCYmEYrutN4ZUn9ujPTcZDagIdvpwYKhpDZwlrTFIWb3I1H1kZIug2yCEMcu0SEXq-QuC1z153JrLUoDAEYjUFTFs99vYXOt03J2eXN-btYxJzbGZVNUbEJ4ws2RB7ldHeNmtph6PonKP6gwm83A6ZQPJEbvxu1x-eaYX-Ke5y0Fo-La-HU6Coe0aZyvAj5XrhfxW4UZmO3P3GpSrFAobW5mL9nsFeLm6tEU-qDz4ufmRfvvi3q2TT4eZ09VSXVW7jiA1-qQSsIsBYcCxxPnCTuQmlkSNISTAm_N-jdEI7CFcgQ_zwGE-f5q_0qj1eFoSpSpfqz6uIT3oPA88W8t8WP-PfyeXMv8A0&mkt	HTTP Parser: No <meta name="author".. found

Source: https://agence-immobiliere-luberon.com/5a117d63-e078-4d65-be0b-fa7ab24a9f8f/CIUIhu3Il%5Ej8d~hCXGBXQyj488CBOiZ1sBu85VOVjdrfR0wHePNTggGPy9a3-=Zwh5%5E7n9pEiH6Zv30Ct5r9X-BK3djTxG2Fz5OB	HTTP Parser: No <meta name="copyright".. found
Source: https://agence-immobiliere-luberon.com/5a117d63-e078-4d65-be0b-fa7ab24a9f8f/CIUIhu3Il%5Ej8d~hCXGBXQyj488CBOiZ1sBu85VOVjdrfR0wHePNTggGPy9a3-=Zwh5%5E7n9pEiH6Zv30Ct5r9X-BK3djTxG2Fz5OB	HTTP Parser: No <meta name="copyright".. found
Source: https://agence-immobiliere-luberon.com/5a117d63-e078-4d65-be0b-fa7ab24a9f8f/CIUIhu3Il%5Ej8d~hCXGBXQyj488CBOiZ1sBu85VOVjdrfR0wHePNTggGPy9a3-=Zwh5%5E7n9pEiH6Zv30Ct5r9X-BK3djTxG2Fz5OB	HTTP Parser: No <meta name="copyright".. found
Source: https://passwordreset.microsoftonline.com/?ru=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQIIAYWSu4vTAADGm_au1zvQO0VEEeQGBxXS5tU8Kg49m0uba5LWJO0lgyVt0jyaV9u0aTIdTo43OdwkIg4nLk4iiDffdIuLoyCIgxxOiou9v8Dlgw9-fMv321jDi2QRKkL3c3ARrtzBUKysEX0KpDQcBTEKhkANQ3AQLaM4ikCwXobQydWNrQP6258nN7_Sr3efvnn1-fzvMXDbiqJwWimV4jguBsOhPTCKg8AruZqv2775HgDOAOA7ABxlVw0flMXj7BRHCRzFSJzCcQzBYAinigrCJbzE2mqXjlSmjSgJBPEevWhKZswz7YhH5ITzOJj3VFeoWY66ZHlGhjlmyTs0xj1a8qluNbuspUijiPd4m5eqsSApy53O6Et2U6jOIgu5iGBip8av7PowmHi9MJhGR7nn2YlpRA1nFOm2WWtFCian7LSh2qbLNxGQjOtE0yL0RJtbLT1g91TIjljHpgYttGeIC7_pDQfueMF1zJDSGMVE6WqDEXFWwtvKUBLS_VQQSXjIk464GzHJqDkLU6xOmi5EJCEqzOmpk87mCYmEYrutN4ZUn9ujPTcZDagIdvpwYKhpDZwlrTFIWb3I1H1kZIug2yCEMcu0SEXq-QuC1z153JrLUoDAEYjUFTFs99vYXOt03J2eXN-btYxJzbGZVNUbEJ4ws2RB7ldHeNmtph6PonKP6gwm83A6ZQPJEbvxu1x-eaYX-Ke5y0Fo-La-HU6Coe0aZyvAj5XrhfxW4UZmO3P3GpSrFAobW5mL9nsFeLm6tEU-qDz4ufmRfvvi3q2TT4eZ09VSXVW7jiA1-qQSsIsBYcCxxPnCTuQmlkSNISTAm_N-jdEI7CFcgQ_zwGE-f5q_0qj1eFoSpSpfqz6uIT3oPA88W8t8WP-PfyeXMv8A0&mkt...	HTTP Parser: No <meta name="copyright".. found
Source: https://passwordreset.microsoftonline.com/?ru=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQIIAYWSu4vTAADGm_au1zvQO0VEEeQGBxXS5tU8Kg49m0uba5LWJO0lgyVt0jyaV9u0aTIdTo43OdwkIg4nLk4iiDffdIuLoyCIgxxOiou9v8Dlgw9-fMv321jDi2QRKkL3c3ARrtzBUKysEX0KpDQcBTEKhkANQ3AQLaM4ikCwXobQydWNrQP6258nN7_Sr3efvnn1-fzvMXDbiqJwWimV4jguBsOhPTCKg8AruZqv2775HgDOAOA7ABxlVw0flMXj7BRHCRzFSJzCcQzBYAinigrCJbzE2mqXjlSmjSgJBPEevWhKZswz7YhH5ITzOJj3VFeoWY66ZHlGhjlmyTs0xj1a8qluNbuspUijiPd4m5eqsSApy53O6Et2U6jOIgu5iGBip8av7PowmHi9MJhGR7nn2YlpRA1nFOm2WWtFCian7LSh2qbLNxGQjOtE0yL0RJtbLT1g91TIjljHpgYttGeIC7_pDQfueMF1zJDSGMVE6WqDEXFWwtvKUBLS_VQQSXjIk464GzHJqDkLU6xOmi5EJCEqzOmpk87mCYmEYrutN4ZUn9ujPTcZDagIdvpwYKhpDZwlrTFIWb3I1H1kZIug2yCEMcu0SEXq-QuC1z153JrLUoDAEYjUFTFs99vYXOt03J2eXN-btYxJzbGZVNUbEJ4ws2RB7ldHeNmtph6PonKP6gwm83A6ZQPJEbvxu1x-eaYX-Ke5y0Fo-La-HU6Coe0aZyvAj5XrhfxW4UZmO3P3GpSrFAobW5mL9nsFeLm6tEU-qDz4ufmRfvvi3q2TT4eZ09VSXVW7jiA1-qQSsIsBYcCxxPnCTuQmlkSNISTAm_N-jdEI7CFcgQ_zwGE-f5q_0qj1eFoSpSpfqz6uIT3oPA88W8t8WP-PfyeXMv8A0&mkt...	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.211.8.90:443 -> 192.168.2.16:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:56649 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.16:56588 -> 1.1.1.1:53

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: us-east-2.protection.sophos.com to https://linkprotect.cudasvc.com/url?a=https%3a%2f%2f0obt.menus-unlimited.com%2fu8w5v&c=e,1,3lf1gcid2dw9i2-ujd0cxlbbtuni5vblxebasn-1fedck650bjsmuqo_gaht-nrwmluns8omnyufier03e_z2gbacmzlhrje8ejcq1zaoshs&typo=1

Source: Joe Sandbox View	IP Address: 162.19.58.160 162.19.58.160
Source: Joe Sandbox View	IP Address: 162.19.58.161 162.19.58.161
Source: Joe Sandbox View	IP Address: 151.101.193.229 151.101.193.229
Source: Joe Sandbox View	IP Address: 104.18.94.41 104.18.94.41

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.8.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.8.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.8.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.8.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.8.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.8.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.8.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.8.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.8.90
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /?d=cudasvc.com&u=aHR0cHM6Ly9saW5rcHJvdGVjdC5jdWRhc3ZjLmNvbS91cmw_YT1odHRwcyUzYSUyZiUyZjBvQlQubWVudXMtdW5saW1pdGVkLmNvbSUyZnU4dzV2JmM9RSwxLDNMZjFnY0lEMmR3OUkyLXVKRDBDeGxiYnR1bkk1dkJsWGVCYXNuLTFGZWRjazY1MEJKU211cW9fR2FoVC1ucldtTHVOUzhvbW5ZdUZJZXIwM0VfWjJnQmFjTVpMaFJKZThFSmNxMVphT3NocyZ0eXBvPTE=&i=NWZhMzIyNDYxN2RkOWQwZTA5ZGFiYTQ4&t=bW5wRlRmNkZQMDh0c012RnRzQnR6eVRLWXRVSFFORXhvTG1DZ2FvVWNvaz0 HTTP/1.1Host: us-east-2.protection.sophos.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /url?a=https%3a%2f%2f0oBT.menus-unlimited.com%2fu8w5v&c=E,1,3Lf1gcID2dw9I2-uJD0CxlbbtunI5vBlXeBasn-1Fedck650BJSmuqo_GahT-nrWmLuNS8omnYuFIer03E_Z2gBacMZLhRJe8EJcq1ZaOshs&typo=1 HTTP/1.1Host: linkprotect.cudasvc.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /u8w5v HTTP/1.1Host: 0obt.menus-unlimited.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ttT+bP95t2rbeus&MD=Ynh5PAfb HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://0obt.menus-unlimited.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bPWvfrC/microlog0.png HTTP/1.1Host: i.ibb.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://0obt.menus-unlimited.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/ec4b873d446c/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://0obt.menus-unlimited.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bPWvfrC/microlog0.png HTTP/1.1Host: i.ibb.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/ec4b873d446c/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /settings.txt?a=1726849134833 HTTP/1.1Host: 0obt.menus-unlimited.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://0obt.menus-unlimited.com/u8w5vAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=l2s8v5fbb3fguea087d16fnfgq
Source: global traffic	HTTP traffic detected: GET /rep_emails.txt?a=1726849134833 HTTP/1.1Host: 0obt.menus-unlimited.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://0obt.menus-unlimited.com/u8w5vAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=l2s8v5fbb3fguea087d16fnfgq
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: 0obt.menus-unlimited.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://0obt.menus-unlimited.com/u8w5vAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=l2s8v5fbb3fguea087d16fnfgq
Source: global traffic	HTTP traffic detected: GET /settings.txt?a=1726849134833 HTTP/1.1Host: 0obt.menus-unlimited.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=l2s8v5fbb3fguea087d16fnfgq
Source: global traffic	HTTP traffic detected: GET /rep_emails.txt?a=1726849134833 HTTP/1.1Host: 0obt.menus-unlimited.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=l2s8v5fbb3fguea087d16fnfgq
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: 0obt.menus-unlimited.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=l2s8v5fbb3fguea087d16fnfgq
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/appbackgrounds/49-small_e58aafc980614a9cd7796bea7b5ea8f0.jpg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://0obt.menus-unlimited.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/appbackgrounds/49-small_e58aafc980614a9cd7796bea7b5ea8f0.jpg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/typiu/0x4AAAAAAAkF7znPRls4zQt2/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://0obt.menus-unlimited.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8c632282bca10ca8&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/typiu/0x4AAAAAAAkF7znPRls4zQt2/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/typiu/0x4AAAAAAAkF7znPRls4zQt2/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8c632282bca10ca8&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1871845430:1726845417:FbKGXq3vHvORmlg6oISBtBOotzZym52Uy_BS_Q--sjQ/8c632282bca10ca8/c509a54a750866d HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8c632282bca10ca8/1726849143907/LtWr2GXQoUD_DTw HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/typiu/0x4AAAAAAAkF7znPRls4zQt2/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8c632282bca10ca8/1726849143907/LtWr2GXQoUD_DTw HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/8c632282bca10ca8/1726849143911/fa4092e998a320fdfbc9dc194cb0e3e8e301a943526de5a57d8d95406e33352c/r84pGs9MwbQPcgS HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/typiu/0x4AAAAAAAkF7znPRls4zQt2/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1871845430:1726845417:FbKGXq3vHvORmlg6oISBtBOotzZym52Uy_BS_Q--sjQ/8c632282bca10ca8/c509a54a750866d HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1871845430:1726845417:FbKGXq3vHvORmlg6oISBtBOotzZym52Uy_BS_Q--sjQ/8c632282bca10ca8/c509a54a750866d HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /visit_variables.txt?a=1726849134833 HTTP/1.1Host: 0obt.menus-unlimited.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://0obt.menus-unlimited.com/u8w5vAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=l2s8v5fbb3fguea087d16fnfgq
Source: global traffic	HTTP traffic detected: GET /visit_variables.txt?a=1726849134833 HTTP/1.1Host: 0obt.menus-unlimited.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=l2s8v5fbb3fguea087d16fnfgq
Source: global traffic	HTTP traffic detected: GET /urls.json HTTP/1.1Host: 0obt.menus-unlimited.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://0obt.menus-unlimited.com/u8w5vAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=l2s8v5fbb3fguea087d16fnfgq
Source: global traffic	HTTP traffic detected: GET /5a117d63-e078-4d65-be0b-fa7ab24a9f8f/sdelsman@gklaw.com HTTP/1.1Host: agence-immobiliere-luberon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://0obt.menus-unlimited.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /urls.json HTTP/1.1Host: 0obt.menus-unlimited.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=l2s8v5fbb3fguea087d16fnfgq
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://agence-immobiliere-luberon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/3.6.1/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://agence-immobiliere-luberon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/ec4b873d446c/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://agence-immobiliere-luberon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/3.6.1/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://agence-immobiliere-luberon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/lxqex/0x4AAAAAAAi2xvnxdhQA0wSe/light/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://agence-immobiliere-luberon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8c6322f16b9f8cee&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/lxqex/0x4AAAAAAAi2xvnxdhQA0wSe/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/lxqex/0x4AAAAAAAi2xvnxdhQA0wSe/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8c6322f16b9f8cee&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/51106294:1726845398:lDn3rFZaxb8SDi9NY_9Tplq1Ta4fvDRfDN7VND7NlSQ/8c6322f16b9f8cee/b67c72f3da32a39 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8c6322f16b9f8cee/1726849161806/LGyozanY0pFJP_- HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/lxqex/0x4AAAAAAAi2xvnxdhQA0wSe/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8c6322f16b9f8cee/1726849161806/LGyozanY0pFJP_- HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/8c6322f16b9f8cee/1726849161809/7369bf3d7a0677429a1b00552cb62054f9e1999185fe1eefb2126a323c8ad68a/u709jjYJ0JdsaBt HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/lxqex/0x4AAAAAAAi2xvnxdhQA0wSe/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/51106294:1726845398:lDn3rFZaxb8SDi9NY_9Tplq1Ta4fvDRfDN7VND7NlSQ/8c6322f16b9f8cee/b67c72f3da32a39 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/51106294:1726845398:lDn3rFZaxb8SDi9NY_9Tplq1Ta4fvDRfDN7VND7NlSQ/8c6322f16b9f8cee/b67c72f3da32a39 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5a117d63-e078-4d65-be0b-fa7ab24a9f8f/admin/lifeattach HTTP/1.1Host: agence-immobiliere-luberon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://agence-immobiliere-luberon.com/5a117d63-e078-4d65-be0b-fa7ab24a9f8f/CIUIhu3Il%5Ej8d~hCXGBXQyj488CBOiZ1sBu85VOVjdrfR0wHePNTggGPy9a3-=Zwh5%5E7n9pEiH6Zv30Ct5r9X-BK3djTxG2Fz5OBAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5a117d63-e078-4d65-be0b-fa7ab24a9f8f/uysfdiv0928e374.php HTTP/1.1Host: agence-immobiliere-luberon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ttT+bP95t2rbeus&MD=Ynh5PAfb HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /npm/axios/dist/axios.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://agence-immobiliere-luberon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://agence-immobiliere-luberon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://agence-immobiliere-luberon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://agence-immobiliere-luberon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://agence-immobiliere-luberon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://agence-immobiliere-luberon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://agence-immobiliere-luberon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://agence-immobiliere-luberon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5a117d63-e078-4d65-be0b-fa7ab24a9f8f/admin/lifeattach HTTP/1.1Host: agence-immobiliere-luberon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qj4ss5qbim4qnl4scfog2a54j2
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dbd5a2dd-rwon5nawlkmsrpyqm6e9pfempz3zcctnzk8qulr-p2o/logintenantbranding/0/bannerlogo?ts=636705652316533836 HTTP/1.1Host: aadcdn.msauthimages.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://agence-immobiliere-luberon.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5a117d63-e078-4d65-be0b-fa7ab24a9f8f/uryfdsk2o3294djfshg.php HTTP/1.1Host: agence-immobiliere-luberon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qj4ss5qbim4qnl4scfog2a54j2
Source: global traffic	HTTP traffic detected: GET /dbd5a2dd-rwon5nawlkmsrpyqm6e9pfempz3zcctnzk8qulr-p2o/logintenantbranding/0/bannerlogo?ts=636705652316533836 HTTP/1.1Host: aadcdn.msauthimages.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: us-east-2.protection.sophos.com
Source: global traffic	DNS traffic detected: DNS query: linkprotect.cudasvc.com
Source: global traffic	DNS traffic detected: DNS query: 0obt.menus-unlimited.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: i.ibb.co
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: agence-immobiliere-luberon.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: ok4static.oktacdn.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msauthimages.net
Source: global traffic	DNS traffic detected: DNS query: passwordreset.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: ajax.aspnetcdn.com

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1871845430:1726845417:FbKGXq3vHvORmlg6oISBtBOotzZym52Uy_BS_Q--sjQ/8c632282bca10ca8/c509a54a750866d HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 2818sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: c509a54a750866dsec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/typiu/0x4AAAAAAAkF7znPRls4zQt2/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 20 Sep 2024 16:19:05 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: k+2RQ7PFlFbex4L1mQwQV3yRKOxXDVtlDLU=$muXTn+LnMgcKmtClServer: cloudflareCF-RAY: 8c6322957add196c-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 20 Sep 2024 16:19:08 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: d1j6sk8zHT3np3oqqM4VzJl1ExDrn+LZUiI=$gVlfW6hQj5/u8MBIServer: cloudflareCF-RAY: 8c6322a82bdf0f6c-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 20 Sep 2024 16:19:11 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: auwZzKrsimB60znGWl/cknfj6lresShfyMk=$4kebiqq1W63y9z/Icache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8c6322bfcc458c8a-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 20 Sep 2024 16:19:22 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: aCWpWyKEhBCSRLzvkrysrJOzq/I7WDBTZIs=$6GKwWi0CFb5AlhfNServer: cloudflareCF-RAY: 8c632302fb09c40c-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 20 Sep 2024 16:19:25 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: GkLV7+zTbZIUaN5eKQDLkDee/3DkZ1ZjCe0=$47yAAr6r8lT4JUDoServer: cloudflareCF-RAY: 8c632316ef2641e3-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 20 Sep 2024 16:19:30 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: 0+TtAFCIMmSRVVxC882NKIn3Pvd0yZN569Y=$isAlEnVKa3/YaQL6cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8c6323352c934276-EWR

Source: chromecache_105.11.dr	String found in binary or memory: https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Source: chromecache_170.11.dr	String found in binary or memory: https://account.live.com/resetpassword.aspx
Source: chromecache_105.11.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jquery/3.6.1/jquery.min.js
Source: chromecache_105.11.dr	String found in binary or memory: https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
Source: chromecache_183.11.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_183.11.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_112.11.dr	String found in binary or memory: https://github.com/twbs/icons/blob/main/LICENSE)
Source: chromecache_112.11.dr	String found in binary or memory: https://icons.getbootstrap.com/)

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56623 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56669 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56646 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56617 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56606
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56607
Source: unknown	Network traffic detected: HTTP traffic on port 56634 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56608
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56609
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56602
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56603
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56604
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56605
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56601
Source: unknown	Network traffic detected: HTTP traffic on port 56628 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56652 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56595 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 56635 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56612 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56617
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56618
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56619
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56613
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56614
Source: unknown	Network traffic detected: HTTP traffic on port 56606 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56615
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56616
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56610
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56611
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56612
Source: unknown	Network traffic detected: HTTP traffic on port 56651 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 56629 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 56594 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56628
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56629
Source: unknown	Network traffic detected: HTTP traffic on port 56640 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56657 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56624
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56625
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56626
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56627
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56620
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56621
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56622
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56623
Source: unknown	Network traffic detected: HTTP traffic on port 56601 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56630
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 56668 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56598
Source: unknown	Network traffic detected: HTTP traffic on port 56653 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56630 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56665 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56659 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56613 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56607 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56642 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56624 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56618 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56658 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56664 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56641 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56602 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56625 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56619 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56670 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56598 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56636 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56647 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56593 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56614 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56608 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56637 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56620 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56592 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56655 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56603 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56649 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56666 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56631 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56654 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56648 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56621 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56632 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56615 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56609 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56594
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56595
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56596
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56597
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56626 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56591
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56592
Source: unknown	Network traffic detected: HTTP traffic on port 56643 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56593
Source: unknown	Network traffic detected: HTTP traffic on port 56597 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56610 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56639
Source: unknown	Network traffic detected: HTTP traffic on port 56633 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56656 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56662 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56635
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56636
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56637
Source: unknown	Network traffic detected: HTTP traffic on port 56604 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56638
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56631
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56632
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56633
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56634
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56640
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56641
Source: unknown	Network traffic detected: HTTP traffic on port 56627 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56596 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56638 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56646
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56647
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56648
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56649
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56642
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56643
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56644
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56645
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56650
Source: unknown	Network traffic detected: HTTP traffic on port 56673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56651
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56652
Source: unknown	Network traffic detected: HTTP traffic on port 56645 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56591 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56639 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56657
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56658
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56659
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56653
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56654
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56655
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56656
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56661
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56662
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56644 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56667 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56611 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56661 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56605 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56668
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56669
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56664
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56665
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56666
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56667
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56671
Source: unknown	Network traffic detected: HTTP traffic on port 56622 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56673
Source: unknown	Network traffic detected: HTTP traffic on port 56650 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56670
Source: unknown	Network traffic detected: HTTP traffic on port 56616 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56721 -> 443

Source: unknown	HTTPS traffic detected: 23.211.8.90:443 -> 192.168.2.16:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:56649 version: TLS 1.2

Source: classification engine

Classification label: mal72.phis.winPNG@20/150@62/20

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://us-east-2.protection.sophos.com/?d=cudasvc.com&u=aHR0cHM6Ly9saW5rcHJvdGVjdC5jdWRhc3ZjLmNvbS91cmw_YT1odHRwcyUzYSUyZiUyZjBvQlQubWVudXMtdW5saW1pdGVkLmNvbSUyZnU4dzV2JmM9RSwxLDNMZjFnY0lEMmR3OUkyLXVKRDBDeGxiYnR1bkk1dkJsWGVCYXNuLTFGZWRjazY1MEJKU211cW9fR2FoVC1ucldtTHVOUzhvbW5ZdUZJZXIwM0VfWjJnQmFjTVpMaFJKZThFSmNxMVphT3NocyZ0eXBvPTE=&i=NWZhMzIyNDYxN2RkOWQwZTA5ZGFiYTQ4&t=bW5wRlRmNkZQMDh0c012RnRzQnR6eVRLWXRVSFFORXhvTG1DZ2FvVWNvaz0#/CMjrbGm/c2RlbHNtYW5AZ2tsYXcuY29t
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2184 --field-trial-handle=1952,i,1790333140127612858,1956491159581477358,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2184 --field-trial-handle=1952,i,1790333140127612858,1956491159581477358,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: Google Drive.lnk.10.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.10.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.10.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.10.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.10.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.10.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk			Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://getbootstrap.com/)	0%	URL Reputation	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8c6322f16b9f8cee/1726849161806/LGyozanY0pFJP_-	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/turnstile/v0/g/ec4b873d446c/api.js	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/blob/main/LICENSE)	0%	Avira URL Cloud	safe
https://cdnjs.cloudflare.com/ajax/libs/jquery/3.6.1/jquery.min.js	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8c632282bca10ca8/1726849143911/fa4092e998a320fdfbc9dc194cb0e3e8e301a943526de5a57d8d95406e33352c/r84pGs9MwbQPcgS	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8c632282bca10ca8/1726849143907/LtWr2GXQoUD_DTw	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1871845430:1726845417:FbKGXq3vHvORmlg6oISBtBOotzZym52Uy_BS_Q--sjQ/8c632282bca10ca8/c509a54a750866d	0%	Avira URL Cloud	safe
https://ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7	0%	Avira URL Cloud	safe
https://aadcdn.msauthimages.net/dbd5a2dd-rwon5nawlkmsrpyqm6e9pfempz3zcctnzk8qulr-p2o/logintenantbranding/0/bannerlogo?ts=636705652316533836	0%	Avira URL Cloud	safe
https://ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css	0%	Avira URL Cloud	safe
https://github.com/twbs/icons/blob/main/LICENSE)	0%	Avira URL Cloud	safe
https://i.ibb.co/bPWvfrC/microlog0.png	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	0%	Avira URL Cloud	safe
https://agence-immobiliere-luberon.com/5a117d63-e078-4d65-be0b-fa7ab24a9f8f/uysfdiv0928e374.php	0%	Avira URL Cloud	safe
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	0%	Avira URL Cloud	safe
https://agence-immobiliere-luberon.com/5a117d63-e078-4d65-be0b-fa7ab24a9f8f/admin/lifeattach	0%	Avira URL Cloud	safe
https://0obt.menus-unlimited.com/rep_emails.txt?a=1726849134833	0%	Avira URL Cloud	safe
https://agence-immobiliere-luberon.com/5a117d63-e078-4d65-be0b-fa7ab24a9f8f/sdelsman@gklaw.com	0%	Avira URL Cloud	safe
https://0obt.menus-unlimited.com/visit_variables.txt?a=1726849134833	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8c6322f16b9f8cee&lang=auto	0%	Avira URL Cloud	safe
https://agence-immobiliere-luberon.com/5a117d63-e078-4d65-be0b-fa7ab24a9f8f/uryfdsk2o3294djfshg.php	0%	Avira URL Cloud	safe
https://ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css	0%	Avira URL Cloud	safe
https://cdn.jsdelivr.net/npm/axios/dist/axios.min.js	0%	Avira URL Cloud	safe
https://0obt.menus-unlimited.com/u8w5v	0%	Avira URL Cloud	safe
https://0obt.menus-unlimited.com/favicon.ico	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8c632282bca10ca8&lang=auto	0%	Avira URL Cloud	safe
https://us-east-2.protection.sophos.com/?d=cudasvc.com&u=aHR0cHM6Ly9saW5rcHJvdGVjdC5jdWRhc3ZjLmNvbS91cmw_YT1odHRwcyUzYSUyZiUyZjBvQlQubWVudXMtdW5saW1pdGVkLmNvbSUyZnU4dzV2JmM9RSwxLDNMZjFnY0lEMmR3OUkyLXVKRDBDeGxiYnR1bkk1dkJsWGVCYXNuLTFGZWRjazY1MEJKU211cW9fR2FoVC1ucldtTHVOUzhvbW5ZdUZJZXIwM0VfWjJnQmFjTVpMaFJKZThFSmNxMVphT3NocyZ0eXBvPTE=&i=NWZhMzIyNDYxN2RkOWQwZTA5ZGFiYTQ4&t=bW5wRlRmNkZQMDh0c012RnRzQnR6eVRLWXRVSFFORXhvTG1DZ2FvVWNvaz0	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	0%	Avira URL Cloud	safe
https://0obt.menus-unlimited.com/urls.json	0%	Avira URL Cloud	safe
https://0obt.menus-unlimited.com/settings.txt?a=1726849134833	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg	0%	Avira URL Cloud	safe
https://icons.getbootstrap.com/)	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/lxqex/0x4AAAAAAAi2xvnxdhQA0wSe/light/fbE/normal/auto/	0%	Avira URL Cloud	safe
https://linkprotect.cudasvc.com/url?a=https%3a%2f%2f0oBT.menus-unlimited.com%2fu8w5v&c=E,1,3Lf1gcID2dw9I2-uJD0CxlbbtunI5vBlXeBasn-1Fedck650BJSmuqo_GahT-nrWmLuNS8omnYuFIer03E_Z2gBacMZLhRJe8EJcq1ZaOshs&typo=1	0%	Avira URL Cloud	safe
https://account.live.com/resetpassword.aspx	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/51106294:1726845398:lDn3rFZaxb8SDi9NY_9Tplq1Ta4fvDRfDN7VND7NlSQ/8c6322f16b9f8cee/b67c72f3da32a39	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/typiu/0x4AAAAAAAkF7znPRls4zQt2/auto/fbE/normal/auto/	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8c6322f16b9f8cee/1726849161809/7369bf3d7a0677429a1b00552cb62054f9e1999185fe1eefb2126a323c8ad68a/u709jjYJ0JdsaBt	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
jsdelivr.map.fastly.net	151.101.193.229	true	false		unknown
d1nhsro6ypf0az.cloudfront.net	143.204.215.124	true	false		unknown
a.nel.cloudflare.com	35.190.80.1	true	false		unknown
linkprotect.cudasvc.com	3.68.148.35	true	false		unknown
i.ibb.co	162.19.58.161	true	false		unknown
cdnjs.cloudflare.com	104.17.25.14	true	false		unknown
sni1gl.wpc.upsiloncdn.net	152.199.21.175	true	false		unknown
challenges.cloudflare.com	104.18.95.41	true	false		unknown
agence-immobiliere-luberon.com	188.114.97.3	true	true		unknown
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false		unknown
www.google.com	142.250.184.228	true	false		unknown
0obt.menus-unlimited.com	188.114.97.3	true	false		unknown
d19d360lklgih4.cloudfront.net	18.165.122.119	true	false		unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false		unknown
us-east-2.protection.sophos.com	unknown	unknown	false		unknown
cdn.jsdelivr.net	unknown	unknown	false		unknown
aadcdn.msftauth.net	unknown	unknown	false		unknown
ajax.aspnetcdn.com	unknown	unknown	false		unknown
aadcdn.msauthimages.net	unknown	unknown	false		unknown
passwordreset.microsoftonline.com	unknown	unknown	false		unknown
ok4static.oktacdn.com	unknown	unknown	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/jquery/3.6.1/jquery.min.js	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/turnstile/v0/g/ec4b873d446c/api.js	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8c6322f16b9f8cee/1726849161806/LGyozanY0pFJP_-	false	Avira URL Cloud: safe	unknown
https://aadcdn.msauthimages.net/dbd5a2dd-rwon5nawlkmsrpyqm6e9pfempz3zcctnzk8qulr-p2o/logintenantbranding/0/bannerlogo?ts=636705652316533836	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8c632282bca10ca8/1726849143911/fa4092e998a320fdfbc9dc194cb0e3e8e301a943526de5a57d8d95406e33352c/r84pGs9MwbQPcgS	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8c632282bca10ca8/1726849143907/LtWr2GXQoUD_DTw	false	Avira URL Cloud: safe	unknown
https://ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1871845430:1726845417:FbKGXq3vHvORmlg6oISBtBOotzZym52Uy_BS_Q--sjQ/8c632282bca10ca8/c509a54a750866d	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	false	Avira URL Cloud: safe	unknown
https://i.ibb.co/bPWvfrC/microlog0.png	false	Avira URL Cloud: safe	unknown
https://agence-immobiliere-luberon.com/5a117d63-e078-4d65-be0b-fa7ab24a9f8f/admin/lifeattach	true	Avira URL Cloud: safe	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false	Avira URL Cloud: safe	unknown
https://agence-immobiliere-luberon.com/5a117d63-e078-4d65-be0b-fa7ab24a9f8f/uysfdiv0928e374.php	true	Avira URL Cloud: safe	unknown
https://0obt.menus-unlimited.com/rep_emails.txt?a=1726849134833	false	Avira URL Cloud: safe	unknown
https://agence-immobiliere-luberon.com/5a117d63-e078-4d65-be0b-fa7ab24a9f8f/sdelsman@gklaw.com	true	Avira URL Cloud: safe	unknown
https://agence-immobiliere-luberon.com/5a117d63-e078-4d65-be0b-fa7ab24a9f8f/CIUIhu3Il%5Ej8d~hCXGBXQyj488CBOiZ1sBu85VOVjdrfR0wHePNTggGPy9a3-=Zwh5%5E7n9pEiH6Zv30Ct5r9X-BK3djTxG2Fz5OB	true		unknown
https://0obt.menus-unlimited.com/visit_variables.txt?a=1726849134833	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8c6322f16b9f8cee&lang=auto	false	Avira URL Cloud: safe	unknown
https://ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css	false	Avira URL Cloud: safe	unknown
https://agence-immobiliere-luberon.com/5a117d63-e078-4d65-be0b-fa7ab24a9f8f/uryfdsk2o3294djfshg.php	true	Avira URL Cloud: safe	unknown
https://0obt.menus-unlimited.com/u8w5v	false	Avira URL Cloud: safe	unknown
https://cdn.jsdelivr.net/npm/axios/dist/axios.min.js	false	Avira URL Cloud: safe	unknown
https://0obt.menus-unlimited.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8c632282bca10ca8&lang=auto	false	Avira URL Cloud: safe	unknown
https://us-east-2.protection.sophos.com/?d=cudasvc.com&u=aHR0cHM6Ly9saW5rcHJvdGVjdC5jdWRhc3ZjLmNvbS91cmw_YT1odHRwcyUzYSUyZiUyZjBvQlQubWVudXMtdW5saW1pdGVkLmNvbSUyZnU4dzV2JmM9RSwxLDNMZjFnY0lEMmR3OUkyLXVKRDBDeGxiYnR1bkk1dkJsWGVCYXNuLTFGZWRjazY1MEJKU211cW9fR2FoVC1ucldtTHVOUzhvbW5ZdUZJZXIwM0VfWjJnQmFjTVpMaFJKZThFSmNxMVphT3NocyZ0eXBvPTE=&i=NWZhMzIyNDYxN2RkOWQwZTA5ZGFiYTQ4&t=bW5wRlRmNkZQMDh0c012RnRzQnR6eVRLWXRVSFFORXhvTG1DZ2FvVWNvaz0	false	Avira URL Cloud: safe	unknown
https://0obt.menus-unlimited.com/urls.json	false	Avira URL Cloud: safe	unknown
https://0obt.menus-unlimited.com/settings.txt?a=1726849134833	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg	false	Avira URL Cloud: safe	unknown
https://linkprotect.cudasvc.com/url?a=https%3a%2f%2f0oBT.menus-unlimited.com%2fu8w5v&c=E,1,3Lf1gcID2dw9I2-uJD0CxlbbtunI5vBlXeBasn-1Fedck650BJSmuqo_GahT-nrWmLuNS8omnYuFIer03E_Z2gBacMZLhRJe8EJcq1ZaOshs&typo=1	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/lxqex/0x4AAAAAAAi2xvnxdhQA0wSe/light/fbE/normal/auto/	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8c6322f16b9f8cee/1726849161809/7369bf3d7a0677429a1b00552cb62054f9e1999185fe1eefb2126a323c8ad68a/u709jjYJ0JdsaBt	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/51106294:1726845398:lDn3rFZaxb8SDi9NY_9Tplq1Ta4fvDRfDN7VND7NlSQ/8c6322f16b9f8cee/b67c72f3da32a39	false	Avira URL Cloud: safe	unknown
https://0obt.menus-unlimited.com/u8w5v#/CMjrbGm/c2RlbHNtYW5AZ2tsYXcuY29t	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/typiu/0x4AAAAAAAkF7znPRls4zQt2/auto/fbE/normal/auto/	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/twbs/bootstrap/blob/main/LICENSE)	chromecache_183.11.dr	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/icons/blob/main/LICENSE)	chromecache_112.11.dr	false	Avira URL Cloud: safe	unknown
https://getbootstrap.com/)	chromecache_183.11.dr	false	URL Reputation: safe	unknown
https://icons.getbootstrap.com/)	chromecache_112.11.dr	false	Avira URL Cloud: safe	unknown
https://account.live.com/resetpassword.aspx	chromecache_170.11.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
162.19.58.160	unknown	United States		209	CENTURYLINK-US-LEGACY-QWESTUS	false
162.19.58.161	i.ibb.co	United States		209	CENTURYLINK-US-LEGACY-QWESTUS	false
151.101.193.229	jsdelivr.map.fastly.net	United States		54113	FASTLYUS	false
104.18.94.41	unknown	United States		13335	CLOUDFLARENETUS	false
3.68.148.35	linkprotect.cudasvc.com	United States		16509	AMAZON-02US	false
13.107.246.60	s-part-0032.t-0009.t-msedge.net	United States		8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
143.204.215.124	d1nhsro6ypf0az.cloudfront.net	United States		16509	AMAZON-02US	false
35.190.80.1	a.nel.cloudflare.com	United States		15169	GOOGLEUS	false
142.250.184.228	www.google.com	United States		15169	GOOGLEUS	false
104.17.24.14	unknown	United States		13335	CLOUDFLARENETUS	false
13.33.187.120	unknown	United States		16509	AMAZON-02US	false
104.18.95.41	challenges.cloudflare.com	United States		13335	CLOUDFLARENETUS	false
18.165.122.119	d19d360lklgih4.cloudfront.net	United States		3	MIT-GATEWAYSUS	false
239.255.255.250	unknown	Reserved		unknown	unknown	false
188.114.97.3	agence-immobiliere-luberon.com	European Union		13335	CLOUDFLARENETUS	true
142.250.181.228	unknown	United States		15169	GOOGLEUS	false
188.114.96.3	unknown	European Union		13335	CLOUDFLARENETUS	false
152.199.21.175	sni1gl.wpc.upsiloncdn.net	United States		15133	EDGECASTUS	false
104.17.25.14	cdnjs.cloudflare.com	United States		13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1514605
Start date and time:	2024-09-20 18:18:07 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 59s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	17
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	2024-09-20 09_ Sandbox .png
Detection:	MAL
Classification:	mal72.phis.winPNG@20/150@62/20
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, RuntimeBroker.exe, WMIADAP.exe, Microsoft.Photos.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.16.142, 108.177.15.84, 142.250.185.67, 34.104.35.123, 142.250.181.234, 216.58.206.74, 104.18.187.31, 104.18.186.31, 142.250.186.42, 142.250.186.170, 142.250.185.74, 142.250.185.106, 142.250.184.234, 142.250.185.202, 172.217.23.106, 142.250.185.170, 142.250.185.138, 142.250.186.138, 216.58.206.42, 172.217.16.138, 142.250.185.234, 142.250.184.202, 142.250.185.227, 40.126.32.129, 40.126.32.131, 40.126.32.6, 40.126.32.66, 152.199.19.160, 20.190.177.0, 142.250.186.74, 172.217.18.10, 172.217.18.106, 142.250.74.202, 142.250.186.106, 172.217.16.202, 172.217.16.206
Excluded domains from analysis (whitelisted): cdn.jsdelivr.net.cdn.cloudflare.net, slscr.update.microsoft.com, na.privatelink.msidentity.com, clientservices.googleapis.com, dns.msftncsi.com, clients2.google.com, mscomajax.vo.msecnd.net, aadcdn.azureedge.net, aadcdn.ec.azureedge.net, update.googleapis.com, client.ppe.repmap.microsoft.com, www.ppev6tm.aadg.trafficmanager.net, clients1.google.com, www.ppev6tm.aadg.akadns.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, prdf.aadg.msidentity.com, ajax.googleapis.com, aadcdnoriginwus2.azureedge.net, cs22.wpc.v0cdn.net, www.tm.f.prd.aadg.akadns.net, aadcdn.msauth.net, passwordreset.mso.msidentity.com, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, edgedl.me.gvt1.com, www.tm.f.prd.aadg.trafficmanager.net, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com, ppe.v6.aadg.privatelink.msidentity.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: 2024-09-20 09_ Sandbox .png

Simulations

Behavior and APIs

⊘No simulations

QR Codes

Source

URL

Image Sample

https://us-east-2.protection.sophos.com?d=cudasvc.com&u=aHR0cHM6Ly9saW5rcHJvdGVjdC5jdWRhc3ZjLmNvbS91cmw_YT1odHRwcyUzYSUyZiUyZjBvQlQubWVudXMtdW5saW1pdGVkLmNvbSUyZnU4dzV2JmM9RSwxLDNMZjFnY0lEMmR3OUkyLXVKRDBDeGxiYnR1bkk1dkJsWGVCYXNuLTFGZWRjazY1MEJKU211cW9fR2FoVC1ucldtTHVOUzhvbW5ZdUZJZXIwM0VfWjJnQmFjTVpMaFJKZThFSmNxMVphT3NocyZ0eXBvPTE=&i=NWZhMzIyNDYxN2RkOWQwZTA5ZGFiYTQ4&t=bW5wRlRmNkZQMDh0c012RnRzQnR6eVRLWXRVSFFORXhvTG1DZ2FvVWNvaz0#/CMjrbGm/c2RlbHNtYW5AZ2tsYXcuY29t

Image Sample

https://us-east-2.protection.sophos.com?d=cudasvc.com&u=aHR0cHM6Ly9saW5rcHJvdGVjdC5jdWRhc3ZjLmNvbS91cmw_YT1odHRwcyUzYSUyZiUyZjBvQlQubWVudXMtdW5saW1pdGVkLmNvbSUyZnU4dzV2JmM9RSwxLDNMZjFnY0lEMmR3OUkyLXVKRDBDeGxiYnR1bkk1dkJsWGVCYXNuLTFGZWRjazY1MEJKU211cW9fR2FoVC1ucldtTHVOUzhvbW5ZdUZJZXIwM0VfWjJnQmFjTVpMaFJKZThFSmNxMVphT3NocyZ0eXBvPTE=&i=NWZhMzIyNDYxN2RkOWQwZTA5ZGFiYTQ4&t=bW5wRlRmNkZQMDh0c012RnRzQnR6eVRLWXRVSFFORXhvTG1DZ2FvVWNvaz0#/CMjrbGm/c2RlbHNtYW5AZ2tsYXcuY29t

LLM Input / Output

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
162.19.58.160	https://folders-sky-69e4.keshonulrich.workers.dev/	Get hash	malicious	HTMLPhisher	Browse
	Hb_Xe-000876765.exe	Get hash	malicious	Unknown	Browse
	Wire-transaction073921.exe	Get hash	malicious	SilverRat	Browse
	http://mudassarqazihere.github.io/Neflix-Clone	Get hash	malicious	HTMLPhisher	Browse
	https://docs-trezor-cdn.github.io/	Get hash	malicious	Unknown	Browse
	zFONuE0fId.exe	Get hash	malicious	Quasar, AsyncRAT, DCRat, Orcus, XWorm	Browse
	http://cf243467dfad79c95a6294cf57a2de2d229cfd85a.pages.dev/	Get hash	malicious	Unknown	Browse
	https://sassy-magnificent-antimatter.glitch.me/public/nfcu703553.HTML	Get hash	malicious	HTMLPhisher	Browse
	https://phase-enthusiastic-wallaby.glitch.me/public/RRENFCONL0.HTML	Get hash	malicious	HTMLPhisher	Browse
	https://v1.bcit.pro/7349457877/Instagram.com.html	Get hash	malicious	Unknown	Browse
162.19.58.161	PO-Xe038498884.exe	Get hash	malicious	Unknown	Browse
	https://elitefortnit.github.io/	Get hash	malicious	HTMLPhisher	Browse
	https://shore-alkaline-canvas.glitch.me/public/nfcu703553.HTML	Get hash	malicious	HTMLPhisher	Browse
	Documents_27-08.html	Get hash	malicious	HTMLPhisher	Browse
	https://bgmi-claimxrewards.com/god/126/	Get hash	malicious	HTMLPhisher	Browse
	https://page-start-trezor.github.io/	Get hash	malicious	Unknown	Browse
	https://rogue-orange-foe.glitch.me/public/USANFCU.html	Get hash	malicious	HTMLPhisher	Browse
	file.exe	Get hash	malicious	PureLog Stealer, RedLine, zgRAT	Browse
	http://crons-efly-789b.crylpvhaolaeoy.workers.dev/favicon.ico	Get hash	malicious	HTMLPhisher	Browse
	https://admin-154.pages.dev/privacy/your-privacy-choices	Get hash	malicious	HTMLPhisher	Browse
151.101.193.229	https://computing-customer-6850.my.salesforce-sites.com/support	Get hash	malicious	Unknown	Browse
	https://exjr5g5nif.fessional.shop/?email=anRvcmtlbHNvbkBjY2ZpLmNvbQ==	Get hash	malicious	EvilProxy, HTMLPhisher	Browse
	https://ipfs.io/ipfs/QmenEb2HvXciySiZV1MRTDibj4HovGcuZwiAn3T2mfjLpc/#messages.3376597.6521704.ef4861068a@3376597.email.netsuite.com	Get hash	malicious	HTMLPhisher	Browse
	https://nationalrecalls.com/outbound-scheduling-calls	Get hash	malicious	Unknown	Browse
	https://20091578-get-to.pages.dev/robots.txt/	Get hash	malicious	Unknown	Browse
	https://daideogilamtkealmcoosae.pages.dev/robots.txt/	Get hash	malicious	Unknown	Browse
	https://www.cossuel.sn/css/	Get hash	malicious	Unknown	Browse
	https://wetransfer.com/downloads/fba8446149d20edcdcf37d63699c300320240916111055/9e1e4e941b3d5baf51e58ce4afc08bf520240916111122/d348f9?trk=TRN_TDL_01&utm_campaign=TRN_TDL_01&utm_medium=email&utm_source=sendgrid	Get hash	malicious	Unknown	Browse
	https://pancake.swap-web3.xyz/	Get hash	malicious	Unknown	Browse
	https://multichainfix.pages.dev/chunks/patterns	Get hash	malicious	Unknown	Browse
104.18.94.41	https://protect2.fireeye.com/v1/url?k=31323334-501cfaeb-3114f648-454455535732-bcc101dac5b6be0f&q=1&e=963a14f5-6c2b-442b-9703-a0f10dab1f9b&u=https%3A%2F%2Fnetorgft11904377-my.sharepoint.com%2F%3Af%3A%2Fg%2Fpersonal%2Fdeepthi_symnn_com%2FEtl7V4soPhtBs4eBP1m8AckBUPaJNjBC7LSEn0yp9IiKIg%3Fe%3DgeXeiq	Get hash	malicious	HTMLPhisher	Browse
	http://aheroestribute.org/	Get hash	malicious	Unknown	Browse
	https://www.google.com/url?q=pqreinwfoeoyezuyjlesvcezsamgut&rct=pqreinwfoeoyezuyjlesvcezsamgut&sa=t&esrc=pqreinwfoeoyezuyjlesvcezsamgut&source=&cd=pqreinwfoeoyezuyjlesvcezsamgut&cad=pqreinwfoeoyezuyjlesvcezsamgut&ved=pqreinwfoeoyezuyjlesvcezsamgut&uact=&url=amp/eddieslawn.com/p/d/dxcgz/zsamgut/a3lsZS5rbGVpbkBkYWNvdGFoYmFuay5jb20=	Get hash	malicious	Unknown	Browse
	https://mafanikiosacco-my.sharepoint.com/:f:/p/info/EgPH1s54501Ki8NU-gutZLABOsAyZ-dhIPJaM6vWEXJqUQ?e=PJpX12	Get hash	malicious	HTMLPhisher	Browse
	https://doc.wilkka.com/mo/?top=nigelolliff@computershare.com	Get hash	malicious	HTMLPhisher	Browse
	https://doc.wilkka.com/mo/?top=nigelolliff@computershare.co.uk	Get hash	malicious	HTMLPhisher	Browse
	https://doc.wilkka.com/mo/?top=nigelolliff@hsbc.com	Get hash	malicious	HTMLPhisher	Browse
	https://slidebazaar.com	Get hash	malicious	Unknown	Browse
	phish_alert_sp2_2.0.0.0 (43).eml	Get hash	malicious	HTMLPhisher	Browse
	https://linkin.bio/hdd-team	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
d1nhsro6ypf0az.cloudfront.net	https://us-east-2.protection.sophos.com/?d=beehiiv.com&u=aHR0cHM6Ly9saW5rLm1haWwuYmVlaGlpdi5jb20vbHMvY2xpY2s_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&i=NWNiNGNiOGY1NWZlOGIxMTAwZmUxN2Uy&t=YUVvbWN0aDQzMW4yV29uam9nK2tUNmU1dStvM2VicUNJeENiWDR5Zk1nTT0=&h=ddfea45e1610491898abc824d1dabad5&s=AVNPUEhUT0NFTkNSWVBUSVaKXvCVdmaYUeJ4sMCGgh9xhnT0RF3qCfPvI6ciaUbnMg	Get hash	malicious	Unknown	Browse	18.172.153.4
	FW Server Notice Heatherg System Alert Notification..eml	Get hash	malicious	HTMLPhisher	Browse	18.173.166.123
	https://us-east-2.protection.sophos.com?d=screenconnect.com&u=aHR0cHM6Ly9pbnZhdXRoc3NvLnNjcmVlbmNvbm5lY3QuY29tL0Jpbi9TY3JlZW5Db25uZWN0LkNsaWVudFNldHVwLmV4ZT9lPUFjY2VzcyZ5PUd1ZXN0JnQ9cnpqdmxwZ2JHeGFwZXhrSE1YeVpaUnRIbnBGSENDUGRibGZkU05weGpLUG9YdmVhT2omYz12YWwmYz1rckJ2cSZjPTI2NTA3MzY4NSZjPTY2NTE5MDY4JmM9ODIzNjE4MSZjPTIwODg2MCZjPTU0NTczJmM9&i=NWRhOWM5ZTM4ZWZlOTExNjdmZjU4YWFi&t=eXhhUTZYSEJKc0diTjdGR2JjNG4vOHNKbmhvbVdYTG9DVVJ5R0hmZXRvZz0=&h=26351d73de554e6e824184a04530ab82&s=AVNPUEhUT0NFTkNSWVBUSVZoWs2suqsb6VQLf5-mxgvzvRlwgv86PWTETDhsZDMp-_p9OBuNv5LfXkhlC2DvgXLGOMephggYjfKm54n5UCkmoJBDVw_uPG5cQMN8hcye2NoHsLYS_tuUoX350j9eYWo	Get hash	malicious	ScreenConnect Tool	Browse	52.85.247.128
	https://us-east-2.protection.sophos.com/?d=google.com&u=aHR0cHM6Ly9kb2NzLmdvb2dsZS5jb20vcHJlc2VudGF0aW9uL2QvZS8yUEFDWC0xdlRDQjFtTTc2X0UzWTRxYU9yR2hCeU1ua2E2dnBFVFg2Wi1leE9YbmVnaW1jSTdrY0I2RWxxZmZhSmhnSzc3cmplUEdhX0FXa00zQmhGSi9wdWI_c3RhcnQ9ZmFsc2UmbG9vcD1mYWxzZSZkZWxheW1zPTMwMDA=&i=NjE4OTVkMzQ5YjRkNzYwZTM4YzhiNTFl&t=VGdCSldBY0JLaXZkbjZVM2s5L2d0djVuNGlSL29MdjdNaXV3TWRsdUdPOD0=&h=2c4926b4926f4a5a83eba5ef4eff7a86&s=AVNPUEhUT0NFTkNSWVBUSVakzURzgxsw1sA-gW3_GIj4nARFCUV6EwR4SmqfM6fpiA	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	18.173.132.108
	https://us-east-2.protection.sophos.com/?d=getresponse.com&u=aHR0cHM6Ly9hcHAuZ2V0cmVzcG9uc2UuY29tL2NsaWNrLmh0bWw_eD1hNjJiJmxjPWhHV1ZlWSZtYz1KUCZzPUJPOWlFRGUmdT10amo4cyZ6PUV5TFFKd0Ym&i=NjNiMjEzMmQ2YzIzYmUxMmI2MjdlN2Jm&t=UU5mcFBRd3ZEVDFFalovL3NnVE9NNXBBT29aV2lKVEkzSng1RlcxY1AvRT0=&h=2f07214878e0427080b5bd082a28a4a8&s=AVNPUEhUT0NFTkNSWVBUSVYyyG7MgRimdeSZs9PFo0JJzdsqn-bVQtHV9h09dNzEVw	Get hash	malicious	HTMLPhisher	Browse	18.165.183.84
	https://us-east-2.protection.sophos.com?d=canva.com&u=aHR0cHM6Ly93d3cuY2FudmEuY29tL2Rlc2lnbi9EQUZPMVV3djJDdy91WXBBbXFZT055aE1EMlo0VlI1UTZBL3ZpZXc=&i=NWQwMTFlZTYxMjgyMzExNGExOGUwOWFk&t=MjROK1dNTkZLdWh6b1c3NWNGbFBCU3I1YjlHcjNPQm9rcU9DU1I1cDlLbz0=&h=1a302b3c6ab14442b4c4381603181374&s=AVNPUEhUT0NFTkNSWVBUSVZXj7M6bQkN3TFtbHyGqInJT+bSpVAAl915An0VnWfjfQ==	Get hash	malicious	Unknown	Browse	13.225.34.28
	https://us-east-2.protection.sophos.com/?d=mileskimball.com&u=aHR0cHM6Ly9jb250ZW50Lm1pbGVza2ltYmFsbC5jb20vP0ZGanN5UjFTSjk1eG45ZjIxdjlmTXVxU29rZGJFS3NVRiZodHRwOi8vVVpFbGp4clguWU80ZWlzYy5veHlnZW5hbG1hcy5pci8_aWQ9cGV0ZXJAZGVlcC10cmVlLmNvbQ==&i=NWRkZGEyYzNiYmMzMTcxNjYzZTc0ZjM4&t=VTFObFhGNlcxWU1RMDN0dlVmaVZZZkdEaVJOSkRGU3RBUXpwMmc5anZ1ND0=&h=f05993dfec9a48d3bf0e17818ef3f2c9	Get hash	malicious	HTMLPhisher	Browse	143.204.215.51
cdnjs.cloudflare.com	https://www.google.com/url?q=3HOSozuuQiApLjODz3yh&rct=tTPSJ3J3wDFX0jkXyycT&sa=t&esrc=WSECxFgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=XpPkDfJ9mfdQ6lDJVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp/m%C2%ADi%C2%ADt%C2%ADr%C2%ADak%C2%ADar%C2%ADya%C2%ADja%C2%ADpi%C2%ADn%C2%ADd%C2%ADo%C2%AD.%C2%ADc%C2%ADom/rc	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://www.google.com/url?q=pqreinwfoeoyezuyjlesvcezsamgut&rct=pqreinwfoeoyezuyjlesvcezsamgut&sa=t&esrc=pqreinwfoeoyezuyjlesvcezsamgut&source=&cd=pqreinwfoeoyezuyjlesvcezsamgut&cad=pqreinwfoeoyezuyjlesvcezsamgut&ved=pqreinwfoeoyezuyjlesvcezsamgut&uact=&url=amp/eddieslawn.com/p/d/dxcgz/zsamgut/a3lsZS5rbGVpbkBkYWNvdGFoYmFuay5jb20=	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://mafanikiosacco-my.sharepoint.com/:f:/p/info/EgPH1s54501Ki8NU-gutZLABOsAyZ-dhIPJaM6vWEXJqUQ?e=PJpX12	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	Domain_Validation_Protocol_EX-205WQMN.html	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	http://www.laborfinders.com	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://github-scanner.com	Get hash	malicious	CAPTCHA Scam	Browse	104.17.25.14
	https://www.cyderes.com/e3t/Ctc/ON+113/cpWbt04/VX4GLN83B5sSVcgNxQ2Ps5TgVfQRxk5l9kHPN48YK9C5m_5PW50kH_H6lZ3pVW8y4rsC3Frq3xW6yS46B81vNwBW7nKjzX7rlDGLW8Pgnsm2TMWP7W8BGJ3S7v4twJW4Frjvh65WTfKVTz5h-5gQP1gMVRZvWxc0gFW70YCkf5Yr5gxW4_ym5p4kM2HWW8XQLRs2fQKTSW6H8zL35wntpYW2g-lt23Pgmr-W5tJKtK3hc6rbW6CjtL61FP38FN8Dg60fYghyWW9bC6JC3rZqmzW8VJhP664ltDxW1lwcb13ZpPGyW5K_1JQ3TqNPdW95WCPZ4QLNngW273xc864PDv3W5x93bB7dRNxTW92-5jF1RVBWpW8x57FF7P2xcjW7KK8Xj8n_ZZMW7CgpVb566CBBW8bVlWQ11xhLlVs3yDJ8NdTRzW12g9Fn559wR0W9bq01776CWknW5nG39p82bgTcf5RLlBK04	Get hash	malicious	Follina CVE-2022-30190	Browse	104.17.24.14
	phish_alert_sp2_2.0.0.0 (43).eml	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://wpu.soundestlink.com/ce/c/65efce92d7616773ffe07dc8/66ece9df807dd867830b30ce/66ecead547d52073653ffcd1?signature=1c5a13790c399307bb44766bf5bdb71369727526d69c53156ec3817bd3868afd	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://l1w5na.verfalaidef.com/MpbF/#Mfrancis.bonnell@rsli.com	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
linkprotect.cudasvc.com	https://bit.ly/3e7c84f1a590a3e6	Get hash	malicious	Unknown	Browse	3.120.110.101
	401K Information.eml	Get hash	malicious	Unknown	Browse	3.68.35.227
	https://www.google.com/travel/clk?pc=AA80OsxOJqDJTtimFViThn67OQkloT30Ajm0l4ZvLJJer0pJHlDs6FtKUzjSNqFcVCDDRK9HbWM9J68g_B5lWBQlAc6FRf4zwpPAQbYRTV4byfvHC1SF4YRK3ax3ADGyZ2SM3lU&pcurl=https://www.google.com%2Furl%3Fq%3Dhttps%253A%252F%252Flinkprotect.cudasvc.com%252Furl%253Fa%253Dhttp%253A%252F%252Fau.bestreviews.guide%252Famp%252Fredirect%253Frf_dws_location%25253D%252526rf_item_id%25253D284553988%252526rf_list_id%25253D4693819%252526rf_partner_id%25253DB017M5JDX0%252526rf_source%25253Damazon%252526url%25253DaHR0cHM6Ly9hcGxpY2FjaW9uZXNpZGl2YWwuaWRpdmFsLm9yZy9Db252b2NhdG9yaWFzUHJvcGlhcy9lcy9CYXNlL0NhbWJpYXJJZGlvbWE%252FSWRpb21hTnVldm89ZXMmSWRpb21hQWN0dWFsPWVzJnVybD1odHRwOi8vdTQ2MjA2NDk1LmN0LnNlbmRncmlkLm5ldCUyRmxzJTJGY2xpY2slM0Z1cG4lM0R1MDAxLlFMWWhnLTJCS3ZUc0o0WFVkMlc4NkJVWmxKdnE3bnczRVBQdWJ6ZERYQW1BTm9RUC0yRkt4cjJQZzBXalpRQXYzeEJpSXZKVGlPR2xvbW43QUM1VzNYTjN3dlVXVGJBLTJCdFVwNGhRTnRETzZGOEtkM08tMkJWdURZYTB4V2k3NHBMTmZiemFySEQ2djdQVXE2Sy0yQkVTY0hRSm5jVmJuaEUxNFpVdWNVSUxmUS0yRmJnTURoZEt4T3BmbGdDU1FpcmNLcDh4b2FPNE5tcndVQXNlVERxd0RRNmI3YUxVd0JVSTNFT1VxM0FScGhad0dvUzV6ejhHbTd4Y3N0Y21RV2RSejRQbmo1UlVxYlNuRmdKMjBHMXBWWjNZVTJGLTJGQXlEQWNjeFc0QUNkYVUxbFNUWGRwQTdPZ0UtMkZTOTFjNU0tMkJWYlEwNi0yQmdKa2NELTJCMHdKVmpXTmRZWk9hVGY4U2FHZmctM0QtM0RpcHdCX3A2YjlQRi0yRlBCaENWY0lhTy0yQlZBMm54c3IzQWtGc3ZMc2tSMDA0cGl1NkJlcmdWYjBTdzhOWE8xMkxOZW1JZ0c0LTJCQlZrTmliV2tBS2NJTGp2R0t1enZlb3pNS1ZXM0pkSTdEN0Q4WmQ3dE9yUTVIOUloZzk4UWprb0pIRWozekdKOVZTUGlySGRhVDU1QVR1aXhTYjN0bDJYWlNLcFg3OG1IbEcwODhaZHZya2Fjalo0SFRzUWtCOWFuME9JUUVYRTlIVVRLUjlsS0U1LTJCeE5OS1pNaFJtdmM2R0d1SUx6a0YtMkJhTFEtMkZQeEVDQzBVQzhrVXp4UEpnc2pkR0M3UmdrZU1BY0hMUXNodVcyckFRZEt4WHhOZUlsQU1MNXhiRjhEeFRDaWN5SzVaUnlaMU4xY0YwY3pENWhTWjl1cWRpUjlHc1NiUzk0ZEN3LTJCRmVsN1d4OUF3ZmU2WHdLZDkza2xEVzZyTnFHelhaMlYwbzFwcWZlaDlWQS0yRk1FR2pXZTlHaWlrOHp0TmlmQjRUbW16T3FUUk16UFNzYkpWVXVISm9nTGZkdDJwdnJrRmtMWkNxMGE2Y1VIQ3dJdHctMkJBV2x4bGs%25253D%2526c%253DE%252C1%252CDR46MsYBoqQYCIR265tDuHDy_G5rYCXcSJD3yqZE084XnwKAnmUdOkGTEGQQhlwGOYj_RpZJHPPpeiAVAfJ08NWAIzAZZeX1VKIwB	Get hash	malicious	Unknown	Browse	18.158.73.50
	https://www.google.com/travel/clk?pc=AA80OsxOJqDJTtimFViThn67OQkloT30Ajm0l4ZvLJJer0pJHlDs6FtKUzjSNqFcVCDDRK9HbWM9J68g_B5lWBQlAc6FRf4zwpPAQbYRTV4byfvHC1SF4YRK3ax3ADGyZ2SM3lU&pcurl=https://www.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%253Dhttps%25253A%25252F%25252Flinkprotect.cudasvc.com%25252Furl%25253Fa%25253Dhttps%25253A%25252F%25252Fwtb-redirect.swaven.com%25252Foutbound_click%25253Fwtbid%2525253D60c775e445e449143acba972%25252526module%2525253Dwtb%25252526touchpoint%2525253DST%25252526lang%2525253Den%25252526sid%2525253D2095_WEB%25252526avpid%2525253D0041100002228%25252526prc%2525253D7.97%25252526prc_currency%2525253DUSD%25252526clkurlt%2525253D3%25252526clkurlaff%2525253D0%25252526url%2525253DaHR0cHM6Ly9nby5yZWRpcmVjdGluZ2F0LmNvbS8%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%2525253D%252526c%25253DE%25252C1%25252CDR46MsYBoqQYCIR265tDuHDy_G5rYCXcSJD3yqZE084XnwKAnmUdOkGTEGQQhlwGOYj_RpZJHPPpeiAVAfJ08NWAIzAZZeX1VKIwBKyDiJ-Dg8gikcGjT85owT4%25252C%252526sa%25253DD%252526sntz%25253D1%252526typo%25253D1%2526sa%253DD%2526sntz%253D1%2526usg%253DAOvVaw0lQGlbqcmJeZ9Au_g2dNhW%26sa%3DD%26source%3Deditors%26ust%3D1724078803365879%26usg%3DAOvVaw	Get hash	malicious	Unknown	Browse	18.158.73.50
	https://www.google.com/travel/clk?pc=AA80OsxOJqDJTtimFViThn67OQkloT30Ajm0l4ZvLJJer0pJHlDs6FtKUzjSNqFcVCDDRK9HbWM9J68g_B5lWBQlAc6FRf4zwpPAQbYRTV4byfvHC1SF4YRK3ax3ADGyZ2SM3lU&pcurl=https://www.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%253Dhttps%25253A%25252F%25252Flinkprotect.cudasvc.com%25252Furl%25253Fa%25253Dhttps%25253A%25252F%25252Fwtb-redirect.swaven.com%25252Foutbound_click%25253Fwtbid%2525253D60c775e445e449143acba972%25252526module%2525253Dwtb%25252526touchpoint%2525253DST%25252526lang%2525253Den%25252526sid%2525253D2095_WEB%25252526avpid%2525253D0041100002228%25252526prc%2525253D7.97%25252526prc_currency%2525253DUSD%25252526clkurlt%2525253D3%25252526clkurlaff%2525253D0%25252526url%2525253DaHR0cHM6Ly9nby5yZWRpcmVjdGluZ2F0LmNvbS8%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%2525253D%252526c%25253DE%25252C1%25252CDR46MsYBoqQYCIR265tDuHDy_G5rYCXcSJD3yqZE084XnwKAnmUdOkGTEGQQhlwGOYj_RpZJHPPpeiAVAfJ08NWAIzAZZeX1VKIwBKyDiJ-Dg8gikcGjT85owT4%25252C%252526sa%25253DD%252526sntz%25253D1%252526typo%25253D1%2526sa%253DD%2526sntz%253D1%2526usg%253DAOvVaw0lQGlbqcmJeZ9Au_g2dNhW%26sa%3DD%26source%3Deditors%26ust%3D1724078803365879%26usg%3DAOvVaw	Get hash	malicious	Unknown	Browse	3.69.32.122
	PO_ENVIRONMENTAL SAMPLING TECHNOLOGY INC.html	Get hash	malicious	Unknown	Browse	3.122.36.242
	https://www.google.com/travel/clk?pc=AA80OsxOJqDJTtimFViThn67OQkloT30Ajm0l4ZvLJJer0pJHlDs6FtKUzjSNqFcVCDDRK9HbWM9J68g_B5lWBQlAc6FRf4zwpPAQbYRTV4byfvHC1SF4YRK3ax3ADGyZ2SM3lU&pcurl=https://www.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%253Dhttps%25253A%25252F%25252Flinkprotect.cudasvc.com%25252Furl%25253Fa%25253Dhttps%25253A%25252F%25252Fcravebooks.com%25252Fstore-sidebar-book-click%25253Fredirect_url%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%2525253D%2525253D%252526c%25253DE%25252C1%25252CDR46MsYBoqQYCIR265tDuHDy_G5rYCXcSJD3yqZE084XnwKAnmUdOkGTEGQQhlwGOYj_RpZJHPPpeiAVAfJ08NWAIzAZZeX1VKIwBKyDiJ-Dg8gikcGjT85owT4%25252C%252526typo%25253D1%2526sa%253DD%2526sntz%253D1%2526usg%253DA	Get hash	malicious	Unknown	Browse	3.122.36.242
	https://www.google.com/travel/clk?pc=AA80OsxOJqDJTtimFViThn67OQkloT30Ajm0l4ZvLJJer0pJHlDs6FtKUzjSNqFcVCDDRK9HbWM9J68g_B5lWBQlAc6FRf4zwpPAQbYRTV4byfvHC1SF4YRK3ax3ADGyZ2SM3lU&pcurl=https://www.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%253Dhttps%25253A%25252F%25252Flinkprotect.cudasvc.com%25252Furl%25253Fa%25253Dhttp%25253A%25252F%25252Fau.bestreviews.guide%25252Famp%25252Fredirect%25253Frf_dws_location%2525253D%25252526rf_item_id%2525253D284553988%25252526rf_list_id%2525253D4693819%25252526rf_partner_id%2525253DB017M5JDX0%25252526rf_source%2525253Damazon%25252526url%2525253DaHR0cHM6Ly9tb2FyYWRlZm9jLnJvL29mZXJ0YS1udW50YS0yMDIzLz9wb3BiX3BJRD0zNzIxJnBvcGJfdHJhY2tfdXJsPWh0dHA6Ly9wYWlnZTA5Mi5naXRodWIuaW8lMkYwNTAyOTIzZDM0MGNlYjE1ZTRjZjNlZWUwMTM5NGMyMDk3MmRmYTllZTBkMzUzMDBlZDFjOWNjMjdhNWZiYmM0OTU1ODkzMjEyMjIwMDA5ODQ5OTEyMDklMkY%2525253D%252526c%25253DE%25252C1%25252CDR46MsYBoqQYCIR265tDuHDy_G5rYCXcSJD3yqZE084XnwKAnmUdOkGTEGQQhlwGOYj_RpZJHPPpeiAVAfJ08NWAIzAZZeX1VKIwBKyDiJ-Dg8gikcGjT85owT4%25252C%252526typo%25253D1%2526sa%253DD%2526sntz%253D1%2526usg%253DAOvVaw3xlcg3a9X_y80WSUzYxlrB%26sa%3DD%26source%3Deditors%26ust%3D1723654483940330%26usg%3DAOvVaw3iBZdZ4Xq06xRpitwHmKAk%23cmljaGFyZC5oZW5uZXNzeUBkdnNhLmdvdi51aw==	Get hash	malicious	HTMLPhisher	Browse	3.75.62.36
	https://www.google.com/travel/clk?pc=AA80OsxOJqDJTtimFViThn67OQkloT30Ajm0l4ZvLJJer0pJHlDs6FtKUzjSNqFcVCDDRK9HbWM9J68g_B5lWBQlAc6FRf4zwpPAQbYRTV4byfvHC1SF4YRK3ax3ADGyZ2SM3lU&pcurl=https://www.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%253Dhttps%25253A%25252F%25252Flinkprotect.cudasvc.com%25252Furl%25253Fa%25253Dhttp%25253A%25252F%25252Fau.bestreviews.guide%25252Famp%25252Fredirect%25253Frf_dws_location%2525253D%25252526rf_item_id%2525253D284553988%25252526rf_list_id%2525253D4693819%25252526rf_partner_id%2525253DB017M5JDX0%25252526rf_source%2525253Damazon%25252526url%2525253DaHR0cHM6Ly9pbWFvdC5jby5pbC9CYW5uZXIvQmFubmVyQ2xpY2s%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%2525253D%2525253D%252526c%25253DE%25252C1%25252C4Ep8_EwIoKdq7oTrMOJNXsvM	Get hash	malicious	Unknown	Browse	3.75.62.36
	https://www.google.com/travel/clk?pc=AA80OsxOJqDJTtimFViThn67OQkloT30Ajm0l4ZvLJJer0pJHlDs6FtKUzjSNqFcVCDDRK9HbWM9J68g_B5lWBQlAc6FRf4zwpPAQbYRTV4byfvHC1SF4YRK3ax3ADGyZ2SM3lU&pcurl=https://www.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%253Dhttps%25253A%25252F%25252Flinkprotect.cudasvc.com%25252Furl%25253Fa%25253Dhttps%25253A%25252F%25252Fcravebooks.com%25252Fstore-sidebar-book-click%25253Fredirect_url%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%2525253D%2525253D%252526c%25253DE%25252C1%25252CDR46MsYBoqQYCIR265tDuHDy_G5rYCXcSJD3yqZE084XnwKAnmUdOkGTEGQQhlwGOYj_RpZJHPPpeiAVAfJ08NWAIzAZZeX1VKIwBKyDiJ-Dg8gikcGjT85owT4%25252C%252526typo%25253D1%2526sa%253DD%2526sntz%253D1%2526usg%253DA	Get hash	malicious	Unknown	Browse	3.75.62.36
jsdelivr.map.fastly.net	http://www.laborfinders.com	Get hash	malicious	Unknown	Browse	151.101.129.229
	https://www.cyderes.com/e3t/Ctc/ON+113/cpWbt04/VX4GLN83B5sSVcgNxQ2Ps5TgVfQRxk5l9kHPN48YK9C5m_5PW50kH_H6lZ3pVW8y4rsC3Frq3xW6yS46B81vNwBW7nKjzX7rlDGLW8Pgnsm2TMWP7W8BGJ3S7v4twJW4Frjvh65WTfKVTz5h-5gQP1gMVRZvWxc0gFW70YCkf5Yr5gxW4_ym5p4kM2HWW8XQLRs2fQKTSW6H8zL35wntpYW2g-lt23Pgmr-W5tJKtK3hc6rbW6CjtL61FP38FN8Dg60fYghyWW9bC6JC3rZqmzW8VJhP664ltDxW1lwcb13ZpPGyW5K_1JQ3TqNPdW95WCPZ4QLNngW273xc864PDv3W5x93bB7dRNxTW92-5jF1RVBWpW8x57FF7P2xcjW7KK8Xj8n_ZZMW7CgpVb566CBBW8bVlWQ11xhLlVs3yDJ8NdTRzW12g9Fn559wR0W9bq01776CWknW5nG39p82bgTcf5RLlBK04	Get hash	malicious	Follina CVE-2022-30190	Browse	151.101.1.229
	https://wpu.soundestlink.com/ce/c/65efce92d7616773ffe07dc8/66ece9df807dd867830b30ce/66ecead547d52073653ffcd1?signature=1c5a13790c399307bb44766bf5bdb71369727526d69c53156ec3817bd3868afd	Get hash	malicious	Unknown	Browse	151.101.1.229
	https://overview-trzor.github.io/	Get hash	malicious	Unknown	Browse	151.101.65.229
	http://telegramgondrong.pages.dev/	Get hash	malicious	Unknown	Browse	151.101.1.229
	https://url.us.m.mimecastprotect.com/s/GXacCBB7YEf89jXkVC6hkC2Mlvb?domain=sites.google.com	Get hash	malicious	Unknown	Browse	151.101.65.229
	https://www.champstpo.com/	Get hash	malicious	Unknown	Browse	151.101.129.229
	https://computing-customer-6850.my.salesforce-sites.com/support	Get hash	malicious	Unknown	Browse	151.101.193.229
	https://request-checksid-711843.pages.dev/robots.txt/	Get hash	malicious	Unknown	Browse	151.101.129.229
	https://iostart-trezori.github.io/	Get hash	malicious	Unknown	Browse	151.101.1.229
i.ibb.co	https://overview-trzor.github.io/	Get hash	malicious	Unknown	Browse	162.19.58.157
	https://suite-en-trzor.github.io/	Get hash	malicious	HTMLPhisher	Browse	162.19.58.159
	https://trezorstart-home.github.io/	Get hash	malicious	HTMLPhisher	Browse	169.197.85.95
	https://iostart-trezori.github.io/	Get hash	malicious	Unknown	Browse	162.19.58.157
	https://treezoriostart.github.io/	Get hash	malicious	Unknown	Browse	162.19.58.159
	https://abhisheksingh220604.github.io/Netflix/	Get hash	malicious	HTMLPhisher	Browse	162.19.58.158
	https://folders-sky-69e4.keshonulrich.workers.dev/	Get hash	malicious	HTMLPhisher	Browse	162.19.58.159
	http://www.unlswap-v2.org/applications.html	Get hash	malicious	Unknown	Browse	169.197.85.95
	Hb_Xe-000876765.exe	Get hash	malicious	Unknown	Browse	162.19.58.158
	DO-008899828B.exe	Get hash	malicious	Unknown	Browse	162.19.58.159

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CENTURYLINK-US-LEGACY-QWESTUS	https://onlyclips.site/?title=quinnfinite&ref=git	Get hash	malicious	Unknown	Browse	162.19.138.117
	SecuriteInfo.com.Linux.Mirai.8587.19636.7995.elf	Get hash	malicious	Mirai	Browse	67.40.12.208
	https://overview-trzor.github.io/	Get hash	malicious	Unknown	Browse	162.19.58.157
	https://suite-en-trzor.github.io/	Get hash	malicious	HTMLPhisher	Browse	162.19.58.159
	https://trezorstart-home.github.io/	Get hash	malicious	HTMLPhisher	Browse	162.19.58.157
	https://iostart-trezori.github.io/	Get hash	malicious	Unknown	Browse	162.19.58.157
	https://learn-trez-en.github.io/	Get hash	malicious	Unknown	Browse	162.19.138.116
	https://treezoriostart.github.io/	Get hash	malicious	Unknown	Browse	162.19.58.159
	https://www.google.com/url?rct=j&sa=t&url=https://www.wfla.com/news/hillsborough-county/missing-hillsborough-teen-found-in-south-florida-with-38-year-old-man-she-met-online/&ct=ga&cd=CAEYACoTNzgzMTk0ODc2Nzc1OTQ3Nzc4OTIaNGI1MjA2MjQ3N2RkZDg4ODpjb206ZW46VVM&usg=AOvVaw2tJoLdBv4xAx70UwuSGwkb	Get hash	malicious	Unknown	Browse	162.19.138.82
	https://www.google.com/url?rct=j&sa=t&url=https://we-ha.com/10th-anniversary-best-of-west-hartford-celebration-to-include-dancing-with-the-stars-competition/&ct=ga&cd=CAEYACoTNTkyNjQ3ODI2ODc3NzAwMTQzMDIaMTdiNzMwYzc3Yjc2YWM0NDpjb206ZW46VVM&usg=AOvVaw05FWhSEtv9_-HDejBgNYhb	Get hash	malicious	Unknown	Browse	162.19.138.116
CENTURYLINK-US-LEGACY-QWESTUS	https://onlyclips.site/?title=quinnfinite&ref=git	Get hash	malicious	Unknown	Browse	162.19.138.117
	SecuriteInfo.com.Linux.Mirai.8587.19636.7995.elf	Get hash	malicious	Mirai	Browse	67.40.12.208
	https://overview-trzor.github.io/	Get hash	malicious	Unknown	Browse	162.19.58.157
	https://suite-en-trzor.github.io/	Get hash	malicious	HTMLPhisher	Browse	162.19.58.159
	https://trezorstart-home.github.io/	Get hash	malicious	HTMLPhisher	Browse	162.19.58.157
	https://iostart-trezori.github.io/	Get hash	malicious	Unknown	Browse	162.19.58.157
	https://learn-trez-en.github.io/	Get hash	malicious	Unknown	Browse	162.19.138.116
	https://treezoriostart.github.io/	Get hash	malicious	Unknown	Browse	162.19.58.159
	https://www.google.com/url?rct=j&sa=t&url=https://www.wfla.com/news/hillsborough-county/missing-hillsborough-teen-found-in-south-florida-with-38-year-old-man-she-met-online/&ct=ga&cd=CAEYACoTNzgzMTk0ODc2Nzc1OTQ3Nzc4OTIaNGI1MjA2MjQ3N2RkZDg4ODpjb206ZW46VVM&usg=AOvVaw2tJoLdBv4xAx70UwuSGwkb	Get hash	malicious	Unknown	Browse	162.19.138.82
	https://www.google.com/url?rct=j&sa=t&url=https://we-ha.com/10th-anniversary-best-of-west-hartford-celebration-to-include-dancing-with-the-stars-competition/&ct=ga&cd=CAEYACoTNTkyNjQ3ODI2ODc3NzAwMTQzMDIaMTdiNzMwYzc3Yjc2YWM0NDpjb206ZW46VVM&usg=AOvVaw05FWhSEtv9_-HDejBgNYhb	Get hash	malicious	Unknown	Browse	162.19.138.116
FASTLYUS	https://www.google.com/url?q=3HOSozuuQiApLjODz3yh&rct=tTPSJ3J3wDFX0jkXyycT&sa=t&esrc=WSECxFgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=XpPkDfJ9mfdQ6lDJVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp/m%C2%ADi%C2%ADt%C2%ADr%C2%ADak%C2%ADar%C2%ADya%C2%ADja%C2%ADpi%C2%ADn%C2%ADd%C2%ADo%C2%AD.%C2%ADc%C2%ADom/rc	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	https://protect2.fireeye.com/v1/url?k=31323334-501cfaeb-3114f648-454455535732-bcc101dac5b6be0f&q=1&e=963a14f5-6c2b-442b-9703-a0f10dab1f9b&u=https%3A%2F%2Fnetorgft11904377-my.sharepoint.com%2F%3Af%3A%2Fg%2Fpersonal%2Fdeepthi_symnn_com%2FEtl7V4soPhtBs4eBP1m8AckBUPaJNjBC7LSEn0yp9IiKIg%3Fe%3DgeXeiq	Get hash	malicious	HTMLPhisher	Browse	199.232.188.157
	http://cheap-pharmacy.world	Get hash	malicious	Unknown	Browse	151.101.194.137
	https://mafanikiosacco-my.sharepoint.com/:f:/p/info/EgPH1s54501Ki8NU-gutZLABOsAyZ-dhIPJaM6vWEXJqUQ?e=PJpX12	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	http://www.laborfinders.com	Get hash	malicious	Unknown	Browse	151.101.65.195
	http://hootbio.com	Get hash	malicious	Unknown	Browse	151.101.129.140
	https://www.cyderes.com/e3t/Ctc/ON+113/cpWbt04/VX4GLN83B5sSVcgNxQ2Ps5TgVfQRxk5l9kHPN48YK9C5m_5PW50kH_H6lZ3pVW8y4rsC3Frq3xW6yS46B81vNwBW7nKjzX7rlDGLW8Pgnsm2TMWP7W8BGJ3S7v4twJW4Frjvh65WTfKVTz5h-5gQP1gMVRZvWxc0gFW70YCkf5Yr5gxW4_ym5p4kM2HWW8XQLRs2fQKTSW6H8zL35wntpYW2g-lt23Pgmr-W5tJKtK3hc6rbW6CjtL61FP38FN8Dg60fYghyWW9bC6JC3rZqmzW8VJhP664ltDxW1lwcb13ZpPGyW5K_1JQ3TqNPdW95WCPZ4QLNngW273xc864PDv3W5x93bB7dRNxTW92-5jF1RVBWpW8x57FF7P2xcjW7KK8Xj8n_ZZMW7CgpVb566CBBW8bVlWQ11xhLlVs3yDJ8NdTRzW12g9Fn559wR0W9bq01776CWknW5nG39p82bgTcf5RLlBK04	Get hash	malicious	Follina CVE-2022-30190	Browse	151.101.1.229
	https://slidebazaar.com	Get hash	malicious	Unknown	Browse	151.101.64.84
	https://www.playbook.com/s/httpsmtyiancenditcom9ucuga/GqQDT1KrkoGhDPXuaMWGQQDi?assetToken=D2XSnnQGEphaZAarp39EkntW	Get hash	malicious	Unknown	Browse	151.101.2.208
	phish_alert_sp2_2.0.0.0 (43).eml	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	http://fullbodyburialsatsea.net	Get hash	malicious	Unknown	Browse	23.211.8.90 184.28.90.27 20.12.23.50
	https://protect2.fireeye.com/v1/url?k=31323334-501cfaeb-3114f648-454455535732-bcc101dac5b6be0f&q=1&e=963a14f5-6c2b-442b-9703-a0f10dab1f9b&u=https%3A%2F%2Fnetorgft11904377-my.sharepoint.com%2F%3Af%3A%2Fg%2Fpersonal%2Fdeepthi_symnn_com%2FEtl7V4soPhtBs4eBP1m8AckBUPaJNjBC7LSEn0yp9IiKIg%3Fe%3DgeXeiq	Get hash	malicious	HTMLPhisher	Browse	23.211.8.90 184.28.90.27 20.12.23.50
	calldetails_daiichi-sankyo.eu.html	Get hash	malicious	Unknown	Browse	23.211.8.90 184.28.90.27 20.12.23.50
	http://aheroestribute.org/	Get hash	malicious	Unknown	Browse	23.211.8.90 184.28.90.27 20.12.23.50
	http://pacote-rd461935pt.info	Get hash	malicious	Unknown	Browse	23.211.8.90 184.28.90.27 20.12.23.50
	Domain_Validation_Protocol_EX-205WQMN.html	Get hash	malicious	HTMLPhisher	Browse	23.211.8.90 184.28.90.27 20.12.23.50
	https://onlyclips.site/?title=quinnfinite&ref=git	Get hash	malicious	Unknown	Browse	23.211.8.90 184.28.90.27 20.12.23.50
	http://www.laborfinders.com	Get hash	malicious	Unknown	Browse	23.211.8.90 184.28.90.27 20.12.23.50
	https://linen-paperback-308.notion.site/CSC-MONAVENIR-PDF-Shared-b7017dc3e2e2456aa487fd1b56e4b917?pvs=4	Get hash	malicious	Unknown	Browse	23.211.8.90 184.28.90.27 20.12.23.50
	https://teconstruyo.cl/o/?c3Y9bzM2NV8xX25vbSZyYW5kPVUxRkxTbWc9JnVpZD1VU0VSMTIwOTIwMjRVNDcwOTEyMzU=#dGNmb2lAb3RjLmdvdi51aw==	Get hash	malicious	Unknown	Browse	23.211.8.90 184.28.90.27 20.12.23.50

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Sep 20 15:18:50 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9879101917519884
Encrypted:	false
SSDEEP:	48:8ydIjTo8tfHDidAKZdA1FehwiZUklqehJy+3:81jPt1Cy
MD5:	A7209762970232A30220FCDD977EC445
SHA1:	E5061D9C7BE10F48262BF60702E1097123207859
SHA-256:	EE3F20F5D7178F21212989FD96B7ED3525BC97779C909CCC6A25F0BFA6B96255
SHA-512:	00196FBB14C438B62EC743213C3601A6E2660D9D7C77816C63352808B247373E828BDBEC87C0595F39DA3691509297310CC1862DD6D4C7D830886EE71EFCF802
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......x...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I4YM.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V4YX.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V4YX.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V4YX............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V4YY............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............O.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Sep 20 15:18:50 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.0009818995542155
Encrypted:	false
SSDEEP:	48:8+dIjTo8tfHDidAKZdA1seh/iZUkAQkqehyy+2:8xjPtr9Qjy
MD5:	38C6382B1519DC2EAEB419B67096E42F
SHA1:	FE4493BFDD061CCFAD9EF648A18615578DCCD659
SHA-256:	E8949F1989B9366231CF25AD50CB851CA6E01AC40BD0DE4AD52D961F94E9D5AF
SHA-512:	1A8650EDFCC0196087F43DC626A717A7F9BD2ABF633397E310AC1BC97AF6228093D9C00D83F912D287B60914A59A309FBD45F53DFE624388A94046999E0ABC71
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....c..x...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I4YM.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V4YX.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V4YX.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V4YX............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V4YY............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............O.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.011418354168793
Encrypted:	false
SSDEEP:	48:80dIjTo8AHDidAKZdA14meh7sFiZUkmgqeh7sky+BX:8/jPqnmy
MD5:	E5782F22C7785CE6E85B947DD0E85373
SHA1:	5E713D9F62FA8A34B0D8680A440ADE9259A5CC09
SHA-256:	3AEB83B61D64D9BCB6F624EBCFAC81DFE632F29FCEFC633D002817D87B557BC8
SHA-512:	A98107B0ABB2BBCAFDACFDF0BF821B19FE032D566ECF40BC039DAFF48F35567B7CB5092998143DABC3B99213E9DD30DE1D1A31BBEF470BCB389F3B495F2CF90E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I4YM.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V4YX.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V4YX.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V4YX............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............O.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Sep 20 15:18:49 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9991457047465175
Encrypted:	false
SSDEEP:	48:8EdIjTo8tfHDidAKZdA1TehDiZUkwqeh+y+R:8PjPt48y
MD5:	8C805C77569265F957C7C6E761FD3ED5
SHA1:	32852F34AA60D35DCB9F3582BC55EF41FCB55D66
SHA-256:	653235B9925354114250B74769C72B08436C6B03A7C234A04085D4263EC343DE
SHA-512:	E34883B136407AF184044C247489ED28164A753BAB34027CB06054C18E1B9158D8E1C1AFE1CAD2B097E3F4DF27BCFE37BF634C850A0BE47BBE2BB7E4D93CE715
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....P...x...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I4YM.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V4YX.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V4YX.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V4YX............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V4YY............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............O.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Sep 20 15:18:50 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9902647340782638
Encrypted:	false
SSDEEP:	48:8rdIjTo8tfHDidAKZdA1dehBiZUk1W1qeh4y+C:8GjPtI9Yy
MD5:	E267554C9766BF804F4BDF568852428E
SHA1:	13D27A89A608C144029B2E51058C4DC0F713595B
SHA-256:	FE1A2720BB4F587C1882E72A39E8EDF85FB278AC8DD3CF52F844CB096AB5803A
SHA-512:	662A1E534F68ED6EFD508F278C228A47ED75AF87E15312CF1B9A4BD3D22B5734F57B2B5866936C6C75E88E3303E320DD2E7A31C0D599ADEE582454A8CBCC514E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....Zd..x...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I4YM.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V4YX.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V4YX.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V4YX............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V4YY............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............O.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Sep 20 15:18:49 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.998132904987121
Encrypted:	false
SSDEEP:	48:8/dIjTo8tfHDidAKZdA1duTeehOuTbbiZUk5OjqehOuTbmy+yT+:8qjPt6TfTbxWOvTbmy7T
MD5:	3738034318FB10A8AF58DA0C26BEE26C
SHA1:	69B0A57AC0B39A26943165F63990AFEE0080FFED
SHA-256:	FA26F4BF933698CF10776824D108D34AE1D3BD1EF882AF8CC934604783255745
SHA-512:	E5B3806BD4059F38359F6521A21921F942FD408FC774A10D8767D7ED01CF8DE23D4411E222235B3FA956FB8238D094EA9386FF402872241A9DED278E7230196D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........x...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I4YM.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V4YX.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V4YX.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V4YX............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V4YY............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............O.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 103

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39257), with CRLF line terminators
Category:	downloaded
Size (bytes):	40326
Entropy (8bit):	5.245555585297941
Encrypted:	false
SSDEEP:	384:bvrc3TrJ1vMZCKZ4pLRy6DkfDLcbTzcXanT2rxb64aKQr1vySAwBaPUge6ydE:bTaYB4Hy7mTzcaTKStrwSAwBaPUTdE
MD5:	DA9DC1C32E89C02FC1E9EEB7E5AAB91E
SHA1:	3EFB110EFA6068CE6B586A67F87DA5125310BC30
SHA-256:	398CDF1B27EF247E5BC77805F266BB441E60355463FC3D1776F41AAE58B08CF1
SHA-512:	D4730EBC4CA62624B8300E292F27FD79D42A9277E409545DF7DC916189ED9DF13E46FAA37E3924B85A7C7EA8C76BF65A05ECA69B4029B550430536EC6DF8552A
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://passwordreset.microsoftonline.com/ScriptResource.axd?d=7GGcvh1NJlagbOi_gR4XkZFUXHZ6kkwYj4KCdjrP_PmqgAkIb6286tO0RccWuEC-dpg6M3SzH8t9YCYPpcvwZXML6uG08vZyuUp3J0XjZDc2Odz9uK2NsXnvb5iM0aTz5uxrTIe8O_FPp55HuG8IUeN9aQWR82KX7eWeYd_cb0dF5OGD__L1Mf20EcryXNVTGV0hK-Id9yFiTZZOygwfoD9KshXHIfuNPt6Dwhturxk1&t=7a0cc936
Preview:	//----------------------------------------------------------..// Copyright (C) Microsoft Corporation. All rights reserved...//----------------------------------------------------------..// MicrosoftAjaxWebForms.js..Type._registerScript("MicrosoftAjaxWebForms.js",["MicrosoftAjaxCore.js","MicrosoftAjaxSerialization.js","MicrosoftAjaxNetwork.js","MicrosoftAjaxComponentModel.js"]);Type.registerNamespace("Sys.WebForms");Sys.WebForms.BeginRequestEventArgs=function(c,b,a){Sys.WebForms.BeginRequestEventArgs.initializeBase(this);this._request=c;this._postBackElement=b;this._updatePanelsToUpdate=a};Sys.WebForms.BeginRequestEventArgs.prototype={get_postBackElement:function(){return this._postBackElement},get_request:function(){return this._request},get_updatePanelsToUpdate:function(){return this._updatePanelsToUpdate?Array.clone(this._updatePanelsToUpdate):[]}};Sys.WebForms.BeginRequestEventArgs.registerClass("Sys.WebForms.BeginRequestEventArgs",Sys.EventArgs);Sys.WebForms.EndRequestEventArgs=fun

Chrome Cache Entry: 104

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 59, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPl0/Q2/6yxl/k4E08up:6v/lhPzu7Tp
MD5:	7168F2F48463EB923D7228C3625F0D7F
SHA1:	AF7459C0828D408814422B96406D981343DF514F
SHA-256:	2412BF27ADBD73DE57FFFA5EBF7A80E8C5DEFEE1D21B2A2E83144F16D63865E0
SHA-512:	AA44CAE7D31122FFF05659177804440BC994DCC8C0DC2CFA3BEE12B5060A1631B369C7B79255727DB6A5F2B8657EAD8EE5CB627719269096927D75CC72B45DDE
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8c6322f16b9f8cee/1726849161806/LGyozanY0pFJP_-
Preview:	.PNG........IHDR...0...;.............IDAT.....$.....IEND.B`.

Chrome Cache Entry: 105

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (53311)
Category:	downloaded
Size (bytes):	296153
Entropy (8bit):	5.036169767344252
Encrypted:	false
SSDEEP:	3072:vG44h8pqZ7/XOdOnavXAJbpD5PFVlRXij4WOLarg0YJvyVl6yqrGk4sVVDs:XwZidOn4XARdVTyuaM0YJvyUyqyaJs
MD5:	B91E6760C980C66FBFB980E1376A8926
SHA1:	CBDC4DDBF59CB6B35754D06C465749F7EE7700FD
SHA-256:	7A4B721D81D8BF4B4D0E93026C8D2199B6A39D97863E1E48B644DAD141E1D5AE
SHA-512:	CBD067AB4BA77B77C791F34653F2660CEABBE719BEE4FEE591DEE3ED0CB9F9C8344F670C67E28769BA2F7ECEBCD2AFCDA0C41BC7CEEF9D750929DDF16F9CADAE
Malicious:	false
URL:	https://agence-immobiliere-luberon.com/5a117d63-e078-4d65-be0b-fa7ab24a9f8f/sdelsman@gklaw.com
Preview:	<html lang="en">.<head>.<meta charset="UTF-8">.<meta http-equiv="X-UA-Compatible" content="IE=edge"/>.<meta name="viewport" content="width=device-width, initial-scale=1.0">.<style> #containerShadow,#ef{border-radius:0 0 7px 7px}#cal,#cal>.r{display:flex}#fmask,#openedFlap{width:var(--envW);height:107px}#cal,#ef,#fmask,#logo{overflow:hidden}#loadingScreen{position:fixed;top:0;bottom:0;left:0;right:0;background-color:#fff}#loadingLogo{position:fixed;top:calc(50vh - 90px);left:calc(50vw - 90px);width:180px;height:180px}#MSLogo{position:fixed;bottom:36px;left:calc(50vw - 45px)}.dark #loadingScreen{background-color:#333}.darkNew #loadingScreen{background-color:#1f1f1f}:root{--s:180px;--envW:130px;--envH:71px;--calW:118px;--sqW:calc(var(--calW) / 3);--sqH:37px;--calHH:20px;--calH:calc(var(--sqH) * 3 + var(--calHH));--calY:calc(var(--calH) + 20px);--calYExt:calc(var(--calH) - 80px);--calYOverExt:calc(var(--calH) - 92px);--flapS:96px;--flapH:calc(0.55 * var(--envH));--flapScaleY:calc(var(--fla

Chrome Cache Entry: 106

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 29 x 8, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.035372245524405
Encrypted:	false
SSDEEP:	3:yionv//thPlons6yxl/k4E08up:6v/lhP2Jy7Tp
MD5:	FEE739667DF00ABACA6AC373052B8C8E
SHA1:	378B749170AEF56F446B27F373FF0616904B5683
SHA-256:	CED65EE024A164CACC961831800101CED7AF6144329C4FC1C2674577E5D8773D
SHA-512:	976F7A553B00E9E15D41045A612978B853808562B89BEDCF1AA386E5DCF3D75A3D83C08976D47B944672BC68199A0C02AC752478F5EFA8C826987F0D86EE69C1
Malicious:	false
Preview:	.PNG........IHDR...............cp....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 107

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (941), with CRLF line terminators
Category:	dropped
Size (bytes):	51589
Entropy (8bit):	4.640729164568534
Encrypted:	false
SSDEEP:	768:3VBsGh7c2wIRyL5IBRe7RMCb9vlQfWGfAlBRsYXzrSSl:3VNrR5BRe7eCZlQfWGfAlBRsYX6Sl
MD5:	38EEB89CD4BA71ECAB4599EB6A42F8F7
SHA1:	605E9AAC8C5364771FF45466DFF0B71C096EC0FB
SHA-256:	0D144E2EAB83973D4C42436634F45F3EEAB2287F5A0244085C828B3243644AAC
SHA-512:	8DCFF5C08BE8A1F0BDDEAB7720B3D019DC1C3B7A11B97E26212923801BD4CFB6EFD0D5F392BCFB01999CBBFA182A06C6C239882FD9AEE91E3472332E59C0F421
Malicious:	false
Preview:	..<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">..<head><title>...Microsoft Online Password Reset..</title><meta http-equiv="x-ua-compatible" content="IE=9" /><meta http-equiv="Expires" content="0" /><meta http-equiv="Pragma" content="no-cache" /><meta http-equiv="Cache-Control" content="no-store, no-cache" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta name="robots" content="noindex, nofollow, NOODP, NOYDIR" /><meta name="viewport" content="width=device-width, initial-scale=1" /><link id="FavoriteIcon" rel="Shortcut Icon" type="image/x-icon" href="../favicon.ico?v=1342177280" />.... <script src="//ajax.aspnetcdn.com/ajax/jQuery/jquery-3.6.0.min.js" type="text/javascript"></script>.. <script type="text/javascript">window.jQuery \|\| document.write('<script type="text/javascript" src="../js/jquery-3.6.0.min.js">\

Chrome Cache Entry: 108

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 513
Category:	downloaded
Size (bytes):	276
Entropy (8bit):	7.316609873335077
Encrypted:	false
SSDEEP:	6:XtqDFR4m68lkQfanvbEzXI0iP427cnLPw6/aqqmb/:XUD34sMDaXI0demb/
MD5:	4E3510919D29D18EEB6E3E8B2687D2F5
SHA1:	31522A9EC576A462C3F1FFA65C010D4EB77E9A85
SHA-256:	1707BE1284617ACC0A66A14448207214D55C3DA4AAF25854E137E138E089257E
SHA-512:	DFAD29E3CF9E51D1749961B47382A5151B1F3C98DEABF2B63742EB6B7F7743EE9B605D646A730CF3E087D4F07E43107C8A01FF5F68020C7BF933EBA370175682
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg
Preview:	...........Q=o. ..+.......=t....E.k["...../g;n.,....{.......2....e.......J).8..).5.....>,.ih...^s...&M.Ta..m........C.N5.G.!.-...}.9.~........u.3..@i..qK.U.......E.........S.......A.....6...G..g...,f3g.5F..I...G@<..L.:`.N&.?R....d..(.7._....z.L.......s....

Chrome Cache Entry: 109

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	26951
Entropy (8bit):	4.514992390210281
Encrypted:	false
SSDEEP:	384:jMgviMjM4if38GmhXeC1QRwweTkBE9wbOY4Jf/JhRZ5h+73hNVt8oC4veONhLYVi:CLEiJSdo11vIYHqb5Klo8v
MD5:	B3D7A123BE5203A1A3F0F10233ED373F
SHA1:	F4C61F321D8F79A805B356C6EC94090C0D96215C
SHA-256:	EF9453F74B2617D43DCEF4242CF5845101FCFB57289C81BCEB20042B0023A192
SHA-512:	A01BFE8546E59C8AF83280A795B3F56DFA23D556B992813A4EB70089E80621686C7B51EE87B3109502667CAF1F95CBCA074BF607E543A0390BF6F8BB3ECD992B
Malicious:	false
URL:	https://passwordreset.microsoftonline.com/ScriptResource.axd?d=OQP9deB7nPNWTNnlbA3Oe7VYnAefc2EyWwA43KwE8yhC8e8iF5MPkyZjWvVvcL8kGhMPhWhQWFSvvC24miZnPZLzqFYmW79woKiFWo_G2e8TAeSM3oiKZjCQ_R2dMQOzil0PEOqwwbswY5sdhYFN_0-RJniS8fwWJU916l5F7idl-vbk2qoPqmMcdO8MDro4tpTcvyDMjJYEbFi3phG49w2&t=ffffffffedc3492c
Preview:	var Page_ValidationVer = "125";..var Page_IsValid = true;..var Page_BlockSubmit = false;..var Page_InvalidControlToBeFocused = null;..var Page_TextTypes = /^(text\|password\|file\|search\|tel\|url\|email\|number\|range\|color\|datetime\|date\|month\|week\|time\|datetime-local)$/i;..function ValidatorUpdateDisplay(val) {.. if (typeof(val.display) == "string") {.. if (val.display == "None") {.. return;.. }.. if (val.display == "Dynamic") {.. val.style.display = val.isvalid ? "none" : "inline";.. return;.. }.. }.. if ((navigator.userAgent.indexOf("Mac") > -1) &&.. (navigator.userAgent.indexOf("MSIE") > -1)) {.. val.style.display = "inline";.. }.. val.style.visibility = val.isvalid ? "hidden" : "visible";..}..function ValidatorUpdateIsValid() {.. Page_IsValid = AllValidatorsValid(Page_Validators);..}..function AllValidatorsValid(validators) {.. if ((typeof(validators) != "undefined") && (validators != null)) {

Chrome Cache Entry: 110

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (54108)
Category:	downloaded
Size (bytes):	54147
Entropy (8bit):	5.276423708593586
Encrypted:	false
SSDEEP:	768:yKpqe+vlxUDY+ujgCFCUG3WiqbfwNz2mPoPyC5m7QFRYdV6ItsL/1bWZj937ZGLl:vpqFkinP5AOYdVs4Rhw
MD5:	271D193B038C85D1FE7EF5FD6121C793
SHA1:	51EBED891D546FA572890D7630F230DC1AD082F2
SHA-256:	F5B2B26071BB59F466683356DF11B5392614CF6966586917990C65D48AF0DCB9
SHA-512:	0DD5FF6301797B8D4E93E008F351C8F1FE7FE54B28C42553F46298651233A4BC5BF13C33E19C0F3D7FA340CC0C84D43D6F9FB30C479F73E75CBD0A0F586359DE
Malicious:	false
URL:	https://cdn.jsdelivr.net/npm/axios/dist/axios.min.js
Preview:	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).axios=t()}(this,(function(){"use strict";function e(e){var r,n;function o(r,n){try{var a=e[r](n),u=a.value,s=u instanceof t;Promise.resolve(s?u.v:u).then((function(t){if(s){var n="return"===r?"return":"next";if(!u.k\|\|t.done)return o(n,t);t=e[n](t).value}i(a.done?"return":"normal",t)}),(function(e){o("throw",e)}))}catch(e){i("throw",e)}}function i(e,t){switch(e){case"return":r.resolve({value:t,done:!0});break;case"throw":r.reject(t);break;default:r.resolve({value:t,done:!1})}(r=r.next)?o(r.key,r.arg):n=null}this._invoke=function(e,t){return new Promise((function(i,a){var u={key:e,arg:t,resolve:i,reject:a,next:null};n?n=n.next=u:(r=n=u,o(e,t))}))},"function"!=typeof e.return&&(this.return=void 0)}function t(e,t){this.v=e,this.k=t}function r(e){var r={},n=!1;function o(r,o){return n=!0,o=new Promise((fu

Chrome Cache Entry: 111

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	12980
Entropy (8bit):	4.656952280411437
Encrypted:	false
SSDEEP:	384:QjJmcs01WskN59g1+VW1aEV4xvbw94l1R5SUcZEWajJIcjqTqxBojafes0OPUE9h:t4i7l1rSVajJWjs0O8E9h
MD5:	8EDFCD3F7A179CFF6B123DFF50F29770
SHA1:	7A2D9BB4B9F6072AB3049E6421021A5BA0A3DADF
SHA-256:	D0B747C7F7414A08B0D5107832B2F4BB44A9BB4A3AAD28390F58EDE8BBEA6AE1
SHA-512:	169D1C71078DCB1C65B3CBAFBA3379B94718D6C1E472990666430A6B2C0483CC9B27E13820A29D2DCA2364D3CD3F7D2ECDED48B9ACF406BF74CB505489FB9503
Malicious:	false
URL:	https://passwordreset.microsoftonline.com/js/Button.js?v=1342177280
Preview:	.//------------------------------------------------------------..// Copyright (c) Microsoft Corporation. All rights reserved...//------------------------------------------------------------....var Button = new Object();....Button.ActiveButton = null;..Button.FocusButton = null;..Button.DefaultButton = null;..Button.CancelButton = null;..Button.ActivatedButtonID = null;..Button.Groups = {};....Button.SetText = function(id, text) {.. var button = document.getElementById(id);.. if (button != null) {.. for (var i = 0; i < button.children.length; i++) {.. var ch = button.children[i];.. if (ch.tagName.toLowerCase() == 'span') {.. ch.innerHTML = text; //// TODO: this causes the text wrapped with an <a> tag to get inserted in Firefox, which needs to get fixed... break;.. }.. }.. }.. var span = document.getElementById(id + '_disabled');.. if (span != null) {.. for (var i = 0; i < span.childr

Chrome Cache Entry: 112

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65354)
Category:	downloaded
Size (bytes):	85875
Entropy (8bit):	4.6731170332047824
Encrypted:	false
SSDEEP:	768:ZPcr8JUkZrpULKt4bDcf3oQpeqfZs0BWeUz5+XIHx5qkgwTz:hrpEKt4moUeqfZbc5+XIHZz
MD5:	5605C44F8B24EA5DE37A959955B71EB6
SHA1:	043A332E4F555CC0BFD35E451BE955B4B93966A0
SHA-256:	F643D6FE7E679F9DE3E16311600C5EF5CD6B098F7A3A8828FCC29255D2B33E62
SHA-512:	74F5D8703B9BFDA79BD3C73ADE346AFE4E8668A71C976E7A250CBF0273AAEC2027119F45CD22FDC126DC664329E11DBABC1B0C2C5607E2443AEFF6DB57C5DA09
Malicious:	false
URL:	https://cdn.jsdelivr.net/npm/bootstrap-icons@1.11.3/font/bootstrap-icons.min.css
Preview:	/!. Bootstrap Icons v1.11.3 (https://icons.getbootstrap.com/). * Copyright 2019-2024 The Bootstrap Authors. * Licensed under MIT (https://github.com/twbs/icons/blob/main/LICENSE). /@font-face{font-display:block;font-family:bootstrap-icons;src:url("fonts/bootstrap-icons.woff2?dd67030699838ea613ee6dbda90effa6") format("woff2"),url("fonts/bootstrap-icons.woff?dd67030699838ea613ee6dbda90effa6") format("woff")}.bi::before,[class=" bi-"]::before,[class^=bi-]::before{display:inline-block;font-family:bootstrap-icons!important;font-style:normal;font-weight:400!important;font-variant:normal;text-transform:none;line-height:1;vertical-align:-.125em;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.bi-123::before{content:"\f67f"}.bi-alarm-fill::before{content:"\f101"}.bi-alarm::before{content:"\f102"}.bi-align-bottom::before{content:"\f103"}.bi-align-center::before{content:"\f104"}.bi-align-end::before{content:"\f105"}.bi-align-middle::before{content:"\f106"}.bi-align-start

Chrome Cache Entry: 113

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.899655489292003
Encrypted:	false
SSDEEP:	3:mSvjnSkkanSiJm8hgjGokRa+:mSvWBanSqLhWxG9
MD5:	95F70C7AF89417898D46638F9DBA9674
SHA1:	09D6848E309EBD8E1003413E23D9D9AE4811F857
SHA-256:	06BFDD4024B0119F18A63E7D39DF0B772FA40F4AF57719640F46D0B1678B503A
SHA-512:	C6A95DB3C9CE1812D0FE4CDCB360545730B9CD42A2A7EC009F19653C13D78124CC5479DDA8E326697241D5902B57485187CA682884F22BA6C10DEF90FDEF06B2
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgldohtJAGp5cxIFDVDyl8ESBQ1Xevf9EgUNz05QmBIXCaav3e7uV5scEgUNX1f-DRIFDdRtqt0=?alt=proto
Preview:	ChsKBw1Q8pfBGgAKBw1Xevf9GgAKBw3PTlCYGgAKEgoHDV9X/g0aAAoHDdRtqt0aAA==

Chrome Cache Entry: 114

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 115

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1561
Entropy (8bit):	7.762338770217686
Encrypted:	false
SSDEEP:	48:c/CeK/fE+XoVldIkPdTWbuf173xX964boBdIhLE:ntcx/Iksbuf17f64borIK
MD5:	8DC34013E911C5F68FC2BCA0400CB06F
SHA1:	16BAFA91AF100D65C4945F04E0C6E1643B98CF00
SHA-256:	795029D360C3D16233FCE96F1BFF13C261535C0885FAE806CFF766F32D96BCEE
SHA-512:	83ACA42A30BFD629BC1E88D3ED154475E7949C1B154D19E6C9EF1DE825BA7967C0B6DA9EE79E7B420668242CCE5931DF344C97278A254F0A72C3D09EABED6051
Malicious:	false
Preview:	.PNG........IHDR...<...<.....:..r....sBIT....\|.d.....pHYs...........S.....tEXtCreation Time.05/06/16...o....tEXtSoftware.Adobe Fireworks CS6.....qIDATh..=l.E.....H..H*.\|... ...&.D..).@....&...N....)_.E ...(.p...p(H...Ht... ..0............i.}s.....{`ss....;.......:...u..."....Az.r.%.9.\|....wU.j...o....N4...~....g.u.=`.;..9.7.%....Ad#......9....~7.....&.a........`]x^D....&,"..kv.l..K.S+!....#{.xm.;..%.+F<.\..#...bN...2...\.".I..U]..#.dWy$."r.2;Z...w)oD..H..u..M.'.k70.<4aG..`'~......k31W.2!Ue.A"..j....X..C...dNUd.... .j.\|c."..../..P.MXD......C`>7Y.K...n.....U..#..^4....Uu...Q.);.`9q.53..n.@.......A6.E,6.-d; ........nl.>..."..N7..9\6.....p^a..4aG...3...gUu#..j...2............f.....^.)...Udo'&..G.C.Z...L).....".t...pCD..n..a.....E....F...o.k.Y+b...[...gT..... ...]....V..m.!\..SCwh8w..J^.3N........\.W.....3.....lP.Da........-..........@_...i......r..%..)E.Q...3..M..o.$...`...".......-/EHIDZ.q.MC.......D.Q..".. ..#...................1...p.x?dKP.=...{u\.

Chrome Cache Entry: 116

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
URL:	https://0obt.menus-unlimited.com/rep_emails.txt?a=1726849134833
Preview:	[]

Chrome Cache Entry: 117

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 288 x 28, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2541
Entropy (8bit):	7.894231089291769
Encrypted:	false
SSDEEP:	48:nz7YU7DapEZJ84K4CcNqqdBSJVXYOmq0BapDhNalUT9crjLpDfh7:nz7JXaqA4/CcNqqdEJV1KwDaJBDf5
MD5:	7CFED69C38AC3D0F1871C3622AB7B5C3
SHA1:	1F8CDCC603A7C70119F3DFB7AAF959BD6C69A50B
SHA-256:	6C8831549D1EC90782A532B43C52F45E1FC0737F6873EA156237B0A59401A7F2
SHA-512:	60BCD6CC91D038535936FBD77250C80E8FCFC156A49112AD6C72D14ACFF4B21C21A2DA4F176CD3B635806997434D0A625DBE582B802316F6537ABA3037FF622A
Malicious:	false
URL:	https://aadcdn.msauthimages.net/dbd5a2dd-rwon5nawlkmsrpyqm6e9pfempz3zcctnzk8qulr-p2o/logintenantbranding/0/bannerlogo?ts=636705652316533836
Preview:	.PNG........IHDR... ..........Lb.....tEXtSoftware.Adobe ImageReadyq.e<....IDATx..]Mr.8.VR...s.....z...=...'.N..z..}W....9A<........XH...d=..4.~U.U`?.O...#.....i..VZ...&h..VZ.j..V~;....8..Qr.OK.5N. 9.....ko.M...1..E...M.?R.r...$<..L...XM....... .....D......v.^..;...g.Uv..............`....o.max..........x."F.}..I.sM..nNA.R..v..x.&.....QL?..9.!......u.L..sGH.f..rr+#O........k..3..\..."`).ONe^p4.IPb...s` ,J....8B[.A.h.+@.[V7D>..\|.Y#.4...3.6,...UcP`D.p..!.[.L.MP...kU..qr.j.........D.[.z..'...(...>p.."rX..,%..M...........4;.!.6.g.1.2.....$..x<m+#....xi.C.........8.J.>...C..%.N<.1Ve.t...#.\|.].%g...[:V/(.L..I.Y.ZO.I.G`..GI..y,.r....}p.yY.:\..DZ/G..k......I. .p....5...&.S{.............[e. ..K..R.9....6.....#.. .>...#...U.".... .&.vF(...r{..._.}!.u.......sw<XJ.."..}y.&.......m.).E..q.Z.......~]......{$....0...o...FE.r...e..Ft...Y..vI..E....L>../..f.GD.@azP ..~_..T.s...(.;5&ggv.......%D...\|.8,.9..".WR..k9.8.Z.b...4,M..k....$D..S..s....i.....

Chrome Cache Entry: 118

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	310
Entropy (8bit):	3.4574866513230633
Encrypted:	false
SSDEEP:	6:YQpWPlmf6o/tJHJHvX7nKPe2X3hxQjVDq0SM/HBmU/5JWBiM9v+ZS/HhY:YQKloZJBrnIzX3hxaMMPcU/XWP9v+d
MD5:	D4544556EAD1BE1C27A556A421B41737
SHA1:	6685834678D0217110F376C8EAB33162413519D7
SHA-256:	14BA7F448546F847A2DD188EE53A0878749590C140F0B3A2ACA465CD0FD2E4C8
SHA-512:	E7A6FBBA4CC24CBFE57D9774171E1317B17D038B4F7A951994A9DDF048E96EC0BB65A6D9582645F97110ECCC7F4CC94974068FE1CAD0D78F444A42ED827E8BE9
Malicious:	false
Preview:	{"8":"%6","9":"%7","10":"%8","11":"%9","12":"%10","13":"%0","14":"%5","15":"%1","16":"%2","17":"%3","18":"%4","21":"\/","22":"%1%","23":"%\/%","24":"$701","25":"$702","26":"$703","27":"$704","28":"$705","29":"$706","30":"$707","31":"$708","32":"$709","33":"$710","34":"\/\/\/\/","35":"gen","36":"#","37":"\/-"}

Chrome Cache Entry: 119

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89664
Entropy (8bit):	5.290543045467053
Encrypted:	false
SSDEEP:	1536:SjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQvg:SdeIygP3fulzcsz8jlvaDioQ47GKH
MD5:	00727D1D5D9C90F7DE826F1A4A9CC632
SHA1:	EA61688671D0C3044F2C5B2F2C4AF0A6620AC6C2
SHA-256:	A3CF00C109D907E543BC4F6DBC85EB31068F94515251347E9E57509B52EE3D74
SHA-512:	69528A4518BF43F615FB89A3A0A06C138C771FE0647A0A0CFDE9B8E8D3650AA3539946000E305B78D79F371615EE0894A74571202B6A76B6EA53B89569E64D5C
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/jquery/3.6.1/jquery.min.js
Preview:	/! jQuery v3.6.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),v={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 120

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 64x64, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	24038
Entropy (8bit):	5.992474931914016
Encrypted:	false
SSDEEP:	384:cLU4fKWVUvyZk56/1+fZfMj8hTb5nz0bnOWWWWWWWWWWWWWWWWWWWWWWWWWqvESs:cLxfKW6yZk8/iZfMjYxnzonm9MaKcuwW
MD5:	877784A5F5808CEFA2B61E73BFCF8EAE
SHA1:	6A0E7EDA2734D7BBBA3CE38D37B347DF001B1DBF
SHA-256:	BE7F0632337BC381D4962125545A5CC3C1E84E2D03DBDB97AB3D79AD78B91B6D
SHA-512:	DABFFC928F7ED2A2D05003DAEF643806BD1CEC6B98E705F7415A82AFE7034F4E1E8A70C5AE69B094A948EEDAB4E8B76DCF72DF881DA092FE4AB76DA0EEFB8C3C
Malicious:	false
URL:	https://passwordreset.microsoftonline.com/favicon.ico?v=1342177280
Preview:	......@@.... .(@..F... .... .(...n@........ .(....P........ .(....Y..(...@......... ............................................................W.X..~S...W...X...X...X..X..V..p...}.............................................................kQ.W*..S$..wK..k..k..k..m..m..p..q..q..r..~......".........................................................................t..s'..^...\...^..._..._...`...a...b...e....M.................................................................fF.^...sB...m...v...w...x...x...y...{...{............%...#..."..."... ......................................................................v.._..xL...V...X...X...Y...Z...Z...\...`..}N...k#....................................................................rO4.Y+...T...k...q...q...p...q...q...u...}...."...$... .................................................................................j...S...T...X...Z...Y...Z...[...Z...]..._..{O...o?...........................................

Chrome Cache Entry: 121

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 17 x 25, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	471
Entropy (8bit):	7.197252382638843
Encrypted:	false
SSDEEP:	12:6v/7eM/H/HTOlHAbsnwpncDR1pxInjqrrgRRIEw6Jz:qHTO0Gwpnc7pOnjqngRR1nJz
MD5:	C651D60A08FF0F579E2EB9BE6043A3C6
SHA1:	E7BCBB896EEA20A4DC68EDD2EF5B336E92690A55
SHA-256:	7B4B6ADAA1DDA648143A18A52B51DFAAB54775BDB6284DFF5C869235CD385230
SHA-512:	017C29423F096A45AD5D1002B2F14E27A8298F144A962B78F46A96626A1027D5E4EC57468CD8F8C5B9E97461FA651452A1786CD9F5F76264652D03F55D516138
Malicious:	false
Preview:	.PNG........IHDR..............>.....sRGB.........gAMA......a.....pHYs..........+......tEXtSoftware.Adobe ImageReadyq.e<...GIDAT8O...@...;Wa.`.X....b....... A.F....K...a..t*{3.e...K.....C..0.....)~;.eYvP....L}.KAEQP.4..WYd....mV]..m....$M...`...C.$R.......`..dM.T....,RU..TU..`.'0.!...D[`p..W)D8,dv]Wt....\^v.$.s..`.i...!...D..e$......$.8../..8....;..\6,...f\|....n.....e..M...g.O.9....q..&........0.w...k...z....\.iZ..c.;.F...Uq7.'Y....X ....IEND.B`.

Chrome Cache Entry: 122

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 123

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 4.2.9], baseline, precision 8, 50x28, components 3
Category:	downloaded
Size (bytes):	987
Entropy (8bit):	6.922003634904799
Encrypted:	false
SSDEEP:	24:PJjxEK0nWpBzo0XxDuLHeOWXG4OZ7DAJuLHenX3D+VRmK9cR+w/b:lxEX4OuERAVwR/QP/b
MD5:	E58AAFC980614A9CD7796BEA7B5EA8F0
SHA1:	D4CAC92DCDE0CAF7C571E6D791101DA94FDBD2CA
SHA-256:	8B34A475187302935336BF43A2BF2A4E0ADB9A1E87953EA51F6FCF0EF52A4A1D
SHA-512:	2DAC06596A11263DF1CFAB03EDA26D0A67B9A4C3BAA6FB6129CDBF0A157C648F5B0F5859B5CA689EFDF80F946BF4D854BA2B2C66877C5CE3897D72148741FCC9
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/appbackgrounds/49-small_e58aafc980614a9cd7796bea7b5ea8f0.jpg
Preview:	......JFIF.....H.H.....fExif..MM..................>...........F.(...........1.........N.......H.......H....paint.net 4.2.9....C....................................................................C.........................................................................2..!............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......[.4..lz.....K.S..p.>.9.r9j..'.\.qrW..mo...X9ZV<./x...EX...m.Prj..A.EtG...K..mr....Lc.T.8...nlY.V.{6...R...]..(.y...)^.5V.IVO.W.B.19.R\...f.U.....'..S:..k.6..).f.n._3*....}.y.8.EusH..y.`.mA...W.}...bL..:..b.<f..(lH#R....v._...........9N~S..

Chrome Cache Entry: 124

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	46376
Entropy (8bit):	4.760560792293901
Encrypted:	false
SSDEEP:	768:QgRN7ChZGd/5zEhQ49zXWV/eTSLtiMK7OQyOYZ:V1d/5edgVrlH
MD5:	DBFAC7887A157C9B73DC42927FC15B74
SHA1:	435FD188BF66F0207EEB298DD13228D17D36E4D1
SHA-256:	FC66E3943BC6EDC7B1F79D952D31DABCBA3BD576190DEEB9A7518CEE6B75C5A1
SHA-512:	C1918B35A03BD2110C2CB4EAD140BA342C54EE7BEE2C1E4B6582B56B86DA93AECDDA92DA626C7B15BDEBC067893ACD354919495551E71EE0C9D5993B43433958
Malicious:	false
Preview:	// WebTrends SmartSource Data Collector Tag..// Version: 8.6.2..// MS Version: 3.2.5..// Tag Builder Version: 3.0..// Created: 04/01/2011..function WebTrends() {.. var that = this;.. if (typeof (gDcsId) != "undefined" && gDcsId) this.dcsid = gDcsId;.. else this.dcsid = "not_a_valid_dcsid";.. if (typeof (gDomain) != "undefined" && gDomain) this.domain = gDomain;.. else this.domain = "m.webtrends.com";.. if (typeof (gTimeZone) != "undefined" && gTimeZone) this.timezone = gTimeZone;.. else this.timezone = -8;.. if (typeof (gFpcDom) != "undefined" && gFpcDom) this.fpcdom = gFpcDom;.. else {.. if (/microsoft.com$/.test(window.location.hostname)) {.. this.fpcdom = ".microsoft.com";.. } else {.. this.fpcdom = window.location.hostname;.. }.. }.. if (typeof (gOffsite) != "undefined" && gOffsite).. if (gOffsite == true \|\| gOffsite == "true") this.fpcdom = "";.. this.navigationtag = "div,table";.. if (typeof

Chrome Cache Entry: 125

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47261)
Category:	downloaded
Size (bytes):	47262
Entropy (8bit):	5.3974731018213795
Encrypted:	false
SSDEEP:	768:+CWIsQ06lHHhw+r9sygguSwodvdq3VE3XYdze9Ddre9eom1CQWpKexThupcubvCR:uQflHBN9sygg1WViPreEM
MD5:	E07E7ED6F75A7D48B3DF3C153EB687EB
SHA1:	4601D83C67CC128D1E75D3E035FB8A3BDFA1EE34
SHA-256:	96BD1C81D59D6AC2EC9F8EBE4937A315E85443667C5728A7CD9053848DD8D3D7
SHA-512:	A0BAF8B8DF121DC9563C5C2E7B6EEE00923A1E684A6C57E3F2A4C73E0D6DD59D7E9952DF5E3CFFFB08195C8475B6ED261769AFB5581F4AB0C0A4CC342EC577C9
Malicious:	false
URL:	https://challenges.cloudflare.com/turnstile/v0/g/ec4b873d446c/api.js
Preview:	"use strict";(function(){function Vt(e,r,a,o,c,l,g){try{var f=e[l](g),p=f.value}catch(s){a(s);return}f.done?r(p):Promise.resolve(p).then(o,c)}function Wt(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var l=e.apply(r,a);function g(p){Vt(l,o,c,g,f,"next",p)}function f(p){Vt(l,o,c,g,f,"throw",p)}g(void 0)})}}function U(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):U(e,r)}function Me(e,r,a){return r in e?Object.defineProperty(e,r,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[r]=a,e}function Fe(e){for(var r=1;r<arguments.length;r++){var a=arguments[r]!=null?arguments[r]:{},o=Object.keys(a);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(a).filter(function(c){return Object.getOwnPropertyDescriptor(a,c).enumerable}))),o.forEach(function(c){Me(e,c,a[c])})}return e}function Rr(e,r){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 126

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65329), with CRLF line terminators
Category:	dropped
Size (bytes):	102801
Entropy (8bit):	5.336080509196147
Encrypted:	false
SSDEEP:	1536:MGLiogSomRYvoGtT+KHsVS0bT79DSsi46j/LPyR7kbE:MGLXGFKT79DSs6WCE
MD5:	C89EAA5B28DF1E17376BE71D71649173
SHA1:	2B34DF4C66BB57DE5A24A2EF0896271DFCA4F4CD
SHA-256:	66B804E7A96A87C11E1DD74EA04AC2285DF5AD9043F48046C3E5000114D39B1C
SHA-512:	B73D56304986CD587DA17BEBF21341B450D41861824102CC53885D863B118F6FDF2456B20791B9A7AE56DF91403F342550AF9E46F7401429FBA1D4A15A6BD3C0
Malicious:	false
Preview:	//----------------------------------------------------------..// Copyright (C) Microsoft Corporation. All rights reserved...//----------------------------------------------------------..// MicrosoftAjax.js..Function.__typeName="Function";Function.__class=true;Function.createCallback=function(b,a){return function(){var e=arguments.length;if(e>0){var d=[];for(var c=0;c<e;c++)d[c]=arguments[c];d[e]=a;return b.apply(this,d)}return b.call(this,a)}};Function.createDelegate=function(a,b){return function(){return b.apply(a,arguments)}};Function.emptyFunction=Function.emptyMethod=function(){};Function.validateParameters=function(c,b,a){return Function._validateParams(c,b,a)};Function._validateParams=function(g,e,c){var a,d=e.length;c=c\|\|typeof c==="undefined";a=Function._validateParameterCount(g,e,c);if(a){a.popStackFrame();return a}for(var b=0,i=g.length;b<i;b++){var f=e[Math.min(b,d-1)],h=f.name;if(f.parameterArray)h+="["+(b-d+1)+"]";else if(!c&&b>=d)break;a=Function._validateParameter(g[b],f

Chrome Cache Entry: 127

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10450)
Category:	downloaded
Size (bytes):	10498
Entropy (8bit):	5.327380141461276
Encrypted:	false
SSDEEP:	192:x9iW+rIadfLTcaTO5BrwjnwSrQ1kPmqQmMjmtmumobU8:x9KVLbw6jqON
MD5:	E0D37A504604EF874BAD26435D62011F
SHA1:	4301F0D2B729AE22ADECE657D79ECCAA25F429B1
SHA-256:	C39FF65E2A102E644EB0BF2E31D2BAD3D18F7AFB25B3B9BA7A4D46263A711179
SHA-512:	EF838FD58E0D12596726894AB9418C1FBE31833C187C3323EBFD432970EB1593363513F12114E78E008012CDEF15B504D603AFE4BB10AE5C47674045ACC5221E
Malicious:	false
URL:	https://ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css
Preview:	a,abbr,acronym,address,applet,b,big,blockquote,body,caption,center,cite,code,dd,del,dfn,div,dl,dt,em,fieldset,form,h1,h2,h3,h4,h5,h6,html,i,iframe,img,ins,kbd,label,legend,li,object,ol,p,pre,q,s,samp,small,span,strike,strong,sub,sup,table,tbody,td,tfoot,th,thead,tr,tt,u,ul,var{background:transparent;border:0;font-size:100%;font:inherit;margin:0;outline:0;padding:0;vertical-align:baseline}body{line-height:1}ol,ul{list-style:none}blockquote,q{quotes:none}blockquote:after,blockquote:before,q:after,q:before{content:"";content:none}:focus{outline:0}ins{text-decoration:none}del{text-decoration:line-through}table{border-collapse:collapse;border-spacing:0}input[type=hidden]{display:none!important}input[type=checkbox],input[type=radio]{border:0!important;margin:0;padding:0}@font-face{font-family:Proxima Nova;font-style:normal;font-weight:400;src:url(../font/assets/proximanova-reg-webfont.9d5837512674046fa816.eot);src:url(../font/assets/proximanova-reg-webfont.9d5837512674046fa816.eot?#iefix) fo

Chrome Cache Entry: 128

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47261)
Category:	dropped
Size (bytes):	47262
Entropy (8bit):	5.3974731018213795
Encrypted:	false
SSDEEP:	768:+CWIsQ06lHHhw+r9sygguSwodvdq3VE3XYdze9Ddre9eom1CQWpKexThupcubvCR:uQflHBN9sygg1WViPreEM
MD5:	E07E7ED6F75A7D48B3DF3C153EB687EB
SHA1:	4601D83C67CC128D1E75D3E035FB8A3BDFA1EE34
SHA-256:	96BD1C81D59D6AC2EC9F8EBE4937A315E85443667C5728A7CD9053848DD8D3D7
SHA-512:	A0BAF8B8DF121DC9563C5C2E7B6EEE00923A1E684A6C57E3F2A4C73E0D6DD59D7E9952DF5E3CFFFB08195C8475B6ED261769AFB5581F4AB0C0A4CC342EC577C9
Malicious:	false
Preview:	"use strict";(function(){function Vt(e,r,a,o,c,l,g){try{var f=e[l](g),p=f.value}catch(s){a(s);return}f.done?r(p):Promise.resolve(p).then(o,c)}function Wt(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var l=e.apply(r,a);function g(p){Vt(l,o,c,g,f,"next",p)}function f(p){Vt(l,o,c,g,f,"throw",p)}g(void 0)})}}function U(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):U(e,r)}function Me(e,r,a){return r in e?Object.defineProperty(e,r,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[r]=a,e}function Fe(e){for(var r=1;r<arguments.length;r++){var a=arguments[r]!=null?arguments[r]:{},o=Object.keys(a);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(a).filter(function(c){return Object.getOwnPropertyDescriptor(a,c).enumerable}))),o.forEach(function(c){Me(e,c,a[c])})}return e}function Rr(e,r){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 129

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 130396, version 1.0
Category:	downloaded
Size (bytes):	130396
Entropy (8bit):	7.998261715330193
Encrypted:	true
SSDEEP:	3072:IBqhyg8Dr/UO5b2uP63F92P/ke/zjK9Ec5DGl0zdxxNSw1F:EsyH/uuOsP37j+NK0zdvNFj
MD5:	CC1E5EDA776BE5F0FF614285C31D4892
SHA1:	020C3C6F9280A315E8425D7F92E15BCD0CDDA1B2
SHA-256:	476ADF42B40325098FCFA8B36AB3E769186BB4F6CE6A249753E2E1A9C22BF99E
SHA-512:	8EA88EB326CE57117A24F88ABF9EF1740FF55A1CF6D09D8BC1E798132D44BF237AECFF44253EF60C9EB3FCE108CF4F7D8EA27E6A763A9338C7D6204247B2CC60
Malicious:	false
URL:	https://cdn.jsdelivr.net/npm/bootstrap-icons@1.11.3/font/fonts/bootstrap-icons.woff2?dd67030699838ea613ee6dbda90effa6
Preview:	wOF2.......\......KT.............................T.`.......`..c.6.$........ ..j....[.....t....J./...}..h......5....5.....S.#.M.g.7.u..n.............Bjswr7.M....O..h.Xk.#4.=..)/.A..zc....D.]Fc.0..'B0uC..T3..BK[..go.Zl.(..6.d..m.7.-........t .+........[X.w.V."...{bk....o....Oez/.O. ...8..d2....;<J)...t.{......cJU.7O.'..s./z8NYQ..P...3..=.??O_"%......WSF..iASN.E...W.Ze5..HLz..lr3.<.....(...l.c...4..1...?........[..~#.l.........7lMd.;.a6O6w.sM...Y.....C..B..(...O.._:+6s..S(.'..g.W.L.d.-j.....l..x@td.Y....D..ut.....P..)..N_.\F.<..A.......RW.'..2..?...%..T..?.....U.o."Qz]e.......D.]..'.k...B..9.?..g.".....$e.&.K..y....'^>.__.[.$.d..]uw..1..ph$FX.'..wI...F.. .p.c'@..c%......CQ(...8p.Zl\..j...m...v........o..jMC:.N..d....a..foC.W..U!.Ty.9._...<D./J.xx~.._..("..i$.J5..j......b.....qw...]...!\Q.%q(.w...-.<..SRA.!%.`!.=q....t..W.t.H....P.g..?'*B./.%0-.m._....+.......?.Iv.v.....f.4ok.w...J.......S...............u.(...P.c.#....../X..[..}&...9..]...VlU...%.

Chrome Cache Entry: 130

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 131

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3005
Entropy (8bit):	4.3348196756520005
Encrypted:	false
SSDEEP:	48:ITWNX9q7aVxyFGwvqNTTswh11KdA/IMUitKhyWirt+NG/BC0/PTfhyr1+18:IiNX9oFG4qTJb0a/IMNURkt6GJZ/7fU7
MD5:	A870B45AC5D6B0D4E18C4829C7B660B4
SHA1:	2D3CA0E1F19EFDEB9B2DD3DCFFB17F8ABA118AA0
SHA-256:	144524233F795D6A425B76F7AE5C0BB622B5F67E2E6AE73532AD526528CA07CF
SHA-512:	295A21307D452F4BF51C62770C6A6B43CDB8B5A6BFA3617E068C8550285252B88F8BBF93A81C39E4BD7F73645EE094EDE0E2733DAFA5094E3EBAE20033363270
Malicious:	false
URL:	https://passwordreset.microsoftonline.com/WebResource.axd?d=YNhUFlNXinz8LgHwbL24RQH-ZbXxyvcr7OOnguhxng8ZuiFTPNJ9QXh8dtoptfX3BeFWG9A9Hk63eLbtbIxk0HvJhkP2FoYJavizwe94hutTawufYPfHJsHAawGlkTxEe6yX2kZBiYdQxI60gLHN2g2&t=638611486905325876
Preview:	function WebForm_FindFirstFocusableChild(control) {.. if (!control \|\| !(control.tagName)) {.. return null;.. }.. var tagName = control.tagName.toLowerCase();.. if (tagName == "undefined") {.. return null;.. }.. var children = control.childNodes;.. if (children) {.. for (var i = 0; i < children.length; i++) {.. try {.. if (WebForm_CanFocus(children[i])) {.. return children[i];.. }.. else {.. var focused = WebForm_FindFirstFocusableChild(children[i]);.. if (WebForm_CanFocus(focused)) {.. return focused;.. }.. }.. } catch (e) {.. }.. }.. }.. return null;..}..function WebForm_AutoFocus(focusId) {.. var targetControl;.. if (__nonMSDOMBrowser) {.. targetControl = document.getElementById(focusId);.. }.. else {.. targetContro

Chrome Cache Entry: 132

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39257), with CRLF line terminators
Category:	dropped
Size (bytes):	40326
Entropy (8bit):	5.245555585297941
Encrypted:	false
SSDEEP:	384:bvrc3TrJ1vMZCKZ4pLRy6DkfDLcbTzcXanT2rxb64aKQr1vySAwBaPUge6ydE:bTaYB4Hy7mTzcaTKStrwSAwBaPUTdE
MD5:	DA9DC1C32E89C02FC1E9EEB7E5AAB91E
SHA1:	3EFB110EFA6068CE6B586A67F87DA5125310BC30
SHA-256:	398CDF1B27EF247E5BC77805F266BB441E60355463FC3D1776F41AAE58B08CF1
SHA-512:	D4730EBC4CA62624B8300E292F27FD79D42A9277E409545DF7DC916189ED9DF13E46FAA37E3924B85A7C7EA8C76BF65A05ECA69B4029B550430536EC6DF8552A
Malicious:	false
Preview:	//----------------------------------------------------------..// Copyright (C) Microsoft Corporation. All rights reserved...//----------------------------------------------------------..// MicrosoftAjaxWebForms.js..Type._registerScript("MicrosoftAjaxWebForms.js",["MicrosoftAjaxCore.js","MicrosoftAjaxSerialization.js","MicrosoftAjaxNetwork.js","MicrosoftAjaxComponentModel.js"]);Type.registerNamespace("Sys.WebForms");Sys.WebForms.BeginRequestEventArgs=function(c,b,a){Sys.WebForms.BeginRequestEventArgs.initializeBase(this);this._request=c;this._postBackElement=b;this._updatePanelsToUpdate=a};Sys.WebForms.BeginRequestEventArgs.prototype={get_postBackElement:function(){return this._postBackElement},get_request:function(){return this._request},get_updatePanelsToUpdate:function(){return this._updatePanelsToUpdate?Array.clone(this._updatePanelsToUpdate):[]}};Sys.WebForms.BeginRequestEventArgs.registerClass("Sys.WebForms.BeginRequestEventArgs",Sys.EventArgs);Sys.WebForms.EndRequestEventArgs=fun

Chrome Cache Entry: 133

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	23063
Entropy (8bit):	4.7535440881548165
Encrypted:	false
SSDEEP:	384:GvUzYI+Vi4g1V5it1ONhA6w+Kv8i/4CYzLKL4DrLU0iTxZTAzIzrwDlTWMClQip9:bkON69kClQq8hDRJHp2tWU25Zt/gREVG
MD5:	90EA7274F19755002360945D54C2A0D7
SHA1:	647B5D8BF7D119A2C97895363A07A0C6EB8CD284
SHA-256:	40732E9DCFA704CF615E4691BB07AECFD1CC5E063220A46E4A7FF6560C77F5DB
SHA-512:	7474667800FF52A0031029CC338F81E1586F237EB07A49183008C8EC44A8F67B37E5E896573F089A50283DF96A1C8F185E53D667741331B647894532669E2C07
Malicious:	false
URL:	https://passwordreset.microsoftonline.com/WebResource.axd?d=PZp-UguzV3eiIgC9jthUzRVid1Zp7Yrh6GnWr6UFT7HZeGKMaINHyYeiOoYl901XG1SgokATq5Nqn3NEpiSXniqMwkj7V_kjzBmM_w8PfSJW9srpOcEZZbp1FPwrN8XzdR0AFY0bHhANU64v3ZJk5Q2&t=638611486905325876
Preview:	function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) {.. this.eventTarget = eventTarget;.. this.eventArgument = eventArgument;.. this.validation = validation;.. this.validationGroup = validationGroup;.. this.actionUrl = actionUrl;.. this.trackFocus = trackFocus;.. this.clientSubmit = clientSubmit;..}..function WebForm_DoPostBackWithOptions(options) {.. var validationResult = true;.. if (options.validation) {.. if (typeof(Page_ClientValidate) == 'function') {.. validationResult = Page_ClientValidate(options.validationGroup);.. }.. }.. if (validationResult) {.. if ((typeof(options.actionUrl) != "undefined") && (options.actionUrl != null) && (options.actionUrl.length > 0)) {.. theForm.action = options.actionUrl;.. }.. if (options.trackFocus) {.. var lastFocus = theForm.elements["__LASTFOCUS"];.. if ((typeo

Chrome Cache Entry: 134

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 89 x 18, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1805
Entropy (8bit):	7.265265285391204
Encrypted:	false
SSDEEP:	24:oV1hpunQWwjx82lY2T32HEV8KJyJ3VAyKOGpxbAKJcyIXRP6VEBxX4pAE60KKAU9:4itNn2VMJ3R6breHDBBThFtYeD5B2
MD5:	BC89C1FBFBC227DC5A7ED9B2797E240D
SHA1:	8A9390297FDD0963C466CF2FD35D5B1F88A46B6A
SHA-256:	744A8CD0A4D15DFCF4A5D2E832FF556D950F8AF24D7B66104AB2EF4FE2605D9A
SHA-512:	C18F6B22F4AC5040E3FEBE8034AD3A3A3EF32CF3384BE6C3144B2EB04080F03111743D5B30AF3A1343AFD68A20AAE5972422C724107243D00CD9CF263DDC10C7
Malicious:	false
Preview:	.PNG........IHDR...Y.........0.r.....sRGB.........gAMA......a.....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:BABFACAF901511E2BD4FDE5C526470CF" xmpMM:DocumentID="xmp.did:BABFACB0901511E2BD4FDE5C526470CF"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:BABFACAD901511E2BD4FDE5C526470CF" stRef:documentID="xmp.did:BABFACAE901511E2BD4FDE5C526470CF"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..R....fIDATXG.mq[1.E.!...3&...P.................3..~L..q.O..t..{...v?..n.....b#.-.i..

Chrome Cache Entry: 135

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

Chrome Cache Entry: 136

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47261)
Category:	downloaded
Size (bytes):	47262
Entropy (8bit):	5.3974731018213795
Encrypted:	false
SSDEEP:	768:+CWIsQ06lHHhw+r9sygguSwodvdq3VE3XYdze9Ddre9eom1CQWpKexThupcubvCR:uQflHBN9sygg1WViPreEM
MD5:	E07E7ED6F75A7D48B3DF3C153EB687EB
SHA1:	4601D83C67CC128D1E75D3E035FB8A3BDFA1EE34
SHA-256:	96BD1C81D59D6AC2EC9F8EBE4937A315E85443667C5728A7CD9053848DD8D3D7
SHA-512:	A0BAF8B8DF121DC9563C5C2E7B6EEE00923A1E684A6C57E3F2A4C73E0D6DD59D7E9952DF5E3CFFFB08195C8475B6ED261769AFB5581F4AB0C0A4CC342EC577C9
Malicious:	false
URL:	https://challenges.cloudflare.com/turnstile/v0/g/ec4b873d446c/api.js
Preview:	"use strict";(function(){function Vt(e,r,a,o,c,l,g){try{var f=e[l](g),p=f.value}catch(s){a(s);return}f.done?r(p):Promise.resolve(p).then(o,c)}function Wt(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var l=e.apply(r,a);function g(p){Vt(l,o,c,g,f,"next",p)}function f(p){Vt(l,o,c,g,f,"throw",p)}g(void 0)})}}function U(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):U(e,r)}function Me(e,r,a){return r in e?Object.defineProperty(e,r,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[r]=a,e}function Fe(e){for(var r=1;r<arguments.length;r++){var a=arguments[r]!=null?arguments[r]:{},o=Object.keys(a);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(a).filter(function(c){return Object.getOwnPropertyDescriptor(a,c).enumerable}))),o.forEach(function(c){Me(e,c,a[c])})}return e}function Rr(e,r){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 137

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	dropped
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 138

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 139

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 89 x 18, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1805
Entropy (8bit):	7.265265285391204
Encrypted:	false
SSDEEP:	24:oV1hpunQWwjx82lY2T32HEV8KJyJ3VAyKOGpxbAKJcyIXRP6VEBxX4pAE60KKAU9:4itNn2VMJ3R6breHDBBThFtYeD5B2
MD5:	BC89C1FBFBC227DC5A7ED9B2797E240D
SHA1:	8A9390297FDD0963C466CF2FD35D5B1F88A46B6A
SHA-256:	744A8CD0A4D15DFCF4A5D2E832FF556D950F8AF24D7B66104AB2EF4FE2605D9A
SHA-512:	C18F6B22F4AC5040E3FEBE8034AD3A3A3EF32CF3384BE6C3144B2EB04080F03111743D5B30AF3A1343AFD68A20AAE5972422C724107243D00CD9CF263DDC10C7
Malicious:	false
URL:	https://passwordreset.microsoftonline.com/images/header_Microsoft.png
Preview:	.PNG........IHDR...Y.........0.r.....sRGB.........gAMA......a.....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:BABFACAF901511E2BD4FDE5C526470CF" xmpMM:DocumentID="xmp.did:BABFACB0901511E2BD4FDE5C526470CF"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:BABFACAD901511E2BD4FDE5C526470CF" stRef:documentID="xmp.did:BABFACAE901511E2BD4FDE5C526470CF"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..R....fIDATXG.mq[1.E.!...3&...P.................3..~L..q.O..t..{...v?..n.....b#.-.i..

Chrome Cache Entry: 140

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1062)
Category:	downloaded
Size (bytes):	1067
Entropy (8bit):	5.520084525498017
Encrypted:	false
SSDEEP:	24:MfQWXuHtn0HUBHslgT9lCuAnfm2aMRsZVuoB7HHHHHHHYqmfffffX:MoUu5vKlgZ01nfm2aMRsbuSEqmfffffX
MD5:	7BEB7454487BC06B4D4457EB9BA951D8
SHA1:	F94E93828228AC4D2DE3A4A70E0951A70FF2D0FE
SHA-256:	1029F19D60C27FF2BD482559D232EC568E94AA5FF6C7BC02BA7741FF50BF4D1F
SHA-512:	CAB05609465E82A083C8C73963571CEC9E146BDC4DCDEBA2D0E69C91FBE70F12C105B883F5981275E5A54182AF0CC1D0D61C2489A0B9E75D78CBEAA8074A68B5
Malicious:	false
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["",["hamster kombat daily combo cards","fbi raids rahal letterman lanigan racing","severe weather minnesota thunderstorms","port workers strike","ps5 console 30th anniversary edition","patriots vs jets thursday night football","future mixtape pluto album","chinese zoo painted dogs like pandas"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google:suggestdetail":[{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"google:entityinfo":"Cg0vZy8xMXdoZ2JfdGNsEg1NaXh0YXBlIFBsdXRvOhpmdXR1cmUgbWl4dGFwZSBwbHV0byBhbGJ1bVJOZ3Nfc3NwPWVKemo0dFZQMXpjMExNOUlUNG92U2M0eFlQU1NTaXN0S1MxS1Zjak5yQ2hKTEVoVktNZ3BMY2xYU014SktzMEZBRUZhRDFZcAI\u003d","zl":10002},{"zl":10002}],"google:suggestrelevance":[1257,1256,1255,1254,1253,1252,1251,1250],"google:suggestsubtypes":[[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362]],"google:suggesttype":[

Chrome Cache Entry: 141

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 59, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPl0/Q2/6yxl/k4E08up:6v/lhPzu7Tp
MD5:	7168F2F48463EB923D7228C3625F0D7F
SHA1:	AF7459C0828D408814422B96406D981343DF514F
SHA-256:	2412BF27ADBD73DE57FFFA5EBF7A80E8C5DEFEE1D21B2A2E83144F16D63865E0
SHA-512:	AA44CAE7D31122FFF05659177804440BC994DCC8C0DC2CFA3BEE12B5060A1631B369C7B79255727DB6A5F2B8657EAD8EE5CB627719269096927D75CC72B45DDE
Malicious:	false
Preview:	.PNG........IHDR...0...;.............IDAT.....$.....IEND.B`.

Chrome Cache Entry: 142

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 143

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	12388
Entropy (8bit):	4.879297491400776
Encrypted:	false
SSDEEP:	192:x8GsaherY4/qX0Ii8tPkndq3yFwmLkwjPuqwnESBX3Sri6K4Cl44B6QRguabl7gM:x7iUECDnyQRWiM
MD5:	432C0225D4F996FA527B1DDA37FAF9B1
SHA1:	000B0E2D9E8E70B56FCC4DD5CDE19B6B6DA2CBE4
SHA-256:	E7A2F12C0F145FA465B669F22F47FA9D7C43B6F67D2629FFE92F155C2FB009BF
SHA-512:	F857E83AEC665A71C447CBF4ACC431E38B5DE3875EE673C4A358A793459FBD93E0E0EADF20F435CE5043CF324909D5EC9456208486622BAB789DF7A37EE7302C
Malicious:	false
URL:	https://passwordreset.microsoftonline.com/css/Style.css?v=1342177280
Preview:	* {.. line-break: strict..}....body,..input,..select,..textarea,..button,..legend {.. font-weight: normal;.. font-family: "Segoe UI-Regular-final", "Segoe UI", Segoe, Tahoma, Helvetica, Arial, Sans-Serif;.. font-size: 12px;.. line-height: 19px;.. letter-spacing: .01em;.. color: #666666..}....span.requiredstar {.. font-weight: normal;.. font-family: "Segoe UI-Regular-final", "Segoe UI", Segoe, Tahoma, Helvetica, Arial, Sans-Serif;.. font-size: 12px;.. color: #a80f22..}....h1,..h2,..h3,..h4,..h5,..h6 {.. font-weight: normal;.. font-family: "SegoeUI-Light-final", "Segoe UI Light", "Segoe UI", Segoe, Tahoma, Helvetica, Arial, Sans-Serif;.. color: #333333;.. margin: 0 0 0 0;.. cursor: default..}....h1 {.. font-size: 32px;.. line-height: normal;.. letter-spacing: -.01em;.. padding-left: 0px;.. padding-right: 0px..}....h2 {.. font-size: 22px;.. line-height: normal;.. letter-spacing: -.01em..}....h3 {.. font-size: 13px;

Chrome Cache Entry: 144

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 145

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1280 x 273, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	23655
Entropy (8bit):	7.821178587561659
Encrypted:	false
SSDEEP:	384:UqW6GxKDCQgLcoS7aMzmSSu8UKXLrvmWVo5KOPzA2T2rocND5e3a+/9R7:UqHwKDCQ0SGMiSSu8tnJo5K8U2TBcNd2
MD5:	68D598046405464969EC4CDFA2DE1F48
SHA1:	78875DC44B74F926C8D2F0149E43C7BD7E12EA38
SHA-256:	2FD48DDED56198D0B5905E1A51ACE3F42C9C061E76E4C7ADDF06A59804528327
SHA-512:	A8ED87D0E9451A5B96EE7159923FDAB58964AD8133D3D27E58152138AC9F0919B1B2FDF2F9116879B80149F0AFF8DC9C314B6C0169E82034AFEE3D58402C178C
Malicious:	false
URL:	https://i.ibb.co/bPWvfrC/microlog0.png
Preview:	.PNG........IHDR.............$!......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD............[~IDATx...y..U......l3.v..(.(......0 kd...I.z..I....;.M@v..v....E...d.5..[2=d..:..c./F.Y.........4...wNm_.EJ.m..Z.{P]3...;V.3.....F.....;.?a$.........b............@""""""""..c..........(..$""""""""J1&..........R..@""""""""..c..........(..$""""""""J1&..........R..@""""""""..c..........(..$""""""""J1&..........R..@""""""""..c..........(..$""""""""J1&..........R..@""""""""..c..........(..$""""""""J1&..........R..@""""""""..c..........(..$""""""""J1&..........R..@""""""""..c..........(..$""""""""J1&..........R..@""""""""..c..........(..$""""""""J1&..........R..@""""""""..c..........(..$""""""""J1&..........R..@""""""""..c..........(..$""""""""J1&..........R,..........Q.Z[[...&l,"..L.0ND.....-.j[...1fHD.Tu..,.....m/V.E.r........c....................~..n.>.`S....{.......D._.......c...m.q...."............ .........8.u77..-"G.a......Z..S...t;.. ..d+.c..

Chrome Cache Entry: 146

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	23063
Entropy (8bit):	4.7535440881548165
Encrypted:	false
SSDEEP:	384:GvUzYI+Vi4g1V5it1ONhA6w+Kv8i/4CYzLKL4DrLU0iTxZTAzIzrwDlTWMClQip9:bkON69kClQq8hDRJHp2tWU25Zt/gREVG
MD5:	90EA7274F19755002360945D54C2A0D7
SHA1:	647B5D8BF7D119A2C97895363A07A0C6EB8CD284
SHA-256:	40732E9DCFA704CF615E4691BB07AECFD1CC5E063220A46E4A7FF6560C77F5DB
SHA-512:	7474667800FF52A0031029CC338F81E1586F237EB07A49183008C8EC44A8F67B37E5E896573F089A50283DF96A1C8F185E53D667741331B647894532669E2C07
Malicious:	false
Preview:	function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) {.. this.eventTarget = eventTarget;.. this.eventArgument = eventArgument;.. this.validation = validation;.. this.validationGroup = validationGroup;.. this.actionUrl = actionUrl;.. this.trackFocus = trackFocus;.. this.clientSubmit = clientSubmit;..}..function WebForm_DoPostBackWithOptions(options) {.. var validationResult = true;.. if (options.validation) {.. if (typeof(Page_ClientValidate) == 'function') {.. validationResult = Page_ClientValidate(options.validationGroup);.. }.. }.. if (validationResult) {.. if ((typeof(options.actionUrl) != "undefined") && (options.actionUrl != null) && (options.actionUrl.length > 0)) {.. theForm.action = options.actionUrl;.. }.. if (options.trackFocus) {.. var lastFocus = theForm.elements["__LASTFOCUS"];.. if ((typeo

Chrome Cache Entry: 147

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 513
Category:	dropped
Size (bytes):	276
Entropy (8bit):	7.316609873335077
Encrypted:	false
SSDEEP:	6:XtqDFR4m68lkQfanvbEzXI0iP427cnLPw6/aqqmb/:XUD34sMDaXI0demb/
MD5:	4E3510919D29D18EEB6E3E8B2687D2F5
SHA1:	31522A9EC576A462C3F1FFA65C010D4EB77E9A85
SHA-256:	1707BE1284617ACC0A66A14448207214D55C3DA4AAF25854E137E138E089257E
SHA-512:	DFAD29E3CF9E51D1749961B47382A5151B1F3C98DEABF2B63742EB6B7F7743EE9B605D646A730CF3E087D4F07E43107C8A01FF5F68020C7BF933EBA370175682
Malicious:	false
Preview:	...........Q=o. ..+.......=t....E.k["...../g;n.,....{.......2....e.......J).8..).5.....>,.ih...^s...&M.Ta..m........C.N5.G.!.-...}.9.~........u.3..@i..qK.U.......E.........S.......A.....6...G..g...,f3g.5F..I...G@<..L.:`.N&.?R....d..(.7._....z.L.......s....

Chrome Cache Entry: 148

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 149

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 338 x 72, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4020
Entropy (8bit):	7.929907559552797
Encrypted:	false
SSDEEP:	96:1X+Yg6Iet+ZpBmQKEuhA/4oJqNoCkQV+CX8h:Fg69t+YfPhEBPnC+t
MD5:	36AFB641BECFAD75FED5F4E6E8C39268
SHA1:	2495652F017B7A06D796AFE9C4A06ECD54F9CCFE
SHA-256:	5C2192A3932CB78B431A1AC0F3F3D73414A31C63D5CB279F2687E58C72694200
SHA-512:	08C27020CF80A181B941EE144090FFBDD12ED34BA8CBEC037ACECE63F850FF8A69BE6DDB0EC24F7141C46F27779ED59AF84A55FB367C1B6F8893B444F44C5AF5
Malicious:	false
URL:	https://passwordreset.microsoftonline.com/images/footer_logo_grey_bg.png
Preview:	.PNG........IHDR...R...H.......}.....pHYs..!8..!8.E.1`....sRGB.........gAMA......a....IIDATx...r....[ZZ..V.'0......].......z....M..U.%........C.....}...s...mIV.O5...... ...U.Hq@b......Y..../)..hy.._S......KzK...O\5EQ...(....B.(......(J ...(.......B.(......(J ...(.......B.(..H..EQ.C...V...7.//...~...?.....h4:.@TH.E....}........k.v....L./.@TH...pGN.;.....'.(s...k.......4GTH...'O.~...g[..o.."....l..>.G...;..~...&.....d..u.^F.........M.h.....>.}>..........[......E.b..?.u..{.B........M._.iAh.>~.<S...=.@`e..e....R....._ViA.E....R.@...@..vm.'Ei.v..\>QD..e..R......;o.p{......./^d..TH;.,F>..6...1?..E.p.}..J.p...XD.........7.^b..../.w...........n0.+R.V).J.a..^.X.S..B(..W+++..W. ..e%"Z.[.{,....JQ.iG`....(5..e..`u.*.=.)J...........C.!.@..;$.i.F...W.[....#............k.(J.z....`.dB..)..-H...R.H..O.#V..%......W.4>.'..aJ9.2Q..+.R..id`.x..1.. .../.(J%..>2d.QJ..7.\|.S`..10>..}.M#.....4......<f}..OWO..m.;C[;u.\|P!......L...S.Egr.....3.k.......i.........O...

Chrome Cache Entry: 150

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 17 x 25, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	471
Entropy (8bit):	7.197252382638843
Encrypted:	false
SSDEEP:	12:6v/7eM/H/HTOlHAbsnwpncDR1pxInjqrrgRRIEw6Jz:qHTO0Gwpnc7pOnjqngRR1nJz
MD5:	C651D60A08FF0F579E2EB9BE6043A3C6
SHA1:	E7BCBB896EEA20A4DC68EDD2EF5B336E92690A55
SHA-256:	7B4B6ADAA1DDA648143A18A52B51DFAAB54775BDB6284DFF5C869235CD385230
SHA-512:	017C29423F096A45AD5D1002B2F14E27A8298F144A962B78F46A96626A1027D5E4EC57468CD8F8C5B9E97461FA651452A1786CD9F5F76264652D03F55D516138
Malicious:	false
URL:	https://passwordreset.microsoftonline.com/images/hip_reload.png
Preview:	.PNG........IHDR..............>.....sRGB.........gAMA......a.....pHYs..........+......tEXtSoftware.Adobe ImageReadyq.e<...GIDAT8O...@...;Wa.`.X....b....... A.F....K...a..t*{3.e...K.....C..0.....)~;.eYvP....L}.KAEQP.4..WYd....mV]..m....$M...`...C.$R.......`..dM.T....,RU..TU..`.'0.!...D[`p..W)D8,dv]Wt....\^v.$.s..`.i...!...D..e$......$.8../..8....;..\6,...f\|....n.....e..M...g.O.9....q..&........0.w...k...z....\.iZ..c.;.F...Uq7.'Y....X ....IEND.B`.

Chrome Cache Entry: 151

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 288 x 28, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2541
Entropy (8bit):	7.894231089291769
Encrypted:	false
SSDEEP:	48:nz7YU7DapEZJ84K4CcNqqdBSJVXYOmq0BapDhNalUT9crjLpDfh7:nz7JXaqA4/CcNqqdEJV1KwDaJBDf5
MD5:	7CFED69C38AC3D0F1871C3622AB7B5C3
SHA1:	1F8CDCC603A7C70119F3DFB7AAF959BD6C69A50B
SHA-256:	6C8831549D1EC90782A532B43C52F45E1FC0737F6873EA156237B0A59401A7F2
SHA-512:	60BCD6CC91D038535936FBD77250C80E8FCFC156A49112AD6C72D14ACFF4B21C21A2DA4F176CD3B635806997434D0A625DBE582B802316F6537ABA3037FF622A
Malicious:	false
Preview:	.PNG........IHDR... ..........Lb.....tEXtSoftware.Adobe ImageReadyq.e<....IDATx..]Mr.8.VR...s.....z...=...'.N..z..}W....9A<........XH...d=..4.~U.U`?.O...#.....i..VZ...&h..VZ.j..V~;....8..Qr.OK.5N. 9.....ko.M...1..E...M.?R.r...$<..L...XM....... .....D......v.^..;...g.Uv..............`....o.max..........x."F.}..I.sM..nNA.R..v..x.&.....QL?..9.!......u.L..sGH.f..rr+#O........k..3..\..."`).ONe^p4.IPb...s` ,J....8B[.A.h.+@.[V7D>..\|.Y#.4...3.6,...UcP`D.p..!.[.L.MP...kU..qr.j.........D.[.z..'...(...>p.."rX..,%..M...........4;.!.6.g.1.2.....$..x<m+#....xi.C.........8.J.>...C..%.N<.1Ve.t...#.\|.].%g...[:V/(.L..I.Y.ZO.I.G`..GI..y,.r....}p.yY.:\..DZ/G..k......I. .p....5...&.S{.............[e. ..K..R.9....6.....#.. .>...#...U.".... .&.vF(...r{..._.}!.u.......sw<XJ.."..}y.&.......m.).E..q.Z.......~]......{$....0...o...FE.r...e..Ft...Y..vI..E....L>../..f.GD.@azP ..~_..T.s...(.;5&ggv.......%D...\|.8,.9..".WR..k9.8.Z.b...4,M..k....$D..S..s....i.....

Chrome Cache Entry: 152

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 153

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65329), with CRLF line terminators
Category:	downloaded
Size (bytes):	102801
Entropy (8bit):	5.336080509196147
Encrypted:	false
SSDEEP:	1536:MGLiogSomRYvoGtT+KHsVS0bT79DSsi46j/LPyR7kbE:MGLXGFKT79DSs6WCE
MD5:	C89EAA5B28DF1E17376BE71D71649173
SHA1:	2B34DF4C66BB57DE5A24A2EF0896271DFCA4F4CD
SHA-256:	66B804E7A96A87C11E1DD74EA04AC2285DF5AD9043F48046C3E5000114D39B1C
SHA-512:	B73D56304986CD587DA17BEBF21341B450D41861824102CC53885D863B118F6FDF2456B20791B9A7AE56DF91403F342550AF9E46F7401429FBA1D4A15A6BD3C0
Malicious:	false
URL:	https://passwordreset.microsoftonline.com/ScriptResource.axd?d=8m_SiUloDIADQm1m07iktYXf0pIre31vq34T5xPNqSSZviUhrOs_VUR3tiOw4GaoI-MvB_kJ0JIVWDZvGjT-RaAYJ7pLsTkHP4UOqxzlf3a4F_ERmwg3QCLiSa9rfNtlDFD-zZoCmgOQQ1o2-_uuK_OyFuPWlmRdlGxdqAscz1qv2js5qg9veVBGu6brm49phnQ18QIolbWRsRAijSW1Z9E6uSJ6EeaRH4aUxl0f-_w1&t=7a0cc936
Preview:	//----------------------------------------------------------..// Copyright (C) Microsoft Corporation. All rights reserved...//----------------------------------------------------------..// MicrosoftAjax.js..Function.__typeName="Function";Function.__class=true;Function.createCallback=function(b,a){return function(){var e=arguments.length;if(e>0){var d=[];for(var c=0;c<e;c++)d[c]=arguments[c];d[e]=a;return b.apply(this,d)}return b.call(this,a)}};Function.createDelegate=function(a,b){return function(){return b.apply(a,arguments)}};Function.emptyFunction=Function.emptyMethod=function(){};Function.validateParameters=function(c,b,a){return Function._validateParams(c,b,a)};Function._validateParams=function(g,e,c){var a,d=e.length;c=c\|\|typeof c==="undefined";a=Function._validateParameterCount(g,e,c);if(a){a.popStackFrame();return a}for(var b=0,i=g.length;b<i;b++){var f=e[Math.min(b,d-1)],h=f.name;if(f.parameterArray)h+="["+(b-d+1)+"]";else if(!c&&b>=d)break;a=Function._validateParameter(g[b],f

Chrome Cache Entry: 154

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 25, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	405
Entropy (8bit):	6.927238031773719
Encrypted:	false
SSDEEP:	6:6v/lhPGtyR8R/Chm+jnDs9cCXz6fXIpvI+WOcy0f11VTaENo+7PfW3e37zt1afwp:6v/7SyG/HYfXJOvU1zTa8o+W8
MD5:	D4FFE61373F6AA32EEB8CA7CD41AB980
SHA1:	4925FAC4BC73EFB7C7BBC32B11C435ECF1D61674
SHA-256:	D5C54FFC6B8BD44D932BE8F37B1CD5B666205C7574F9D56EF68E56F83E08FFAD
SHA-512:	0F7EDE96F20BB3C053C246FFE1EF8CE739CEF7757FAAED031A365299B88664A046557C2C7FDB3BADED070BA4EBA1A14950D7E3A066B4976BF07142CEFA48BEEB
Malicious:	false
URL:	https://passwordreset.microsoftonline.com/images/hip_speaker.png
Preview:	.PNG........IHDR.............8.......sRGB.........gAMA......a.....pHYs..........+......tEXtSoftware.Adobe ImageReadyq.e<....IDAT8O...0...nf..y.,X4.g.I.h4..H.`.b.bA..f.n....%.=.iS.?N....^....A.(...~.i..m[.Qyz..iB..(...8...<G.........y..$.8....EQ.u]..I..(R.l...a...=..?t...CUU.......-..7.!..@.u0\..y.@..[a...p@.J.......e..>.Y..i..>A...+.,[. X9..z....B.4..+)..`n/..Q..>...y....e<....IEND.B`.

Chrome Cache Entry: 155

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 64x64, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	24038
Entropy (8bit):	5.992474931914016
Encrypted:	false
SSDEEP:	384:cLU4fKWVUvyZk56/1+fZfMj8hTb5nz0bnOWWWWWWWWWWWWWWWWWWWWWWWWWqvESs:cLxfKW6yZk8/iZfMjYxnzonm9MaKcuwW
MD5:	877784A5F5808CEFA2B61E73BFCF8EAE
SHA1:	6A0E7EDA2734D7BBBA3CE38D37B347DF001B1DBF
SHA-256:	BE7F0632337BC381D4962125545A5CC3C1E84E2D03DBDB97AB3D79AD78B91B6D
SHA-512:	DABFFC928F7ED2A2D05003DAEF643806BD1CEC6B98E705F7415A82AFE7034F4E1E8A70C5AE69B094A948EEDAB4E8B76DCF72DF881DA092FE4AB76DA0EEFB8C3C
Malicious:	false
Preview:	......@@.... .(@..F... .... .(...n@........ .(....P........ .(....Y..(...@......... ............................................................W.X..~S...W...X...X...X..X..V..p...}.............................................................kQ.W*..S$..wK..k..k..k..m..m..p..q..q..r..~......".........................................................................t..s'..^...\...^..._..._...`...a...b...e....M.................................................................fF.^...sB...m...v...w...x...x...y...{...{............%...#..."..."... ......................................................................v.._..xL...V...X...X...Y...Z...Z...\...`..}N...k#....................................................................rO4.Y+...T...k...q...q...p...q...q...u...}...."...$... .................................................................................j...S...T...X...Z...Y...Z...[...Z...]..._..{O...o?...........................................

Chrome Cache Entry: 156

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	89664
Entropy (8bit):	5.290543045467053
Encrypted:	false
SSDEEP:	1536:SjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQvg:SdeIygP3fulzcsz8jlvaDioQ47GKH
MD5:	00727D1D5D9C90F7DE826F1A4A9CC632
SHA1:	EA61688671D0C3044F2C5B2F2C4AF0A6620AC6C2
SHA-256:	A3CF00C109D907E543BC4F6DBC85EB31068F94515251347E9E57509B52EE3D74
SHA-512:	69528A4518BF43F615FB89A3A0A06C138C771FE0647A0A0CFDE9B8E8D3650AA3539946000E305B78D79F371615EE0894A74571202B6A76B6EA53B89569E64D5C
Malicious:	false
Preview:	/! jQuery v3.6.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),v={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 157

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (941), with CRLF line terminators
Category:	dropped
Size (bytes):	51585
Entropy (8bit):	4.642016312364136
Encrypted:	false
SSDEEP:	768:3VBsC+WcywIRmL5IBRe7RMCb9elQfWGfAlBRsYXzrSSl:3Vz+ArRdBRe7eC8lQfWGfAlBRsYX6Sl
MD5:	8AF47D9CDAE97DD52B10179FCF8E144F
SHA1:	44B076E5CABAD5A983401958C139EC8DA7655AD8
SHA-256:	35A5FC1D82000DE86E7179BD03FFFF2ABD4CB724F5333E64D782F11813872C0E
SHA-512:	C7E65722C95E9121E1299E2AE7F025E821D25B4A73CFDBFDEC9AD824FCA85A8938C2DC6AF3CFA62AFAA160F64F1D3FB25A8AFC0CC4DB9071C89BD45751AFC430
Malicious:	false
Preview:	..<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">..<head><title>...Microsoft Online Password Reset..</title><meta http-equiv="x-ua-compatible" content="IE=9" /><meta http-equiv="Expires" content="0" /><meta http-equiv="Pragma" content="no-cache" /><meta http-equiv="Cache-Control" content="no-store, no-cache" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta name="robots" content="noindex, nofollow, NOODP, NOYDIR" /><meta name="viewport" content="width=device-width, initial-scale=1" /><link id="FavoriteIcon" rel="Shortcut Icon" type="image/x-icon" href="../favicon.ico?v=1342177280" />.... <script src="//ajax.aspnetcdn.com/ajax/jQuery/jquery-3.6.0.min.js" type="text/javascript"></script>.. <script type="text/javascript">window.jQuery \|\| document.write('<script type="text/javascript" src="../js/jquery-3.6.0.min.js">\

Chrome Cache Entry: 158

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1498
Entropy (8bit):	4.81759827491068
Encrypted:	false
SSDEEP:	24:UhvVovixQcvUvED/frfnQYRKYKvZiANncisDmZu7SECywEZS9Y6f:U7ZM8vbA3smgm89CywYkV
MD5:	11FE4E6509513DB245F1F97E37C5D3AB
SHA1:	05322C35B6BFAE84CE8C626BD7B1F8C4A6F15A6D
SHA-256:	78D437B40A85299F96ED9D02E35F23FD3D3EF63D844D8D2523A15516F7E1D09C
SHA-512:	E8A7C3B06C54B671FF6772D6A360DD0B4A65888B4DBD32AE04D14E4971343A71E1B4EC1E58BD45898744A1B0DF4EDE24141FF47E2C0393E18AACFC97E6F10D76
Malicious:	false
URL:	https://passwordreset.microsoftonline.com/css/ltrStyle.css?v=1342177280
Preview:	.paddingright { padding-right: 20px; }...paddingleft { padding-left: 20px; }...paddingright7 { padding-right: 7px; }...paddingleft7 { padding-left: 7px; }...paddingleft10 {padding-left: 10px; }...alignright { text-align: right; }...alignleft { text-align: left; }...leftalign {text-align: left; margin-left:0px;}.....borderRight {border-right: 1px solid black; padding: 0px;}.....userTypeRadioButtonMargin{margin-left: 10px; margin-top:50px;}...userVerificationInputLabel {text-align:left;padding-right: 10px;}...radioButtonMoreInformation { padding-left: 20px }.....header .logo{float:left; padding-left:30px;}.....HelpCallout td.PosRight{padding: 8px 0px 0px 0px; margin: 0px; vertical-align: top; font-size: 1px; border: none !important; background-color: transparent !important;}...HelpCallout td.PosRight > div{font-size: 1px; position: relative; left: 1px; border-bottom: none !important; border-right: none !important; border-left: none !important; width: 15px; background-color: transparent !

Chrome Cache Entry: 159

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51734)
Category:	downloaded
Size (bytes):	222931
Entropy (8bit):	5.0213311632628725
Encrypted:	false
SSDEEP:	3072:Z4blthK0D4NIbkhhMW0AphsQyXV3oUHDDlxh/LoFdW:Z4vhK0D4NQlxh/LoFdW
MD5:	0329C939FCA7C78756B94FBCD95E322B
SHA1:	7B5499B46660A0348CC2B22CAE927DCC3FDA8B20
SHA-256:	0E47F4D2AF98BFE77921113C8AAF0C53614F88FF14FF819BE6612538611ED3D1
SHA-512:	1E819E0F9674321EEE28B3E73954168DD5AEF2965D50EE56CAD21A83348894AB57870C1C398684D9F8EAB4BBBEF5239F4AEA1DCAB522C61F91BD81CF358DA396
Malicious:	false
URL:	https://ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css
Preview:	@charset "UTF-8";.qtip{box-shadow:none;direction:ltr;display:none;font-size:10.5px;left:-28000px;line-height:12px;max-width:280px;min-width:50px;padding:0;position:absolute;top:-28000px}.qtip-content{word-wrap:break-word;padding:5px 9px;text-align:left}.qtip-content,.qtip-titlebar{overflow:hidden;position:relative}.qtip-titlebar{border-width:0 0 1px;font-weight:700;padding:5px 35px 5px 10px}.qtip-titlebar+.qtip-content{border-top-width:0!important}.qtip-close{border:1px solid transparent;cursor:pointer;outline:medium none;position:absolute;right:-9px;top:-9px;z-index:11}.qtip-titlebar .qtip-close{margin-top:-9px;right:4px;top:50%}* html .qtip-titlebar .qtip-close{top:16px}.qtip-icon .ui-icon,.qtip-titlebar .ui-icon{direction:ltr;display:block;text-indent:-1000em}.qtip-icon,.qtip-icon .ui-icon{-moz-border-radius:3px;-webkit-border-radius:3px;border-radius:3px;text-decoration:none}.qtip-icon .ui-icon{background:transparent none no-repeat -100em -100em;color:inherit;height:14px;line-heigh

Chrome Cache Entry: 160

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 4.2.9], baseline, precision 8, 50x28, components 3
Category:	dropped
Size (bytes):	987
Entropy (8bit):	6.922003634904799
Encrypted:	false
SSDEEP:	24:PJjxEK0nWpBzo0XxDuLHeOWXG4OZ7DAJuLHenX3D+VRmK9cR+w/b:lxEX4OuERAVwR/QP/b
MD5:	E58AAFC980614A9CD7796BEA7B5EA8F0
SHA1:	D4CAC92DCDE0CAF7C571E6D791101DA94FDBD2CA
SHA-256:	8B34A475187302935336BF43A2BF2A4E0ADB9A1E87953EA51F6FCF0EF52A4A1D
SHA-512:	2DAC06596A11263DF1CFAB03EDA26D0A67B9A4C3BAA6FB6129CDBF0A157C648F5B0F5859B5CA689EFDF80F946BF4D854BA2B2C66877C5CE3897D72148741FCC9
Malicious:	false
Preview:	......JFIF.....H.H.....fExif..MM..................>...........F.(...........1.........N.......H.......H....paint.net 4.2.9....C....................................................................C.........................................................................2..!............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......[.4..lz.....K.S..p.>.9.r9j..'.\.qrW..mo...X9ZV<./x...EX...m.Prj..A.EtG...K..mr....Lc.T.8...nlY.V.{6...R...]..(.y...)^.5V.IVO.W.B.19.R\...f.U.....'..S:..k.6..).f.n._3*....}.y.8.EusH..y.`.mA...W.}...bL..:..b.<f..(lH#R....v._...........9N~S..

Chrome Cache Entry: 161

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	310
Entropy (8bit):	3.4574866513230633
Encrypted:	false
SSDEEP:	6:YQpWPlmf6o/tJHJHvX7nKPe2X3hxQjVDq0SM/HBmU/5JWBiM9v+ZS/HhY:YQKloZJBrnIzX3hxaMMPcU/XWP9v+d
MD5:	D4544556EAD1BE1C27A556A421B41737
SHA1:	6685834678D0217110F376C8EAB33162413519D7
SHA-256:	14BA7F448546F847A2DD188EE53A0878749590C140F0B3A2ACA465CD0FD2E4C8
SHA-512:	E7A6FBBA4CC24CBFE57D9774171E1317B17D038B4F7A951994A9DDF048E96EC0BB65A6D9582645F97110ECCC7F4CC94974068FE1CAD0D78F444A42ED827E8BE9
Malicious:	false
URL:	https://0obt.menus-unlimited.com/visit_variables.txt?a=1726849134833
Preview:	{"8":"%6","9":"%7","10":"%8","11":"%9","12":"%10","13":"%0","14":"%5","15":"%1","16":"%2","17":"%3","18":"%4","21":"\/","22":"%1%","23":"%\/%","24":"$701","25":"$702","26":"$703","27":"$704","28":"$705","29":"$706","30":"$707","31":"$708","32":"$709","33":"$710","34":"\/\/\/\/","35":"gen","36":"#","37":"\/-"}

Chrome Cache Entry: 162

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1561
Entropy (8bit):	7.762338770217686
Encrypted:	false
SSDEEP:	48:c/CeK/fE+XoVldIkPdTWbuf173xX964boBdIhLE:ntcx/Iksbuf17f64borIK
MD5:	8DC34013E911C5F68FC2BCA0400CB06F
SHA1:	16BAFA91AF100D65C4945F04E0C6E1643B98CF00
SHA-256:	795029D360C3D16233FCE96F1BFF13C261535C0885FAE806CFF766F32D96BCEE
SHA-512:	83ACA42A30BFD629BC1E88D3ED154475E7949C1B154D19E6C9EF1DE825BA7967C0B6DA9EE79E7B420668242CCE5931DF344C97278A254F0A72C3D09EABED6051
Malicious:	false
URL:	https://client.ppe.repmap.microsoft.com/Images/hipaudioplay.png?vv=100
Preview:	.PNG........IHDR...<...<.....:..r....sBIT....\|.d.....pHYs...........S.....tEXtCreation Time.05/06/16...o....tEXtSoftware.Adobe Fireworks CS6.....qIDATh..=l.E.....H..H*.\|... ...&.D..).@....&...N....)_.E ...(.p...p(H...Ht... ..0............i.}s.....{`ss....;.......:...u..."....Az.r.%.9.\|....wU.j...o....N4...~....g.u.=`.;..9.7.%....Ad#......9....~7.....&.a........`]x^D....&,"..kv.l..K.S+!....#{.xm.;..%.+F<.\..#...bN...2...\.".I..U]..#.dWy$."r.2;Z...w)oD..H..u..M.'.k70.<4aG..`'~......k31W.2!Ue.A"..j....X..C...dNUd.... .j.\|c."..../..P.MXD......C`>7Y.K...n.....U..#..^4....Uu...Q.);.`9q.53..n.@.......A6.E,6.-d; ........nl.>..."..N7..9\6.....p^a..4aG...3...gUu#..j...2............f.....^.)...Udo'&..G.C.Z...L).....".t...pCD..n..a.....E....F...o.k.Y+b...[...gT..... ...]....V..m.!\..SCwh8w..J^.3N........\.W.....3.....lP.Da........-..........@_...i......r..%..)E.Q...3..M..o.$...`...".......-/EHIDZ.q.MC.......D.Q..".. ..#...................1...p.x?dKP.=...{u\.

Chrome Cache Entry: 163

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 420 x 94, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	10796
Entropy (8bit):	7.946024875001343
Encrypted:	false
SSDEEP:	192:aPzBBDKs07GiH528urXXSjD4/voR3Euri/in9Q28oLaIAQLdCYXQIDeoIdv60:aPVBQ7P5nIyjD+oRnr4inJdANuGdC0
MD5:	12BDACC832185D0367ECC23FD24C86CE
SHA1:	4422F316EB4D8C8D160312BB695FD1D944CBFF12
SHA-256:	877AE491D9AAC5C6EF82A8430F9F652ACE8A0DBC7294BD112AAD49BD593769D0
SHA-512:	36C319AC7F75202190E7A59F3F3C92892A71D5F17663E672319A745B6574BCFDE7C89B35F480CB15A193924DACB9D67F8CA1E1BC2BF33FC5CCBFA152CC7BA2D0
Malicious:	false
URL:	https://ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7
Preview:	.PNG........IHDR.......^.....l2`...).IDATx..}...U.... w...B..P$.Hv..t......x.EA@.Q`.E......-.".(..X`..D....5]]U}....$3...&...guOw..}>.....~....w.ZZ...z..FZ$I.$I....N.......tt.$e...M....ru$I.$IR.h.AvK0.t..wy.:.1...D.H...LS....iF~.X...smr.$I.$IR.4.....SY..@....h8.......dB...1.eG...$I.$.hZ...8.r...[.A.I..XE..hdA{Z..teaF...u:}.1^..-I.$I.FP.A..Nm..........A78...=.%W_.$I..8YQ.H2z#.D_...m..k..u.t..R6#.....N....){...$I..1@...g...@a ..u2..dL...ai.d.[.$I..D.....OM..a...,h%u.B.....0...57..hrW..$I....Gf.\|.=.eg`.........k.J.$IR..<.u....]....@.d...H..$I.$5..MWwu:....H\|Y..,.$.I.$I....Qu...s.NzzM..]..;$ I.$IR......+..L9......63.I@.$I..z..#.....:..7...s..<$ I.$I.hP.tu...m"..o1.y.@..W1T<(..... z%."?.4zE..$ ..Y1z`.P..!....`t%t....[..d...N.UKy&.A;..6S...<...........o...]0...r.$I......0..R.....N.....0Wi._.;...M..Lrb{.7w..].jm.r....C...&..gd}..Etm}..~L.l...}n\'...$..Mr.i..{..n..9.....SwMh.}.Q{./wJ.....B]:.....+..\V...A.S.w..6.....,..[.......J@....-.4.....:..Zvt.r.*.

Chrome Cache Entry: 164

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 25, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	405
Entropy (8bit):	6.927238031773719
Encrypted:	false
SSDEEP:	6:6v/lhPGtyR8R/Chm+jnDs9cCXz6fXIpvI+WOcy0f11VTaENo+7PfW3e37zt1afwp:6v/7SyG/HYfXJOvU1zTa8o+W8
MD5:	D4FFE61373F6AA32EEB8CA7CD41AB980
SHA1:	4925FAC4BC73EFB7C7BBC32B11C435ECF1D61674
SHA-256:	D5C54FFC6B8BD44D932BE8F37B1CD5B666205C7574F9D56EF68E56F83E08FFAD
SHA-512:	0F7EDE96F20BB3C053C246FFE1EF8CE739CEF7757FAAED031A365299B88664A046557C2C7FDB3BADED070BA4EBA1A14950D7E3A066B4976BF07142CEFA48BEEB
Malicious:	false
Preview:	.PNG........IHDR.............8.......sRGB.........gAMA......a.....pHYs..........+......tEXtSoftware.Adobe ImageReadyq.e<....IDAT8O...0...nf..y.,X4.g.I.h4..H.`.b.bA..f.n....%.=.iS.?N....^....A.(...~.i..m[.Qyz..iB..(...8...<G.........y..$.8....EQ.u]..I..(R.l...a...=..?t...CUU.......-..7.!..@.u0\..y.@..[a...p@.J.......e..>.Y..i..>A...+.,[. X9..z....B.4..+)..`n/..Q..>...y....e<....IEND.B`.

Chrome Cache Entry: 165

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 89 x 18, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1805
Entropy (8bit):	7.265265285391204
Encrypted:	false
SSDEEP:	24:oV1hpunQWwjx82lY2T32HEV8KJyJ3VAyKOGpxbAKJcyIXRP6VEBxX4pAE60KKAU9:4itNn2VMJ3R6breHDBBThFtYeD5B2
MD5:	BC89C1FBFBC227DC5A7ED9B2797E240D
SHA1:	8A9390297FDD0963C466CF2FD35D5B1F88A46B6A
SHA-256:	744A8CD0A4D15DFCF4A5D2E832FF556D950F8AF24D7B66104AB2EF4FE2605D9A
SHA-512:	C18F6B22F4AC5040E3FEBE8034AD3A3A3EF32CF3384BE6C3144B2EB04080F03111743D5B30AF3A1343AFD68A20AAE5972422C724107243D00CD9CF263DDC10C7
Malicious:	false
Preview:	.PNG........IHDR...Y.........0.r.....sRGB.........gAMA......a.....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:BABFACAF901511E2BD4FDE5C526470CF" xmpMM:DocumentID="xmp.did:BABFACB0901511E2BD4FDE5C526470CF"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:BABFACAD901511E2BD4FDE5C526470CF" stRef:documentID="xmp.did:BABFACAE901511E2BD4FDE5C526470CF"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..R....fIDATXG.mq[1.E.!...3&...P.................3..~L..q.O..t..{...v?..n.....b#.-.i..

Chrome Cache Entry: 166

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	84
Entropy (8bit):	4.914281971368986
Encrypted:	false
SSDEEP:	3:42Y7LMMDdeeL2A44dWdHAbU4n:42YEMxeVJQYHgU4n
MD5:	E36D4BC4AD1E7999737A7B608A72047C
SHA1:	C37190347D2A27D783FF669AEA11F5E9D72A3DA6
SHA-256:	ABFE2C677BC3328404377F6BEE9098C95272BA43CA0D92E96C5F0331C74E27C2
SHA-512:	3E57F158698A43B44F4F4980C35D6E70A22561D3F867E0D5BFDF46A991CCBA65506658E70E6EE5997D709B23D5CEA25F7ACF9AAD4C8E30040BCF9D7CAD622433
Malicious:	false
URL:	https://0obt.menus-unlimited.com/urls.json
Preview:	["https:\/\/agence-immobiliere-luberon.com\/5a117d63-e078-4d65-be0b-fa7ab24a9f8f\/"]

Chrome Cache Entry: 167

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	3005
Entropy (8bit):	4.3348196756520005
Encrypted:	false
SSDEEP:	48:ITWNX9q7aVxyFGwvqNTTswh11KdA/IMUitKhyWirt+NG/BC0/PTfhyr1+18:IiNX9oFG4qTJb0a/IMNURkt6GJZ/7fU7
MD5:	A870B45AC5D6B0D4E18C4829C7B660B4
SHA1:	2D3CA0E1F19EFDEB9B2DD3DCFFB17F8ABA118AA0
SHA-256:	144524233F795D6A425B76F7AE5C0BB622B5F67E2E6AE73532AD526528CA07CF
SHA-512:	295A21307D452F4BF51C62770C6A6B43CDB8B5A6BFA3617E068C8550285252B88F8BBF93A81C39E4BD7F73645EE094EDE0E2733DAFA5094E3EBAE20033363270
Malicious:	false
Preview:	function WebForm_FindFirstFocusableChild(control) {.. if (!control \|\| !(control.tagName)) {.. return null;.. }.. var tagName = control.tagName.toLowerCase();.. if (tagName == "undefined") {.. return null;.. }.. var children = control.childNodes;.. if (children) {.. for (var i = 0; i < children.length; i++) {.. try {.. if (WebForm_CanFocus(children[i])) {.. return children[i];.. }.. else {.. var focused = WebForm_FindFirstFocusableChild(children[i]);.. if (WebForm_CanFocus(focused)) {.. return focused;.. }.. }.. } catch (e) {.. }.. }.. }.. return null;..}..function WebForm_AutoFocus(focusId) {.. var targetControl;.. if (__nonMSDOMBrowser) {.. targetControl = document.getElementById(focusId);.. }.. else {.. targetContro

Chrome Cache Entry: 168

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 169

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 420 x 94, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	10796
Entropy (8bit):	7.946024875001343
Encrypted:	false
SSDEEP:	192:aPzBBDKs07GiH528urXXSjD4/voR3Euri/in9Q28oLaIAQLdCYXQIDeoIdv60:aPVBQ7P5nIyjD+oRnr4inJdANuGdC0
MD5:	12BDACC832185D0367ECC23FD24C86CE
SHA1:	4422F316EB4D8C8D160312BB695FD1D944CBFF12
SHA-256:	877AE491D9AAC5C6EF82A8430F9F652ACE8A0DBC7294BD112AAD49BD593769D0
SHA-512:	36C319AC7F75202190E7A59F3F3C92892A71D5F17663E672319A745B6574BCFDE7C89B35F480CB15A193924DACB9D67F8CA1E1BC2BF33FC5CCBFA152CC7BA2D0
Malicious:	false
Preview:	.PNG........IHDR.......^.....l2`...).IDATx..}...U.... w...B..P$.Hv..t......x.EA@.Q`.E......-.".(..X`..D....5]]U}....$3...&...guOw..}>.....~....w.ZZ...z..FZ$I.$I....N.......tt.$e...M....ru$I.$IR.h.AvK0.t..wy.:.1...D.H...LS....iF~.X...smr.$I.$IR.4.....SY..@....h8.......dB...1.eG...$I.$.hZ...8.r...[.A.I..XE..hdA{Z..teaF...u:}.1^..-I.$I.FP.A..Nm..........A78...=.%W_.$I..8YQ.H2z#.D_...m..k..u.t..R6#.....N....){...$I..1@...g...@a ..u2..dL...ai.d.[.$I..D.....OM..a...,h%u.B.....0...57..hrW..$I....Gf.\|.=.eg`.........k.J.$IR..<.u....]....@.d...H..$I.$5..MWwu:....H\|Y..,.$.I.$I....Qu...s.NzzM..]..;$ I.$IR......+..L9......63.I@.$I..z..#.....:..7...s..<$ I.$I.hP.tu...m"..o1.y.@..W1T<(..... z%."?.4zE..$ ..Y1z`.P..!....`t%t....[..d...N.UKy&.A;..6S...<...........o...]0...r.$I......0..R.....N.....0Wi._.;...M..Lrb{.7w..].jm.r....C...&..gd}..Etm}..~L.l...}n\'...$..Mr.i..{..n..9.....SwMh.}.Q{./wJ.....B]:.....+..\V...A.S.w..6.....,..[.......J@....-.4.....:..Zvt.r.*.

Chrome Cache Entry: 170

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1169), with CRLF line terminators
Category:	downloaded
Size (bytes):	52368
Entropy (8bit):	4.698118685817501
Encrypted:	false
SSDEEP:	768:3VNBSzTm1ctwIR2L5IBRe7RMCb9GlQfWGfAlBRsYXzrSSl:3V6uWrRtBRe7eCMlQfWGfAlBRsYX6Sl
MD5:	6E789B19CCB60D28FD800615048EB383
SHA1:	4FB757EAE27C2C7EE1F14FB531FD61D779234EBD
SHA-256:	F3653C579DA0835AC3176077792998229A227A8653DF5ED1B7D03DFDE73E4323
SHA-512:	9AB2446755EAF69DD2C90465444B4A3BE5609EFA2C7B55FBD061C4CC84636574F8A0D2B8FE2A294DB9012C8315EA44E5D0866A22942C4DF26F6B90517BA08D5C
Malicious:	false
URL:	https://passwordreset.microsoftonline.com/?ru=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQIIAYWSu4vTAADGm_au1zvQO0VEEeQGBxXS5tU8Kg49m0uba5LWJO0lgyVt0jyaV9u0aTIdTo43OdwkIg4nLk4iiDffdIuLoyCIgxxOiou9v8Dlgw9-fMv321jDi2QRKkL3c3ARrtzBUKysEX0KpDQcBTEKhkANQ3AQLaM4ikCwXobQydWNrQP6258nN7_Sr3efvnn1-fzvMXDbiqJwWimV4jguBsOhPTCKg8AruZqv2775HgDOAOA7ABxlVw0flMXj7BRHCRzFSJzCcQzBYAinigrCJbzE2mqXjlSmjSgJBPEevWhKZswz7YhH5ITzOJj3VFeoWY66ZHlGhjlmyTs0xj1a8qluNbuspUijiPd4m5eqsSApy53O6Et2U6jOIgu5iGBip8av7PowmHi9MJhGR7nn2YlpRA1nFOm2WWtFCian7LSh2qbLNxGQjOtE0yL0RJtbLT1g91TIjljHpgYttGeIC7_pDQfueMF1zJDSGMVE6WqDEXFWwtvKUBLS_VQQSXjIk464GzHJqDkLU6xOmi5EJCEqzOmpk87mCYmEYrutN4ZUn9ujPTcZDagIdvpwYKhpDZwlrTFIWb3I1H1kZIug2yCEMcu0SEXq-QuC1z153JrLUoDAEYjUFTFs99vYXOt03J2eXN-btYxJzbGZVNUbEJ4ws2RB7ldHeNmtph6PonKP6gwm83A6ZQPJEbvxu1x-eaYX-Ke5y0Fo-La-HU6Coe0aZyvAj5XrhfxW4UZmO3P3GpSrFAobW5mL9nsFeLm6tEU-qDz4ufmRfvvi3q2TT4eZ09VSXVW7jiA1-qQSsIsBYcCxxPnCTuQmlkSNISTAm_N-jdEI7CFcgQ_zwGE-f5q_0qj1eFoSpSpfqz6uIT3oPA88W8t8WP-PfyeXMv8A0&mkt=en-US&hosted=0&device_platform=Windows+10
Preview:	..<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">..<head><title>...Microsoft Online Password Reset..</title><meta http-equiv="x-ua-compatible" content="IE=9" /><meta http-equiv="Expires" content="0" /><meta http-equiv="Pragma" content="no-cache" /><meta http-equiv="Cache-Control" content="no-store, no-cache" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta name="robots" content="noindex, nofollow, NOODP, NOYDIR" /><meta name="viewport" content="width=device-width, initial-scale=1" /><link id="FavoriteIcon" rel="Shortcut Icon" type="image/x-icon" href="favicon.ico?v=1342177280" />.... <script src="//ajax.aspnetcdn.com/ajax/jQuery/jquery-3.6.0.min.js" type="text/javascript"></script>.. <script type="text/javascript">window.jQuery \|\| document.write('<script type="text/javascript" src="js/jquery-3.6.0.min.js">\x3C/sc

Chrome Cache Entry: 171

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (54108)
Category:	dropped
Size (bytes):	54147
Entropy (8bit):	5.276423708593586
Encrypted:	false
SSDEEP:	768:yKpqe+vlxUDY+ujgCFCUG3WiqbfwNz2mPoPyC5m7QFRYdV6ItsL/1bWZj937ZGLl:vpqFkinP5AOYdVs4Rhw
MD5:	271D193B038C85D1FE7EF5FD6121C793
SHA1:	51EBED891D546FA572890D7630F230DC1AD082F2
SHA-256:	F5B2B26071BB59F466683356DF11B5392614CF6966586917990C65D48AF0DCB9
SHA-512:	0DD5FF6301797B8D4E93E008F351C8F1FE7FE54B28C42553F46298651233A4BC5BF13C33E19C0F3D7FA340CC0C84D43D6F9FB30C479F73E75CBD0A0F586359DE
Malicious:	false
Preview:	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).axios=t()}(this,(function(){"use strict";function e(e){var r,n;function o(r,n){try{var a=e[r](n),u=a.value,s=u instanceof t;Promise.resolve(s?u.v:u).then((function(t){if(s){var n="return"===r?"return":"next";if(!u.k\|\|t.done)return o(n,t);t=e[n](t).value}i(a.done?"return":"normal",t)}),(function(e){o("throw",e)}))}catch(e){i("throw",e)}}function i(e,t){switch(e){case"return":r.resolve({value:t,done:!0});break;case"throw":r.reject(t);break;default:r.resolve({value:t,done:!1})}(r=r.next)?o(r.key,r.arg):n=null}this._invoke=function(e,t){return new Promise((function(i,a){var u={key:e,arg:t,resolve:i,reject:a,next:null};n?n=n.next=u:(r=n=u,o(e,t))}))},"function"!=typeof e.return&&(this.return=void 0)}function t(e,t){this.v=e,this.k=t}function r(e){var r={},n=!1;function o(r,o){return n=!0,o=new Promise((fu

Chrome Cache Entry: 172

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1525
Entropy (8bit):	4.80220321270831
Encrypted:	false
SSDEEP:	24:jQB6rLbbhhye8jDjpfj/MALSj0eajoq0MgV05SkuVTgEbwe/sT5wiMa3sr6sHr3H:j8eLrynvlwIeyoJMluVEE0B7srH
MD5:	ACA0F1B02DC406E76DDC5F2BDEBEC6CE
SHA1:	594C930BE86B8843377565E349D2A10F1755A13A
SHA-256:	0446C6FD9AEB7DCD7CC089FA25323B1AE9AFA77B4CF8D4449F7D2D1B2467393A
SHA-512:	06887860F73D38799FFF8BF5B2972160B68C303EC904813861190E9A8A6477E4D300882994D661FDFC118C408625C537D8B28287DC9941D50302BD91C88ED98F
Malicious:	false
URL:	https://passwordreset.microsoftonline.com/js/Common.js
Preview:	.....function GetCookieValue(cookieName)..{.. if (document.cookie == undefined \|\| document.cookie == "").. return "";.... var name = cookieName + "=";.. var cookieArray = document.cookie.split(';');.. for (var i = 0; i < cookieArray.length; i++).. {.. var clientCookie = cookieArray[i].trim();.. if (clientCookie.indexOf(name) == 0).. {.. return clientCookie.substring(name.length, clientCookie.length);.. }.. }.. return "";..}....function DeleteCookie(name)..{.. if (GetCookieValue(name).length > 0).. {.. document.cookie = name + "=" + ";expires=Thu, 01 Jan 2000 00:00:01 GMT";.. }..}....function GetUserSessionData(key) {.. var sessionStorage = window.sessionStorage;.. if (sessionStorage[key] == null) {.. return "";.. }.. return sessionStorage.getItem(key);..}....function SetUserSessionData(key, value) {.. var sessionStorage = window.sessionStorage;.. sessionStorage.setItem(key, val

Chrome Cache Entry: 173

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	84
Entropy (8bit):	4.914281971368986
Encrypted:	false
SSDEEP:	3:42Y7LMMDdeeL2A44dWdHAbU4n:42YEMxeVJQYHgU4n
MD5:	E36D4BC4AD1E7999737A7B608A72047C
SHA1:	C37190347D2A27D783FF669AEA11F5E9D72A3DA6
SHA-256:	ABFE2C677BC3328404377F6BEE9098C95272BA43CA0D92E96C5F0331C74E27C2
SHA-512:	3E57F158698A43B44F4F4980C35D6E70A22561D3F867E0D5BFDF46A991CCBA65506658E70E6EE5997D709B23D5CEA25F7ACF9AAD4C8E30040BCF9D7CAD622433
Malicious:	false
Preview:	["https:\/\/agence-immobiliere-luberon.com\/5a117d63-e078-4d65-be0b-fa7ab24a9f8f\/"]

Chrome Cache Entry: 174

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 175

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.625316929997096
Encrypted:	false
SSDEEP:	3:tpSf4Ck8efFlK5ly:tak8efFlyly
MD5:	D1690731F22021E1466FBCD0DB6326EF
SHA1:	78F95BA0B7F82BBB7067000242DE860594ABD9C3
SHA-256:	490216DF4F089BB5C249BCF4034D0671254CA4236EC3ECA935AAC4B17E0FC7F3
SHA-512:	10B3CE812684D28DC72B74BA220E9A0DEE38550D49D25BB40B9EEB8764EE386E5F530D28A5E7C8E159B5C672D85D8649B102F3F04BD96092F9787ACACA4DBDF1
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISLAnYh4U85ulXExIFDURbFPwSBQ2L4FIoEgUNxK_d4xIFDW1rCkoSBQ2VKJT-?alt=proto
Preview:	CjEKCw1EWxT8GgQIZBgCCgcNi+BSKBoACgcNxK/d4xoACgcNbWsKShoACgcNlSiU/hoA

Chrome Cache Entry: 176

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	46376
Entropy (8bit):	4.760560792293901
Encrypted:	false
SSDEEP:	768:QgRN7ChZGd/5zEhQ49zXWV/eTSLtiMK7OQyOYZ:V1d/5edgVrlH
MD5:	DBFAC7887A157C9B73DC42927FC15B74
SHA1:	435FD188BF66F0207EEB298DD13228D17D36E4D1
SHA-256:	FC66E3943BC6EDC7B1F79D952D31DABCBA3BD576190DEEB9A7518CEE6B75C5A1
SHA-512:	C1918B35A03BD2110C2CB4EAD140BA342C54EE7BEE2C1E4B6582B56B86DA93AECDDA92DA626C7B15BDEBC067893ACD354919495551E71EE0C9D5993B43433958
Malicious:	false
URL:	https://passwordreset.microsoftonline.com/js/Webtrends.js
Preview:	// WebTrends SmartSource Data Collector Tag..// Version: 8.6.2..// MS Version: 3.2.5..// Tag Builder Version: 3.0..// Created: 04/01/2011..function WebTrends() {.. var that = this;.. if (typeof (gDcsId) != "undefined" && gDcsId) this.dcsid = gDcsId;.. else this.dcsid = "not_a_valid_dcsid";.. if (typeof (gDomain) != "undefined" && gDomain) this.domain = gDomain;.. else this.domain = "m.webtrends.com";.. if (typeof (gTimeZone) != "undefined" && gTimeZone) this.timezone = gTimeZone;.. else this.timezone = -8;.. if (typeof (gFpcDom) != "undefined" && gFpcDom) this.fpcdom = gFpcDom;.. else {.. if (/microsoft.com$/.test(window.location.hostname)) {.. this.fpcdom = ".microsoft.com";.. } else {.. this.fpcdom = window.location.hostname;.. }.. }.. if (typeof (gOffsite) != "undefined" && gOffsite).. if (gOffsite == true \|\| gOffsite == "true") this.fpcdom = "";.. this.navigationtag = "div,table";.. if (typeof

Chrome Cache Entry: 177

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 22 x 22
Category:	downloaded
Size (bytes):	478
Entropy (8bit):	7.072122642964318
Encrypted:	false
SSDEEP:	12:d44xCq3nQQ5Q36sd0Tc/ET4Io9yjPy00EjNF8:d40CqXQQ5E69qEkI4Wy0lNF8
MD5:	309B41EE7A44BD51E5D1B52CCC620E5B
SHA1:	B162CE55DE01BF7C005F8CE4D4D7C32E7AEACA08
SHA-256:	F213507641FD02EC43981535823474ECFDE973D1B33A6CD385F1F0827FD4B528
SHA-512:	9279138126F8FEDD3AEF32BA4BCD78D3D26BBD4E7DE6F3B21014B96C34D7E69BC4C6471CC94772346CB6C7F9020EB5FE1A3A96686A5B250F5CCDEE54A0936F4D
Malicious:	false
URL:	https://passwordreset.microsoftonline.com/images/hip_text.gif
Preview:	GIF89a.....;....333..........ZZY.........fff.........ssr...........................................................................................MML.........@@@....................................!.....;.,.............p.+.....9.P'..D.`..........t..pB\C.k..n...[..x7hRt..x7-}.92....}%p5.+..8..9552...n2...#.3//...3../33..."..3+.../9..22....3....+./.9.2......9.........3.....}(.).....5..........7......`...........,"J....D>Dlh...F4D(..I..I..@...!..0]B..d%..w...;

Chrome Cache Entry: 178

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	629
Entropy (8bit):	5.3297264306228485
Encrypted:	false
SSDEEP:	12:YGnvZLXKPAaMFVRKJFh5A3fDYnWpWrmIMxeaTjtUk8i3rrWaqf0Cvp8XVZOAvw01:Y84oHFnKfh+DOW0rjSXTjtF3Wb0hHPoM
MD5:	6F63FD30DCED37274D4EEBEF3A746302
SHA1:	4830427994686E3D45C95EAA612BEA41226A7628
SHA-256:	AE69851653255300D1F2123BCD93B3BEC2F8142F9ED1BEFFF99F9BCD711CB6EE
SHA-512:	CFCA9809DAFFEF2F7ABD1557672C068130902E07574C2ED5D76BFCF2E01A3583B086664DD91976F2CB506C7D2871ED43601593BF753A54B3DB90D3FB3E0BA3A0
Malicious:	false
Preview:	{"ctb":"no","cth":"no","mth":"no","ule":"no","tor":"no","ttss":"2inphilly.com,0x4AAAAAAAe5Ztsfj0i8aSui\r\nalesovky.com,0x4AAAAAAAfCYCikLWEVd2MX\r\npneuservisjirkalovi.com,0x4AAAAAAAgkvm4spQzGkEqY\r\ncurrys-times.com,0x4AAAAAAAgkwofq8HwMUajy\r\napartmentforrentinicon56.com,0x4AAAAAAAgkw8XLxaj4YhZR\r\nagence-immobiliere-luberon.com,0x4AAAAAAAgkxhxcptj-vLwi\r\nillinoismanufacturing.net,0x4AAAAAAAkF7uYpHYG71AMT\r\nmenus-unlimited.com,0x4AAAAAAAkF7znPRls4zQt2","preloader":"v5","none_to":"0","re_black":"on","rwne":"yes","tel_bots":"6388900022:AAE_CEfuukCCkRS0AthYWETGve9evSsvTGE<>5961514253","red_to_wild":"no","remove_404":"no"}

Chrome Cache Entry: 179

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 89 x 18, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1805
Entropy (8bit):	7.265265285391204
Encrypted:	false
SSDEEP:	24:oV1hpunQWwjx82lY2T32HEV8KJyJ3VAyKOGpxbAKJcyIXRP6VEBxX4pAE60KKAU9:4itNn2VMJ3R6breHDBBThFtYeD5B2
MD5:	BC89C1FBFBC227DC5A7ED9B2797E240D
SHA1:	8A9390297FDD0963C466CF2FD35D5B1F88A46B6A
SHA-256:	744A8CD0A4D15DFCF4A5D2E832FF556D950F8AF24D7B66104AB2EF4FE2605D9A
SHA-512:	C18F6B22F4AC5040E3FEBE8034AD3A3A3EF32CF3384BE6C3144B2EB04080F03111743D5B30AF3A1343AFD68A20AAE5972422C724107243D00CD9CF263DDC10C7
Malicious:	false
URL:	https://passwordreset.microsoftonline.com/images/header_microsoft.png
Preview:	.PNG........IHDR...Y.........0.r.....sRGB.........gAMA......a.....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:BABFACAF901511E2BD4FDE5C526470CF" xmpMM:DocumentID="xmp.did:BABFACB0901511E2BD4FDE5C526470CF"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:BABFACAD901511E2BD4FDE5C526470CF" stRef:documentID="xmp.did:BABFACAE901511E2BD4FDE5C526470CF"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..R....fIDATXG.mq[1.E.!...3&...P.................3..~L..q.O..t..{...v?..n.....b#.-.i..

Chrome Cache Entry: 180

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1280 x 273, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	23655
Entropy (8bit):	7.821178587561659
Encrypted:	false
SSDEEP:	384:UqW6GxKDCQgLcoS7aMzmSSu8UKXLrvmWVo5KOPzA2T2rocND5e3a+/9R7:UqHwKDCQ0SGMiSSu8tnJo5K8U2TBcNd2
MD5:	68D598046405464969EC4CDFA2DE1F48
SHA1:	78875DC44B74F926C8D2F0149E43C7BD7E12EA38
SHA-256:	2FD48DDED56198D0B5905E1A51ACE3F42C9C061E76E4C7ADDF06A59804528327
SHA-512:	A8ED87D0E9451A5B96EE7159923FDAB58964AD8133D3D27E58152138AC9F0919B1B2FDF2F9116879B80149F0AFF8DC9C314B6C0169E82034AFEE3D58402C178C
Malicious:	false
Preview:	.PNG........IHDR.............$!......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD............[~IDATx...y..U......l3.v..(.(......0 kd...I.z..I....;.M@v..v....E...d.5..[2=d..:..c./F.Y.........4...wNm_.EJ.m..Z.{P]3...;V.3.....F.....;.?a$.........b............@""""""""..c..........(..$""""""""J1&..........R..@""""""""..c..........(..$""""""""J1&..........R..@""""""""..c..........(..$""""""""J1&..........R..@""""""""..c..........(..$""""""""J1&..........R..@""""""""..c..........(..$""""""""J1&..........R..@""""""""..c..........(..$""""""""J1&..........R..@""""""""..c..........(..$""""""""J1&..........R..@""""""""..c..........(..$""""""""J1&..........R..@""""""""..c..........(..$""""""""J1&..........R..@""""""""..c..........(..$""""""""J1&..........R,..........Q.Z[[...&l,"..L.0ND.....-.j[...1fHD.Tu..,.....m/V.E.r........c....................~..n.>.`S....{.......D._.......c...m.q...."............ .........8.u77..-"G.a......Z..S...t;.. ..d+.c..

Chrome Cache Entry: 181

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 22 x 22
Category:	dropped
Size (bytes):	478
Entropy (8bit):	7.072122642964318
Encrypted:	false
SSDEEP:	12:d44xCq3nQQ5Q36sd0Tc/ET4Io9yjPy00EjNF8:d40CqXQQ5E69qEkI4Wy0lNF8
MD5:	309B41EE7A44BD51E5D1B52CCC620E5B
SHA1:	B162CE55DE01BF7C005F8CE4D4D7C32E7AEACA08
SHA-256:	F213507641FD02EC43981535823474ECFDE973D1B33A6CD385F1F0827FD4B528
SHA-512:	9279138126F8FEDD3AEF32BA4BCD78D3D26BBD4E7DE6F3B21014B96C34D7E69BC4C6471CC94772346CB6C7F9020EB5FE1A3A96686A5B250F5CCDEE54A0936F4D
Malicious:	false
Preview:	GIF89a.....;....333..........ZZY.........fff.........ssr...........................................................................................MML.........@@@....................................!.....;.,.............p.+.....9.P'..D.`..........t..pB\C.k..n...[..x7hRt..x7-}.92....}%p5.+..8..9552...n2...#.3//...3../33..."..3+.../9..22....3....+./.9.2......9.........3.....}(.).....5..........7......`...........,"J....D>Dlh...F4D(..I..I..@...!..0]B..d%..w...;

Chrome Cache Entry: 182

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 29 x 8, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.035372245524405
Encrypted:	false
SSDEEP:	3:yionv//thPlons6yxl/k4E08up:6v/lhP2Jy7Tp
MD5:	FEE739667DF00ABACA6AC373052B8C8E
SHA1:	378B749170AEF56F446B27F373FF0616904B5683
SHA-256:	CED65EE024A164CACC961831800101CED7AF6144329C4FC1C2674577E5D8773D
SHA-512:	976F7A553B00E9E15D41045A612978B853808562B89BEDCF1AA386E5DCF3D75A3D83C08976D47B944672BC68199A0C02AC752478F5EFA8C826987F0D86EE69C1
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8c632282bca10ca8/1726849143907/LtWr2GXQoUD_DTw
Preview:	.PNG........IHDR...............cp....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 183

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65342)
Category:	downloaded
Size (bytes):	232914
Entropy (8bit):	4.979822227315486
Encrypted:	false
SSDEEP:	1536:VYutjsbf98fOdBfvO5wlP7Qy9A374298wsY/ElV6V6pz600I41r:ntj898fo298uI6V6pz600I41r
MD5:	FE7FDFEC700D100DC745DC64D3600CB2
SHA1:	B231651E0FD68BBD8758189FBD3642C462D34FA6
SHA-256:	7F1D37F0D90B6385354C2AC10E2BB91563C46BD7A266ED351222EBCAC8496C2A
SHA-512:	B7819649564ED5E0BC04CDF7F5777B529870E6CD7B6BCEAD219223F2A4718672AE6FA5A8CA19EBC5E08831E02A04F81D646942706D8FAD98CC73E5ABEFCFB95E
Malicious:	false
URL:	https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css
Preview:	@charset "UTF-8";/!. Bootstrap v5.3.0 (https://getbootstrap.com/). * Copyright 2011-2023 The Bootstrap Authors. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */:root,[data-bs-theme=light]{--bs-blue:#0d6efd;--bs-indigo:#6610f2;--bs-purple:#6f42c1;--bs-pink:#d63384;--bs-red:#dc3545;--bs-orange:#fd7e14;--bs-yellow:#ffc107;--bs-green:#198754;--bs-teal:#20c997;--bs-cyan:#0dcaf0;--bs-black:#000;--bs-white:#fff;--bs-gray:#6c757d;--bs-gray-dark:#343a40;--bs-gray-100:#f8f9fa;--bs-gray-200:#e9ecef;--bs-gray-300:#dee2e6;--bs-gray-400:#ced4da;--bs-gray-500:#adb5bd;--bs-gray-600:#6c757d;--bs-gray-700:#495057;--bs-gray-800:#343a40;--bs-gray-900:#212529;--bs-primary:#0d6efd;--bs-secondary:#6c757d;--bs-success:#198754;--bs-info:#0dcaf0;--bs-warning:#ffc107;--bs-danger:#dc3545;--bs-light:#f8f9fa;--bs-dark:#212529;--bs-primary-rgb:13,110,253;--bs-secondary-rgb:108,117,125;--bs-success-rgb:25,135,84;--bs-info-rgb:13,202,240;--bs-warning-rgb:255,193,7;--bs-danger-rgb:220,

Chrome Cache Entry: 184

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	12980
Entropy (8bit):	4.656952280411437
Encrypted:	false
SSDEEP:	384:QjJmcs01WskN59g1+VW1aEV4xvbw94l1R5SUcZEWajJIcjqTqxBojafes0OPUE9h:t4i7l1rSVajJWjs0O8E9h
MD5:	8EDFCD3F7A179CFF6B123DFF50F29770
SHA1:	7A2D9BB4B9F6072AB3049E6421021A5BA0A3DADF
SHA-256:	D0B747C7F7414A08B0D5107832B2F4BB44A9BB4A3AAD28390F58EDE8BBEA6AE1
SHA-512:	169D1C71078DCB1C65B3CBAFBA3379B94718D6C1E472990666430A6B2C0483CC9B27E13820A29D2DCA2364D3CD3F7D2ECDED48B9ACF406BF74CB505489FB9503
Malicious:	false
Preview:	.//------------------------------------------------------------..// Copyright (c) Microsoft Corporation. All rights reserved...//------------------------------------------------------------....var Button = new Object();....Button.ActiveButton = null;..Button.FocusButton = null;..Button.DefaultButton = null;..Button.CancelButton = null;..Button.ActivatedButtonID = null;..Button.Groups = {};....Button.SetText = function(id, text) {.. var button = document.getElementById(id);.. if (button != null) {.. for (var i = 0; i < button.children.length; i++) {.. var ch = button.children[i];.. if (ch.tagName.toLowerCase() == 'span') {.. ch.innerHTML = text; //// TODO: this causes the text wrapped with an <a> tag to get inserted in Firefox, which needs to get fixed... break;.. }.. }.. }.. var span = document.getElementById(id + '_disabled');.. if (span != null) {.. for (var i = 0; i < span.childr

Chrome Cache Entry: 185

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	1525
Entropy (8bit):	4.80220321270831
Encrypted:	false
SSDEEP:	24:jQB6rLbbhhye8jDjpfj/MALSj0eajoq0MgV05SkuVTgEbwe/sT5wiMa3sr6sHr3H:j8eLrynvlwIeyoJMluVEE0B7srH
MD5:	ACA0F1B02DC406E76DDC5F2BDEBEC6CE
SHA1:	594C930BE86B8843377565E349D2A10F1755A13A
SHA-256:	0446C6FD9AEB7DCD7CC089FA25323B1AE9AFA77B4CF8D4449F7D2D1B2467393A
SHA-512:	06887860F73D38799FFF8BF5B2972160B68C303EC904813861190E9A8A6477E4D300882994D661FDFC118C408625C537D8B28287DC9941D50302BD91C88ED98F
Malicious:	false
Preview:	.....function GetCookieValue(cookieName)..{.. if (document.cookie == undefined \|\| document.cookie == "").. return "";.... var name = cookieName + "=";.. var cookieArray = document.cookie.split(';');.. for (var i = 0; i < cookieArray.length; i++).. {.. var clientCookie = cookieArray[i].trim();.. if (clientCookie.indexOf(name) == 0).. {.. return clientCookie.substring(name.length, clientCookie.length);.. }.. }.. return "";..}....function DeleteCookie(name)..{.. if (GetCookieValue(name).length > 0).. {.. document.cookie = name + "=" + ";expires=Thu, 01 Jan 2000 00:00:01 GMT";.. }..}....function GetUserSessionData(key) {.. var sessionStorage = window.sessionStorage;.. if (sessionStorage[key] == null) {.. return "";.. }.. return sessionStorage.getItem(key);..}....function SetUserSessionData(key, value) {.. var sessionStorage = window.sessionStorage;.. sessionStorage.setItem(key, val

Chrome Cache Entry: 186

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 187

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 24 x 24
Category:	downloaded
Size (bytes):	2463
Entropy (8bit):	6.994052150121201
Encrypted:	false
SSDEEP:	48:H0itvnLUG0J3nL8VO2ocia6Dk4MAbpGW4YBE/2p:HfNmT2QDnMAbsWTp
MD5:	93DE6FB07C1382459E473381DA5D0E7E
SHA1:	4E1208D482A7ABA8C86FDCF8E0E92C90BB8C8C8A
SHA-256:	E97FA0CFE4B0A7BB22E9713A67D4667DA064E674A944D607E78F0D3BF48E57A5
SHA-512:	B415DE10B55639DD5DFDD038FD490B675059122373659DD86AA00EBC7F6735FD22360264226F8675741FB76F3B3A16E9AB7FA907F489B377EF16E9222AA26E3B
Malicious:	false
URL:	https://passwordreset.microsoftonline.com/images/wait_animation.gif
Preview:	GIF89a.............!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:BCB95722648AE111A86BB806ED51E581" xmpMM:DocumentID="xmp.did:185F1A028B0511E19AA1A07B5BDC793D" xmpMM:InstanceID="xmp.iid:185F1A018B0511E19AA1A07B5BDC793D" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D7EC7F987A8AE111A86BB806ED51E581" stRef:documentID="xmp.did:BCB95722648AE111A86BB806ED51E581"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>......................................................................................................

Chrome Cache Entry: 188

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	629
Entropy (8bit):	5.3297264306228485
Encrypted:	false
SSDEEP:	12:YGnvZLXKPAaMFVRKJFh5A3fDYnWpWrmIMxeaTjtUk8i3rrWaqf0Cvp8XVZOAvw01:Y84oHFnKfh+DOW0rjSXTjtF3Wb0hHPoM
MD5:	6F63FD30DCED37274D4EEBEF3A746302
SHA1:	4830427994686E3D45C95EAA612BEA41226A7628
SHA-256:	AE69851653255300D1F2123BCD93B3BEC2F8142F9ED1BEFFF99F9BCD711CB6EE
SHA-512:	CFCA9809DAFFEF2F7ABD1557672C068130902E07574C2ED5D76BFCF2E01A3583B086664DD91976F2CB506C7D2871ED43601593BF753A54B3DB90D3FB3E0BA3A0
Malicious:	false
URL:	https://0obt.menus-unlimited.com/settings.txt?a=1726849134833
Preview:	{"ctb":"no","cth":"no","mth":"no","ule":"no","tor":"no","ttss":"2inphilly.com,0x4AAAAAAAe5Ztsfj0i8aSui\r\nalesovky.com,0x4AAAAAAAfCYCikLWEVd2MX\r\npneuservisjirkalovi.com,0x4AAAAAAAgkvm4spQzGkEqY\r\ncurrys-times.com,0x4AAAAAAAgkwofq8HwMUajy\r\napartmentforrentinicon56.com,0x4AAAAAAAgkw8XLxaj4YhZR\r\nagence-immobiliere-luberon.com,0x4AAAAAAAgkxhxcptj-vLwi\r\nillinoismanufacturing.net,0x4AAAAAAAkF7uYpHYG71AMT\r\nmenus-unlimited.com,0x4AAAAAAAkF7znPRls4zQt2","preloader":"v5","none_to":"0","re_black":"on","rwne":"yes","tel_bots":"6388900022:AAE_CEfuukCCkRS0AthYWETGve9evSsvTGE<>5961514253","red_to_wild":"no","remove_404":"no"}

Chrome Cache Entry: 189

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
URL:	https://ajax.aspnetcdn.com/ajax/jQuery/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 190

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 191

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 192

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 24 x 24
Category:	dropped
Size (bytes):	2463
Entropy (8bit):	6.994052150121201
Encrypted:	false
SSDEEP:	48:H0itvnLUG0J3nL8VO2ocia6Dk4MAbpGW4YBE/2p:HfNmT2QDnMAbsWTp
MD5:	93DE6FB07C1382459E473381DA5D0E7E
SHA1:	4E1208D482A7ABA8C86FDCF8E0E92C90BB8C8C8A
SHA-256:	E97FA0CFE4B0A7BB22E9713A67D4667DA064E674A944D607E78F0D3BF48E57A5
SHA-512:	B415DE10B55639DD5DFDD038FD490B675059122373659DD86AA00EBC7F6735FD22360264226F8675741FB76F3B3A16E9AB7FA907F489B377EF16E9222AA26E3B
Malicious:	false
Preview:	GIF89a.............!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:BCB95722648AE111A86BB806ED51E581" xmpMM:DocumentID="xmp.did:185F1A028B0511E19AA1A07B5BDC793D" xmpMM:InstanceID="xmp.iid:185F1A018B0511E19AA1A07B5BDC793D" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D7EC7F987A8AE111A86BB806ED51E581" stRef:documentID="xmp.did:BCB95722648AE111A86BB806ED51E581"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>......................................................................................................

Chrome Cache Entry: 193

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26951
Entropy (8bit):	4.514992390210281
Encrypted:	false
SSDEEP:	384:jMgviMjM4if38GmhXeC1QRwweTkBE9wbOY4Jf/JhRZ5h+73hNVt8oC4veONhLYVi:CLEiJSdo11vIYHqb5Klo8v
MD5:	B3D7A123BE5203A1A3F0F10233ED373F
SHA1:	F4C61F321D8F79A805B356C6EC94090C0D96215C
SHA-256:	EF9453F74B2617D43DCEF4242CF5845101FCFB57289C81BCEB20042B0023A192
SHA-512:	A01BFE8546E59C8AF83280A795B3F56DFA23D556B992813A4EB70089E80621686C7B51EE87B3109502667CAF1F95CBCA074BF607E543A0390BF6F8BB3ECD992B
Malicious:	false
Preview:	var Page_ValidationVer = "125";..var Page_IsValid = true;..var Page_BlockSubmit = false;..var Page_InvalidControlToBeFocused = null;..var Page_TextTypes = /^(text\|password\|file\|search\|tel\|url\|email\|number\|range\|color\|datetime\|date\|month\|week\|time\|datetime-local)$/i;..function ValidatorUpdateDisplay(val) {.. if (typeof(val.display) == "string") {.. if (val.display == "None") {.. return;.. }.. if (val.display == "Dynamic") {.. val.style.display = val.isvalid ? "none" : "inline";.. return;.. }.. }.. if ((navigator.userAgent.indexOf("Mac") > -1) &&.. (navigator.userAgent.indexOf("MSIE") > -1)) {.. val.style.display = "inline";.. }.. val.style.visibility = val.isvalid ? "hidden" : "visible";..}..function ValidatorUpdateIsValid() {.. Page_IsValid = AllValidatorsValid(Page_Validators);..}..function AllValidatorsValid(validators) {.. if ((typeof(validators) != "undefined") && (validators != null)) {

Chrome Cache Entry: 194

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 338 x 72, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4020
Entropy (8bit):	7.929907559552797
Encrypted:	false
SSDEEP:	96:1X+Yg6Iet+ZpBmQKEuhA/4oJqNoCkQV+CX8h:Fg69t+YfPhEBPnC+t
MD5:	36AFB641BECFAD75FED5F4E6E8C39268
SHA1:	2495652F017B7A06D796AFE9C4A06ECD54F9CCFE
SHA-256:	5C2192A3932CB78B431A1AC0F3F3D73414A31C63D5CB279F2687E58C72694200
SHA-512:	08C27020CF80A181B941EE144090FFBDD12ED34BA8CBEC037ACECE63F850FF8A69BE6DDB0EC24F7141C46F27779ED59AF84A55FB367C1B6F8893B444F44C5AF5
Malicious:	false
Preview:	.PNG........IHDR...R...H.......}.....pHYs..!8..!8.E.1`....sRGB.........gAMA......a....IIDATx...r....[ZZ..V.'0......].......z....M..U.%........C.....}...s...mIV.O5...... ...U.Hq@b......Y..../)..hy.._S......KzK...O\5EQ...(....B.(......(J ...(.......B.(......(J ...(.......B.(..H..EQ.C...V...7.//...~...?.....h4:.@TH.E....}........k.v....L./.@TH...pGN.;.....'.(s...k.......4GTH...'O.~...g[..o.."....l..>.G...;..~...&.....d..u.^F.........M.h.....>.}>..........[......E.b..?.u..{.B........M._.iAh.>~.<S...=.@`e..e....R....._ViA.E....R.@...@..vm.'Ei.v..\>QD..e..R......;o.p{......./^d..TH;.,F>..6...1?..E.p.}..J.p...XD.........7.^b..../.w...........n0.+R.V).J.a..^.X.S..B(..W+++..W. ..e%"Z.[.{,....JQ.iG`....(5..e..`u.*.=.)J...........C.!.@..;$.i.F...W.[....#............k.(J.z....`.dB..)..-H...R.H..O.#V..%......W.4>.'..aJ9.2Q..+.R..id`.x..1.. .../.(J%..>2d.QJ..7.\|.S`..10>..}.M#.....4......<f}..OWO..m.;C[;u.\|P!......L...S.Egr.....3.k.......i.........O...

Static File Info

General

File type:	PNG image data, 377 x 355, 8-bit/color RGBA, non-interlaced
Entropy (8bit):	7.933150097027424
TrID:	Portable Network Graphics (16016/1) 100.00%
File name:	2024-09-20 09_ Sandbox .png
File size:	96'083 bytes
MD5:	cf1761ed623c5c952e30148f89d91e87
SHA1:	64bea490d68ba09fdbe579e80c5b5b5ab3f51580
SHA256:	9f04f2d1444951ad0337caaee3134e889f2219919cab74621e8c79e10f1e3e6d
SHA512:	dd716a820a99c7f8a6732ff57f560b0954f58ce93f2905ce2fb58632b272b0258e9894485a073d6847ec707409c7cf64225a0e9bc575fc6164bf4857da8e64a3
SSDEEP:	1536:ugJALzHRggsIa+gPXYI1SWiaV46pHr4DViUut111t9FZL6SeqVMMOyz:ugJ4taDXRiaV49hjuj1RFZWSeEJOY
TLSH:	639313D2571EF6B033992B4633DE40F298D83E6D94EA42D87E2F550768C10F358E2572
File Content Preview:	.PNG........IHDR...y...c......N{.....sRGB.........gAMA......a.....pHYs...%...%.IR$.....tEXtSoftware.Greenshot^U......IDATx^../.tIr&x.,.. .........,.."0@`....%.....,.hR`@.....hR.A......R.A.....hR..@........G.~.D..22oN.....Fx.....^.s.,.O.\|..\|..\|..V>I.S>.S>.

File Icon


Icon Hash:	74f0f0e4c6d6e0e4

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 20, 2024 18:18:40.695472002 CEST	49673	443	192.168.2.16	204.79.197.203
Sep 20, 2024 18:18:42.210396051 CEST	49707	443	192.168.2.16	23.211.8.90
Sep 20, 2024 18:18:42.210490942 CEST	443	49707	23.211.8.90	192.168.2.16
Sep 20, 2024 18:18:42.210587978 CEST	49707	443	192.168.2.16	23.211.8.90
Sep 20, 2024 18:18:42.211225033 CEST	49707	443	192.168.2.16	23.211.8.90
Sep 20, 2024 18:18:42.211263895 CEST	443	49707	23.211.8.90	192.168.2.16
Sep 20, 2024 18:18:42.894427061 CEST	443	49707	23.211.8.90	192.168.2.16
Sep 20, 2024 18:18:42.894558907 CEST	49707	443	192.168.2.16	23.211.8.90
Sep 20, 2024 18:18:42.897109032 CEST	49707	443	192.168.2.16	23.211.8.90
Sep 20, 2024 18:18:42.897152901 CEST	443	49707	23.211.8.90	192.168.2.16
Sep 20, 2024 18:18:42.897577047 CEST	443	49707	23.211.8.90	192.168.2.16
Sep 20, 2024 18:18:42.925381899 CEST	49707	443	192.168.2.16	23.211.8.90
Sep 20, 2024 18:18:42.967449903 CEST	443	49707	23.211.8.90	192.168.2.16
Sep 20, 2024 18:18:43.148741007 CEST	443	49707	23.211.8.90	192.168.2.16
Sep 20, 2024 18:18:43.148935080 CEST	443	49707	23.211.8.90	192.168.2.16
Sep 20, 2024 18:18:43.149030924 CEST	49707	443	192.168.2.16	23.211.8.90
Sep 20, 2024 18:18:43.149122000 CEST	49707	443	192.168.2.16	23.211.8.90
Sep 20, 2024 18:18:43.149122000 CEST	49707	443	192.168.2.16	23.211.8.90
Sep 20, 2024 18:18:43.149169922 CEST	443	49707	23.211.8.90	192.168.2.16
Sep 20, 2024 18:18:43.149195910 CEST	443	49707	23.211.8.90	192.168.2.16
Sep 20, 2024 18:18:43.190749884 CEST	49708	443	192.168.2.16	184.28.90.27
Sep 20, 2024 18:18:43.190798044 CEST	443	49708	184.28.90.27	192.168.2.16
Sep 20, 2024 18:18:43.190896034 CEST	49708	443	192.168.2.16	184.28.90.27
Sep 20, 2024 18:18:43.191188097 CEST	49708	443	192.168.2.16	184.28.90.27
Sep 20, 2024 18:18:43.191225052 CEST	443	49708	184.28.90.27	192.168.2.16
Sep 20, 2024 18:18:43.894165039 CEST	443	49708	184.28.90.27	192.168.2.16
Sep 20, 2024 18:18:43.894273043 CEST	49708	443	192.168.2.16	184.28.90.27
Sep 20, 2024 18:18:43.895484924 CEST	49708	443	192.168.2.16	184.28.90.27
Sep 20, 2024 18:18:43.895515919 CEST	443	49708	184.28.90.27	192.168.2.16
Sep 20, 2024 18:18:43.895859957 CEST	443	49708	184.28.90.27	192.168.2.16
Sep 20, 2024 18:18:43.896905899 CEST	49708	443	192.168.2.16	184.28.90.27
Sep 20, 2024 18:18:43.943413019 CEST	443	49708	184.28.90.27	192.168.2.16
Sep 20, 2024 18:18:44.175147057 CEST	443	49708	184.28.90.27	192.168.2.16
Sep 20, 2024 18:18:44.175251007 CEST	443	49708	184.28.90.27	192.168.2.16
Sep 20, 2024 18:18:44.175323963 CEST	49708	443	192.168.2.16	184.28.90.27
Sep 20, 2024 18:18:44.175772905 CEST	49708	443	192.168.2.16	184.28.90.27
Sep 20, 2024 18:18:44.175772905 CEST	49708	443	192.168.2.16	184.28.90.27
Sep 20, 2024 18:18:44.175820112 CEST	443	49708	184.28.90.27	192.168.2.16
Sep 20, 2024 18:18:44.175848961 CEST	443	49708	184.28.90.27	192.168.2.16
Sep 20, 2024 18:18:44.328138113 CEST	49678	443	192.168.2.16	20.189.173.10
Sep 20, 2024 18:18:44.631844997 CEST	49678	443	192.168.2.16	20.189.173.10
Sep 20, 2024 18:18:45.234862089 CEST	49678	443	192.168.2.16	20.189.173.10
Sep 20, 2024 18:18:45.504951000 CEST	49673	443	192.168.2.16	204.79.197.203
Sep 20, 2024 18:18:46.441345930 CEST	49678	443	192.168.2.16	20.189.173.10
Sep 20, 2024 18:18:48.342782021 CEST	49712	443	192.168.2.16	143.204.215.124
Sep 20, 2024 18:18:48.342803001 CEST	443	49712	143.204.215.124	192.168.2.16
Sep 20, 2024 18:18:48.343010902 CEST	49712	443	192.168.2.16	143.204.215.124
Sep 20, 2024 18:18:48.343350887 CEST	49713	443	192.168.2.16	143.204.215.124
Sep 20, 2024 18:18:48.343475103 CEST	443	49713	143.204.215.124	192.168.2.16
Sep 20, 2024 18:18:48.343561888 CEST	49712	443	192.168.2.16	143.204.215.124
Sep 20, 2024 18:18:48.343575954 CEST	443	49712	143.204.215.124	192.168.2.16
Sep 20, 2024 18:18:48.343576908 CEST	49713	443	192.168.2.16	143.204.215.124
Sep 20, 2024 18:18:48.343692064 CEST	49713	443	192.168.2.16	143.204.215.124
Sep 20, 2024 18:18:48.343714952 CEST	443	49713	143.204.215.124	192.168.2.16
Sep 20, 2024 18:18:48.794862986 CEST	49680	80	192.168.2.16	192.229.211.108
Sep 20, 2024 18:18:48.855082035 CEST	49678	443	192.168.2.16	20.189.173.10
Sep 20, 2024 18:18:49.106817007 CEST	443	49712	143.204.215.124	192.168.2.16
Sep 20, 2024 18:18:49.107095003 CEST	49712	443	192.168.2.16	143.204.215.124
Sep 20, 2024 18:18:49.107108116 CEST	443	49712	143.204.215.124	192.168.2.16
Sep 20, 2024 18:18:49.108726978 CEST	443	49712	143.204.215.124	192.168.2.16
Sep 20, 2024 18:18:49.108803034 CEST	49712	443	192.168.2.16	143.204.215.124
Sep 20, 2024 18:18:49.109678984 CEST	49712	443	192.168.2.16	143.204.215.124
Sep 20, 2024 18:18:49.109761000 CEST	443	49712	143.204.215.124	192.168.2.16
Sep 20, 2024 18:18:49.109905958 CEST	49712	443	192.168.2.16	143.204.215.124
Sep 20, 2024 18:18:49.109915018 CEST	443	49712	143.204.215.124	192.168.2.16
Sep 20, 2024 18:18:49.110075951 CEST	49680	80	192.168.2.16	192.229.211.108
Sep 20, 2024 18:18:49.148753881 CEST	443	49713	143.204.215.124	192.168.2.16
Sep 20, 2024 18:18:49.149137020 CEST	49713	443	192.168.2.16	143.204.215.124
Sep 20, 2024 18:18:49.149202108 CEST	443	49713	143.204.215.124	192.168.2.16
Sep 20, 2024 18:18:49.153172016 CEST	443	49713	143.204.215.124	192.168.2.16
Sep 20, 2024 18:18:49.153255939 CEST	49713	443	192.168.2.16	143.204.215.124
Sep 20, 2024 18:18:49.153523922 CEST	49713	443	192.168.2.16	143.204.215.124
Sep 20, 2024 18:18:49.153717041 CEST	443	49713	143.204.215.124	192.168.2.16
Sep 20, 2024 18:18:49.157175064 CEST	49712	443	192.168.2.16	143.204.215.124
Sep 20, 2024 18:18:49.204149961 CEST	49713	443	192.168.2.16	143.204.215.124
Sep 20, 2024 18:18:49.204180956 CEST	443	49713	143.204.215.124	192.168.2.16
Sep 20, 2024 18:18:49.252075911 CEST	49713	443	192.168.2.16	143.204.215.124
Sep 20, 2024 18:18:49.718283892 CEST	49680	80	192.168.2.16	192.229.211.108
Sep 20, 2024 18:18:49.814344883 CEST	443	49712	143.204.215.124	192.168.2.16
Sep 20, 2024 18:18:49.814872026 CEST	49712	443	192.168.2.16	143.204.215.124
Sep 20, 2024 18:18:49.814913034 CEST	443	49712	143.204.215.124	192.168.2.16
Sep 20, 2024 18:18:49.814970970 CEST	49712	443	192.168.2.16	143.204.215.124
Sep 20, 2024 18:18:49.836334944 CEST	49714	443	192.168.2.16	3.68.148.35
Sep 20, 2024 18:18:49.836426020 CEST	443	49714	3.68.148.35	192.168.2.16
Sep 20, 2024 18:18:49.836519003 CEST	49714	443	192.168.2.16	3.68.148.35
Sep 20, 2024 18:18:49.836738110 CEST	49714	443	192.168.2.16	3.68.148.35
Sep 20, 2024 18:18:49.836779118 CEST	443	49714	3.68.148.35	192.168.2.16
Sep 20, 2024 18:18:50.830070019 CEST	443	49714	3.68.148.35	192.168.2.16
Sep 20, 2024 18:18:50.830492973 CEST	49714	443	192.168.2.16	3.68.148.35
Sep 20, 2024 18:18:50.830554962 CEST	443	49714	3.68.148.35	192.168.2.16
Sep 20, 2024 18:18:50.832073927 CEST	443	49714	3.68.148.35	192.168.2.16
Sep 20, 2024 18:18:50.832227945 CEST	49714	443	192.168.2.16	3.68.148.35
Sep 20, 2024 18:18:50.833584070 CEST	49714	443	192.168.2.16	3.68.148.35
Sep 20, 2024 18:18:50.833678961 CEST	443	49714	3.68.148.35	192.168.2.16
Sep 20, 2024 18:18:50.833784103 CEST	49714	443	192.168.2.16	3.68.148.35
Sep 20, 2024 18:18:50.879403114 CEST	443	49714	3.68.148.35	192.168.2.16
Sep 20, 2024 18:18:50.881087065 CEST	49714	443	192.168.2.16	3.68.148.35
Sep 20, 2024 18:18:50.881112099 CEST	443	49714	3.68.148.35	192.168.2.16
Sep 20, 2024 18:18:50.929081917 CEST	49714	443	192.168.2.16	3.68.148.35
Sep 20, 2024 18:18:50.929081917 CEST	49680	80	192.168.2.16	192.229.211.108
Sep 20, 2024 18:18:52.201468945 CEST	443	49714	3.68.148.35	192.168.2.16
Sep 20, 2024 18:18:52.201586962 CEST	443	49714	3.68.148.35	192.168.2.16
Sep 20, 2024 18:18:52.201708078 CEST	49714	443	192.168.2.16	3.68.148.35
Sep 20, 2024 18:18:52.203655958 CEST	49714	443	192.168.2.16	3.68.148.35
Sep 20, 2024 18:18:52.203679085 CEST	443	49714	3.68.148.35	192.168.2.16
Sep 20, 2024 18:18:52.527178049 CEST	49716	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:52.527280092 CEST	443	49716	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:52.527473927 CEST	49716	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:52.527812004 CEST	49716	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:52.527844906 CEST	443	49716	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:52.866605043 CEST	49717	443	192.168.2.16	20.12.23.50
Sep 20, 2024 18:18:52.866657019 CEST	443	49717	20.12.23.50	192.168.2.16
Sep 20, 2024 18:18:52.867117882 CEST	49717	443	192.168.2.16	20.12.23.50
Sep 20, 2024 18:18:52.869415045 CEST	49717	443	192.168.2.16	20.12.23.50
Sep 20, 2024 18:18:52.869432926 CEST	443	49717	20.12.23.50	192.168.2.16
Sep 20, 2024 18:18:52.980557919 CEST	49718	443	192.168.2.16	142.250.184.228
Sep 20, 2024 18:18:52.980593920 CEST	443	49718	142.250.184.228	192.168.2.16
Sep 20, 2024 18:18:52.980674028 CEST	49718	443	192.168.2.16	142.250.184.228
Sep 20, 2024 18:18:52.980999947 CEST	49718	443	192.168.2.16	142.250.184.228
Sep 20, 2024 18:18:52.981018066 CEST	443	49718	142.250.184.228	192.168.2.16
Sep 20, 2024 18:18:53.014875889 CEST	443	49716	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:53.015705109 CEST	49716	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:53.015765905 CEST	443	49716	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:53.017340899 CEST	443	49716	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:53.017441988 CEST	49716	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:53.018929005 CEST	49716	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:53.019038916 CEST	443	49716	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:53.019069910 CEST	49716	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:53.019283056 CEST	49716	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:53.019323111 CEST	443	49716	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:53.019350052 CEST	443	49716	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:53.019357920 CEST	49716	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:53.019445896 CEST	49716	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:53.019445896 CEST	49716	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:53.020257950 CEST	49719	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:53.020318031 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:53.020665884 CEST	49719	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:53.022953033 CEST	49719	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:53.022985935 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:53.334115028 CEST	49680	80	192.168.2.16	192.229.211.108
Sep 20, 2024 18:18:53.522139072 CEST	443	49717	20.12.23.50	192.168.2.16
Sep 20, 2024 18:18:53.522239923 CEST	49717	443	192.168.2.16	20.12.23.50
Sep 20, 2024 18:18:53.526392937 CEST	49717	443	192.168.2.16	20.12.23.50
Sep 20, 2024 18:18:53.526400089 CEST	443	49717	20.12.23.50	192.168.2.16
Sep 20, 2024 18:18:53.526746035 CEST	443	49717	20.12.23.50	192.168.2.16
Sep 20, 2024 18:18:53.530713081 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:53.531078100 CEST	49719	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:53.531137943 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:53.532813072 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:53.532912970 CEST	49719	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:53.534368038 CEST	49719	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:53.534460068 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:53.534657955 CEST	49719	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:53.572082043 CEST	49717	443	192.168.2.16	20.12.23.50
Sep 20, 2024 18:18:53.575428963 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:53.588056087 CEST	49719	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:53.588088989 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:53.619782925 CEST	49717	443	192.168.2.16	20.12.23.50
Sep 20, 2024 18:18:53.636077881 CEST	49719	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:53.649307013 CEST	443	49718	142.250.184.228	192.168.2.16
Sep 20, 2024 18:18:53.649708033 CEST	49718	443	192.168.2.16	142.250.184.228
Sep 20, 2024 18:18:53.649718046 CEST	443	49718	142.250.184.228	192.168.2.16
Sep 20, 2024 18:18:53.650942087 CEST	443	49718	142.250.184.228	192.168.2.16
Sep 20, 2024 18:18:53.651036024 CEST	49718	443	192.168.2.16	142.250.184.228
Sep 20, 2024 18:18:53.667404890 CEST	443	49717	20.12.23.50	192.168.2.16
Sep 20, 2024 18:18:53.668117046 CEST	49678	443	192.168.2.16	20.189.173.10
Sep 20, 2024 18:18:53.672503948 CEST	49718	443	192.168.2.16	142.250.184.228
Sep 20, 2024 18:18:53.672703028 CEST	443	49718	142.250.184.228	192.168.2.16
Sep 20, 2024 18:18:53.716093063 CEST	49718	443	192.168.2.16	142.250.184.228
Sep 20, 2024 18:18:53.716101885 CEST	443	49718	142.250.184.228	192.168.2.16
Sep 20, 2024 18:18:53.726519108 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:53.726964951 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:53.727058887 CEST	49719	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:53.727078915 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:53.727111101 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:53.727174044 CEST	49719	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:53.727216005 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:53.727741957 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:53.727814913 CEST	49719	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:53.727837086 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:53.729167938 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:53.729263067 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:53.729269028 CEST	49719	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:53.729285955 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:53.729568958 CEST	49719	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:53.730885029 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:53.735157013 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:53.735438108 CEST	49719	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:53.735455990 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:53.764074087 CEST	49718	443	192.168.2.16	142.250.184.228
Sep 20, 2024 18:18:53.780073881 CEST	49719	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:53.997679949 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:53.997802019 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:53.997864008 CEST	49719	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:53.997890949 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:53.997973919 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:53.998020887 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:53.998043060 CEST	49719	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:53.998049021 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:53.998112917 CEST	49719	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:53.998138905 CEST	443	49717	20.12.23.50	192.168.2.16
Sep 20, 2024 18:18:53.998157024 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:53.998177052 CEST	443	49717	20.12.23.50	192.168.2.16
Sep 20, 2024 18:18:53.998193026 CEST	443	49717	20.12.23.50	192.168.2.16
Sep 20, 2024 18:18:53.998209000 CEST	443	49717	20.12.23.50	192.168.2.16
Sep 20, 2024 18:18:53.998219967 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:53.998245001 CEST	49717	443	192.168.2.16	20.12.23.50
Sep 20, 2024 18:18:53.998253107 CEST	443	49717	20.12.23.50	192.168.2.16
Sep 20, 2024 18:18:53.998272896 CEST	443	49717	20.12.23.50	192.168.2.16
Sep 20, 2024 18:18:53.998294115 CEST	49717	443	192.168.2.16	20.12.23.50
Sep 20, 2024 18:18:53.998296022 CEST	49719	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:53.998301029 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:53.998331070 CEST	49717	443	192.168.2.16	20.12.23.50
Sep 20, 2024 18:18:53.998366117 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:53.998414040 CEST	49719	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:53.998419046 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:53.998472929 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:53.998522043 CEST	49719	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:53.998526096 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:53.998574972 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:53.998625040 CEST	49719	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:53.998630047 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:53.998665094 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:53.998725891 CEST	49719	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:53.998730898 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:54.002121925 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:54.002204895 CEST	49719	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:54.002211094 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:54.002345085 CEST	443	49717	20.12.23.50	192.168.2.16
Sep 20, 2024 18:18:54.002362013 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:54.002428055 CEST	49717	443	192.168.2.16	20.12.23.50
Sep 20, 2024 18:18:54.002434015 CEST	443	49717	20.12.23.50	192.168.2.16
Sep 20, 2024 18:18:54.002461910 CEST	443	49717	20.12.23.50	192.168.2.16
Sep 20, 2024 18:18:54.002461910 CEST	49719	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:54.002468109 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:54.002516031 CEST	49717	443	192.168.2.16	20.12.23.50
Sep 20, 2024 18:18:54.005656004 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:54.005702019 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:54.005765915 CEST	49719	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:54.005772114 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:54.005814075 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:54.005816936 CEST	49719	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:54.005826950 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:54.005896091 CEST	49719	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:54.005901098 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:54.006628036 CEST	49720	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:18:54.006720066 CEST	443	49720	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:54.006849051 CEST	49720	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:18:54.007011890 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:54.007066965 CEST	49719	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:54.007076979 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:54.007205009 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:54.007282019 CEST	49719	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:54.009376049 CEST	49720	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:18:54.009413004 CEST	443	49720	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:54.009500027 CEST	49719	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:54.009516001 CEST	443	49719	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:54.017045975 CEST	49722	443	192.168.2.16	162.19.58.161
Sep 20, 2024 18:18:54.017071962 CEST	443	49722	162.19.58.161	192.168.2.16
Sep 20, 2024 18:18:54.017415047 CEST	49722	443	192.168.2.16	162.19.58.161
Sep 20, 2024 18:18:54.017646074 CEST	49722	443	192.168.2.16	162.19.58.161
Sep 20, 2024 18:18:54.017673016 CEST	443	49722	162.19.58.161	192.168.2.16
Sep 20, 2024 18:18:54.023402929 CEST	49717	443	192.168.2.16	20.12.23.50
Sep 20, 2024 18:18:54.023413897 CEST	443	49717	20.12.23.50	192.168.2.16
Sep 20, 2024 18:18:54.023425102 CEST	49717	443	192.168.2.16	20.12.23.50
Sep 20, 2024 18:18:54.023430109 CEST	443	49717	20.12.23.50	192.168.2.16
Sep 20, 2024 18:18:54.568912983 CEST	443	49720	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:54.569282055 CEST	49720	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:18:54.569345951 CEST	443	49720	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:54.570410967 CEST	443	49720	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:54.570503950 CEST	49720	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:18:54.571688890 CEST	49720	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:18:54.571765900 CEST	443	49720	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:54.571897030 CEST	49720	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:18:54.619410038 CEST	443	49720	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:54.620089054 CEST	49720	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:18:54.620117903 CEST	443	49720	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:54.668171883 CEST	49720	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:18:54.682389975 CEST	443	49722	162.19.58.161	192.168.2.16
Sep 20, 2024 18:18:54.682691097 CEST	49722	443	192.168.2.16	162.19.58.161
Sep 20, 2024 18:18:54.682740927 CEST	443	49722	162.19.58.161	192.168.2.16
Sep 20, 2024 18:18:54.684412956 CEST	443	49722	162.19.58.161	192.168.2.16
Sep 20, 2024 18:18:54.684492111 CEST	49722	443	192.168.2.16	162.19.58.161
Sep 20, 2024 18:18:54.686209917 CEST	49722	443	192.168.2.16	162.19.58.161
Sep 20, 2024 18:18:54.686306000 CEST	443	49722	162.19.58.161	192.168.2.16
Sep 20, 2024 18:18:54.686423063 CEST	49722	443	192.168.2.16	162.19.58.161
Sep 20, 2024 18:18:54.686441898 CEST	443	49722	162.19.58.161	192.168.2.16
Sep 20, 2024 18:18:54.734106064 CEST	49722	443	192.168.2.16	162.19.58.161
Sep 20, 2024 18:18:54.792562962 CEST	443	49720	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:54.792619944 CEST	443	49720	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:54.792735100 CEST	49720	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:18:54.793159008 CEST	49720	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:18:54.793200016 CEST	443	49720	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:54.794815063 CEST	49723	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:18:54.794864893 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:54.795094967 CEST	49723	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:18:54.795285940 CEST	49723	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:18:54.795316935 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:55.071787119 CEST	443	49722	162.19.58.161	192.168.2.16
Sep 20, 2024 18:18:55.071805000 CEST	443	49722	162.19.58.161	192.168.2.16
Sep 20, 2024 18:18:55.071932077 CEST	49722	443	192.168.2.16	162.19.58.161
Sep 20, 2024 18:18:55.071976900 CEST	443	49722	162.19.58.161	192.168.2.16
Sep 20, 2024 18:18:55.072082996 CEST	49722	443	192.168.2.16	162.19.58.161
Sep 20, 2024 18:18:55.084610939 CEST	443	49722	162.19.58.161	192.168.2.16
Sep 20, 2024 18:18:55.084712982 CEST	49722	443	192.168.2.16	162.19.58.161
Sep 20, 2024 18:18:55.090919971 CEST	443	49722	162.19.58.161	192.168.2.16
Sep 20, 2024 18:18:55.091010094 CEST	49722	443	192.168.2.16	162.19.58.161
Sep 20, 2024 18:18:55.115410089 CEST	49673	443	192.168.2.16	204.79.197.203
Sep 20, 2024 18:18:55.167918921 CEST	443	49722	162.19.58.161	192.168.2.16
Sep 20, 2024 18:18:55.168061018 CEST	49722	443	192.168.2.16	162.19.58.161
Sep 20, 2024 18:18:55.168207884 CEST	443	49722	162.19.58.161	192.168.2.16
Sep 20, 2024 18:18:55.168344975 CEST	49722	443	192.168.2.16	162.19.58.161
Sep 20, 2024 18:18:55.168886900 CEST	443	49722	162.19.58.161	192.168.2.16
Sep 20, 2024 18:18:55.168963909 CEST	443	49722	162.19.58.161	192.168.2.16
Sep 20, 2024 18:18:55.168977022 CEST	49722	443	192.168.2.16	162.19.58.161
Sep 20, 2024 18:18:55.169028044 CEST	49722	443	192.168.2.16	162.19.58.161
Sep 20, 2024 18:18:55.169104099 CEST	49722	443	192.168.2.16	162.19.58.161
Sep 20, 2024 18:18:55.169131994 CEST	443	49722	162.19.58.161	192.168.2.16
Sep 20, 2024 18:18:55.169162035 CEST	49722	443	192.168.2.16	162.19.58.161
Sep 20, 2024 18:18:55.169188023 CEST	49722	443	192.168.2.16	162.19.58.161
Sep 20, 2024 18:18:55.196970940 CEST	49724	443	192.168.2.16	162.19.58.160
Sep 20, 2024 18:18:55.197061062 CEST	443	49724	162.19.58.160	192.168.2.16
Sep 20, 2024 18:18:55.197191000 CEST	49724	443	192.168.2.16	162.19.58.160
Sep 20, 2024 18:18:55.197407961 CEST	49724	443	192.168.2.16	162.19.58.160
Sep 20, 2024 18:18:55.197442055 CEST	443	49724	162.19.58.160	192.168.2.16
Sep 20, 2024 18:18:55.312710047 CEST	49726	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:55.312742949 CEST	443	49726	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:55.312939882 CEST	49726	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:55.313054085 CEST	49727	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:55.313095093 CEST	443	49727	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:55.313169956 CEST	49727	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:55.313785076 CEST	49726	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:55.313802958 CEST	443	49726	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:55.313894987 CEST	49727	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:55.313916922 CEST	443	49727	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:55.356774092 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:55.357582092 CEST	49723	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:18:55.357626915 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:55.358711958 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:55.359169006 CEST	49723	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:18:55.359338045 CEST	49723	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:18:55.359350920 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:55.403099060 CEST	49723	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:18:55.403130054 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:55.525055885 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:55.525083065 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:55.525158882 CEST	49723	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:18:55.525190115 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:55.525407076 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:55.525425911 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:55.525477886 CEST	49723	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:18:55.525497913 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:55.525557041 CEST	49723	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:18:55.529577017 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:55.529604912 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:55.529642105 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:55.529659986 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:55.529690027 CEST	49723	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:18:55.529707909 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:55.529737949 CEST	49723	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:18:55.579093933 CEST	49723	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:18:55.579128027 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:55.619102001 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:55.619251966 CEST	49723	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:18:55.619273901 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:55.620315075 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:55.620553017 CEST	49723	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:18:55.620568037 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:55.620899916 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:55.620923042 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:55.621006012 CEST	49723	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:18:55.621043921 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:55.621107101 CEST	49723	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:18:55.621547937 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:55.622188091 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:55.622262001 CEST	49723	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:18:55.622276068 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:55.623272896 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:55.623349905 CEST	49723	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:18:55.623366117 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:55.624303102 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:55.624366045 CEST	49723	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:18:55.624383926 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:55.625319958 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:55.625418901 CEST	49723	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:18:55.625432968 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:55.625576019 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:55.625675917 CEST	49723	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:18:55.625691891 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:55.627490044 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:55.627589941 CEST	49723	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:18:55.627621889 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:55.675092936 CEST	49723	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:18:55.714553118 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:55.714761019 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:55.714875937 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:55.714960098 CEST	49723	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:18:55.715002060 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:55.715027094 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:55.715053082 CEST	49723	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:18:55.715106010 CEST	49723	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:18:55.717411995 CEST	49723	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:18:55.717447996 CEST	443	49723	104.18.95.41	192.168.2.16
Sep 20, 2024 18:18:55.767400980 CEST	49730	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:55.767432928 CEST	443	49730	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:55.767673969 CEST	49730	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:55.768013954 CEST	49730	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:55.768027067 CEST	443	49730	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:55.779001951 CEST	49731	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:18:55.779073000 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:55.779292107 CEST	49731	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:18:55.779565096 CEST	49731	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:18:55.779597044 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:55.817070961 CEST	443	49727	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:55.823438883 CEST	49727	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:55.823457003 CEST	443	49727	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:55.824901104 CEST	443	49727	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:55.825040102 CEST	49727	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:55.825984955 CEST	49727	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:55.825984955 CEST	49727	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:55.826070070 CEST	443	49727	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:55.826271057 CEST	443	49727	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:55.826371908 CEST	49727	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:55.827863932 CEST	49727	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:55.827863932 CEST	49727	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:55.827882051 CEST	443	49727	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:55.828000069 CEST	49727	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:55.828280926 CEST	49732	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:55.828303099 CEST	443	49732	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:55.828466892 CEST	49732	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:55.830674887 CEST	443	49726	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:55.830693007 CEST	49732	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:55.830705881 CEST	443	49732	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:55.832776070 CEST	49726	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:55.832804918 CEST	443	49726	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:55.835258007 CEST	443	49726	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:55.835411072 CEST	49726	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:55.838274956 CEST	49726	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:55.838274956 CEST	49726	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:55.838345051 CEST	49726	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:55.838357925 CEST	443	49726	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:55.838427067 CEST	49726	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:55.840468884 CEST	49733	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:55.840492964 CEST	443	49733	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:55.840703011 CEST	49733	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:55.842571020 CEST	49733	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:55.842585087 CEST	443	49733	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:55.871745110 CEST	443	49724	162.19.58.160	192.168.2.16
Sep 20, 2024 18:18:55.872375011 CEST	49724	443	192.168.2.16	162.19.58.160
Sep 20, 2024 18:18:55.872397900 CEST	443	49724	162.19.58.160	192.168.2.16
Sep 20, 2024 18:18:55.875979900 CEST	443	49724	162.19.58.160	192.168.2.16
Sep 20, 2024 18:18:55.876082897 CEST	49724	443	192.168.2.16	162.19.58.160
Sep 20, 2024 18:18:55.877306938 CEST	49724	443	192.168.2.16	162.19.58.160
Sep 20, 2024 18:18:55.877388000 CEST	443	49724	162.19.58.160	192.168.2.16
Sep 20, 2024 18:18:55.879399061 CEST	49724	443	192.168.2.16	162.19.58.160
Sep 20, 2024 18:18:55.879414082 CEST	443	49724	162.19.58.160	192.168.2.16
Sep 20, 2024 18:18:55.929089069 CEST	49724	443	192.168.2.16	162.19.58.160
Sep 20, 2024 18:18:56.128056049 CEST	443	49724	162.19.58.160	192.168.2.16
Sep 20, 2024 18:18:56.128112078 CEST	443	49724	162.19.58.160	192.168.2.16
Sep 20, 2024 18:18:56.128175020 CEST	49724	443	192.168.2.16	162.19.58.160
Sep 20, 2024 18:18:56.128197908 CEST	443	49724	162.19.58.160	192.168.2.16
Sep 20, 2024 18:18:56.128269911 CEST	49724	443	192.168.2.16	162.19.58.160
Sep 20, 2024 18:18:56.128410101 CEST	443	49724	162.19.58.160	192.168.2.16
Sep 20, 2024 18:18:56.128485918 CEST	49724	443	192.168.2.16	162.19.58.160
Sep 20, 2024 18:18:56.132250071 CEST	443	49724	162.19.58.160	192.168.2.16
Sep 20, 2024 18:18:56.132335901 CEST	49724	443	192.168.2.16	162.19.58.160
Sep 20, 2024 18:18:56.141875029 CEST	443	49724	162.19.58.160	192.168.2.16
Sep 20, 2024 18:18:56.141943932 CEST	49724	443	192.168.2.16	162.19.58.160
Sep 20, 2024 18:18:56.230741978 CEST	443	49724	162.19.58.160	192.168.2.16
Sep 20, 2024 18:18:56.230818987 CEST	49724	443	192.168.2.16	162.19.58.160
Sep 20, 2024 18:18:56.231528997 CEST	443	49724	162.19.58.160	192.168.2.16
Sep 20, 2024 18:18:56.231618881 CEST	49724	443	192.168.2.16	162.19.58.160
Sep 20, 2024 18:18:56.231633902 CEST	443	49724	162.19.58.160	192.168.2.16
Sep 20, 2024 18:18:56.231668949 CEST	443	49724	162.19.58.160	192.168.2.16
Sep 20, 2024 18:18:56.231724977 CEST	49724	443	192.168.2.16	162.19.58.160
Sep 20, 2024 18:18:56.231765032 CEST	49724	443	192.168.2.16	162.19.58.160
Sep 20, 2024 18:18:56.231765032 CEST	49724	443	192.168.2.16	162.19.58.160
Sep 20, 2024 18:18:56.231791973 CEST	443	49724	162.19.58.160	192.168.2.16
Sep 20, 2024 18:18:56.231852055 CEST	49724	443	192.168.2.16	162.19.58.160
Sep 20, 2024 18:18:56.282052040 CEST	443	49730	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:56.282322884 CEST	49730	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:56.282336950 CEST	443	49730	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:56.283174038 CEST	443	49730	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:56.283248901 CEST	49730	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:56.283677101 CEST	49730	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:56.283727884 CEST	443	49730	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:56.283744097 CEST	49730	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:56.283765078 CEST	49730	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:56.283798933 CEST	49730	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:56.284216881 CEST	49734	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:56.284261942 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:56.284343958 CEST	49734	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:56.284559965 CEST	49734	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:56.284575939 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:56.341809034 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:56.342077971 CEST	49731	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:18:56.342093945 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:56.342952967 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:56.343046904 CEST	49731	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:18:56.343532085 CEST	49731	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:18:56.343591928 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:56.343791962 CEST	49731	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:18:56.343803883 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:56.389062881 CEST	49731	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:18:56.389807940 CEST	443	49732	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:56.390336990 CEST	49732	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:56.390357971 CEST	443	49732	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:56.391781092 CEST	443	49732	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:56.391859055 CEST	49732	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:56.392307043 CEST	49732	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:56.392345905 CEST	49732	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:56.392358065 CEST	443	49732	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:56.392420053 CEST	443	49732	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:56.405783892 CEST	443	49733	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:56.406049013 CEST	49733	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:56.406063080 CEST	443	49733	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:56.409670115 CEST	443	49733	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:56.409734964 CEST	49733	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:56.410026073 CEST	49733	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:56.410157919 CEST	49733	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:56.410164118 CEST	443	49733	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:56.410203934 CEST	443	49733	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:56.437069893 CEST	49732	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:56.437078953 CEST	443	49732	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:56.453073025 CEST	49733	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:56.453082085 CEST	443	49733	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:56.476774931 CEST	56588	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:18:56.481678963 CEST	53	56588	1.1.1.1	192.168.2.16
Sep 20, 2024 18:18:56.481750965 CEST	56588	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:18:56.484126091 CEST	49732	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:56.487317085 CEST	53	56588	1.1.1.1	192.168.2.16
Sep 20, 2024 18:18:56.495754957 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:56.495898008 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:56.495961905 CEST	49731	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:18:56.495978117 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:56.496099949 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:56.496162891 CEST	49731	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:18:56.496186972 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:56.496212006 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:56.496283054 CEST	49731	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:18:56.496304989 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:56.496452093 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:56.496506929 CEST	49731	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:18:56.496517897 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:56.496614933 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:56.496668100 CEST	49731	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:18:56.496679068 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:56.500080109 CEST	49733	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:56.548062086 CEST	49731	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:18:56.548073053 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:56.588284969 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:56.588357925 CEST	49731	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:18:56.588376045 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:56.588479042 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:56.588567972 CEST	49731	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:18:56.588578939 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:56.588607073 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:56.588665962 CEST	49731	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:18:56.588697910 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:56.589020967 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:56.589085102 CEST	49731	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:18:56.589096069 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:56.589497089 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:56.589564085 CEST	49731	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:18:56.589575052 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:56.589663982 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:56.589725971 CEST	49731	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:18:56.589736938 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:56.590143919 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:56.590204954 CEST	49731	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:18:56.590214968 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:56.590306044 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:56.590358019 CEST	49731	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:18:56.590368986 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:56.590995073 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:56.591054916 CEST	49731	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:18:56.591064930 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:56.591156960 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:56.591204882 CEST	49731	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:18:56.591216087 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:56.591772079 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:56.591836929 CEST	49731	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:18:56.591847897 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:56.592854977 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:56.592916012 CEST	49731	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:18:56.592926025 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:56.593000889 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:56.593051910 CEST	49731	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:18:56.593126059 CEST	49731	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:18:56.593144894 CEST	443	49731	104.18.94.41	192.168.2.16
Sep 20, 2024 18:18:56.603132010 CEST	443	49732	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:56.603858948 CEST	443	49732	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:56.603921890 CEST	49732	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:56.604046106 CEST	49732	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:56.604068041 CEST	443	49732	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:56.625860929 CEST	56591	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:56.625885963 CEST	443	56591	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:56.625961065 CEST	56591	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:56.626172066 CEST	56591	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:56.626185894 CEST	443	56591	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:56.632749081 CEST	443	49733	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:56.632899046 CEST	443	49733	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:56.632956982 CEST	49733	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:56.633428097 CEST	49733	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:56.633439064 CEST	443	49733	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:56.636133909 CEST	56592	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:56.636173010 CEST	443	56592	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:56.636243105 CEST	56592	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:56.636540890 CEST	56592	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:56.636558056 CEST	443	56592	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:56.767457962 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:56.767694950 CEST	49734	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:56.767705917 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:56.769104958 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:56.769170046 CEST	49734	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:56.769618034 CEST	49734	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:56.769695997 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:56.769819975 CEST	49734	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:56.769826889 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:56.817068100 CEST	49734	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:56.946779013 CEST	56588	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:18:56.952404022 CEST	53	56588	1.1.1.1	192.168.2.16
Sep 20, 2024 18:18:56.952800989 CEST	56588	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:18:56.970601082 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:56.970664978 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:56.970709085 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:56.970710039 CEST	49734	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:56.970730066 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:56.970803976 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:56.970849991 CEST	49734	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:56.970854044 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:56.970868111 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:56.970901012 CEST	49734	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:56.970938921 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:56.970983028 CEST	49734	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:56.970989943 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:56.975405931 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:56.975459099 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:56.975481987 CEST	49734	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:56.975487947 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:56.975529909 CEST	49734	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:56.975536108 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:57.023099899 CEST	49734	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:57.057343006 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:57.057420015 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:57.057460070 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:57.057493925 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:57.057517052 CEST	49734	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:57.057534933 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:57.057562113 CEST	49734	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:57.057581902 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:57.057638884 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:57.057679892 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:57.057692051 CEST	49734	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:57.057701111 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:57.057728052 CEST	49734	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:57.058296919 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:57.058351994 CEST	49734	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:57.058353901 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:57.058363914 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:57.058423042 CEST	49734	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:57.058429003 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:57.058478117 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:57.058522940 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:57.058566093 CEST	49734	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:57.058573008 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:57.058795929 CEST	49734	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:57.059169054 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:57.059242964 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:57.059279919 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:57.059319019 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:57.059335947 CEST	49734	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:57.059343100 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:57.059364080 CEST	49734	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:57.059411049 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:57.059454918 CEST	49734	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:57.059461117 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:57.096935987 CEST	443	56592	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:57.097141981 CEST	56592	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.097162962 CEST	443	56592	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:57.100687027 CEST	443	56592	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:57.100769043 CEST	56592	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.101057053 CEST	56592	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.101073027 CEST	56592	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.101093054 CEST	56592	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.101228952 CEST	443	56592	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:57.101301908 CEST	56592	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.101408005 CEST	56593	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.101434946 CEST	443	56593	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:57.101538897 CEST	56593	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.101741076 CEST	56593	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.101752996 CEST	443	56593	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:57.103080034 CEST	49734	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:57.103085995 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:57.111989975 CEST	443	56591	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:57.112261057 CEST	56591	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.112283945 CEST	443	56591	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:57.115928888 CEST	443	56591	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:57.116022110 CEST	56591	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.116394997 CEST	56591	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.116420984 CEST	56591	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.116467953 CEST	56591	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.116624117 CEST	443	56591	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:57.116722107 CEST	56591	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.116792917 CEST	56594	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.116803885 CEST	443	56594	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:57.116892099 CEST	56594	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.117084026 CEST	56594	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.117095947 CEST	443	56594	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:57.144805908 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:57.144932032 CEST	49734	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:57.144939899 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:57.145350933 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:57.145468950 CEST	49734	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:57.145474911 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:57.145556927 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:57.145589113 CEST	49734	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:57.145596027 CEST	443	49734	188.114.97.3	192.168.2.16
Sep 20, 2024 18:18:57.145611048 CEST	49734	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:18:57.148756027 CEST	56595	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.148797035 CEST	443	56595	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:57.148901939 CEST	56595	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.149230003 CEST	56595	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.149245977 CEST	443	56595	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:57.544783115 CEST	56596	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:18:57.544814110 CEST	443	56596	13.107.246.60	192.168.2.16
Sep 20, 2024 18:18:57.544900894 CEST	56596	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:18:57.545113087 CEST	56596	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:18:57.545129061 CEST	443	56596	13.107.246.60	192.168.2.16
Sep 20, 2024 18:18:57.596016884 CEST	443	56593	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:57.596286058 CEST	56593	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.596317053 CEST	443	56593	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:57.597820997 CEST	443	56593	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:57.597893953 CEST	56593	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.598232031 CEST	56593	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.598309994 CEST	443	56593	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:57.598412037 CEST	56593	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.598419905 CEST	443	56593	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:57.627269030 CEST	443	56594	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:57.627693892 CEST	56594	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.627703905 CEST	443	56594	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:57.631376028 CEST	443	56594	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:57.631474018 CEST	56594	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.631736994 CEST	56594	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.631805897 CEST	443	56595	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:57.631858110 CEST	56594	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.631901026 CEST	443	56594	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:57.632016897 CEST	56595	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.632038116 CEST	443	56595	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:57.634923935 CEST	443	56595	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:57.635004997 CEST	56595	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.635278940 CEST	56595	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.635324001 CEST	56595	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.635356903 CEST	443	56595	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:57.635373116 CEST	56595	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.635411978 CEST	56595	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.635766983 CEST	56597	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.635798931 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:57.636013985 CEST	56597	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.636552095 CEST	56597	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.636568069 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:57.643081903 CEST	56593	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.674073935 CEST	56594	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.674083948 CEST	443	56594	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:57.722062111 CEST	56594	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.769536972 CEST	443	56593	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:57.769651890 CEST	443	56593	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:57.769793987 CEST	56593	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.771872044 CEST	56593	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.771884918 CEST	443	56593	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:57.821436882 CEST	443	56594	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:57.821600914 CEST	443	56594	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:57.821703911 CEST	56594	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.822515011 CEST	56594	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:57.822524071 CEST	443	56594	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.118659973 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.119256020 CEST	56597	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:58.119290113 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.119875908 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.120243073 CEST	56597	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:58.120383024 CEST	56597	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:58.120433092 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.138120890 CEST	49680	80	192.168.2.16	192.229.211.108
Sep 20, 2024 18:18:58.170089960 CEST	56597	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:58.226104021 CEST	443	56596	13.107.246.60	192.168.2.16
Sep 20, 2024 18:18:58.230318069 CEST	56596	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:18:58.230333090 CEST	443	56596	13.107.246.60	192.168.2.16
Sep 20, 2024 18:18:58.231266022 CEST	443	56596	13.107.246.60	192.168.2.16
Sep 20, 2024 18:18:58.231340885 CEST	56596	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:18:58.240945101 CEST	56596	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:18:58.241177082 CEST	443	56596	13.107.246.60	192.168.2.16
Sep 20, 2024 18:18:58.242072105 CEST	56596	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:18:58.242093086 CEST	443	56596	13.107.246.60	192.168.2.16
Sep 20, 2024 18:18:58.282176018 CEST	56596	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:18:58.290080070 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.290137053 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.290184021 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.290227890 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.290230036 CEST	56597	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:58.290241957 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.290303946 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.290340900 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.290383101 CEST	56597	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:58.290383101 CEST	56597	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:58.290396929 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.290586948 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.290632963 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.290637016 CEST	56597	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:58.290644884 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.290677071 CEST	56597	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:58.345213890 CEST	56597	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:58.345232964 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.380975962 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.381031036 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.381073952 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.381114006 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.381118059 CEST	56597	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:58.381118059 CEST	56597	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:58.381129980 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.381184101 CEST	56597	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:58.381251097 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.381326914 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.381373882 CEST	56597	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:58.381380081 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.381443024 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.381510973 CEST	56597	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:58.381516933 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.382155895 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.382200003 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.382215977 CEST	56597	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:58.382224083 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.382261038 CEST	56597	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:58.382272005 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.382306099 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.382416010 CEST	56597	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:58.382421970 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.383043051 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.383085012 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.383114100 CEST	56597	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:58.383121014 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.383163929 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.383169889 CEST	56597	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:58.383176088 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.383215904 CEST	56597	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:58.384068012 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.384165049 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.384212971 CEST	56597	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:58.384219885 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.424088955 CEST	56597	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:58.451814890 CEST	443	56596	13.107.246.60	192.168.2.16
Sep 20, 2024 18:18:58.451890945 CEST	443	56596	13.107.246.60	192.168.2.16
Sep 20, 2024 18:18:58.451968908 CEST	56596	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:18:58.452647924 CEST	56596	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:18:58.452667952 CEST	443	56596	13.107.246.60	192.168.2.16
Sep 20, 2024 18:18:58.466213942 CEST	56598	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:18:58.466280937 CEST	443	56598	13.107.246.60	192.168.2.16
Sep 20, 2024 18:18:58.466423988 CEST	56598	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:18:58.466574907 CEST	56598	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:18:58.466599941 CEST	443	56598	13.107.246.60	192.168.2.16
Sep 20, 2024 18:18:58.471904993 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.472002029 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.472079992 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.472085953 CEST	56597	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:58.472095013 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.472146034 CEST	56597	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:58.472152948 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.472256899 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:58.472316027 CEST	56597	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:58.472388983 CEST	56597	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:18:58.472398043 CEST	443	56597	188.114.96.3	192.168.2.16
Sep 20, 2024 18:18:59.162007093 CEST	443	56598	13.107.246.60	192.168.2.16
Sep 20, 2024 18:18:59.162389994 CEST	56598	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:18:59.162450075 CEST	443	56598	13.107.246.60	192.168.2.16
Sep 20, 2024 18:18:59.163429022 CEST	443	56598	13.107.246.60	192.168.2.16
Sep 20, 2024 18:18:59.163512945 CEST	56598	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:18:59.163909912 CEST	56598	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:18:59.163999081 CEST	443	56598	13.107.246.60	192.168.2.16
Sep 20, 2024 18:18:59.164119959 CEST	56598	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:18:59.164136887 CEST	443	56598	13.107.246.60	192.168.2.16
Sep 20, 2024 18:18:59.206109047 CEST	56598	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:18:59.863166094 CEST	443	56598	13.107.246.60	192.168.2.16
Sep 20, 2024 18:18:59.863354921 CEST	443	56598	13.107.246.60	192.168.2.16
Sep 20, 2024 18:18:59.864835024 CEST	56598	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:18:59.865118980 CEST	56598	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:18:59.865149975 CEST	443	56598	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:01.570352077 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:01.570394039 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:01.570482969 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:01.570740938 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:01.570754051 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.103142023 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.103364944 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.103372097 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.105129957 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.105206013 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.105526924 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.105602980 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.105639935 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.151407003 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.154086113 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.154095888 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.202066898 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.257153034 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.257364035 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.257431984 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.257438898 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.257527113 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.257580996 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.257586002 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.257697105 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.257750988 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.257756948 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.257854939 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.257909060 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.257914066 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.258013010 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.258063078 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.258068085 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.262186050 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.262255907 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.262259960 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.278227091 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.278294086 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.278399944 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.278702021 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.278714895 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.312206030 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.347237110 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.347675085 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.347754002 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.347764015 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.347793102 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.347846031 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.347887039 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.348048925 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.348098993 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.348109007 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.348437071 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.348496914 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.348503113 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.348598003 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.348648071 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.348654032 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.349244118 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.349306107 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.349311113 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.349421024 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.349473000 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.349478960 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.349575996 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.349627018 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.349632025 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.350269079 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.350333929 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.350338936 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.350430012 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.350481987 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.350487947 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.350580931 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.350634098 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.350639105 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.406075954 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.406083107 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.438106060 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.438199043 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.438209057 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.438298941 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.438352108 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.438357115 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.438484907 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.438505888 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.438548088 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.438554049 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.438581944 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.438648939 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.438709021 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.438714027 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.438765049 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.438808918 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.438910961 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.438961983 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.438967943 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.438997984 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.439013004 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.439028978 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.439062119 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.439450979 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.439512968 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.439517975 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.439549923 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.439563036 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.439568043 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.439601898 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.440088034 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.440169096 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.440174103 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.440223932 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.440269947 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.440370083 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.440381050 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.440413952 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.440448046 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.440469980 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.440500975 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.440570116 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.529598951 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.529670954 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.529695988 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.529707909 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.529726028 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.529741049 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.529758930 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.529766083 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.529789925 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.530217886 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.530261040 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.530270100 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.530277014 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.530308962 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.530459881 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.530509949 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.530515909 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.530565977 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.530800104 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.530863047 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.530909061 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.530956984 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.531023026 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.531070948 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.531078100 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.531086922 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.531116962 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.531125069 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.531565905 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.531630993 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.531637907 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.531701088 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.531764984 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.531835079 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.531886101 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.531929970 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.531936884 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.531943083 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.531976938 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.532541037 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.532593966 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.532603025 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.532608032 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.532638073 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.532694101 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.532746077 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.532866001 CEST	56601	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.532875061 CEST	443	56601	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.540579081 CEST	56603	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.540627003 CEST	443	56603	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.540703058 CEST	56603	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.540998936 CEST	56603	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.541018009 CEST	443	56603	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.737071991 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.745959044 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.745973110 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.746443033 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.746817112 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.746882915 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.751317978 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.795402050 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.880198956 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.880268097 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.880316973 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.880337000 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.880347013 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.880388975 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.880393028 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.882622004 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.882678986 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.882683992 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.882900000 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.882944107 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.882949114 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.882958889 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.883078098 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.883083105 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.885253906 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.885318995 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.885323048 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.929145098 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.966758013 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.966871023 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.966924906 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.966926098 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.966939926 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.966995001 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.967000961 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.967411041 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.967463970 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.967473984 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.967835903 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.967880964 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.967891932 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.967896938 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.967931986 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.967936039 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.968754053 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.968796968 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.968812943 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.968816996 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.968863964 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.968868017 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.968890905 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.968935966 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.968940020 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.969719887 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.969783068 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.969785929 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.969795942 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.969835997 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.969849110 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.969923973 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:02.969993114 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:02.969997883 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.009665966 CEST	443	56603	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.009995937 CEST	56603	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:03.010081053 CEST	443	56603	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.010559082 CEST	443	56603	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.010875940 CEST	56603	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:03.010967016 CEST	443	56603	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.011007071 CEST	56603	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:03.023071051 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:03.023077011 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.051455975 CEST	443	56603	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.053404093 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.053446054 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.053483963 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.053483963 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:03.053495884 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.053545952 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:03.053771973 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.053818941 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:03.053987980 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.053994894 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.054044962 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.054080963 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:03.054085970 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.054131985 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:03.054152012 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:03.054155111 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.054214001 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.054308891 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:03.054312944 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.054358959 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:03.054379940 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.054438114 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:03.054510117 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.054553986 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.054564953 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:03.054570913 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.054614067 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:03.054687023 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.054730892 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:03.054735899 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.054775953 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:03.055102110 CEST	56603	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:03.055509090 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.055568933 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:03.055622101 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.055674076 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:03.055749893 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.055795908 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.055823088 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:03.055828094 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.055840015 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:03.055866957 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:03.056067944 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.056121111 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:03.095329046 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.095525980 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:03.140551090 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.140610933 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.140661001 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.140706062 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:03.140717983 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.140744925 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.140759945 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:03.140779018 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:03.140805006 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:03.141024113 CEST	56602	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:03.141036034 CEST	443	56602	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.143860102 CEST	56604	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.143878937 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.143969059 CEST	56604	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.144156933 CEST	56604	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.144175053 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.159703970 CEST	443	56603	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.159787893 CEST	443	56603	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.159853935 CEST	56603	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:03.161998034 CEST	56603	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:03.162045002 CEST	443	56603	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.174015045 CEST	56605	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.174072981 CEST	443	56605	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.174166918 CEST	56605	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.174338102 CEST	56605	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.174369097 CEST	443	56605	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.277122021 CEST	49678	443	192.168.2.16	20.189.173.10
Sep 20, 2024 18:19:03.348093987 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:03.348129034 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.348211050 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:03.348526001 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:03.348540068 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.569556952 CEST	443	49718	142.250.184.228	192.168.2.16
Sep 20, 2024 18:19:03.569623947 CEST	443	49718	142.250.184.228	192.168.2.16
Sep 20, 2024 18:19:03.569811106 CEST	49718	443	192.168.2.16	142.250.184.228
Sep 20, 2024 18:19:03.606585979 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.606935024 CEST	56604	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.606956959 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.607414007 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.607816935 CEST	56604	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.607892990 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.607980967 CEST	56604	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.651477098 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.695779085 CEST	443	56605	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.696229935 CEST	56605	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.696264982 CEST	443	56605	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.696719885 CEST	443	56605	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.697022915 CEST	56605	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.697108030 CEST	443	56605	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.697204113 CEST	56605	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.733469009 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.733596087 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.733688116 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.733769894 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.733777046 CEST	56604	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.733797073 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.733819008 CEST	56604	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.733944893 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.733999014 CEST	56604	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.734005928 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.734100103 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.734147072 CEST	56604	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.734152079 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.738368988 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.738456011 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.738462925 CEST	56604	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.738480091 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.738529921 CEST	56604	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.738557100 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.743412971 CEST	443	56605	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.749432087 CEST	49718	443	192.168.2.16	142.250.184.228
Sep 20, 2024 18:19:03.749473095 CEST	443	49718	142.250.184.228	192.168.2.16
Sep 20, 2024 18:19:03.785197973 CEST	56604	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.819200993 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.819411993 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.819453001 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.819492102 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.819531918 CEST	56604	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.819555044 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.819570065 CEST	56604	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.820029020 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.820065975 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.820087910 CEST	56604	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.820094109 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.820135117 CEST	56604	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.820346117 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.820509911 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.820549011 CEST	56604	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.820553064 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.820589066 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.820633888 CEST	56604	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.820637941 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.821387053 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.821423054 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.821439981 CEST	56604	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.821444988 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.821482897 CEST	56604	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.821568012 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.822272062 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.822314978 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.822319031 CEST	56604	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.822328091 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.822362900 CEST	56604	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.822377920 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.822451115 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.822485924 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.822488070 CEST	56604	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.822495937 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.822529078 CEST	56604	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.824085951 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.832874060 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.833425999 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:03.833450079 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.834153891 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.834605932 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:03.834692001 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.834793091 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:03.834841013 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:03.834877968 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:03.851996899 CEST	443	56605	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.852087975 CEST	443	56605	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.852180958 CEST	56605	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.852863073 CEST	56605	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.852914095 CEST	443	56605	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.879086018 CEST	56604	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.952529907 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.952797890 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.952869892 CEST	56604	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.952883005 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.952976942 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.952996016 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.953039885 CEST	56604	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.953044891 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.953087091 CEST	56604	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.953100920 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.953164101 CEST	56604	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.953196049 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.953303099 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.953356028 CEST	56604	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.953360081 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.953402042 CEST	56604	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.953517914 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.953571081 CEST	56604	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.953604937 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.953661919 CEST	56604	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.953804970 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.953866959 CEST	56604	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.954245090 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.954315901 CEST	56604	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.954457998 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.954514027 CEST	56604	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.954602957 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.954663038 CEST	56604	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.954691887 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.954755068 CEST	56604	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.954802036 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.954857111 CEST	56604	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.955362082 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.955449104 CEST	56604	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.955466032 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.955524921 CEST	56604	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.955851078 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.955987930 CEST	56604	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:03.955987930 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.956016064 CEST	443	56604	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:03.956062078 CEST	56604	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:04.033869982 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.033931017 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.033988953 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.034034014 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.034063101 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.034085035 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.034116030 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.034147024 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.034198046 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.034204006 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.034714937 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.034766912 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.034773111 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.034780025 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.034847975 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.034853935 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.039081097 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.039132118 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.039139032 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.088720083 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.109653950 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.120095968 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.120173931 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.120173931 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.120194912 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.120240927 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.120343924 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.120934963 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.120975018 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.120992899 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.121002913 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.121071100 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.121077061 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.121280909 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.121320009 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.121332884 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.121337891 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.121387005 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.121392012 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.121700048 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.121752977 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.121757984 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.122049093 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.122102976 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.122107983 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.122433901 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.122464895 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.122492075 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.122498035 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.122548103 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.122829914 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.166177034 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.166182995 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.192922115 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.193010092 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.193017006 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.193820000 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.193983078 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.193988085 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.208528996 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.208581924 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.208622932 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.208632946 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.208708048 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.208708048 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.208717108 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.208729029 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.208781958 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.208786011 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.208792925 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.208830118 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.209625006 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.209697962 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.209702969 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.209758997 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.209810019 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.209973097 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.210532904 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.210599899 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.211318970 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.211390018 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.211452007 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.211517096 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.212096930 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.212162018 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.316270113 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.316317081 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.316340923 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.316346884 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.316356897 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.316366911 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.316390038 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.316395044 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.316426039 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.357125998 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.623830080 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.623895884 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.623953104 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.624002934 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.624011040 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.624011040 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.624034882 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.624052048 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.624054909 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.624074936 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.624104023 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.624104023 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.624118090 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.624165058 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.624217033 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.624283075 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.624310017 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.624408960 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.624470949 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.624484062 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.624490023 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.624521017 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.624670029 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.624721050 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.624727011 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.624732971 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.624778986 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.624819994 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.624876976 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.624885082 CEST	443	56606	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.624901056 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.624928951 CEST	56606	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.627823114 CEST	56607	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:04.627862930 CEST	443	56607	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:04.627950907 CEST	56607	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:04.628149986 CEST	56607	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:04.628164053 CEST	443	56607	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:04.862250090 CEST	56608	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.862288952 CEST	443	56608	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:04.862373114 CEST	56608	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.862708092 CEST	56608	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:04.862728119 CEST	443	56608	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:05.129957914 CEST	443	56607	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:05.130431890 CEST	56607	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:05.130455971 CEST	443	56607	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:05.131869078 CEST	443	56607	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:05.132164955 CEST	56607	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:05.132285118 CEST	56607	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:05.132344961 CEST	443	56607	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:05.185090065 CEST	56607	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:05.257271051 CEST	443	56607	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:05.257421970 CEST	443	56607	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:05.257488966 CEST	56607	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:05.257800102 CEST	56607	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:05.257812977 CEST	443	56607	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:05.396064043 CEST	443	56608	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:05.396373034 CEST	56608	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:05.396394014 CEST	443	56608	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:05.397470951 CEST	443	56608	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:05.397752047 CEST	56608	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:05.397890091 CEST	56608	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:05.397897959 CEST	443	56608	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:05.397927999 CEST	443	56608	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:05.440103054 CEST	56608	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:05.546786070 CEST	443	56608	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:05.546941042 CEST	443	56608	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:05.547029018 CEST	56608	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:05.554338932 CEST	56608	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:05.554358959 CEST	443	56608	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:05.573194981 CEST	56609	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:05.573287010 CEST	443	56609	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:05.573395967 CEST	56609	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:05.575269938 CEST	56609	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:05.575289965 CEST	443	56609	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:06.044791937 CEST	443	56609	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:06.052171946 CEST	56609	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:06.052239895 CEST	443	56609	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:06.053333998 CEST	443	56609	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:06.056485891 CEST	56609	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:06.056678057 CEST	443	56609	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:06.057331085 CEST	56609	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:06.068160057 CEST	56610	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:06.068192005 CEST	443	56610	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:06.068288088 CEST	56610	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:06.068470955 CEST	56610	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:06.068478107 CEST	443	56610	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:06.099492073 CEST	443	56609	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:06.202136040 CEST	443	56609	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:06.202301025 CEST	443	56609	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:06.202469110 CEST	56609	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:06.203001976 CEST	56609	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:06.203046083 CEST	443	56609	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:06.573987961 CEST	443	56610	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:06.574341059 CEST	56610	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:06.574364901 CEST	443	56610	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:06.574817896 CEST	443	56610	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:06.575212002 CEST	56610	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:06.575289965 CEST	443	56610	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:06.575390100 CEST	56610	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:06.619431973 CEST	443	56610	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:06.720057011 CEST	443	56610	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:06.720145941 CEST	443	56610	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:06.720208883 CEST	56610	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:06.720230103 CEST	443	56610	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:06.720247984 CEST	443	56610	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:06.720310926 CEST	56610	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:06.721493959 CEST	56610	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:06.721504927 CEST	443	56610	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:06.822478056 CEST	56611	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:06.822516918 CEST	443	56611	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:06.822602987 CEST	56611	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:06.822974920 CEST	56611	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:06.822989941 CEST	443	56611	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:07.288994074 CEST	443	56611	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:07.289360046 CEST	56611	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:07.289376020 CEST	443	56611	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:07.290451050 CEST	443	56611	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:07.290872097 CEST	56611	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:07.291059971 CEST	56611	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:07.291065931 CEST	443	56611	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:07.291137934 CEST	443	56611	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:07.291148901 CEST	56611	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:07.291234970 CEST	443	56611	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:07.291395903 CEST	56611	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:07.291568995 CEST	443	56611	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:07.538008928 CEST	443	56611	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:07.538155079 CEST	443	56611	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:07.538216114 CEST	56611	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:07.538230896 CEST	443	56611	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:07.538316011 CEST	443	56611	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:07.538372993 CEST	56611	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:07.538383007 CEST	443	56611	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:07.538496971 CEST	443	56611	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:07.538548946 CEST	56611	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:07.538557053 CEST	443	56611	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:07.538661957 CEST	443	56611	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:07.538717031 CEST	56611	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:07.538723946 CEST	443	56611	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:07.538820982 CEST	443	56611	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:07.538872957 CEST	56611	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:07.538878918 CEST	443	56611	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:07.591095924 CEST	56611	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:07.591104031 CEST	443	56611	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:07.633483887 CEST	443	56611	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:07.633546114 CEST	443	56611	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:07.633564949 CEST	56611	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:07.633583069 CEST	443	56611	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:07.633620977 CEST	443	56611	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:07.633630037 CEST	56611	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:07.633637905 CEST	443	56611	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:07.633678913 CEST	56611	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:07.633688927 CEST	443	56611	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:07.633759022 CEST	443	56611	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:07.633802891 CEST	56611	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:07.633809090 CEST	443	56611	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:07.633894920 CEST	443	56611	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:07.633939981 CEST	56611	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:07.634021044 CEST	56611	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:07.634035110 CEST	443	56611	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:07.636862993 CEST	56612	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:07.636902094 CEST	443	56612	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:07.636991024 CEST	56612	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:07.637192965 CEST	56612	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:07.637206078 CEST	443	56612	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:07.750118017 CEST	49680	80	192.168.2.16	192.229.211.108
Sep 20, 2024 18:19:08.105901957 CEST	443	56612	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:08.106267929 CEST	56612	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:08.106282949 CEST	443	56612	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:08.107364893 CEST	443	56612	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:08.107872963 CEST	56612	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:08.108040094 CEST	443	56612	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:08.108067989 CEST	56612	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:08.149111032 CEST	56612	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:08.149116993 CEST	443	56612	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:08.238683939 CEST	443	56612	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:08.238854885 CEST	443	56612	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:08.238950968 CEST	56612	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:08.239667892 CEST	56612	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:08.239684105 CEST	443	56612	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:10.514238119 CEST	56613	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:10.514293909 CEST	443	56613	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:10.514383078 CEST	56613	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:10.514694929 CEST	56613	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:10.514714956 CEST	443	56613	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:10.983511925 CEST	443	56613	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:10.983972073 CEST	56613	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:10.983992100 CEST	443	56613	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:10.984447002 CEST	443	56613	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:10.984839916 CEST	56613	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:10.984915972 CEST	443	56613	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:10.985033035 CEST	56613	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:10.985119104 CEST	56613	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:10.985155106 CEST	443	56613	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:10.985255957 CEST	56613	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:10.985290051 CEST	443	56613	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:11.405471087 CEST	443	56613	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:11.405565023 CEST	443	56613	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:11.405610085 CEST	443	56613	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:11.405646086 CEST	56613	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:11.405678034 CEST	443	56613	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:11.405750990 CEST	56613	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:11.405761003 CEST	443	56613	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:11.405822992 CEST	56613	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:11.406649113 CEST	56613	443	192.168.2.16	104.18.95.41
Sep 20, 2024 18:19:11.406672955 CEST	443	56613	104.18.95.41	192.168.2.16
Sep 20, 2024 18:19:11.410837889 CEST	56614	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:11.410896063 CEST	443	56614	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:11.410994053 CEST	56614	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:11.411412001 CEST	56614	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:11.411441088 CEST	443	56614	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:11.413583994 CEST	56615	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:11.413618088 CEST	443	56615	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:11.413705111 CEST	56615	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:11.414067030 CEST	56615	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:11.414083958 CEST	443	56615	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:11.870320082 CEST	443	56614	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:11.870913982 CEST	56614	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:11.870935917 CEST	443	56614	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:11.871248960 CEST	443	56614	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:11.871654987 CEST	56614	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:11.871721983 CEST	443	56614	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:11.871728897 CEST	56614	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:11.879833937 CEST	443	56615	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:11.880060911 CEST	56615	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:11.880094051 CEST	443	56615	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:11.883637905 CEST	443	56615	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:11.883758068 CEST	56615	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:11.884031057 CEST	56615	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:11.884031057 CEST	56615	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:11.884082079 CEST	56615	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:11.884124041 CEST	443	56615	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:11.884192944 CEST	56615	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:11.884387970 CEST	56616	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:11.884444952 CEST	443	56616	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:11.884553909 CEST	56616	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:11.884752989 CEST	56616	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:11.884773016 CEST	443	56616	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:11.915431976 CEST	443	56614	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:11.918266058 CEST	56614	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:12.244345903 CEST	443	56614	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:12.244534016 CEST	443	56614	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:12.244667053 CEST	56614	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:12.245826960 CEST	56614	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:12.245846987 CEST	443	56614	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:12.344811916 CEST	443	56616	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:12.345269918 CEST	56616	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:12.345290899 CEST	443	56616	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:12.345746994 CEST	443	56616	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:12.346218109 CEST	56616	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:12.346297026 CEST	443	56616	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:12.346419096 CEST	56616	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:12.387403965 CEST	443	56616	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:12.535059929 CEST	443	56616	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:12.535299063 CEST	443	56616	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:12.535574913 CEST	56616	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:12.536128044 CEST	56616	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:12.536180019 CEST	443	56616	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:12.540746927 CEST	56617	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:12.540783882 CEST	443	56617	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:12.540868998 CEST	56617	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:12.541322947 CEST	56617	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:12.541340113 CEST	443	56617	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:13.041105032 CEST	443	56617	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:13.041433096 CEST	56617	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:13.041446924 CEST	443	56617	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:13.042304993 CEST	443	56617	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:13.042382956 CEST	56617	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:13.042670965 CEST	56617	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:13.042686939 CEST	56617	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:13.042725086 CEST	443	56617	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:13.042733908 CEST	56617	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:13.042784929 CEST	56617	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:13.043102980 CEST	56618	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:13.043133020 CEST	443	56618	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:13.043220997 CEST	56618	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:13.043432951 CEST	56618	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:13.043445110 CEST	443	56618	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:13.538500071 CEST	443	56618	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:13.538968086 CEST	56618	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:13.538996935 CEST	443	56618	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:13.540492058 CEST	443	56618	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:13.540956974 CEST	56618	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:13.541125059 CEST	56618	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:13.541361094 CEST	443	56618	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:13.591270924 CEST	56618	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:13.744716883 CEST	443	56618	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:13.744821072 CEST	443	56618	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:13.744930983 CEST	56618	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:13.746239901 CEST	56618	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:13.746282101 CEST	443	56618	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:14.549213886 CEST	56619	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:14.549272060 CEST	443	56619	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:14.549375057 CEST	56619	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:14.549848080 CEST	56619	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:14.549866915 CEST	443	56619	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:15.064449072 CEST	443	56619	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:15.064795971 CEST	56619	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:15.064810991 CEST	443	56619	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:15.066226959 CEST	443	56619	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:15.066301107 CEST	56619	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:15.066706896 CEST	56619	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:15.066725016 CEST	56619	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:15.066781998 CEST	443	56619	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:15.066787004 CEST	56619	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:15.066842079 CEST	56619	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:15.067159891 CEST	56620	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:15.067199945 CEST	443	56620	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:15.067282915 CEST	56620	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:15.067538023 CEST	56620	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:15.067553043 CEST	443	56620	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:15.534995079 CEST	443	56620	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:15.535365105 CEST	56620	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:15.535394907 CEST	443	56620	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:15.536822081 CEST	443	56620	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:15.536923885 CEST	56620	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:15.537368059 CEST	56620	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:15.537446976 CEST	443	56620	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:15.537585974 CEST	56620	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:15.537595987 CEST	443	56620	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:15.584203005 CEST	56620	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:15.740811110 CEST	443	56620	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:15.740916967 CEST	443	56620	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:15.741033077 CEST	56620	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:15.742152929 CEST	56620	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:15.742177963 CEST	443	56620	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:15.745341063 CEST	56621	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:15.745423079 CEST	443	56621	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:15.745538950 CEST	56621	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:15.746042967 CEST	56621	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:15.746082067 CEST	443	56621	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:15.889786959 CEST	56622	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:15.889859915 CEST	443	56622	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:15.889978886 CEST	56622	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:15.890208960 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:15.890292883 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:15.890389919 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:15.890431881 CEST	56622	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:15.890464067 CEST	443	56622	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:15.890583038 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:15.890602112 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.210273981 CEST	443	56621	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:16.210669994 CEST	56621	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:16.210704088 CEST	443	56621	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:16.214514017 CEST	443	56621	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:16.214601994 CEST	56621	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:16.215156078 CEST	56621	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:16.215178013 CEST	56621	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:16.215212107 CEST	443	56621	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:16.215257883 CEST	56621	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:16.215296030 CEST	56621	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:16.215697050 CEST	56624	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:16.215749025 CEST	443	56624	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:16.215830088 CEST	56624	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:16.216178894 CEST	56624	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:16.216196060 CEST	443	56624	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:16.589942932 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.590300083 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:16.590333939 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.592015028 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.592114925 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:16.593394995 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:16.593486071 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.593626976 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:16.593643904 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.609788895 CEST	443	56622	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.610145092 CEST	56622	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:16.610208035 CEST	443	56622	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.613682032 CEST	443	56622	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.613826990 CEST	56622	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:16.614160061 CEST	56622	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:16.614252090 CEST	443	56622	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.639106035 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:16.655172110 CEST	56622	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:16.655196905 CEST	443	56622	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.702280045 CEST	56622	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:16.855915070 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.856069088 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.856134892 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:16.856172085 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.856268883 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.856332064 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:16.856344938 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.856440067 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.856504917 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:16.856515884 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.856667995 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.856723070 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:16.856733084 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.856829882 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.856892109 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:16.856901884 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.860326052 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.860393047 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:16.860404015 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.871922016 CEST	443	56624	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:16.872200012 CEST	56624	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:16.872215986 CEST	443	56624	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:16.875821114 CEST	443	56624	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:16.875902891 CEST	56624	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:16.876476049 CEST	56624	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:16.876563072 CEST	443	56624	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:16.876766920 CEST	56624	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:16.876775980 CEST	443	56624	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:16.891308069 CEST	56625	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:16.891372919 CEST	443	56625	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:16.891447067 CEST	56625	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:16.891721964 CEST	56625	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:16.891748905 CEST	443	56625	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:16.898497105 CEST	56626	443	192.168.2.16	104.17.25.14
Sep 20, 2024 18:19:16.898559093 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:16.898634911 CEST	56626	443	192.168.2.16	104.17.25.14
Sep 20, 2024 18:19:16.898884058 CEST	56626	443	192.168.2.16	104.17.25.14
Sep 20, 2024 18:19:16.898897886 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:16.909133911 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:16.924343109 CEST	56624	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:16.941711903 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.942076921 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.942150116 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:16.942169905 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.942198038 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.942249060 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:16.942337036 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.942671061 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.942732096 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:16.942760944 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.942864895 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.942919016 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:16.942931890 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.943012953 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.943063021 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:16.943074942 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.943624973 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.943691969 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:16.943703890 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.943793058 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.943850994 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:16.943861961 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.944458961 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.944523096 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:16.944533110 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.944633961 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.944686890 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:16.944698095 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.944799900 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.944853067 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:16.944863081 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.945415974 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.945480108 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:16.945491076 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.946731091 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.946794987 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:16.946805954 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:16.988507032 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.028493881 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.028688908 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.028749943 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.028781891 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.028917074 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.028984070 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.028996944 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.029043913 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.029097080 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.029109001 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.029160976 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.029171944 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.029217958 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.029284000 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.029294968 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.029329062 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.029345989 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.029357910 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.029395103 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.029424906 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.029480934 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.029493093 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.029546022 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.029947042 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.030029058 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.030121088 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.030190945 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.030211926 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.030275106 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.030342102 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.030407906 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.030431032 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.030502081 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.030870914 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.030946970 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.030975103 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.031070948 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.031145096 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.031157017 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.031208038 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.031229973 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.031295061 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.115896940 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.116044044 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.116137028 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.116137028 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.116153955 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.116182089 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.116223097 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.116352081 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.116410971 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.116440058 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.116472960 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.116508961 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.116530895 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.116558075 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.116573095 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.116627932 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.116640091 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.116687059 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.116688967 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.116708994 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.116756916 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.116810083 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.116873980 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.116908073 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.116966009 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.117002964 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.117069960 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.117346048 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.117415905 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.117520094 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.117590904 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.117609024 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.117667913 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.117724895 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.117788076 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.117820024 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.117880106 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.118298054 CEST	443	56624	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:17.118329048 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.118407011 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.118524075 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.118550062 CEST	443	56624	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:17.118592024 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.118608952 CEST	56624	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:17.118680000 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.118746996 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.118798018 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.118860006 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.118882895 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.118942976 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.119627953 CEST	56624	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:17.119642973 CEST	443	56624	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:17.121150017 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.121227026 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.121246099 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.121304989 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.121381998 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.121454000 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.121506929 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.121572018 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.121611118 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.121665001 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.122245073 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.122320890 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.449251890 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.449281931 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.449326992 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.449362040 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.449382067 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.449420929 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.449440956 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.449518919 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.449579954 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.449662924 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.449703932 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.449727058 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.449733973 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.449764967 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.449871063 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.449915886 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.449960947 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.449966908 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.450022936 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.450212955 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.450252056 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.450275898 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.450284004 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.450321913 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.450385094 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.450465918 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.450472116 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.450517893 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.450623989 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.450676918 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.450948000 CEST	56623	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:17.450964928 CEST	443	56623	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:17.459522009 CEST	443	56625	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:17.459799051 CEST	56625	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:17.459840059 CEST	443	56625	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:17.463541985 CEST	443	56625	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:17.463622093 CEST	56625	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:17.464121103 CEST	56625	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:17.464206934 CEST	443	56625	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:17.464349031 CEST	56625	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:17.464365005 CEST	443	56625	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:17.469178915 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.469481945 CEST	56626	443	192.168.2.16	104.17.25.14
Sep 20, 2024 18:19:17.469497919 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.471163988 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.471239090 CEST	56626	443	192.168.2.16	104.17.25.14
Sep 20, 2024 18:19:17.472225904 CEST	56626	443	192.168.2.16	104.17.25.14
Sep 20, 2024 18:19:17.472311974 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.472393990 CEST	56626	443	192.168.2.16	104.17.25.14
Sep 20, 2024 18:19:17.472400904 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.513132095 CEST	56625	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:17.515420914 CEST	56626	443	192.168.2.16	104.17.25.14
Sep 20, 2024 18:19:17.578152895 CEST	443	56625	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:17.578381062 CEST	443	56625	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:17.578454018 CEST	56625	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:17.578810930 CEST	56625	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:17.578810930 CEST	56625	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:17.578840017 CEST	443	56625	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:17.578969002 CEST	56625	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:17.580360889 CEST	56627	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:17.580409050 CEST	443	56627	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:17.580487967 CEST	56627	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:17.580694914 CEST	56627	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:17.580710888 CEST	443	56627	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:17.587472916 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.587603092 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.587663889 CEST	56626	443	192.168.2.16	104.17.25.14
Sep 20, 2024 18:19:17.587676048 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.587771893 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.587827921 CEST	56626	443	192.168.2.16	104.17.25.14
Sep 20, 2024 18:19:17.587837934 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.587929010 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.587985039 CEST	56626	443	192.168.2.16	104.17.25.14
Sep 20, 2024 18:19:17.587991953 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.588118076 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.588216066 CEST	56626	443	192.168.2.16	104.17.25.14
Sep 20, 2024 18:19:17.588223934 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.592041016 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.592127085 CEST	56626	443	192.168.2.16	104.17.25.14
Sep 20, 2024 18:19:17.592133999 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.592161894 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.592205048 CEST	56626	443	192.168.2.16	104.17.25.14
Sep 20, 2024 18:19:17.592247963 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.640944004 CEST	56626	443	192.168.2.16	104.17.25.14
Sep 20, 2024 18:19:17.675041914 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.675236940 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.675328970 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.675421953 CEST	56626	443	192.168.2.16	104.17.25.14
Sep 20, 2024 18:19:17.675432920 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.675477982 CEST	56626	443	192.168.2.16	104.17.25.14
Sep 20, 2024 18:19:17.675484896 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.675606012 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.675656080 CEST	56626	443	192.168.2.16	104.17.25.14
Sep 20, 2024 18:19:17.675662994 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.675777912 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.675827026 CEST	56626	443	192.168.2.16	104.17.25.14
Sep 20, 2024 18:19:17.675833941 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.675940037 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.675987005 CEST	56626	443	192.168.2.16	104.17.25.14
Sep 20, 2024 18:19:17.675995111 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.676110983 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.676162958 CEST	56626	443	192.168.2.16	104.17.25.14
Sep 20, 2024 18:19:17.676168919 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.676274061 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.676321030 CEST	56626	443	192.168.2.16	104.17.25.14
Sep 20, 2024 18:19:17.676326990 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.676599979 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.676662922 CEST	56626	443	192.168.2.16	104.17.25.14
Sep 20, 2024 18:19:17.676670074 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.676759958 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.676809072 CEST	56626	443	192.168.2.16	104.17.25.14
Sep 20, 2024 18:19:17.676815033 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.676923037 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.676976919 CEST	56626	443	192.168.2.16	104.17.25.14
Sep 20, 2024 18:19:17.676984072 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.677072048 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.677124977 CEST	56626	443	192.168.2.16	104.17.25.14
Sep 20, 2024 18:19:17.677130938 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.720591068 CEST	56626	443	192.168.2.16	104.17.25.14
Sep 20, 2024 18:19:17.720598936 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.762185097 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.762259960 CEST	56626	443	192.168.2.16	104.17.25.14
Sep 20, 2024 18:19:17.762274981 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.762361050 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.762423992 CEST	56626	443	192.168.2.16	104.17.25.14
Sep 20, 2024 18:19:17.762430906 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.762676954 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.762703896 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.762737036 CEST	56626	443	192.168.2.16	104.17.25.14
Sep 20, 2024 18:19:17.762746096 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.762756109 CEST	56626	443	192.168.2.16	104.17.25.14
Sep 20, 2024 18:19:17.762998104 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.763053894 CEST	56626	443	192.168.2.16	104.17.25.14
Sep 20, 2024 18:19:17.763061047 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.763099909 CEST	56626	443	192.168.2.16	104.17.25.14
Sep 20, 2024 18:19:17.763113022 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.763207912 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.763252974 CEST	56626	443	192.168.2.16	104.17.25.14
Sep 20, 2024 18:19:17.763261080 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.763304949 CEST	56626	443	192.168.2.16	104.17.25.14
Sep 20, 2024 18:19:17.763796091 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.763873100 CEST	56626	443	192.168.2.16	104.17.25.14
Sep 20, 2024 18:19:17.764031887 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.764096022 CEST	56626	443	192.168.2.16	104.17.25.14
Sep 20, 2024 18:19:17.764123917 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.764180899 CEST	56626	443	192.168.2.16	104.17.25.14
Sep 20, 2024 18:19:17.764805079 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.764866114 CEST	56626	443	192.168.2.16	104.17.25.14
Sep 20, 2024 18:19:17.764882088 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.764936924 CEST	56626	443	192.168.2.16	104.17.25.14
Sep 20, 2024 18:19:17.764982939 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.765028954 CEST	56626	443	192.168.2.16	104.17.25.14
Sep 20, 2024 18:19:17.765034914 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.765151024 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.765203953 CEST	56626	443	192.168.2.16	104.17.25.14
Sep 20, 2024 18:19:17.766381025 CEST	56626	443	192.168.2.16	104.17.25.14
Sep 20, 2024 18:19:17.766396999 CEST	443	56626	104.17.25.14	192.168.2.16
Sep 20, 2024 18:19:17.778429031 CEST	56628	443	192.168.2.16	35.190.80.1
Sep 20, 2024 18:19:17.778501034 CEST	443	56628	35.190.80.1	192.168.2.16
Sep 20, 2024 18:19:17.778594017 CEST	56628	443	192.168.2.16	35.190.80.1
Sep 20, 2024 18:19:17.778789997 CEST	56628	443	192.168.2.16	35.190.80.1
Sep 20, 2024 18:19:17.778817892 CEST	443	56628	35.190.80.1	192.168.2.16
Sep 20, 2024 18:19:17.789254904 CEST	56629	443	192.168.2.16	104.17.24.14
Sep 20, 2024 18:19:17.789323092 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:17.789410114 CEST	56629	443	192.168.2.16	104.17.24.14
Sep 20, 2024 18:19:17.789602995 CEST	56629	443	192.168.2.16	104.17.24.14
Sep 20, 2024 18:19:17.789628029 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.059093952 CEST	443	56627	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:18.059393883 CEST	56627	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:18.059412956 CEST	443	56627	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:18.060507059 CEST	443	56627	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:18.060797930 CEST	56627	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:18.060950994 CEST	56627	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:18.060971975 CEST	443	56627	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:18.104280949 CEST	56627	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:18.215614080 CEST	443	56627	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:18.215801001 CEST	443	56627	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:18.215890884 CEST	443	56627	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:18.215918064 CEST	56627	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:18.215960979 CEST	443	56627	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:18.216065884 CEST	443	56627	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:18.216094971 CEST	56627	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:18.216114044 CEST	443	56627	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:18.216195107 CEST	56627	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:18.216208935 CEST	443	56627	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:18.216839075 CEST	443	56627	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:18.216933966 CEST	56627	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:18.216941118 CEST	443	56627	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:18.220336914 CEST	443	56627	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:18.220411062 CEST	56627	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:18.220418930 CEST	443	56627	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:18.220446110 CEST	443	56627	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:18.220510006 CEST	56627	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:18.249732971 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.250037909 CEST	56629	443	192.168.2.16	104.17.24.14
Sep 20, 2024 18:19:18.250085115 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.253933907 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.254076958 CEST	56629	443	192.168.2.16	104.17.24.14
Sep 20, 2024 18:19:18.254338980 CEST	56629	443	192.168.2.16	104.17.24.14
Sep 20, 2024 18:19:18.254478931 CEST	56629	443	192.168.2.16	104.17.24.14
Sep 20, 2024 18:19:18.254520893 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.258966923 CEST	443	56628	35.190.80.1	192.168.2.16
Sep 20, 2024 18:19:18.259174109 CEST	56628	443	192.168.2.16	35.190.80.1
Sep 20, 2024 18:19:18.259201050 CEST	443	56628	35.190.80.1	192.168.2.16
Sep 20, 2024 18:19:18.260972977 CEST	443	56628	35.190.80.1	192.168.2.16
Sep 20, 2024 18:19:18.261055946 CEST	56628	443	192.168.2.16	35.190.80.1
Sep 20, 2024 18:19:18.261909962 CEST	56628	443	192.168.2.16	35.190.80.1
Sep 20, 2024 18:19:18.262001038 CEST	443	56628	35.190.80.1	192.168.2.16
Sep 20, 2024 18:19:18.262043953 CEST	56628	443	192.168.2.16	35.190.80.1
Sep 20, 2024 18:19:18.303451061 CEST	443	56628	35.190.80.1	192.168.2.16
Sep 20, 2024 18:19:18.306150913 CEST	443	56627	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:18.306318998 CEST	443	56627	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:18.306411982 CEST	443	56627	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:18.306444883 CEST	56627	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:18.306462049 CEST	443	56627	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:18.306515932 CEST	56627	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:18.306535959 CEST	443	56627	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:18.306638956 CEST	443	56627	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:18.306726933 CEST	443	56627	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:18.306752920 CEST	56627	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:18.306760073 CEST	443	56627	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:18.306828976 CEST	56627	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:18.306834936 CEST	443	56627	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:18.306973934 CEST	443	56627	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:18.307063103 CEST	56627	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:18.307069063 CEST	443	56627	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:18.307456970 CEST	443	56627	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:18.307550907 CEST	443	56627	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:18.307553053 CEST	56627	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:18.307589054 CEST	443	56627	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:18.307665110 CEST	56627	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:18.307681084 CEST	443	56627	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:18.307809114 CEST	443	56627	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:18.307858944 CEST	56627	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:18.307864904 CEST	443	56627	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:18.308118105 CEST	56629	443	192.168.2.16	104.17.24.14
Sep 20, 2024 18:19:18.308159113 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.308204889 CEST	56628	443	192.168.2.16	35.190.80.1
Sep 20, 2024 18:19:18.308223963 CEST	443	56628	35.190.80.1	192.168.2.16
Sep 20, 2024 18:19:18.308428049 CEST	443	56627	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:18.308495045 CEST	56627	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:18.308501959 CEST	443	56627	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:18.308576107 CEST	443	56627	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:18.308657885 CEST	443	56627	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:18.308743000 CEST	443	56627	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:18.308789968 CEST	56627	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:18.308789968 CEST	56627	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:18.308798075 CEST	443	56627	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:18.308976889 CEST	443	56627	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:18.309040070 CEST	56627	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:18.309221029 CEST	56627	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:18.309236050 CEST	443	56627	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:18.336227894 CEST	56630	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:18.336278915 CEST	443	56630	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:18.336368084 CEST	56630	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:18.336534977 CEST	56630	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:18.336576939 CEST	443	56630	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:18.356137991 CEST	56628	443	192.168.2.16	35.190.80.1
Sep 20, 2024 18:19:18.356146097 CEST	56629	443	192.168.2.16	104.17.24.14
Sep 20, 2024 18:19:18.401084900 CEST	443	56628	35.190.80.1	192.168.2.16
Sep 20, 2024 18:19:18.401300907 CEST	443	56628	35.190.80.1	192.168.2.16
Sep 20, 2024 18:19:18.401374102 CEST	56628	443	192.168.2.16	35.190.80.1
Sep 20, 2024 18:19:18.401375055 CEST	56628	443	192.168.2.16	35.190.80.1
Sep 20, 2024 18:19:18.401405096 CEST	443	56628	35.190.80.1	192.168.2.16
Sep 20, 2024 18:19:18.401458979 CEST	56628	443	192.168.2.16	35.190.80.1
Sep 20, 2024 18:19:18.401756048 CEST	56631	443	192.168.2.16	35.190.80.1
Sep 20, 2024 18:19:18.401802063 CEST	443	56631	35.190.80.1	192.168.2.16
Sep 20, 2024 18:19:18.401889086 CEST	56631	443	192.168.2.16	35.190.80.1
Sep 20, 2024 18:19:18.402095079 CEST	56631	443	192.168.2.16	35.190.80.1
Sep 20, 2024 18:19:18.402121067 CEST	443	56631	35.190.80.1	192.168.2.16
Sep 20, 2024 18:19:18.412072897 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.412225962 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.412307024 CEST	56629	443	192.168.2.16	104.17.24.14
Sep 20, 2024 18:19:18.412312031 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.412349939 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.412410975 CEST	56629	443	192.168.2.16	104.17.24.14
Sep 20, 2024 18:19:18.412425995 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.412561893 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.412621021 CEST	56629	443	192.168.2.16	104.17.24.14
Sep 20, 2024 18:19:18.412632942 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.412736893 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.412798882 CEST	56629	443	192.168.2.16	104.17.24.14
Sep 20, 2024 18:19:18.412811041 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.413011074 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.413073063 CEST	56629	443	192.168.2.16	104.17.24.14
Sep 20, 2024 18:19:18.413084030 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.416680098 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.416750908 CEST	56629	443	192.168.2.16	104.17.24.14
Sep 20, 2024 18:19:18.416763067 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.468265057 CEST	56629	443	192.168.2.16	104.17.24.14
Sep 20, 2024 18:19:18.498409986 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.498549938 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.498629093 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.498636007 CEST	56629	443	192.168.2.16	104.17.24.14
Sep 20, 2024 18:19:18.498668909 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.498728991 CEST	56629	443	192.168.2.16	104.17.24.14
Sep 20, 2024 18:19:18.498857021 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.499016047 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.499090910 CEST	56629	443	192.168.2.16	104.17.24.14
Sep 20, 2024 18:19:18.499095917 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.499121904 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.499176979 CEST	56629	443	192.168.2.16	104.17.24.14
Sep 20, 2024 18:19:18.499527931 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.499806881 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.499866962 CEST	56629	443	192.168.2.16	104.17.24.14
Sep 20, 2024 18:19:18.499883890 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.499969006 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.500020027 CEST	56629	443	192.168.2.16	104.17.24.14
Sep 20, 2024 18:19:18.500031948 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.500117064 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.500161886 CEST	56629	443	192.168.2.16	104.17.24.14
Sep 20, 2024 18:19:18.500174999 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.500729084 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.500793934 CEST	56629	443	192.168.2.16	104.17.24.14
Sep 20, 2024 18:19:18.500808954 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.500895023 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.500941992 CEST	56629	443	192.168.2.16	104.17.24.14
Sep 20, 2024 18:19:18.500955105 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.501039982 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.501104116 CEST	56629	443	192.168.2.16	104.17.24.14
Sep 20, 2024 18:19:18.501115084 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.501213074 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.501266003 CEST	56629	443	192.168.2.16	104.17.24.14
Sep 20, 2024 18:19:18.501285076 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.503535032 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.503623962 CEST	56629	443	192.168.2.16	104.17.24.14
Sep 20, 2024 18:19:18.503643036 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.548242092 CEST	56629	443	192.168.2.16	104.17.24.14
Sep 20, 2024 18:19:18.585475922 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.585654020 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.585732937 CEST	56629	443	192.168.2.16	104.17.24.14
Sep 20, 2024 18:19:18.585747004 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.585772038 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.585828066 CEST	56629	443	192.168.2.16	104.17.24.14
Sep 20, 2024 18:19:18.585867882 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.585941076 CEST	56629	443	192.168.2.16	104.17.24.14
Sep 20, 2024 18:19:18.585999012 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.586062908 CEST	56629	443	192.168.2.16	104.17.24.14
Sep 20, 2024 18:19:18.586334944 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.586410999 CEST	56629	443	192.168.2.16	104.17.24.14
Sep 20, 2024 18:19:18.586426020 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.586494923 CEST	56629	443	192.168.2.16	104.17.24.14
Sep 20, 2024 18:19:18.586595058 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.586658955 CEST	56629	443	192.168.2.16	104.17.24.14
Sep 20, 2024 18:19:18.586704969 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.586764097 CEST	56629	443	192.168.2.16	104.17.24.14
Sep 20, 2024 18:19:18.586786985 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.586904049 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.586954117 CEST	56629	443	192.168.2.16	104.17.24.14
Sep 20, 2024 18:19:18.586970091 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.586994886 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.587027073 CEST	56629	443	192.168.2.16	104.17.24.14
Sep 20, 2024 18:19:18.587040901 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.587066889 CEST	56629	443	192.168.2.16	104.17.24.14
Sep 20, 2024 18:19:18.587280035 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.587341070 CEST	56629	443	192.168.2.16	104.17.24.14
Sep 20, 2024 18:19:18.587472916 CEST	56629	443	192.168.2.16	104.17.24.14
Sep 20, 2024 18:19:18.587506056 CEST	443	56629	104.17.24.14	192.168.2.16
Sep 20, 2024 18:19:18.861052036 CEST	443	56631	35.190.80.1	192.168.2.16
Sep 20, 2024 18:19:18.861397028 CEST	56631	443	192.168.2.16	35.190.80.1
Sep 20, 2024 18:19:18.861424923 CEST	443	56631	35.190.80.1	192.168.2.16
Sep 20, 2024 18:19:18.862718105 CEST	443	56631	35.190.80.1	192.168.2.16
Sep 20, 2024 18:19:18.863101959 CEST	56631	443	192.168.2.16	35.190.80.1
Sep 20, 2024 18:19:18.863276005 CEST	443	56631	35.190.80.1	192.168.2.16
Sep 20, 2024 18:19:18.863276958 CEST	56631	443	192.168.2.16	35.190.80.1
Sep 20, 2024 18:19:18.907409906 CEST	443	56631	35.190.80.1	192.168.2.16
Sep 20, 2024 18:19:18.916161060 CEST	56631	443	192.168.2.16	35.190.80.1
Sep 20, 2024 18:19:18.952143908 CEST	443	49713	143.204.215.124	192.168.2.16
Sep 20, 2024 18:19:18.952308893 CEST	443	49713	143.204.215.124	192.168.2.16
Sep 20, 2024 18:19:18.952394962 CEST	49713	443	192.168.2.16	143.204.215.124
Sep 20, 2024 18:19:18.988959074 CEST	443	56631	35.190.80.1	192.168.2.16
Sep 20, 2024 18:19:18.989139080 CEST	443	56631	35.190.80.1	192.168.2.16
Sep 20, 2024 18:19:18.989253044 CEST	56631	443	192.168.2.16	35.190.80.1
Sep 20, 2024 18:19:18.989391088 CEST	56631	443	192.168.2.16	35.190.80.1
Sep 20, 2024 18:19:18.989423037 CEST	443	56631	35.190.80.1	192.168.2.16
Sep 20, 2024 18:19:18.989470005 CEST	56631	443	192.168.2.16	35.190.80.1
Sep 20, 2024 18:19:18.989495039 CEST	56631	443	192.168.2.16	35.190.80.1
Sep 20, 2024 18:19:19.168545008 CEST	443	56630	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:19.168844938 CEST	56630	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:19.168889999 CEST	443	56630	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:19.170546055 CEST	443	56630	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:19.170636892 CEST	56630	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:19.171730995 CEST	56630	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:19.171825886 CEST	443	56630	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:19.171945095 CEST	56630	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:19.171961069 CEST	443	56630	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:19.220158100 CEST	56630	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:19.324034929 CEST	49713	443	192.168.2.16	143.204.215.124
Sep 20, 2024 18:19:19.324106932 CEST	443	49713	143.204.215.124	192.168.2.16
Sep 20, 2024 18:19:19.332827091 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:19.332868099 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:19.332946062 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:19.333199024 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:19.333211899 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:19.428817034 CEST	443	56630	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:19.468760014 CEST	443	56630	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:19.468772888 CEST	443	56630	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:19.468794107 CEST	443	56630	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:19.468857050 CEST	56630	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:19.468880892 CEST	443	56630	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:19.468926907 CEST	443	56630	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:19.468941927 CEST	56630	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:19.469031096 CEST	56630	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:19.469031096 CEST	56630	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:19.469284058 CEST	56630	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:19.469306946 CEST	443	56630	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:19.481946945 CEST	56633	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:19.481986046 CEST	443	56633	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:19.482089996 CEST	56633	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:19.482377052 CEST	56633	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:19.482391119 CEST	443	56633	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:19.829998016 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:19.830409050 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:19.830467939 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:19.833952904 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:19.834083080 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:19.834489107 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:19.834729910 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:19.834767103 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:19.875443935 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:19.887149096 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:19.887166023 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:19.935144901 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:19.992101908 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:19.992350101 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:19.992424011 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:19.992434978 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:19.992512941 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:19.992573023 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:19.992578983 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:19.992666960 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:19.992717981 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:19.992724895 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:19.992892027 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:19.992945910 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:19.992950916 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:19.993026018 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:19.993097067 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:19.993103027 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.018496990 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.018542051 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.018663883 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.018965006 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.018984079 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.046273947 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.046333075 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.083040953 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.083120108 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.083153009 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.083175898 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.083235025 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.083250046 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.083368063 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.083439112 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.083450079 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.083555937 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.083633900 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.083645105 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.083993912 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.084027052 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.084048033 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.084062099 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.084114075 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.084125042 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.084136963 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.084188938 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.084758997 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.084870100 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.084883928 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.084966898 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.084979057 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.085071087 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.085639954 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.085685968 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.085726976 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.085740089 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.085752010 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.085832119 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.085844040 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.123162985 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.123212099 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.123228073 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.123240948 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.123292923 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.173712969 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.173790932 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.173939943 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.173940897 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.174002886 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.174119949 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.174247026 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.174344063 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.174734116 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.174799919 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.174841881 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.174937010 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.174998999 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.175013065 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.175071001 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.175662041 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.175734043 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.175757885 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.175822020 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.176475048 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.176546097 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.176563025 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.176624060 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.177251101 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.177319050 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.177354097 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.177409887 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.177438974 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.177496910 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.178317070 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.178402901 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.178405046 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.178431988 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.178466082 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.179050922 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.179117918 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.179128885 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.179186106 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.265185118 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.265242100 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.265278101 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.265321016 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.265357971 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.265383959 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.265409946 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.265424013 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.265424013 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.265446901 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.265463114 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.265485048 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.265580893 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.265641928 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.265655041 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.265707016 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.265762091 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.265830040 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.265867949 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.265932083 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.265959978 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.266024113 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.266638041 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.266710043 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.266758919 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.266880035 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.266905069 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.266966105 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.266988039 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.267050982 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.267468929 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.267534018 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.267544985 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.267597914 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.267626047 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.267636061 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.267652035 CEST	443	56632	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.267677069 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.267707109 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.267761946 CEST	56632	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.272763014 CEST	56635	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.272808075 CEST	443	56635	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.272903919 CEST	56635	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.273236990 CEST	56635	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.273262978 CEST	443	56635	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.307322025 CEST	443	56633	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:20.307673931 CEST	56633	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:20.307692051 CEST	443	56633	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:20.311196089 CEST	443	56633	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:20.311319113 CEST	56633	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:20.311687946 CEST	56633	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:20.311851025 CEST	443	56633	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:20.311981916 CEST	56633	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:20.355446100 CEST	443	56633	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:20.363212109 CEST	56633	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:20.363219976 CEST	443	56633	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:20.410151958 CEST	56633	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:20.515475988 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.515834093 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.515856981 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.517304897 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.517740011 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.517910004 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.517924070 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.563402891 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.569163084 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.570460081 CEST	443	56633	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:20.611155987 CEST	443	56633	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:20.611167908 CEST	443	56633	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:20.611231089 CEST	443	56633	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:20.611278057 CEST	443	56633	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:20.611315012 CEST	443	56633	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:20.611316919 CEST	56633	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:20.611349106 CEST	443	56633	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:20.611351013 CEST	56633	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:20.611351013 CEST	56633	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:20.611360073 CEST	443	56633	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:20.611387014 CEST	56633	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:20.611409903 CEST	56633	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:20.611421108 CEST	443	56633	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:20.611455917 CEST	443	56633	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:20.611499071 CEST	56633	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:20.611499071 CEST	56633	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:20.611651897 CEST	56633	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:20.611651897 CEST	56633	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:20.611670017 CEST	443	56633	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:20.611737013 CEST	56633	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:20.669779062 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.669897079 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.669954062 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.669970989 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.670053959 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.670104980 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.670114040 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.670233965 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.670285940 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.670295000 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.670381069 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.670435905 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.670443058 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.674431086 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.674498081 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.674505949 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.728394985 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.728410959 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.738686085 CEST	443	56635	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.739036083 CEST	56635	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.739093065 CEST	443	56635	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.740230083 CEST	443	56635	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.740680933 CEST	56635	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.740760088 CEST	56635	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.740772963 CEST	443	56635	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.740856886 CEST	443	56635	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.761842012 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.761941910 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.762020111 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.762032032 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.762093067 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.762099981 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.762629032 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.762691975 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.762700081 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.762790918 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.762850046 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.762856960 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.763359070 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.763417959 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.763425112 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.763569117 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.763632059 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.763639927 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.763741016 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.763802052 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.763808966 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.764271975 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.764337063 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.764344931 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.764425993 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.764486074 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.764493942 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.764575005 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.764678955 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.764687061 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.765248060 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.765315056 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.765321970 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.765394926 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.765450954 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.765459061 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.792282104 CEST	56635	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.808155060 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.855742931 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.855853081 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.855941057 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.856024981 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.856044054 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.856060028 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.856173038 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.856194973 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.856225014 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.856399059 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.856399059 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.856421947 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.856831074 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.856903076 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.856918097 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.856967926 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.856975079 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.857040882 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.857108116 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.857115984 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.857157946 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.857161045 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.857177973 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.857217073 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.857275009 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.857343912 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.857476950 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.857538939 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.857587099 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.857654095 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.857697964 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.857764959 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.857878923 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.857940912 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.857969999 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.858028889 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.858810902 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.858894110 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.858994961 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.859061956 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.859097004 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.859159946 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.865034103 CEST	443	56635	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.865190983 CEST	443	56635	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:20.865411043 CEST	56635	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.865891933 CEST	56635	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:20.865933895 CEST	443	56635	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.119223118 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.119332075 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.119374037 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.119488955 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.119565010 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.119678974 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.119693995 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.119720936 CEST	443	56634	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.119771004 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.119805098 CEST	56634	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.122350931 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.122383118 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.122469902 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.122726917 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.122740984 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.265486002 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.265542030 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.265681028 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.265935898 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.265954971 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.607095957 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.607446909 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.607471943 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.607930899 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.608326912 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.608409882 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.608485937 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.651483059 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.735824108 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.736112118 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.736145973 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.736437082 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.736772060 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.736833096 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.736918926 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.737014055 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.737041950 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.754112005 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.754182100 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.754228115 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.754249096 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.754262924 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.754277945 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.754314899 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.754873037 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.754934072 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.754946947 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.755054951 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.755115986 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.755124092 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.755222082 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.755271912 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.755280018 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.795147896 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.795161009 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.842158079 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.844489098 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.844656944 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.844752073 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.844789982 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.844804049 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.844861984 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.844868898 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.844989061 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.845043898 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.845052004 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.845675945 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.845742941 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.845750093 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.845838070 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.845911026 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.845918894 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.845994949 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.846043110 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.846052885 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.846633911 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.846708059 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.846714973 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.846798897 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.846872091 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.846879959 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.847512007 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.847575903 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.847583055 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.890221119 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.890244007 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.896756887 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.896891117 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.896958113 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.896981955 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.897011042 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.897061110 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.897102118 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.897285938 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.897341013 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.897360086 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.897447109 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.897505045 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.897514105 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.901357889 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.901422024 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.901431084 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.901510000 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.901562929 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.901572943 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.935280085 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.935369015 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.935398102 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.935426950 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.935540915 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.935617924 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.935626984 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.935652018 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.935688972 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.935779095 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.935863972 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.935883045 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.935899973 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.935962915 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.936008930 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.936145067 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.936214924 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.936230898 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.936254978 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.936290026 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.936302900 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.936331987 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.937037945 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.937122107 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.937134981 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.937151909 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.937211037 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.937211037 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.938002110 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.938080072 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.938098907 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.938160896 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.938802958 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.938884020 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.938922882 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.938993931 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.952166080 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.983549118 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.983654022 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.983692884 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.983714104 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.983736038 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.983771086 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.983805895 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.983809948 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.983820915 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.983870029 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.984138966 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.984175920 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.984189987 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.984200954 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.984235048 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.984246969 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.984256029 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.984304905 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.984946012 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.985003948 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.985030890 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.985053062 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.985063076 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.985105991 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.985424995 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.985471964 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.985497952 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.985522985 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.985532045 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.985568047 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.985583067 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.985593081 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:21.985635996 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:21.986313105 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.025902987 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.025979042 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.026004076 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.026022911 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.026068926 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.026103973 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.026104927 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.026103973 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.026156902 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.026175976 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.026235104 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.026629925 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.026705980 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.026818991 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.026882887 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.026951075 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.027018070 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.027030945 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.027090073 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.027107000 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.027137041 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.027174950 CEST	56636	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.027204037 CEST	443	56636	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.031152010 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.031177044 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.072603941 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.072680950 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.072690964 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.072719097 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.072782040 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.072802067 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.072963953 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.072983027 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.073046923 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.073064089 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.073080063 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.073084116 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.073131084 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.073138952 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.073185921 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.073193073 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.073254108 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.073328972 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.073337078 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.073354006 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.073390007 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.073399067 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.073415995 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.073513985 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.073575974 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.073585033 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.073601961 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.073628902 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.073636055 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.073652983 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.073940039 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.074007034 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.074014902 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.074070930 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.074146032 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.074212074 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.074340105 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.074404955 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.074513912 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.074574947 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.074631929 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.074702978 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.074970961 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.075040102 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.075066090 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.075129986 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.159668922 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.159779072 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.159782887 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.159816027 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.159868002 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.159892082 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.160027027 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.160114050 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.160212040 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.160275936 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.160429001 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.160494089 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.160525084 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.160584927 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.160780907 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.160847902 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.160871029 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.160932064 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.161108971 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.161175966 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.161335945 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.161406040 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.161530018 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.161603928 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.161617041 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.161673069 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.161712885 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.161766052 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.161777020 CEST	443	56637	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.161823988 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.161865950 CEST	56637	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.164462090 CEST	56638	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.164505005 CEST	443	56638	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.164581060 CEST	56638	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.164825916 CEST	56638	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.164843082 CEST	443	56638	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.626293898 CEST	443	56638	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.626620054 CEST	56638	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.626673937 CEST	443	56638	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.627146959 CEST	443	56638	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.627461910 CEST	56638	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.627552032 CEST	443	56638	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.627594948 CEST	56638	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.671426058 CEST	443	56638	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.682213068 CEST	56638	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.885646105 CEST	56639	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.885735989 CEST	443	56639	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:22.885873079 CEST	56639	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.886172056 CEST	56639	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:22.886207104 CEST	443	56639	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:23.011486053 CEST	443	56638	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:23.011674881 CEST	443	56638	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:23.011770010 CEST	56638	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:23.012166977 CEST	56638	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:23.012190104 CEST	443	56638	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:23.490020990 CEST	443	56639	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:23.490478039 CEST	56639	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:23.490546942 CEST	443	56639	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:23.491060972 CEST	443	56639	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:23.491478920 CEST	56639	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:23.491573095 CEST	443	56639	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:23.491637945 CEST	56639	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:23.535444975 CEST	443	56639	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:23.620635033 CEST	443	56639	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:23.620723963 CEST	443	56639	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:23.620805025 CEST	56639	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:23.621509075 CEST	56639	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:23.621553898 CEST	443	56639	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:23.626231909 CEST	56640	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:23.626323938 CEST	443	56640	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:23.626425982 CEST	56640	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:23.626704931 CEST	56640	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:23.626739979 CEST	443	56640	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:23.857831001 CEST	56641	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:23.857894897 CEST	443	56641	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:23.858091116 CEST	56641	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:23.858402014 CEST	56641	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:23.858417034 CEST	443	56641	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:24.115765095 CEST	443	56640	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:24.116158962 CEST	56640	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:24.116224051 CEST	443	56640	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:24.116709948 CEST	443	56640	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:24.117126942 CEST	56640	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:24.117221117 CEST	443	56640	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:24.117300987 CEST	56640	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:24.159396887 CEST	443	56640	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:24.253865957 CEST	443	56640	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:24.253952980 CEST	443	56640	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:24.254012108 CEST	56640	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:24.255100965 CEST	56640	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:24.255119085 CEST	443	56640	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:24.317100048 CEST	443	56641	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:24.317552090 CEST	56641	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:24.317586899 CEST	443	56641	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:24.318100929 CEST	443	56641	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:24.318509102 CEST	56641	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:24.318579912 CEST	443	56641	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:24.318685055 CEST	56641	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:24.359407902 CEST	443	56641	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:24.455193996 CEST	443	56641	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:24.455463886 CEST	443	56641	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:24.455540895 CEST	56641	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:24.455568075 CEST	443	56641	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:24.455622911 CEST	443	56641	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:24.455693960 CEST	56641	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:24.456110001 CEST	56641	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:24.456129074 CEST	443	56641	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:24.505767107 CEST	56642	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:24.505798101 CEST	443	56642	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:24.505908012 CEST	56642	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:24.506191015 CEST	56642	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:24.506206036 CEST	443	56642	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:24.993639946 CEST	443	56642	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:24.995801926 CEST	56642	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:24.995834112 CEST	443	56642	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:24.996339083 CEST	443	56642	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:24.996874094 CEST	56642	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:24.996968985 CEST	443	56642	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:24.998821020 CEST	56642	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:24.998897076 CEST	56642	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:24.998941898 CEST	443	56642	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:24.999051094 CEST	56642	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:24.999083996 CEST	443	56642	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:25.262479067 CEST	443	56642	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:25.262605906 CEST	443	56642	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:25.262698889 CEST	443	56642	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:25.262780905 CEST	56642	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:25.262785912 CEST	443	56642	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:25.262814999 CEST	443	56642	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:25.262854099 CEST	56642	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:25.262959957 CEST	443	56642	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:25.263024092 CEST	56642	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:25.263051033 CEST	443	56642	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:25.263143063 CEST	443	56642	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:25.263204098 CEST	56642	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:25.263222933 CEST	443	56642	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:25.267221928 CEST	443	56642	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:25.267301083 CEST	56642	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:25.267304897 CEST	443	56642	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:25.267327070 CEST	443	56642	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:25.267457008 CEST	56642	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:25.267476082 CEST	443	56642	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:25.315248966 CEST	56642	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:25.352986097 CEST	443	56642	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:25.353080988 CEST	443	56642	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:25.353122950 CEST	443	56642	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:25.353158951 CEST	56642	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:25.353178978 CEST	443	56642	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:25.353230953 CEST	56642	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:25.353745937 CEST	443	56642	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:25.354043961 CEST	443	56642	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:25.354088068 CEST	443	56642	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:25.354124069 CEST	56642	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:25.354130983 CEST	443	56642	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:25.354187965 CEST	56642	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:25.354192972 CEST	443	56642	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:25.354243040 CEST	56642	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:25.354265928 CEST	56642	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:25.354279995 CEST	443	56642	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:25.357274055 CEST	56643	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:25.357378006 CEST	443	56643	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:25.357484102 CEST	56643	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:25.357701063 CEST	56643	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:25.357736111 CEST	443	56643	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:25.826431990 CEST	443	56643	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:25.826832056 CEST	56643	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:25.826889038 CEST	443	56643	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:25.827368021 CEST	443	56643	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:25.827779055 CEST	56643	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:25.827872992 CEST	443	56643	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:25.827953100 CEST	56643	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:25.871447086 CEST	443	56643	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:25.961292028 CEST	443	56643	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:25.961385965 CEST	443	56643	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:25.961455107 CEST	56643	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:25.961833954 CEST	56643	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:25.961853981 CEST	443	56643	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:28.457695961 CEST	56644	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:28.457763910 CEST	443	56644	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:28.457891941 CEST	56644	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:28.458070040 CEST	56644	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:28.458082914 CEST	443	56644	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:28.921993971 CEST	443	56644	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:28.922326088 CEST	56644	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:28.922358990 CEST	443	56644	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:28.923492908 CEST	443	56644	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:28.923971891 CEST	56644	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:28.924057007 CEST	443	56644	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:28.924165964 CEST	56644	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:28.924254894 CEST	56644	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:28.924280882 CEST	443	56644	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:28.924381018 CEST	56644	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:28.924422979 CEST	443	56644	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:29.196707010 CEST	443	56644	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:29.196989059 CEST	443	56644	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:29.197081089 CEST	443	56644	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:29.197108030 CEST	56644	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:29.197139025 CEST	443	56644	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:29.197305918 CEST	443	56644	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:29.197312117 CEST	56644	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:29.197371960 CEST	56644	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:29.197546005 CEST	56644	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:29.197561979 CEST	443	56644	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:29.200305939 CEST	56645	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:29.200397015 CEST	443	56645	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:29.200514078 CEST	56645	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:29.200709105 CEST	56645	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:29.200742960 CEST	443	56645	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:29.206403971 CEST	56622	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:29.206403971 CEST	56622	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:29.206513882 CEST	443	56622	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:30.316258907 CEST	443	56622	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:30.316499949 CEST	443	56622	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:30.316703081 CEST	56622	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:30.317575932 CEST	56622	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:30.317620993 CEST	443	56622	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:30.322191000 CEST	443	56645	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:30.322617054 CEST	56645	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:30.322678089 CEST	443	56645	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:30.322972059 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:30.323009014 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:30.323086977 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:30.323335886 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:30.323343039 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:30.323815107 CEST	443	56645	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:30.324162006 CEST	56645	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:30.324276924 CEST	56645	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:30.324450970 CEST	443	56645	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:30.369321108 CEST	56645	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:30.668080091 CEST	56647	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:30.668118000 CEST	443	56647	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:30.668212891 CEST	56647	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:30.668494940 CEST	56647	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:30.668510914 CEST	443	56647	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:30.798857927 CEST	443	56645	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:30.799053907 CEST	443	56645	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:30.799169064 CEST	56645	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:30.799648046 CEST	56645	443	192.168.2.16	104.18.94.41
Sep 20, 2024 18:19:30.799690008 CEST	443	56645	104.18.94.41	192.168.2.16
Sep 20, 2024 18:19:31.113192081 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:31.113615990 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:31.113637924 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:31.114382982 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:31.114800930 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:31.114878893 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:31.114999056 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:31.155426025 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:31.313097954 CEST	443	56647	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:31.313519001 CEST	56647	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:31.313541889 CEST	443	56647	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:31.315237999 CEST	443	56647	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:31.315418005 CEST	56647	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:31.315732956 CEST	56647	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:31.315753937 CEST	56647	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:31.315812111 CEST	56647	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:31.315814018 CEST	443	56647	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:31.315881014 CEST	56647	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:31.316169977 CEST	56648	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:31.316200972 CEST	443	56648	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:31.316289902 CEST	56648	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:31.316580057 CEST	56648	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:31.316590071 CEST	443	56648	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:31.707299948 CEST	49698	80	192.168.2.16	199.232.214.172
Sep 20, 2024 18:19:31.707925081 CEST	49699	80	192.168.2.16	199.232.214.172
Sep 20, 2024 18:19:31.712708950 CEST	80	49698	199.232.214.172	192.168.2.16
Sep 20, 2024 18:19:31.712796926 CEST	49698	80	192.168.2.16	199.232.214.172
Sep 20, 2024 18:19:31.713099003 CEST	80	49699	199.232.214.172	192.168.2.16
Sep 20, 2024 18:19:31.713160038 CEST	49699	80	192.168.2.16	199.232.214.172
Sep 20, 2024 18:19:31.798847914 CEST	443	56648	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:31.799199104 CEST	56648	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:31.799232006 CEST	443	56648	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:31.802766085 CEST	443	56648	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:31.802887917 CEST	56648	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:31.803350925 CEST	56648	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:31.803504944 CEST	443	56648	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:31.803533077 CEST	56648	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:31.851277113 CEST	56648	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:31.851293087 CEST	443	56648	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:31.899183035 CEST	56648	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:32.075372934 CEST	443	56648	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:32.075602055 CEST	443	56648	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:32.075671911 CEST	56648	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:32.076809883 CEST	56648	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:32.076838017 CEST	443	56648	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:33.032903910 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.033036947 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.033098936 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.033114910 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.033195019 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.033250093 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.033256054 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.033355951 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.033413887 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.033420086 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.033510923 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.033565044 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.033570051 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.037453890 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.037489891 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.037578106 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.037585974 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.037651062 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.119285107 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.119508982 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.119574070 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.119589090 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.119678020 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.119734049 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.119740009 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.119816065 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.119868040 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.119873047 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.120181084 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.120245934 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.120251894 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.120326996 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.120381117 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.120387077 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.121186018 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.121247053 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.121252060 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.121332884 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.121385098 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.121390104 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.121473074 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.121539116 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.121545076 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.122148991 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.122210979 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.122215986 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.122299910 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.122354984 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.122359991 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.122446060 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.122502089 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.122509003 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.151989937 CEST	56649	443	192.168.2.16	20.12.23.50
Sep 20, 2024 18:19:33.152075052 CEST	443	56649	20.12.23.50	192.168.2.16
Sep 20, 2024 18:19:33.152188063 CEST	56649	443	192.168.2.16	20.12.23.50
Sep 20, 2024 18:19:33.152726889 CEST	56649	443	192.168.2.16	20.12.23.50
Sep 20, 2024 18:19:33.152759075 CEST	443	56649	20.12.23.50	192.168.2.16
Sep 20, 2024 18:19:33.163614035 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.163698912 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.163710117 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.206192017 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.206295967 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.206301928 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.206331968 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.206397057 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.206424952 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.206578970 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.206598997 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.206646919 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.206654072 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.206684113 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.207113028 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.207180023 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.207185984 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.207231998 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.207237005 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.208215952 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.208290100 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.208295107 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.208319902 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.208352089 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.208357096 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.208393097 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.208861113 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.208931923 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.208937883 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.208966017 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.209013939 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.209019899 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.209032059 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.209816933 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.209886074 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.209891081 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.209918022 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.209937096 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.209942102 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.209974051 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.210000992 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.210061073 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.210067034 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.210134983 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.210735083 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.210810900 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.210824013 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.210896015 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.211579084 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.211641073 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.250087976 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.250260115 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.293287992 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.293387890 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.293423891 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.293492079 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.293521881 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.293580055 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.293795109 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.293860912 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.293876886 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.293940067 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.293966055 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.294020891 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.294028997 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.294083118 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.294634104 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.294698000 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.294708014 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.294718027 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.294760942 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.294919968 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.294977903 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.295542955 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.295610905 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.295658112 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.295715094 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.295717955 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.295728922 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.295778036 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.295780897 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.295793056 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.295831919 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.295860052 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.296539068 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.296595097 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.296612978 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.296621084 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.296654940 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.296670914 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.296684027 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.296691895 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.296725035 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.298141956 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.298213959 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.298218966 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.298269033 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.298276901 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.298280954 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.298312902 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.298331976 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.298336983 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.298371077 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.298392057 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.334023952 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.334105968 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.334211111 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.334218025 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.334273100 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.337085962 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.337160110 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.379740953 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.379863024 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.379867077 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.379884005 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.380009890 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.380109072 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.380109072 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.380136013 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.380191088 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.380395889 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.380415916 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.380450964 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.380484104 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.380491018 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.380528927 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.381041050 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.381092072 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.381146908 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.381151915 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.381187916 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.381542921 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.381587982 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.381627083 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.381633997 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.381666899 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.381870031 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.381906033 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.381939888 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.381944895 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.381980896 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.382224083 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.382266998 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.382296085 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.382302046 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.382334948 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.382620096 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.382657051 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.382689953 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.382695913 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.382726908 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.421123981 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.421184063 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.421298981 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.421324015 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.421335936 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.462160110 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.471889973 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.471940041 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.471992016 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.472001076 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.472052097 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.472170115 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.472213030 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.472249985 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.472295046 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.472332954 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.472354889 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.472434044 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.472553015 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.472592115 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.472616911 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.472623110 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.472656012 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.472762108 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.472807884 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.472835064 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.472841978 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.472872972 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.472899914 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.472961903 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.472970963 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.473356009 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.473392963 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.473428011 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.473433018 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.473470926 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.473608017 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.473653078 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.473680973 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.473685980 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.473717928 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.473915100 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.473968983 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.473984957 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.473990917 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.474023104 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.508771896 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.508812904 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.508852959 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.508861065 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.508898020 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.511801004 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.511843920 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.511889935 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.511899948 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.511950016 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.558559895 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.558587074 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.558705091 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.558717012 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.558780909 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.559031010 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.559048891 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.559142113 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.559146881 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.559202909 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.559425116 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.559439898 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.559506893 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.559511900 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.559552908 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.559601068 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.559670925 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.559967041 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.559984922 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.560050011 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.560055017 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.560388088 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.560410023 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.560463905 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.560470104 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.560517073 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.560808897 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.560822010 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.560890913 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.560899019 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.598176956 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.598198891 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.598297119 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.598308086 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.646919012 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.646967888 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.647042990 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.647054911 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.647068024 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.647258997 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.647273064 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.647315025 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.647349119 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.647356987 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.647372007 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.647766113 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.647779942 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.647840977 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.647849083 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.648473978 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.648488045 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.648572922 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.648581028 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.648663044 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.651774883 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.651798010 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.651870966 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.651876926 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.651937008 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.651957035 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.651966095 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.651972055 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.652004957 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.652029037 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.652056932 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.652071953 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.652117014 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.652129889 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.652139902 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.652167082 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.652214050 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.652216911 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.685439110 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.685451984 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.685538054 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.685544968 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.731189013 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.734239101 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.734253883 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.734337091 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.734343052 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.734390020 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.734790087 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.734805107 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.734850883 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.734854937 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.734890938 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.734913111 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.735002995 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.735086918 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.735091925 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.735584021 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.735596895 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.735662937 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.735667944 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.735678911 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.735984087 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.735996962 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.736071110 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.736076117 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.736453056 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.736465931 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.736519098 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.736525059 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.736943960 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.736958027 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.737020016 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.737025976 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.737222910 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.737266064 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.737283945 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.737291098 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.737322092 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.737351894 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.744417906 CEST	443	56649	20.12.23.50	192.168.2.16
Sep 20, 2024 18:19:33.744550943 CEST	56649	443	192.168.2.16	20.12.23.50
Sep 20, 2024 18:19:33.746326923 CEST	56649	443	192.168.2.16	20.12.23.50
Sep 20, 2024 18:19:33.746356010 CEST	443	56649	20.12.23.50	192.168.2.16
Sep 20, 2024 18:19:33.746603012 CEST	443	56649	20.12.23.50	192.168.2.16
Sep 20, 2024 18:19:33.748513937 CEST	56649	443	192.168.2.16	20.12.23.50
Sep 20, 2024 18:19:33.781182051 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.781198025 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.781310081 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.781316042 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.781369925 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.795413017 CEST	443	56649	20.12.23.50	192.168.2.16
Sep 20, 2024 18:19:33.821588993 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.821605921 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.821711063 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.821716070 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.821738005 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.821774960 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.821779013 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.821816921 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.821856022 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.822092056 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.822145939 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.822163105 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.822170973 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.822210073 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.822638035 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.822652102 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.822726965 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.822732925 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.822786093 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.822824955 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.822844982 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.822851896 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.822907925 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.823307991 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.823323011 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.823422909 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.823427916 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.823487997 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.823659897 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.823674917 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.823740959 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.823745966 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.823792934 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.823812962 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.823826075 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.823868036 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.823873997 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.823911905 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.823934078 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.857837915 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.857851982 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.857942104 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.857949972 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.858004093 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.870156050 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.870258093 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.908409119 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.908433914 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.908535004 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.908548117 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.908874989 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.908894062 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.908987045 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.908987045 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.908992052 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.909357071 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.909368992 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.909446955 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.909454107 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.909655094 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.909703970 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.909734011 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.909740925 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.909756899 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.910284042 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.910295963 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.910377979 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.910383940 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.910773039 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.910784960 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.910866976 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.910871983 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.911190987 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.911204100 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.911278009 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.911282063 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.944710016 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.944747925 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.944820881 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.944829941 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.944848061 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.944861889 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.944871902 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.944907904 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.944928885 CEST	56646	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:33.944941998 CEST	443	56646	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:33.948544025 CEST	56650	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:33.948637009 CEST	443	56650	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:33.948803902 CEST	56650	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:33.949220896 CEST	56650	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:33.949254990 CEST	443	56650	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:33.949807882 CEST	443	56649	20.12.23.50	192.168.2.16
Sep 20, 2024 18:19:33.949865103 CEST	443	56649	20.12.23.50	192.168.2.16
Sep 20, 2024 18:19:33.949906111 CEST	443	56649	20.12.23.50	192.168.2.16
Sep 20, 2024 18:19:33.949965000 CEST	56649	443	192.168.2.16	20.12.23.50
Sep 20, 2024 18:19:33.950036049 CEST	443	56649	20.12.23.50	192.168.2.16
Sep 20, 2024 18:19:33.950073004 CEST	56649	443	192.168.2.16	20.12.23.50
Sep 20, 2024 18:19:33.950117111 CEST	56649	443	192.168.2.16	20.12.23.50
Sep 20, 2024 18:19:33.950881958 CEST	443	56649	20.12.23.50	192.168.2.16
Sep 20, 2024 18:19:33.950952053 CEST	443	56649	20.12.23.50	192.168.2.16
Sep 20, 2024 18:19:33.951003075 CEST	56649	443	192.168.2.16	20.12.23.50
Sep 20, 2024 18:19:33.951003075 CEST	56649	443	192.168.2.16	20.12.23.50
Sep 20, 2024 18:19:33.951023102 CEST	443	56649	20.12.23.50	192.168.2.16
Sep 20, 2024 18:19:33.951050997 CEST	56649	443	192.168.2.16	20.12.23.50
Sep 20, 2024 18:19:33.951320887 CEST	443	56649	20.12.23.50	192.168.2.16
Sep 20, 2024 18:19:33.951420069 CEST	56649	443	192.168.2.16	20.12.23.50
Sep 20, 2024 18:19:33.953212023 CEST	56649	443	192.168.2.16	20.12.23.50
Sep 20, 2024 18:19:33.953248978 CEST	443	56649	20.12.23.50	192.168.2.16
Sep 20, 2024 18:19:33.953274012 CEST	56649	443	192.168.2.16	20.12.23.50
Sep 20, 2024 18:19:33.953289032 CEST	443	56649	20.12.23.50	192.168.2.16
Sep 20, 2024 18:19:34.046557903 CEST	56651	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:34.046600103 CEST	443	56651	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:34.046663046 CEST	56651	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:34.047312975 CEST	56651	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:34.047329903 CEST	443	56651	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:34.052222967 CEST	56652	443	192.168.2.16	151.101.193.229
Sep 20, 2024 18:19:34.052274942 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.052372932 CEST	56652	443	192.168.2.16	151.101.193.229
Sep 20, 2024 18:19:34.052664995 CEST	56652	443	192.168.2.16	151.101.193.229
Sep 20, 2024 18:19:34.052699089 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.057074070 CEST	56653	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:34.057106972 CEST	443	56653	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:34.057174921 CEST	56653	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:34.059555054 CEST	56654	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:34.059575081 CEST	443	56654	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:34.059650898 CEST	56654	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:34.059936047 CEST	56653	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:34.059962988 CEST	443	56653	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:34.060147047 CEST	56654	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:34.060168028 CEST	443	56654	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:34.063225985 CEST	56655	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:34.063282967 CEST	443	56655	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:34.063342094 CEST	56655	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:34.063524961 CEST	56655	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:34.063554049 CEST	443	56655	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:34.081662893 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:34.081702948 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:34.081762075 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:34.081880093 CEST	56657	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:34.081944942 CEST	443	56657	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:34.082012892 CEST	56657	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:34.082245111 CEST	56658	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:34.082264900 CEST	443	56658	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:34.082324028 CEST	56658	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:34.082557917 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:34.082592010 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:34.082752943 CEST	56657	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:34.082787991 CEST	443	56657	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:34.082935095 CEST	56658	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:34.082958937 CEST	443	56658	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:34.155354977 CEST	56659	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:34.155411005 CEST	443	56659	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:34.155487061 CEST	56659	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:34.155846119 CEST	56659	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:34.155858040 CEST	443	56659	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:34.429560900 CEST	443	56650	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:34.429862022 CEST	56650	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:34.429908991 CEST	443	56650	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:34.431248903 CEST	443	56650	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:34.431334972 CEST	56650	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:34.431658030 CEST	56650	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:34.431658030 CEST	56650	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:34.431709051 CEST	56650	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:34.431731939 CEST	443	56650	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:34.431796074 CEST	56650	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:34.432043076 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:34.432076931 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:34.432167053 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:34.432389021 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:34.432398081 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:34.509895086 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.510190964 CEST	56652	443	192.168.2.16	151.101.193.229
Sep 20, 2024 18:19:34.510256052 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.511276007 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.511358023 CEST	56652	443	192.168.2.16	151.101.193.229
Sep 20, 2024 18:19:34.512445927 CEST	56652	443	192.168.2.16	151.101.193.229
Sep 20, 2024 18:19:34.512516975 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.512639046 CEST	56652	443	192.168.2.16	151.101.193.229
Sep 20, 2024 18:19:34.512656927 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.564189911 CEST	56652	443	192.168.2.16	151.101.193.229
Sep 20, 2024 18:19:34.697046995 CEST	443	56659	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:34.697421074 CEST	56659	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:34.697444916 CEST	443	56659	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:34.697904110 CEST	443	56659	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:34.698307991 CEST	56659	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:34.698386908 CEST	443	56659	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:34.698506117 CEST	56659	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:34.739435911 CEST	443	56659	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:34.762732983 CEST	443	56653	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:34.763147116 CEST	56653	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:34.763216972 CEST	443	56653	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:34.764105082 CEST	443	56654	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:34.764331102 CEST	56654	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:34.764348984 CEST	443	56654	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:34.765235901 CEST	443	56653	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:34.765335083 CEST	56653	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:34.765352964 CEST	443	56654	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:34.765464067 CEST	56654	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:34.765722990 CEST	56653	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:34.765811920 CEST	443	56653	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:34.765995979 CEST	56654	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:34.766068935 CEST	443	56654	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:34.766143084 CEST	56653	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:34.766158104 CEST	443	56653	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:34.766202927 CEST	56654	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:34.766216040 CEST	443	56654	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:34.768300056 CEST	443	56655	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:34.768656969 CEST	56655	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:34.768682003 CEST	443	56655	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:34.770087004 CEST	443	56655	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:34.770209074 CEST	56655	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:34.770889997 CEST	56655	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:34.770955086 CEST	443	56655	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:34.771290064 CEST	56655	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:34.771296978 CEST	443	56655	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:34.812206984 CEST	56654	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:34.814444065 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.814989090 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.815021038 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.815045118 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.815045118 CEST	56652	443	192.168.2.16	151.101.193.229
Sep 20, 2024 18:19:34.815064907 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.815126896 CEST	56652	443	192.168.2.16	151.101.193.229
Sep 20, 2024 18:19:34.815133095 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.815176964 CEST	56652	443	192.168.2.16	151.101.193.229
Sep 20, 2024 18:19:34.815728903 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.815776110 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.815797091 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.815817118 CEST	56652	443	192.168.2.16	151.101.193.229
Sep 20, 2024 18:19:34.815825939 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.815870047 CEST	56652	443	192.168.2.16	151.101.193.229
Sep 20, 2024 18:19:34.817655087 CEST	56653	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:34.819726944 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.822165012 CEST	56655	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:34.822930098 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.822988987 CEST	56652	443	192.168.2.16	151.101.193.229
Sep 20, 2024 18:19:34.822999001 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.867187977 CEST	443	56654	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:34.867345095 CEST	443	56654	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:34.867422104 CEST	56654	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:34.869932890 CEST	443	56658	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:34.870659113 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:34.872147083 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:34.872176886 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:34.872387886 CEST	56658	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:34.872421980 CEST	443	56658	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:34.872575045 CEST	56654	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:34.872596025 CEST	443	56654	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:34.873814106 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:34.873897076 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:34.874002934 CEST	443	56658	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:34.874078035 CEST	56658	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:34.878235102 CEST	56652	443	192.168.2.16	151.101.193.229
Sep 20, 2024 18:19:34.883991957 CEST	443	56657	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:34.884848118 CEST	56657	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:34.884859085 CEST	443	56657	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:34.885822058 CEST	443	56657	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:34.885891914 CEST	56657	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:34.899319887 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:34.899430037 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:34.899431944 CEST	56657	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:34.899490118 CEST	443	56657	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:34.899538994 CEST	56658	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:34.899622917 CEST	443	56658	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:34.903520107 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.903585911 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.903637886 CEST	56652	443	192.168.2.16	151.101.193.229
Sep 20, 2024 18:19:34.903650045 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.903882980 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.903934002 CEST	56652	443	192.168.2.16	151.101.193.229
Sep 20, 2024 18:19:34.903940916 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.904238939 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.904277086 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.904289961 CEST	56652	443	192.168.2.16	151.101.193.229
Sep 20, 2024 18:19:34.904300928 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.904340982 CEST	56652	443	192.168.2.16	151.101.193.229
Sep 20, 2024 18:19:34.904346943 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.904817104 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.904850006 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.904879093 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.904889107 CEST	56652	443	192.168.2.16	151.101.193.229
Sep 20, 2024 18:19:34.904898882 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.904936075 CEST	56652	443	192.168.2.16	151.101.193.229
Sep 20, 2024 18:19:34.904958963 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.904994011 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.905014038 CEST	56652	443	192.168.2.16	151.101.193.229
Sep 20, 2024 18:19:34.905020952 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.905066013 CEST	56652	443	192.168.2.16	151.101.193.229
Sep 20, 2024 18:19:34.905188084 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:34.905205011 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:34.905251026 CEST	56657	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:34.905296087 CEST	443	56657	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:34.905689001 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.905744076 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.905776024 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.905812025 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.905810118 CEST	56652	443	192.168.2.16	151.101.193.229
Sep 20, 2024 18:19:34.905822992 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.905854940 CEST	56652	443	192.168.2.16	151.101.193.229
Sep 20, 2024 18:19:34.905879021 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.905930996 CEST	56652	443	192.168.2.16	151.101.193.229
Sep 20, 2024 18:19:34.905939102 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.908720016 CEST	56662	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:34.908782005 CEST	443	56662	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:34.908894062 CEST	56662	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:34.908997059 CEST	56658	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:34.909017086 CEST	443	56658	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:34.912158966 CEST	56662	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:34.912189960 CEST	443	56662	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:34.945188046 CEST	443	56651	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:34.947843075 CEST	56651	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:34.947871923 CEST	443	56651	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:34.948210001 CEST	443	56651	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:34.953700066 CEST	56651	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:34.953768969 CEST	443	56651	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:34.954073906 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.954174995 CEST	56652	443	192.168.2.16	151.101.193.229
Sep 20, 2024 18:19:34.954236031 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:34.954353094 CEST	56651	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:34.956182003 CEST	56658	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:34.956182003 CEST	56657	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:34.957123041 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:34.957207918 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:34.957871914 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:34.957885027 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:34.958197117 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:34.960818052 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:34.960869074 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:34.964307070 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:34.995434046 CEST	443	56651	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:35.004188061 CEST	56652	443	192.168.2.16	151.101.193.229
Sep 20, 2024 18:19:35.011401892 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:35.014118910 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:35.014189959 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:35.014247894 CEST	56652	443	192.168.2.16	151.101.193.229
Sep 20, 2024 18:19:35.014259100 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:35.014363050 CEST	56652	443	192.168.2.16	151.101.193.229
Sep 20, 2024 18:19:35.014666080 CEST	56652	443	192.168.2.16	151.101.193.229
Sep 20, 2024 18:19:35.014704943 CEST	443	56652	151.101.193.229	192.168.2.16
Sep 20, 2024 18:19:35.156487942 CEST	443	56655	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:35.156744003 CEST	443	56655	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:35.156829119 CEST	56655	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:35.157980919 CEST	56655	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:35.158040047 CEST	443	56655	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:35.161001921 CEST	56664	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:35.161070108 CEST	443	56664	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:35.161211967 CEST	56664	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:35.161392927 CEST	443	56653	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:35.161490917 CEST	56664	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:35.161520958 CEST	443	56664	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:35.162458897 CEST	443	56653	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:35.162540913 CEST	56653	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:35.162789106 CEST	56653	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:35.162807941 CEST	443	56653	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:35.165910006 CEST	56665	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:35.165962934 CEST	443	56665	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:35.166088104 CEST	56665	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:35.166352034 CEST	56665	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:35.166383028 CEST	443	56665	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:35.219419956 CEST	443	56657	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:35.222404003 CEST	443	56657	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:35.222426891 CEST	443	56657	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:35.222465992 CEST	443	56657	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:35.222485065 CEST	443	56657	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:35.222531080 CEST	56657	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:35.222595930 CEST	443	56657	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:35.222631931 CEST	56657	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:35.222831964 CEST	56657	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:35.222893000 CEST	443	56657	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:35.222964048 CEST	56657	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:35.231064081 CEST	443	56651	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:35.231142044 CEST	443	56651	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:35.231220961 CEST	443	56651	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:35.231257915 CEST	56651	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:35.231311083 CEST	56651	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:35.231812954 CEST	56651	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:35.231832027 CEST	443	56651	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:35.234568119 CEST	56666	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:35.234603882 CEST	443	56666	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:35.234710932 CEST	56666	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:35.234982967 CEST	56666	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:35.235008955 CEST	443	56666	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:35.259669065 CEST	443	56658	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:35.259694099 CEST	443	56658	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:35.259705067 CEST	443	56658	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:35.259721041 CEST	443	56658	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:35.259730101 CEST	443	56658	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:35.259763956 CEST	56658	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:35.259795904 CEST	443	56658	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:35.259835958 CEST	56658	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:35.261101007 CEST	56658	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:35.261168957 CEST	443	56658	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:35.261243105 CEST	56658	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:35.296782017 CEST	56667	443	192.168.2.16	13.33.187.120
Sep 20, 2024 18:19:35.296828032 CEST	443	56667	13.33.187.120	192.168.2.16
Sep 20, 2024 18:19:35.296916962 CEST	56667	443	192.168.2.16	13.33.187.120
Sep 20, 2024 18:19:35.297188997 CEST	56667	443	192.168.2.16	13.33.187.120
Sep 20, 2024 18:19:35.297207117 CEST	443	56667	13.33.187.120	192.168.2.16
Sep 20, 2024 18:19:35.558643103 CEST	443	56662	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:35.559037924 CEST	56662	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:35.559067011 CEST	443	56662	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:35.560198069 CEST	443	56662	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:35.560612917 CEST	56662	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:35.560766935 CEST	56662	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:35.560794115 CEST	443	56662	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:35.610244989 CEST	56662	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:35.742332935 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:35.742367983 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:35.742379904 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:35.742420912 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:35.742476940 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:35.742495060 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:35.742527962 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:35.777565956 CEST	443	56659	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:35.777888060 CEST	443	56659	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:35.777973890 CEST	56659	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:35.778364897 CEST	56659	443	192.168.2.16	188.114.97.3
Sep 20, 2024 18:19:35.778381109 CEST	443	56659	188.114.97.3	192.168.2.16
Sep 20, 2024 18:19:35.781651974 CEST	56668	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:35.781699896 CEST	443	56668	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:35.781811953 CEST	56668	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:35.782176018 CEST	56668	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:35.782192945 CEST	443	56668	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:35.786190033 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:35.796092033 CEST	56669	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:35.796144009 CEST	443	56669	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:35.796231031 CEST	56669	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:35.796469927 CEST	56669	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:35.796492100 CEST	443	56669	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:35.816534042 CEST	443	56664	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:35.816950083 CEST	56664	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:35.816987991 CEST	443	56664	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:35.817466021 CEST	443	56664	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:35.817904949 CEST	56664	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:35.817990065 CEST	443	56664	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:35.818135023 CEST	56664	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:35.821465969 CEST	443	56665	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:35.821749926 CEST	56665	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:35.821827888 CEST	443	56665	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:35.823276997 CEST	443	56665	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:35.823405027 CEST	56665	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:35.823816061 CEST	56665	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:35.823901892 CEST	443	56665	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:35.823998928 CEST	56665	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:35.824032068 CEST	443	56665	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:35.826450109 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:35.826466084 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:35.826600075 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:35.826632977 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:35.826674938 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:35.826705933 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:35.826718092 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:35.826757908 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:35.826759100 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:35.826787949 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:35.826821089 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:35.839684963 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:35.839710951 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:35.839878082 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:35.839885950 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:35.839982033 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:35.859405994 CEST	443	56664	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:35.866225958 CEST	56665	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:35.917572975 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:35.917594910 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:35.917735100 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:35.917759895 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:35.917840958 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:35.918963909 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:35.918982983 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:35.919034004 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:35.919040918 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:35.919076920 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:35.919090986 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:35.919914007 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:35.919981956 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:35.926434040 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:35.926451921 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:35.926489115 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:35.926527977 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:35.926534891 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:35.926565886 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:35.930516958 CEST	443	56665	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:35.930581093 CEST	443	56665	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:35.930634975 CEST	56665	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:35.931509018 CEST	56665	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:35.931519985 CEST	443	56665	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:35.940099001 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:35.940121889 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:35.940186977 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:35.940196037 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:35.940232992 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:35.940861940 CEST	443	56664	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:35.940942049 CEST	443	56664	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:35.941019058 CEST	56664	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:35.941600084 CEST	56664	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:35.941620111 CEST	443	56664	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:35.994182110 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:36.005060911 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:36.005078077 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:36.005166054 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:36.005172968 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:36.005218983 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:36.006091118 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:36.006108999 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:36.006170034 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:36.006175995 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:36.006221056 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:36.007163048 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:36.007183075 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:36.007236004 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:36.007241964 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:36.007282019 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:36.017715931 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:36.017744064 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:36.017858028 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:36.017863989 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:36.017925024 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:36.018109083 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:36.018160105 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:36.018172026 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:36.018183947 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:36.018196106 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:36.018215895 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:36.018234968 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:36.018623114 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:36.018692970 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:36.018698931 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:36.018742085 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:36.039975882 CEST	443	56667	13.33.187.120	192.168.2.16
Sep 20, 2024 18:19:36.040328979 CEST	56667	443	192.168.2.16	13.33.187.120
Sep 20, 2024 18:19:36.040349960 CEST	443	56667	13.33.187.120	192.168.2.16
Sep 20, 2024 18:19:36.044043064 CEST	443	56667	13.33.187.120	192.168.2.16
Sep 20, 2024 18:19:36.044147968 CEST	56667	443	192.168.2.16	13.33.187.120
Sep 20, 2024 18:19:36.044485092 CEST	56667	443	192.168.2.16	13.33.187.120
Sep 20, 2024 18:19:36.044549942 CEST	443	56667	13.33.187.120	192.168.2.16
Sep 20, 2024 18:19:36.044747114 CEST	56667	443	192.168.2.16	13.33.187.120
Sep 20, 2024 18:19:36.044756889 CEST	443	56667	13.33.187.120	192.168.2.16
Sep 20, 2024 18:19:36.070993900 CEST	443	56666	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:36.071410894 CEST	56666	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:36.071475029 CEST	443	56666	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:36.072594881 CEST	443	56666	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:36.073034048 CEST	56666	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:36.073189020 CEST	56666	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:36.073227882 CEST	443	56666	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:36.088303089 CEST	443	56662	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:36.088452101 CEST	443	56662	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:36.088531971 CEST	56662	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:36.089236021 CEST	56667	443	192.168.2.16	13.33.187.120
Sep 20, 2024 18:19:36.090326071 CEST	56662	443	192.168.2.16	13.107.246.60
Sep 20, 2024 18:19:36.090347052 CEST	443	56662	13.107.246.60	192.168.2.16
Sep 20, 2024 18:19:36.091125011 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:36.091146946 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:36.091178894 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:36.091232061 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:36.091233015 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:36.091320992 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:36.092374086 CEST	56656	443	192.168.2.16	18.165.122.119
Sep 20, 2024 18:19:36.092386961 CEST	443	56656	18.165.122.119	192.168.2.16
Sep 20, 2024 18:19:36.121357918 CEST	56666	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:36.246057034 CEST	443	56668	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:36.246581078 CEST	56668	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:36.246612072 CEST	443	56668	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:36.247834921 CEST	443	56668	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:36.247956991 CEST	56668	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:36.248442888 CEST	56668	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:36.248507977 CEST	443	56668	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:36.248764992 CEST	56668	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:36.248764992 CEST	56668	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:36.248764992 CEST	56668	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:36.248927116 CEST	56670	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:36.248972893 CEST	443	56670	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:36.249095917 CEST	56670	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:36.249313116 CEST	56670	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:36.249327898 CEST	443	56670	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:36.320780993 CEST	443	56667	13.33.187.120	192.168.2.16
Sep 20, 2024 18:19:36.320885897 CEST	443	56667	13.33.187.120	192.168.2.16
Sep 20, 2024 18:19:36.320908070 CEST	443	56667	13.33.187.120	192.168.2.16
Sep 20, 2024 18:19:36.320949078 CEST	443	56667	13.33.187.120	192.168.2.16
Sep 20, 2024 18:19:36.320976973 CEST	56667	443	192.168.2.16	13.33.187.120
Sep 20, 2024 18:19:36.320991039 CEST	443	56667	13.33.187.120	192.168.2.16
Sep 20, 2024 18:19:36.321005106 CEST	56667	443	192.168.2.16	13.33.187.120
Sep 20, 2024 18:19:36.321064949 CEST	56667	443	192.168.2.16	13.33.187.120
Sep 20, 2024 18:19:36.321089029 CEST	443	56667	13.33.187.120	192.168.2.16
Sep 20, 2024 18:19:36.321149111 CEST	56667	443	192.168.2.16	13.33.187.120
Sep 20, 2024 18:19:36.321659088 CEST	56667	443	192.168.2.16	13.33.187.120
Sep 20, 2024 18:19:36.321669102 CEST	443	56667	13.33.187.120	192.168.2.16
Sep 20, 2024 18:19:36.336884975 CEST	443	56666	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:36.337029934 CEST	443	56666	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:36.337120056 CEST	56666	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:36.337176085 CEST	443	56666	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:36.337208986 CEST	443	56666	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:36.337240934 CEST	56666	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:36.337274075 CEST	56666	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:36.337630033 CEST	56666	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:36.337661982 CEST	443	56666	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:36.635190964 CEST	443	56669	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:36.635513067 CEST	56669	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:36.635550976 CEST	443	56669	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:36.636562109 CEST	443	56669	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:36.636650085 CEST	56669	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:36.637850046 CEST	56669	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:36.637918949 CEST	443	56669	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:36.638046980 CEST	56669	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:36.638057947 CEST	443	56669	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:36.678217888 CEST	56669	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:36.749751091 CEST	443	56670	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:36.750212908 CEST	56670	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:36.750230074 CEST	443	56670	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:36.751199007 CEST	443	56670	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:36.751300097 CEST	56670	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:36.751645088 CEST	56670	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:36.751705885 CEST	443	56670	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:36.751823902 CEST	56670	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:36.751832962 CEST	443	56670	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:36.805268049 CEST	56670	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.302361965 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.302436113 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.302510977 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.302561998 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.302582026 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.302637100 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.302643061 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.302704096 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.302757978 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.302763939 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.303039074 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.303073883 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.303102970 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.303108931 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.303155899 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.307171106 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.307260036 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.307311058 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.307317019 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.349498034 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.392731905 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.392822027 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.392872095 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.392913103 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.392970085 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.393026114 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.393040895 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.393042088 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.393066883 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.393084049 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.393348932 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.393398046 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.393404961 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.393723011 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.393775940 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.393781900 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.393840075 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.393884897 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.393889904 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.393949986 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.393994093 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.393999100 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.394057989 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.394102097 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.394108057 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.394800901 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.394859076 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.394865036 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.394963980 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.395004034 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.395009041 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.395072937 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.395124912 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.395132065 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.395143032 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.395185947 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.483468056 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.483560085 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.483620882 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.483675957 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.483711004 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.483725071 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.483755112 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.483766079 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.483819962 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.483827114 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.483877897 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.484127998 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.484189987 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.484194994 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.484232903 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.484539032 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.484594107 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.484671116 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.484719992 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.485174894 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.485229969 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.485331059 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.485378981 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.485387087 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.485397100 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.485431910 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.486175060 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.486218929 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.486224890 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.486263037 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.486289978 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.486337900 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.486355066 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.486407995 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.486999989 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.487051964 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.487106085 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.487160921 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.487221956 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.487273932 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.497796059 CEST	443	56669	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:37.497863054 CEST	443	56669	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:37.497920990 CEST	443	56669	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:37.497930050 CEST	56669	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:37.497968912 CEST	56669	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:37.498620987 CEST	56669	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:37.498642921 CEST	443	56669	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:37.510452032 CEST	56671	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:37.510549068 CEST	443	56671	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:37.510639906 CEST	56671	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:37.510891914 CEST	56671	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:37.510914087 CEST	443	56671	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:37.574081898 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.574167013 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.574224949 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.574275017 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.574357033 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.574357033 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.574372053 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.574434996 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.574610949 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.574610949 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.574610949 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.574620962 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.574693918 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.574747086 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.574834108 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.574892998 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.574892998 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.574899912 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.574924946 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.574949026 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.575187922 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.575234890 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.575252056 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.575258970 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.575294971 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.575304985 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.575336933 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.575401068 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.575445890 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.575452089 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.575491905 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.575537920 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.575544119 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.575562000 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.576018095 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.576088905 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.576095104 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.576141119 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.576204062 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.576260090 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.576272011 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.576280117 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.576308012 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.576342106 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.576389074 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.576394081 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.576416969 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.576442003 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.576446056 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.576468945 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.576491117 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.576539040 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.576545000 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.576592922 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.577003956 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.577078104 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.577193022 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.577243090 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.577258110 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.577263117 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.577286959 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.577366114 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.577414036 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.577419996 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.577434063 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.577465057 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.577470064 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.577538967 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.577905893 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.577970028 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.577975988 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.578020096 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.578052998 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.578099966 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.617229939 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.617261887 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.617341995 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.617357016 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.617372990 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.665797949 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.665837049 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.665914059 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.665927887 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.666106939 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.666141033 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.666161060 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.666203022 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.666209936 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.666223049 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.666585922 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.666613102 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.666651964 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.666657925 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.666682959 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.666929007 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.666948080 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.667010069 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.667017937 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.667063951 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.670820951 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.670840025 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.670912981 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.670918941 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.670968056 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.671298981 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.671318054 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.671379089 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.671391010 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.671438932 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.671762943 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.671787977 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.671825886 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.671832085 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.671864033 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.671885967 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.756241083 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.756268024 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.756388903 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.756402016 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.756418943 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.756442070 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.756458998 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.756469965 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.756489038 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.756514072 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.756561041 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.756815910 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.756834030 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.756896019 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.756902933 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.756917000 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.756969929 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.756975889 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.757019043 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.757378101 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.757399082 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.757452011 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.757457018 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.757484913 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.757510900 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.757688046 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.757709026 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.757772923 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.757778883 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.757831097 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.758058071 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.758142948 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.758141994 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.758173943 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.758222103 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.758452892 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.758472919 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.758534908 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.758541107 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.758598089 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.758804083 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.758829117 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.758891106 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.758897066 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.758951902 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.846913099 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.846937895 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.846987009 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.847177029 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.847177029 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.847188950 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.847310066 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.847336054 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.847410917 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.847420931 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.847438097 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.847661018 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.847678900 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.847748041 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.847760916 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.848037004 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.848061085 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.848103046 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.848109007 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.848151922 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.848186970 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.848639965 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.848659039 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.848735094 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.848742008 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.848793030 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.848942995 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.848963976 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.849029064 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.849034071 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.849082947 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.849256039 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.849273920 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.849317074 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.849322081 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.849339962 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.849349976 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.849379063 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.849384069 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.849440098 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.849778891 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.849802017 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.849865913 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.849870920 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.849926949 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.954201937 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.954237938 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.954396963 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.954417944 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.954488039 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.954598904 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.954668999 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.954678059 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.954701900 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.954754114 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.954773903 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.954860926 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.954884052 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.954926968 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.954931974 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.954971075 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.954986095 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.955185890 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.955205917 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.955245018 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.955254078 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.955286980 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.955307961 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.955524921 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.955549955 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.955590010 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.955595016 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.955632925 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.955656052 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.955672026 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.955729961 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.955737114 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.955991983 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.956018925 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.956079006 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.956084967 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.956419945 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.956440926 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.956486940 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.956492901 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.956530094 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.974772930 CEST	443	56670	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.975023031 CEST	443	56670	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:37.975152969 CEST	56670	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.975572109 CEST	56670	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:37.975590944 CEST	443	56670	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.003211021 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.044365883 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.044389009 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.044600010 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.044646978 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.044658899 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.044704914 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.044965982 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.044985056 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.045131922 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.045131922 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.045133114 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.045140982 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.045192003 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.045466900 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.045489073 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.045555115 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.045563936 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.045609951 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.045957088 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.045978069 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.046035051 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.046041012 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.046147108 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.046189070 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.046211958 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.046262980 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.046267986 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.046319008 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.046523094 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.046596050 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.046607971 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.046626091 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.046657085 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.047100067 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.047116995 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.047205925 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.047256947 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.047314882 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.047326088 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.047408104 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.148264885 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.148401976 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.148746014 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.148746967 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.148778915 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.150952101 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.150979996 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.151323080 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.151323080 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.151355982 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.151738882 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.151778936 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.151974916 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.151988983 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.152049065 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.155226946 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.155256987 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.155297041 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.155311108 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.155344009 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.155368090 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.155426025 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.155467033 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.155498981 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.155507088 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.155560017 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.155765057 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.155788898 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.155826092 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.155831099 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.155874014 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.155890942 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.156234980 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.156263113 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.156302929 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.156307936 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.156343937 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.156369925 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.156589031 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.156614065 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.156672955 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.156678915 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.156717062 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.156723022 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.156737089 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.156744957 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.156774998 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.156991005 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.157016039 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.157066107 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.157072067 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.157104969 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.157732964 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.238567114 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.238595009 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.238771915 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.238786936 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.238856077 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.242618084 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.242646933 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.242722034 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.242729902 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.242796898 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.245995045 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.246017933 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.246222973 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.246231079 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.246376991 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.246390104 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.246397972 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.246423006 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.246434927 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.246495962 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.246505022 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.246560097 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.246733904 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.246754885 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.246815920 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.246822119 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.246867895 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.247224092 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.247242928 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.247298002 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.247311115 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.247318029 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.247350931 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.247376919 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.247381926 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.247483015 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.247493029 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.247502089 CEST	443	56661	188.114.96.3	192.168.2.16
Sep 20, 2024 18:19:38.247555971 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.247580051 CEST	56661	443	192.168.2.16	188.114.96.3
Sep 20, 2024 18:19:38.360311031 CEST	443	56671	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:38.360891104 CEST	56671	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:38.360951900 CEST	443	56671	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:38.364181042 CEST	443	56671	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:38.364308119 CEST	56671	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:38.364682913 CEST	56671	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:38.364774942 CEST	443	56671	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:38.364866018 CEST	56671	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:38.364882946 CEST	443	56671	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:38.419250965 CEST	56671	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:38.576129913 CEST	443	56671	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:38.576253891 CEST	443	56671	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:38.576405048 CEST	443	56671	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:38.576647043 CEST	56671	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:38.577352047 CEST	56671	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:38.577352047 CEST	56671	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:38.880198956 CEST	56671	443	192.168.2.16	152.199.21.175
Sep 20, 2024 18:19:38.880264997 CEST	443	56671	152.199.21.175	192.168.2.16
Sep 20, 2024 18:19:53.043618917 CEST	56673	443	192.168.2.16	142.250.181.228
Sep 20, 2024 18:19:53.043651104 CEST	443	56673	142.250.181.228	192.168.2.16
Sep 20, 2024 18:19:53.043749094 CEST	56673	443	192.168.2.16	142.250.181.228
Sep 20, 2024 18:19:53.044020891 CEST	56673	443	192.168.2.16	142.250.181.228
Sep 20, 2024 18:19:53.044034004 CEST	443	56673	142.250.181.228	192.168.2.16
Sep 20, 2024 18:19:53.693521023 CEST	443	56673	142.250.181.228	192.168.2.16
Sep 20, 2024 18:19:53.693991899 CEST	56673	443	192.168.2.16	142.250.181.228
Sep 20, 2024 18:19:53.694055080 CEST	443	56673	142.250.181.228	192.168.2.16
Sep 20, 2024 18:19:53.694449902 CEST	443	56673	142.250.181.228	192.168.2.16
Sep 20, 2024 18:19:53.694870949 CEST	56673	443	192.168.2.16	142.250.181.228
Sep 20, 2024 18:19:53.694941044 CEST	443	56673	142.250.181.228	192.168.2.16
Sep 20, 2024 18:19:53.735235929 CEST	56673	443	192.168.2.16	142.250.181.228
Sep 20, 2024 18:19:59.416933060 CEST	56673	443	192.168.2.16	142.250.181.228
Sep 20, 2024 18:19:59.459446907 CEST	443	56673	142.250.181.228	192.168.2.16
Sep 20, 2024 18:19:59.634954929 CEST	443	56673	142.250.181.228	192.168.2.16
Sep 20, 2024 18:19:59.638756037 CEST	443	56673	142.250.181.228	192.168.2.16
Sep 20, 2024 18:19:59.638869047 CEST	56673	443	192.168.2.16	142.250.181.228
Sep 20, 2024 18:19:59.638922930 CEST	443	56673	142.250.181.228	192.168.2.16
Sep 20, 2024 18:19:59.638956070 CEST	443	56673	142.250.181.228	192.168.2.16
Sep 20, 2024 18:19:59.639018059 CEST	56673	443	192.168.2.16	142.250.181.228
Sep 20, 2024 18:19:59.639940023 CEST	56673	443	192.168.2.16	142.250.181.228
Sep 20, 2024 18:19:59.639971018 CEST	443	56673	142.250.181.228	192.168.2.16
Sep 20, 2024 18:20:21.864569902 CEST	49701	80	192.168.2.16	192.229.221.95
Sep 20, 2024 18:20:22.106091976 CEST	80	49701	192.229.221.95	192.168.2.16
Sep 20, 2024 18:20:22.106301069 CEST	49701	80	192.168.2.16	192.229.221.95
Sep 20, 2024 18:20:53.093261003 CEST	56721	443	192.168.2.16	142.250.181.228
Sep 20, 2024 18:20:53.093317986 CEST	443	56721	142.250.181.228	192.168.2.16
Sep 20, 2024 18:20:53.093393087 CEST	56721	443	192.168.2.16	142.250.181.228
Sep 20, 2024 18:20:53.093657017 CEST	56721	443	192.168.2.16	142.250.181.228
Sep 20, 2024 18:20:53.093674898 CEST	443	56721	142.250.181.228	192.168.2.16
Sep 20, 2024 18:20:53.735776901 CEST	443	56721	142.250.181.228	192.168.2.16
Sep 20, 2024 18:20:53.736083984 CEST	56721	443	192.168.2.16	142.250.181.228
Sep 20, 2024 18:20:53.736114979 CEST	443	56721	142.250.181.228	192.168.2.16
Sep 20, 2024 18:20:53.736579895 CEST	443	56721	142.250.181.228	192.168.2.16
Sep 20, 2024 18:20:53.737000942 CEST	56721	443	192.168.2.16	142.250.181.228
Sep 20, 2024 18:20:53.737086058 CEST	443	56721	142.250.181.228	192.168.2.16
Sep 20, 2024 18:20:53.791328907 CEST	56721	443	192.168.2.16	142.250.181.228

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 20, 2024 18:18:48.122572899 CEST	49502	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:18:48.123379946 CEST	50430	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:18:48.295797110 CEST	53	57430	1.1.1.1	192.168.2.16
Sep 20, 2024 18:18:48.300194025 CEST	53	64448	1.1.1.1	192.168.2.16
Sep 20, 2024 18:18:48.306255102 CEST	53	50430	1.1.1.1	192.168.2.16
Sep 20, 2024 18:18:48.342061043 CEST	53	49502	1.1.1.1	192.168.2.16
Sep 20, 2024 18:18:49.398212910 CEST	53	60572	1.1.1.1	192.168.2.16
Sep 20, 2024 18:18:49.817079067 CEST	49549	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:18:49.817190886 CEST	52795	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:18:49.824466944 CEST	53	52795	1.1.1.1	192.168.2.16
Sep 20, 2024 18:18:49.835840940 CEST	53	49549	1.1.1.1	192.168.2.16
Sep 20, 2024 18:18:52.205092907 CEST	60377	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:18:52.205581903 CEST	57323	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:18:52.501368999 CEST	53	60377	1.1.1.1	192.168.2.16
Sep 20, 2024 18:18:52.526520014 CEST	53	57323	1.1.1.1	192.168.2.16
Sep 20, 2024 18:18:52.971908092 CEST	63103	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:18:52.972099066 CEST	59842	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:18:52.979176044 CEST	53	63103	1.1.1.1	192.168.2.16
Sep 20, 2024 18:18:52.979192972 CEST	53	59842	1.1.1.1	192.168.2.16
Sep 20, 2024 18:18:53.760955095 CEST	56774	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:18:53.761481047 CEST	58358	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:18:54.003470898 CEST	53	56422	1.1.1.1	192.168.2.16
Sep 20, 2024 18:18:54.003487110 CEST	53	58358	1.1.1.1	192.168.2.16
Sep 20, 2024 18:18:54.005469084 CEST	53	56774	1.1.1.1	192.168.2.16
Sep 20, 2024 18:18:54.008203030 CEST	59617	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:18:54.008780956 CEST	63882	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:18:54.015410900 CEST	53	59617	1.1.1.1	192.168.2.16
Sep 20, 2024 18:18:54.016643047 CEST	53	63882	1.1.1.1	192.168.2.16
Sep 20, 2024 18:18:55.173460007 CEST	62034	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:18:55.173649073 CEST	62261	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:18:55.194782019 CEST	53	62034	1.1.1.1	192.168.2.16
Sep 20, 2024 18:18:55.195453882 CEST	53	62261	1.1.1.1	192.168.2.16
Sep 20, 2024 18:18:55.309633970 CEST	53	63014	1.1.1.1	192.168.2.16
Sep 20, 2024 18:18:55.769678116 CEST	51989	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:18:55.769915104 CEST	52680	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:18:55.778160095 CEST	53	51989	1.1.1.1	192.168.2.16
Sep 20, 2024 18:18:55.778326035 CEST	53	52680	1.1.1.1	192.168.2.16
Sep 20, 2024 18:18:56.476387024 CEST	53	53462	1.1.1.1	192.168.2.16
Sep 20, 2024 18:18:56.607425928 CEST	56185	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:18:56.607645988 CEST	55171	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:18:56.608771086 CEST	54284	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:18:56.608906984 CEST	52951	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:18:56.614348888 CEST	53	55171	1.1.1.1	192.168.2.16
Sep 20, 2024 18:18:56.624869108 CEST	53	54284	1.1.1.1	192.168.2.16
Sep 20, 2024 18:18:56.625492096 CEST	53	52951	1.1.1.1	192.168.2.16
Sep 20, 2024 18:19:01.561022043 CEST	61536	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:19:01.561180115 CEST	54629	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:19:01.568516016 CEST	53	61536	1.1.1.1	192.168.2.16
Sep 20, 2024 18:19:01.569752932 CEST	53	54629	1.1.1.1	192.168.2.16
Sep 20, 2024 18:19:06.263535976 CEST	53	61087	1.1.1.1	192.168.2.16
Sep 20, 2024 18:19:15.866266012 CEST	57874	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:19:15.866518974 CEST	55380	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:19:15.881072044 CEST	53	57874	1.1.1.1	192.168.2.16
Sep 20, 2024 18:19:16.116890907 CEST	53	55380	1.1.1.1	192.168.2.16
Sep 20, 2024 18:19:16.883546114 CEST	49684	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:19:16.883763075 CEST	52752	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:19:16.890252113 CEST	60477	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:19:16.890420914 CEST	53	49684	1.1.1.1	192.168.2.16
Sep 20, 2024 18:19:16.890475988 CEST	64099	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:19:16.890590906 CEST	53	52752	1.1.1.1	192.168.2.16
Sep 20, 2024 18:19:16.897345066 CEST	53	60477	1.1.1.1	192.168.2.16
Sep 20, 2024 18:19:16.897778988 CEST	53	64099	1.1.1.1	192.168.2.16
Sep 20, 2024 18:19:17.770262003 CEST	56270	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:19:17.770467043 CEST	55651	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:19:17.777410030 CEST	53	55651	1.1.1.1	192.168.2.16
Sep 20, 2024 18:19:17.777524948 CEST	53	56270	1.1.1.1	192.168.2.16
Sep 20, 2024 18:19:17.778024912 CEST	62926	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:19:17.778161049 CEST	54729	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:19:17.785399914 CEST	53	62926	1.1.1.1	192.168.2.16
Sep 20, 2024 18:19:17.788825989 CEST	53	54729	1.1.1.1	192.168.2.16
Sep 20, 2024 18:19:18.327929974 CEST	50981	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:19:18.328038931 CEST	57178	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:19:18.334961891 CEST	53	50981	1.1.1.1	192.168.2.16
Sep 20, 2024 18:19:18.335834980 CEST	53	57178	1.1.1.1	192.168.2.16
Sep 20, 2024 18:19:19.324755907 CEST	58629	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:19:19.325062037 CEST	58618	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:19:19.332093000 CEST	53	58629	1.1.1.1	192.168.2.16
Sep 20, 2024 18:19:19.332128048 CEST	53	58618	1.1.1.1	192.168.2.16
Sep 20, 2024 18:19:19.472976923 CEST	59641	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:19:19.473160028 CEST	61230	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:19:19.480521917 CEST	53	59641	1.1.1.1	192.168.2.16
Sep 20, 2024 18:19:19.481425047 CEST	53	61230	1.1.1.1	192.168.2.16
Sep 20, 2024 18:19:24.965830088 CEST	53	55241	1.1.1.1	192.168.2.16
Sep 20, 2024 18:19:30.320269108 CEST	51494	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:19:30.320626020 CEST	56767	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:19:30.665798903 CEST	53	56767	1.1.1.1	192.168.2.16
Sep 20, 2024 18:19:30.667412043 CEST	53	51494	1.1.1.1	192.168.2.16
Sep 20, 2024 18:19:34.041402102 CEST	61101	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:19:34.041712999 CEST	54981	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:19:34.043015003 CEST	61269	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:19:34.043217897 CEST	60328	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:19:34.050365925 CEST	53	60328	1.1.1.1	192.168.2.16
Sep 20, 2024 18:19:34.050396919 CEST	53	61269	1.1.1.1	192.168.2.16
Sep 20, 2024 18:19:34.052110910 CEST	53	54981	1.1.1.1	192.168.2.16
Sep 20, 2024 18:19:34.080892086 CEST	53	61101	1.1.1.1	192.168.2.16
Sep 20, 2024 18:19:34.175957918 CEST	53	50272	1.1.1.1	192.168.2.16
Sep 20, 2024 18:19:35.018501997 CEST	55354	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:19:35.018661022 CEST	58759	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:19:35.026851892 CEST	53	58759	1.1.1.1	192.168.2.16
Sep 20, 2024 18:19:35.263447046 CEST	49317	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:19:35.263633966 CEST	49164	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:19:35.295439005 CEST	53	49317	1.1.1.1	192.168.2.16
Sep 20, 2024 18:19:35.296155930 CEST	53	49164	1.1.1.1	192.168.2.16
Sep 20, 2024 18:19:35.786315918 CEST	55841	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:19:35.786787987 CEST	57386	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:19:37.502264023 CEST	62721	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:19:37.502438068 CEST	54344	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:19:40.501041889 CEST	138	138	192.168.2.16	192.168.2.255
Sep 20, 2024 18:19:47.569447041 CEST	53	64253	1.1.1.1	192.168.2.16
Sep 20, 2024 18:19:48.113034964 CEST	53	55907	1.1.1.1	192.168.2.16
Sep 20, 2024 18:19:53.032310009 CEST	50759	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:19:53.032519102 CEST	65445	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:19:53.042499065 CEST	53	50759	1.1.1.1	192.168.2.16
Sep 20, 2024 18:19:53.042581081 CEST	53	65445	1.1.1.1	192.168.2.16
Sep 20, 2024 18:20:06.082478046 CEST	61156	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:20:06.082631111 CEST	56396	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:20:07.288183928 CEST	59906	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:20:07.288310051 CEST	51992	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:20:07.561242104 CEST	49490	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:20:07.561394930 CEST	52073	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:20:08.841702938 CEST	54540	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:20:08.841872931 CEST	51539	53	192.168.2.16	1.1.1.1
Sep 20, 2024 18:20:09.898797989 CEST	53	54589	1.1.1.1	192.168.2.16
Sep 20, 2024 18:20:16.670423985 CEST	53	62052	1.1.1.1	192.168.2.16

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Sep 20, 2024 18:19:16.117038012 CEST	192.168.2.16	1.1.1.1	c294	(Port unreachable)	Destination Unreachable
Sep 20, 2024 18:20:06.129146099 CEST	192.168.2.16	1.1.1.1	c2cc	(Port unreachable)	Destination Unreachable
Sep 20, 2024 18:20:07.535339117 CEST	192.168.2.16	1.1.1.1	c29a	(Port unreachable)	Destination Unreachable
Sep 20, 2024 18:20:08.786962032 CEST	192.168.2.16	1.1.1.1	c29a	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 20, 2024 18:18:48.122572899 CEST	192.168.2.16	1.1.1.1	0xde05	Standard query (0)	us-east-2.protection.sophos.com	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:18:48.123379946 CEST	192.168.2.16	1.1.1.1	0xe7be	Standard query (0)	us-east-2.protection.sophos.com	65	IN (0x0001)	false
Sep 20, 2024 18:18:49.817079067 CEST	192.168.2.16	1.1.1.1	0x649c	Standard query (0)	linkprotect.cudasvc.com	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:18:49.817190886 CEST	192.168.2.16	1.1.1.1	0x2500	Standard query (0)	linkprotect.cudasvc.com	65	IN (0x0001)	false
Sep 20, 2024 18:18:52.205092907 CEST	192.168.2.16	1.1.1.1	0x9f27	Standard query (0)	0obt.menus-unlimited.com	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:18:52.205581903 CEST	192.168.2.16	1.1.1.1	0xd562	Standard query (0)	0obt.menus-unlimited.com	65	IN (0x0001)	false
Sep 20, 2024 18:18:52.971908092 CEST	192.168.2.16	1.1.1.1	0x1b77	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:18:52.972099066 CEST	192.168.2.16	1.1.1.1	0xac96	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 20, 2024 18:18:53.760955095 CEST	192.168.2.16	1.1.1.1	0x51f5	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:18:53.761481047 CEST	192.168.2.16	1.1.1.1	0xde84	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Sep 20, 2024 18:18:54.008203030 CEST	192.168.2.16	1.1.1.1	0x3eec	Standard query (0)	i.ibb.co	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:18:54.008780956 CEST	192.168.2.16	1.1.1.1	0xe2da	Standard query (0)	i.ibb.co	65	IN (0x0001)	false
Sep 20, 2024 18:18:55.173460007 CEST	192.168.2.16	1.1.1.1	0xa363	Standard query (0)	i.ibb.co	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:18:55.173649073 CEST	192.168.2.16	1.1.1.1	0x4a12	Standard query (0)	i.ibb.co	65	IN (0x0001)	false
Sep 20, 2024 18:18:55.769678116 CEST	192.168.2.16	1.1.1.1	0x2121	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:18:55.769915104 CEST	192.168.2.16	1.1.1.1	0x9515	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Sep 20, 2024 18:18:56.607425928 CEST	192.168.2.16	1.1.1.1	0xf8e5	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:18:56.607645988 CEST	192.168.2.16	1.1.1.1	0x7122	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Sep 20, 2024 18:18:56.608771086 CEST	192.168.2.16	1.1.1.1	0x8f28	Standard query (0)	0obt.menus-unlimited.com	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:18:56.608906984 CEST	192.168.2.16	1.1.1.1	0x5799	Standard query (0)	0obt.menus-unlimited.com	65	IN (0x0001)	false
Sep 20, 2024 18:19:01.561022043 CEST	192.168.2.16	1.1.1.1	0x908b	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:01.561180115 CEST	192.168.2.16	1.1.1.1	0x566f	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Sep 20, 2024 18:19:15.866266012 CEST	192.168.2.16	1.1.1.1	0x50a5	Standard query (0)	agence-immobiliere-luberon.com	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:15.866518974 CEST	192.168.2.16	1.1.1.1	0xd9d6	Standard query (0)	agence-immobiliere-luberon.com	65	IN (0x0001)	false
Sep 20, 2024 18:19:16.883546114 CEST	192.168.2.16	1.1.1.1	0xc116	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:16.883763075 CEST	192.168.2.16	1.1.1.1	0xd15c	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Sep 20, 2024 18:19:16.890252113 CEST	192.168.2.16	1.1.1.1	0xafa3	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:16.890475988 CEST	192.168.2.16	1.1.1.1	0xbedf	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 20, 2024 18:19:17.770262003 CEST	192.168.2.16	1.1.1.1	0x63e0	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:17.770467043 CEST	192.168.2.16	1.1.1.1	0xf676	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Sep 20, 2024 18:19:17.778024912 CEST	192.168.2.16	1.1.1.1	0x344c	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:17.778161049 CEST	192.168.2.16	1.1.1.1	0x8f28	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 20, 2024 18:19:18.327929974 CEST	192.168.2.16	1.1.1.1	0x7edc	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:18.328038931 CEST	192.168.2.16	1.1.1.1	0x1fde	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Sep 20, 2024 18:19:19.324755907 CEST	192.168.2.16	1.1.1.1	0x5a34	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:19.325062037 CEST	192.168.2.16	1.1.1.1	0x1d57	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Sep 20, 2024 18:19:19.472976923 CEST	192.168.2.16	1.1.1.1	0x26f6	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:19.473160028 CEST	192.168.2.16	1.1.1.1	0x97e3	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Sep 20, 2024 18:19:30.320269108 CEST	192.168.2.16	1.1.1.1	0x5896	Standard query (0)	agence-immobiliere-luberon.com	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:30.320626020 CEST	192.168.2.16	1.1.1.1	0x304f	Standard query (0)	agence-immobiliere-luberon.com	65	IN (0x0001)	false
Sep 20, 2024 18:19:34.041402102 CEST	192.168.2.16	1.1.1.1	0x98d9	Standard query (0)	ok4static.oktacdn.com	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:34.041712999 CEST	192.168.2.16	1.1.1.1	0x7584	Standard query (0)	ok4static.oktacdn.com	65	IN (0x0001)	false
Sep 20, 2024 18:19:34.043015003 CEST	192.168.2.16	1.1.1.1	0x7cec	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:34.043217897 CEST	192.168.2.16	1.1.1.1	0x17c7	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Sep 20, 2024 18:19:35.018501997 CEST	192.168.2.16	1.1.1.1	0xce3b	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:35.018661022 CEST	192.168.2.16	1.1.1.1	0x7390	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Sep 20, 2024 18:19:35.263447046 CEST	192.168.2.16	1.1.1.1	0xbe1f	Standard query (0)	ok4static.oktacdn.com	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:35.263633966 CEST	192.168.2.16	1.1.1.1	0xe0d9	Standard query (0)	ok4static.oktacdn.com	65	IN (0x0001)	false
Sep 20, 2024 18:19:35.786315918 CEST	192.168.2.16	1.1.1.1	0x14d8	Standard query (0)	aadcdn.msauthimages.net	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:35.786787987 CEST	192.168.2.16	1.1.1.1	0xdaa0	Standard query (0)	aadcdn.msauthimages.net	65	IN (0x0001)	false
Sep 20, 2024 18:19:37.502264023 CEST	192.168.2.16	1.1.1.1	0xc4a7	Standard query (0)	aadcdn.msauthimages.net	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:37.502438068 CEST	192.168.2.16	1.1.1.1	0x2009	Standard query (0)	aadcdn.msauthimages.net	65	IN (0x0001)	false
Sep 20, 2024 18:19:53.032310009 CEST	192.168.2.16	1.1.1.1	0x1216	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:53.032519102 CEST	192.168.2.16	1.1.1.1	0x25ae	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 20, 2024 18:20:06.082478046 CEST	192.168.2.16	1.1.1.1	0x9b84	Standard query (0)	passwordreset.microsoftonline.com	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:20:06.082631111 CEST	192.168.2.16	1.1.1.1	0x1794	Standard query (0)	passwordreset.microsoftonline.com	65	IN (0x0001)	false
Sep 20, 2024 18:20:07.288183928 CEST	192.168.2.16	1.1.1.1	0x2e7	Standard query (0)	ajax.aspnetcdn.com	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:20:07.288310051 CEST	192.168.2.16	1.1.1.1	0xbd4e	Standard query (0)	ajax.aspnetcdn.com	65	IN (0x0001)	false
Sep 20, 2024 18:20:07.561242104 CEST	192.168.2.16	1.1.1.1	0x3497	Standard query (0)	passwordreset.microsoftonline.com	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:20:07.561394930 CEST	192.168.2.16	1.1.1.1	0xa8ee	Standard query (0)	passwordreset.microsoftonline.com	65	IN (0x0001)	false
Sep 20, 2024 18:20:08.841702938 CEST	192.168.2.16	1.1.1.1	0xd0c	Standard query (0)	ajax.aspnetcdn.com	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:20:08.841872931 CEST	192.168.2.16	1.1.1.1	0x75e1	Standard query (0)	ajax.aspnetcdn.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 20, 2024 18:18:48.306255102 CEST	1.1.1.1	192.168.2.16	0xe7be	No error (0)	us-east-2.protection.sophos.com	d1nhsro6ypf0az.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 20, 2024 18:18:48.342061043 CEST	1.1.1.1	192.168.2.16	0xde05	No error (0)	us-east-2.protection.sophos.com	d1nhsro6ypf0az.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 20, 2024 18:18:48.342061043 CEST	1.1.1.1	192.168.2.16	0xde05	No error (0)	d1nhsro6ypf0az.cloudfront.net		143.204.215.124	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:18:48.342061043 CEST	1.1.1.1	192.168.2.16	0xde05	No error (0)	d1nhsro6ypf0az.cloudfront.net		143.204.215.51	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:18:48.342061043 CEST	1.1.1.1	192.168.2.16	0xde05	No error (0)	d1nhsro6ypf0az.cloudfront.net		143.204.215.60	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:18:48.342061043 CEST	1.1.1.1	192.168.2.16	0xde05	No error (0)	d1nhsro6ypf0az.cloudfront.net		143.204.215.7	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:18:49.835840940 CEST	1.1.1.1	192.168.2.16	0x649c	No error (0)	linkprotect.cudasvc.com		3.68.148.35	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:18:49.835840940 CEST	1.1.1.1	192.168.2.16	0x649c	No error (0)	linkprotect.cudasvc.com		3.122.176.87	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:18:52.501368999 CEST	1.1.1.1	192.168.2.16	0x9f27	No error (0)	0obt.menus-unlimited.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:18:52.501368999 CEST	1.1.1.1	192.168.2.16	0x9f27	No error (0)	0obt.menus-unlimited.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:18:52.526520014 CEST	1.1.1.1	192.168.2.16	0xd562	No error (0)	0obt.menus-unlimited.com			65	IN (0x0001)	false
Sep 20, 2024 18:18:52.979176044 CEST	1.1.1.1	192.168.2.16	0x1b77	No error (0)	www.google.com		142.250.184.228	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:18:52.979192972 CEST	1.1.1.1	192.168.2.16	0xac96	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 20, 2024 18:18:54.003487110 CEST	1.1.1.1	192.168.2.16	0xde84	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Sep 20, 2024 18:18:54.005469084 CEST	1.1.1.1	192.168.2.16	0x51f5	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:18:54.005469084 CEST	1.1.1.1	192.168.2.16	0x51f5	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:18:54.015410900 CEST	1.1.1.1	192.168.2.16	0x3eec	No error (0)	i.ibb.co		162.19.58.161	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:18:54.015410900 CEST	1.1.1.1	192.168.2.16	0x3eec	No error (0)	i.ibb.co		162.19.58.160	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:18:54.015410900 CEST	1.1.1.1	192.168.2.16	0x3eec	No error (0)	i.ibb.co		162.19.58.158	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:18:54.015410900 CEST	1.1.1.1	192.168.2.16	0x3eec	No error (0)	i.ibb.co		162.19.58.157	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:18:54.015410900 CEST	1.1.1.1	192.168.2.16	0x3eec	No error (0)	i.ibb.co		162.19.58.159	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:18:54.015410900 CEST	1.1.1.1	192.168.2.16	0x3eec	No error (0)	i.ibb.co		162.19.58.156	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:18:55.194782019 CEST	1.1.1.1	192.168.2.16	0xa363	No error (0)	i.ibb.co		162.19.58.160	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:18:55.194782019 CEST	1.1.1.1	192.168.2.16	0xa363	No error (0)	i.ibb.co		162.19.58.158	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:18:55.194782019 CEST	1.1.1.1	192.168.2.16	0xa363	No error (0)	i.ibb.co		162.19.58.159	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:18:55.194782019 CEST	1.1.1.1	192.168.2.16	0xa363	No error (0)	i.ibb.co		162.19.58.156	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:18:55.194782019 CEST	1.1.1.1	192.168.2.16	0xa363	No error (0)	i.ibb.co		162.19.58.161	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:18:55.194782019 CEST	1.1.1.1	192.168.2.16	0xa363	No error (0)	i.ibb.co		162.19.58.157	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:18:55.778160095 CEST	1.1.1.1	192.168.2.16	0x2121	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:18:55.778160095 CEST	1.1.1.1	192.168.2.16	0x2121	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:18:55.778326035 CEST	1.1.1.1	192.168.2.16	0x9515	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Sep 20, 2024 18:18:56.614291906 CEST	1.1.1.1	192.168.2.16	0xf8e5	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 20, 2024 18:18:56.614348888 CEST	1.1.1.1	192.168.2.16	0x7122	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 20, 2024 18:18:56.624869108 CEST	1.1.1.1	192.168.2.16	0x8f28	No error (0)	0obt.menus-unlimited.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:18:56.624869108 CEST	1.1.1.1	192.168.2.16	0x8f28	No error (0)	0obt.menus-unlimited.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:18:56.625492096 CEST	1.1.1.1	192.168.2.16	0x5799	No error (0)	0obt.menus-unlimited.com			65	IN (0x0001)	false
Sep 20, 2024 18:18:57.527234077 CEST	1.1.1.1	192.168.2.16	0xe134	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 20, 2024 18:18:57.527234077 CEST	1.1.1.1	192.168.2.16	0xe134	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:18:58.464791059 CEST	1.1.1.1	192.168.2.16	0x2bb3	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 20, 2024 18:18:58.464791059 CEST	1.1.1.1	192.168.2.16	0x2bb3	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:01.568516016 CEST	1.1.1.1	192.168.2.16	0x908b	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:01.568516016 CEST	1.1.1.1	192.168.2.16	0x908b	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:01.569752932 CEST	1.1.1.1	192.168.2.16	0x566f	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Sep 20, 2024 18:19:15.881072044 CEST	1.1.1.1	192.168.2.16	0x50a5	No error (0)	agence-immobiliere-luberon.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:15.881072044 CEST	1.1.1.1	192.168.2.16	0x50a5	No error (0)	agence-immobiliere-luberon.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:16.116890907 CEST	1.1.1.1	192.168.2.16	0xd9d6	No error (0)	agence-immobiliere-luberon.com			65	IN (0x0001)	false
Sep 20, 2024 18:19:16.890420914 CEST	1.1.1.1	192.168.2.16	0xc116	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:16.890420914 CEST	1.1.1.1	192.168.2.16	0xc116	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:16.890590906 CEST	1.1.1.1	192.168.2.16	0xd15c	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Sep 20, 2024 18:19:16.897345066 CEST	1.1.1.1	192.168.2.16	0xafa3	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:16.897345066 CEST	1.1.1.1	192.168.2.16	0xafa3	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:16.897778988 CEST	1.1.1.1	192.168.2.16	0xbedf	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Sep 20, 2024 18:19:17.777524948 CEST	1.1.1.1	192.168.2.16	0x63e0	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:17.785399914 CEST	1.1.1.1	192.168.2.16	0x344c	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:17.785399914 CEST	1.1.1.1	192.168.2.16	0x344c	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:17.788825989 CEST	1.1.1.1	192.168.2.16	0x8f28	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Sep 20, 2024 18:19:18.334961891 CEST	1.1.1.1	192.168.2.16	0x7edc	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 20, 2024 18:19:18.334961891 CEST	1.1.1.1	192.168.2.16	0x7edc	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 20, 2024 18:19:18.334961891 CEST	1.1.1.1	192.168.2.16	0x7edc	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:18.335834980 CEST	1.1.1.1	192.168.2.16	0x1fde	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 20, 2024 18:19:18.335834980 CEST	1.1.1.1	192.168.2.16	0x1fde	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 20, 2024 18:19:19.332093000 CEST	1.1.1.1	192.168.2.16	0x5a34	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:19.332093000 CEST	1.1.1.1	192.168.2.16	0x5a34	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:19.332128048 CEST	1.1.1.1	192.168.2.16	0x1d57	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Sep 20, 2024 18:19:19.480521917 CEST	1.1.1.1	192.168.2.16	0x26f6	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 20, 2024 18:19:19.480521917 CEST	1.1.1.1	192.168.2.16	0x26f6	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 20, 2024 18:19:19.480521917 CEST	1.1.1.1	192.168.2.16	0x26f6	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:19.481425047 CEST	1.1.1.1	192.168.2.16	0x97e3	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 20, 2024 18:19:19.481425047 CEST	1.1.1.1	192.168.2.16	0x97e3	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 20, 2024 18:19:30.665798903 CEST	1.1.1.1	192.168.2.16	0x304f	No error (0)	agence-immobiliere-luberon.com			65	IN (0x0001)	false
Sep 20, 2024 18:19:30.667412043 CEST	1.1.1.1	192.168.2.16	0x5896	No error (0)	agence-immobiliere-luberon.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:30.667412043 CEST	1.1.1.1	192.168.2.16	0x5896	No error (0)	agence-immobiliere-luberon.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:34.050365925 CEST	1.1.1.1	192.168.2.16	0x17c7	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 20, 2024 18:19:34.050396919 CEST	1.1.1.1	192.168.2.16	0x7cec	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 20, 2024 18:19:34.050396919 CEST	1.1.1.1	192.168.2.16	0x7cec	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:34.050396919 CEST	1.1.1.1	192.168.2.16	0x7cec	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:34.050396919 CEST	1.1.1.1	192.168.2.16	0x7cec	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:34.050396919 CEST	1.1.1.1	192.168.2.16	0x7cec	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:34.052110910 CEST	1.1.1.1	192.168.2.16	0x7584	No error (0)	ok4static.oktacdn.com	d19d360lklgih4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 20, 2024 18:19:34.055455923 CEST	1.1.1.1	192.168.2.16	0x417	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 20, 2024 18:19:34.055455923 CEST	1.1.1.1	192.168.2.16	0x417	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:34.080892086 CEST	1.1.1.1	192.168.2.16	0x98d9	No error (0)	ok4static.oktacdn.com	d19d360lklgih4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 20, 2024 18:19:34.080892086 CEST	1.1.1.1	192.168.2.16	0x98d9	No error (0)	d19d360lklgih4.cloudfront.net		18.165.122.119	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:34.080892086 CEST	1.1.1.1	192.168.2.16	0x98d9	No error (0)	d19d360lklgih4.cloudfront.net		18.165.122.44	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:34.080892086 CEST	1.1.1.1	192.168.2.16	0x98d9	No error (0)	d19d360lklgih4.cloudfront.net		18.165.122.25	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:34.080892086 CEST	1.1.1.1	192.168.2.16	0x98d9	No error (0)	d19d360lklgih4.cloudfront.net		18.165.122.100	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:35.025408983 CEST	1.1.1.1	192.168.2.16	0xce3b	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 20, 2024 18:19:35.026851892 CEST	1.1.1.1	192.168.2.16	0x7390	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 20, 2024 18:19:35.295439005 CEST	1.1.1.1	192.168.2.16	0xbe1f	No error (0)	ok4static.oktacdn.com	d19d360lklgih4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 20, 2024 18:19:35.295439005 CEST	1.1.1.1	192.168.2.16	0xbe1f	No error (0)	d19d360lklgih4.cloudfront.net		13.33.187.120	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:35.295439005 CEST	1.1.1.1	192.168.2.16	0xbe1f	No error (0)	d19d360lklgih4.cloudfront.net		13.33.187.96	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:35.295439005 CEST	1.1.1.1	192.168.2.16	0xbe1f	No error (0)	d19d360lklgih4.cloudfront.net		13.33.187.14	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:35.295439005 CEST	1.1.1.1	192.168.2.16	0xbe1f	No error (0)	d19d360lklgih4.cloudfront.net		13.33.187.68	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:35.296155930 CEST	1.1.1.1	192.168.2.16	0xe0d9	No error (0)	ok4static.oktacdn.com	d19d360lklgih4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 20, 2024 18:19:35.793721914 CEST	1.1.1.1	192.168.2.16	0xdaa0	No error (0)	aadcdn.msauthimages.net	aadcdn.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 20, 2024 18:19:35.793721914 CEST	1.1.1.1	192.168.2.16	0xdaa0	No error (0)	scdn3514c.wpc.9e730.upsiloncdn.net	sni1gl.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 20, 2024 18:19:35.795567036 CEST	1.1.1.1	192.168.2.16	0x14d8	No error (0)	aadcdn.msauthimages.net	aadcdn.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 20, 2024 18:19:35.795567036 CEST	1.1.1.1	192.168.2.16	0x14d8	No error (0)	scdn3514c.wpc.9e730.upsiloncdn.net	sni1gl.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 20, 2024 18:19:35.795567036 CEST	1.1.1.1	192.168.2.16	0x14d8	No error (0)	sni1gl.wpc.upsiloncdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:37.509347916 CEST	1.1.1.1	192.168.2.16	0xc4a7	No error (0)	aadcdn.msauthimages.net	aadcdn.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 20, 2024 18:19:37.509347916 CEST	1.1.1.1	192.168.2.16	0xc4a7	No error (0)	scdn3514c.wpc.9e730.upsiloncdn.net	sni1gl.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 20, 2024 18:19:37.509347916 CEST	1.1.1.1	192.168.2.16	0xc4a7	No error (0)	sni1gl.wpc.upsiloncdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:37.509917974 CEST	1.1.1.1	192.168.2.16	0x2009	No error (0)	aadcdn.msauthimages.net	aadcdn.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 20, 2024 18:19:37.509917974 CEST	1.1.1.1	192.168.2.16	0x2009	No error (0)	scdn3514c.wpc.9e730.upsiloncdn.net	sni1gl.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 20, 2024 18:19:53.042499065 CEST	1.1.1.1	192.168.2.16	0x1216	No error (0)	www.google.com		142.250.181.228	A (IP address)	IN (0x0001)	false
Sep 20, 2024 18:19:53.042581081 CEST	1.1.1.1	192.168.2.16	0x25ae	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 20, 2024 18:20:06.090133905 CEST	1.1.1.1	192.168.2.16	0x9b84	No error (0)	passwordreset.microsoftonline.com	passwordreset.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 20, 2024 18:20:06.129018068 CEST	1.1.1.1	192.168.2.16	0x1794	No error (0)	passwordreset.microsoftonline.com	passwordreset.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 20, 2024 18:20:07.401518106 CEST	1.1.1.1	192.168.2.16	0x2e7	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 20, 2024 18:20:07.403381109 CEST	1.1.1.1	192.168.2.16	0xbd4e	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 20, 2024 18:20:07.584855080 CEST	1.1.1.1	192.168.2.16	0x3497	No error (0)	passwordreset.microsoftonline.com	passwordreset.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 20, 2024 18:20:07.608678102 CEST	1.1.1.1	192.168.2.16	0xa8ee	No error (0)	passwordreset.microsoftonline.com	passwordreset.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 20, 2024 18:20:08.849277020 CEST	1.1.1.1	192.168.2.16	0xd0c	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 20, 2024 18:20:08.862236023 CEST	1.1.1.1	192.168.2.16	0x75e1	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

fs.microsoft.com

us-east-2.protection.sophos.com

linkprotect.cudasvc.com

0obt.menus-unlimited.com

slscr.update.microsoft.com

https:

challenges.cloudflare.com

i.ibb.co

aadcdn.msauth.net

agence-immobiliere-luberon.com

cdnjs.cloudflare.com

aadcdn.msftauth.net

cdn.jsdelivr.net

ok4static.oktacdn.com

aadcdn.msauthimages.net

a.nel.cloudflare.com

www.google.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.16	49707	23.211.8.90	443

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:18:42 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-20 16:18:43 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=88017 Date: Fri, 20 Sep 2024 16:18:43 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.16	49708	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:18:43 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-20 16:18:44 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=88065 Date: Fri, 20 Sep 2024 16:18:44 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-20 16:18:44 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49712	143.204.215.124	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:18:49 UTC	1064	OUT	GET /?d=cudasvc.com&u=aHR0cHM6Ly9saW5rcHJvdGVjdC5jdWRhc3ZjLmNvbS91cmw_YT1odHRwcyUzYSUyZiUyZjBvQlQubWVudXMtdW5saW1pdGVkLmNvbSUyZnU4dzV2JmM9RSwxLDNMZjFnY0lEMmR3OUkyLXVKRDBDeGxiYnR1bkk1dkJsWGVCYXNuLTFGZWRjazY1MEJKU211cW9fR2FoVC1ucldtTHVOUzhvbW5ZdUZJZXIwM0VfWjJnQmFjTVpMaFJKZThFSmNxMVphT3NocyZ0eXBvPTE=&i=NWZhMzIyNDYxN2RkOWQwZTA5ZGFiYTQ4&t=bW5wRlRmNkZQMDh0c012RnRzQnR6eVRLWXRVSFFORXhvTG1DZ2FvVWNvaz0 HTTP/1.1 Host: us-east-2.protection.sophos.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:18:49 UTC	804	IN	HTTP/1.1 302 Found Content-Type: text/html Content-Length: 0 Connection: close Date: Fri, 20 Sep 2024 16:18:49 GMT X-Amzn-Trace-Id: Root=1-66eda069-4c168ec04688fdd72aa9153a;Parent=2f917ebd1d157cb8;Sampled=0;Lineage=1:2ebe4394:0 x-amzn-RequestId: e82342b4-070a-48e5-94a4-d4602e909c61 Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow x-amz-apigw-id: eaYAiE_wCYcEmDQ= Location: https://linkprotect.cudasvc.com/url?a=https%3a%2f%2f0oBT.menus-unlimited.com%2fu8w5v&c=E,1,3Lf1gcID2dw9I2-uJD0CxlbbtunI5vBlXeBasn-1Fedck650BJSmuqo_GahT-nrWmLuNS8omnYuFIer03E_Z2gBacMZLhRJe8EJcq1ZaOshs&typo=1 X-Cache: Miss from cloudfront Via: 1.1 1f5757b46371746e677236d4fc67d364.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA53-C1 X-Amz-Cf-Id: PYvE2Iv64TsAhDshxclsHTyyhHIKgOIS0D2e289UrnFS3zmoyr2Edg==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49714	3.68.148.35	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:18:50 UTC	840	OUT	GET /url?a=https%3a%2f%2f0oBT.menus-unlimited.com%2fu8w5v&c=E,1,3Lf1gcID2dw9I2-uJD0CxlbbtunI5vBlXeBasn-1Fedck650BJSmuqo_GahT-nrWmLuNS8omnYuFIer03E_Z2gBacMZLhRJe8EJcq1ZaOshs&typo=1 HTTP/1.1 Host: linkprotect.cudasvc.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:18:52 UTC	1081	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Security-Policy: default-src 'self' 'unsafe-inline' npmcdn.com unpkg.com cdn.jsdelivr.net; script-src 'self' 'unsafe-inline' npmcdn.com cdnjs.cloudflare.com unpkg.com unpkg.com cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' unpkg.com cdnjs.cloudflare.com fonts.googleapis.com cdn.jsdelivr.net; font-src * data: 'self' 'unsafe-inline' fonts.gstatic.com; frame-src 'self'; worker-src * data: 'unsafe-eval' 'unsafe-inline' blob:; media-src 'self' d2rmfex73stak2.cloudfront.net; img-src 'self' d2rmfex73stak2.cloudfront.net; frame-ancestors 'none' Content-Type: text/html Date: Fri, 20 Sep 2024 16:18:51 GMT Expires: -1 Location: https://0oBT.menus-unlimited.com/u8w5v Pragma: no-cache Referrer-Policy: no-referrer Server: nginx Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Content-Length: 138 Connection: Close
2024-09-20 16:18:52 UTC	138	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49719	188.114.97.3	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:18:53 UTC	672	OUT	GET /u8w5v HTTP/1.1 Host: 0obt.menus-unlimited.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:18:53 UTC	872	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:18:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-powered-by: PHP/8.3.11 x-powered-by: PleskLin access-control-allow-origin: * expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate pragma: no-cache set-cookie: PHPSESSID=l2s8v5fbb3fguea087d16fnfgq; path=/ vary: Accept-Encoding CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z2eDQJ%2BiIatnDxrIY1bTWLBfj1spJXOQYP4W0kSrP9zSJCaobTHf0O3gZMOcjzG42dBeXT8CKvGK8e2rwdIFZZNm7glpLN2SOFfND5YZ5PKSUCS0dgmtmr%2FtuFGRBP%2BjwBytMnS0aHeFcKM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8c63224d1c5119bf-EWR
2024-09-20 16:18:53 UTC	497	IN	Data Raw: 37 32 39 38 0d 0a 3c 68 74 6d 6c 3e 20 3c 68 65 61 64 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 3c 74 69 74 6c 65 3e 20 4c 6f 61 64 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 20 0d 0a 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 6a 61 78 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 2f 32 2e 32 2e 34 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 3c 21 2d 2d 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 63 6b 70 61 74 68 2e 62 Data Ascii: 7298<html> <head> <meta name="viewport" content="width=device-width, initial-scale=1.0"><title> Loading...</title> <script src="https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js"></script> ...<script src="https://stackpath.b
2024-09-20 16:18:53 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 68 74 6d 6c 20 7b 0d 0a 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 31 35 3b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 31 33 31 33 31 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 68 74 6d 6c 2c 0d 0a 20 20 20 20 20 20 62 75 74 74 6f 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 79 73 74 65 6d 2d 75 69 2c 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d Data Ascii: margin: 0; padding: 0; } html { line-height: 1.15; -webkit-text-size-adjust: 100%; color: #313131; } html, button { font-family: system-ui, -apple-system, BlinkMacSystem
2024-09-20 16:18:53 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 20 20 20 20 20 20 66 6c 65 78 3a 20 31 3b 0d 0a 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0d 0a 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 66 6f 6e 74 2d 72 65 64 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 62 32 30 66 30 33 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 73 70 61 63 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 32 72 65 6d 20 30 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 Data Ascii: } .main-wrapper { display: flex; flex: 1; flex-direction: column; align-items: center; } .font-red { color: #b20f03; } .spacer { margin: 2rem 0; }
2024-09-20 16:18:53 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 2e 68 65 61 64 69 6e 67 2d 69 63 6f 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 2e 32 35 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 2e 32 35 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 77 61 72 6e 69 6e 67 2d 69 63 6f 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 44 51 41 41 41 41 30 43 41 4d 41 41 41 44 79 70 75 76 5a 41 41 41 41 50 Data Ascii: .heading-icon { width: 1.25rem; height: 1.25rem; } } .warning-icon { display: inline-block; background-image: url("data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAADQAAAA0CAMAAADypuvZAAAAP
2024-09-20 16:18:53 UTC	1369	IN	Data Raw: 62 6c 65 2d 73 75 6d 6d 61 72 79 2d 62 74 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 65 78 70 61 6e 64 61 62 6c 65 2d 64 65 74 61 69 6c 73 20 7b 0d 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 2e 35 72 65 6d 20 30 3b 0d 0a Data Ascii: ble-summary-btn { border: none; background: none; cursor: pointer; padding: 0; color: inherit; font: inherit; } .expandable-details { display: none; padding: 0.5rem 0;
2024-09-20 16:18:53 UTC	1369	IN	Data Raw: 0d 0a 20 20 20 20 20 20 2e 62 69 67 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 63 61 70 74 63 68 61 2d 70 72 6f 6d 70 74 3a 6e 6f 74 28 2e 68 69 64 64 65 6e 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 32 30 70 78 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 2e 63 61 70 74 63 68 61 2d 70 72 6f 6d 70 74 3a 6e 6f 74 28 2e 68 69 64 64 65 6e 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 66 6c 65 78 2d 77 72 61 70 3a 20 77 72 61 70 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 Data Ascii: .big-button:hover { cursor: pointer; } .captcha-prompt:not(.hidden) { display: flex; } @media (max-width: 720px) { .captcha-prompt:not(.hidden) { flex-wrap: wrap; justify
2024-09-20 16:18:53 UTC	1369	IN	Data Raw: 20 20 20 20 20 6f 76 65 72 66 6c 6f 77 2d 77 72 61 70 3a 20 62 72 65 61 6b 2d 77 6f 72 64 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 32 30 70 78 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 2e 64 69 61 67 6e 6f 73 74 69 63 2d 77 72 61 70 70 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 66 6c 65 78 2d 77 72 61 70 3a 20 77 72 61 70 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 Data Ascii: overflow-wrap: break-word; } @media (max-width: 720px) { .diagnostic-wrapper { display: flex; flex-wrap: wrap; justify-content: center; } .clearfix:after { display:
2024-09-20 16:18:53 UTC	1369	IN	Data Raw: 20 20 7d 0d 0a 20 20 20 20 20 20 2e 6c 64 73 2d 72 69 6e 67 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 33 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 2d 30 2e 31 35 73 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 40 6b 65 79 66 72 61 6d 65 73 20 6c 64 73 2d 72 69 6e 67 20 7b 0d 0a 20 20 20 20 20 20 20 20 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 74 6f 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 40 6d 65 64 69 61 Data Ascii: } .lds-ring div:nth-child(3) { animation-delay: -0.15s; } @keyframes lds-ring { 0% { transform: rotate(0); } to { transform: rotate(360deg); } } @media
2024-09-20 16:18:53 UTC	1369	IN	Data Raw: 61 72 6b 20 61 3a 68 6f 76 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 65 65 37 33 30 61 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 62 6f 64 79 2e 64 61 72 6b 20 2e 6c 64 73 2d 72 69 6e 67 20 64 69 76 20 7b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 39 39 39 20 74 72 61 6e 73 70 61 72 65 6e 74 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 62 6f 64 79 2e 64 61 72 6b 20 2e 66 6f 6e 74 2d 72 65 64 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 62 32 30 66 30 33 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 62 6f 64 79 2e Data Ascii: ark a:hover { text-decoration: underline; color: #ee730a; } body.dark .lds-ring div { border-color: #999 transparent transparent; } body.dark .font-red { color: #b20f03; } body.
2024-09-20 16:18:53 UTC	1369	IN	Data Raw: 66 66 66 66 66 66 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 67 72 69 64 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 20 72 65 70 65 61 74 28 31 2c 20 31 66 72 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 56 69 63 74 6f 72 20 4d 6f 6e 6f 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ffffff; display: grid; grid-template-columns: repeat(1, 1fr); justify-content: center; align-items: center; text-align: center; font-family: "Victor Mono", sans-serif;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49717	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:18:53 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ttT+bP95t2rbeus&MD=Ynh5PAfb HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-09-20 16:18:53 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 3ba1bbd9-91d2-4c13-bdf7-d02591a3e49a MS-RequestId: 0be83a76-7468-4da1-b5d5-55b531b262f1 MS-CV: 62nB8kWow0O9merC.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 20 Sep 2024 16:18:53 GMT Connection: close Content-Length: 24490
2024-09-20 16:18:53 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-09-20 16:18:53 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49720	104.18.95.41	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:18:54 UTC	583	OUT	GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://0obt.menus-unlimited.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:18:54 UTC	356	IN	HTTP/1.1 302 Found Date: Fri, 20 Sep 2024 16:18:54 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/g/ec4b873d446c/api.js Server: cloudflare CF-RAY: 8c632253dd7f9e08-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49722	162.19.58.161	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:18:54 UTC	597	OUT	GET /bPWvfrC/microlog0.png HTTP/1.1 Host: i.ibb.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://0obt.menus-unlimited.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:18:55 UTC	379	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Sep 2024 16:18:54 GMT Content-Type: image/png Content-Length: 23655 Connection: close Last-Modified: Sat, 14 Sep 2024 05:08:16 GMT Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cache-Control: public Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS Accept-Ranges: bytes
2024-09-20 16:18:55 UTC	3717	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 00 00 00 01 11 08 06 00 00 00 24 21 0a da 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 5b 7e 49 44 41 54 78 da ed dd 79 98 1c 55 b9 06 f0 f7 ab ea 99 6c 33 13 76 d9 92 b0 28 b2 28 ab 88 ec 82 02 a2 ec 30 20 20 6b 64 c0 e8 98 e9 ae 9a 49 f0 7a af e5 82 49 a6 ab ba 87 3b 12 4d 40 76 10 1c 76 04 04 05 91 45 14 05 11 64 93 35 89 ec 5b 32 3d 64 99 e9 3a df fd 63 1a 2f 46 08 59 a6 ab aa ab df df f3 e4 01 34 dd e7 d4 77 4e 6d 5f 9f 45 4a 87 6d be 8f 5a f2 7b 50 5d 33 d0 83 d6 ba e1 85 3b 56 e5 33 de ef b0 a1 0e e1 Data Ascii: PNGIHDR$!gAMAa cHRMz&u0`:pQ<bKGD[~IDATxyUl3v((0 kdIzI;M@vvEd5[2=d:c/FY4wNm_EJmZ{P]3;V3
2024-09-20 16:18:55 UTC	4096	IN	Data Raw: 72 b9 dc fe 00 b6 aa 62 11 4b 1a 1a 1a 7e c1 48 13 11 11 11 11 d1 7b 98 00 24 22 aa 33 41 10 dc 07 e0 ef 11 16 b9 bb e3 38 db 32 f2 95 1b af 65 7d a3 ca 45 5c 3d 73 e6 cc 77 18 69 22 22 22 22 22 fa d7 7b 08 43 40 44 54 97 e6 46 5c de e9 0c 39 d0 d9 d9 b9 a1 aa 1e 56 cd 32 54 f5 7c 46 9a 88 88 88 88 88 de 8f 09 40 22 a2 3a 94 c9 64 2e 55 d5 28 d7 88 3b a5 bd bd 7d 54 bd c7 3d 0c c3 33 00 34 54 b1 88 a7 0a 85 c2 03 ec e1 44 44 44 44 44 f4 7e 4c 00 12 11 d5 a1 59 b3 66 2d 8a 78 33 90 f5 1a 1b 1b bf 52 cf 31 6f 6d 6d b5 45 a4 aa eb 21 8a c8 1c 00 ca 1e 4e 44 44 44 44 44 ef c7 04 20 11 51 9d aa 24 8b a2 2c af ae 37 03 99 34 69 d2 21 00 26 55 b1 88 c1 65 cb 96 5d c1 9e 4d 44 44 44 44 44 cb cb 30 04 44 44 f5 c9 f7 fd 3f 39 8e f3 08 80 1d a3 28 4f 55 0f ea ea ea Data Ascii: rbK~H{$"3A82e}E\=swi"""""{C@DTF\9V2T\|F@":d.U(;}T=34TDDDDD~LYf-x3R1ommE!NDDDDD Q$,74i!&Ue]MDDDDD0DD?9(OU
2024-09-20 16:18:55 UTC	4096	IN	Data Raw: ec 8e e1 dd d7 6b 76 10 4d 73 73 b3 07 60 af 1a 3f f7 96 56 ae 1f b5 38 7d b9 c9 b2 ac 8b 3c cf db cf f3 3c c3 3b 1d 45 8d 09 40 22 22 5a 21 63 cc f9 96 65 75 45 f4 c0 db 34 76 ec d8 e3 00 fc bc 86 5e d2 db aa 1d 9b ca 86 2c 54 67 da db db 5b 54 f5 1a 11 a9 a5 69 5a 06 c0 cb 18 1e 51 f3 02 80 17 44 64 b1 31 66 21 80 21 00 25 cb b2 9a 00 8c 37 c6 8c 17 91 8d 2b 2f d4 db 02 58 87 ad 9e 7e e5 72 79 0e 80 09 09 af e6 a0 aa fe 59 44 1e 04 f0 ac 65 59 cf 86 61 f8 62 63 63 e3 1b cb 96 2d 5b fa fe 1f 64 da db db 5b 46 8d 1a 35 5a 44 36 55 d5 8f ab ea c7 01 7c 1a c0 be 00 36 4a ea 01 8a c8 6c d7 75 ef f1 7d ff f5 6a 96 63 db f6 99 aa 1a e7 0f 18 f7 a8 ea 6c cb b2 7e e5 fb fe bb 2b fb a1 b9 73 e7 0e 61 78 44 e0 73 ef fd 4f 00 30 6d da b4 f1 61 18 ee a3 aa 47 01 38 Data Ascii: kvMss`?V8}<<;E@""Z!ceuE4v^,Tg[TiZQDd1f!!%7+/X~ryYDeYabcc-[d[F5ZD6U\|6Jlu}jcl~+saxDsO0maG8
2024-09-20 16:18:55 UTC	4096	IN	Data Raw: 99 75 31 a5 dd b2 ac 1b 00 98 28 cb 5c d3 24 84 aa fe 29 a6 70 8d 06 70 a5 eb ba 97 b4 b7 b7 b7 d4 43 ff 50 d5 38 ce bd 25 0d 0d 0d d7 a6 3d b6 95 64 f6 2d 11 17 bb 0b 28 fa 87 33 91 d4 e7 c7 32 b8 f4 cd 6d 60 d9 3f 62 73 d7 39 c5 0f 70 d2 da 7f 5b a5 8f fc 0e 6b 61 08 3f 67 f0 ea 9c c1 f9 f2 25 fc 9a 81 a8 fb 1b e6 1c 00 27 44 f4 90 7b 4a 6b 6b eb f7 a2 98 c6 68 db f6 19 a8 f2 8f 65 aa fa 73 cf f3 0c 7b 51 fd 70 1c 67 1b 00 9b 46 5c ec 90 65 59 17 33 fa 35 e9 06 d4 40 e2 b6 b2 49 d3 76 11 17 1b 96 cb e5 ab eb a1 13 e4 f3 f9 57 5d d7 7d 38 e2 91 41 6b 94 84 b0 2c eb 0e 55 9d 1c db eb 8d ea c9 8d 8d 8d fb b8 ae 3b cd f7 fd 3e a4 f8 07 10 11 89 63 c4 d8 4d b3 66 cd 5a 54 17 af ca aa b7 89 c8 57 23 2c 72 bd 8e 8e 8e cd 7a 7a 7a 5e e4 2d 30 52 75 90 00 b4 ed Data Ascii: u1(\$)ppCP8%=d-(32m`?bs9p[ka?g%'D{Jkkhes{QpgF\eY35@IvW]}8Ak,U;>cMfZTW#,rzzz^-0Ru
2024-09-20 16:18:55 UTC	4096	IN	Data Raw: 53 1c 09 c0 49 d9 6c 76 d7 7a 08 6e a9 54 da 03 c0 06 11 16 b9 64 60 60 e0 ef f5 10 db be be be b0 50 28 fc d0 b2 ac fd 01 94 62 ac ca d6 53 a6 4c 69 5a d5 0f f9 be ff 2e 80 38 da ea 98 7a b9 b8 89 c8 91 11 17 c9 04 60 3c 98 00 24 22 22 aa 96 30 0c cf 07 60 52 f2 70 78 d3 b9 e7 9e fb 1a 5b 95 56 c2 1f 63 79 e8 b3 ac 6f 30 f4 54 c5 6b 60 2c eb 55 d9 b6 7d 5c 9d 84 38 ea 64 cb 43 95 1f ea ea 46 3e 9f bf 17 c0 71 88 6f 24 a0 3d 6e dc b8 d5 5a af 35 a6 11 63 87 55 d6 c6 4b b5 ca 66 43 51 af a3 fb 27 de 55 62 b9 8f 49 c4 e5 65 22 7f 16 64 33 13 11 51 5c 7a 7a 7a 5e 04 70 7b 1a 8e 45 55 cf 67 8b d2 4a 7a 20 a6 72 8f af b3 35 9b 28 42 41 10 cc 43 0c a3 5b 55 f5 58 cf f3 d2 fe 4e 23 00 8e 8a f8 c5 f4 d6 3a ed c7 b7 a9 ea b7 63 7c 96 d8 7a b5 5e ea 2d 2b 8e 84 51 Data Ascii: SIlvznTd``P(bSLiZ.8z`<$""0`Rpx[Vcyo0Tk`,U}\8dCF>qo$=nZ5cUKfCQ'UbIe"d3Q\zzz^p{EUgJz r5(BAC[UXN#:c\|z^-+Q
2024-09-20 16:18:55 UTC	3554	IN	Data Raw: 66 34 22 b9 8f fd 6f 10 04 3f 63 24 12 65 c8 18 f3 b5 de de de 65 51 17 5c 2c 16 1f 53 d5 af f2 9e 12 89 97 6c db 3e 8c d3 ee 6b 8f 88 a4 f2 c7 7f 26 00 89 88 28 f1 7a 7a 7a 16 8a c8 2f 63 7a 00 38 9f 2d 40 71 f3 7d ff 7a 00 53 c0 11 04 94 12 b3 67 cf 1e 08 c3 f0 cb 00 9e 65 34 aa ea ba 05 0b 16 e4 18 86 64 11 91 ff 2a 16 8b 0f c6 55 7e a1 50 b8 55 44 5c b6 44 55 bd ad aa 87 76 77 77 bf cc 50 d4 e4 73 d7 5d 00 1e 48 db 71 31 01 48 44 44 35 21 a6 cd 40 de 1d 1c 1c bc 92 d1 a7 24 08 82 60 2e 80 6f 81 49 40 4a 89 73 cf 3d f7 35 11 39 50 55 e7 33 1a 55 f1 cb 52 a9 f4 d5 be be 3e 8e f4 4a 10 11 b9 d5 f7 7d 3f ee 7a f8 be df a3 aa ff cb 16 a9 8a 37 2d cb fa 42 a1 50 f8 2b 43 51 d3 7e 98 b6 03 62 02 90 88 88 6a 42 a1 50 f8 23 80 bf 45 fd f2 54 59 07 84 28 11 82 Data Ascii: f4"o?c$eeQ\,Sl>k&(zzz/cz8-@q}zSge4d*U~PUD\DUvwwPs]Hq1HDD5!@$`.oI@Js=59PU3UR>J}?z7-BP+CQ~bjBP#ETY(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49723	104.18.95.41	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:18:55 UTC	567	OUT	GET /turnstile/v0/g/ec4b873d446c/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://0obt.menus-unlimited.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:18:55 UTC	441	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:18:55 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47262 Connection: close accept-ranges: bytes last-modified: Tue, 17 Sep 2024 16:06:37 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8c6322589c06c33d-EWR
2024-09-20 16:18:55 UTC	928	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 56 74 28 65 2c 72 2c 61 2c 6f 2c 63 2c 6c 2c 67 29 7b 74 72 79 7b 76 61 72 20 66 3d 65 5b 6c 5d 28 67 29 2c 70 3d 66 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 73 29 7b 61 28 73 29 3b 72 65 74 75 72 6e 7d 66 2e 64 6f 6e 65 3f 72 28 70 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 70 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 72 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Vt(e,r,a,o,c,l,g){try{var f=e[l](g),p=f.value}catch(s){a(s);return}f.done?r(p):Promise.resolve(p).then(o,c)}function Wt(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var l=e.apply(r,a);funct
2024-09-20 16:18:55 UTC	1369	IN	Data Raw: 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 74 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 6c 6c 3f 72 3a 7b 7d 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 Data Ascii: ct.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function tt(e,r){return r=r!=null?r:{},Object.getOwnPropertyD
2024-09-20 16:18:55 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 48 74 28 65 29 7c 7c 42 74 28 65 2c 72 29 7c 7c 71 74 28 65 2c 72 29 7c 7c 6a 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 50 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 44 65 28 65 2c 72 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 5d 26 31 29 74 68 72 6f 77 20 6c 5b 31 5d 3b 72 65 74 75 72 6e 20 6c 5b 31 5d 7d 2c 74 72 Data Ascii: function Ae(e,r){return Ht(e)\|\|Bt(e,r)\|\|qt(e,r)\|\|jt()}function P(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function De(e,r){var a={label:0,sent:function(){if(l[0]&1)throw l[1];return l[1]},tr
2024-09-20 16:18:55 UTC	1369	IN	Data Raw: 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 47 74 3d 33 30 30 30 32 30 3b 76 61 72 20 50 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4d 41 4e 41 47 45 44 3d 22 6d 61 6e 61 67 65 64 22 2c Data Ascii: oaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Gt=300020;var Pe=300030;var Ue=300031;var q;(function(e){e.MANAGED="managed",
2024-09-20 16:18:55 UTC	1369	IN	Data Raw: 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 45 4e 44 45 52 3d 22 72 65 6e 64 65 72 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 7d 29 28 70 65 7c 7c 28 70 65 3d 7b 7d 29 29 3b 76 61 72 20 6f 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 7d 29 Data Ascii: al",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(function(e){e.RENDER="render",e.EXECUTE="execute"})(pe\|\|(pe={}));var oe;(function(e){e.EXECUTE="execute"})
2024-09-20 16:18:55 UTC	1369	IN	Data Raw: 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e Data Ascii: archParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clearance_level!=="default"&&r.set("clearance_level",e.params.
2024-09-20 16:18:55 UTC	1369	IN	Data Raw: 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 6c 2c 67 3d 4c 28 43 72 2c 28 6c 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 6c 21 3d 3d 76 6f 69 64 20 30 3f 6c 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 66 2c 70 3d 4c 28 4e 72 2c 28 66 3d 28 61 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 61 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 66 21 3d 3d 76 6f 69 64 20 30 3f 66 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 Data Ascii: ===Se.FAILURE_HAVING_TROUBLES,l,g=L(Cr,(l=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&l!==void 0?l:"nonexistent"),f,p=L(Nr,(f=(a=e.displayLanguage)===null\|\|a===void 0?void 0:a.toLowerCase())!==null&&f!==void 0?f:"nonexistent")
2024-09-20 16:18:55 UTC	1369	IN	Data Raw: 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 67 29 7b 76 61 72 20 66 3d 5b 6e 75 6c 6c 5d 3b 66 2e 70 75 73 68 2e 61 70 70 6c 79 28 66 2c 6c 29 3b 76 61 72 20 70 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 66 29 2c 73 3d 6e 65 77 20 70 3b 72 65 74 75 72 6e 20 67 26 26 4a 28 73 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 73 7d 2c 49 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 Data Ascii: uct:Ie=function(c,l,g){var f=[null];f.push.apply(f,l);var p=Function.bind.apply(c,f),s=new p;return g&&J(s,g.prototype),s},Ie.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Object.getPrototypeOf:function(a){return a.__proto__\|\|Object
2024-09-20 16:18:55 UTC	1369	IN	Data Raw: 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 71 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 57 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 57 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 57 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 54 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 69 66 28 55 28 72 2c 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 72 Data Ascii: flare Turnstile] ".concat(e))}function qe(e){return e.startsWith(We)?e.substring(We.length):null}function K(e){return"".concat(We).concat(e)}function Tt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=document.currentScript;if(U(r,HTMLScriptElement)&&e.test(r
2024-09-20 16:18:55 UTC	1369	IN	Data Raw: 66 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b 76 61 72 20 73 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 73 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 66 65 65 64 62 61 63 6b 22 2c 73 2e 69 64 3d Data Ascii: f.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";var s=document.createElement("div");s.className="cf-turnstile-feedback",s.id=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49724	162.19.58.160	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:18:55 UTC	353	OUT	GET /bPWvfrC/microlog0.png HTTP/1.1 Host: i.ibb.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:18:56 UTC	379	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Sep 2024 16:18:56 GMT Content-Type: image/png Content-Length: 23655 Connection: close Last-Modified: Sat, 14 Sep 2024 05:08:16 GMT Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cache-Control: public Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS Accept-Ranges: bytes
2024-09-20 16:18:56 UTC	3717	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 00 00 00 01 11 08 06 00 00 00 24 21 0a da 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 5b 7e 49 44 41 54 78 da ed dd 79 98 1c 55 b9 06 f0 f7 ab ea 99 6c 33 13 76 d9 92 b0 28 b2 28 ab 88 ec 82 02 a2 ec 30 20 20 6b 64 c0 e8 98 e9 ae 9a 49 f0 7a af e5 82 49 a6 ab ba 87 3b 12 4d 40 76 10 1c 76 04 04 05 91 45 14 05 11 64 93 35 89 ec 5b 32 3d 64 99 e9 3a df fd 63 1a 2f 46 08 59 a6 ab aa ab df df f3 e4 01 34 dd e7 d4 77 4e 6d 5f 9f 45 4a 87 6d be 8f 5a f2 7b 50 5d 33 d0 83 d6 ba e1 85 3b 56 e5 33 de ef b0 a1 0e e1 Data Ascii: PNGIHDR$!gAMAa cHRMz&u0`:pQ<bKGD[~IDATxyUl3v((0 kdIzI;M@vvEd5[2=d:c/FY4wNm_EJmZ{P]3;V3
2024-09-20 16:18:56 UTC	4096	IN	Data Raw: 72 b9 dc fe 00 b6 aa 62 11 4b 1a 1a 1a 7e c1 48 13 11 11 11 11 d1 7b 98 00 24 22 aa 33 41 10 dc 07 e0 ef 11 16 b9 bb e3 38 db 32 f2 95 1b af 65 7d a3 ca 45 5c 3d 73 e6 cc 77 18 69 22 22 22 22 22 fa d7 7b 08 43 40 44 54 97 e6 46 5c de e9 0c 39 d0 d9 d9 b9 a1 aa 1e 56 cd 32 54 f5 7c 46 9a 88 88 88 88 88 de 8f 09 40 22 a2 3a 94 c9 64 2e 55 d5 28 d7 88 3b a5 bd bd 7d 54 bd c7 3d 0c c3 33 00 34 54 b1 88 a7 0a 85 c2 03 ec e1 44 44 44 44 44 f4 7e 4c 00 12 11 d5 a1 59 b3 66 2d 8a 78 33 90 f5 1a 1b 1b bf 52 cf 31 6f 6d 6d b5 45 a4 aa eb 21 8a c8 1c 00 ca 1e 4e 44 44 44 44 44 ef c7 04 20 11 51 9d aa 24 8b a2 2c af ae 37 03 99 34 69 d2 21 00 26 55 b1 88 c1 65 cb 96 5d c1 9e 4d 44 44 44 44 44 cb cb 30 04 44 44 f5 c9 f7 fd 3f 39 8e f3 08 80 1d a3 28 4f 55 0f ea ea ea Data Ascii: rbK~H{$"3A82e}E\=swi"""""{C@DTF\9V2T\|F@":d.U(;}T=34TDDDDD~LYf-x3R1ommE!NDDDDD Q$,74i!&Ue]MDDDDD0DD?9(OU
2024-09-20 16:18:56 UTC	4096	IN	Data Raw: ec 8e e1 dd d7 6b 76 10 4d 73 73 b3 07 60 af 1a 3f f7 96 56 ae 1f b5 38 7d b9 c9 b2 ac 8b 3c cf db cf f3 3c c3 3b 1d 45 8d 09 40 22 22 5a 21 63 cc f9 96 65 75 45 f4 c0 db 34 76 ec d8 e3 00 fc bc 86 5e d2 db aa 1d 9b ca 86 2c 54 67 da db db 5b 54 f5 1a 11 a9 a5 69 5a 06 c0 cb 18 1e 51 f3 02 80 17 44 64 b1 31 66 21 80 21 00 25 cb b2 9a 00 8c 37 c6 8c 17 91 8d 2b 2f d4 db 02 58 87 ad 9e 7e e5 72 79 0e 80 09 09 af e6 a0 aa fe 59 44 1e 04 f0 ac 65 59 cf 86 61 f8 62 63 63 e3 1b cb 96 2d 5b fa fe 1f 64 da db db 5b 46 8d 1a 35 5a 44 36 55 d5 8f ab ea c7 01 7c 1a c0 be 00 36 4a ea 01 8a c8 6c d7 75 ef f1 7d ff f5 6a 96 63 db f6 99 aa 1a e7 0f 18 f7 a8 ea 6c cb b2 7e e5 fb fe bb 2b fb a1 b9 73 e7 0e 61 78 44 e0 73 ef fd 4f 00 30 6d da b4 f1 61 18 ee a3 aa 47 01 38 Data Ascii: kvMss`?V8}<<;E@""Z!ceuE4v^,Tg[TiZQDd1f!!%7+/X~ryYDeYabcc-[d[F5ZD6U\|6Jlu}jcl~+saxDsO0maG8
2024-09-20 16:18:56 UTC	4096	IN	Data Raw: 99 75 31 a5 dd b2 ac 1b 00 98 28 cb 5c d3 24 84 aa fe 29 a6 70 8d 06 70 a5 eb ba 97 b4 b7 b7 b7 d4 43 ff 50 d5 38 ce bd 25 0d 0d 0d d7 a6 3d b6 95 64 f6 2d 11 17 bb 0b 28 fa 87 33 91 d4 e7 c7 32 b8 f4 cd 6d 60 d9 3f 62 73 d7 39 c5 0f 70 d2 da 7f 5b a5 8f fc 0e 6b 61 08 3f 67 f0 ea 9c c1 f9 f2 25 fc 9a 81 a8 fb 1b e6 1c 00 27 44 f4 90 7b 4a 6b 6b eb f7 a2 98 c6 68 db f6 19 a8 f2 8f 65 aa fa 73 cf f3 0c 7b 51 fd 70 1c 67 1b 00 9b 46 5c ec 90 65 59 17 33 fa 35 e9 06 d4 40 e2 b6 b2 49 d3 76 11 17 1b 96 cb e5 ab eb a1 13 e4 f3 f9 57 5d d7 7d 38 e2 91 41 6b 94 84 b0 2c eb 0e 55 9d 1c db eb 8d ea c9 8d 8d 8d fb b8 ae 3b cd f7 fd 3e a4 f8 07 10 11 89 63 c4 d8 4d b3 66 cd 5a 54 17 af ca aa b7 89 c8 57 23 2c 72 bd 8e 8e 8e cd 7a 7a 7a 5e e4 2d 30 52 75 90 00 b4 ed Data Ascii: u1(\$)ppCP8%=d-(32m`?bs9p[ka?g%'D{Jkkhes{QpgF\eY35@IvW]}8Ak,U;>cMfZTW#,rzzz^-0Ru
2024-09-20 16:18:56 UTC	4096	IN	Data Raw: 53 1c 09 c0 49 d9 6c 76 d7 7a 08 6e a9 54 da 03 c0 06 11 16 b9 64 60 60 e0 ef f5 10 db be be be b0 50 28 fc d0 b2 ac fd 01 94 62 ac ca d6 53 a6 4c 69 5a d5 0f f9 be ff 2e 80 38 da ea 98 7a b9 b8 89 c8 91 11 17 c9 04 60 3c 98 00 24 22 22 aa 96 30 0c cf 07 60 52 f2 70 78 d3 b9 e7 9e fb 1a 5b 95 56 c2 1f 63 79 e8 b3 ac 6f 30 f4 54 c5 6b 60 2c eb 55 d9 b6 7d 5c 9d 84 38 ea 64 cb 43 95 1f ea ea 46 3e 9f bf 17 c0 71 88 6f 24 a0 3d 6e dc b8 d5 5a af 35 a6 11 63 87 55 d6 c6 4b b5 ca 66 43 51 af a3 fb 27 de 55 62 b9 8f 49 c4 e5 65 22 7f 16 64 33 13 11 51 5c 7a 7a 7a 5e 04 70 7b 1a 8e 45 55 cf 67 8b d2 4a 7a 20 a6 72 8f af b3 35 9b 28 42 41 10 cc 43 0c a3 5b 55 f5 58 cf f3 d2 fe 4e 23 00 8e 8a f8 c5 f4 d6 3a ed c7 b7 a9 ea b7 63 7c 96 d8 7a b5 5e ea 2d 2b 8e 84 51 Data Ascii: SIlvznTd``P(bSLiZ.8z`<$""0`Rpx[Vcyo0Tk`,U}\8dCF>qo$=nZ5cUKfCQ'UbIe"d3Q\zzz^p{EUgJz r5(BAC[UXN#:c\|z^-+Q
2024-09-20 16:18:56 UTC	3554	IN	Data Raw: 66 34 22 b9 8f fd 6f 10 04 3f 63 24 12 65 c8 18 f3 b5 de de de 65 51 17 5c 2c 16 1f 53 d5 af f2 9e 12 89 97 6c db 3e 8c d3 ee 6b 8f 88 a4 f2 c7 7f 26 00 89 88 28 f1 7a 7a 7a 16 8a c8 2f 63 7a 00 38 9f 2d 40 71 f3 7d ff 7a 00 53 c0 11 04 94 12 b3 67 cf 1e 08 c3 f0 cb 00 9e 65 34 aa ea ba 05 0b 16 e4 18 86 64 11 91 ff 2a 16 8b 0f c6 55 7e a1 50 b8 55 44 5c b6 44 55 bd ad aa 87 76 77 77 bf cc 50 d4 e4 73 d7 5d 00 1e 48 db 71 31 01 48 44 44 35 21 a6 cd 40 de 1d 1c 1c bc 92 d1 a7 24 08 82 60 2e 80 6f 81 49 40 4a 89 73 cf 3d f7 35 11 39 50 55 e7 33 1a 55 f1 cb 52 a9 f4 d5 be be 3e 8e f4 4a 10 11 b9 d5 f7 7d 3f ee 7a f8 be df a3 aa ff cb 16 a9 8a 37 2d cb fa 42 a1 50 f8 2b 43 51 d3 7e 98 b6 03 62 02 90 88 88 6a 42 a1 50 f8 23 80 bf 45 fd f2 54 59 07 84 28 11 82 Data Ascii: f4"o?c$eeQ\,Sl>k&(zzz/cz8-@q}zSge4d*U~PUD\DUvwwPs]Hq1HDD5!@$`.oI@Js=59PU3UR>J}?z7-BP+CQ~bjBP#ETY(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49731	104.18.94.41	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:18:56 UTC	383	OUT	GET /turnstile/v0/g/ec4b873d446c/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:18:56 UTC	441	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:18:56 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47262 Connection: close accept-ranges: bytes last-modified: Tue, 17 Sep 2024 16:06:37 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8c63225eb9607cac-EWR
2024-09-20 16:18:56 UTC	928	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 56 74 28 65 2c 72 2c 61 2c 6f 2c 63 2c 6c 2c 67 29 7b 74 72 79 7b 76 61 72 20 66 3d 65 5b 6c 5d 28 67 29 2c 70 3d 66 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 73 29 7b 61 28 73 29 3b 72 65 74 75 72 6e 7d 66 2e 64 6f 6e 65 3f 72 28 70 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 70 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 72 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Vt(e,r,a,o,c,l,g){try{var f=e[l](g),p=f.value}catch(s){a(s);return}f.done?r(p):Promise.resolve(p).then(o,c)}function Wt(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var l=e.apply(r,a);funct
2024-09-20 16:18:56 UTC	1369	IN	Data Raw: 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 74 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 6c 6c 3f 72 3a 7b 7d 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 Data Ascii: ct.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function tt(e,r){return r=r!=null?r:{},Object.getOwnPropertyD
2024-09-20 16:18:56 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 48 74 28 65 29 7c 7c 42 74 28 65 2c 72 29 7c 7c 71 74 28 65 2c 72 29 7c 7c 6a 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 50 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 44 65 28 65 2c 72 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 5d 26 31 29 74 68 72 6f 77 20 6c 5b 31 5d 3b 72 65 74 75 72 6e 20 6c 5b 31 5d 7d 2c 74 72 Data Ascii: function Ae(e,r){return Ht(e)\|\|Bt(e,r)\|\|qt(e,r)\|\|jt()}function P(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function De(e,r){var a={label:0,sent:function(){if(l[0]&1)throw l[1];return l[1]},tr
2024-09-20 16:18:56 UTC	1369	IN	Data Raw: 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 47 74 3d 33 30 30 30 32 30 3b 76 61 72 20 50 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4d 41 4e 41 47 45 44 3d 22 6d 61 6e 61 67 65 64 22 2c Data Ascii: oaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Gt=300020;var Pe=300030;var Ue=300031;var q;(function(e){e.MANAGED="managed",
2024-09-20 16:18:56 UTC	1369	IN	Data Raw: 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 45 4e 44 45 52 3d 22 72 65 6e 64 65 72 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 7d 29 28 70 65 7c 7c 28 70 65 3d 7b 7d 29 29 3b 76 61 72 20 6f 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 7d 29 Data Ascii: al",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(function(e){e.RENDER="render",e.EXECUTE="execute"})(pe\|\|(pe={}));var oe;(function(e){e.EXECUTE="execute"})
2024-09-20 16:18:56 UTC	1369	IN	Data Raw: 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e Data Ascii: archParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clearance_level!=="default"&&r.set("clearance_level",e.params.
2024-09-20 16:18:56 UTC	1369	IN	Data Raw: 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 6c 2c 67 3d 4c 28 43 72 2c 28 6c 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 6c 21 3d 3d 76 6f 69 64 20 30 3f 6c 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 66 2c 70 3d 4c 28 4e 72 2c 28 66 3d 28 61 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 61 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 66 21 3d 3d 76 6f 69 64 20 30 3f 66 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 Data Ascii: ===Se.FAILURE_HAVING_TROUBLES,l,g=L(Cr,(l=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&l!==void 0?l:"nonexistent"),f,p=L(Nr,(f=(a=e.displayLanguage)===null\|\|a===void 0?void 0:a.toLowerCase())!==null&&f!==void 0?f:"nonexistent")
2024-09-20 16:18:56 UTC	1369	IN	Data Raw: 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 67 29 7b 76 61 72 20 66 3d 5b 6e 75 6c 6c 5d 3b 66 2e 70 75 73 68 2e 61 70 70 6c 79 28 66 2c 6c 29 3b 76 61 72 20 70 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 66 29 2c 73 3d 6e 65 77 20 70 3b 72 65 74 75 72 6e 20 67 26 26 4a 28 73 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 73 7d 2c 49 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 Data Ascii: uct:Ie=function(c,l,g){var f=[null];f.push.apply(f,l);var p=Function.bind.apply(c,f),s=new p;return g&&J(s,g.prototype),s},Ie.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Object.getPrototypeOf:function(a){return a.__proto__\|\|Object
2024-09-20 16:18:56 UTC	1369	IN	Data Raw: 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 71 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 57 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 57 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 57 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 54 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 69 66 28 55 28 72 2c 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 72 Data Ascii: flare Turnstile] ".concat(e))}function qe(e){return e.startsWith(We)?e.substring(We.length):null}function K(e){return"".concat(We).concat(e)}function Tt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=document.currentScript;if(U(r,HTMLScriptElement)&&e.test(r
2024-09-20 16:18:56 UTC	1369	IN	Data Raw: 66 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b 76 61 72 20 73 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 73 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 66 65 65 64 62 61 63 6b 22 2c 73 2e 69 64 3d Data Ascii: f.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";var s=document.createElement("div");s.className="cf-turnstile-feedback",s.id=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49732	188.114.97.3	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:18:56 UTC	608	OUT	GET /settings.txt?a=1726849134833 HTTP/1.1 Host: 0obt.menus-unlimited.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://0obt.menus-unlimited.com/u8w5v Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=l2s8v5fbb3fguea087d16fnfgq
2024-09-20 16:18:56 UTC	728	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:18:56 GMT Content-Type: text/plain Transfer-Encoding: chunked Connection: close x-accel-version: 0.01 last-modified: Tue, 17 Sep 2024 02:03:16 GMT etag: W/"275-6224717bbae9c-gzip" vary: Accept-Encoding x-powered-by: PleskLin CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WhPMBKYX99mFbl5lkR8Ydbq6C0BDF%2F4DEjB7pxkAhol486O8cCqqMJPnJ%2Bck8%2B%2FSpNpegxyV82ONv9gky3W2lFC%2BOYTygYpnP7NJxxzyuKufGiIaX5cW6eGPjL8Udf1bHqNugGOPq1ZX%2BEQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c63225f1faa430f-EWR alt-svc: h3=":443"; ma=86400
2024-09-20 16:18:56 UTC	636	IN	Data Raw: 32 37 35 0d 0a 7b 22 63 74 62 22 3a 22 6e 6f 22 2c 22 63 74 68 22 3a 22 6e 6f 22 2c 22 6d 74 68 22 3a 22 6e 6f 22 2c 22 75 6c 65 22 3a 22 6e 6f 22 2c 22 74 6f 72 22 3a 22 6e 6f 22 2c 22 74 74 73 73 22 3a 22 32 69 6e 70 68 69 6c 6c 79 2e 63 6f 6d 2c 30 78 34 41 41 41 41 41 41 41 65 35 5a 74 73 66 6a 30 69 38 61 53 75 69 5c 72 5c 6e 61 6c 65 73 6f 76 6b 79 2e 63 6f 6d 2c 30 78 34 41 41 41 41 41 41 41 66 43 59 43 69 6b 4c 57 45 56 64 32 4d 58 5c 72 5c 6e 70 6e 65 75 73 65 72 76 69 73 6a 69 72 6b 61 6c 6f 76 69 2e 63 6f 6d 2c 30 78 34 41 41 41 41 41 41 41 67 6b 76 6d 34 73 70 51 7a 47 6b 45 71 59 5c 72 5c 6e 63 75 72 72 79 73 2d 74 69 6d 65 73 2e 63 6f 6d 2c 30 78 34 41 41 41 41 41 41 41 67 6b 77 6f 66 71 38 48 77 4d 55 61 6a 79 5c 72 5c 6e 61 70 61 72 74 6d Data Ascii: 275{"ctb":"no","cth":"no","mth":"no","ule":"no","tor":"no","ttss":"2inphilly.com,0x4AAAAAAAe5Ztsfj0i8aSui\r\nalesovky.com,0x4AAAAAAAfCYCikLWEVd2MX\r\npneuservisjirkalovi.com,0x4AAAAAAAgkvm4spQzGkEqY\r\ncurrys-times.com,0x4AAAAAAAgkwofq8HwMUajy\r\napartm
2024-09-20 16:18:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49733	188.114.97.3	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:18:56 UTC	610	OUT	GET /rep_emails.txt?a=1726849134833 HTTP/1.1 Host: 0obt.menus-unlimited.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://0obt.menus-unlimited.com/u8w5v Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=l2s8v5fbb3fguea087d16fnfgq
2024-09-20 16:18:56 UTC	673	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:18:56 GMT Content-Type: text/plain Content-Length: 2 Connection: close x-accel-version: 0.01 last-modified: Wed, 10 Jul 2024 21:48:53 GMT etag: "2-61ceb9cc03b40" accept-ranges: bytes x-powered-by: PleskLin CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dwmP76hj4I6Kso4JjGGD5fNedAOdx2qEwntPXA1QDrr10WS0Dyb5h%2BYSgxuL0gyNRzzdnVlD4AyHCYhOSIEvetYQz4tel1056AjLLJgFLvaBSkVSZslwNreof%2FZYbMDLdw58G%2BVhnT8CDdA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c63225f4eb95e6d-EWR
2024-09-20 16:18:56 UTC	2	IN	Data Raw: 5b 5d Data Ascii: []

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49734	188.114.97.3	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:18:56 UTC	655	OUT	GET /favicon.ico HTTP/1.1 Host: 0obt.menus-unlimited.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://0obt.menus-unlimited.com/u8w5v Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=l2s8v5fbb3fguea087d16fnfgq
2024-09-20 16:18:56 UTC	817	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:18:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-powered-by: PHP/8.3.11 x-powered-by: PleskLin access-control-allow-origin: * expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate pragma: no-cache vary: Accept-Encoding CF-Cache-Status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=81U3LREFJHjdIfRcI%2Fev%2FTg3j1IGjZkEAszm4axApxGxR%2FSoJmthqq5U7QFLB5UK9q0TCp9XMLbst5OB2EXSgy7upKb8GWBwoTZhcUR0Qwv%2BdVe8UyxNmsbwToWKPKIDcO%2BvpLRh7Fid1Lo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8c6322615e95177c-EWR
2024-09-20 16:18:56 UTC	552	IN	Data Raw: 37 63 36 64 0d 0a 3c 68 74 6d 6c 3e 20 3c 68 65 61 64 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 3c 74 69 74 6c 65 3e 20 4c 6f 61 64 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 20 0d 0a 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 6a 61 78 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 2f 32 2e 32 2e 34 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 3c 21 2d 2d 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 63 6b 70 61 74 68 2e 62 Data Ascii: 7c6d<html> <head> <meta name="viewport" content="width=device-width, initial-scale=1.0"><title> Loading...</title> <script src="https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js"></script> ...<script src="https://stackpath.b
2024-09-20 16:18:56 UTC	1369	IN	Data Raw: 74 6d 6c 20 7b 0d 0a 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 31 35 3b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 31 33 31 33 31 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 68 74 6d 6c 2c 0d 0a 20 20 20 20 20 20 62 75 74 74 6f 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 79 73 74 65 6d 2d 75 69 2c 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 20 53 65 67 6f 65 20 55 49 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 52 6f 62 6f 74 6f 2c 20 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 20 41 72 69 61 Data Ascii: tml { line-height: 1.15; -webkit-text-size-adjust: 100%; color: #313131; } html, button { font-family: system-ui, -apple-system, BlinkMacSystemFont, Segoe UI, Roboto, Helvetica Neue, Aria
2024-09-20 16:18:56 UTC	1369	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 66 6c 65 78 3a 20 31 3b 0d 0a 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0d 0a 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 66 6f 6e 74 2d 72 65 64 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 62 32 30 66 30 33 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 73 70 61 63 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 32 72 65 6d 20 30 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 68 31 20 7b 0d 0a 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 33 2e 37 35 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a Data Ascii: flex: 1; flex-direction: column; align-items: center; } .font-red { color: #b20f03; } .spacer { margin: 2rem 0; } .h1 { line-height: 3.75rem; font-siz
2024-09-20 16:18:56 UTC	1369	IN	Data Raw: 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 2e 32 35 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 77 61 72 6e 69 6e 67 2d 69 63 6f 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 44 51 41 41 41 41 30 43 41 4d 41 41 41 44 79 70 75 76 5a 41 41 41 41 50 46 42 4d 56 45 55 41 41 41 43 76 44 77 4f 79 44 77 4b 79 44 77 4f 76 45 41 43 79 44 67 4f 79 44 77 4b 76 44 77 4b 77 44 67 43 79 44 67 4b 78 44 67 4f 79 44 67 4b 76 Data Ascii: height: 1.25rem; } } .warning-icon { display: inline-block; background-image: url("data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAADQAAAA0CAMAAADypuvZAAAAPFBMVEUAAACvDwOyDwKyDwOvEACyDgOyDwKvDwKwDgCyDgKxDgOyDgKv
2024-09-20 16:18:56 UTC	1369	IN	Data Raw: 72 6f 75 6e 64 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 65 78 70 61 6e 64 61 62 6c 65 2d 64 65 74 61 69 6c 73 20 7b 0d 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 2e 35 72 65 6d 20 30 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 65 78 70 61 6e 64 65 64 20 3e 20 2e 65 78 70 61 6e 64 61 62 6c 65 2d 64 65 74 61 69 6c 73 20 7b 0d 0a 20 20 20 20 20 Data Ascii: round: none; cursor: pointer; padding: 0; color: inherit; font: inherit; } .expandable-details { display: none; padding: 0.5rem 0; } .expanded > .expandable-details {
2024-09-20 16:18:56 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 63 61 70 74 63 68 61 2d 70 72 6f 6d 70 74 3a 6e 6f 74 28 2e 68 69 64 64 65 6e 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 32 30 70 78 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 2e 63 61 70 74 63 68 61 2d 70 72 6f 6d 70 74 3a 6e 6f 74 28 2e 68 69 64 64 65 6e 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 66 6c 65 78 2d 77 72 61 70 3a 20 77 72 61 70 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 70 6f 77 2d 62 75 74 74 6f Data Ascii: } .captcha-prompt:not(.hidden) { display: flex; } @media (max-width: 720px) { .captcha-prompt:not(.hidden) { flex-wrap: wrap; justify-content: center; } } .pow-butto
2024-09-20 16:18:56 UTC	1369	IN	Data Raw: 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 32 30 70 78 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 2e 64 69 61 67 6e 6f 73 74 69 63 2d 77 72 61 70 70 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 66 6c 65 78 2d 77 72 61 70 3a 20 77 72 61 70 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 69 74 69 61 6c 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 63 6c 65 61 72 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a Data Ascii: (max-width: 720px) { .diagnostic-wrapper { display: flex; flex-wrap: wrap; justify-content: center; } .clearfix:after { display: initial; clear: none; text-align:
2024-09-20 16:18:56 UTC	1369	IN	Data Raw: 69 6f 6e 2d 64 65 6c 61 79 3a 20 2d 30 2e 31 35 73 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 40 6b 65 79 66 72 61 6d 65 73 20 6c 64 73 2d 72 69 6e 67 20 7b 0d 0a 20 20 20 20 20 20 20 20 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 74 6f 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 20 61 63 74 69 76 65 29 2c 0d 0a 20 20 20 20 20 20 20 20 73 63 72 65 65 Data Ascii: ion-delay: -0.15s; } @keyframes lds-ring { 0% { transform: rotate(0); } to { transform: rotate(360deg); } } @media screen and (-ms-high-contrast: active), scree
2024-09-20 16:18:56 UTC	1369	IN	Data Raw: 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 65 65 37 33 30 61 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 62 6f 64 79 2e 64 61 72 6b 20 2e 6c 64 73 2d 72 69 6e 67 20 64 69 76 20 7b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 39 39 39 20 74 72 61 6e 73 70 61 72 65 6e 74 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 62 6f 64 79 2e 64 61 72 6b 20 2e 66 6f 6e 74 2d 72 65 64 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 62 32 30 66 30 33 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 62 6f 64 79 2e 64 61 72 6b 20 2e 62 69 67 2d 62 75 74 74 6f 6e 2c 0d 0a 20 20 20 20 20 20 62 6f 64 79 2e 64 61 72 6b 20 2e 70 6f 77 2d 62 75 74 74 6f 6e 20 7b 0d 0a 20 20 20 20 20 Data Ascii: color: #ee730a; } body.dark .lds-ring div { border-color: #999 transparent transparent; } body.dark .font-red { color: #b20f03; } body.dark .big-button, body.dark .pow-button {
2024-09-20 16:18:56 UTC	1369	IN	Data Raw: 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 20 72 65 70 65 61 74 28 31 2c 20 31 66 72 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 56 69 63 74 6f 72 20 4d 6f 6e 6f 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 39 39 39 39 3b 20 2f 2a 20 45 6e 73 75 72 65 20 69 74 27 73 20 6f 6e 20 74 6f 70 20 2a 2f 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a Data Ascii: emplate-columns: repeat(1, 1fr); justify-content: center; align-items: center; text-align: center; font-family: "Victor Mono", sans-serif; z-index: 9999; /* Ensure it's on top */

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	56593	188.114.96.3	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:18:57 UTC	422	OUT	GET /settings.txt?a=1726849134833 HTTP/1.1 Host: 0obt.menus-unlimited.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=l2s8v5fbb3fguea087d16fnfgq
2024-09-20 16:18:57 UTC	692	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:18:57 GMT Content-Type: text/plain Transfer-Encoding: chunked Connection: close x-accel-version: 0.01 last-modified: Tue, 17 Sep 2024 02:03:16 GMT etag: W/"275-6224717bbae9c-gzip" vary: Accept-Encoding x-powered-by: PleskLin CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dE6li1vnZ3WciNCQCeM%2BBO2T%2Fm3Gt4FXOxhSEt6TLnw8wtxOQmi2%2FPr98oBfngGxhyolizRdCDiUbCuUr8k0RgHQWtKDaH3QmFBfCSgyE5koPB7xabiYr2eXNXUDWuCZC7EDwwRefLihARY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c6322666f83434a-EWR
2024-09-20 16:18:57 UTC	636	IN	Data Raw: 32 37 35 0d 0a 7b 22 63 74 62 22 3a 22 6e 6f 22 2c 22 63 74 68 22 3a 22 6e 6f 22 2c 22 6d 74 68 22 3a 22 6e 6f 22 2c 22 75 6c 65 22 3a 22 6e 6f 22 2c 22 74 6f 72 22 3a 22 6e 6f 22 2c 22 74 74 73 73 22 3a 22 32 69 6e 70 68 69 6c 6c 79 2e 63 6f 6d 2c 30 78 34 41 41 41 41 41 41 41 65 35 5a 74 73 66 6a 30 69 38 61 53 75 69 5c 72 5c 6e 61 6c 65 73 6f 76 6b 79 2e 63 6f 6d 2c 30 78 34 41 41 41 41 41 41 41 66 43 59 43 69 6b 4c 57 45 56 64 32 4d 58 5c 72 5c 6e 70 6e 65 75 73 65 72 76 69 73 6a 69 72 6b 61 6c 6f 76 69 2e 63 6f 6d 2c 30 78 34 41 41 41 41 41 41 41 67 6b 76 6d 34 73 70 51 7a 47 6b 45 71 59 5c 72 5c 6e 63 75 72 72 79 73 2d 74 69 6d 65 73 2e 63 6f 6d 2c 30 78 34 41 41 41 41 41 41 41 67 6b 77 6f 66 71 38 48 77 4d 55 61 6a 79 5c 72 5c 6e 61 70 61 72 74 6d Data Ascii: 275{"ctb":"no","cth":"no","mth":"no","ule":"no","tor":"no","ttss":"2inphilly.com,0x4AAAAAAAe5Ztsfj0i8aSui\r\nalesovky.com,0x4AAAAAAAfCYCikLWEVd2MX\r\npneuservisjirkalovi.com,0x4AAAAAAAgkvm4spQzGkEqY\r\ncurrys-times.com,0x4AAAAAAAgkwofq8HwMUajy\r\napartm
2024-09-20 16:18:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	56594	188.114.96.3	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:18:57 UTC	424	OUT	GET /rep_emails.txt?a=1726849134833 HTTP/1.1 Host: 0obt.menus-unlimited.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=l2s8v5fbb3fguea087d16fnfgq
2024-09-20 16:18:57 UTC	679	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:18:57 GMT Content-Type: text/plain Content-Length: 2 Connection: close x-accel-version: 0.01 last-modified: Wed, 10 Jul 2024 21:48:53 GMT etag: "2-61ceb9cc03b40" accept-ranges: bytes x-powered-by: PleskLin CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J5oRA2qZCwzlsDrgkcUEr9QZyGpQSk51Kq%2BhSjDRvCBD%2BhK8mFJeW1tEMwp54ofOmuGyi3rqjQ1sW3tnT3VEUwLQg%2FCmFOAx0NvD1SUa4OwQwArS%2BnD4CR2%2FXzWJgjsnhgshS1R9fqx%2BczQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c632266bfa242d8-EWR
2024-09-20 16:18:57 UTC	2	IN	Data Raw: 5b 5d Data Ascii: []

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	56597	188.114.96.3	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:18:58 UTC	405	OUT	GET /favicon.ico HTTP/1.1 Host: 0obt.menus-unlimited.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=l2s8v5fbb3fguea087d16fnfgq
2024-09-20 16:18:58 UTC	823	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:18:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-powered-by: PHP/8.3.11 x-powered-by: PleskLin access-control-allow-origin: * expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate pragma: no-cache vary: Accept-Encoding CF-Cache-Status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VcJP%2FPfhQ%2FKR4qyVAtXVvU927YJVxiY8rwuCWDBiGvS6o8sy1YKLzXaPMZfG9UUzUb0Rjh%2FoLQBHua0dygIUJIoMw%2FlMgQ4zYpd9w4jhs6r%2Fw%2FuBeWml%2BPRbI%2Fh5oHnmmo2zPExKzZB7oqI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8c632269be3c78d0-EWR
2024-09-20 16:18:58 UTC	546	IN	Data Raw: 37 63 36 37 0d 0a 3c 68 74 6d 6c 3e 20 3c 68 65 61 64 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 3c 74 69 74 6c 65 3e 20 4c 6f 61 64 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 20 0d 0a 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 6a 61 78 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 2f 32 2e 32 2e 34 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 3c 21 2d 2d 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 63 6b 70 61 74 68 2e 62 Data Ascii: 7c67<html> <head> <meta name="viewport" content="width=device-width, initial-scale=1.0"><title> Loading...</title> <script src="https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js"></script> ...<script src="https://stackpath.b
2024-09-20 16:18:58 UTC	1369	IN	Data Raw: 20 20 20 20 20 68 74 6d 6c 20 7b 0d 0a 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 31 35 3b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 31 33 31 33 31 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 68 74 6d 6c 2c 0d 0a 20 20 20 20 20 20 62 75 74 74 6f 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 79 73 74 65 6d 2d 75 69 2c 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 20 53 65 67 6f 65 20 55 49 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 52 6f 62 6f 74 6f 2c 20 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 Data Ascii: html { line-height: 1.15; -webkit-text-size-adjust: 100%; color: #313131; } html, button { font-family: system-ui, -apple-system, BlinkMacSystemFont, Segoe UI, Roboto, Helvetica Neue
2024-09-20 16:18:58 UTC	1369	IN	Data Raw: 66 6c 65 78 3b 0d 0a 20 20 20 20 20 20 20 20 66 6c 65 78 3a 20 31 3b 0d 0a 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0d 0a 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 66 6f 6e 74 2d 72 65 64 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 62 32 30 66 30 33 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 73 70 61 63 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 32 72 65 6d 20 30 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 68 31 20 7b 0d 0a 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 33 2e 37 35 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 66 6f Data Ascii: flex; flex: 1; flex-direction: column; align-items: center; } .font-red { color: #b20f03; } .spacer { margin: 2rem 0; } .h1 { line-height: 3.75rem; fo
2024-09-20 16:18:58 UTC	1369	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 2e 32 35 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 77 61 72 6e 69 6e 67 2d 69 63 6f 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 44 51 41 41 41 41 30 43 41 4d 41 41 41 44 79 70 75 76 5a 41 41 41 41 50 46 42 4d 56 45 55 41 41 41 43 76 44 77 4f 79 44 77 4b 79 44 77 4f 76 45 41 43 79 44 67 4f 79 44 77 4b 76 44 77 4b 77 44 67 43 79 44 67 4b 78 44 67 Data Ascii: height: 1.25rem; } } .warning-icon { display: inline-block; background-image: url("data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAADQAAAA0CAMAAADypuvZAAAAPFBMVEUAAACvDwOyDwKyDwOvEACyDgOyDwKvDwKwDgCyDgKxDg
2024-09-20 16:18:58 UTC	1369	IN	Data Raw: 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 65 78 70 61 6e 64 61 62 6c 65 2d 64 65 74 61 69 6c 73 20 7b 0d 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 2e 35 72 65 6d 20 30 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 65 78 70 61 6e 64 65 64 20 3e 20 2e 65 78 70 61 6e 64 61 62 6c 65 2d 64 65 74 61 69 6c 73 20 7b 0d Data Ascii: background: none; cursor: pointer; padding: 0; color: inherit; font: inherit; } .expandable-details { display: none; padding: 0.5rem 0; } .expanded > .expandable-details {
2024-09-20 16:18:58 UTC	1369	IN	Data Raw: 74 65 72 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 63 61 70 74 63 68 61 2d 70 72 6f 6d 70 74 3a 6e 6f 74 28 2e 68 69 64 64 65 6e 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 32 30 70 78 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 2e 63 61 70 74 63 68 61 2d 70 72 6f 6d 70 74 3a 6e 6f 74 28 2e 68 69 64 64 65 6e 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 66 6c 65 78 2d 77 72 61 70 3a 20 77 72 61 70 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 70 6f 77 Data Ascii: ter; } .captcha-prompt:not(.hidden) { display: flex; } @media (max-width: 720px) { .captcha-prompt:not(.hidden) { flex-wrap: wrap; justify-content: center; } } .pow
2024-09-20 16:18:58 UTC	1369	IN	Data Raw: 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 32 30 70 78 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 2e 64 69 61 67 6e 6f 73 74 69 63 2d 77 72 61 70 70 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 66 6c 65 78 2d 77 72 61 70 3a 20 77 72 61 70 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 69 74 69 61 6c 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 63 6c 65 61 72 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d Data Ascii: media (max-width: 720px) { .diagnostic-wrapper { display: flex; flex-wrap: wrap; justify-content: center; } .clearfix:after { display: initial; clear: none; text-
2024-09-20 16:18:58 UTC	1369	IN	Data Raw: 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 2d 30 2e 31 35 73 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 40 6b 65 79 66 72 61 6d 65 73 20 6c 64 73 2d 72 69 6e 67 20 7b 0d 0a 20 20 20 20 20 20 20 20 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 74 6f 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 20 61 63 74 69 76 65 29 2c 0d 0a 20 20 20 20 20 20 20 Data Ascii: animation-delay: -0.15s; } @keyframes lds-ring { 0% { transform: rotate(0); } to { transform: rotate(360deg); } } @media screen and (-ms-high-contrast: active),
2024-09-20 16:18:58 UTC	1369	IN	Data Raw: 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 65 65 37 33 30 61 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 62 6f 64 79 2e 64 61 72 6b 20 2e 6c 64 73 2d 72 69 6e 67 20 64 69 76 20 7b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 39 39 39 20 74 72 61 6e 73 70 61 72 65 6e 74 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 62 6f 64 79 2e 64 61 72 6b 20 2e 66 6f 6e 74 2d 72 65 64 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 62 32 30 66 30 33 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 62 6f 64 79 2e 64 61 72 6b 20 2e 62 69 67 2d 62 75 74 74 6f 6e 2c 0d 0a 20 20 20 20 20 20 62 6f 64 79 2e 64 61 72 6b 20 2e 70 6f 77 2d 62 75 74 74 6f 6e 20 7b 0d Data Ascii: ; color: #ee730a; } body.dark .lds-ring div { border-color: #999 transparent transparent; } body.dark .font-red { color: #b20f03; } body.dark .big-button, body.dark .pow-button {
2024-09-20 16:18:58 UTC	1369	IN	Data Raw: 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 20 72 65 70 65 61 74 28 31 2c 20 31 66 72 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 56 69 63 74 6f 72 20 4d 6f 6e 6f 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 39 39 39 39 3b 20 2f 2a 20 45 6e 73 75 72 65 20 69 74 27 73 20 6f 6e 20 74 6f 70 20 2a 2f 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: grid-template-columns: repeat(1, 1fr); justify-content: center; align-items: center; text-align: center; font-family: "Victor Mono", sans-serif; z-index: 9999; /* Ensure it's on top */

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	56596	13.107.246.60	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:18:58 UTC	671	OUT	GET /shared/1.0/content/images/appbackgrounds/49-small_e58aafc980614a9cd7796bea7b5ea8f0.jpg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://0obt.menus-unlimited.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:18:58 UTC	735	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:18:58 GMT Content-Type: image/jpeg Content-Length: 987 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Fri, 27 Mar 2020 19:41:47 GMT ETag: 0x8D7D286E322A911 x-ms-request-id: 53f067ec-801e-000f-5078-0bc285000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240920T161858Z-185ffdfffcfh72qff53sp23d240000000aq0000000001czp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-09-20 16:18:58 UTC	987	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 66 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 04 01 1a 00 05 00 00 00 01 00 00 00 3e 01 1b 00 05 00 00 00 01 00 00 00 46 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 10 00 00 00 4e 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 70 61 69 6e 74 2e 6e 65 74 20 34 2e 32 2e 39 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a Data Ascii: JFIFHHfExifMM*>F(1NHHpaint.net 4.2.9CC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	56598	13.107.246.60	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:18:59 UTC	427	OUT	GET /shared/1.0/content/images/appbackgrounds/49-small_e58aafc980614a9cd7796bea7b5ea8f0.jpg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:18:59 UTC	755	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:18:59 GMT Content-Type: image/jpeg Content-Length: 987 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Fri, 27 Mar 2020 19:41:47 GMT ETag: 0x8D7D286E322A911 x-ms-request-id: 53f067ec-801e-000f-5078-0bc285000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240920T161859Z-185ffdfffcfr4gp898pc2462k40000000az000000000cu79 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-09-20 16:18:59 UTC	987	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 66 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 04 01 1a 00 05 00 00 00 01 00 00 00 3e 01 1b 00 05 00 00 00 01 00 00 00 46 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 10 00 00 00 4e 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 70 61 69 6e 74 2e 6e 65 74 20 34 2e 32 2e 39 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a Data Ascii: JFIFHHfExifMM*>F(1NHHpaint.net 4.2.9CC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	56601	104.18.95.41	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:02 UTC	807	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/typiu/0x4AAAAAAAkF7znPRls4zQt2/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://0obt.menus-unlimited.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:02 UTC	1369	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:19:02 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 164892 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cross-origin-opener-policy: same-origin permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cross-origin-resource-policy: cross-origin content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self' origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cross-origin-embedder-policy: require-corp document-policy: js-profiling referrer-policy: same-origin
2024-09-20 16:19:02 UTC	52	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 63 36 33 32 32 38 32 62 63 61 31 30 63 61 38 2d 45 57 52 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8c632282bca10ca8-EWR
2024-09-20 16:19:02 UTC	1317	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-09-20 16:19:02 UTC	1369	IN	Data Raw: 25 3b 6d 61 72 67 69 6e 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 Data Ascii: %;margin:0;overflow:hidden;padding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-web
2024-09-20 16:19:02 UTC	1369	IN	Data Raw: 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 7d 23 73 75 63 63 65 73 73 2d 70 72 65 2d 69 20 6c 69 6e 65 7b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 Data Ascii: ght:30px;width:30px}#success-pre-i line{stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;st
2024-09-20 16:19:02 UTC	1369	IN	Data Raw: 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e Data Ascii: allenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dark #challen
2024-09-20 16:19:02 UTC	1369	IN	Data Raw: 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 Data Ascii: dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-helper-loop
2024-09-20 16:19:02 UTC	1369	IN	Data Raw: 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 61 63 74 69 76 65 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 66 6f 63 75 73 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 31 36 36 33 37 39 7d 23 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 32 35 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 70 78 7d 2e 66 61 69 6c 75 72 65 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 Data Ascii: ,#challenge-overlay a:link,#challenge-overlay a:visited{color:#232323}#challenge-overlay a:active,#challenge-overlay a:focus,#challenge-overlay a:hover{color:#166379}#logo{height:25px;margin-bottom:1px}.failure-circle{stroke-dasharray:166;stroke-dashoffse
2024-09-20 16:19:02 UTC	1369	IN	Data Raw: 6e 3a 61 6c 6c 20 2e 31 73 20 65 61 73 65 2d 69 6e 3b 77 69 64 74 68 3a 32 34 70 78 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 38 7d 2e 63 62 2d 6c 62 20 2e 63 62 2d 69 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 63 62 2d 6c 62 20 2e 63 62 2d 6c 62 2d 74 7b 67 72 69 64 2d 63 6f 6c 75 6d 6e 3a 32 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 63 6f 6e 74 65 6e 74 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c Data Ascii: n:all .1s ease-in;width:24px;z-index:9998}.cb-lb .cb-i:after{border-radius:5px;content:"";position:absolute}.cb-lb .cb-lb-t{grid-column:2;margin-left:8px}.size-compact{font-size:14px}.size-compact #content{align-items:flex-start;display:flex;flex-flow:col
2024-09-20 16:19:02 UTC	1369	IN	Data Raw: 72 74 6c 7d 2e 72 74 6c 20 2e 63 62 2d 6c 62 2d 74 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 72 74 6c 20 23 65 78 70 69 72 65 64 2d 69 2c 2e 72 74 6c 20 23 66 61 69 6c 2d 69 2c 2e 72 74 6c 20 23 6f 76 65 72 72 75 6e 2d 69 2c 2e 72 74 6c 20 23 73 70 69 6e 6e 65 72 2d 69 2c 2e 72 74 6c 20 23 73 75 63 63 65 73 73 2d 69 2c 2e 72 74 6c 20 23 74 69 6d 65 6f 75 74 2d 69 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 Data Ascii: rtl}.rtl .cb-lb-t{margin-left:0;margin-right:8px;padding:0}.rtl #expired-i,.rtl #fail-i,.rtl #overrun-i,.rtl #spinner-i,.rtl #success-i,.rtl #timeout-i{left:255px}.rtl #fr-helper{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px
2024-09-20 16:19:02 UTC	1369	IN	Data Raw: 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 61 63 74 69 76 65 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 66 6f 63 75 73 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c Data Ascii: challenge-error-title a{color:#232323}#challenge-error-title a:active,#challenge-error-title a:focus,#challenge-error-title a:hover{color:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#chall

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	56602	104.18.95.41	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:02 UTC	730	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8c632282bca10ca8&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/typiu/0x4AAAAAAAkF7znPRls4zQt2/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:02 UTC	301	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:19:02 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 120661 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8c632286a92c15c3-EWR
2024-09-20 16:19:02 UTC	1068	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 71 5a 4a 79 54 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.qZJyT2={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconce
2024-09-20 16:19:02 UTC	1369	IN	Data Raw: 25 32 30 70 61 67 65 25 33 43 25 32 46 61 25 33 45 25 32 30 69 66 25 32 30 74 68 65 25 32 30 69 73 73 75 65 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 69 6e 76 61 6c 69 64 5f 73 69 74 65 6b 65 79 22 3a 22 49 6e 76 61 6c 69 64 25 32 30 73 69 74 65 6b 65 79 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 74 65 72 6d 73 22 3a 22 54 65 72 6d 73 22 2c 22 69 6e 76 61 6c 69 64 5f 64 6f 6d 61 69 6e 22 3a 22 49 6e 76 61 6c 69 64 25 32 30 64 6f 6d 61 69 6e 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 Data Ascii: %20page%3C%2Fa%3E%20if%20the%20issue%20persists.","invalid_sitekey":"Invalid%20sitekey.%20Contact%20the%20Site%20Administrator%20if%20this%20problem%20persists.","turnstile_footer_terms":"Terms","invalid_domain":"Invalid%20domain.%20Contact%20the%20Site%2
2024-09-20 16:19:02 UTC	1369	IN	Data Raw: 72 73 65 49 6e 74 28 67 48 28 38 35 33 29 29 2f 31 31 29 2b 70 61 72 73 65 49 6e 74 28 67 48 28 31 38 35 39 29 29 2f 31 32 2c 64 3d 3d 3d 66 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 34 38 30 31 33 33 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 49 28 31 31 37 32 29 5d 2c 65 4f 3d 5b 5d 2c 65 50 3d 30 3b 32 35 36 3e 65 50 3b 65 4f 5b 65 50 5d 3d 53 74 72 69 6e 67 5b 67 49 28 31 65 33 29 5d 28 65 50 29 2c 65 50 2b 2b 29 3b 65 51 3d 28 30 2c 65 76 61 6c 29 28 67 49 28 31 39 36 30 29 29 2c 65 52 3d 61 74 6f 62 28 67 49 28 31 31 37 34 29 29 2c 65 4d 5b 67 49 28 39 37 32 29 5d 3d 66 75 6e 63 74 69 Data Ascii: rseInt(gH(853))/11)+parseInt(gH(1859))/12,d===f)break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,480133),eM=this\|\|self,eN=eM[gI(1172)],eO=[],eP=0;256>eP;eO[eP]=String[gI(1e3)](eP),eP++);eQ=(0,eval)(gI(1960)),eR=atob(gI(1174)),eM[gI(972)]=functi
2024-09-20 16:19:02 UTC	1369	IN	Data Raw: 65 4d 5b 68 69 28 31 32 38 31 29 5d 5b 68 69 28 31 33 33 31 29 5d 3f 69 5b 68 69 28 38 36 30 29 5d 28 27 68 2f 27 2b 65 4d 5b 68 69 28 31 32 38 31 29 5d 5b 68 69 28 31 33 33 31 29 5d 2c 27 2f 27 29 3a 27 27 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 35 27 3a 43 5b 68 69 28 31 34 34 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 36 27 3a 43 5b 68 69 28 39 33 31 29 5d 3d 32 35 30 30 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 37 27 3a 69 66 28 21 43 29 72 65 74 75 72 6e 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 38 27 3a 43 5b 68 69 28 36 30 35 29 5d 28 68 69 28 31 37 38 35 29 2c 68 69 28 37 34 32 29 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 39 27 3a 6f 3d 69 5b 68 69 28 34 38 38 29 5d 3b 63 6f 6e 74 Data Ascii: eM[hi(1281)][hi(1331)]?i[hi(860)]('h/'+eM[hi(1281)][hi(1331)],'/'):'';continue;case'5':C[hi(1448)]=function(){};continue;case'6':C[hi(931)]=2500;continue;case'7':if(!C)return;continue;case'8':C[hi(605)](hi(1785),hi(742));continue;case'9':o=i[hi(488)];cont
2024-09-20 16:19:02 UTC	1369	IN	Data Raw: 39 32 29 5d 28 68 29 29 5d 5b 68 6b 28 31 31 35 36 29 5d 28 68 6b 28 39 31 33 29 29 2c 65 4d 5b 68 6b 28 31 34 30 35 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 6d 29 7b 68 6d 3d 68 6b 2c 65 4d 5b 68 6d 28 31 35 38 39 29 5d 28 6d 2c 75 6e 64 65 66 69 6e 65 64 2c 68 6d 28 36 35 30 29 29 7d 2c 31 30 29 2c 65 4d 5b 68 6b 28 31 34 30 35 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 6e 2c 6f 2c 73 2c 78 2c 42 29 7b 28 68 6e 3d 68 6b 2c 6f 3d 7b 7d 2c 6f 5b 68 6e 28 38 32 30 29 5d 3d 6a 5b 68 6e 28 31 33 33 30 29 5d 2c 6f 5b 68 6e 28 37 35 33 29 5d 3d 6a 5b 68 6e 28 31 35 30 30 29 5d 2c 73 3d 6f 2c 68 6e 28 38 30 31 29 3d 3d 3d 68 6e 28 38 30 31 29 29 3f 65 4d 5b 68 6e 28 39 37 32 29 5d 28 29 3a 28 78 3d 67 5b 68 6e 28 31 36 32 31 29 5d 28 6e 65 77 20 68 28 5b 73 5b 68 6e Data Ascii: 92)](h))][hk(1156)](hk(913)),eM[hk(1405)](function(hm){hm=hk,eM[hm(1589)](m,undefined,hm(650))},10),eM[hk(1405)](function(hn,o,s,x,B){(hn=hk,o={},o[hn(820)]=j[hn(1330)],o[hn(753)]=j[hn(1500)],s=o,hn(801)===hn(801))?eM[hn(972)]():(x=g[hn(1621)](new h([s[hn
2024-09-20 16:19:02 UTC	1369	IN	Data Raw: 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 68 5e 67 7d 2c 27 4f 78 71 58 47 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 67 3d 3d 3d 68 7d 7d 2c 69 67 28 31 30 30 34 29 21 3d 3d 64 5b 69 67 28 31 32 34 38 29 5d 29 7b 68 3d 28 68 3d 42 2e 68 5b 43 2e 67 5e 31 30 37 2e 37 38 5d 2c 69 3d 66 5b 69 67 28 31 34 34 33 29 5d 28 68 5b 33 5d 2c 44 2e 6a 29 2c 68 5b 33 5d 3d 66 5b 69 67 28 35 34 34 29 5d 28 66 5b 69 67 28 31 38 33 38 29 5d 28 66 5b 69 67 28 31 31 31 31 29 5d 28 69 2a 69 2c 31 30 33 30 34 29 2c 35 36 32 39 2a 69 29 2b 32 34 37 33 35 2c 32 35 35 29 2c 45 2e 68 5b 66 5b 69 67 28 39 39 31 29 5d 28 46 2e 6a 2c 47 2e 67 29 5d 29 3b 74 72 79 7b 68 5b 69 67 28 39 36 35 29 5d 28 52 29 28 53 2e 6a 29 7d 63 61 74 63 68 28 6c 29 7b 69 Data Ascii: on(g,h){return h^g},'OxqXG':function(g,h){return g===h}},ig(1004)!==d[ig(1248)]){h=(h=B.h[C.g^107.78],i=f[ig(1443)](h[3],D.j),h[3]=f[ig(544)](f[ig(1838)](f[ig(1111)](ii,10304),5629i)+24735,255),E.h[f[ig(991)](F.j,G.g)]);try{h[ig(965)](R)(S.j)}catch(l){i
2024-09-20 16:19:02 UTC	1369	IN	Data Raw: 36 38 29 5d 3d 66 70 2c 67 6b 5b 67 49 28 31 31 35 32 29 5d 3d 66 4d 2c 67 6b 5b 67 49 28 39 30 38 29 5d 3d 66 4e 2c 67 6b 5b 67 49 28 31 32 37 39 29 5d 3d 66 58 2c 67 6b 5b 67 49 28 31 39 30 31 29 5d 3d 66 57 2c 67 6b 5b 67 49 28 37 31 38 29 5d 3d 66 56 2c 67 6b 5b 67 49 28 31 38 32 32 29 5d 3d 66 55 2c 67 6b 5b 67 49 28 31 38 33 31 29 5d 3d 66 46 2c 67 6b 5b 67 49 28 31 31 31 34 29 5d 3d 67 6a 2c 67 6b 5b 67 49 28 31 38 32 38 29 5d 3d 66 47 2c 67 6b 5b 67 49 28 37 36 31 29 5d 3d 66 4b 2c 67 6b 5b 67 49 28 31 31 39 35 29 5d 3d 66 48 2c 67 6b 5b 67 49 28 31 37 35 35 29 5d 3d 66 43 2c 67 6b 5b 67 49 28 31 37 32 33 29 5d 3d 66 42 2c 65 4d 5b 67 49 28 31 33 31 32 29 5d 3d 67 6b 2c 67 6c 3d 66 75 6e 63 74 69 6f 6e 28 6a 30 2c 64 2c 65 2c 66 2c 67 29 7b 72 65 Data Ascii: 68)]=fp,gk[gI(1152)]=fM,gk[gI(908)]=fN,gk[gI(1279)]=fX,gk[gI(1901)]=fW,gk[gI(718)]=fV,gk[gI(1822)]=fU,gk[gI(1831)]=fF,gk[gI(1114)]=gj,gk[gI(1828)]=fG,gk[gI(761)]=fK,gk[gI(1195)]=fH,gk[gI(1755)]=fC,gk[gI(1723)]=fB,eM[gI(1312)]=gk,gl=function(j0,d,e,f,g){re
2024-09-20 16:19:02 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 57 74 67 44 57 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 4c 4d 77 4e 51 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 62 64 61 46 51 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 72 55 78 6d 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 42 71 64 52 61 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 70 53 54 42 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 7d 2c 65 3d 53 74 72 69 6e 67 5b 6a 30 28 31 65 33 29 5d 2c 66 3d 7b 27 68 27 Data Ascii: tion(h,i){return h&i},'WtgDW':function(h,i){return h(i)},'LMwNQ':function(h,i){return h<i},'bdaFQ':function(h,i){return i==h},'rUxmk':function(h,i){return h-i},'BqdRa':function(h,i){return i==h},'pSTBh':function(h,i){return h(i)}},e=String[j0(1e3)],f={'h'
2024-09-20 16:19:02 UTC	1369	IN	Data Raw: 2b 2b 29 3b 44 3d 28 45 2d 2d 2c 64 5b 6a 32 28 31 39 34 39 29 5d 28 30 2c 45 29 26 26 28 45 3d 4d 61 74 68 5b 6a 32 28 36 37 32 29 5d 28 32 2c 47 29 2c 47 2b 2b 29 2c 42 5b 4d 5d 3d 46 2b 2b 2c 53 74 72 69 6e 67 28 4c 29 29 7d 69 66 28 27 27 21 3d 3d 44 29 7b 69 66 28 4f 62 6a 65 63 74 5b 6a 32 28 31 32 35 38 29 5d 5b 6a 32 28 31 31 32 36 29 5d 5b 6a 32 28 31 35 30 39 29 5d 28 43 2c 44 29 29 7b 69 66 28 64 5b 6a 32 28 35 32 33 29 5d 28 6a 32 28 31 32 38 36 29 2c 64 5b 6a 32 28 35 32 35 29 5d 29 29 7b 69 66 28 32 35 36 3e 44 5b 6a 32 28 31 35 36 33 29 5d 28 30 29 29 7b 66 6f 72 28 78 3d 30 3b 64 5b 6a 32 28 31 34 35 30 29 5d 28 78 2c 47 29 3b 49 3c 3c 3d 31 2c 6a 2d 31 3d 3d 4a 3f 28 4a 3d 30 2c 48 5b 6a 32 28 31 36 35 35 29 5d 28 64 5b 6a 32 28 37 32 35 Data Ascii: ++);D=(E--,d[j2(1949)](0,E)&&(E=Math[j2(672)](2,G),G++),B[M]=F++,String(L))}if(''!==D){if(Object[j2(1258)][j2(1126)][j2(1509)](C,D)){if(d[j2(523)](j2(1286),d[j2(525)])){if(256>D[j2(1563)](0)){for(x=0;d[j2(1450)](x,G);I<<=1,j-1==J?(J=0,H[j2(1655)](d[j2(725
2024-09-20 16:19:02 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 68 2c 6a 34 29 7b 72 65 74 75 72 6e 20 6a 34 3d 6a 30 2c 6e 75 6c 6c 3d 3d 68 3f 27 27 3a 27 27 3d 3d 68 3f 6e 75 6c 6c 3a 66 2e 69 28 68 5b 6a 34 28 31 37 36 38 29 5d 2c 33 32 37 36 38 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 35 29 7b 72 65 74 75 72 6e 20 6a 35 3d 6a 34 2c 68 5b 6a 35 28 31 35 36 33 29 5d 28 69 29 7d 29 7d 2c 27 69 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 6a 36 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4f 2c 4c 2c 4d 2c 4e 29 7b 66 6f 72 28 6a 36 3d 6a 30 2c 73 3d 5b 5d 2c 78 3d 34 2c 42 3d 34 2c 43 3d 33 2c 44 3d 5b 5d 2c 47 3d 6f 28 30 29 2c 48 3d 6a 2c 49 3d 31 2c 45 3d 30 3b 64 5b 6a 36 28 31 31 34 38 29 5d 28 33 2c 45 29 3b 73 5b 45 5d 3d 45 2c 45 2b 3d 31 29 3b 66 6f 72 28 Data Ascii: ction(h,j4){return j4=j0,null==h?'':''==h?null:f.i(h[j4(1768)],32768,function(i,j5){return j5=j4,h[j5(1563)](i)})},'i':function(i,j,o,j6,s,x,B,C,D,E,F,G,H,I,J,K,O,L,M,N){for(j6=j0,s=[],x=4,B=4,C=3,D=[],G=o(0),H=j,I=1,E=0;d[j6(1148)](3,E);s[E]=E,E+=1);for(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	56603	104.18.95.41	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:03 UTC	795	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/typiu/0x4AAAAAAAkF7znPRls4zQt2/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:03 UTC	210	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:19:03 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8c63228869220f80-EWR
2024-09-20 16:19:03 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	56604	104.18.94.41	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:03 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8c632282bca10ca8&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:03 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:19:03 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 114851 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8c63228c0f774414-EWR alt-svc: h3=":443"; ma=86400
2024-09-20 16:19:03 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 71 5a 4a 79 54 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.qZJyT2={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconce
2024-09-20 16:19:03 UTC	1369	IN	Data Raw: 72 74 20 68 61 73 20 62 65 65 6e 20 73 75 63 63 65 73 73 66 75 6c 6c 79 20 73 75 62 6d 69 74 74 65 64 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 65 6e 64 25 32 30 46 65 65 64 62 61 63 6b 22 2c 22 6f 75 74 64 61 74 65 64 5f 62 72 6f 77 73 65 72 22 3a 22 59 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 69 73 25 32 30 6f 75 74 25 32 30 6f 66 25 32 30 64 61 74 65 2e 25 32 30 55 70 64 61 74 65 25 32 30 79 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 74 6f 25 32 30 76 69 65 77 25 32 30 74 68 69 73 25 32 30 73 69 74 65 25 32 30 70 72 6f 70 65 72 6c 79 2e 25 33 43 62 72 25 32 46 25 33 45 25 33 43 61 25 32 30 74 61 72 67 65 74 25 33 44 25 32 32 5f 62 6c 61 6e 6b 25 32 32 25 32 30 72 65 6c 25 Data Ascii: rt has been successfully submitted","turnstile_feedback_description":"Send%20Feedback","outdated_browser":"Your%20browser%20is%20out%20of%20date.%20Update%20your%20browser%20to%20view%20this%20site%20properly.%3Cbr%2F%3E%3Ca%20target%3D%22_blank%22%20rel%
2024-09-20 16:19:03 UTC	1369	IN	Data Raw: 61 72 73 65 49 6e 74 28 67 48 28 39 38 30 29 29 2f 31 30 2c 66 3d 3d 3d 64 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 39 34 32 33 37 36 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 49 28 31 33 32 36 29 5d 2c 65 4f 3d 5b 5d 2c 65 50 3d 30 3b 32 35 36 3e 65 50 3b 65 4f 5b 65 50 5d 3d 53 74 72 69 6e 67 5b 67 49 28 33 33 39 29 5d 28 65 50 29 2c 65 50 2b 2b 29 3b 65 51 3d 28 30 2c 65 76 61 6c 29 28 67 49 28 31 33 32 34 29 29 2c 65 52 3d 61 74 6f 62 28 67 49 28 31 32 35 34 29 29 2c 66 68 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 68 68 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 66 6f 72 28 68 68 3d 67 Data Ascii: arseInt(gH(980))/10,f===d)break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,942376),eM=this\|\|self,eN=eM[gI(1326)],eO=[],eP=0;256>eP;eO[eP]=String[gI(339)](eP),eP++);eQ=(0,eval)(gI(1324)),eR=atob(gI(1254)),fh=function(f,hh,g,h,i,j,k,l,m){for(hh=g
2024-09-20 16:19:03 UTC	1369	IN	Data Raw: 78 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 59 5a 71 69 57 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 47 57 67 6d 52 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 45 56 4a 55 7a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 3d 68 7d 2c 27 56 43 56 4f 55 27 3a 68 57 28 31 33 32 31 29 2c 27 65 6a 61 76 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 64 54 78 50 78 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 72 66 5a 41 6d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c Data Ascii: x':function(h,i){return h==i},'YZqiW':function(h,i){return h-i},'GWgmR':function(h,i){return h>i},'EVJUz':function(h,i){return i!==h},'VCVOU':hW(1321),'ejavj':function(h,i){return h<i},'dTxPx':function(h,i){return h(i)},'rfZAm':function(h,i){return h==i},
2024-09-20 16:19:03 UTC	1369	IN	Data Raw: 28 31 35 38 36 29 5d 28 44 2c 4e 29 7c 7c 28 44 5b 4e 5d 3d 48 2b 2b 2c 45 5b 4e 5d 3d 21 30 29 2c 4f 3d 46 2b 4e 2c 4f 62 6a 65 63 74 5b 69 31 28 31 34 33 36 29 5d 5b 69 31 28 31 32 31 32 29 5d 5b 69 31 28 31 35 38 36 29 5d 28 44 2c 4f 29 29 46 3d 4f 3b 65 6c 73 65 7b 69 66 28 4f 62 6a 65 63 74 5b 69 31 28 31 34 33 36 29 5d 5b 69 31 28 31 32 31 32 29 5d 5b 69 31 28 31 35 38 36 29 5d 28 45 2c 46 29 29 7b 69 66 28 64 5b 69 31 28 31 35 35 36 29 5d 28 69 31 28 31 33 37 30 29 2c 69 31 28 35 37 35 29 29 29 7b 69 66 28 53 3d 48 5b 49 5d 2c 53 3d 3d 3d 27 66 27 26 26 28 53 3d 27 4e 27 29 2c 4a 5b 53 5d 29 7b 66 6f 72 28 54 3d 30 3b 54 3c 4b 5b 4c 5b 4d 5d 5d 5b 69 31 28 31 30 33 30 29 5d 3b 42 5b 69 31 28 35 32 34 29 5d 28 2d 31 2c 4e 5b 53 5d 5b 69 31 28 31 31 Data Ascii: (1586)](D,N)\|\|(D[N]=H++,E[N]=!0),O=F+N,Object[i1(1436)][i1(1212)][i1(1586)](D,O))F=O;else{if(Object[i1(1436)][i1(1212)][i1(1586)](E,F)){if(d[i1(1556)](i1(1370),i1(575))){if(S=H[I],S==='f'&&(S='N'),J[S]){for(T=0;T<K[L[M]][i1(1030)];B[i1(524)](-1,N[S][i1(11
2024-09-20 16:19:03 UTC	1369	IN	Data Raw: 39 29 5d 28 29 2c 65 26 26 78 28 42 29 2c 43 28 29 7d 65 6c 73 65 7b 66 6f 72 28 43 3d 30 3b 64 5b 69 31 28 31 32 35 33 29 5d 28 43 2c 49 29 3b 4b 3c 3c 3d 31 2c 4c 3d 3d 64 5b 69 31 28 36 39 31 29 5d 28 6f 2c 31 29 3f 28 4c 3d 30 2c 4a 5b 69 31 28 36 37 32 29 5d 28 64 5b 69 31 28 33 37 34 29 5d 28 73 2c 4b 29 29 2c 4b 3d 30 29 3a 4c 2b 2b 2c 43 2b 2b 29 3b 66 6f 72 28 50 3d 46 5b 69 31 28 31 33 33 37 29 5d 28 30 29 2c 43 3d 30 3b 64 5b 69 31 28 31 33 38 38 29 5d 28 38 2c 43 29 3b 4b 3d 4b 3c 3c 31 7c 50 26 31 2c 6f 2d 31 3d 3d 4c 3f 28 4c 3d 30 2c 4a 5b 69 31 28 36 37 32 29 5d 28 73 28 4b 29 29 2c 4b 3d 30 29 3a 4c 2b 2b 2c 50 3e 3e 3d 31 2c 43 2b 2b 29 3b 7d 7d 65 6c 73 65 7b 66 6f 72 28 50 3d 31 2c 43 3d 30 3b 64 5b 69 31 28 37 37 38 29 5d 28 43 2c 49 Data Ascii: 9)](),e&&x(B),C()}else{for(C=0;d[i1(1253)](C,I);K<<=1,L==d[i1(691)](o,1)?(L=0,J[i1(672)](d[i1(374)](s,K)),K=0):L++,C++);for(P=F[i1(1337)](0),C=0;d[i1(1388)](8,C);K=K<<1\|P&1,o-1==L?(L=0,J[i1(672)](s(K)),K=0):L++,P>>=1,C++);}}else{for(P=1,C=0;d[i1(778)](C,I
2024-09-20 16:19:03 UTC	1369	IN	Data Raw: 64 5b 69 36 28 37 33 31 29 5d 28 47 2c 48 29 2c 48 3e 3e 3d 31 2c 48 3d 3d 30 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 28 30 3c 4c 3f 31 3a 30 29 2a 46 2c 46 3c 3c 3d 31 29 3b 4d 3d 64 5b 69 36 28 34 31 38 29 5d 28 65 2c 4a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 69 36 28 35 33 39 29 5d 28 32 2c 31 36 29 2c 46 3d 31 3b 64 5b 69 36 28 31 30 39 34 29 5d 28 46 2c 4b 29 3b 4c 3d 48 26 47 2c 48 3e 3e 3d 31 2c 64 5b 69 36 28 31 34 32 37 29 5d 28 30 2c 48 29 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 28 64 5b 69 36 28 37 37 38 29 5d 28 30 2c 4c 29 3f 31 3a 30 29 2a 46 2c 46 3c 3c 3d 31 29 3b 4d 3d 64 5b 69 36 28 33 37 34 29 5d 28 65 2c 4a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 Data Ascii: d[i6(731)](G,H),H>>=1,H==0&&(H=j,G=o(I++)),J\|=(0<L?1:0)F,F<<=1);M=d[i6(418)](e,J);break;case 1:for(J=0,K=Math[i6(539)](2,16),F=1;d[i6(1094)](F,K);L=H&G,H>>=1,d[i6(1427)](0,H)&&(H=j,G=o(I++)),J\|=(d[i6(778)](0,L)?1:0)F,F<<=1);M=d[i6(374)](e,J);break;case
2024-09-20 16:19:03 UTC	1369	IN	Data Raw: 49 29 7d 7d 2c 68 3d 3d 3d 6e 75 6c 6c 7c 7c 68 3d 3d 3d 76 6f 69 64 20 30 29 72 65 74 75 72 6e 20 6a 3b 66 6f 72 28 78 3d 66 41 28 68 29 2c 67 5b 69 61 28 31 31 39 35 29 5d 5b 69 61 28 31 34 32 33 29 5d 26 26 28 78 3d 78 5b 69 61 28 31 30 39 35 29 5d 28 67 5b 69 61 28 31 31 39 35 29 5d 5b 69 61 28 31 34 32 33 29 5d 28 68 29 29 29 2c 78 3d 67 5b 69 61 28 31 36 32 33 29 5d 5b 69 61 28 31 31 34 38 29 5d 26 26 67 5b 69 61 28 36 36 39 29 5d 3f 67 5b 69 61 28 31 36 32 33 29 5d 5b 69 61 28 31 31 34 38 29 5d 28 6e 65 77 20 67 5b 28 69 61 28 36 36 39 29 29 5d 28 78 29 29 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 69 63 2c 48 29 7b 66 6f 72 28 69 63 3d 69 61 2c 47 5b 69 63 28 36 39 35 29 5d 28 29 2c 48 3d 30 3b 48 3c 47 5b 69 63 28 31 30 33 30 29 5d 3b 47 5b 48 2b 31 5d Data Ascii: I)}},h===null\|\|h===void 0)return j;for(x=fA(h),g[ia(1195)][ia(1423)]&&(x=x[ia(1095)](g[ia(1195)][ia(1423)](h))),x=g[ia(1623)][ia(1148)]&&g[ia(669)]?g[ia(1623)][ia(1148)](new g[(ia(669))](x)):function(G,ic,H){for(ic=ia,G[ic(695)](),H=0;H<G[ic(1030)];G[H+1]
2024-09-20 16:19:03 UTC	1369	IN	Data Raw: 3d 30 3b 69 5b 69 65 28 33 38 31 29 5d 28 6d 2c 68 5b 6a 5b 6b 5d 5d 5b 69 65 28 31 30 33 30 29 5d 29 3b 69 5b 69 65 28 37 30 37 29 5d 28 2d 31 2c 67 5b 6c 5d 5b 69 65 28 31 31 35 37 29 5d 28 68 5b 6a 5b 6b 5d 5d 5b 6d 5d 29 29 26 26 28 66 43 28 68 5b 6a 5b 6b 5d 5d 5b 6d 5d 29 7c 7c 67 5b 6c 5d 5b 69 65 28 36 37 32 29 5d 28 27 6f 2e 27 2b 68 5b 6a 5b 6b 5d 5d 5b 6d 5d 29 29 2c 6d 2b 2b 29 3b 7d 65 6c 73 65 20 67 5b 6c 5d 3d 68 5b 6a 5b 6b 5d 5d 5b 69 65 28 31 34 32 35 29 5d 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 69 67 29 7b 69 66 28 69 67 3d 69 65 2c 69 67 28 31 33 31 36 29 3d 3d 3d 69 5b 69 67 28 38 36 37 29 5d 29 72 65 74 75 72 6e 27 6f 2e 27 2b 6e 3b 65 6c 73 65 20 69 5b 69 67 28 33 38 32 29 5d 28 6c 2c 67 2c 68 29 7d 29 7d 2c 65 4d 5b 67 49 28 39 39 31 Data Ascii: =0;i[ie(381)](m,h[j[k]][ie(1030)]);i[ie(707)](-1,g[l][ie(1157)](h[j[k]][m]))&&(fC(h[j[k]][m])\|\|g[l][ie(672)]('o.'+h[j[k]][m])),m++);}else g[l]=h[j[k]][ie(1425)](function(n,ig){if(ig=ie,ig(1316)===i[ig(867)])return'o.'+n;else i[ig(382)](l,g,h)})},eM[gI(991
2024-09-20 16:19:03 UTC	1369	IN	Data Raw: 6a 28 31 31 39 39 29 5d 5b 69 6a 28 31 34 36 39 29 5d 2c 6f 5b 69 6a 28 31 31 34 36 29 5d 3d 65 4d 5b 69 6a 28 31 31 39 39 29 5d 5b 69 6a 28 31 31 34 36 29 5d 2c 73 3d 6f 2c 78 3d 6e 65 77 20 65 4d 5b 28 69 6a 28 39 32 35 29 29 5d 28 29 2c 21 78 29 72 65 74 75 72 6e 3b 42 3d 6b 5b 69 6a 28 31 32 38 36 29 5d 2c 78 5b 69 6a 28 31 35 34 35 29 5d 28 42 2c 6e 2c 21 21 5b 5d 29 2c 78 5b 69 6a 28 35 36 36 29 5d 3d 32 35 30 30 2c 78 5b 69 6a 28 31 30 38 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 78 5b 69 6a 28 31 31 31 35 29 5d 28 69 6a 28 31 33 39 34 29 2c 69 6a 28 36 32 30 29 29 2c 43 3d 7b 7d 2c 43 5b 69 6a 28 31 32 38 39 29 5d 3d 67 2c 43 2e 63 63 3d 68 2c 43 5b 69 6a 28 36 36 34 29 5d 3d 6c 2c 43 5b 69 6a 28 31 32 37 34 29 5d 3d 73 2c 44 3d 4a 53 4f Data Ascii: j(1199)][ij(1469)],o[ij(1146)]=eM[ij(1199)][ij(1146)],s=o,x=new eM[(ij(925))](),!x)return;B=k[ij(1286)],x[ij(1545)](B,n,!![]),x[ij(566)]=2500,x[ij(1088)]=function(){},x[ij(1115)](ij(1394),ij(620)),C={},C[ij(1289)]=g,C.cc=h,C[ij(664)]=l,C[ij(1274)]=s,D=JSO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	56605	104.18.94.41	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:03 UTC	438	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:03 UTC	210	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:19:03 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8c63228cbef643f2-EWR
2024-09-20 16:19:03 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	56606	104.18.95.41	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:03 UTC	926	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1871845430:1726845417:FbKGXq3vHvORmlg6oISBtBOotzZym52Uy_BS_Q--sjQ/8c632282bca10ca8/c509a54a750866d HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 2818 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: c509a54a750866d sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/typiu/0x4AAAAAAAkF7znPRls4zQt2/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:03 UTC	2818	OUT	Data Raw: 76 5f 38 63 36 33 32 32 38 32 62 63 61 31 30 63 61 38 3d 4a 42 64 46 54 46 62 46 42 46 50 46 66 2d 55 70 2d 55 71 46 2d 67 68 4d 49 5a 2d 41 55 49 55 32 69 67 53 52 35 55 7a 51 57 55 35 35 2d 43 55 78 55 74 67 41 4d 6c 35 47 55 41 55 78 50 4d 35 6a 6b 73 4e 55 6b 46 49 6c 55 30 75 71 4d 43 55 41 46 55 43 4e 55 64 67 55 4e 32 34 63 78 6c 55 66 55 48 42 6b 74 69 71 75 62 73 43 55 7a 46 41 43 37 42 71 55 2d 4d 55 39 55 68 62 48 66 78 5a 4c 4e 73 36 78 74 4d 6b 73 62 55 63 55 73 50 55 36 78 74 51 78 25 32 62 52 48 74 6e 34 48 48 41 76 78 68 71 55 55 37 78 6c 55 4d 35 4d 51 78 51 42 75 55 55 6c 5a 55 49 4a 51 46 73 33 70 6d 53 55 55 6d 67 73 70 2b 63 67 33 47 54 4d 43 48 46 73 66 55 68 4e 55 41 43 52 55 48 37 44 42 46 49 43 55 68 67 4d 55 39 43 45 70 34 37 45 Data Ascii: v_8c632282bca10ca8=JBdFTFbFBFPFf-Up-UqF-ghMIZ-AUIU2igSR5UzQWU55-CUxUtgAMl5GUAUxPM5jksNUkFIlU0uqMCUAFUCNUdgUN24cxlUfUHBktiqubsCUzFAC7BqU-MU9UhbHfxZLNs6xtMksbUcUsPU6xtQx%2bRHtn4HHAvxhqUU7xlUM5MQxQBuUUlZUIJQFs3pmSUUmgsp+cg3GTMCHFsfUhNUACRUH7DBFICUhgMU9CEp47E
2024-09-20 16:19:04 UTC	717	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:19:03 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 152160 Connection: close cf-chl-gen: U9ytPGZe9uGjRvtPrlzhPRbWbwEBi9Cwj33Ed545OJ+TQRIu63B0ca7Tq3meZ0CzVCzjTxaJPrtaSUVyin3LZCOkUMNIuUq5EfiMygsEa/kfGC41kuoH6qfsM7Mpw0KkabImo4546M34ymxmhmvh6U4gCX7DFfAe7dsSc1r+QMhugF/hq3x8xm+7gah613PtSUeHe5PP2vPyGOhyrbiCbiSHN80TTBHDKonlWz/YkBO04YiIEHGp41TxCtBjn9aQTLCBZhZAbvuyuihrnKHbcim3k9EaJXG2bMc/FU09PF0I7O9WgC5i0A23puqW3ac8vxHep9WdI/GB1cNTm69GjkZWaQLH5J8Co71zYoNtkc7MIoFySQtnaw166FwWe5xIZxpzG/vgGU0Hon//o3UjRJmuB2CLv9iKHkJ8lRuG787/pqCvNp9aJzY342RctLeYnAGnpoH53rmOnEWr2q2XEDphgEby9CkBvRosOA5IViI0VD4=$AWGm6AI+VhIR9XrQ Server: cloudflare CF-RAY: 8c63228d4eb50c90-EWR
2024-09-20 16:19:04 UTC	652	IN	Data Raw: 69 5a 43 4e 6d 37 53 38 68 34 32 4a 77 62 4f 41 67 70 66 48 77 35 32 56 6b 34 79 59 68 59 48 51 6e 38 61 4c 77 59 76 43 72 73 71 58 31 72 71 63 74 5a 32 35 34 4d 2f 6a 30 63 4f 7a 76 73 6a 64 33 73 48 6a 76 2b 6e 75 75 38 57 2f 75 73 33 6e 77 61 2f 41 30 62 4f 36 36 50 43 35 35 37 2f 57 7a 62 76 51 37 73 55 45 34 67 44 49 42 77 45 4e 77 38 54 34 41 75 7a 53 45 41 6b 4a 47 50 50 6c 37 66 49 62 48 51 37 7a 39 52 34 55 36 77 34 65 2b 42 59 53 49 76 6e 30 42 41 7a 2b 4d 42 37 76 49 42 4d 78 36 7a 58 77 41 66 63 6e 47 51 58 37 4b 2f 67 67 2f 53 30 53 44 55 54 2b 44 78 55 63 41 69 45 57 43 45 49 4d 47 77 38 38 4b 56 4a 44 4e 42 41 33 51 68 45 77 4d 30 6b 59 53 69 74 58 47 6a 68 44 50 46 45 2f 49 79 5a 4b 49 6a 6c 48 4f 45 38 74 4b 45 5a 6f 4c 44 46 6e 61 32 5a Data Ascii: iZCNm7S8h42JwbOAgpfHw52Vk4yYhYHQn8aLwYvCrsqX1rqctZ254M/j0cOzvsjd3sHjv+nuu8W/us3nwa/A0bO66PC557/WzbvQ7sUE4gDIBwENw8T4AuzSEAkJGPPl7fIbHQ7z9R4U6w4e+BYSIvn0BAz+MB7vIBMx6zXwAfcnGQX7K/gg/S0SDUT+DxUcAiEWCEIMGw88KVJDNBA3QhEwM0kYSitXGjhDPFE/IyZKIjlHOE8tKEZoLDFna2Z
2024-09-20 16:19:04 UTC	1369	IN	Data Raw: 64 31 78 75 67 31 39 69 64 58 4f 58 6f 48 36 4a 6d 71 4f 47 5a 58 79 57 6f 4b 2b 47 71 6f 4b 47 74 6e 69 7a 6f 4c 79 69 6d 58 71 58 6c 73 61 77 74 72 79 37 68 4a 79 31 6e 61 62 49 72 70 48 55 72 64 54 4e 72 62 4b 74 74 4e 43 39 31 70 61 2f 30 70 2b 35 30 4b 36 68 77 64 62 48 36 70 7a 43 75 38 44 43 77 71 6e 69 72 50 4c 54 7a 64 37 49 34 63 6e 77 73 64 6e 62 37 4e 69 36 2b 4d 44 4c 30 67 48 30 41 64 33 32 41 4f 66 2b 35 76 76 72 2f 63 6f 4c 33 77 76 32 36 52 49 44 45 74 66 76 38 64 77 65 44 78 54 38 46 51 45 46 38 79 44 31 2f 4f 59 66 2b 41 45 44 4b 75 59 66 49 54 45 31 4a 42 55 73 46 79 38 4e 46 53 51 6d 4b 78 41 71 2f 55 45 74 39 52 41 35 4f 45 63 62 45 6b 4a 44 42 45 4e 51 4c 45 70 4d 55 31 41 66 49 55 59 51 55 53 6c 4a 47 7a 31 50 4e 68 6b 30 4f 52 30 Data Ascii: d1xug19idXOXoH6JmqOGZXyWoK+GqoKGtnizoLyimXqXlsawtry7hJy1nabIrpHUrdTNrbKttNC91pa/0p+50K6hwdbH6pzCu8DCwqnirPLTzd7I4cnwsdnb7Ni6+MDL0gH0Ad32AOf+5vvr/coL3wv26RIDEtfv8dweDxT8FQEF8yD1/OYf+AEDKuYfITE1JBUsFy8NFSQmKxAq/UEt9RA5OEcbEkJDBENQLEpMU1AfIUYQUSlJGz1PNhk0OR0
2024-09-20 16:19:04 UTC	1369	IN	Data Raw: 59 71 4c 72 47 53 62 66 72 42 71 6e 4a 2b 50 6b 72 61 4c 64 62 6c 78 6e 61 57 38 76 37 6d 33 69 33 33 46 6b 35 6d 6b 6e 71 4b 53 75 62 54 48 6f 72 65 66 6f 49 69 66 77 64 43 2b 30 64 62 52 6f 70 69 6d 30 71 79 65 79 61 76 52 73 62 47 6c 74 71 2b 66 31 4d 57 69 34 74 32 34 78 73 37 53 37 64 36 2b 72 4f 4c 79 37 65 2f 55 38 4c 54 4e 74 38 6a 52 37 66 6e 34 2f 62 66 33 77 67 62 34 78 67 50 68 2f 4f 66 66 44 73 37 61 30 41 38 53 7a 67 67 61 38 63 7a 79 39 76 72 55 39 76 73 67 33 50 50 75 37 78 51 52 38 79 48 35 48 2b 55 74 4c 42 67 4b 49 50 73 46 37 4f 38 4f 49 7a 45 78 49 2f 59 59 2f 52 6a 38 51 68 77 50 46 42 73 56 47 6a 45 52 4f 43 52 42 42 78 6f 34 54 45 51 6e 53 77 38 64 52 79 68 42 55 6b 38 57 47 55 6b 6f 56 46 6f 70 58 54 70 45 54 69 39 63 4d 79 51 39 Data Ascii: YqLrGSbfrBqnJ+PkraLdblxnaW8v7m3i33Fk5mknqKSubTHorefoIifwdC+0dbRopim0qyeyavRsbGltq+f1MWi4t24xs7S7d6+rOLy7e/U8LTNt8jR7fn4/bf3wgb4xgPh/OffDs7a0A8Szgga8czy9vrU9vsg3PPu7xQR8yH5H+UtLBgKIPsF7O8OIzExI/YY/Rj8QhwPFBsVGjEROCRBBxo4TEQnSw8dRyhBUk8WGUkoVFopXTpETi9cMyQ9
2024-09-20 16:19:04 UTC	1369	IN	Data Raw: 6d 6d 66 36 5a 2f 67 5a 4e 78 75 71 36 63 6a 4b 61 76 64 70 33 41 77 5a 78 38 6e 72 43 63 6e 49 47 53 6f 5a 57 31 7a 4d 69 4e 67 39 44 4d 76 4e 48 4f 30 63 48 42 31 4e 4f 61 78 5a 32 65 32 65 48 67 33 63 7a 68 6e 2b 48 51 34 5a 7a 6a 71 74 58 73 36 63 6e 43 30 62 79 74 30 36 2f 53 77 50 58 6f 73 66 6e 76 2f 4e 50 49 32 76 55 41 37 76 45 43 32 50 66 61 34 50 50 33 42 74 2f 58 7a 50 6f 49 43 50 77 51 43 65 77 49 47 4e 72 76 44 39 59 67 36 76 30 63 45 75 44 32 41 41 59 61 39 76 73 73 4a 67 30 4c 44 67 66 75 41 67 4d 64 45 67 33 79 39 65 37 33 4a 2f 62 75 4b 7a 7a 37 4c 76 66 30 45 68 39 45 49 78 51 66 4b 67 46 44 49 79 42 4b 4b 6a 77 74 4d 54 34 6d 43 43 55 6b 4e 6c 51 58 47 54 59 2b 4e 30 45 5a 51 6c 38 7a 49 47 59 6c 5a 43 5a 53 4b 55 4e 45 57 46 31 4a 63 Data Ascii: mmf6Z/gZNxuq6cjKavdp3AwZx8nrCcnIGSoZW1zMiNg9DMvNHO0cHB1NOaxZ2e2eHg3czhn+HQ4ZzjqtXs6cnC0byt06/SwPXosfnv/NPI2vUA7vEC2Pfa4PP3Bt/XzPoICPwQCewIGNrvD9Yg6v0cEuD2AAYa9vssJg0LDgfuAgMdEg3y9e73J/buKzz7Lvf0Eh9EIxQfKgFDIyBKKjwtMT4mCCUkNlQXGTY+N0EZQl8zIGYlZCZSKUNEWF1Jc
2024-09-20 16:19:04 UTC	1369	IN	Data Raw: 7a 6f 58 52 33 70 37 4f 38 6d 37 69 4e 76 61 4f 39 70 61 47 69 70 4c 61 54 70 72 6d 46 75 35 75 62 6f 72 4f 76 7a 70 57 57 7a 64 6d 30 30 73 37 4a 33 72 76 58 6e 4e 66 59 72 4f 54 46 78 39 4b 34 79 4e 33 5a 76 2b 75 36 75 75 37 52 7a 37 75 38 73 4d 65 2f 79 63 6d 77 79 64 33 56 32 73 6e 4e 7a 4e 37 63 42 73 37 63 39 4c 72 6f 39 4c 30 4b 42 76 6e 76 34 2b 54 78 7a 77 67 56 38 2f 41 4d 39 67 55 62 43 52 66 79 39 77 76 77 2b 78 54 38 33 68 4d 5a 33 76 6a 37 46 77 7a 70 36 42 45 41 2f 75 67 67 42 41 4d 42 4a 66 49 31 50 50 59 2b 42 68 30 75 43 52 77 33 41 42 59 53 49 52 6b 2b 4d 7a 73 2f 44 45 4d 5a 43 51 67 74 4c 6b 42 44 4a 6c 56 4e 4f 69 78 47 56 52 73 70 4e 7a 4d 34 48 30 78 61 5a 43 56 44 4e 30 45 6c 56 44 6c 47 50 6c 68 43 4f 6b 35 4d 51 6c 56 70 52 32 Data Ascii: zoXR3p7O8m7iNvaO9paGipLaTprmFu5uborOvzpWWzdm00s7J3rvXnNfYrOTFx9K4yN3Zv+u6uu7Rz7u8sMe/ycmwyd3V2snNzN7cBs7c9Lro9L0KBvnv4+TxzwgV8/AM9gUbCRfy9wvw+xT83hMZ3vj7Fwzp6BEA/uggBAMBJfI1PPY+Bh0uCRw3ABYSIRk+Mzs/DEMZCQgtLkBDJlVNOixGVRspNzM4H0xaZCVDN0ElVDlGPlhCOk5MQlVpR2
2024-09-20 16:19:04 UTC	1369	IN	Data Raw: 6f 48 6d 65 77 71 32 6a 6c 72 6d 78 76 62 79 42 74 62 32 4c 74 72 2b 36 6d 34 53 38 79 73 72 48 6c 38 2b 72 79 61 6d 6c 74 61 65 73 7a 35 69 36 72 4e 71 74 74 72 71 6d 6d 36 6a 63 6f 72 66 6e 34 61 2f 73 79 63 72 45 72 64 48 4b 78 4e 57 31 30 38 76 51 38 72 76 73 30 4d 37 42 35 64 4c 67 77 67 6e 46 32 41 7a 44 44 41 66 63 34 74 73 4e 45 50 7a 53 43 67 62 71 43 68 49 54 37 68 7a 71 48 51 76 34 41 75 37 78 2f 67 55 41 42 66 72 7a 43 53 41 59 41 41 30 6a 2f 76 6f 51 45 53 45 41 45 41 45 74 44 42 62 30 42 78 51 61 39 7a 67 76 44 52 49 6e 45 43 41 57 46 78 6f 6b 4a 51 68 47 55 54 4a 48 53 43 6b 55 55 68 51 6f 4e 54 63 55 58 52 77 31 50 56 35 4c 57 7a 49 62 51 6c 42 6e 4e 43 55 6c 57 43 51 6f 59 45 52 45 61 6a 42 79 52 79 39 32 63 6e 64 56 61 46 64 6c 4e 56 46 Data Ascii: oHmewq2jlrmxvbyBtb2Ltr+6m4S8ysrHl8+ryamltaesz5i6rNqttrqmm6jcorfn4a/sycrErdHKxNW108vQ8rvs0M7B5dLgwgnF2AzDDAfc4tsNEPzSCgbqChIT7hzqHQv4Au7x/gUABfrzCSAYAA0j/voQESEAEAEtDBb0BxQa9zgvDRInECAWFxokJQhGUTJHSCkUUhQoNTcUXRw1PV5LWzIbQlBnNCUlWCQoYEREajByRy92cndVaFdlNVF
2024-09-20 16:19:04 UTC	1369	IN	Data Raw: 73 47 30 77 4c 4b 30 78 72 71 33 76 61 75 43 69 70 4c 53 30 73 54 49 6f 4d 50 46 79 64 79 34 70 74 36 78 34 4e 66 55 73 61 43 78 34 39 53 30 74 4c 76 46 74 4f 54 72 7a 74 75 72 32 2f 54 75 73 37 50 30 77 37 48 46 35 65 7a 4e 36 4f 66 75 2f 50 47 38 31 4d 2f 65 34 4e 76 47 38 67 45 46 77 38 66 50 30 4f 77 4a 38 77 48 64 45 66 54 52 46 39 4d 63 43 51 73 49 49 41 34 4c 47 65 4d 44 42 75 41 52 2f 75 48 71 2b 42 37 32 41 51 59 6e 44 79 41 75 44 65 73 54 47 51 37 77 42 41 37 34 42 78 55 52 4f 45 45 4f 41 69 45 36 46 77 63 57 4e 45 77 67 49 41 6f 6e 41 68 35 47 55 51 73 79 55 79 51 68 4c 6b 56 50 4c 56 35 47 4b 46 39 63 4c 31 6b 33 4d 46 5a 43 61 46 4e 41 57 78 35 61 51 55 52 6a 51 47 34 79 58 57 52 6c 4c 6c 4a 49 62 47 6c 4d 57 33 6c 52 66 6a 73 39 55 31 6c 43 Data Ascii: sG0wLK0xrq3vauCipLS0sTIoMPFydy4pt6x4NfUsaCx49S0tLvFtOTrztur2/Tus7P0w7HF5ezN6Ofu/PG81M/e4NvG8gEFw8fP0OwJ8wHdEfTRF9McCQsIIA4LGeMDBuAR/uHq+B72AQYnDyAuDesTGQ7wBA74BxUROEEOAiE6FwcWNEwgIAonAh5GUQsyUyQhLkVPLV5GKF9cL1k3MFZCaFNAWx5aQURjQG4yXWRlLlJIbGlMW3lRfjs9U1lC
2024-09-20 16:19:04 UTC	1369	IN	Data Raw: 61 33 69 38 57 4b 69 4b 47 38 6a 4a 43 31 76 36 71 32 75 36 32 7a 79 62 58 63 75 4c 6d 33 72 4e 4b 6b 30 4b 2b 35 6f 4d 62 41 31 4d 58 69 70 75 7a 48 38 61 58 79 36 36 6a 69 36 2b 47 35 74 65 75 32 2b 77 43 39 31 4f 48 7a 35 66 7a 39 32 2f 33 66 31 75 72 57 37 75 4c 59 36 75 62 72 30 4e 49 54 33 2b 49 50 37 4f 58 58 2f 64 30 65 48 75 6e 35 46 52 66 62 39 43 41 47 43 65 63 66 43 67 30 45 4b 76 76 76 49 6a 48 39 49 42 49 73 4c 51 55 4b 46 54 51 4d 4b 42 41 35 48 30 49 74 47 76 77 47 2f 66 6b 34 49 6a 30 37 4b 30 30 48 42 67 30 66 4b 77 59 72 4d 45 52 52 53 56 67 54 4d 54 55 6e 4e 46 70 4d 57 6c 56 58 4c 56 67 2f 4d 7a 45 6a 4a 45 67 6f 51 57 42 52 4b 47 68 76 51 44 4e 75 4e 33 51 32 52 48 42 31 64 55 68 38 65 6b 6c 63 54 44 74 2b 56 33 56 33 4f 33 39 6a 64 Data Ascii: a3i8WKiKG8jJC1v6q2u62zybXcuLm3rNKk0K+5oMbA1MXipuzH8aXy66ji6+G5teu2+wC91OHz5fz92/3f1urW7uLY6ubr0NIT3+IP7OXX/d0eHun5FRfb9CAGCecfCg0EKvvvIjH9IBIsLQUKFTQMKBA5H0ItGvwG/fk4Ij07K00HBg0fKwYrMERRSVgTMTUnNFpMWlVXLVg/MzEjJEgoQWBRKGhvQDNuN3Q2RHB1dUh8eklcTDt+V3V3O39jd
2024-09-20 16:19:04 UTC	1369	IN	Data Raw: 65 72 64 43 2f 74 62 54 58 77 37 50 4f 74 72 32 39 72 4c 36 36 77 63 43 2b 7a 37 4b 30 78 74 58 48 6f 37 72 72 76 74 37 4a 76 38 47 38 33 37 2b 2f 39 74 58 47 78 50 71 35 32 4e 75 34 7a 65 2f 4f 33 51 48 76 34 4f 45 46 31 4f 54 5a 2b 4f 37 6f 37 64 72 7a 37 4f 45 51 36 76 44 31 30 66 58 7a 2b 74 77 4c 36 4f 6a 39 41 2b 77 6a 38 66 48 77 41 51 4c 35 39 69 44 2b 43 67 77 4b 38 41 67 43 37 43 67 67 45 43 73 54 47 68 6f 4a 47 78 63 65 48 52 73 73 44 78 45 6a 4d 69 51 41 46 30 67 62 4f 79 59 63 48 68 6b 38 48 42 78 54 4d 69 4d 68 56 78 59 31 4f 42 55 71 54 43 73 39 4d 79 39 42 48 56 55 30 52 44 5a 64 4e 30 70 72 62 54 78 50 54 6b 63 38 58 58 51 78 51 30 46 53 61 45 70 45 56 56 4a 4d 53 55 6c 73 57 57 42 34 57 32 42 58 51 49 52 6f 5a 58 39 6d 58 47 74 75 61 33 Data Ascii: erdC/tbTXw7POtr29rL66wcC+z7K0xtXHo7rrvt7Jv8G837+/9tXGxPq52Nu4ze/O3QHv4OEF1OTZ+O7o7drz7OEQ6vD10fXz+twL6Oj9A+wj8fHwAQL59iD+CgwK8AgC7CggECsTGhoJGxceHRssDxEjMiQAF0gbOyYcHhk8HBxTMiMhVxY1OBUqTCs9My9BHVU0RDZdN0prbTxPTkc8XXQxQ0FSaEpEVVJMSUlsWWB4W2BXQIRoZX9mXGtua3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	56607	104.18.94.41	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:05 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1871845430:1726845417:FbKGXq3vHvORmlg6oISBtBOotzZym52Uy_BS_Q--sjQ/8c632282bca10ca8/c509a54a750866d HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:05 UTC	349	IN	HTTP/1.1 404 Not Found Date: Fri, 20 Sep 2024 16:19:05 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: k+2RQ7PFlFbex4L1mQwQV3yRKOxXDVtlDLU=$muXTn+LnMgcKmtCl Server: cloudflare CF-RAY: 8c6322957add196c-EWR
2024-09-20 16:19:05 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	56608	104.18.95.41	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:05 UTC	785	OUT	GET /cdn-cgi/challenge-platform/h/g/i/8c632282bca10ca8/1726849143907/LtWr2GXQoUD_DTw HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/typiu/0x4AAAAAAAkF7znPRls4zQt2/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:05 UTC	170	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:19:05 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8c6322975acac477-EWR
2024-09-20 16:19:05 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1d 00 00 00 08 08 02 00 00 00 8a ea 63 70 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRcpIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	56609	104.18.94.41	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:06 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/g/i/8c632282bca10ca8/1726849143907/LtWr2GXQoUD_DTw HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:06 UTC	170	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:19:06 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8c63229b59cfc46b-EWR
2024-09-20 16:19:06 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1d 00 00 00 08 08 02 00 00 00 8a ea 63 70 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRcpIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	56610	104.18.95.41	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:06 UTC	814	OUT	GET /cdn-cgi/challenge-platform/h/g/pat/8c632282bca10ca8/1726849143911/fa4092e998a320fdfbc9dc194cb0e3e8e301a943526de5a57d8d95406e33352c/r84pGs9MwbQPcgS HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/typiu/0x4AAAAAAAkF7znPRls4zQt2/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:06 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Fri, 20 Sep 2024 16:19:06 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-09-20 16:19:06 UTC	1985	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 2d 6b 43 53 36 5a 69 6a 49 50 33 37 79 64 77 5a 54 4c 44 6a 36 4f 4d 42 71 55 4e 53 62 65 57 6c 66 59 32 56 51 47 34 7a 4e 53 77 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20g-kCS6ZijIP37ydwZTLDj6OMBqUNSbeWlfY2VQG4zNSwAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-09-20 16:19:06 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	56611	104.18.95.41	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:07 UTC	927	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1871845430:1726845417:FbKGXq3vHvORmlg6oISBtBOotzZym52Uy_BS_Q--sjQ/8c632282bca10ca8/c509a54a750866d HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 31456 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: c509a54a750866d sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/typiu/0x4AAAAAAAkF7znPRls4zQt2/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:07 UTC	16384	OUT	Data Raw: 76 5f 38 63 36 33 32 32 38 32 62 63 61 31 30 63 61 38 3d 4a 42 64 46 79 2d 73 4e 6b 75 6b 68 4d 49 43 55 31 55 48 75 64 2d 75 73 71 55 30 46 51 35 68 52 43 73 65 55 6d 35 49 4e 55 49 55 73 6c 6b 51 51 32 73 4b 51 55 41 63 49 33 4d 53 4e 73 6a 55 75 67 2d 74 5a 55 37 67 2d 47 55 74 4f 30 52 55 75 50 64 55 36 2d 55 33 6f 62 6d 55 51 71 67 55 63 39 51 52 63 46 55 54 41 68 4d 73 30 34 35 73 4b 41 46 69 55 6a 7a 61 55 4b 46 55 5a 71 55 4d 67 2d 52 43 43 4a 32 46 73 76 51 49 73 51 51 55 65 46 55 77 52 62 64 6e 73 55 35 50 55 51 42 64 4a 50 6a 73 6b 31 53 78 55 73 64 50 4a 72 45 69 46 74 6d 48 6c 35 68 6e 4e 49 73 6e 6c 62 35 55 63 72 42 50 34 52 35 55 74 62 25 32 62 50 64 62 4b 52 6e 70 4b 67 55 6d 62 53 62 32 39 4a 2b 37 2b 4f 36 4d 45 78 64 54 45 53 68 70 5a Data Ascii: v_8c632282bca10ca8=JBdFy-sNkukhMICU1UHud-usqU0FQ5hRCseUm5INUIUslkQQ2sKQUAcI3MSNsjUug-tZU7g-GUtO0RUuPdU6-U3obmUQqgUc9QRcFUTAhMs045sKAFiUjzaUKFUZqUMg-RCCJ2FsvQIsQQUeFUwRbdnsU5PUQBdJPjsk1SxUsdPJrEiFtmHl5hnNIsnlb5UcrBP4R5Utb%2bPdbKRnpKgUmbSb29J+7+O6MExdTEShpZ
2024-09-20 16:19:07 UTC	15072	OUT	Data Raw: 35 30 46 73 61 42 46 53 35 68 6b 73 59 65 73 35 56 46 2d 46 55 4e 78 5a 73 69 55 74 33 51 2d 55 32 52 34 35 53 7a 78 64 54 34 46 2d 42 55 4c 55 2d 67 73 55 73 78 55 68 7a 49 64 55 74 55 31 35 41 5a 55 35 55 2b 35 55 5a 55 76 55 75 55 2d 52 55 35 55 4d 67 68 33 55 39 55 68 55 48 2d 43 62 55 35 67 68 6b 63 35 55 37 64 51 46 73 68 46 43 64 49 35 73 33 4d 30 43 70 65 6d 37 24 64 46 57 35 55 4e 55 39 64 2d 46 73 44 55 68 5a 55 4d 68 44 55 6c 55 41 64 68 70 7a 2b 35 2d 24 33 34 55 74 67 68 55 55 79 46 64 50 68 2d 63 4c 55 46 35 48 4e 55 43 55 58 46 68 51 74 5a 55 2d 65 53 58 35 65 6b 51 46 57 46 6b 4e 61 74 2d 54 65 59 71 5a 6d 54 56 51 73 50 58 70 6c 53 74 59 69 58 4a 4a 5a 65 59 77 58 70 54 69 36 59 41 58 78 59 41 53 59 32 32 43 70 4f 6c 73 71 58 2b 2d 6c 33 Data Ascii: 50FsaBFS5hksYes5VF-FUNxZsiUt3Q-U2R45SzxdT4F-BULU-gsUsxUhzIdUtU15AZU5U+5UZUvUuU-RU5UMgh3U9UhUH-CbU5ghkc5U7dQFshFCdI5s3M0Cpem7$dFW5UNU9d-FsDUhZUMhDUlUAdhpz+5-$34UtghUUyFdPh-cLUF5HNUCUXFhQtZU-eSX5ekQFWFkNat-TeYqZmTVQsPXplStYiXJJZeYwXpTi6YAXxYASY22CpOlsqX+-l3
2024-09-20 16:19:07 UTC	300	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:19:07 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26844 Connection: close cf-chl-gen: ENWLHLCF0PSvY/vlgdheQ7m7nAPhfYoJKehzmkuB4ADac9UWIJO3zL6RGKAX5sCzvQtG3km/laUdGmX1$Hm0xm6LgJLJjKHKs Server: cloudflare CF-RAY: 8c6322a2ef9e1a3c-EWR
2024-09-20 16:19:07 UTC	1069	IN	Data Raw: 69 5a 43 4e 6d 37 53 57 71 61 47 51 73 5a 75 78 6a 6f 53 38 76 72 36 63 6e 37 36 62 6c 34 62 43 6e 35 75 6e 73 36 61 66 72 36 75 6b 6d 4b 76 45 78 72 75 56 77 5a 66 66 31 4e 57 68 76 4a 2b 7a 36 4c 32 39 77 73 48 4a 35 61 6e 42 76 65 48 79 79 2f 62 46 34 71 76 77 39 37 72 49 37 4e 50 51 7a 75 72 66 33 2b 58 54 31 67 45 4a 39 41 6e 6f 43 65 72 4b 36 2f 48 76 33 67 4c 55 36 77 45 4a 46 4f 62 52 42 68 55 57 43 67 4c 74 2f 4f 73 57 45 67 63 5a 42 43 50 6d 34 69 76 37 43 43 49 67 2f 51 4c 6c 2f 53 62 73 45 77 73 61 43 68 30 79 46 2f 67 33 38 69 30 34 51 7a 6b 6e 53 44 38 41 4e 42 6f 62 4c 52 59 72 54 53 30 4e 4a 6b 51 2b 54 43 35 54 57 52 67 6c 4a 55 59 2f 53 6c 30 35 47 53 4d 69 55 42 30 39 57 55 55 69 56 53 77 6c 4f 57 42 6e 59 6b 70 51 52 45 5a 6e 63 46 42 Data Ascii: iZCNm7SWqaGQsZuxjoS8vr6cn76bl4bCn5uns6afr6ukmKvExruVwZff1NWhvJ+z6L29wsHJ5anBveHyy/bF4qvw97rI7NPQzurf3+XT1gEJ9AnoCerK6/Hv3gLU6wEJFObRBhUWCgLt/OsWEgcZBCPm4iv7CCIg/QLl/SbsEwsaCh0yF/g38i04QzknSD8ANBobLRYrTS0NJkQ+TC5TWRglJUY/Sl05GSMiUB09WUUiVSwlOWBnYkpQREZncFB
2024-09-20 16:19:07 UTC	1369	IN	Data Raw: 4e 6e 58 71 64 6d 39 74 4a 61 64 35 62 72 44 6f 61 4b 30 78 4d 4c 70 74 39 48 49 37 64 32 71 73 36 69 33 39 36 2f 51 37 73 76 78 78 39 76 78 38 4e 37 69 42 66 53 39 33 74 48 39 36 2b 6b 4e 7a 65 48 6c 45 73 76 71 36 42 58 6f 41 52 4d 55 46 51 77 50 39 2b 6b 61 39 50 30 56 37 77 51 43 47 52 72 31 36 43 55 46 35 78 30 75 4c 65 30 49 4d 75 6b 7a 43 51 67 30 4e 76 41 47 4f 43 59 30 4f 44 7a 37 49 66 6a 2b 45 68 38 69 42 79 67 43 4b 53 45 6a 41 79 78 47 51 43 59 72 4a 51 78 51 45 7a 39 44 55 45 4e 62 4a 6c 4d 78 47 46 42 63 48 79 31 59 58 53 4a 6e 61 57 59 6f 56 31 73 37 4c 6c 73 74 59 54 77 79 4c 30 78 41 4d 6e 68 4e 4e 32 73 38 62 31 59 38 61 33 56 76 58 56 5a 74 51 56 5a 34 57 6b 4e 54 65 49 78 6f 5a 34 64 75 5a 32 56 79 59 59 79 45 55 59 71 54 56 6f 64 70 Data Ascii: NnXqdm9tJad5brDoaK0xMLpt9HI7d2qs6i396/Q7svxx9vx8N7iBfS93tH96+kNzeHlEsvq6BXoARMUFQwP9+ka9P0V7wQCGRr16CUF5x0uLe0IMukzCQg0NvAGOCY0ODz7Ifj+Eh8iBygCKSEjAyxGQCYrJQxQEz9DUENbJlMxGFBcHy1YXSJnaWYoV1s7LlstYTwyL0xAMnhNN2s8b1Y8a3VvXVZtQVZ4WkNTeIxoZ4duZ2VyYYyEUYqTVodp
2024-09-20 16:19:07 UTC	1369	IN	Data Raw: 47 34 75 75 66 49 74 37 7a 57 37 65 47 39 38 4e 43 6a 38 39 44 55 79 66 4f 78 31 63 2b 34 35 2b 7a 33 33 63 76 59 34 66 6e 31 35 4c 37 47 42 50 77 4a 44 4f 49 4a 34 75 67 4a 78 38 50 6a 7a 41 44 79 41 74 58 68 32 4f 6a 75 46 51 37 6d 32 74 67 61 47 41 2f 31 39 43 62 6a 4a 67 67 57 49 42 38 61 4a 42 77 50 36 54 4c 39 35 75 63 54 4c 78 51 30 4f 78 72 75 2f 41 67 38 4c 53 41 36 52 54 41 41 4f 69 4d 32 50 79 77 49 4f 67 63 2b 49 53 78 46 48 6a 46 43 48 78 39 48 56 45 4e 44 4f 46 6b 79 4e 79 6f 66 49 6a 67 35 48 32 64 41 4a 54 52 6c 52 32 6c 70 4f 57 52 6f 5a 6c 39 42 58 6a 46 4c 56 48 4a 68 57 56 68 6c 55 6c 56 6e 56 6e 71 43 58 30 52 50 5a 57 64 53 53 48 4a 2f 68 6d 6c 4c 62 5a 47 51 54 32 56 76 5a 34 5a 57 6d 57 68 35 62 5a 70 32 66 5a 53 63 69 33 75 61 6c Data Ascii: G4uufIt7zW7eG98NCj89DUyfOx1c+45+z33cvY4fn15L7GBPwJDOIJ4ugJx8PjzADyAtXh2OjuFQ7m2tgaGA/19CbjJggWIB8aJBwP6TL95ucTLxQ0Oxru/Ag8LSA6RTAAOiM2PywIOgc+ISxFHjFCHx9HVENDOFkyNyofIjg5H2dAJTRlR2lpOWRoZl9BXjFLVHJhWVhlUlVnVnqCX0RPZWdSSHJ/hmlLbZGQT2VvZ4ZWmWh5bZp2fZSci3ual
2024-09-20 16:19:07 UTC	1369	IN	Data Raw: 56 37 62 75 6e 75 38 50 5a 33 36 2f 4b 79 2b 50 56 36 37 54 61 2b 75 66 78 79 39 2f 50 79 66 48 4f 30 74 37 61 34 65 4c 6c 32 38 76 64 34 51 76 6a 37 77 49 43 33 77 48 68 43 65 2f 6b 42 78 67 45 2b 4d 2f 63 32 69 44 5a 37 66 72 38 4a 67 63 51 49 68 50 30 48 79 62 6f 42 66 30 72 45 77 44 71 38 66 55 76 43 54 54 31 4f 50 63 76 45 44 78 42 38 76 6b 2f 45 52 33 38 46 78 67 63 46 41 70 42 43 68 73 58 43 43 34 78 53 55 55 6c 52 42 5a 5a 55 43 4a 46 47 43 73 76 4c 7a 68 42 59 45 30 64 57 30 59 6b 4f 56 6f 2f 52 45 6c 74 52 46 74 70 5a 45 5a 46 59 6c 45 79 53 6c 68 77 63 48 78 33 62 48 78 51 61 46 31 37 62 33 70 64 54 6b 61 46 5a 6e 4a 31 65 49 75 46 58 34 64 52 54 59 57 56 55 31 2b 58 55 31 4e 51 64 46 75 51 63 48 64 72 6e 34 43 67 64 6e 56 67 6f 4b 5a 69 63 35 Data Ascii: V7bunu8PZ36/Ky+PV67Ta+ufxy9/PyfHO0t7a4eLl28vd4Qvj7wIC3wHhCe/kBxgE+M/c2iDZ7fr8JgcQIhP0HyboBf0rEwDq8fUvCTT1OPcvEDxB8vk/ER38FxgcFApBChsXCC4xSUUlRBZZUCJFGCsvLzhBYE0dW0YkOVo/REltRFtpZEZFYlEySlhwcHx3bHxQaF17b3pdTkaFZnJ1eIuFX4dRTYWVU1+XU1NQdFuQcHdrn4CgdnVgoKZic5
2024-09-20 16:19:07 UTC	1369	IN	Data Raw: 78 4f 48 75 33 63 54 30 38 72 6a 43 78 62 72 53 32 38 76 59 33 4c 72 74 32 66 7a 6c 33 41 6a 39 43 4f 72 68 78 66 37 37 77 67 6e 64 30 67 54 54 41 65 50 67 38 76 4c 6b 45 50 73 4b 37 53 4c 59 33 52 45 46 41 2f 30 42 4a 2f 37 31 47 43 73 6e 2b 7a 45 4a 36 69 41 79 49 41 4d 58 4f 51 45 7a 37 44 30 73 44 78 34 75 45 53 45 4d 47 2f 34 69 4d 54 42 44 50 42 30 55 52 43 73 35 55 55 55 79 51 79 42 52 54 79 68 59 57 56 68 53 57 53 56 64 53 56 68 65 4b 68 30 7a 59 47 41 31 4e 43 41 39 56 69 4a 69 4e 7a 39 70 4c 31 4a 6c 50 79 31 41 56 48 5a 49 53 44 70 50 55 7a 6c 76 56 58 56 53 4f 6d 56 7a 51 31 63 2f 67 58 6c 59 52 47 5a 45 53 5a 46 4e 5a 6e 79 46 69 33 53 44 59 6f 2b 61 57 4a 70 6c 6b 6f 70 2b 58 6c 53 51 66 4b 4f 50 67 47 43 48 69 4a 53 72 6a 4b 56 74 66 62 4b Data Ascii: xOHu3cT08rjCxbrS28vY3Lrt2fzl3Aj9COrhxf77wgnd0gTTAePg8vLkEPsK7SLY3REFA/0BJ/71GCsn+zEJ6iAyIAMXOQEz7D0sDx4uESEMG/4iMTBDPB0URCs5UUUyQyBRTyhYWVhSWSVdSVheKh0zYGA1NCA9ViJiNz9pL1JlPy1AVHZISDpPUzlvVXVSOmVzQ1c/gXlYRGZESZFNZnyFi3SDYo+aWJplkop+XlSQfKOPgGCHiJSrjKVtfbK
2024-09-20 16:19:07 UTC	1369	IN	Data Raw: 62 6a 36 38 38 57 76 76 4e 33 75 32 77 54 51 75 75 58 37 2f 63 44 6a 2b 50 7a 6c 78 67 37 46 38 51 4d 4a 79 2b 62 70 37 4f 7a 6f 37 52 41 62 31 68 50 30 43 52 63 58 49 51 2f 30 35 65 41 47 49 76 77 58 48 43 6f 6e 49 41 41 76 42 2b 6e 73 4c 50 30 73 4a 76 45 4b 4e 54 44 7a 38 79 73 4e 39 6a 4d 61 4a 52 77 36 48 7a 67 71 42 41 74 47 4f 41 68 47 53 7a 73 68 4e 41 34 70 4d 53 42 49 52 68 4e 61 46 6b 6c 53 46 31 35 4d 56 30 30 67 55 6a 45 30 58 6a 30 34 50 43 4a 57 50 56 6f 74 57 6c 45 38 4c 57 42 33 61 6e 46 4e 57 44 49 30 5a 6e 39 49 63 47 6f 38 63 6e 31 62 5a 45 4a 36 58 57 68 43 51 6d 43 4f 6a 59 70 6a 67 70 47 53 61 59 64 6a 6c 57 78 6b 6d 5a 52 77 61 56 2b 64 64 57 78 30 6e 5a 4a 30 58 36 4b 52 5a 4a 57 72 6c 6f 69 5a 70 59 4e 38 63 72 4b 4a 70 34 53 31 Data Ascii: bj688WvvN3u2wTQuuX7/cDj+Pzlxg7F8QMJy+bp7Ozo7RAb1hP0CRcXIQ/05eAGIvwXHConIAAvB+nsLP0sJvEKNTDz8ysN9jMaJRw6HzgqBAtGOAhGSzshNA4pMSBIRhNaFklSF15MV00gUjE0Xj04PCJWPVotWlE8LWB3anFNWDI0Zn9IcGo8cn1bZEJ6XWhCQmCOjYpjgpGSaYdjlWxkmZRwaV+ddWx0nZJ0X6KRZJWrloiZpYN8crKJp4S1
2024-09-20 16:19:07 UTC	1369	IN	Data Raw: 58 54 79 2f 54 79 31 4d 2f 42 2f 74 6a 54 30 67 54 68 35 77 6b 4c 34 39 73 4a 45 65 59 47 46 52 54 72 38 2b 62 54 37 68 37 71 48 50 4c 37 33 53 48 32 46 69 45 68 2b 76 51 48 4a 41 41 75 4b 53 73 44 49 76 34 71 42 78 41 44 4c 77 34 55 4d 54 49 50 47 44 30 75 45 52 7a 35 4f 78 63 52 49 30 55 62 4a 41 5a 46 48 30 35 4e 53 53 52 43 48 77 77 6e 49 41 35 52 4c 46 6f 6e 53 79 38 6f 4a 30 38 30 55 7a 39 61 4e 54 42 68 59 6a 74 45 4a 6c 73 2f 58 6a 74 66 52 6b 78 74 61 6b 68 32 63 57 39 4d 61 6b 64 31 54 31 67 2b 4f 46 4f 43 51 6e 70 59 59 46 4e 33 57 57 52 35 67 31 39 2f 61 34 68 6a 6b 6b 71 44 5a 35 61 52 6b 57 78 6b 5a 35 4e 79 65 4a 57 50 63 35 4b 68 6e 48 56 77 6d 61 4e 37 68 4a 6c 6b 67 49 69 68 71 59 4f 79 72 61 32 49 6b 48 4b 30 6a 4a 57 58 74 5a 43 2b 64 Data Ascii: XTy/Ty1M/B/tjT0gTh5wkL49sJEeYGFRTr8+bT7h7qHPL73SH2FiEh+vQHJAAuKSsDIv4qBxADLw4UMTIPGD0uERz5OxcRI0UbJAZFH05NSSRCHwwnIA5RLFonSy8oJ080Uz9aNTBhYjtEJls/XjtfRkxtakh2cW9Makd1T1g+OFOCQnpYYFN3WWR5g19/a4hjkkqDZ5aRkWxkZ5NyeJWPc5KhnHVwmaN7hJlkgIihqYOyra2IkHK0jJWXtZC+d
2024-09-20 16:19:07 UTC	1369	IN	Data Raw: 62 30 64 7a 6d 2b 41 7a 66 44 73 55 46 34 52 4c 61 7a 65 54 76 7a 51 76 70 38 39 45 61 38 41 34 4e 47 76 6e 72 2b 77 54 30 47 2b 62 67 45 53 76 33 46 76 33 33 49 53 41 51 2b 78 41 6c 43 75 38 55 39 69 54 7a 39 6a 63 6e 47 42 41 71 46 54 49 62 4f 68 68 48 45 44 67 79 42 44 70 46 49 79 73 4b 51 69 39 45 49 30 73 75 49 54 51 78 4b 69 64 53 4a 69 38 71 4e 78 67 39 4c 44 78 4d 50 56 5a 69 4e 44 35 48 50 31 35 4c 59 44 39 6f 53 6a 31 51 54 6b 5a 44 62 6b 4a 4d 56 6c 4d 30 57 6c 68 59 61 46 6c 79 67 6c 42 61 59 31 39 36 5a 33 78 62 69 57 5a 5a 62 47 39 69 58 34 70 65 61 49 68 76 69 49 5a 55 66 4a 56 78 65 31 36 53 63 33 78 7a 6f 58 69 41 6b 70 56 35 6e 57 71 73 67 5a 39 34 6f 4a 70 73 6f 71 32 4c 6b 35 65 71 6d 4c 71 4d 75 71 71 2f 69 37 61 55 77 71 36 78 6d 5a Data Ascii: b0dzm+AzfDsUF4RLazeTvzQvp89Ea8A4NGvnr+wT0G+bgESv3Fv33ISAQ+xAlCu8U9iTz9jcnGBAqFTIbOhhHEDgyBDpFIysKQi9EI0suITQxKidSJi8qNxg9LDxMPVZiND5HP15LYD9oSj1QTkZDbkJMVlM0WlhYaFlyglBaY196Z3xbiWZZbG9iX4peaIhviIZUfJVxe16Sc3xzoXiAkpV5nWqsgZ94oJpsoq2Lk5eqmLqMuqq/i7aUwq6xmZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	56612	104.18.94.41	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:08 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1871845430:1726845417:FbKGXq3vHvORmlg6oISBtBOotzZym52Uy_BS_Q--sjQ/8c632282bca10ca8/c509a54a750866d HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:08 UTC	349	IN	HTTP/1.1 404 Not Found Date: Fri, 20 Sep 2024 16:19:08 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: d1j6sk8zHT3np3oqqM4VzJl1ExDrn+LZUiI=$gVlfW6hQj5/u8MBI Server: cloudflare CF-RAY: 8c6322a82bdf0f6c-EWR
2024-09-20 16:19:08 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	56613	104.18.95.41	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:10 UTC	927	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1871845430:1726845417:FbKGXq3vHvORmlg6oISBtBOotzZym52Uy_BS_Q--sjQ/8c632282bca10ca8/c509a54a750866d HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 33921 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: c509a54a750866d sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/typiu/0x4AAAAAAAkF7znPRls4zQt2/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:10 UTC	16384	OUT	Data Raw: 76 5f 38 63 36 33 32 32 38 32 62 63 61 31 30 63 61 38 3d 4a 42 64 46 79 2d 73 4e 6b 75 6b 68 4d 49 43 55 31 55 48 75 64 2d 75 73 71 55 30 46 51 35 68 52 43 73 65 55 6d 35 49 4e 55 49 55 73 6c 6b 51 51 32 73 4b 51 55 41 63 49 33 4d 53 4e 73 6a 55 75 67 2d 74 5a 55 37 67 2d 47 55 74 4f 30 52 55 75 50 64 55 36 2d 55 33 6f 62 6d 55 51 71 67 55 63 39 51 52 63 46 55 54 41 68 4d 73 30 34 35 73 4b 41 46 69 55 6a 7a 61 55 4b 46 55 5a 71 55 4d 67 2d 52 43 43 4a 32 46 73 76 51 49 73 51 51 55 65 46 55 77 52 62 64 6e 73 55 35 50 55 51 42 64 4a 50 6a 73 6b 31 53 78 55 73 64 50 4a 72 45 69 46 74 6d 48 6c 35 68 6e 4e 49 73 6e 6c 62 35 55 63 72 42 50 34 52 35 55 74 62 25 32 62 50 64 62 4b 52 6e 70 4b 67 55 6d 62 53 62 32 39 4a 2b 37 2b 4f 36 4d 45 78 64 54 45 53 68 70 5a Data Ascii: v_8c632282bca10ca8=JBdFy-sNkukhMICU1UHud-usqU0FQ5hRCseUm5INUIUslkQQ2sKQUAcI3MSNsjUug-tZU7g-GUtO0RUuPdU6-U3obmUQqgUc9QRcFUTAhMs045sKAFiUjzaUKFUZqUMg-RCCJ2FsvQIsQQUeFUwRbdnsU5PUQBdJPjsk1SxUsdPJrEiFtmHl5hnNIsnlb5UcrBP4R5Utb%2bPdbKRnpKgUmbSb29J+7+O6MExdTEShpZ
2024-09-20 16:19:10 UTC	16384	OUT	Data Raw: 35 30 46 73 61 42 46 53 35 68 6b 73 59 65 73 35 56 46 2d 46 55 4e 78 5a 73 69 55 74 33 51 2d 55 32 52 34 35 53 7a 78 64 54 34 46 2d 42 55 4c 55 2d 67 73 55 73 78 55 68 7a 49 64 55 74 55 31 35 41 5a 55 35 55 2b 35 55 5a 55 76 55 75 55 2d 52 55 35 55 4d 67 68 33 55 39 55 68 55 48 2d 43 62 55 35 67 68 6b 63 35 55 37 64 51 46 73 68 46 43 64 49 35 73 33 4d 30 43 70 65 6d 37 24 64 46 57 35 55 4e 55 39 64 2d 46 73 44 55 68 5a 55 4d 68 44 55 6c 55 41 64 68 70 7a 2b 35 2d 24 33 34 55 74 67 68 55 55 79 46 64 50 68 2d 63 4c 55 46 35 48 4e 55 43 55 58 46 68 51 74 5a 55 2d 65 53 58 35 65 6b 51 46 57 46 6b 4e 61 74 2d 54 65 59 71 5a 6d 54 56 51 73 50 58 70 6c 53 74 59 69 58 4a 4a 5a 65 59 77 58 70 54 69 36 59 41 58 78 59 41 53 59 32 32 43 70 4f 6c 73 71 58 2b 2d 6c 33 Data Ascii: 50FsaBFS5hksYes5VF-FUNxZsiUt3Q-U2R45SzxdT4F-BULU-gsUsxUhzIdUtU15AZU5U+5UZUvUuU-RU5UMgh3U9UhUH-CbU5ghkc5U7dQFshFCdI5s3M0Cpem7$dFW5UNU9d-FsDUhZUMhDUlUAdhpz+5-$34UtghUUyFdPh-cLUF5HNUCUXFhQtZU-eSX5ekQFWFkNat-TeYqZmTVQsPXplStYiXJJZeYwXpTi6YAXxYASY22CpOlsqX+-l3
2024-09-20 16:19:10 UTC	1153	OUT	Data Raw: 35 2d 24 58 4a 6e 44 68 4c 37 72 72 74 32 33 55 64 35 55 51 59 6d 6b 4e 46 61 6f 55 6d 67 4d 4e 4c 74 2d 4c 59 24 72 30 2d 46 4a 67 4e 77 47 42 73 41 59 79 31 6c 6a 50 79 46 41 57 56 34 72 7a 64 37 6e 61 67 55 49 51 70 6a 76 6d 77 77 42 48 67 2d 32 55 63 55 51 58 72 48 72 66 53 73 49 74 51 55 76 4d 71 4d 64 56 55 79 46 53 32 33 63 67 66 67 42 50 41 67 32 63 73 6b 32 73 42 2d 55 66 69 58 34 59 77 5a 4b 42 41 41 33 7a 66 61 52 58 74 37 72 4d 59 79 56 58 79 6e 74 72 41 6d 75 32 73 43 50 6e 6c 68 58 73 31 59 50 63 57 34 77 63 34 65 4d 64 67 68 35 66 72 47 75 51 46 53 55 4a 56 30 39 77 57 34 6a 6c 75 63 2d 46 6c 67 67 2d 6d 71 33 41 42 57 57 51 35 32 55 71 46 73 75 67 48 4b 46 2d 51 67 39 4c 4a 69 7a 76 5a 55 68 63 47 30 67 56 55 76 46 70 35 55 78 37 4c 37 47 Data Ascii: 5-$XJnDhL7rrt23Ud5UQYmkNFaoUmgMNLt-LY$r0-FJgNwGBsAYy1ljPyFAWV4rzd7nagUIQpjvmwwBHg-2UcUQXrHrfSsItQUvMqMdVUyFS23cgfgBPAg2csk2sB-UfiX4YwZKBAA3zfaRXt7rMYyVXyntrAmu2sCPnlhXs1YPcW4wc4eMdgh5frGuQFSUJV09wW4jluc-Flgg-mq3ABWWQ52UqFsugHKF-Qg9LJizvZUhcG0gVUvFp5Ux7L7G
2024-09-20 16:19:11 UTC	1363	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:19:11 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4552 Connection: close cf-chl-out: lLOjfpS4026/D1GkUClMbURUbhFmDZ2IU1gI7yV0ytMUdWk6bssmtM+pL3QQFPAyYFfEyTh47bPCwUfqh9nAiC5zHBRI/xCf7KuW+hnkDJjPh4f9FbImjXk=$0JvH6gRQ4DjdOC9t cf-chl-out-s: 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$fNMOCBAyng9DKYNE Server: cloudflare CF-RAY: 8c6322ba1ba7c463-EWR
2024-09-20 16:19:11 UTC	6	IN	Data Raw: 69 5a 43 4e 6d 37 Data Ascii: iZCNm7
2024-09-20 16:19:11 UTC	1369	IN	Data Raw: 53 57 71 61 47 51 73 5a 75 78 6a 6f 53 38 76 72 36 63 68 70 2b 62 76 4d 47 38 6e 71 71 46 31 4b 50 4b 6a 38 4b 51 6b 4e 7a 45 6d 39 66 65 71 2b 43 31 74 62 6d 76 31 38 66 70 73 39 76 4c 72 4d 50 47 35 61 33 43 7a 4d 48 65 70 2b 7a 7a 73 73 66 34 31 38 7a 48 2f 50 48 67 30 74 72 7a 39 39 47 2f 30 4f 48 49 76 50 77 48 79 41 73 44 35 74 33 4c 34 4f 2f 55 45 78 48 71 32 65 37 55 30 2f 6a 65 48 42 55 56 37 66 4d 68 2b 76 48 37 47 66 72 36 48 51 67 6e 36 76 76 75 42 51 34 79 48 77 59 52 46 44 51 4c 50 50 4c 37 4c 42 38 39 39 30 4c 37 47 51 51 6d 46 54 4d 31 4e 54 38 56 4f 7a 68 45 4b 51 6f 4f 54 54 41 76 51 69 35 45 4a 78 42 56 57 7a 63 35 4c 6a 55 35 51 6a 31 63 4e 31 30 33 4e 6a 56 6d 5a 44 52 73 49 45 45 77 51 6d 39 4a 58 32 6c 32 61 55 5a 58 4d 45 63 37 5a Data Ascii: SWqaGQsZuxjoS8vr6chp+bvMG8nqqF1KPKj8KQkNzEm9feq+C1tbmv18fps9vLrMPG5a3CzMHep+zzssf418zH/PHg0trz99G/0OHIvPwHyAsD5t3L4O/UExHq2e7U0/jeHBUV7fMh+vH7Gfr6HQgn6vvuBQ4yHwYRFDQLPPL7LB8990L7GQQmFTM1NT8VOzhEKQoOTTAvQi5EJxBVWzc5LjU5Qj1cN103NjVmZDRsIEEwQm9JX2l2aUZXMEc7Z
2024-09-20 16:19:11 UTC	1369	IN	Data Raw: 33 67 4d 43 46 74 59 4c 48 68 4d 43 47 6f 4d 43 49 30 4b 6d 4e 71 70 47 72 71 72 43 54 31 39 6a 61 32 38 75 35 31 2b 48 4e 31 4d 53 64 30 74 69 65 36 4f 58 43 79 75 58 41 75 75 4f 74 72 2b 54 65 38 2f 50 4f 2b 50 65 77 75 62 4f 30 76 65 7a 4f 41 65 33 65 30 37 2f 77 31 76 7a 46 33 51 32 2b 76 38 54 34 44 78 4d 4e 41 64 50 4e 45 78 58 6f 30 39 63 51 44 52 58 62 45 52 72 59 48 2f 45 55 34 64 6a 79 4b 65 45 57 34 53 48 74 37 51 4d 78 37 51 55 4c 4a 50 45 68 42 7a 4c 72 4b 50 6b 74 50 7a 73 61 4d 44 6f 5a 44 6a 73 39 51 79 63 66 41 67 74 42 48 41 41 6d 53 54 6c 4a 4a 54 4e 56 46 52 59 33 49 78 52 54 4f 7a 35 65 53 31 56 54 57 6a 55 2f 52 43 55 39 4f 7a 68 67 5a 30 4e 58 5a 43 56 64 58 43 74 66 61 57 45 75 54 57 31 74 4e 44 74 78 56 7a 68 37 56 31 45 36 63 48 Data Ascii: 3gMCFtYLHhMCGoMCI0KmNqpGrqrCT19ja28u51+HN1MSd0tie6OXCyuXAuuOtr+Te8/PO+PewubO0vezOAe3e07/w1vzF3Q2+v8T4DxMNAdPNExXo09cQDRXbERrYH/EU4djyKeEW4SHt7QMx7QULJPEhBzLrKPktPzsaMDoZDjs9QycfAgtBHAAmSTlJJTNVFRY3IxRTOz5eS1VTWjU/RCU9OzhgZ0NXZCVdXCtfaWEuTW1tNDtxVzh7V1E6cH
2024-09-20 16:19:11 UTC	1369	IN	Data Raw: 75 70 69 6d 77 63 71 66 72 4d 57 54 71 6f 75 2f 6c 63 76 47 73 61 36 33 31 72 71 31 7a 63 33 57 75 39 61 75 35 63 4f 32 73 37 6d 71 75 37 65 35 33 65 65 35 7a 4d 2b 30 77 2b 62 49 74 73 2f 35 75 76 48 4f 79 63 65 2b 30 4e 72 54 30 4d 30 46 30 77 54 7a 41 41 72 39 35 4e 66 4b 44 74 6f 54 36 39 50 73 37 67 59 4d 35 39 54 72 2b 66 50 35 33 68 51 4d 49 68 59 62 37 2f 37 7a 38 2f 6e 7a 39 4f 6a 32 48 76 63 67 41 6a 49 75 37 77 49 46 49 76 51 4b 46 52 45 79 44 42 34 75 46 77 73 78 4c 69 59 59 52 67 51 47 48 68 5a 48 41 78 30 59 52 68 6b 70 52 45 49 73 4a 43 46 4b 52 79 74 4d 54 6a 67 73 54 54 6c 57 4c 6c 46 69 51 6a 31 59 48 78 38 79 57 6b 42 6e 51 54 67 34 59 44 74 30 61 7a 4a 6a 64 56 41 35 53 6d 74 4d 64 46 42 2f 65 6c 6c 53 59 6e 5a 34 56 55 39 67 55 6c 56 Data Ascii: upimwcqfrMWTqou/lcvGsa631rq1zc3Wu9au5cO2s7mqu7e53ee5zM+0w+bIts/5uvHOyce+0NrT0M0F0wTzAAr95NfKDtoT69Ps7gYM59Tr+fP53hQMIhYb7/7z8/nz9Oj2HvcgAjIu7wIFIvQKFREyDB4uFwsxLiYYRgQGHhZHAx0YRhkpREIsJCFKRytMTjgsTTlWLlFiQj1YHx8yWkBnQTg4YDt0azJjdVA5SmtMdFB/ellSYnZ4VU9gUlV
2024-09-20 16:19:11 UTC	439	IN	Data Raw: 70 7a 4e 71 4b 62 46 6e 39 69 6c 79 61 76 47 71 4c 6d 61 6c 71 6e 54 71 37 79 34 76 73 54 61 31 63 6e 70 37 4e 6e 47 37 62 44 42 34 72 4f 6d 78 76 62 44 78 75 62 70 2b 65 7a 54 78 2f 33 64 7a 63 76 44 2b 64 6a 6b 33 77 4c 32 43 2f 37 48 2b 76 37 50 77 76 34 44 44 38 6f 41 30 41 73 5a 42 78 41 54 32 76 44 59 32 39 30 4f 49 78 50 67 45 42 66 6d 4a 76 77 67 4a 69 63 62 4c 2b 76 73 48 69 6a 7a 38 77 67 57 37 69 38 6e 47 76 50 38 4b 44 54 33 2f 69 38 34 46 55 55 7a 50 44 2f 2b 48 43 70 44 43 6a 70 45 52 6b 67 2f 44 51 77 4c 51 7a 5a 57 56 55 52 62 56 6c 70 54 4d 44 63 75 50 46 34 6a 4e 56 46 5a 56 57 6b 63 57 43 5a 4e 4c 6b 78 68 57 57 38 76 62 32 4e 4d 4d 44 52 79 59 6d 39 7a 61 32 5a 77 64 6a 39 59 59 58 64 37 58 49 68 37 64 33 75 45 67 58 31 36 52 30 4b 53 Data Ascii: pzNqKbFn9ilyavGqLmalqnTq7y4vsTa1cnp7NnG7bDB4rOmxvbDxubp+ezTx/3dzcvD+djk3wL2C/7H+v7Pwv4DD8oA0AsZBxAT2vDY290OIxPgEBfmJvwgJicbL+vsHijz8wgW7i8nGvP8KDT3/i84FUUzPD/+HCpDCjpERkg/DQwLQzZWVURbVlpTMDcuPF4jNVFZVWkcWCZNLkxhWW8vb2NMMDRyYm9za2Zwdj9YYXd7XIh7d3uEgX16R0KS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	56614	104.18.94.41	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:11 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1871845430:1726845417:FbKGXq3vHvORmlg6oISBtBOotzZym52Uy_BS_Q--sjQ/8c632282bca10ca8/c509a54a750866d HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:12 UTC	349	IN	HTTP/1.1 404 Not Found Date: Fri, 20 Sep 2024 16:19:11 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: auwZzKrsimB60znGWl/cknfj6lresShfyMk=$4kebiqq1W63y9z/I cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8c6322bfcc458c8a-EWR
2024-09-20 16:19:12 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	56616	188.114.97.3	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:12 UTC	615	OUT	GET /visit_variables.txt?a=1726849134833 HTTP/1.1 Host: 0obt.menus-unlimited.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://0obt.menus-unlimited.com/u8w5v Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=l2s8v5fbb3fguea087d16fnfgq
2024-09-20 16:19:12 UTC	690	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:19:12 GMT Content-Type: text/plain Transfer-Encoding: chunked Connection: close x-accel-version: 0.01 last-modified: Thu, 05 Sep 2024 02:26:55 GMT etag: W/"136-62156063c4ca1-gzip" vary: Accept-Encoding x-powered-by: PleskLin CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tij0CFmbh97DANN50ZI8X6X0eI4Pg4vO5H0%2FkuYyYyaZTEK2qwKMBeWY34A23gPspRmwsvlh1kYf9vlya225IljjfywAxD5YPVHdBd8nYsnJLVv%2BXWUj4OdLi2JO8Bg3fcmwc9XL3MWYlRM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c6322c2bd858c1e-EWR
2024-09-20 16:19:12 UTC	317	IN	Data Raw: 31 33 36 0d 0a 7b 22 38 22 3a 22 25 36 22 2c 22 39 22 3a 22 25 37 22 2c 22 31 30 22 3a 22 25 38 22 2c 22 31 31 22 3a 22 25 39 22 2c 22 31 32 22 3a 22 25 31 30 22 2c 22 31 33 22 3a 22 25 30 22 2c 22 31 34 22 3a 22 25 35 22 2c 22 31 35 22 3a 22 25 31 22 2c 22 31 36 22 3a 22 25 32 22 2c 22 31 37 22 3a 22 25 33 22 2c 22 31 38 22 3a 22 25 34 22 2c 22 32 31 22 3a 22 5c 2f 22 2c 22 32 32 22 3a 22 25 31 25 22 2c 22 32 33 22 3a 22 25 5c 2f 25 22 2c 22 32 34 22 3a 22 24 37 30 31 22 2c 22 32 35 22 3a 22 24 37 30 32 22 2c 22 32 36 22 3a 22 24 37 30 33 22 2c 22 32 37 22 3a 22 24 37 30 34 22 2c 22 32 38 22 3a 22 24 37 30 35 22 2c 22 32 39 22 3a 22 24 37 30 36 22 2c 22 33 30 22 3a 22 24 37 30 37 22 2c 22 33 31 22 3a 22 24 37 30 38 22 2c 22 33 32 22 3a 22 24 37 30 39 22 Data Ascii: 136{"8":"%6","9":"%7","10":"%8","11":"%9","12":"%10","13":"%0","14":"%5","15":"%1","16":"%2","17":"%3","18":"%4","21":"\/","22":"%1%","23":"%\/%","24":"$701","25":"$702","26":"$703","27":"$704","28":"$705","29":"$706","30":"$707","31":"$708","32":"$709"
2024-09-20 16:19:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	56618	188.114.96.3	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:13 UTC	429	OUT	GET /visit_variables.txt?a=1726849134833 HTTP/1.1 Host: 0obt.menus-unlimited.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=l2s8v5fbb3fguea087d16fnfgq
2024-09-20 16:19:13 UTC	698	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:19:13 GMT Content-Type: text/plain Transfer-Encoding: chunked Connection: close x-accel-version: 0.01 last-modified: Thu, 05 Sep 2024 02:26:55 GMT etag: W/"136-62156063c4ca1-gzip" vary: Accept-Encoding x-powered-by: PleskLin CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J%2FuO2z7SdfzMArj075vqsR8b3f%2B2Z4NTUs7hQUA84di%2FyClpClexkzZ2RGYUFxCuOkcNg3YLaiV0ebu8dfG3%2F7WtzQBR03129oJuMeuwLIePpg2o70wdVokOx8%2Fhu%2FFUCyVESplbZ0xh8Lc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c6322ca390e7c8d-EWR
2024-09-20 16:19:13 UTC	317	IN	Data Raw: 31 33 36 0d 0a 7b 22 38 22 3a 22 25 36 22 2c 22 39 22 3a 22 25 37 22 2c 22 31 30 22 3a 22 25 38 22 2c 22 31 31 22 3a 22 25 39 22 2c 22 31 32 22 3a 22 25 31 30 22 2c 22 31 33 22 3a 22 25 30 22 2c 22 31 34 22 3a 22 25 35 22 2c 22 31 35 22 3a 22 25 31 22 2c 22 31 36 22 3a 22 25 32 22 2c 22 31 37 22 3a 22 25 33 22 2c 22 31 38 22 3a 22 25 34 22 2c 22 32 31 22 3a 22 5c 2f 22 2c 22 32 32 22 3a 22 25 31 25 22 2c 22 32 33 22 3a 22 25 5c 2f 25 22 2c 22 32 34 22 3a 22 24 37 30 31 22 2c 22 32 35 22 3a 22 24 37 30 32 22 2c 22 32 36 22 3a 22 24 37 30 33 22 2c 22 32 37 22 3a 22 24 37 30 34 22 2c 22 32 38 22 3a 22 24 37 30 35 22 2c 22 32 39 22 3a 22 24 37 30 36 22 2c 22 33 30 22 3a 22 24 37 30 37 22 2c 22 33 31 22 3a 22 24 37 30 38 22 2c 22 33 32 22 3a 22 24 37 30 39 22 Data Ascii: 136{"8":"%6","9":"%7","10":"%8","11":"%9","12":"%10","13":"%0","14":"%5","15":"%1","16":"%2","17":"%3","18":"%4","21":"\/","22":"%1%","23":"%\/%","24":"$701","25":"$702","26":"$703","27":"$704","28":"$705","29":"$706","30":"$707","31":"$708","32":"$709"
2024-09-20 16:19:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	56620	188.114.97.3	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:15 UTC	589	OUT	GET /urls.json HTTP/1.1 Host: 0obt.menus-unlimited.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://0obt.menus-unlimited.com/u8w5v Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=l2s8v5fbb3fguea087d16fnfgq
2024-09-20 16:19:15 UTC	673	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:19:15 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close x-accel-version: 0.01 last-modified: Mon, 09 Sep 2024 21:29:07 GMT etag: W/"54-621b672624e1c" x-powered-by: PleskLin CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KVnDQ3jNQF%2B7PsZdvhVZzPjTi6g7Ez3iiIG1VhdgPxZdYLA3WtMasyeJxYs5n1%2BcMi%2BeMi00c4B1OYkvGqj4V%2FZMamUhx%2B6ofrD3AJNvUceFmTMtwS7trhpFQ57eUw06DxkOlDScPW7qa1U%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c6322d68e5078e2-EWR
2024-09-20 16:19:15 UTC	90	IN	Data Raw: 35 34 0d 0a 5b 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 67 65 6e 63 65 2d 69 6d 6d 6f 62 69 6c 69 65 72 65 2d 6c 75 62 65 72 6f 6e 2e 63 6f 6d 5c 2f 35 61 31 31 37 64 36 33 2d 65 30 37 38 2d 34 64 36 35 2d 62 65 30 62 2d 66 61 37 61 62 32 34 61 39 66 38 66 5c 2f 22 5d 0d 0a Data Ascii: 54["https:\/\/agence-immobiliere-luberon.com\/5a117d63-e078-4d65-be0b-fa7ab24a9f8f\/"]
2024-09-20 16:19:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	56623	188.114.97.3	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:16 UTC	758	OUT	GET /5a117d63-e078-4d65-be0b-fa7ab24a9f8f/sdelsman@gklaw.com HTTP/1.1 Host: agence-immobiliere-luberon.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://0obt.menus-unlimited.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:16 UTC	756	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:19:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0NrQGVZJrTFynNTsHCQnYfOdvlghWhf5igEKkRbWxwL0N%2Byy%2FkiXYISj4heKClajNxNCLCd9R4IB27FLBfJm7u7vkipSSsxQ6mKQVk0xI5mMdZNvFMnKlQu8Wg%2BFYJDbW831FaSIlA3ooUz437ry6Ew%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8c6322dd4e108c53-EWR
2024-09-20 16:19:16 UTC	613	IN	Data Raw: 37 63 61 61 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 73 74 79 6c 65 3e 20 23 63 6f 6e 74 61 69 6e 65 72 53 68 61 64 6f 77 2c 23 65 66 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 20 30 20 37 70 78 20 37 70 78 7d 23 63 61 6c 2c 23 63 61 6c 3e 2e 72 7b 64 69 73 70 6c 61 79 3a Data Ascii: 7caa<html lang="en"><head><meta charset="UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width, initial-scale=1.0"><style> #containerShadow,#ef{border-radius:0 0 7px 7px}#cal,#cal>.r{display:
2024-09-20 16:19:16 UTC	1369	IN	Data Raw: 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 33 33 7d 2e 64 61 72 6b 4e 65 77 20 23 6c 6f 61 64 69 6e 67 53 63 72 65 65 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 66 31 66 31 66 7d 3a 72 6f 6f 74 7b 2d 2d 73 3a 31 38 30 70 78 3b 2d 2d 65 6e 76 57 3a 31 33 30 70 78 3b 2d 2d 65 6e 76 48 3a 37 31 70 78 3b 2d 2d 63 61 6c 57 3a 31 31 38 70 78 3b 2d 2d 73 71 57 3a 63 61 6c 63 28 76 61 72 28 2d 2d 63 61 6c 57 29 20 2f 20 33 29 3b 2d 2d 73 71 48 3a 33 37 70 78 3b 2d 2d 63 61 6c 48 48 3a 32 30 70 78 3b 2d 2d 63 61 6c 48 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 71 48 29 20 2a 20 33 20 2b 20 76 61 72 28 2d 2d 63 61 6c 48 48 29 29 3b 2d 2d 63 61 6c 59 3a 63 61 6c 63 28 76 61 72 28 2d 2d 63 61 6c 48 29 20 2b 20 32 30 70 78 29 3b 2d 2d 63 61 6c 59 45 78 74 Data Ascii: ound-color:#333}.darkNew #loadingScreen{background-color:#1f1f1f}:root{--s:180px;--envW:130px;--envH:71px;--calW:118px;--sqW:calc(var(--calW) / 3);--sqH:37px;--calHH:20px;--calH:calc(var(--sqH) * 3 + var(--calHH));--calY:calc(var(--calH) + 20px);--calYExt
2024-09-20 16:19:16 UTC	1369	IN	Data Raw: 74 3a 76 61 72 28 2d 2d 63 61 6c 48 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 37 70 78 3b 6d 61 72 67 69 6e 3a 2d 33 30 36 70 78 20 61 75 74 6f 20 30 3b 61 6e 69 6d 61 74 69 6f 6e 3a 63 61 6c 2d 62 6f 75 6e 63 65 20 76 61 72 28 2d 2d 64 75 72 29 20 69 6e 66 69 6e 69 74 65 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2e 35 2c 30 2c 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 76 61 72 28 2d 2d 63 61 6c 59 45 78 74 29 29 20 73 63 61 6c 65 59 28 31 29 7d 40 6b 65 79 66 72 61 6d 65 73 20 63 61 6c 2d 62 6f 75 6e 63 65 7b 30 25 2c 31 30 30 25 2c 31 36 2e 35 25 2c 37 36 2e 31 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 76 Data Ascii: t:var(--calH);border-radius:7px;margin:-306px auto 0;animation:cal-bounce var(--dur) infinite;animation-timing-function:cubic-bezier(0,0.5,0,1);transform:translateY(var(--calYExt)) scaleY(1)}@keyframes cal-bounce{0%,100%,16.5%,76.1%{transform:translateY(v
2024-09-20 16:19:16 UTC	1369	IN	Data Raw: 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 33 32 2c 30 2c 30 2e 36 37 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 74 6f 70 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 63 61 6c 63 28 2d 31 20 2a 20 76 61 72 28 2d 2d 65 6e 76 48 29 29 29 20 72 6f 74 61 74 65 33 64 28 31 2c 30 2c 30 2c 39 30 64 65 67 29 7d 40 6b 65 79 66 72 61 6d 65 73 20 63 6c 6f 73 65 64 2d 66 6c 61 70 2d 73 77 69 6e 67 7b 30 25 2c 31 30 30 25 2c 37 37 25 2c 38 2e 35 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 63 61 6c 63 28 2d 31 20 2a 20 76 61 72 28 2d 2d 65 6e 76 48 29 29 29 20 72 6f 74 61 74 65 33 64 28 31 2c 30 2c 30 2c 30 29 7d 31 34 2e 35 25 2c 35 30 25 2c 37 36 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 Data Ascii: ion:cubic-bezier(0.32,0,0.67,0);transform-origin:top;transform:translateY(calc(-1 * var(--envH))) rotate3d(1,0,0,90deg)}@keyframes closed-flap-swing{0%,100%,77%,8.5%{transform:translateY(calc(-1 * var(--envH))) rotate3d(1,0,0,0)}14.5%,50%,76%{transform:tr
2024-09-20 16:19:16 UTC	1369	IN	Data Raw: 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 34 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 31 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 65 62 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 65 66 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 63 6c 6f 73 65 64 46 6c 61 70 22 3e 3c 64 69 76 20 69 64 3d 22 66 6d 61 73 6b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6c 61 70 54 72 69 61 6e 67 6c 65 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 73 76 67 20 69 Data Ascii: div><div class="s s4"></div><div class="s s1"></div></div></div></div><div id="eb"></div><div id="ef"><div class="r"></div><div class="l"></div></div><div id="closedFlap"><div id="fmask"><div class="flapTriangle"></div></div></div></div></div></div><svg i
2024-09-20 16:19:16 UTC	1369	IN	Data Raw: 32 36 2d 31 2e 39 38 32 2d 2e 37 37 32 2d 2e 34 38 35 2d 2e 35 31 33 2d 2e 37 33 2d 31 2e 32 33 33 2d 2e 37 33 2d 32 2e 31 34 20 30 2d 2e 39 31 32 2e 32 35 35 2d 31 2e 36 35 31 2e 37 36 31 2d 32 2e 31 39 36 2e 35 30 34 2d 2e 35 34 34 20 31 2e 31 37 33 2d 2e 38 32 20 31 2e 39 38 36 2d 2e 38 32 2e 36 39 35 20 30 20 31 2e 33 37 34 2e 32 33 36 20 32 2e 30 31 34 2e 37 30 32 6c 2e 30 39 2e 30 36 33 56 38 2e 30 31 31 6c 2d 2e 30 32 39 2d 2e 30 31 37 63 2d 2e 32 34 31 2d 2e 31 33 35 2d 2e 35 37 31 2d 2e 32 34 36 2d 2e 39 38 2d 2e 33 33 31 4d 35 39 2e 34 35 32 20 37 2e 35 39 37 61 32 2e 31 37 20 32 2e 31 37 20 30 20 30 30 2d 31 2e 34 31 35 2e 35 30 37 63 2d 2e 33 35 38 2e 32 39 36 2d 2e 36 31 36 2e 37 2d 2e 38 31 34 20 31 2e 32 30 37 48 35 37 2e 32 56 37 2e 37 35 Data Ascii: 26-1.982-.772-.485-.513-.73-1.233-.73-2.14 0-.912.255-1.651.761-2.196.504-.544 1.173-.82 1.986-.82.695 0 1.374.236 2.014.702l.09.063V8.011l-.029-.017c-.241-.135-.571-.246-.98-.331M59.452 7.597a2.17 2.17 0 00-1.415.507c-.358.296-.616.7-.814 1.207H57.2V7.75
2024-09-20 16:19:16 UTC	1369	IN	Data Raw: 39 39 2e 31 33 33 2e 35 31 32 20 30 20 2e 36 30 34 2d 2e 34 35 32 2e 38 39 37 2d 31 2e 33 38 34 2e 38 39 37 61 33 2e 38 20 33 2e 38 20 30 20 30 31 2d 31 2e 31 37 32 2d 2e 32 31 33 20 34 2e 34 31 38 20 34 2e 34 31 38 20 30 20 30 31 2d 31 2e 32 2d 2e 36 30 39 6c 2d 2e 30 38 39 2d 2e 30 36 34 76 32 2e 30 36 34 6c 2e 30 33 33 2e 30 31 35 63 2e 33 30 34 2e 31 34 2e 36 38 36 2e 32 35 37 20 31 2e 31 33 37 2e 33 35 2e 34 34 39 2e 30 39 34 2e 38 35 39 2e 31 34 31 20 31 2e 32 31 33 2e 31 34 31 20 31 2e 30 39 36 20 30 20 31 2e 39 37 37 2d 2e 32 36 20 32 2e 36 32 2d 2e 37 37 31 2e 36 34 38 2d 2e 35 31 35 2e 39 37 36 2d 31 2e 32 30 34 2e 39 37 36 2d 32 2e 30 34 35 20 30 2d 2e 36 30 37 2d 2e 31 37 36 2d 31 2e 31 32 37 2d 2e 35 32 35 2d 31 2e 35 34 36 2d 2e 33 34 35 2d Data Ascii: 99.133.512 0 .604-.452.897-1.384.897a3.8 3.8 0 01-1.172-.213 4.418 4.418 0 01-1.2-.609l-.089-.064v2.064l.033.015c.304.14.686.257 1.137.35.449.094.859.141 1.213.141 1.096 0 1.977-.26 2.62-.771.648-.515.976-1.204.976-2.045 0-.607-.176-1.127-.525-1.546-.345-
2024-09-20 16:19:16 UTC	1369	IN	Data Raw: 70 61 74 68 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 39 2e 39 35 38 68 39 2e 39 35 38 56 2e 30 30 31 48 30 7a 22 20 66 69 6c 6c 3d 22 23 46 30 35 31 32 34 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 64 3d 22 4d 31 30 2e 39 39 35 20 39 2e 39 35 38 68 39 2e 39 35 37 56 2e 30 30 31 68 2d 39 2e 39 35 37 7a 22 20 66 69 6c 6c 3d 22 23 37 45 42 42 34 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 32 30 2e 39 35 36 68 39 2e 39 35 38 56 31 31 48 30 7a 22 20 66 69 6c 6c 3d 22 23 33 32 41 30 44 41 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 64 3d 22 4d 31 30 2e 39 39 35 20 32 30 2e 39 35 36 68 39 2e 39 35 37 56 31 31 68 2d 39 2e 39 35 37 7a 22 20 66 69 6c 6c 3d 22 23 46 44 42 38 31 33 22 3e 3c 2f 70 61 74 68 3e 3c 2f 67 3e 3c 2f 73 76 67 3e 3c 2f Data Ascii: path><path d="M0 9.958h9.958V.001H0z" fill="#F05124"></path><path d="M10.995 9.958h9.957V.001h-9.957z" fill="#7EBB42"></path><path d="M0 20.956h9.958V11H0z" fill="#32A0DA"></path><path d="M10.995 20.956h9.957V11h-9.957z" fill="#FDB813"></path></g></svg></
2024-09-20 16:19:16 UTC	1369	IN	Data Raw: 77 2e 63 6f 6d 22 3e 0a 3c 73 70 61 6e 20 68 69 64 64 65 6e 3e 50 6f 65 74 72 79 20 72 65 61 64 69 6e 67 20 6f 6e 20 74 68 65 20 72 69 76 65 72 62 61 6e 6b 20 70 72 65 73 65 6e 74 73 20 61 77 61 72 64 2d 77 69 6e 6e 69 6e 67 20 66 69 6c 6d 73 20 74 68 69 73 20 63 6f 6d 69 6e 67 20 57 65 64 6e 65 73 64 61 79 2e 3c 2f 73 70 61 6e 3e 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 63 6c 61 73 73 3d 22 63 79 6d 64 68 67 65 6d 6e 65 79 67 69 6d 64 70 76 73 64 70 6f 6b 6b 71 79 71 72 6b 77 62 77 6c 69 65 75 6e 6e 71 74 77 22 20 69 64 3d 22 65 68 65 68 64 68 68 22 20 76 61 6c 75 65 3d 22 22 3e 0a 3c 73 70 61 6e 20 68 69 64 64 65 6e 3e 4c 69 62 72 61 72 79 20 6f 70 65 6e 69 6e 67 20 69 6e 20 74 68 65 20 6d 6f 75 6e 74 61 69 6e 20 72 65 67 69 6f Data Ascii: w.com"><span hidden>Poetry reading on the riverbank presents award-winning films this coming Wednesday.</span><input type="hidden" class="cymdhgemneygimdpvsdpokkqyqrkwbwlieunnqtw" id="ehehdhh" value=""><span hidden>Library opening in the mountain regio
2024-09-20 16:19:16 UTC	1369	IN	Data Raw: 6e 74 68 2e 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 20 68 69 64 64 65 6e 3e 43 68 61 72 69 74 79 20 72 75 6e 20 69 6e 20 74 68 65 20 6d 75 73 65 75 6d 20 61 74 74 72 61 63 74 73 20 67 6c 6f 62 61 6c 20 6d 65 64 69 61 20 61 74 74 65 6e 74 69 6f 6e 20 74 68 69 73 20 63 6f 6d 69 6e 67 20 57 65 64 6e 65 73 64 61 79 2e 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 20 68 69 64 64 65 6e 3e 47 61 72 64 65 6e 20 74 6f 75 72 20 61 74 20 74 68 65 20 6e 65 77 20 6d 61 6c 6c 20 63 75 6c 6d 69 6e 61 74 65 73 20 77 69 74 68 20 73 70 65 63 74 61 63 75 6c 61 72 20 66 69 72 65 77 6f 72 6b 73 20 74 68 69 73 20 77 65 65 6b 65 6e 64 2e 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 20 68 69 64 64 65 6e 3e 46 69 74 6e 65 73 73 20 63 68 61 6c 6c 65 6e 67 65 20 61 74 20 74 68 65 20 69 6e 74 65 Data Ascii: nth.</span><span hidden>Charity run in the museum attracts global media attention this coming Wednesday.</span><span hidden>Garden tour at the new mall culminates with spectacular fireworks this weekend.</span><span hidden>Fitness challenge at the inte

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	56624	188.114.96.3	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:16 UTC	403	OUT	GET /urls.json HTTP/1.1 Host: 0obt.menus-unlimited.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=l2s8v5fbb3fguea087d16fnfgq
2024-09-20 16:19:17 UTC	673	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:19:17 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close x-accel-version: 0.01 last-modified: Mon, 09 Sep 2024 21:29:07 GMT etag: W/"54-621b672624e1c" x-powered-by: PleskLin CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gxARCUWesVL%2F4y9f6nT1o7lyMQVxFF86vVq5iqb3UjemoSLX785RAAAPCMW9ConN4CzfWHz0Z%2B9ePHgFi%2FnLtjfvs7B9RTUcDeN2mVuEm0uDyJCcBkdNnwu%2F%2BsCML09Rv3eFRusxLsvTvEo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c6322df09e58c2d-EWR
2024-09-20 16:19:17 UTC	90	IN	Data Raw: 35 34 0d 0a 5b 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 67 65 6e 63 65 2d 69 6d 6d 6f 62 69 6c 69 65 72 65 2d 6c 75 62 65 72 6f 6e 2e 63 6f 6d 5c 2f 35 61 31 31 37 64 36 33 2d 65 30 37 38 2d 34 64 36 35 2d 62 65 30 62 2d 66 61 37 61 62 32 34 61 39 66 38 66 5c 2f 22 5d 0d 0a Data Ascii: 54["https:\/\/agence-immobiliere-luberon.com\/5a117d63-e078-4d65-be0b-fa7ab24a9f8f\/"]
2024-09-20 16:19:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	56625	104.18.94.41	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:17 UTC	589	OUT	GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://agence-immobiliere-luberon.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:17 UTC	356	IN	HTTP/1.1 302 Found Date: Fri, 20 Sep 2024 16:19:17 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/g/ec4b873d446c/api.js Server: cloudflare CF-RAY: 8c6322e28eb342d7-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	56626	104.17.25.14	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:17 UTC	570	OUT	GET /ajax/libs/jquery/3.6.1/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://agence-immobiliere-luberon.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:17 UTC	923	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:19:17 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"63091225-797c" Last-Modified: Fri, 26 Aug 2022 18:34:13 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 78600 Expires: Wed, 10 Sep 2025 16:19:17 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t5RhgA8CgBJFoWlYZEDI9q3qRwVOsxwRhMm31ODHUvTsM63GwU7wUfCQyQ6ZUlypNkTlCAIJ7Q0cTQJXPCg7yKqiivLosF%2BzgcpMDoaOnhl8if5k6x0h46WsPxfEvQKW07HQXl9J"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8c6322e28e6ac341-EWR
2024-09-20 16:19:17 UTC	446	IN	Data Raw: 37 63 30 33 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: 7c03/! jQuery v3.6.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Erro
2024-09-20 16:19:17 UTC	1369	IN	Data Raw: 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 66 6c 61 74 2e 63 61 6c 6c 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 65 29 7d 2c 75 3d 74 2e 70 75 73 68 2c 69 3d 74 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 6f 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 79 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 79 2e 74 6f 53 74 72 69 6e 67 2c 6c 3d 61 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 76 3d 7b 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 2e 6e 6f 64 65 54 79 70 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 2e 69 74 Data Ascii: (e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),v={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.it
2024-09-20 16:19:17 UTC	1369	IN	Data Raw: 76 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 74 2b 31 29 25 32 7d 29 29 7d 2c 6f 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 25 32 7d 29 29 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6e 3d 2b 65 2b 28 65 3c 30 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 30 3c 3d 6e 26 26 6e 3c 74 3f 5b 74 68 69 73 5b 6e 5d 5d 3a 5b 5d 29 7d 2c 65 Data Ascii: ven:function(){return this.pushStack(S.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(S.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.pushStack(0<=n&&n<t?[this[n]]:[])},e
2024-09-20 16:19:17 UTC	1369	IN	Data Raw: 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 28 70 28 4f 62 6a 65 63 74 28 65 29 29 3f 53 2e 6d 65 72 67 65 28 6e 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 5b 65 5d 3a 65 29 3a 75 2e 63 61 6c 6c 28 6e 2c 65 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 2d 31 3a 69 2e 63 61 6c 6c 28 74 2c 65 2c 6e 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 65 5b 69 2b 2b 5d 3d 74 5b 72 5d 3b 72 65 74 75 72 6e 20 65 Data Ascii: eArray:function(e,t){var n=t\|\|[];return null!=e&&(p(Object(e))?S.merge(n,"string"==typeof e?[e]:e):u.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=t[r];return e
2024-09-20 16:19:17 UTC	1369	IN	Data Raw: 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 7c 28 22 2b 49 2b 22 29 29 7c 29 22 2b 4d 2b 22 2a 5c 5c 5d 22 2c 46 3d 22 3a 28 22 2b 49 2b 22 29 28 3f 3a 5c 5c 28 28 28 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 29 7c 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 2b 57 2b 22 29 2a 29 7c 2e 2a 29 5c 5c 29 7c 29 22 2c 24 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 2b 22 2c 22 67 22 29 2c 42 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 28 3f 3a 5c 5c 5c 5c 2e 29 2a 29 22 2b 4d 2b 22 2b 24 22 2c 22 67 22 29 2c 5f 3d 6e 65 77 20 52 65 67 Data Ascii: "((?:\\\\.\|[^\\\\\"]))\"\|("+I+"))\|)"+M+"\\]",F=":("+I+")(?:\\((('((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\")\|((?:\\\\.\|[^\\\\()[\\]]\|"+W+"))\|.)\\)\|)",$=new RegExp(M+"+","g"),B=new RegExp("^"+M+"+\|((?:^\|[^\\\\])(?:\\\\.)*)"+M+"+$","g"),_=new Reg
2024-09-20 16:19:17 UTC	1369	IN	Data Raw: 61 65 3d 62 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 26 26 22 66 69 65 6c 64 73 65 74 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 6e 65 78 74 3a 22 6c 65 67 65 6e 64 22 7d 29 3b 74 72 79 7b 48 2e 61 70 70 6c 79 28 74 3d 4f 2e 63 61 6c 6c 28 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 74 5b 70 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 65 29 7b 48 3d 7b 61 70 70 6c 79 3a 74 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 4c 2e 61 70 70 6c 79 28 65 2c 4f 2e 63 61 6c 6c 28 74 29 Data Ascii: ae=be(function(e){return!0===e.disabled&&"fieldset"===e.nodeName.toLowerCase()},{dir:"parentNode",next:"legend"});try{H.apply(t=O.call(p.childNodes),p.childNodes),t[p.childNodes.length].nodeType}catch(e){H={apply:t.length?function(e,t){L.apply(e,O.call(t)
2024-09-20 16:19:17 UTC	1369	IN	Data Raw: 2e 70 75 73 68 28 74 2b 22 20 22 29 3e 62 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 72 2e 73 68 69 66 74 28 29 5d 2c 65 5b 74 2b 22 20 22 5d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 53 5d 3d 21 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 76 61 72 20 74 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 65 28 65 2c 74 29 7b 76 61 72 20 Data Ascii: .push(t+" ")>b.cacheLength&&delete e[r.shift()],e[t+" "]=n}}function le(e){return e[S]=!0,e}function ce(e){var t=C.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.removeChild(t),t=null}}function fe(e,t){var
2024-09-20 16:19:17 UTC	1369	IN	Data Raw: 21 3d 43 26 26 39 3d 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 26 26 72 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 61 3d 28 43 3d 72 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 45 3d 21 69 28 43 29 2c 70 21 3d 43 26 26 28 6e 3d 43 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 6e 2e 74 6f 70 21 3d 3d 6e 26 26 28 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 6c 6f 61 64 22 2c 6f 65 2c 21 31 29 3a 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 75 6e 6c 6f 61 64 22 2c 6f 65 29 29 2c 64 2e 73 63 6f 70 65 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 Data Ascii: !=C&&9===r.nodeType&&r.documentElement&&(a=(C=r).documentElement,E=!i(C),p!=C&&(n=C.defaultView)&&n.top!==n&&(n.addEventListener?n.addEventListener("unload",oe,!1):n.attachEvent&&n.attachEvent("onunload",oe)),d.scope=ce(function(e){return a.appendChild(e)
2024-09-20 16:19:17 UTC	1369	IN	Data Raw: 64 22 29 29 26 26 6e 2e 76 61 6c 75 65 3d 3d 3d 65 29 72 65 74 75 72 6e 5b 6f 5d 7d 72 65 74 75 72 6e 5b 5d 7d 7d 29 2c 62 2e 66 69 6e 64 2e 54 41 47 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 3a 64 2e 71 73 61 3f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3a 76 6f 69 64 20 30 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 5b 5d 2c 69 3d 30 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 Data Ascii: d"))&&n.value===e)return[o]}return[]}}),b.find.TAG=d.getElementsByTagName?function(e,t){return"undefined"!=typeof t.getElementsByTagName?t.getElementsByTagName(e):d.qsa?t.querySelectorAll(e):void 0}:function(e,t){var n,r=[],i=0,o=t.getElementsByTagName(e)
2024-09-20 16:19:17 UTC	1369	IN	Data Raw: 22 2c 22 68 69 64 64 65 6e 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 79 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4d 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 65 6e 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 79 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 64 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 64 69 73 61 62 6c 65 64 3d 21 30 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 64 69 73 Data Ascii: ","hidden"),e.appendChild(t).setAttribute("name","D"),e.querySelectorAll("[name=d]").length&&y.push("name"+M+"[^$\|!~]?="),2!==e.querySelectorAll(":enabled").length&&y.push(":enabled",":disabled"),a.appendChild(e).disabled=!0,2!==e.querySelectorAll(":dis

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	56627	104.18.94.41	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:18 UTC	573	OUT	GET /turnstile/v0/g/ec4b873d446c/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://agence-immobiliere-luberon.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:18 UTC	441	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:19:18 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47262 Connection: close accept-ranges: bytes last-modified: Tue, 17 Sep 2024 16:06:37 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8c6322e67be243c4-EWR
2024-09-20 16:19:18 UTC	1369	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 56 74 28 65 2c 72 2c 61 2c 6f 2c 63 2c 6c 2c 67 29 7b 74 72 79 7b 76 61 72 20 66 3d 65 5b 6c 5d 28 67 29 2c 70 3d 66 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 73 29 7b 61 28 73 29 3b 72 65 74 75 72 6e 7d 66 2e 64 6f 6e 65 3f 72 28 70 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 70 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 72 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Vt(e,r,a,o,c,l,g){try{var f=e[l](g),p=f.value}catch(s){a(s);return}f.done?r(p):Promise.resolve(p).then(o,c)}function Wt(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var l=e.apply(r,a);funct
2024-09-20 16:19:18 UTC	1369	IN	Data Raw: 74 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 2c 72 29 7b 76 61 72 20 61 3d 65 3d 3d 6e 75 6c 6c 3f 6e 75 6c 6c 3a 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 61 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 6f 3d 5b 5d 2c 63 3d 21 30 2c 6c 3d 21 31 2c 67 2c 66 3b 74 72 79 7b 66 6f 72 28 61 3d 61 2e 63 61 6c 6c 28 65 29 3b 21 28 63 3d 28 67 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 6f 2e 70 75 73 68 28 67 2e 76 61 6c 75 65 29 2c 21 28 72 26 26 6f 2e 6c 65 6e 67 74 68 3d 3d 3d 72 29 29 3b 63 3d 21 30 29 Data Ascii: t(e){if(Array.isArray(e))return e}function Bt(e,r){var a=e==null?null:typeof Symbol!="undefined"&&e[Symbol.iterator]\|\|e["@@iterator"];if(a!=null){var o=[],c=!0,l=!1,g,f;try{for(a=a.call(e);!(c=(g=a.next()).done)&&(o.push(g.value),!(r&&o.length===r));c=!0)
2024-09-20 16:19:18 UTC	1369	IN	Data Raw: 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 28 73 29 7b 69 66 28 6f 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 65 78 65 63 75 74 69 6e 67 2e 22 29 3b 66 6f 72 28 3b 67 26 26 28 67 3d 30 2c 73 5b 30 5d 26 26 28 61 3d 30 29 29 2c 61 3b 29 74 72 79 7b 69 66 28 6f 3d 31 2c 63 26 26 28 6c 3d 73 5b 30 5d 26 32 3f 63 2e 72 65 74 75 72 6e 3a 73 5b 30 5d 3f 63 2e 74 68 72 6f 77 7c 7c 28 28 6c 3d 63 2e 72 65 74 75 72 6e 29 26 26 6c 2e 63 61 6c 6c 28 63 29 2c 30 29 3a 63 2e 6e 65 78 74 29 26 26 21 28 6c 3d 6c 2e 63 61 6c 6c 28 63 2c 73 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 6c 3b 73 77 69 74 63 68 28 63 3d 30 2c 6c 26 26 28 73 3d 5b 73 5b 30 5d 26 32 2c 6c 2e 76 61 6c Data Ascii: ])}}function p(s){if(o)throw new TypeError("Generator is already executing.");for(;g&&(g=0,s[0]&&(a=0)),a;)try{if(o=1,c&&(l=s[0]&2?c.return:s[0]?c.throw\|\|((l=c.return)&&l.call(c),0):c.next)&&!(l=l.call(c,s[1])).done)return l;switch(c=0,l&&(s=[s[0]&2,l.val
2024-09-20 16:19:18 UTC	1369	IN	Data Raw: 29 29 3b 76 61 72 20 56 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 2c 65 2e 4c 49 47 48 54 3d 22 6c 69 67 68 74 22 2c 65 2e 44 41 52 4b 3d 22 64 61 72 6b 22 7d 29 28 56 65 7c 7c 28 56 65 3d 7b 7d 29 29 3b 76 61 72 20 53 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 46 41 49 4c 55 52 45 5f 57 4f 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 3d 22 66 61 69 6c 75 72 65 2d 77 6f 2d 68 61 76 69 6e 67 2d 74 72 6f 75 62 6c 65 73 22 2c 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 3d 22 66 61 69 6c 75 72 65 2d 68 61 76 69 6e 67 2d 74 72 6f 75 62 6c 65 73 22 2c 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 3d 22 66 61 69 6c 75 72 65 2d 66 65 65 64 62 61 63 6b 22 2c 65 2e 46 41 49 Data Ascii: ));var Ve;(function(e){e.AUTO="auto",e.LIGHT="light",e.DARK="dark"})(Ve\|\|(Ve={}));var Se;(function(e){e.FAILURE_WO_HAVING_TROUBLES="failure-wo-having-troubles",e.FAILURE_HAVING_TROUBLES="failure-having-troubles",e.FAILURE_FEEDBACK="failure-feedback",e.FAI
2024-09-20 16:19:18 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 4c 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 2e 69 6e 64 65 78 4f 66 28 72 29 21 3d 3d 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 64 61 72 6b 22 2c 22 6c 69 67 68 74 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3e 30 26 26 65 3c 39 65 35 7d 66 75 6e 63 74 69 6f 6e 20 63 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3e 30 26 26 65 3c 33 36 65 34 7d 76 61 72 20 41 72 3d 2f 5e 5b 30 2d 39 41 2d 5a 61 2d 7a 5f 2d 5d 7b 33 2c 31 30 30 7d 24 2f 3b 66 75 6e 63 74 69 6f 6e 20 58 74 28 65 29 7b 72 65 74 75 72 6e Data Ascii: unction L(e,r){return e.indexOf(r)!==-1}function nt(e){return L(["auto","dark","light"],e)}function it(e){return L(["auto","never"],e)}function ot(e){return e>0&&e<9e5}function ct(e){return e>0&&e<36e4}var Ar=/^[0-9A-Za-z_-]{3,100}$/;function Xt(e){return
2024-09-20 16:19:18 UTC	1369	IN	Data Raw: 61 6c 6c 65 6e 67 65 5f 72 65 73 70 6f 6e 73 65 22 2c 79 74 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 22 2c 5f 74 3d 22 67 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 6f 6e 73 65 22 2c 65 72 3d 38 65 33 2c 62 74 3d 22 70 72 69 76 61 74 65 2d 74 6f 6b 65 6e 22 2c 74 72 3d 33 2c 72 72 3d 35 30 30 2c 61 72 3d 35 30 30 2c 59 3d 22 30 2f 30 22 3b 76 61 72 20 43 72 3d 5b 22 62 67 2d 62 67 22 2c 22 64 61 2d 64 6b 22 2c 22 64 65 2d 64 65 22 2c 22 65 6c 2d 67 72 22 2c 22 6a 61 2d 6a 70 22 2c 22 6d 73 2d 6d 79 22 2c 22 72 75 2d 72 75 22 2c 22 73 6b 2d 73 6b 22 2c 22 73 6c 2d 73 69 22 2c 22 73 72 2d 62 61 22 2c 22 74 6c 2d 70 68 22 2c 22 75 6b 2d 75 61 22 5d 2c 4e 72 3d 5b 22 61 72 2d 65 67 22 2c 22 65 73 2d 65 73 22 2c 22 63 73 2d 63 7a Data Ascii: allenge_response",yt="cf-turnstile-response",_t="g-recaptcha-response",er=8e3,bt="private-token",tr=3,rr=500,ar=500,Y="0/0";var Cr=["bg-bg","da-dk","de-de","el-gr","ja-jp","ms-my","ru-ru","sk-sk","sl-si","sr-ba","tl-ph","uk-ua"],Nr=["ar-eg","es-es","cs-cz
2024-09-20 16:19:18 UTC	1369	IN	Data Raw: 72 46 65 65 64 62 61 63 6b 2c 6f 3d 65 2e 69 73 4d 6f 64 65 72 61 74 65 6c 79 56 65 72 62 6f 73 65 3b 72 65 74 75 72 6e 20 61 26 26 72 3f 22 35 34 30 70 78 22 3a 61 26 26 6f 3f 22 35 30 30 70 78 22 3a 61 3f 22 34 38 30 70 78 22 3a 72 3f 22 36 35 30 70 78 22 3a 6f 3f 22 35 39 30 70 78 22 3a 22 35 37 30 70 78 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 48 65 28 65 29 7b 69 66 28 65 3d 3d 3d 76 6f 69 64 20 30 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 6e 72 28 65 2c 72 29 7b 69 66 28 21 55 28 65 2c Data Ascii: rFeedback,o=e.isModeratelyVerbose;return a&&r?"540px":a&&o?"500px":a?"480px":r?"650px":o?"590px":"570px"};function He(e){if(e===void 0)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e}function nr(e,r){if(!U(e,
2024-09-20 16:19:18 UTC	1369	IN	Data Raw: 66 28 6f 3d 3d 3d 6e 75 6c 6c 7c 7c 21 6f 72 28 6f 29 29 72 65 74 75 72 6e 20 6f 3b 69 66 28 74 79 70 65 6f 66 20 6f 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 69 66 28 74 79 70 65 6f 66 20 72 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 69 66 28 72 2e 68 61 73 28 6f 29 29 72 65 74 75 72 6e 20 72 2e 67 65 74 28 6f 29 3b 72 2e 73 65 74 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 72 65 74 75 72 6e 20 49 65 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 63 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 7d 72 65 74 75 72 6e 20 Data Ascii: f(o===null\|\|!or(o))return o;if(typeof o!="function")throw new TypeError("Super expression must either be null or a function");if(typeof r!="undefined"){if(r.has(o))return r.get(o);r.set(o,c)}function c(){return Ie(o,arguments,ce(this).constructor)}return
2024-09-20 16:19:18 UTC	1369	IN	Data Raw: 72 69 70 74 20 74 61 67 2c 20 73 6f 6d 65 20 66 65 61 74 75 72 65 73 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 22 2c 34 33 37 37 37 29 3b 76 61 72 20 72 3d 7b 6c 6f 61 64 65 64 41 73 79 6e 63 3a 21 31 2c 70 61 72 61 6d 73 3a 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 7d 3b 28 65 2e 61 73 79 6e 63 7c 7c 65 2e 64 65 66 65 72 29 26 26 28 72 2e 6c 6f 61 64 65 64 41 73 79 6e 63 3d 21 30 29 3b 76 61 72 20 61 3d 65 2e 73 72 63 2c 6f 3d 61 2e 73 70 6c 69 74 28 22 3f 22 29 3b 72 65 74 75 72 6e 20 6f 2e 6c 65 6e 67 74 68 3e 31 26 26 28 72 2e 70 61 72 61 6d 73 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 6f 5b 31 5d 29 29 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 57 28 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 70 Data Ascii: ript tag, some features may not be available",43777);var r={loadedAsync:!1,params:new URLSearchParams};(e.async\|\|e.defer)&&(r.loadedAsync=!0);var a=e.src,o=a.split("?");return o.length>1&&(r.params=new URLSearchParams(o[1])),r}function W(){return typeof p
2024-09-20 16:19:18 UTC	1369	IN	Data Raw: 69 75 73 3d 22 35 70 78 22 2c 73 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 70 78 22 2c 73 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 30 70 78 22 2c 73 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 3d 22 68 69 64 64 65 6e 22 2c 73 2e 73 74 79 6c 65 2e 6d 61 72 67 69 6e 3d 22 30 70 78 20 61 75 74 6f 22 3b 76 61 72 20 78 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 78 2e 69 64 3d 65 2b 22 2d 66 72 22 2c 78 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 67 29 2c 78 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 6c 6c 6f 77 22 2c 22 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 69 73 6f 6c 61 74 65 64 3b 20 66 75 6c 6c 73 63 72 65 65 6e 22 29 2c 78 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 61 6e 64 Data Ascii: ius="5px",s.style.left="0px",s.style.top="0px",s.style.overflow="hidden",s.style.margin="0px auto";var x=document.createElement("iframe");x.id=e+"-fr",x.setAttribute("src",g),x.setAttribute("allow","cross-origin-isolated; fullscreen"),x.setAttribute("sand

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.16	56629	104.17.24.14	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:18 UTC	380	OUT	GET /ajax/libs/jquery/3.6.1/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:18 UTC	957	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:19:18 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"63091225-797c" Last-Modified: Fri, 26 Aug 2022 18:34:13 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 78601 Expires: Wed, 10 Sep 2025 16:19:18 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HG5LrsdH6kOHLZAUUy3Jxs4gwobAQ7ywRZdQp0AOoo7jt7hb6RLujcIGWYTTolMx49ZOxEOYjC6R06l0oN3CenxAMaWP24yQ7Yo%2BrKuu3X60lmbDMgMnMbAQQx9Ezx%2FfXeLSCct%2B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8c6322e7bd007c69-EWR alt-svc: h3=":443"; ma=86400
2024-09-20 16:19:18 UTC	412	IN	Data Raw: 33 39 37 39 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: 3979/! jQuery v3.6.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Erro
2024-09-20 16:19:18 UTC	1369	IN	Data Raw: 74 79 70 65 4f 66 2c 73 3d 74 2e 73 6c 69 63 65 2c 67 3d 74 2e 66 6c 61 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 66 6c 61 74 2e 63 61 6c 6c 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 65 29 7d 2c 75 3d 74 2e 70 75 73 68 2c 69 3d 74 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 6f 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 79 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 79 2e 74 6f 53 74 72 69 6e 67 2c 6c 3d 61 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 76 3d 7b 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 Data Ascii: typeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),v={},m=function(e){return"function"==typeof e&&"number"!=typeof e
2024-09-20 16:19:18 UTC	1369	IN	Data Raw: 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 71 28 2d 31 29 7d 2c 65 76 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 74 2b 31 29 25 32 7d 29 29 7d 2c 6f 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 25 32 7d 29 29 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6e 3d 2b 65 2b 28 65 3c 30 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 Data Ascii: t:function(){return this.eq(-1)},even:function(){return this.pushStack(S.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(S.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.pu
2024-09-20 16:19:18 UTC	1369	IN	Data Raw: 6c 28 65 5b 72 5d 2c 72 2c 65 5b 72 5d 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 65 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 28 70 28 4f 62 6a 65 63 74 28 65 29 29 3f 53 2e 6d 65 72 67 65 28 6e 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 5b 65 5d 3a 65 29 3a 75 2e 63 61 6c 6c 28 6e 2c 65 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 2d 31 3a 69 2e 63 61 6c 6c 28 74 2c 65 2c 6e 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 2e 6c Data Ascii: l(e[r],r,e[r]))break;return e},makeArray:function(e,t){var n=t\|\|[];return null!=e&&(p(Object(e))?S.merge(n,"string"==typeof e?[e]:e):u.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.l
2024-09-20 16:19:18 UTC	1369	IN	Data Raw: 22 2b 4d 2b 22 2a 28 3f 3a 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 7c 28 22 2b 49 2b 22 29 29 7c 29 22 2b 4d 2b 22 2a 5c 5c 5d 22 2c 46 3d 22 3a 28 22 2b 49 2b 22 29 28 3f 3a 5c 5c 28 28 28 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 29 7c 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 2b 57 2b 22 29 2a 29 7c 2e 2a 29 5c 5c 29 7c 29 22 2c 24 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 2b 22 2c 22 67 22 29 2c 42 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 Data Ascii: "+M+"(?:'((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\"\|("+I+"))\|)"+M+"\\]",F=":("+I+")(?:\\((('((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\")\|((?:\\\\.\|[^\\\\()[\\]]\|"+W+"))\|.)\\)\|)",$=new RegExp(M+"+","g"),B=new RegExp("^"+M+"+\|((?:^\|[^\\\\])
2024-09-20 16:19:18 UTC	1369	IN	Data Raw: 36 29 2b 22 20 22 3a 22 5c 5c 22 2b 65 7d 2c 6f 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 54 28 29 7d 2c 61 65 3d 62 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 26 26 22 66 69 65 6c 64 73 65 74 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 6e 65 78 74 3a 22 6c 65 67 65 6e 64 22 7d 29 3b 74 72 79 7b 48 2e 61 70 70 6c 79 28 74 3d 4f 2e 63 61 6c 6c 28 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 74 5b 70 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 65 29 7b 48 3d 7b 61 70 70 6c 79 3a 74 2e 6c 65 6e 67 74 68 Data Ascii: 6)+" ":"\\"+e},oe=function(){T()},ae=be(function(e){return!0===e.disabled&&"fieldset"===e.nodeName.toLowerCase()},{dir:"parentNode",next:"legend"});try{H.apply(t=O.call(p.childNodes),p.childNodes),t[p.childNodes.length].nodeType}catch(e){H={apply:t.length
2024-09-20 16:19:18 UTC	1369	IN	Data Raw: 5b 5d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 72 2e 70 75 73 68 28 74 2b 22 20 22 29 3e 62 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 72 2e 73 68 69 66 74 28 29 5d 2c 65 5b 74 2b 22 20 22 5d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 53 5d 3d 21 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 76 61 72 20 74 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c Data Ascii: [];return function e(t,n){return r.push(t+" ")>b.cacheLength&&delete e[r.shift()],e[t+" "]=n}}function le(e){return e[S]=!0,e}function ce(e){var t=C.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.removeChil
2024-09-20 16:19:18 UTC	1369	IN	Data Raw: 2c 72 3d 65 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 3a 70 3b 72 65 74 75 72 6e 20 72 21 3d 43 26 26 39 3d 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 26 26 72 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 61 3d 28 43 3d 72 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 45 3d 21 69 28 43 29 2c 70 21 3d 43 26 26 28 6e 3d 43 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 6e 2e 74 6f 70 21 3d 3d 6e 26 26 28 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 6c 6f 61 64 22 2c 6f 65 2c 21 31 29 3a 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 75 6e 6c 6f 61 64 22 2c 6f 65 29 29 2c 64 2e 73 63 6f 70 65 3d 63 65 28 66 Data Ascii: ,r=e?e.ownerDocument\|\|e:p;return r!=C&&9===r.nodeType&&r.documentElement&&(a=(C=r).documentElement,E=!i(C),p!=C&&(n=C.defaultView)&&n.top!==n&&(n.addEventListener?n.addEventListener("unload",oe,!1):n.attachEvent&&n.attachEvent("onunload",oe)),d.scope=ce(f
2024-09-20 16:19:18 UTC	1369	IN	Data Raw: 69 5b 72 2b 2b 5d 29 69 66 28 28 6e 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 29 26 26 6e 2e 76 61 6c 75 65 3d 3d 3d 65 29 72 65 74 75 72 6e 5b 6f 5d 7d 72 65 74 75 72 6e 5b 5d 7d 7d 29 2c 62 2e 66 69 6e 64 2e 54 41 47 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 3a 64 2e 71 73 61 3f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3a 76 6f 69 64 20 30 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d Data Ascii: i[r++])if((n=o.getAttributeNode("id"))&&n.value===e)return[o]}return[]}}),b.find.TAG=d.getElementsByTagName?function(e,t){return"undefined"!=typeof t.getElementsByTagName?t.getElementsByTagName(e):d.qsa?t.querySelectorAll(e):void 0}:function(e,t){var n,r=
2024-09-20 16:19:18 UTC	1369	IN	Data Raw: 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 79 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4d 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 65 6e 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 79 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 64 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 64 69 73 61 62 6c Data Ascii: ment("input");t.setAttribute("type","hidden"),e.appendChild(t).setAttribute("name","D"),e.querySelectorAll("[name=d]").length&&y.push("name"+M+"[^$\|!~]?="),2!==e.querySelectorAll(":enabled").length&&y.push(":enabled",":disabled"),a.appendChild(e).disabl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	56628	35.190.80.1	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:18 UTC	539	OUT	OPTIONS /report/v4?s=t5RhgA8CgBJFoWlYZEDI9q3qRwVOsxwRhMm31ODHUvTsM63GwU7wUfCQyQ6ZUlypNkTlCAIJ7Q0cTQJXPCg7yKqiivLosF%2BzgcpMDoaOnhl8if5k6x0h46WsPxfEvQKW07HQXl9J HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://cdnjs.cloudflare.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:18 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Fri, 20 Sep 2024 16:19:18 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.16	56631	35.190.80.1	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:18 UTC	476	OUT	POST /report/v4?s=t5RhgA8CgBJFoWlYZEDI9q3qRwVOsxwRhMm31ODHUvTsM63GwU7wUfCQyQ6ZUlypNkTlCAIJ7Q0cTQJXPCg7yKqiivLosF%2BzgcpMDoaOnhl8if5k6x0h46WsPxfEvQKW07HQXl9J HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 457 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:18 UTC	457	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 32 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 38 37 36 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 61 67 65 6e 63 65 2d 69 6d 6d 6f 62 69 6c 69 65 72 65 2d 6c 75 62 65 72 6f 6e 2e 63 6f 6d 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 31 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 31 37 2e 32 35 2e 31 34 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 6f 6b 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c Data Ascii: [{"age":2,"body":{"elapsed_time":876,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://agence-immobiliere-luberon.com/","sampling_fraction":0.01,"server_ip":"104.17.25.14","status_code":200,"type":"ok"},"type":"network-error",
2024-09-20 16:19:18 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Fri, 20 Sep 2024 16:19:18 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.16	56630	152.199.21.175	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:19 UTC	656	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://agence-immobiliere-luberon.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:19 UTC	720	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 15590437 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Fri, 20 Sep 2024 16:19:19 GMT Etag: 0x8D8731240E548EB Last-Modified: Sun, 18 Oct 2020 03:02:30 GMT Server: ECAcc (lhc/7944) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1c016ee5-901e-008a-08ad-7d0366000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2024-09-20 16:19:19 UTC	16383	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-09-20 16:19:19 UTC	791	IN	Data Raw: 01 80 00 00 01 80 00 28 00 00 00 18 00 00 00 30 00 00 00 01 00 04 00 00 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 Data Ascii: (0"P""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.16	56632	104.18.94.41	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:19 UTC	814	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/lxqex/0x4AAAAAAAi2xvnxdhQA0wSe/light/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://agence-immobiliere-luberon.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:19 UTC	1369	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:19:19 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 164897 Connection: close cross-origin-embedder-policy: require-corp permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 document-policy: js-profiling cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cross-origin-opener-policy: same-origin content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self' referrer-policy: same-origin
2024-09-20 16:19:19 UTC	52	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 63 36 33 32 32 66 31 36 62 39 66 38 63 65 65 2d 45 57 52 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8c6322f16b9f8cee-EWR
2024-09-20 16:19:19 UTC	1317	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-09-20 16:19:19 UTC	1369	IN	Data Raw: 25 3b 6d 61 72 67 69 6e 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 Data Ascii: %;margin:0;overflow:hidden;padding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-web
2024-09-20 16:19:19 UTC	1369	IN	Data Raw: 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 7d 23 73 75 63 63 65 73 73 2d 70 72 65 2d 69 20 6c 69 6e 65 7b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 Data Ascii: ght:30px;width:30px}#success-pre-i line{stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;st
2024-09-20 16:19:19 UTC	1369	IN	Data Raw: 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e Data Ascii: allenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dark #challen
2024-09-20 16:19:19 UTC	1369	IN	Data Raw: 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 Data Ascii: dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-helper-loop
2024-09-20 16:19:19 UTC	1369	IN	Data Raw: 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 61 63 74 69 76 65 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 66 6f 63 75 73 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 31 36 36 33 37 39 7d 23 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 32 35 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 70 78 7d 2e 66 61 69 6c 75 72 65 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 Data Ascii: ,#challenge-overlay a:link,#challenge-overlay a:visited{color:#232323}#challenge-overlay a:active,#challenge-overlay a:focus,#challenge-overlay a:hover{color:#166379}#logo{height:25px;margin-bottom:1px}.failure-circle{stroke-dasharray:166;stroke-dashoffse
2024-09-20 16:19:19 UTC	1369	IN	Data Raw: 6e 3a 61 6c 6c 20 2e 31 73 20 65 61 73 65 2d 69 6e 3b 77 69 64 74 68 3a 32 34 70 78 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 38 7d 2e 63 62 2d 6c 62 20 2e 63 62 2d 69 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 63 62 2d 6c 62 20 2e 63 62 2d 6c 62 2d 74 7b 67 72 69 64 2d 63 6f 6c 75 6d 6e 3a 32 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 63 6f 6e 74 65 6e 74 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c Data Ascii: n:all .1s ease-in;width:24px;z-index:9998}.cb-lb .cb-i:after{border-radius:5px;content:"";position:absolute}.cb-lb .cb-lb-t{grid-column:2;margin-left:8px}.size-compact{font-size:14px}.size-compact #content{align-items:flex-start;display:flex;flex-flow:col
2024-09-20 16:19:19 UTC	1369	IN	Data Raw: 72 74 6c 7d 2e 72 74 6c 20 2e 63 62 2d 6c 62 2d 74 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 72 74 6c 20 23 65 78 70 69 72 65 64 2d 69 2c 2e 72 74 6c 20 23 66 61 69 6c 2d 69 2c 2e 72 74 6c 20 23 6f 76 65 72 72 75 6e 2d 69 2c 2e 72 74 6c 20 23 73 70 69 6e 6e 65 72 2d 69 2c 2e 72 74 6c 20 23 73 75 63 63 65 73 73 2d 69 2c 2e 72 74 6c 20 23 74 69 6d 65 6f 75 74 2d 69 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 Data Ascii: rtl}.rtl .cb-lb-t{margin-left:0;margin-right:8px;padding:0}.rtl #expired-i,.rtl #fail-i,.rtl #overrun-i,.rtl #spinner-i,.rtl #success-i,.rtl #timeout-i{left:255px}.rtl #fr-helper{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px
2024-09-20 16:19:19 UTC	1369	IN	Data Raw: 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 61 63 74 69 76 65 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 66 6f 63 75 73 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c Data Ascii: challenge-error-title a{color:#232323}#challenge-error-title a:active,#challenge-error-title a:focus,#challenge-error-title a:hover{color:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#chall

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.16	56633	152.199.21.175	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:20 UTC	406	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:20 UTC	720	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 15590438 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Fri, 20 Sep 2024 16:19:20 GMT Etag: 0x8D8731240E548EB Last-Modified: Sun, 18 Oct 2020 03:02:30 GMT Server: ECAcc (lhc/7944) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1c016ee5-901e-008a-08ad-7d0366000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2024-09-20 16:19:20 UTC	16383	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-09-20 16:19:20 UTC	791	IN	Data Raw: 01 80 00 00 01 80 00 28 00 00 00 18 00 00 00 30 00 00 00 01 00 04 00 00 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 Data Ascii: (0"P""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.16	56634	104.18.94.41	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:20 UTC	731	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8c6322f16b9f8cee&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/lxqex/0x4AAAAAAAi2xvnxdhQA0wSe/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:20 UTC	301	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:19:20 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 119086 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8c6322f5dc78178c-EWR
2024-09-20 16:19:20 UTC	1068	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 71 5a 4a 79 54 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.qZJyT2={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"http
2024-09-20 16:19:20 UTC	1369	IN	Data Raw: 65 5f 69 66 72 61 6d 65 5f 61 6c 74 22 3a 22 57 69 64 67 65 74 25 32 30 63 6f 6e 74 61 69 6e 69 6e 67 25 32 30 61 25 32 30 43 6c 6f 75 64 66 6c 61 72 65 25 32 30 73 65 63 75 72 69 74 79 25 32 30 63 68 61 6c 6c 65 6e 67 65 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 65 6e 64 25 32 30 46 65 65 64 62 61 63 6b 22 2c 22 6e 6f 74 5f 65 6d 62 65 64 64 65 64 22 3a 22 54 68 69 73 25 32 30 63 68 61 6c 6c 65 6e 67 65 25 32 30 6d 75 73 74 25 32 30 62 65 25 32 30 65 6d 62 65 64 64 65 64 25 32 30 69 6e 74 6f 25 32 30 61 25 32 30 70 61 72 65 6e 74 25 32 30 70 61 67 65 2e 22 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 22 59 6f 75 72 20 66 65 65 Data Ascii: e_iframe_alt":"Widget%20containing%20a%20Cloudflare%20security%20challenge","turnstile_feedback_description":"Send%20Feedback","not_embedded":"This%20challenge%20must%20be%20embedded%20into%20a%20parent%20page.","feedback_report_output_subtitle":"Your fee
2024-09-20 16:19:20 UTC	1369	IN	Data Raw: 73 65 49 6e 74 28 67 48 28 31 32 34 38 29 29 2f 31 31 2b 70 61 72 73 65 49 6e 74 28 67 48 28 36 39 31 29 29 2f 31 32 2c 64 3d 3d 3d 66 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 38 36 32 37 31 37 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 49 28 34 34 32 29 5d 2c 65 4f 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 4a 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 66 6f 72 28 67 4a 3d 67 49 2c 67 3d 7b 7d 2c 67 5b 67 4a 28 31 36 37 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 29 7b 72 65 74 75 72 6e 20 6e 2b 73 7d 2c 67 5b 67 4a 28 35 34 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 29 7b 72 65 Data Ascii: seInt(gH(1248))/11+parseInt(gH(691))/12,d===f)break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,862717),eM=this\|\|self,eN=eM[gI(442)],eO=function(f,gJ,g,h,i,j,k,l,m){for(gJ=gI,g={},g[gJ(1675)]=function(n,s){return n+s},g[gJ(543)]=function(n,s){re
2024-09-20 16:19:20 UTC	1369	IN	Data Raw: 21 5b 5d 3b 29 7b 73 77 69 74 63 68 28 6c 5b 6d 2b 2b 5d 29 7b 63 61 73 65 27 30 27 3a 6e 3d 67 77 5b 67 4e 28 34 30 39 29 5d 28 46 29 5b 67 4e 28 31 31 38 34 29 5d 28 27 2b 27 2c 6b 5b 67 4e 28 31 30 33 32 29 5d 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 27 3a 6f 3d 65 4d 5b 67 4e 28 31 34 39 38 29 5d 5b 67 4e 28 36 35 32 29 5d 3f 6b 5b 67 4e 28 35 34 37 29 5d 28 6b 5b 67 4e 28 35 34 37 29 5d 28 27 68 2f 27 2c 65 4d 5b 67 4e 28 31 34 39 38 29 5d 5b 67 4e 28 36 35 32 29 5d 29 2c 27 2f 27 29 3a 27 27 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 32 27 3a 73 3d 67 4e 28 33 35 31 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 33 27 3a 47 5b 67 4e 28 34 35 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 34 Data Ascii: ![];){switch(l[m++]){case'0':n=gw[gN(409)](F)[gN(1184)]('+',k[gN(1032)]);continue;case'1':o=eM[gN(1498)][gN(652)]?k[gN(547)](k[gN(547)]('h/',eM[gN(1498)][gN(652)]),'/'):'';continue;case'2':s=gN(351);continue;case'3':G[gN(452)]=function(){};continue;case'4
2024-09-20 16:19:20 UTC	1369	IN	Data Raw: 36 29 5d 28 6a 5b 67 4f 28 35 33 35 29 5d 29 2c 65 4d 5b 67 4f 28 36 31 33 29 5d 28 66 75 6e 63 74 69 6f 6e 28 67 51 2c 6e 2c 6f 2c 76 2c 78 2c 42 2c 43 2c 44 29 7b 69 66 28 67 51 3d 67 4f 2c 6e 3d 7b 7d 2c 6e 5b 67 51 28 31 34 37 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 76 5e 73 7d 2c 6e 5b 67 51 28 31 30 30 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 73 2d 76 7d 2c 6e 5b 67 51 28 39 33 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 76 5e 73 7d 2c 6e 5b 67 51 28 31 35 36 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 76 5e 73 7d 2c 6e 5b 67 51 28 31 37 30 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 76 5e Data Ascii: 6)](j[gO(535)]),eM[gO(613)](function(gQ,n,o,v,x,B,C,D){if(gQ=gO,n={},n[gQ(1479)]=function(s,v){return v^s},n[gQ(1009)]=function(s,v){return s-v},n[gQ(932)]=function(s,v){return v^s},n[gQ(1567)]=function(s,v){return v^s},n[gQ(1702)]=function(s,v){return v^
2024-09-20 16:19:20 UTC	1369	IN	Data Raw: 64 2c 65 4d 5b 67 49 28 31 35 33 38 29 5d 28 67 49 28 31 35 33 37 29 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 68 44 2c 64 2c 65 29 7b 68 44 3d 67 49 2c 64 3d 7b 27 71 52 71 43 72 27 3a 68 44 28 31 30 37 35 29 2c 27 4a 51 63 6f 73 27 3a 68 44 28 31 33 36 39 29 2c 27 76 43 54 46 56 27 3a 68 44 28 37 33 32 29 2c 27 6b 45 48 6c 75 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 29 7b 72 65 74 75 72 6e 20 66 28 67 2c 68 29 7d 2c 27 66 44 49 6c 76 27 3a 68 44 28 31 35 38 32 29 2c 27 6d 57 59 47 78 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 28 67 29 7d 7d 2c 65 3d 63 5b 68 44 28 33 37 37 29 5d 2c 65 26 26 65 5b 68 44 28 36 39 39 29 5d 3d 3d 3d 64 5b 68 44 28 35 37 35 29 5d 26 26 65 5b 68 44 28 31 30 30 38 29 5d 3d 3d 3d 64 5b 68 44 28 31 Data Ascii: d,eM[gI(1538)](gI(1537),function(c,hD,d,e){hD=gI,d={'qRqCr':hD(1075),'JQcos':hD(1369),'vCTFV':hD(732),'kEHlu':function(f,g,h){return f(g,h)},'fDIlv':hD(1582),'mWYGx':function(f,g){return f(g)}},e=c[hD(377)],e&&e[hD(699)]===d[hD(575)]&&e[hD(1008)]===d[hD(1
2024-09-20 16:19:20 UTC	1369	IN	Data Raw: 28 6a 32 29 7b 69 66 28 6a 32 3d 67 49 2c 65 4d 5b 6a 32 28 31 34 39 39 29 5d 29 72 65 74 75 72 6e 3b 65 4d 5b 6a 32 28 31 34 39 39 29 5d 3d 21 21 5b 5d 7d 2c 67 73 3d 30 2c 65 4e 5b 67 49 28 31 34 34 38 29 5d 3d 3d 3d 67 49 28 36 37 30 29 3f 65 4e 5b 67 49 28 31 35 33 38 29 5d 28 67 49 28 31 37 32 32 29 2c 66 75 6e 63 74 69 6f 6e 28 6a 6c 2c 63 29 7b 6a 6c 3d 67 49 2c 63 3d 7b 27 6d 43 48 79 6f 27 3a 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 29 7b 72 65 74 75 72 6e 20 64 28 65 2c 66 29 7d 7d 2c 63 5b 6a 6c 28 31 36 32 35 29 5d 28 73 65 74 54 69 6d 65 6f 75 74 2c 67 76 2c 30 29 7d 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 67 76 2c 30 29 2c 67 77 3d 66 75 6e 63 74 69 6f 6e 28 6a 6d 2c 64 2c 65 2c 66 2c 67 29 7b 72 65 74 75 72 6e 20 6a 6d 3d 67 49 2c 64 3d 7b Data Ascii: (j2){if(j2=gI,eM[j2(1499)])return;eM[j2(1499)]=!![]},gs=0,eN[gI(1448)]===gI(670)?eN[gI(1538)](gI(1722),function(jl,c){jl=gI,c={'mCHyo':function(d,e,f){return d(e,f)}},c[jl(1625)](setTimeout,gv,0)}):setTimeout(gv,0),gw=function(jm,d,e,f,g){return jm=gI,d={
2024-09-20 16:19:20 UTC	1369	IN	Data Raw: 20 68 2a 69 7d 2c 27 46 4b 6c 75 58 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 63 46 6f 72 77 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 6c 6a 66 51 63 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 79 71 5a 73 4f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 6d 6c 48 70 76 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2a 69 7d 2c 27 45 4a 44 57 5a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 79 4f 54 55 57 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 76 70 50 47 64 27 Data Ascii: hi},'FKluX':function(h,i){return h<i},'cForw':function(h,i){return h==i},'ljfQc':function(h,i){return h(i)},'yqZsO':function(h,i){return h<i},'mlHpv':function(h,i){return hi},'EJDWZ':function(h,i){return h==i},'yOTUW':function(h,i){return h(i)},'vpPGd'
2024-09-20 16:19:20 UTC	1369	IN	Data Raw: 7c 50 26 31 2e 35 35 2c 4c 3d 3d 6f 2d 31 3f 28 4c 3d 30 2c 4a 5b 6a 70 28 37 32 39 29 5d 28 73 28 4b 29 29 2c 4b 3d 30 29 3a 4c 2b 2b 2c 50 3e 3e 3d 31 2c 43 2b 2b 29 3b 7d 65 6c 73 65 20 46 3d 78 7c 7c 6a 70 28 31 32 39 39 29 2c 6a 28 4d 2c 66 75 6e 63 74 69 6f 6e 28 52 2c 6a 71 29 7b 6a 71 3d 6a 70 2c 52 5b 6a 71 28 31 34 35 39 29 5d 5b 6a 71 28 35 35 39 29 5d 3d 4e 2c 52 5b 6a 71 28 31 34 35 39 29 5d 5b 6a 71 28 35 39 35 29 5d 3d 6a 71 28 31 34 33 36 29 7d 29 3b 47 2d 2d 2c 30 3d 3d 47 26 26 28 47 3d 4d 61 74 68 5b 6a 70 28 36 34 32 29 5d 28 32 2c 49 29 2c 49 2b 2b 29 2c 64 65 6c 65 74 65 20 45 5b 46 5d 7d 65 6c 73 65 20 66 6f 72 28 50 3d 44 5b 46 5d 2c 43 3d 30 3b 43 3c 49 3b 4b 3d 64 5b 6a 70 28 31 36 38 33 29 5d 28 64 5b 6a 70 28 39 32 38 29 5d 28 Data Ascii: \|P&1.55,L==o-1?(L=0,J[jp(729)](s(K)),K=0):L++,P>>=1,C++);}else F=x\|\|jp(1299),j(M,function(R,jq){jq=jp,R[jq(1459)][jq(559)]=N,R[jq(1459)][jq(595)]=jq(1436)});G--,0==G&&(G=Math[jp(642)](2,I),I++),delete E[F]}else for(P=D[F],C=0;C<I;K=d[jp(1683)](d[jp(928)](
2024-09-20 16:19:20 UTC	1369	IN	Data Raw: 70 28 33 35 34 29 5d 28 4b 2c 31 29 2c 64 5b 6a 70 28 31 37 31 32 29 5d 28 50 2c 31 29 29 2c 64 5b 6a 70 28 37 31 32 29 5d 28 4c 2c 6f 2d 31 29 3f 28 4c 3d 30 2c 4a 5b 6a 70 28 37 32 39 29 5d 28 73 28 4b 29 29 2c 4b 3d 30 29 3a 4c 2b 2b 2c 50 3e 3e 3d 31 2c 43 2b 2b 29 3b 66 6f 72 28 3b 3b 29 69 66 28 4b 3c 3c 3d 31 2c 64 5b 6a 70 28 34 36 33 29 5d 28 4c 2c 6f 2d 31 29 29 7b 69 66 28 6a 70 28 31 36 36 31 29 3d 3d 3d 6a 70 28 31 36 36 31 29 29 7b 4a 5b 6a 70 28 37 32 39 29 5d 28 73 28 4b 29 29 3b 62 72 65 61 6b 7d 65 6c 73 65 20 72 65 74 75 72 6e 20 76 6f 69 64 28 49 28 29 2c 64 5b 6a 70 28 31 36 30 36 29 5d 28 4a 2c 64 5b 6a 70 28 31 36 34 35 29 5d 2c 6a 70 28 37 34 36 29 29 29 7d 65 6c 73 65 20 4c 2b 2b 3b 72 65 74 75 72 6e 20 4a 5b 6a 70 28 31 33 35 36 Data Ascii: p(354)](K,1),d[jp(1712)](P,1)),d[jp(712)](L,o-1)?(L=0,J[jp(729)](s(K)),K=0):L++,P>>=1,C++);for(;;)if(K<<=1,d[jp(463)](L,o-1)){if(jp(1661)===jp(1661)){J[jp(729)](s(K));break}else return void(I(),d[jp(1606)](J,d[jp(1645)],jp(746)))}else L++;return J[jp(1356

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.16	56635	104.18.94.41	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:20 UTC	796	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/lxqex/0x4AAAAAAAi2xvnxdhQA0wSe/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:20 UTC	210	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:19:20 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8c6322f7083e42fd-EWR
2024-09-20 16:19:20 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.16	56636	104.18.94.41	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:21 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8c6322f16b9f8cee&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:21 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:19:21 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 119175 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8c6322fc9eed430f-EWR alt-svc: h3=":443"; ma=86400
2024-09-20 16:19:21 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 71 5a 4a 79 54 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.qZJyT2={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"http
2024-09-20 16:19:21 UTC	1369	IN	Data Raw: 25 32 30 74 61 72 67 65 74 25 33 44 25 32 32 5f 62 6c 61 6e 6b 25 32 32 25 32 30 72 65 6c 25 33 44 25 32 32 6e 6f 6f 70 65 6e 65 72 25 32 30 6e 6f 72 65 66 65 72 72 65 72 25 32 32 25 32 30 68 72 65 66 25 33 44 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 25 32 32 25 33 45 43 6c 69 63 6b 25 32 30 68 65 72 65 25 32 30 66 6f 72 25 32 30 6d 6f 72 65 25 32 30 69 6e 66 6f 72 6d 61 74 69 6f 6e 25 33 43 25 32 46 61 25 33 45 22 2c 22 Data Ascii: %20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%20href%3D%22https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support%22%3EClick%20here%20for%20more%20information%3C%2Fa%3E","
2024-09-20 16:19:21 UTC	1369	IN	Data Raw: 65 49 6e 74 28 67 48 28 31 32 31 33 29 29 2f 31 30 2a 28 70 61 72 73 65 49 6e 74 28 67 48 28 35 32 36 29 29 2f 31 31 29 2c 66 3d 3d 3d 64 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 31 37 37 34 33 31 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 49 28 31 31 32 38 29 5d 2c 65 4d 5b 67 49 28 31 38 33 31 29 5d 3d 21 5b 5d 2c 65 4d 5b 67 49 28 38 30 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 30 29 7b 69 66 28 68 30 3d 67 49 2c 65 4d 5b 68 30 28 31 38 33 31 29 5d 29 72 65 74 75 72 6e 3b 65 4d 5b 68 30 28 31 38 33 31 29 5d 3d 21 21 5b 5d 7d 2c 65 55 3d 30 2c 65 4e 5b 67 49 28 31 38 39 31 29 5d 3d 3d 3d Data Ascii: eInt(gH(1213))/10*(parseInt(gH(526))/11),f===d)break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,177431),eM=this\|\|self,eN=eM[gI(1128)],eM[gI(1831)]=![],eM[gI(805)]=function(h0){if(h0=gI,eM[h0(1831)])return;eM[h0(1831)]=!![]},eU=0,eN[gI(1891)]===
2024-09-20 16:19:21 UTC	1369	IN	Data Raw: 27 65 76 65 6e 74 27 3a 68 64 28 31 30 33 34 29 2c 27 63 66 43 68 6c 4f 75 74 27 3a 65 4d 5b 68 64 28 31 31 34 31 29 5d 5b 68 64 28 31 33 34 39 29 5d 2c 27 63 66 43 68 6c 4f 75 74 53 27 3a 65 4d 5b 68 64 28 31 31 34 31 29 5d 5b 68 64 28 31 34 35 38 29 5d 2c 27 63 6f 64 65 27 3a 65 5b 68 64 28 31 34 30 30 29 5d 2c 27 72 63 56 27 3a 65 4d 5b 68 64 28 31 31 34 31 29 5d 5b 68 64 28 31 34 34 37 29 5d 7d 2c 27 2a 27 29 29 3a 69 5b 68 64 28 31 30 34 35 29 5d 28 6a 5b 68 64 28 31 31 34 31 29 5d 5b 68 64 28 38 33 38 29 5d 29 3d 3d 3d 2d 31 26 26 6f 5b 65 5b 68 64 28 39 31 36 29 5d 5d 26 26 28 69 3d 7b 7d 2c 69 5b 68 64 28 31 36 38 34 29 5d 3d 68 64 28 31 38 38 30 29 2c 69 5b 68 64 28 38 33 35 29 5d 3d 43 5b 68 64 28 31 31 34 31 29 5d 5b 68 64 28 31 32 37 36 29 5d Data Ascii: 'event':hd(1034),'cfChlOut':eM[hd(1141)][hd(1349)],'cfChlOutS':eM[hd(1141)][hd(1458)],'code':e[hd(1400)],'rcV':eM[hd(1141)][hd(1447)]},'*')):i[hd(1045)](j[hd(1141)][hd(838)])===-1&&o[e[hd(916)]]&&(i={},i[hd(1684)]=hd(1880),i[hd(835)]=C[hd(1141)][hd(1276)]
2024-09-20 16:19:21 UTC	1369	IN	Data Raw: 64 27 3a 68 66 28 31 31 30 38 29 2c 27 47 75 6f 46 58 27 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 72 65 74 75 72 6e 20 6d 21 3d 3d 6c 7d 2c 27 73 69 61 54 42 27 3a 68 66 28 37 32 35 29 2c 27 78 51 52 42 54 27 3a 68 66 28 31 34 39 35 29 2c 27 72 75 5a 71 6f 27 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 72 65 74 75 72 6e 20 6c 3d 3d 3d 6d 7d 2c 27 72 4f 57 49 71 27 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 2c 27 68 6e 4e 6f 56 27 3a 68 66 28 31 39 35 34 29 2c 27 44 4f 65 6b 51 27 3a 68 66 28 37 37 37 29 2c 27 58 6d 6b 66 51 27 3a 68 66 28 31 36 35 37 29 2c 27 77 72 4d 75 41 27 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 72 65 74 75 72 6e 20 6c 3e 6d 7d 2c 27 49 68 72 63 43 27 3a 68 66 28 31 37 34 32 29 2c 27 41 Data Ascii: d':hf(1108),'GuoFX':function(l,m){return m!==l},'siaTB':hf(725),'xQRBT':hf(1495),'ruZqo':function(l,m){return l===m},'rOWIq':function(l,m){return l(m)},'hnNoV':hf(1954),'DOekQ':hf(777),'XmkfQ':hf(1657),'wrMuA':function(l,m){return l>m},'IhrcC':hf(1742),'A
2024-09-20 16:19:21 UTC	1369	IN	Data Raw: 74 66 49 4b 42 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 67 3d 3d 3d 66 7d 2c 27 6c 4c 51 6d 78 27 3a 69 61 28 31 34 39 38 29 2c 27 4e 4e 75 67 57 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 67 3d 3d 3d 66 7d 2c 27 63 71 53 64 78 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 29 7b 72 65 74 75 72 6e 20 66 28 67 2c 68 29 7d 2c 27 47 61 4c 79 78 27 3a 69 61 28 31 33 39 30 29 2c 27 58 77 50 54 42 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 3d 3d 3d 67 7d 2c 27 78 4f 5a 4e 4b 27 3a 69 61 28 31 65 33 29 7d 2c 65 3d 63 5b 69 61 28 31 34 34 39 29 5d 2c 65 26 26 65 5b 69 61 28 31 36 38 34 29 5d 3d 3d 3d 69 61 28 31 38 38 30 29 26 26 64 5b 69 61 28 31 33 35 39 29 5d 28 65 5b 69 61 28 Data Ascii: tfIKB':function(f,g){return g===f},'lLQmx':ia(1498),'NNugW':function(f,g){return g===f},'cqSdx':function(f,g,h){return f(g,h)},'GaLyx':ia(1390),'XwPTB':function(f,g){return f===g},'xOZNK':ia(1e3)},e=c[ia(1449)],e&&e[ia(1684)]===ia(1880)&&d[ia(1359)](e[ia(
2024-09-20 16:19:21 UTC	1369	IN	Data Raw: 67 31 2c 67 32 5b 67 49 28 31 35 35 33 29 5d 3d 66 6f 2c 67 32 5b 67 49 28 37 39 35 29 5d 3d 66 73 2c 67 32 5b 67 49 28 31 33 32 35 29 5d 3d 66 70 2c 67 32 5b 67 49 28 39 33 34 29 5d 3d 66 6b 2c 67 32 5b 67 49 28 39 34 32 29 5d 3d 66 6a 2c 65 4d 5b 67 49 28 31 36 38 33 29 5d 3d 67 32 2c 67 33 3d 5b 5d 2c 67 34 3d 30 3b 32 35 36 3e 67 34 3b 67 33 5b 67 34 5d 3d 53 74 72 69 6e 67 5b 67 49 28 31 35 33 30 29 5d 28 67 34 29 2c 67 34 2b 2b 29 3b 67 35 3d 28 30 2c 65 76 61 6c 29 28 67 49 28 31 35 35 39 29 29 2c 67 36 3d 61 74 6f 62 28 67 49 28 31 32 37 39 29 29 2c 67 77 3d 66 75 6e 63 74 69 6f 6e 28 6a 42 2c 64 2c 65 2c 66 2c 67 29 7b 72 65 74 75 72 6e 20 6a 42 3d 67 49 2c 64 3d 7b 27 44 7a 72 6b 74 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 Data Ascii: g1,g2[gI(1553)]=fo,g2[gI(795)]=fs,g2[gI(1325)]=fp,g2[gI(934)]=fk,g2[gI(942)]=fj,eM[gI(1683)]=g2,g3=[],g4=0;256>g4;g3[g4]=String[gI(1530)](g4),g4++);g5=(0,eval)(gI(1559)),g6=atob(gI(1279)),gw=function(jB,d,e,f,g){return jB=gI,d={'Dzrkt':function(h,i){retur
2024-09-20 16:19:21 UTC	1369	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 68 3d 3d 3d 69 7d 2c 27 44 56 6a 62 44 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 7d 2c 65 3d 53 74 72 69 6e 67 5b 6a 42 28 31 35 33 30 29 5d 2c 66 3d 7b 27 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 6a 43 29 7b 72 65 74 75 72 6e 20 6a 43 3d 6a 42 2c 64 5b 6a 43 28 31 35 34 37 29 5d 28 6e 75 6c 6c 2c 68 29 3f 27 27 3a 66 2e 67 28 68 2c 36 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 44 29 7b 72 65 74 75 72 6e 20 6a 44 3d 6a 43 2c 6a 44 28 31 38 37 32 29 5b 6a 44 28 31 36 34 37 29 5d 28 69 29 7d 29 7d 2c 27 67 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 6a 45 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 2c 4e 2c 4f 29 7b 69 66 28 6a 45 3d 6a 42 2c 64 Data Ascii: ){return h===i},'DVjbD':function(h,i){return i==h}},e=String[jB(1530)],f={'h':function(h,jC){return jC=jB,d[jC(1547)](null,h)?'':f.g(h,6,function(i,jD){return jD=jC,jD(1872)[jD(1647)](i)})},'g':function(i,j,o,jE,s,x,B,C,D,E,F,G,H,I,J,K,L,M,N,O){if(jE=jB,d
2024-09-20 16:19:21 UTC	1369	IN	Data Raw: 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 34 27 3a 78 5b 4c 5d 3d 45 2b 2b 3b 63 6f 6e 74 69 6e 75 65 7d 62 72 65 61 6b 7d 69 66 28 64 5b 6a 45 28 31 31 37 31 29 5d 28 27 27 2c 43 29 29 7b 69 66 28 4f 62 6a 65 63 74 5b 6a 45 28 39 30 39 29 5d 5b 6a 45 28 31 30 35 37 29 5d 5b 6a 45 28 38 30 30 29 5d 28 42 2c 43 29 29 7b 69 66 28 64 5b 6a 45 28 37 39 30 29 5d 28 32 35 36 2c 43 5b 6a 45 28 31 31 37 30 29 5d 28 30 29 29 29 7b 66 6f 72 28 73 3d 30 3b 73 3c 46 3b 48 3c 3c 3d 31 2c 64 5b 6a 45 28 31 32 32 31 29 5d 28 49 2c 64 5b 6a 45 28 31 37 35 38 29 5d 28 6a 2c 31 29 29 3f 28 49 3d 30 2c 47 5b 6a 45 28 37 31 30 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 73 2b 2b 29 3b 66 6f 72 28 4f 3d 43 5b 6a 45 28 31 31 37 30 29 5d 28 30 29 2c 73 3d 30 3b 64 5b Data Ascii: continue;case'4':x[L]=E++;continue}break}if(d[jE(1171)]('',C)){if(Object[jE(909)][jE(1057)][jE(800)](B,C)){if(d[jE(790)](256,C[jE(1170)](0))){for(s=0;s<F;H<<=1,d[jE(1221)](I,d[jE(1758)](j,1))?(I=0,G[jE(710)](o(H)),H=0):I++,s++);for(O=C[jE(1170)](0),s=0;d[
2024-09-20 16:19:21 UTC	1369	IN	Data Raw: 3d 31 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 32 27 3a 48 3e 3e 3d 31 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 33 27 3a 4a 7c 3d 28 30 3c 4e 3f 31 3a 30 29 2a 46 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 34 27 3a 4e 3d 64 5b 6a 48 28 31 35 33 39 29 5d 28 47 2c 48 29 3b 63 6f 6e 74 69 6e 75 65 7d 62 72 65 61 6b 7d 73 77 69 74 63 68 28 4a 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 6a 48 28 31 33 32 38 29 5d 28 32 2c 38 29 2c 46 3d 31 3b 4b 21 3d 46 3b 4e 3d 64 5b 6a 48 28 31 32 31 37 29 5d 28 47 2c 48 29 2c 48 3e 3e 3d 31 2c 30 3d 3d 48 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 28 64 5b 6a 48 28 39 39 30 29 5d 28 30 2c 4e 29 3f 31 3a 30 29 2a 46 2c 46 3c 3c 3d 31 29 3b 4f 3d 64 5b 6a 48 28 31 30 35 Data Ascii: =1;continue;case'2':H>>=1;continue;case'3':J\|=(0<N?1:0)F;continue;case'4':N=d[jH(1539)](G,H);continue}break}switch(J){case 0:for(J=0,K=Math[jH(1328)](2,8),F=1;K!=F;N=d[jH(1217)](G,H),H>>=1,0==H&&(H=j,G=o(I++)),J\|=(d[jH(990)](0,N)?1:0)F,F<<=1);O=d[jH(105

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.16	56637	104.18.94.41	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:21 UTC	925	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/51106294:1726845398:lDn3rFZaxb8SDi9NY_9Tplq1Ta4fvDRfDN7VND7NlSQ/8c6322f16b9f8cee/b67c72f3da32a39 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 2969 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: b67c72f3da32a39 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/lxqex/0x4AAAAAAAi2xvnxdhQA0wSe/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:21 UTC	2969	OUT	Data Raw: 76 5f 38 63 36 33 32 32 66 31 36 62 39 66 38 63 65 65 3d 72 31 6f 70 37 70 51 70 31 70 4c 70 4f 33 71 55 33 71 43 70 33 45 79 32 74 77 33 58 71 74 71 6b 67 45 6d 62 6c 71 53 42 34 71 6c 6c 33 54 71 41 71 4e 45 58 32 47 6c 71 6a 66 49 51 7a 35 47 66 70 6d 45 33 4c 71 4d 6c 39 62 38 6d 59 6c 71 53 71 39 41 45 71 44 71 39 43 6f 71 79 39 41 47 71 4f 71 66 31 78 4e 67 43 58 51 39 54 71 53 70 58 64 76 31 43 71 42 32 50 71 66 59 54 39 66 49 35 68 56 43 41 24 6e 30 71 78 39 51 71 59 71 39 4c 71 52 6f 62 4c 71 33 62 69 4c 73 41 4a 59 65 4d 6f 71 33 53 25 32 62 70 79 33 79 71 44 75 6d 71 71 6b 53 71 79 6a 4c 6c 71 6a 78 54 4c 70 71 42 31 71 38 4b 45 31 73 76 6c 4b 6e 74 6c 71 69 70 39 2d 71 79 49 62 71 74 6e 46 24 6c 79 4b 71 39 31 2b 71 6d 78 56 78 41 4b 69 54 78 Data Ascii: v_8c6322f16b9f8cee=r1op7pQp1pLpO3qU3qCp3Ey2tw3XqtqkgEmblqSB4qll3TqAqNEX2GlqjfIQz5GfpmE3LqMl9b8mYlqSq9AEqDq9Coqy9AGqOqf1xNgCXQ9TqSpXdv1CqB2PqfYT9fI5hVCA$n0qx9QqYq9LqRobLq3biLsAJYeMoq3S%2bpy3yqDumqqkSqyjLlqjxTLpqB1q8KE1svlKntlqip9-qyIbqtnF$lyKq91+qmxVxAKiTx
2024-09-20 16:19:21 UTC	737	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:19:21 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 162716 Connection: close cf-chl-gen: 7sR//6iLSMr7MawFLBZEfmSHu75rmiC01Ml6r4PTTYtYp2rnfCNAzccV1vfNwpq3h3nkKwc0ZAlAZZkaGVm5y49jP7eMH6xGP+6FNBSKjxylZDSBaNcAY7B+8pKSuk8AcxZ+jSAGC3/9z2zw+b3WyPZ6mzpSCY7NbOA0V9bjhrQ3v7dV1ixjV6auft9wo2lPcjnwu35cf3y9FI7IlkW3eVS5HA/ueQONyLtvtncYampWnhPcrCMmnv+WWeIDXxgIy8INkFhbY2iYPKuUJaTxuSQqwt0R4+kvFMJRoSs4RPAqciW5sgVxdSJbRofSK3ltHvbsIS5sWsbZz2wY9Bqm0cqEu1C0e4/tMizJTCdb/C4jTPxzr+1dlDBudf+w7XQ692RYpXuwj3r6euvSBZCmEBxKYs9rFhlJgVtYkSV36G+WQYzIASV9hEnYh7VGhY27paPREhOHPsB+aMWTkZo64Q5hQE9L49VA4K483EacJnDiA9jUdSjeUyYS/mr8g63+oA==$58o5y7qlj++aTeNI Server: cloudflare CF-RAY: 8c6322fd2fb77cab-EWR
2024-09-20 16:19:21 UTC	632	IN	Data Raw: 57 6f 64 49 57 32 32 4f 6c 6d 2b 59 53 6e 4a 34 63 6d 70 72 6c 34 42 5a 6a 4a 4b 4e 62 33 42 66 70 46 70 31 6f 47 71 71 69 59 42 33 65 4b 36 7a 6e 71 31 7a 70 59 6d 32 72 71 5a 34 6b 47 2b 36 71 72 71 51 73 5a 58 41 75 6f 61 47 6b 4b 4b 44 79 61 4b 5a 78 34 65 6b 30 70 4b 4a 7a 61 36 50 31 59 71 6c 78 35 6d 79 6d 4c 47 65 71 4e 37 67 6f 39 44 6a 72 39 4c 69 76 4e 6d 36 31 2b 71 6b 74 2b 76 75 71 4c 79 38 35 74 2f 42 71 76 72 34 35 76 62 63 37 64 47 32 7a 50 44 42 32 76 6b 45 38 67 50 6b 2b 64 33 35 7a 4f 48 5a 44 64 44 6c 33 64 7a 68 7a 63 33 77 37 65 54 34 33 42 7a 59 31 78 7a 61 34 75 7a 77 33 42 51 6d 49 41 76 37 44 41 34 75 2b 53 41 42 4c 65 51 68 46 53 55 50 4a 77 6b 58 4f 50 73 33 4b 6a 6c 42 49 69 45 58 4f 54 63 6a 4d 52 41 55 2b 77 49 64 4f 78 38 Data Ascii: WodIW22Olm+YSnJ4cmprl4BZjJKNb3BfpFp1oGqqiYB3eK6znq1zpYm2rqZ4kG+6qrqQsZXAuoaGkKKDyaKZx4ek0pKJza6P1Yqlx5mymLGeqN7go9Djr9LivNm61+qkt+vuqLy85t/Bqvr45vbc7dG2zPDB2vkE8gPk+d35zOHZDdDl3dzhzc3w7eT43BzY1xza4uzw3BQmIAv7DA4u+SABLeQhFSUPJwkXOPs3KjlBIiEXOTcjMRAU+wIdOx8
2024-09-20 16:19:21 UTC	1369	IN	Data Raw: 4b 56 73 38 52 53 34 38 4a 31 34 78 59 54 39 30 50 30 45 7a 5a 30 51 31 64 6d 64 64 64 46 4a 57 63 6f 52 76 50 46 35 47 5a 32 4a 39 69 30 68 62 58 30 64 37 5a 49 52 6a 6b 58 64 6c 55 4a 46 35 62 33 52 71 6a 48 4a 63 6f 6e 4e 56 6b 48 71 6e 65 61 4e 6f 70 34 53 66 6f 71 32 69 6b 58 79 45 73 71 4b 71 6a 6f 75 69 72 71 4b 37 62 70 65 52 6b 37 79 67 72 5a 43 2f 6f 4c 47 58 75 72 4c 4c 67 62 54 43 75 72 75 67 30 4c 36 70 76 71 65 6c 71 4e 6d 72 72 35 72 4d 7a 62 69 75 32 4c 6a 54 72 4c 65 38 76 2b 66 47 36 61 6a 65 76 4f 61 36 30 4d 58 6c 77 73 62 76 79 4b 6a 49 38 2f 4c 75 7a 50 66 32 33 4e 44 37 2b 74 44 55 41 41 43 2f 32 41 51 45 2f 74 77 49 43 4f 7a 67 44 41 7a 67 35 42 41 56 7a 2b 67 55 47 65 6a 73 47 42 37 63 32 52 48 38 4a 50 6f 58 38 65 4c 38 46 51 67 Data Ascii: KVs8RS48J14xYT90P0EzZ0Q1dmdddFJWcoRvPF5GZ2J9i0hbX0d7ZIRjkXdlUJF5b3RqjHJconNVkHqneaNop4Sfoq2ikXyEsqKqjouirqK7bpeRk7ygrZC/oLGXurLLgbTCurug0L6pvqelqNmrr5rMzbiu2LjTrLe8v+fG6ajevOa60MXlwsbvyKjI8/LuzPf23ND7+tDUAAC/2AQE/twICOzgDAzg5BAVz+gUGejsGB7c2RH8JPoX8eL8FQg
2024-09-20 16:19:21 UTC	1369	IN	Data Raw: 30 42 46 51 6b 56 69 50 33 4a 4d 62 45 64 38 56 56 70 31 66 6c 46 4f 55 45 35 63 59 56 52 59 58 56 4f 4c 62 49 78 68 63 47 47 44 68 48 36 4e 64 59 70 51 6c 6e 6d 4f 56 57 74 39 6b 6c 6c 73 67 5a 5a 64 64 36 4b 53 65 48 39 39 58 49 4f 48 6e 32 5a 72 6d 58 36 48 63 37 4b 72 6f 34 32 5a 6f 59 57 32 6c 49 32 63 64 71 47 70 6a 61 36 63 6c 61 61 35 71 62 47 57 6d 59 62 46 75 61 47 71 6f 6f 6a 54 72 4c 4f 33 72 71 58 4e 30 39 65 53 6b 39 53 37 30 4c 47 31 33 5a 7a 6a 34 4c 50 45 6f 65 6e 4d 36 75 62 4c 78 4e 48 50 35 73 50 55 30 2b 6e 79 30 4e 69 79 75 2f 66 54 78 76 33 67 38 67 50 6a 2b 39 66 53 38 63 48 6e 2f 64 2f 2b 79 74 6b 4e 37 4e 2f 71 45 63 76 73 45 78 54 50 42 77 4d 57 30 2b 55 4e 2b 76 73 42 46 66 59 67 41 43 45 65 34 67 49 6e 34 2f 72 2b 2b 50 77 79 Data Ascii: 0BFQkViP3JMbEd8VVp1flFOUE5cYVRYXVOLbIxhcGGDhH6NdYpQlnmOVWt9kllsgZZdd6KSeH99XIOHn2ZrmX6Hc7Kro42ZoYW2lI2cdqGpja6claa5qbGWmYbFuaGqoojTrLO3rqXN09eSk9S70LG13Zzj4LPEoenM6ubLxNHP5sPU0+ny0Niyu/fTxv3g8gPj+9fS8cHn/d/+ytkN7N/qEcvsExTPBwMW0+UN+vsBFfYgACEe4gIn4/r++Pwy
2024-09-20 16:19:21 UTC	1369	IN	Data Raw: 34 32 5a 7a 74 59 54 58 4a 53 58 30 34 38 54 55 46 30 56 46 78 49 5a 57 52 69 65 59 47 4a 53 49 6c 65 54 70 43 53 61 32 35 32 68 6c 65 58 55 6d 6d 53 66 49 70 61 62 58 64 61 59 58 79 42 58 6d 57 41 59 58 68 30 67 36 2b 48 59 6f 6d 4e 69 37 43 68 67 48 4a 31 6a 33 47 48 63 35 4e 31 68 37 71 5a 6e 5a 75 42 6d 38 52 2b 6b 38 71 4b 69 36 47 4b 71 73 43 49 30 4d 7a 48 6e 4b 37 4e 72 36 65 69 70 36 6d 32 74 74 37 65 75 4b 37 4d 34 39 6d 2f 35 64 50 47 71 4c 58 64 75 36 33 59 70 65 79 6a 30 37 48 76 7a 4d 2b 2f 36 4f 72 52 37 75 6e 64 30 63 2f 66 31 72 2f 38 33 76 66 32 39 4d 62 37 31 73 53 2b 43 4f 4c 64 41 41 33 6c 42 42 4d 53 45 65 4c 68 35 65 63 58 45 51 59 59 39 2f 6f 50 2b 2f 4c 36 39 74 77 53 39 43 50 69 48 41 4c 66 47 65 55 65 44 53 38 6c 4c 50 37 30 4a Data Ascii: 42ZztYTXJSX048TUF0VFxIZWRieYGJSIleTpCSa252hleXUmmSfIpabXdaYXyBXmWAYXh0g6+HYomNi7ChgHJ1j3GHc5N1h7qZnZuBm8R+k8qKi6GKqsCI0MzHnK7Nr6eip6m2tt7euK7M49m/5dPGqLXdu63Ypeyj07HvzM+/6OrR7und0c/f1r/83vf29Mb71sS+COLdAA3lBBMSEeLh5ecXEQYY9/oP+/L69twS9CPiHALfGeUeDS8lLP70J
2024-09-20 16:19:21 UTC	1369	IN	Data Raw: 6f 54 6a 78 63 63 46 55 2f 56 33 42 61 68 58 78 37 68 6e 2b 41 62 34 70 73 61 45 35 39 64 47 43 50 64 6e 4b 4b 6d 6e 46 62 6a 56 2b 4b 63 35 6d 45 63 6e 68 79 5a 61 52 33 64 36 6d 6b 6f 4b 43 51 6e 36 68 70 73 4b 75 79 6f 59 57 77 67 5a 43 61 68 6e 4e 38 70 37 70 38 6e 4c 43 58 72 61 2b 42 77 4c 75 53 6c 72 2f 4c 79 38 2b 4a 79 71 69 66 79 64 57 30 79 35 69 56 75 36 4f 6b 6d 74 69 79 6d 39 7a 61 6e 64 4f 32 70 64 72 66 35 74 62 4a 78 62 58 45 36 4c 71 6e 73 4e 7a 47 73 4e 44 77 35 71 2f 6e 77 38 58 6d 37 64 7a 78 30 76 45 43 77 2b 33 64 42 39 58 37 2f 41 50 37 42 75 37 6c 32 66 76 66 33 65 45 47 39 75 51 44 44 64 6e 31 32 66 63 41 38 50 49 43 43 78 73 54 45 77 62 78 38 65 63 61 43 52 37 2b 48 69 37 76 47 67 6f 7a 42 79 67 70 4b 79 67 79 47 78 49 47 4b 41 Data Ascii: oTjxccFU/V3BahXx7hn+Ab4psaE59dGCPdnKKmnFbjV+Kc5mEcnhyZaR3d6mkoKCQn6hpsKuyoYWwgZCahnN8p7p8nLCXra+BwLuSlr/Ly8+JyqifydW0y5iVu6Okmtiym9zandO2pdrf5tbJxbXE6LqnsNzGsNDw5q/nw8Xm7dzx0vECw+3dB9X7/AP7Bu7l2fvf3eEG9uQDDdn12fcA8PICCxsTEwbx8ecaCR7+Hi7vGgozBygpKygyGxIGKA
2024-09-20 16:19:21 UTC	1369	IN	Data Raw: 64 6c 4a 2f 57 33 74 63 56 57 42 6e 58 49 36 4d 55 6f 39 52 6a 6e 39 51 62 49 31 69 6d 6f 36 65 66 31 39 73 62 70 53 4f 6e 59 57 61 59 4b 6d 4a 6e 6d 53 73 6a 61 4a 6f 72 35 47 6d 62 4c 4b 56 71 6e 47 48 6d 61 35 31 69 4a 32 79 65 5a 4f 2b 72 70 53 62 6d 58 69 66 6f 37 75 43 68 37 57 61 6f 34 37 4a 75 5a 33 4b 72 4b 57 31 70 37 6e 42 70 62 53 30 72 62 79 61 77 63 6d 75 72 4c 79 31 78 74 58 4a 30 62 61 38 78 4c 33 4f 35 36 65 6e 79 73 66 48 35 2b 6a 68 38 74 54 52 34 2f 65 34 32 50 58 4a 77 41 43 36 31 50 41 42 41 51 4c 30 42 51 48 37 33 77 7a 58 33 4e 72 2b 30 78 48 69 39 4f 76 78 38 4f 73 4a 37 52 6e 56 45 43 4c 62 39 50 59 63 39 50 6f 48 39 77 55 47 39 51 73 62 2f 53 55 46 4a 2b 38 72 4e 51 6e 74 42 54 59 6d 4e 51 72 31 48 53 41 53 48 78 73 77 42 43 30 Data Ascii: dlJ/W3tcVWBnXI6MUo9Rjn9QbI1imo6ef19sbpSOnYWaYKmJnmSsjaJor5GmbLKVqnGHma51iJ2yeZO+rpSbmXifo7uCh7Wao47JuZ3KrKW1p7nBpbS0rbyawcmurLy1xtXJ0ba8xL3O56enysfH5+jh8tTR4/e42PXJwAC61PABAQL0BQH73wzX3Nr+0xHi9Ovx8OsJ7RnVECLb9PYc9PoH9wUG9Qsb/SUFJ+8rNQntBTYmNQr1HSASHxswBC0
2024-09-20 16:19:21 UTC	1369	IN	Data Raw: 57 78 46 54 6b 74 6d 6b 6b 57 4b 68 6f 4a 50 62 35 53 48 56 57 69 53 69 56 6d 66 61 56 75 6b 6d 5a 43 56 6e 59 4f 67 65 4a 74 71 5a 58 65 68 67 33 46 39 63 61 32 77 68 58 43 78 6a 6f 4b 4c 69 48 52 32 65 34 70 2f 6e 72 79 57 6d 6e 32 61 77 36 4b 34 67 70 53 2f 79 37 2b 5a 6e 63 66 46 79 73 43 66 6e 38 66 43 79 63 37 53 74 61 75 6e 7a 39 47 72 31 74 71 39 32 61 2f 58 32 65 50 47 72 4c 58 73 36 38 72 4b 38 76 4c 49 74 65 36 78 35 38 76 6f 79 76 79 7a 31 75 36 35 41 76 37 2b 76 51 62 79 30 77 48 49 30 75 50 5a 79 38 66 4b 37 66 45 53 33 39 4d 4a 31 51 7a 53 38 2b 33 79 42 78 51 62 45 67 73 68 44 51 2f 35 2b 66 63 4a 35 78 59 56 4c 42 6f 66 36 53 49 75 43 68 48 7a 36 6a 49 4b 47 53 51 73 4d 68 30 4b 38 2f 59 32 4c 43 45 74 39 66 7a 37 4d 53 45 42 42 55 77 4a Data Ascii: WxFTktmkkWKhoJPb5SHVWiSiVmfaVukmZCVnYOgeJtqZXehg3F9ca2whXCxjoKLiHR2e4p/nryWmn2aw6K4gpS/y7+ZncfFysCfn8fCyc7Staunz9Gr1tq92a/X2ePGrLXs68rK8vLIte6x58voyvyz1u65Av7+vQby0wHI0uPZy8fK7fES39MJ1QzS8+3yBxQbEgshDQ/5+fcJ5xYVLBof6SIuChHz6jIKGSQsMh0K8/Y2LCEt9fz7MSEBBUwJ
2024-09-20 16:19:21 UTC	1369	IN	Data Raw: 52 4c 6c 49 39 30 5a 4a 46 61 66 47 31 77 61 71 43 63 62 6d 2b 68 6c 33 78 33 6d 48 53 6b 6e 4a 2b 47 68 6d 65 71 6f 4a 71 62 67 4b 53 65 6e 34 43 6f 6f 71 53 6d 72 4b 61 6f 6d 4c 43 71 72 4c 2b 45 67 4c 69 47 79 59 57 54 6f 61 65 73 77 63 6d 73 69 35 47 74 77 35 53 53 79 73 36 76 6b 71 50 4c 78 73 65 59 74 37 43 34 77 4e 54 45 76 62 2b 69 6f 65 4f 30 71 4f 50 6c 78 72 76 6b 73 4f 54 67 76 73 4b 75 35 66 6a 50 30 38 76 48 79 38 33 61 32 72 76 2b 37 76 6e 61 34 63 48 6a 36 39 7a 62 39 63 66 67 44 42 48 67 35 42 41 57 31 4e 45 4a 39 42 7a 79 44 2b 6e 61 39 41 30 41 49 76 34 53 37 77 63 57 45 52 54 38 2b 69 30 69 44 52 37 6e 44 76 77 42 4d 51 51 56 4a 77 45 57 42 51 6f 4e 44 42 30 76 43 78 34 4e 45 68 63 55 4a 54 59 49 4a 68 55 61 47 52 77 74 50 67 4d 51 4d Data Ascii: RLlI90ZJFafG1waqCcbm+hl3x3mHSknJ+GhmeqoJqbgKSen4CooqSmrKaomLCqrL+EgLiGyYWToaeswcmsi5Gtw5SSys6vkqPLxseYt7C4wNTEvb+ioeO0qOPlxrvksOTgvsKu5fjP08vHy83a2rv+7vna4cHj69zb9cfgDBHg5BAW1NEJ9BzyD+na9A0AIv4S7wcWERT8+i0iDR7nDvwBMQQVJwEWBQoNDB0vCx4NEhcUJTYIJhUaGRwtPgMQM
2024-09-20 16:19:21 UTC	1369	IN	Data Raw: 76 6d 34 5a 6f 6c 58 71 4b 6d 4a 56 37 6d 47 2b 44 64 59 4b 43 59 33 6d 59 6d 33 36 71 5a 70 75 53 70 33 32 6c 71 34 4b 30 68 34 69 50 74 62 43 75 64 36 2b 33 66 49 50 41 73 36 56 2f 78 72 65 6f 6d 5a 79 37 72 73 4f 5a 77 63 65 65 6a 64 54 53 6f 38 36 69 73 71 37 59 6b 37 62 52 71 5a 75 7a 7a 4c 58 69 77 74 66 69 6f 4c 2f 4c 70 65 4f 38 77 62 37 42 33 75 4c 41 7a 64 4c 55 77 39 4c 46 78 62 58 39 39 67 48 56 39 4f 79 38 38 64 37 31 38 2b 66 49 31 51 58 38 78 65 50 65 41 4d 6e 77 2f 74 49 44 37 78 63 4c 47 2b 76 58 36 39 54 63 45 64 76 32 31 50 41 42 39 68 55 54 41 69 6b 44 46 65 62 32 2b 67 45 64 4b 65 67 67 44 52 51 67 4d 50 59 32 4a 44 51 33 4f 43 73 62 46 54 63 31 4c 69 4d 66 4f 78 59 2f 4d 77 51 49 41 7a 77 66 53 77 63 53 54 55 31 45 48 6b 5a 41 46 43 Data Ascii: vm4ZolXqKmJV7mG+DdYKCY3mYm36qZpuSp32lq4K0h4iPtbCud6+3fIPAs6V/xreomZy7rsOZwceejdTSo86isq7Yk7bRqZuzzLXiwtfioL/LpeO8wb7B3uLAzdLUw9LFxbX99gHV9Oy88d718+fI1QX8xePeAMnw/tID7xcLG+vX69TcEdv21PAB9hUTAikDFeb2+gEdKeggDRQgMPY2JDQ3OCsbFTc1LiMfOxY/MwQIAzwfSwcSTU1EHkZAFC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.16	56638	104.18.94.41	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:22 UTC	485	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/51106294:1726845398:lDn3rFZaxb8SDi9NY_9Tplq1Ta4fvDRfDN7VND7NlSQ/8c6322f16b9f8cee/b67c72f3da32a39 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:23 UTC	349	IN	HTTP/1.1 404 Not Found Date: Fri, 20 Sep 2024 16:19:22 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: aCWpWyKEhBCSRLzvkrysrJOzq/I7WDBTZIs=$6GKwWi0CFb5AlhfN Server: cloudflare CF-RAY: 8c632302fb09c40c-EWR
2024-09-20 16:19:23 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.16	56639	104.18.94.41	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:23 UTC	786	OUT	GET /cdn-cgi/challenge-platform/h/g/i/8c6322f16b9f8cee/1726849161806/LGyozanY0pFJP_- HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/lxqex/0x4AAAAAAAi2xvnxdhQA0wSe/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:23 UTC	200	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:19:23 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8c6323083c9f8c42-EWR alt-svc: h3=":443"; ma=86400
2024-09-20 16:19:23 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 3b 08 02 00 00 00 b2 a7 9e 13 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR0;IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.16	56640	104.18.94.41	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:24 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/g/i/8c6322f16b9f8cee/1726849161806/LGyozanY0pFJP_- HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:24 UTC	170	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:19:24 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8c63230c3d29c443-EWR
2024-09-20 16:19:24 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 3b 08 02 00 00 00 b2 a7 9e 13 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR0;IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.16	56641	104.18.94.41	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:24 UTC	815	OUT	GET /cdn-cgi/challenge-platform/h/g/pat/8c6322f16b9f8cee/1726849161809/7369bf3d7a0677429a1b00552cb62054f9e1999185fe1eefb2126a323c8ad68a/u709jjYJ0JdsaBt HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/lxqex/0x4AAAAAAAi2xvnxdhQA0wSe/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:24 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Fri, 20 Sep 2024 16:19:24 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-09-20 16:19:24 UTC	1985	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 63 32 6d 5f 50 58 6f 47 64 30 4b 61 47 77 42 56 4c 4c 59 67 56 50 6e 68 6d 5a 47 46 5f 68 37 76 73 68 4a 71 4d 6a 79 4b 31 6f 6f 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gc2m_PXoGd0KaGwBVLLYgVPnhmZGF_h7vshJqMjyK1ooAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-09-20 16:19:24 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.16	56642	104.18.94.41	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:24 UTC	926	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/51106294:1726845398:lDn3rFZaxb8SDi9NY_9Tplq1Ta4fvDRfDN7VND7NlSQ/8c6322f16b9f8cee/b67c72f3da32a39 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 32336 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: b67c72f3da32a39 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/lxqex/0x4AAAAAAAi2xvnxdhQA0wSe/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:24 UTC	16384	OUT	Data Raw: 76 5f 38 63 36 33 32 32 66 31 36 62 39 66 38 63 65 65 3d 72 31 6f 70 44 33 39 24 78 6e 78 79 32 74 54 71 4d 71 66 6e 6f 79 2d 39 4f 71 53 70 49 70 45 79 32 71 4e 71 32 6b 43 6c 74 47 71 38 79 71 39 67 46 34 78 45 6d 31 6c 71 53 76 71 4e 6c 6d 24 39 38 53 37 37 6c 39 34 71 6e 32 39 37 79 51 70 71 4b 78 70 39 32 6f 71 61 66 4c 47 71 76 71 58 31 71 59 71 66 52 52 6f 32 6c 78 62 31 39 4a 76 24 6b 65 79 6f 41 47 72 6c 33 75 71 79 55 42 39 44 71 6e 43 41 6c 71 39 4c 70 39 7a 42 74 6d 42 71 56 70 79 6a 71 33 65 67 54 38 32 39 71 53 6f 71 76 70 4c 50 4b 6a 42 41 54 4a 42 71 42 4b 6e 50 6c 55 6f 59 54 62 31 43 75 74 39 45 69 63 49 77 71 6f 4e 39 78 57 53 54 71 58 4a 64 31 4b 6f 65 37 74 47 6d 24 71 33 53 49 4d 75 4c 38 76 64 46 79 4a 63 66 25 32 62 53 6e 39 43 54 Data Ascii: v_8c6322f16b9f8cee=r1opD39$xnxy2tTqMqfnoy-9OqSpIpEy2qNq2kCltGq8yq9gF4xEm1lqSvqNlm$98S77l94qn297yQpqKxp92oqafLGqvqX1qYqfRRo2lxb19Jv$keyoAGrl3uqyUB9DqnCAlq9Lp9zBtmBqVpyjq3egT829qSoqvpLPKjBATJBqBKnPlUoYTb1Cut9EicIwqoN9xWSTqXJd1Koe7tGm$q3SIMuL8vdFyJcf%2bSn9CT
2024-09-20 16:19:24 UTC	15952	OUT	Data Raw: 71 52 31 68 72 39 45 50 35 54 6b 6e 71 74 48 4c 7a 39 4f 71 42 24 34 6c 39 35 4c 6e 6f 78 70 33 5a 65 57 68 7a 78 66 31 71 70 71 35 71 2b 70 33 48 70 6a 71 33 31 33 72 45 75 6d 71 73 65 67 70 24 78 72 53 59 45 71 69 71 58 71 71 6f 71 58 71 66 6a 39 39 71 4a 71 2b 32 67 35 71 71 70 49 32 71 70 71 32 70 72 7a 71 32 71 62 70 71 78 39 73 71 6f 71 58 78 39 53 71 2d 70 6d 71 71 41 6c 73 32 33 32 39 6a 71 6d 70 72 6c 58 55 4d 76 71 2b 5a 4f 78 71 66 45 6e 47 33 7a 71 75 6d 58 7a 49 77 70 73 70 71 70 39 70 71 66 71 39 31 33 72 45 7a 65 66 7a 71 61 4b 73 32 42 35 61 45 70 24 78 79 70 71 31 71 6b 71 6e 47 79 50 71 37 77 57 33 33 51 71 71 70 4d 54 52 58 71 75 45 42 67 33 53 71 35 48 49 6c 39 77 70 46 71 6f 30 79 53 71 52 4c 6e 6c 79 4c 71 57 33 57 30 33 50 71 75 45 Data Ascii: qR1hr9EP5TknqtHLz9OqB$4l95Lnoxp3ZeWhzxf1qpq5q+p3Hpjq313rEumqsegp$xrSYEqiqXqqoqXqfj99qJq+2g5qqpI2qpq2przq2qbpqx9sqoqXx9Sq-pmqqAls2329jqmprlXUMvq+ZOxqfEnG3zqumXzIwpspqp9pqfq913rEzefzqaKs2B5aEp$xypq1qkqnGyPq7wW33QqqpMTRXquEBg3Sq5HIl9wpFqo0ySqRLnlyLqW3W03PquE
2024-09-20 16:19:25 UTC	300	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:19:25 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26792 Connection: close cf-chl-gen: wMvL544kV7FkqHfwUvWnJKu0pUlNRp0IQD900qL7MfHpfAi4i+n36plNLhuM0yeyAnLwZ20eI2U846tf$VoUi8S8wctEbUAKn Server: cloudflare CF-RAY: 8c6323119eff198e-EWR
2024-09-20 16:19:25 UTC	1069	IN	Data Raw: 57 6f 64 49 57 32 31 70 62 49 6c 55 6c 47 53 54 55 6c 52 39 58 58 2b 42 57 59 75 51 58 33 61 50 6c 47 4f 44 65 6f 6c 6e 71 4b 69 5a 68 35 6c 6f 62 6f 36 6d 6a 58 61 4f 64 49 65 46 71 70 4a 33 76 4c 79 4e 72 6f 75 4d 77 6e 79 47 6f 4c 75 54 6c 63 6d 57 68 38 32 38 6e 63 71 4a 77 73 2b 65 6c 37 66 43 6f 70 61 32 31 36 2b 5a 33 4e 4b 35 33 4e 6e 4f 73 61 4c 43 35 73 65 71 35 75 75 32 36 65 58 61 76 4b 37 4f 38 74 4c 34 7a 37 4f 73 39 73 76 6d 79 37 72 61 38 72 6b 46 37 72 7a 54 76 39 76 65 77 77 76 69 32 66 6a 4e 44 2b 41 52 79 74 7a 78 35 39 2f 77 46 78 72 61 35 2f 6a 65 35 78 2f 79 41 74 33 76 45 77 58 68 45 75 44 32 42 77 62 6a 39 69 4d 6a 4a 53 49 70 42 51 77 48 4b 50 4c 31 2b 69 77 4b 43 41 73 76 48 2f 66 37 51 77 4a 48 48 44 73 7a 53 6a 63 6c 4b 6b 77 Data Ascii: WodIW21pbIlUlGSTUlR9XX+BWYuQX3aPlGODeolnqKiZh5lobo6mjXaOdIeFqpJ3vLyNrouMwnyGoLuTlcmWh828ncqJws+el7fCopa216+Z3NK53NnOsaLC5seq5uu26eXavK7O8tL4z7Os9svmy7ra8rkF7rzTv9vewwvi2fjND+ARytzx59/wFxra5/je5x/yAt3vEwXhEuD2Bwbj9iMjJSIpBQwHKPL1+iwKCAsvH/f7QwJHHDszSjclKkw
2024-09-20 16:19:25 UTC	1369	IN	Data Raw: 57 79 4e 71 4b 69 46 71 4c 4b 4a 65 59 61 72 6e 58 4b 55 73 72 39 2f 72 36 57 50 67 4b 72 42 74 6f 4b 34 79 59 32 43 7a 73 6e 42 6e 61 54 4f 77 49 71 5a 78 71 37 4a 74 4e 2b 65 71 72 54 68 6f 4b 4b 33 35 75 57 6f 74 4e 6a 63 77 71 65 70 36 4c 6e 74 35 2b 76 43 34 75 6e 49 39 4e 50 74 7a 4e 4c 76 7a 2f 33 4b 32 65 44 73 74 67 51 41 32 73 58 47 42 77 33 43 2b 41 54 35 45 50 44 69 34 74 37 52 41 77 72 59 2b 50 62 6e 32 41 33 59 33 41 6f 53 46 4f 77 52 47 65 58 7a 42 41 54 68 41 76 76 71 36 53 73 75 38 65 7a 7a 4c 69 48 74 44 65 34 70 39 68 4d 36 45 76 63 56 44 43 34 6b 2f 67 30 65 41 43 4d 49 53 42 34 58 43 41 73 6c 44 67 64 42 53 44 35 57 46 69 51 30 4c 56 6c 55 4e 68 5a 5a 58 52 31 4a 51 43 35 62 4d 7a 78 49 50 6b 4e 57 52 56 74 4f 50 45 39 59 61 48 42 65 Data Ascii: WyNqKiFqLKJeYarnXKUsr9/r6WPgKrBtoK4yY2CzsnBnaTOwIqZxq7JtN+eqrThoKK35uWotNjcwqep6Lnt5+vC4unI9NPtzNLvz/3K2eDstgQA2sXGBw3C+AT5EPDi4t7RAwrY+Pbn2A3Y3AoSFOwRGeXzBAThAvvq6Ssu8ezzLiHtDe4p9hM6EvcVDC4k/g0eACMISB4XCAslDgdBSD5WFiQ0LVlUNhZZXR1JQC5bMzxIPkNWRVtOPE9YaHBe
2024-09-20 16:19:25 UTC	1369	IN	Data Raw: 71 71 72 37 4f 56 6a 49 69 77 73 5a 5a 39 75 35 57 62 79 49 53 57 79 49 50 46 76 38 48 51 6a 71 4c 41 69 36 79 6d 79 37 58 50 75 37 6d 70 79 38 6d 37 73 61 2f 56 77 4d 37 45 30 4c 72 66 35 74 4f 33 71 4b 71 39 36 71 4c 53 72 4e 76 78 76 64 4f 32 78 72 58 56 31 4c 76 74 75 50 6a 72 2f 74 4f 2b 7a 39 48 77 31 62 72 61 44 4d 6e 2b 31 77 38 52 2f 51 41 4e 34 74 34 44 43 65 6e 75 41 67 34 54 35 74 6f 51 32 77 33 35 46 42 7a 7a 37 53 54 6c 47 78 2f 79 44 66 55 57 49 4f 6f 78 4c 69 63 78 37 2b 76 75 47 66 49 50 38 42 59 52 4f 42 51 53 2b 42 4d 6b 49 68 59 36 42 79 4d 32 4b 55 55 62 52 54 5a 43 44 53 67 66 44 6b 4d 55 4e 7a 59 79 56 43 49 34 47 79 73 61 4f 6a 6b 67 55 69 4d 39 55 47 4d 35 49 7a 51 38 55 32 42 59 53 56 70 4a 52 45 6c 75 59 53 39 46 54 44 68 68 65 Data Ascii: qqr7OVjIiwsZZ9u5WbyISWyIPFv8HQjqLAi6ymy7XPu7mpy8m7sa/VwM7E0Lrf5tO3qKq96qLSrNvxvdO2xrXV1LvtuPjr/tO+z9Hw1braDMn+1w8R/QAN4t4DCenuAg4T5toQ2w35FBzz7STlGx/yDfUWIOoxLicx7+vuGfIP8BYROBQS+BMkIhY6ByM2KUUbRTZCDSgfDkMUNzYyVCI4GysaOjkgUiM9UGM5IzQ8U2BYSVpJREluYS9FTDhhe
2024-09-20 16:19:25 UTC	1369	IN	Data Raw: 43 66 6f 79 61 6f 4b 57 36 77 71 57 45 69 72 6d 56 68 63 6a 41 6d 70 37 49 78 73 76 42 6f 4b 44 49 77 38 72 50 30 37 61 73 71 4e 44 53 74 72 79 30 72 74 71 79 77 38 54 46 36 38 4b 73 33 74 2f 62 77 39 4f 78 33 72 44 4a 32 4e 66 55 37 38 72 70 32 73 7a 56 32 39 2f 52 7a 51 66 6e 2f 66 48 5a 2f 4d 76 36 35 51 72 33 38 51 77 44 36 75 2f 6a 46 41 66 56 35 78 44 33 7a 76 4d 54 2b 4e 38 58 33 74 6b 51 49 2f 67 6d 34 43 51 73 36 51 7a 74 4c 6a 44 6d 37 54 41 4d 4d 4f 38 57 41 77 54 31 43 69 30 33 4f 41 77 4a 46 69 37 37 49 77 45 55 2b 44 77 34 42 45 41 6c 42 53 56 41 54 52 73 78 51 55 6c 4b 4b 30 77 56 52 53 73 38 57 42 78 54 54 31 59 31 4c 6a 30 35 58 30 49 67 52 47 51 68 61 47 42 70 4a 56 78 51 54 45 31 53 4b 30 68 78 55 53 70 4b 64 58 74 75 63 7a 68 58 66 44 Data Ascii: CfoyaoKW6wqWEirmVhcjAmp7IxsvBoKDIw8rP07asqNDStry0rtqyw8TF68Ks3t/bw9Ox3rDJ2NfU78rp2szV29/RzQfn/fHZ/Mv65Qr38QwD6u/jFAfV5xD3zvMT+N8X3tkQI/gm4CQs6QztLjDm7TAMMO8WAwT1Ci03OAwJFi77IwEU+Dw4BEAlBSVATRsxQUlKK0wVRSs8WBxTT1Y1Lj05X0IgRGQhaGBpJVxQTE1SK0hxUSpKdXtuczhXfD
2024-09-20 16:19:25 UTC	1369	IN	Data Raw: 6c 72 2b 6d 68 4a 32 6e 71 35 32 59 30 70 44 43 7a 38 43 6e 79 61 58 46 31 70 71 6d 75 5a 72 61 6d 62 4c 62 34 4c 79 30 70 4e 71 32 77 38 54 4a 75 75 58 63 76 71 6a 76 33 39 2b 76 31 64 58 42 31 74 66 54 74 4d 72 7a 32 72 6a 52 32 39 2f 52 7a 41 66 45 39 67 54 34 33 4d 66 74 33 2b 37 33 44 65 41 42 79 68 51 42 36 75 33 54 39 76 6f 4d 42 75 34 4d 36 52 67 62 2f 51 48 37 2b 50 66 77 47 78 66 38 4c 43 73 4e 41 68 30 42 2f 52 51 63 49 76 4d 72 4c 68 55 71 42 76 6e 32 4b 52 30 65 51 51 77 42 49 77 30 35 41 6b 4e 45 41 51 73 6f 48 55 42 43 4c 54 73 38 50 53 64 51 4c 7a 49 6d 4a 69 34 56 47 46 4a 4a 55 53 6c 4e 54 43 49 76 57 6b 35 6f 50 6a 30 7a 4a 54 30 70 57 32 4a 47 4f 30 70 41 4d 48 4a 30 54 58 4e 69 56 44 46 6f 66 57 31 65 50 48 70 74 65 6b 52 7a 52 48 5a Data Ascii: lr+mhJ2nq52Y0pDCz8CnyaXF1pqmuZrambLb4Ly0pNq2w8TJuuXcvqjv39+v1dXB1tfTtMrz2rjR29/RzAfE9gT43Mft3+73DeAByhQB6u3T9voMBu4M6Rgb/QH7+PfwGxf8LCsNAh0B/RQcIvMrLhUqBvn2KR0eQQwBIw05AkNEAQsoHUBCLTs8PSdQLzImJi4VGFJJUSlNTCIvWk5oPj0zJT0pW2JGO0pAMHJ0TXNiVDFofW1ePHptekRzRHZ
2024-09-20 16:19:25 UTC	1369	IN	Data Raw: 38 47 6e 79 4e 43 46 30 4c 43 65 72 62 4b 59 6a 4b 37 45 32 70 6d 34 6c 71 7a 69 75 62 2b 62 70 4b 2f 47 36 4f 58 6c 77 65 54 73 6f 65 7a 4d 75 73 6e 4f 74 4b 79 31 34 50 61 31 31 50 33 49 2f 74 54 54 2b 4c 72 5a 7a 2f 45 41 41 66 48 55 38 76 58 6a 42 77 45 4f 32 77 51 51 32 2b 72 4f 46 77 54 6b 34 2b 63 47 38 39 6b 61 31 52 66 72 34 66 73 65 32 2b 58 76 42 66 7a 30 4a 67 6a 36 37 69 34 45 4d 66 77 78 36 6a 51 41 45 44 4d 4d 4f 41 51 4d 43 76 77 71 49 50 73 4c 51 52 45 59 2f 50 30 52 46 78 56 4b 52 51 30 4e 53 69 78 51 55 79 73 6f 49 78 63 4f 4c 42 6f 5a 56 56 35 66 57 30 6f 37 59 6c 31 4e 4d 32 4e 68 55 6a 78 6f 61 6c 5a 61 4f 69 35 71 51 33 4a 74 58 55 4e 7a 63 57 4a 58 4e 44 6c 71 54 48 77 2b 62 44 78 55 67 6c 74 50 51 34 4f 41 51 6f 71 4b 64 6e 70 61 Data Ascii: 8GnyNCF0LCerbKYjK7E2pm4lqziub+bpK/G6OXlweTsoezMusnOtKy14Pa11P3I/tTT+LrZz/EAAfHU8vXjBwEO2wQQ2+rOFwTk4+cG89ka1Rfr4fse2+XvBfz0Jgj67i4EMfwx6jQAEDMMOAQMCvwqIPsLQREY/P0RFxVKRQ0NSixQUysoIxcOLBoZVV5fW0o7Yl1NM2NhUjxoalZaOi5qQ3JtXUNzcWJXNDlqTHw+bDxUgltPQ4OAQoqKdnpa
2024-09-20 16:19:25 UTC	1369	IN	Data Raw: 4c 57 71 5a 48 59 30 36 36 32 6c 64 69 63 34 4a 6e 64 79 35 71 31 33 2b 43 79 36 4f 4f 70 76 75 72 6f 32 4d 62 76 37 63 66 6b 38 66 48 4b 7a 76 50 30 75 63 37 36 39 2f 65 39 2f 41 50 56 74 67 59 41 41 64 49 48 42 74 33 46 43 41 72 68 45 75 45 4d 30 4d 30 51 45 51 48 32 30 42 58 74 48 52 6b 66 38 76 49 63 48 65 44 68 49 69 45 51 35 53 73 6d 41 42 30 70 4b 51 4c 74 4d 69 34 48 44 7a 45 79 49 52 4d 37 4f 77 37 31 39 54 67 35 44 7a 77 39 41 68 39 44 51 68 73 6b 47 6b 52 45 42 6b 35 49 53 46 46 54 54 69 59 53 55 46 46 53 53 56 5a 56 56 42 5a 63 57 6a 4d 37 47 56 78 4d 5a 57 4e 6e 4f 68 74 6d 5a 54 39 48 61 6d 68 6f 4c 6e 46 75 52 6e 5a 47 63 44 5a 54 64 33 56 6b 4c 7a 5a 34 55 30 74 38 66 47 35 31 68 49 42 61 52 6f 61 45 68 45 71 4d 69 55 35 6e 6b 4a 4e 6d 55 Data Ascii: LWqZHY0662ldic4Jndy5q13+Cy6OOpvuro2Mbv7cfk8fHKzvP0uc769/e9/APVtgYAAdIHBt3FCArhEuEM0M0QEQH20BXtHRkf8vIcHeDhIiEQ5SsmAB0pKQLtMi4HDzEyIRM7Ow719Tg5Dzw9Ah9DQhskGkREBk5ISFFTTiYSUFFSSVZVVBZcWjM7GVxMZWNnOhtmZT9HamhoLnFuRnZGcDZTd3VkLzZ4U0t8fG51hIBaRoaEhEqMiU5nkJNmU
2024-09-20 16:19:25 UTC	1369	IN	Data Raw: 49 33 64 69 79 32 4a 37 64 7a 4e 53 67 34 4c 76 48 75 4f 50 55 75 38 37 71 32 71 6d 72 75 75 48 78 38 66 58 4e 78 72 58 7a 7a 75 6e 73 2b 74 62 70 30 38 7a 4c 30 4e 66 4f 76 64 44 56 42 72 33 62 33 41 76 33 79 52 49 53 41 51 49 57 7a 41 54 56 32 4e 58 5a 45 67 76 57 33 43 49 44 49 2f 6e 2b 34 65 44 6e 46 53 58 6a 46 68 34 68 4b 78 76 6d 45 53 77 76 4b 67 62 79 4d 53 34 6e 38 76 6a 79 48 7a 38 57 4c 66 33 38 42 44 46 45 41 44 49 36 51 45 63 33 41 79 31 4a 4f 30 59 69 45 44 31 4b 51 77 38 57 4c 44 74 62 4d 6c 55 61 47 53 42 4e 59 78 78 4e 54 7a 41 78 47 69 63 32 4a 6d 56 68 61 47 6f 75 51 33 42 76 63 45 63 77 4d 6e 4a 6d 53 58 70 70 61 6e 34 31 62 44 35 42 51 45 4a 36 64 6f 4b 47 5a 56 53 4b 58 6b 61 4f 69 34 78 6b 58 31 4b 52 54 35 4b 55 62 4a 6c 57 57 35 Data Ascii: I3diy2J7dzNSg4LvHuOPUu87q2qmruuHx8fXNxrXzzuns+tbp08zL0NfOvdDVBr3b3Av3yRISAQIWzATV2NXZEgvW3CIDI/n+4eDnFSXjFh4hKxvmESwvKgbyMS4n8vjyHz8WLf38BDFEADI6QEc3Ay1JO0YiED1KQw8WLDtbMlUaGSBNYxxNTzAxGic2JmVhaGouQ3BvcEcwMnJmSXppan41bD5BQEJ6doKGZVSKXkaOi4xkX1KRT5KUbJlWW5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.16	56643	104.18.94.41	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:25 UTC	485	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/51106294:1726845398:lDn3rFZaxb8SDi9NY_9Tplq1Ta4fvDRfDN7VND7NlSQ/8c6322f16b9f8cee/b67c72f3da32a39 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:25 UTC	349	IN	HTTP/1.1 404 Not Found Date: Fri, 20 Sep 2024 16:19:25 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: GkLV7+zTbZIUaN5eKQDLkDee/3DkZ1ZjCe0=$47yAAr6r8lT4JUDo Server: cloudflare CF-RAY: 8c632316ef2641e3-EWR
2024-09-20 16:19:25 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.16	56644	104.18.94.41	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:28 UTC	926	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/51106294:1726845398:lDn3rFZaxb8SDi9NY_9Tplq1Ta4fvDRfDN7VND7NlSQ/8c6322f16b9f8cee/b67c72f3da32a39 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 34740 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: b67c72f3da32a39 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/lxqex/0x4AAAAAAAi2xvnxdhQA0wSe/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:28 UTC	16384	OUT	Data Raw: 76 5f 38 63 36 33 32 32 66 31 36 62 39 66 38 63 65 65 3d 72 31 6f 70 44 33 39 24 78 6e 78 79 32 74 54 71 4d 71 66 6e 6f 79 2d 39 4f 71 53 70 49 70 45 79 32 71 4e 71 32 6b 43 6c 74 47 71 38 79 71 39 67 46 34 78 45 6d 31 6c 71 53 76 71 4e 6c 6d 24 39 38 53 37 37 6c 39 34 71 6e 32 39 37 79 51 70 71 4b 78 70 39 32 6f 71 61 66 4c 47 71 76 71 58 31 71 59 71 66 52 52 6f 32 6c 78 62 31 39 4a 76 24 6b 65 79 6f 41 47 72 6c 33 75 71 79 55 42 39 44 71 6e 43 41 6c 71 39 4c 70 39 7a 42 74 6d 42 71 56 70 79 6a 71 33 65 67 54 38 32 39 71 53 6f 71 76 70 4c 50 4b 6a 42 41 54 4a 42 71 42 4b 6e 50 6c 55 6f 59 54 62 31 43 75 74 39 45 69 63 49 77 71 6f 4e 39 78 57 53 54 71 58 4a 64 31 4b 6f 65 37 74 47 6d 24 71 33 53 49 4d 75 4c 38 76 64 46 79 4a 63 66 25 32 62 53 6e 39 43 54 Data Ascii: v_8c6322f16b9f8cee=r1opD39$xnxy2tTqMqfnoy-9OqSpIpEy2qNq2kCltGq8yq9gF4xEm1lqSvqNlm$98S77l94qn297yQpqKxp92oqafLGqvqX1qYqfRRo2lxb19Jv$keyoAGrl3uqyUB9DqnCAlq9Lp9zBtmBqVpyjq3egT829qSoqvpLPKjBATJBqBKnPlUoYTb1Cut9EicIwqoN9xWSTqXJd1Koe7tGm$q3SIMuL8vdFyJcf%2bSn9CT
2024-09-20 16:19:28 UTC	16384	OUT	Data Raw: 71 52 31 68 72 39 45 50 35 54 6b 6e 71 74 48 4c 7a 39 4f 71 42 24 34 6c 39 35 4c 6e 6f 78 70 33 5a 65 57 68 7a 78 66 31 71 70 71 35 71 2b 70 33 48 70 6a 71 33 31 33 72 45 75 6d 71 73 65 67 70 24 78 72 53 59 45 71 69 71 58 71 71 6f 71 58 71 66 6a 39 39 71 4a 71 2b 32 67 35 71 71 70 49 32 71 70 71 32 70 72 7a 71 32 71 62 70 71 78 39 73 71 6f 71 58 78 39 53 71 2d 70 6d 71 71 41 6c 73 32 33 32 39 6a 71 6d 70 72 6c 58 55 4d 76 71 2b 5a 4f 78 71 66 45 6e 47 33 7a 71 75 6d 58 7a 49 77 70 73 70 71 70 39 70 71 66 71 39 31 33 72 45 7a 65 66 7a 71 61 4b 73 32 42 35 61 45 70 24 78 79 70 71 31 71 6b 71 6e 47 79 50 71 37 77 57 33 33 51 71 71 70 4d 54 52 58 71 75 45 42 67 33 53 71 35 48 49 6c 39 77 70 46 71 6f 30 79 53 71 52 4c 6e 6c 79 4c 71 57 33 57 30 33 50 71 75 45 Data Ascii: qR1hr9EP5TknqtHLz9OqB$4l95Lnoxp3ZeWhzxf1qpq5q+p3Hpjq313rEumqsegp$xrSYEqiqXqqoqXqfj99qJq+2g5qqpI2qpq2przq2qbpqx9sqoqXx9Sq-pmqqAls2329jqmprlXUMvq+ZOxqfEnG3zqumXzIwpspqp9pqfq913rEzefzqaKs2B5aEp$xypq1qkqnGyPq7wW33QqqpMTRXquEBg3Sq5HIl9wpFqo0ySqRLnlyLqW3W03PquE
2024-09-20 16:19:28 UTC	1972	OUT	Data Raw: 74 6b 4b 70 77 48 32 4e 66 50 6d 65 59 45 4c 62 46 55 46 71 6d 59 6c 43 41 59 71 34 32 58 63 71 2b 24 57 46 6d 32 54 62 6f 74 6e 64 4d 75 6d 70 6c 72 71 4f 71 49 78 32 74 4c 59 4a 24 76 74 6c 79 63 41 66 50 76 42 54 54 51 49 58 54 44 74 53 71 77 2b 63 74 55 72 6e 6e 6e 34 49 2b 79 51 31 6e 30 42 37 62 63 52 70 79 77 54 78 46 79 77 66 70 71 6e 51 49 31 52 31 70 50 59 6e 42 35 32 79 51 56 71 34 72 46 42 33 43 65 67 4a 77 6a 47 4b 58 70 4a 38 64 6d 43 4c 66 61 62 39 73 55 78 38 6b 61 4d 43 43 58 45 6e 63 64 70 69 38 78 43 70 39 2b 70 62 49 67 31 70 64 74 59 6c 52 66 64 6a 62 46 57 70 63 37 4c 49 75 71 48 55 48 31 39 6d 77 64 49 74 4f 55 38 6c 74 6e 71 64 32 75 6d 71 65 55 24 39 31 4c 41 75 2d 73 37 56 6c 64 58 48 37 7a 61 79 55 6d 4c 56 46 74 70 72 30 75 69 Data Ascii: tkKpwH2NfPmeYELbFUFqmYlCAYq42Xcq+$WFm2TbotndMumplrqOqIx2tLYJ$vtlycAfPvBTTQIXTDtSqw+ctUrnnn4I+yQ1n0B7bcRpywTxFywfpqnQI1R1pPYnB52yQVq4rFB3CegJwjGKXpJ8dmCLfab9sUx8kaMCCXEncdpi8xCp9+pbIg1pdtYlRfdjbFWpc7LIuqHUH19mwdItOU8ltnqd2umqeU$91LAu-s7VldXH7zayUmLVFtpr0ui
2024-09-20 16:19:29 UTC	1343	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:19:29 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4552 Connection: close cf-chl-out-s: 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$pMSsY [TRUNCATED] cf-chl-out: 3jpfjVW5oEFoVMSxQgRQVo6egqv3GkvVnRILjVqFbazhGbbq0VwGCmcUWlUXQ6S4Kjx/1mO4d9HXYqiTHmBTaBIrd4MH8QJgHS+o2cKHpVXOLEwVglCnkWQ=$ZyK9j3weVriRiNWy Server: cloudflare
2024-09-20 16:19:29 UTC	32	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 63 36 33 32 33 32 61 31 63 63 34 63 33 32 34 2d 45 57 52 0d 0a 0d 0a Data Ascii: CF-RAY: 8c63232a1cc4c324-EWR
2024-09-20 16:19:29 UTC	1363	IN	Data Raw: 57 6f 64 49 57 32 31 70 62 49 6c 55 6c 47 53 54 55 6c 52 39 58 58 2b 49 6b 4a 79 51 67 6d 4a 76 6c 35 31 30 59 36 68 65 65 61 64 6e 6e 59 53 47 65 34 65 47 62 37 53 30 68 61 56 30 63 6e 79 49 65 48 61 41 6a 6f 32 5a 76 35 6d 46 6e 35 4b 44 79 62 69 5a 75 6f 37 4f 72 5a 71 62 30 71 54 55 6b 37 43 69 6b 39 6d 79 71 64 65 65 71 4e 75 78 71 37 7a 63 6e 2b 57 61 74 65 43 71 74 4e 37 6b 72 65 7a 64 37 74 37 75 79 4f 58 4a 7a 72 6a 4e 75 75 69 37 74 4d 66 66 36 73 2b 2b 33 51 63 45 7a 2f 58 55 34 74 54 6b 41 4e 66 5a 78 75 41 52 2f 67 2f 77 42 75 59 46 47 4f 33 5a 30 75 67 57 35 77 33 58 49 4e 6e 38 2b 65 38 52 47 41 63 63 2b 77 34 50 2f 42 41 5a 49 53 67 51 46 52 63 71 49 77 50 76 4b 68 73 76 2f 52 6b 76 45 42 50 35 49 7a 30 63 2f 68 4d 6d 43 52 68 4e 43 79 59 Data Ascii: WodIW21pbIlUlGSTUlR9XX+IkJyQgmJvl510Y6heeadnnYSGe4eGb7S0haV0cnyIeHaAjo2Zv5mFn5KDybiZuo7OrZqb0qTUk7Cik9myqdeeqNuxq7zcn+WateCqtN7krezd7t7uyOXJzrjNuui7tMff6s++3QcEz/XU4tTkANfZxuAR/g/wBuYFGO3Z0ugW5w3XINn8+e8RGAcc+w4P/BAZISgQFRcqIwPvKhsv/RkvEBP5Iz0c/hMmCRhNCyY
2024-09-20 16:19:29 UTC	1369	IN	Data Raw: 73 68 59 69 50 62 46 46 4f 62 6f 4e 6c 55 56 78 6f 65 31 75 4e 6f 70 65 5a 59 4a 61 52 5a 61 4f 45 70 32 47 5a 69 47 42 6c 71 6d 39 74 62 59 6d 4d 6c 6d 2b 7a 70 70 68 74 6b 6f 78 33 65 62 75 76 69 6e 6d 76 72 62 47 41 77 4a 4f 30 68 63 65 73 72 4a 66 4c 75 73 47 53 6c 4d 61 75 6b 36 2b 6a 79 39 4c 49 75 61 6d 58 32 75 4c 41 6f 65 48 4f 70 71 44 51 74 4b 65 71 77 37 79 70 71 4f 76 4d 30 37 76 63 7a 4d 32 7a 7a 2f 61 31 73 2f 54 51 36 62 75 32 39 66 4b 2b 41 75 34 44 30 4c 6f 4c 78 63 51 45 44 38 44 48 44 65 38 43 79 67 2f 54 43 4d 33 70 43 67 66 6b 38 2f 44 62 46 77 7a 33 45 4f 7a 35 48 39 77 70 41 42 63 57 33 65 77 4e 42 65 55 65 42 54 48 73 44 52 49 41 37 52 41 56 4c 76 51 52 2f 41 6e 37 46 78 45 68 2b 7a 2f 37 52 6a 34 62 48 51 5a 43 4a 41 52 42 47 44 Data Ascii: shYiPbFFOboNlUVxoe1uNopeZYJaRZaOEp2GZiGBlqm9tbYmMlm+zpphtkox3ebuvinmvrbGAwJO0hcesrJfLusGSlMauk6+jy9LIuamX2uLAoeHOpqDQtKeqw7ypqOvM07vczM2zz/a1s/TQ6bu29fK+Au4D0LoLxcQED8DHDe8Cyg/TCM3pCgfk8/DbFwz3EOz5H9wpABcW3ewNBeUeBTHsDRIA7RAVLvQR/An7FxEh+z/7Rj4bHQZCJARBGD
2024-09-20 16:19:29 UTC	1369	IN	Data Raw: 65 4a 43 59 57 35 61 57 6a 57 36 64 59 48 56 74 6b 4b 4e 32 62 35 56 78 63 35 36 57 72 5a 71 49 6e 35 32 51 63 6f 74 73 63 71 79 5a 74 71 78 31 6b 5a 78 39 65 4a 65 4d 6e 58 72 42 70 4b 53 50 6f 4c 61 31 68 4b 48 43 71 59 69 6f 71 4d 36 62 70 72 44 53 6f 4a 65 58 79 74 48 48 6c 4b 65 56 32 4b 2f 43 6e 74 2b 39 73 5a 6d 2f 70 2b 75 30 78 4e 6e 61 70 65 76 66 76 71 6e 79 37 72 4c 75 34 2b 37 6d 73 75 6d 7a 2f 4d 6a 59 33 2f 58 35 41 75 44 65 2f 4e 2f 62 2f 4e 50 43 2f 76 6e 50 2b 77 66 38 78 65 6e 50 39 51 38 45 45 78 6f 53 43 2f 7a 63 36 50 62 70 37 75 48 57 2f 43 6a 66 4a 75 66 6c 4c 53 6b 47 41 53 51 47 2b 66 33 78 4d 77 49 41 39 79 4d 37 46 41 55 71 47 43 34 49 50 78 6f 53 2f 54 4c 2b 4e 76 35 45 4e 7a 55 55 48 79 45 4c 52 6a 77 2f 45 67 30 71 55 31 56 Data Ascii: eJCYW5aWjW6dYHVtkKN2b5Vxc56WrZqIn52QcotscqyZtqx1kZx9eJeMnXrBpKSPoLa1hKHCqYioqM6bprDSoJeXytHHlKeV2K/Cnt+9sZm/p+u0xNnapevfvqny7rLu4+7msumz/MjY3/X5AuDe/N/b/NPC/vnP+wf8xenP9Q8EExoSC/zc6Pbp7uHW/CjfJuflLSkGASQG+f3xMwIA9yM7FAUqGC4IPxoS/TL+Nv5ENzUUHyELRjw/Eg0qU1V
2024-09-20 16:19:29 UTC	451	IN	Data Raw: 6c 35 30 56 31 78 68 57 6f 46 77 59 4b 4f 54 64 46 31 73 6a 4b 42 6d 69 4a 32 66 63 70 2b 4d 74 6e 42 34 6f 61 74 35 75 70 65 6e 65 36 32 67 6e 6e 36 77 6f 49 43 41 68 34 65 49 6b 37 69 5a 6c 70 69 47 75 63 54 49 30 63 33 48 6a 71 44 53 78 5a 62 54 32 72 54 67 31 2b 4b 39 32 4d 37 6d 76 65 6a 69 36 73 4b 69 77 62 7a 4a 35 4d 54 78 34 65 6e 65 73 38 37 74 32 62 62 71 38 4e 33 39 36 67 48 37 79 2b 37 34 32 64 50 7a 2f 4d 63 4b 2b 67 48 4a 32 2f 30 52 43 38 37 2b 43 51 7a 48 42 51 30 52 35 50 50 53 37 76 54 79 46 2f 48 66 2f 53 58 35 38 78 6b 65 2b 67 51 5a 49 77 37 71 49 6a 45 43 37 69 55 7a 41 65 77 74 4f 44 41 62 43 68 77 6c 4f 66 51 76 45 54 45 32 4d 68 77 76 47 51 4d 69 4d 67 49 43 43 79 42 4d 53 55 6b 4e 48 55 30 2b 4b 51 6c 54 4d 53 77 53 45 6c 73 71 Data Ascii: l50V1xhWoFwYKOTdF1sjKBmiJ2fcp+MtnB4oat5upene62gnn6woICAh4eIk7iZlpiGucTI0c3HjqDSxZbT2rTg1+K92M7mveji6sKiwbzJ5MTx4enes87t2bbq8N396gH7y+742dPz/McK+gHJ2/0RC87+CQzHBQ0R5PPS7vTyF/Hf/SX58xke+gQZIw7qIjEC7iUzAewtODAbChwlOfQvETE2MhwvGQMiMgICCyBMSUkNHU0+KQlTMSwSElsq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.16	56622	188.114.97.3	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:29 UTC	906	OUT	POST /5a117d63-e078-4d65-be0b-fa7ab24a9f8f/uysfdiv0928e374.php HTTP/1.1 Host: agence-immobiliere-luberon.com Connection: keep-alive Content-Length: 905 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://agence-immobiliere-luberon.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://agence-immobiliere-luberon.com/5a117d63-e078-4d65-be0b-fa7ab24a9f8f/CIUIhu3Il%5Ej8d~hCXGBXQyj488CBOiZ1sBu85VOVjdrfR0wHePNTggGPy9a3-=Zwh5%5E7n9pEiH6Zv30Ct5r9X-BK3djTxG2Fz5OB Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:29 UTC	905	OUT	Data Raw: 73 65 63 3d 30 78 34 41 41 41 41 41 41 41 69 32 78 6c 6d 55 59 70 31 4d 32 6b 48 63 56 4d 39 43 4d 74 4b 36 4b 6f 6b 27 26 74 6f 6b 65 6e 3d 30 2e 79 71 68 51 6d 45 66 67 48 6b 54 5a 70 6d 6c 66 6c 56 43 55 39 43 5a 63 77 34 70 54 53 34 2d 77 69 56 4d 53 46 58 5a 33 53 6d 59 52 5f 4c 38 6c 73 64 52 45 58 58 38 37 49 65 31 47 39 56 4d 70 48 6c 71 4d 70 6a 38 6f 44 37 58 4e 59 75 59 42 76 46 6b 53 4d 63 79 5f 2d 65 56 42 54 54 48 61 64 58 49 34 56 59 5a 70 50 34 67 6a 71 55 37 4c 34 6a 51 6d 6e 45 2d 43 4f 76 64 2d 5f 53 66 7a 58 53 53 44 55 4a 70 6f 37 53 31 4a 51 79 73 39 4e 70 4d 57 43 56 2d 58 43 56 6a 53 35 57 6d 63 4e 32 74 7a 39 35 30 4d 78 34 2d 73 66 58 6f 39 73 56 72 7a 74 4e 75 41 4e 75 35 6f 76 49 72 63 6a 53 55 6a 75 55 76 34 78 4a 33 74 47 49 Data Ascii: sec=0x4AAAAAAAi2xlmUYp1M2kHcVM9CMtK6Kok'&token=0.yqhQmEfgHkTZpmlflVCU9CZcw4pTS4-wiVMSFXZ3SmYR_L8lsdREXX87Ie1G9VMpHlqMpj8oD7XNYuYBvFkSMcy_-eVBTTHadXI4VYZpP4gjqU7L4jQmnE-COvd-_SfzXSSDUJpo7S1JQys9NpMWCV-XCVjS5WmcN2tz950Mx4-sfXo9sVrztNuANu5ovIrcjSUjuUv4xJ3tGI
2024-09-20 16:19:30 UTC	692	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:19:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jhQgHVcFsJjHbCz6NJEywogkud7cs4z2mqZQl0IFNPMtrttj%2Bzw25gZKAcYHICZm3Yx9QMR3Ex%2Fv7bQu8Hph%2Fxh7pgggPufGVnn%2F9RyWss1wSCWbJ0m0WvTjuqscMsiz4HZby8V0KH1PMbIrGI80M5Q%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c63232bd99b5e82-EWR
2024-09-20 16:19:30 UTC	6	IN	Data Raw: 31 0d 0a 31 0d 0a Data Ascii: 11
2024-09-20 16:19:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.16	56645	104.18.94.41	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:30 UTC	485	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/51106294:1726845398:lDn3rFZaxb8SDi9NY_9Tplq1Ta4fvDRfDN7VND7NlSQ/8c6322f16b9f8cee/b67c72f3da32a39 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:30 UTC	349	IN	HTTP/1.1 404 Not Found Date: Fri, 20 Sep 2024 16:19:30 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: 0+TtAFCIMmSRVVxC882NKIn3Pvd0yZN569Y=$isAlEnVKa3/YaQL6 cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8c6323352c934276-EWR
2024-09-20 16:19:30 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.16	56646	188.114.97.3	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:31 UTC	769	OUT	GET /5a117d63-e078-4d65-be0b-fa7ab24a9f8f/admin/lifeattach HTTP/1.1 Host: agence-immobiliere-luberon.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://agence-immobiliere-luberon.com/5a117d63-e078-4d65-be0b-fa7ab24a9f8f/CIUIhu3Il%5Ej8d~hCXGBXQyj488CBOiZ1sBu85VOVjdrfR0wHePNTggGPy9a3-=Zwh5%5E7n9pEiH6Zv30Ct5r9X-BK3djTxG2Fz5OB Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:33 UTC	924	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:19:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=qj4ss5qbim4qnl4scfog2a54j2; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8OwrvqhD5uCW0BKM0j5bQYydW1gIyciAjiXZRXHLiQnoQDl6KbtVkql9ZU8CG5U8FmbhapISKX1MDLG8YRp2YBEZNKjBQCYg0fRMbp%2BtMj3%2BoH9r8t8F6OmNcmIM1yfXc90GHV8DU1bS8rRt%2B0gIjNY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8c6323393e730fa7-EWR
2024-09-20 16:19:33 UTC	445	IN	Data Raw: 37 63 30 31 0d 0a 51 5a 48 5a 55 53 52 56 31 61 30 51 6d 62 52 70 58 5a 57 5a 6c 53 57 56 6c 55 32 4d 57 56 6b 46 6a 59 36 35 30 52 61 56 6b 52 72 4a 56 56 78 45 6e 56 7a 59 31 56 4f 4e 6a 52 54 52 56 56 6f 56 55 59 57 70 6b 65 54 64 55 4f 36 46 57 4d 73 4a 6c 59 73 4e 57 4e 4e 56 6c 54 48 70 6c 4d 73 68 57 57 55 46 46 4f 68 68 6b 55 30 4a 32 51 43 4e 58 57 58 56 6a 62 51 4e 6c 53 73 4a 57 61 4a 74 79 51 71 68 33 62 61 64 6c 52 72 42 31 5a 76 68 7a 59 7a 49 56 4e 69 64 55 56 6e 46 32 56 52 6c 54 53 74 4a 46 62 61 31 6d 52 78 49 47 53 53 5a 57 57 7a 34 6b 65 4a 70 57 4e 76 52 32 52 78 4d 58 5a 79 6f 6c 64 69 35 57 55 30 70 56 62 47 52 58 59 58 68 58 4e 50 35 6d 54 6f 4a 6d 62 4e 52 33 59 79 59 56 65 68 64 56 57 33 77 30 56 78 6f 48 54 59 4a 46 62 6c 68 55 Data Ascii: 7c01QZHZUSRV1a0QmbRpXZWZlSWVlU2MWVkFjY650RaVkRrJVVxEnVzY1VONjRTRVVoVUYWpkeTdUO6FWMsJlYsNWNNVlTHplMshWWUFFOhhkU0J2QCNXWXVjbQNlSsJWaJtyQqh3badlRrB1ZvhzYzIVNidUVnF2VRlTStJFba1mRxIGSSZWWz4keJpWNvR2RxMXZyoldi5WU0pVbGRXYXhXNP5mToJmbNR3YyYVehdVW3w0VxoHTYJFblhU
2024-09-20 16:19:33 UTC	1369	IN	Data Raw: 68 56 53 7a 46 32 52 57 68 6d 57 48 5a 56 65 4d 64 45 61 75 4e 57 62 35 45 7a 59 44 68 48 64 5a 64 46 62 31 78 30 52 78 77 6d 59 75 56 31 63 69 31 6d 52 79 77 45 53 4f 78 57 57 7a 49 46 63 69 4a 44 4e 7a 4e 32 4d 57 52 6e 59 58 5a 55 65 6c 68 46 64 72 46 47 57 4f 64 6e 59 48 5a 55 4e 50 31 6d 53 7a 4a 6d 4d 4f 4a 6e 5a 58 5a 55 4d 61 64 45 62 32 78 30 52 4f 68 6d 59 75 70 46 61 6a 6c 48 65 33 4e 57 62 35 34 32 59 74 5a 6c 65 6a 6c 48 65 79 45 32 56 53 78 6d 59 7a 51 33 61 68 68 6c 54 33 4a 32 52 47 56 7a 54 74 78 57 64 69 64 45 62 31 70 31 55 78 6b 6d 59 48 6c 6a 61 68 70 48 64 79 6f 46 57 4b 42 54 59 58 35 45 61 69 4e 55 4d 6f 4a 32 52 73 35 6d 59 71 42 58 61 5a 68 6c 54 73 4a 32 52 73 56 6e 57 59 46 44 61 6b 64 6c 55 77 4a 6d 65 77 56 6e 59 7a 45 31 62 Data Ascii: hVSzF2RWhmWHZVeMdEauNWb5EzYDhHdZdFb1x0RxwmYuV1ci1mRywESOxWWzIFciJDNzN2MWRnYXZUelhFdrFGWOdnYHZUNP1mSzJmMOJnZXZUMadEb2x0ROhmYupFajlHe3NWb542YtZlejlHeyE2VSxmYzQ3ahhlT3J2RGVzTtxWdidEb1p1UxkmYHljahpHdyoFWKBTYX5EaiNUMoJ2Rs5mYqBXaZhlTsJ2RsVnWYFDakdlUwJmewVnYzE1b
2024-09-20 16:19:33 UTC	1369	IN	Data Raw: 33 59 49 4a 6c 62 6a 31 57 4f 78 4d 32 51 34 70 6e 57 58 68 48 62 5a 4e 54 55 7a 52 32 52 57 52 44 5a 48 5a 55 65 61 64 6c 52 33 6b 6c 4d 35 4d 6e 59 7a 6b 6b 4e 68 64 56 4e 76 70 46 57 4b 42 48 5a 45 52 58 62 69 4a 54 4e 77 38 55 62 73 56 58 59 48 5a 56 65 68 68 56 55 33 49 32 56 47 6c 6e 57 79 77 57 64 50 70 6d 51 35 6b 6c 62 57 42 44 5a 48 6c 54 64 6c 4a 54 4f 79 6f 46 57 4b 31 6d 59 48 6c 7a 4d 50 35 6d 57 77 4e 6d 4d 73 6c 6d 59 48 5a 56 4f 5a 35 6d 56 77 51 32 52 35 55 48 54 49 35 45 62 69 64 6b 56 71 52 47 53 30 42 6a 57 59 68 47 4d 4d 68 6c 55 35 6c 31 56 31 6f 6e 57 74 6c 54 65 69 52 46 63 31 4a 6d 4d 31 77 6d 5a 58 70 55 4d 6b 68 6b 55 32 4a 57 61 34 39 47 5a 48 46 7a 63 4a 64 45 62 31 4e 47 53 57 42 7a 56 7a 49 56 4e 6a 64 55 56 35 6b 6c 62 57 Data Ascii: 3YIJlbj1WOxM2Q4pnWXhHbZNTUzR2RWRDZHZUeadlR3klM5MnYzkkNhdVNvpFWKBHZERXbiJTNw8UbsVXYHZVehhVU3I2VGlnWywWdPpmQ5klbWBDZHlTdlJTOyoFWK1mYHlzMP5mWwNmMslmYHZVOZ5mVwQ2R5UHTI5EbidkVqRGS0BjWYhGMMhlU5l1V1onWtlTeiRFc1JmM1wmZXpUMkhkU2JWa49GZHFzcJdEb1NGSWBzVzIVNjdUV5klbW
2024-09-20 16:19:33 UTC	1369	IN	Data Raw: 62 32 4a 6d 62 7a 52 48 5a 79 59 56 61 68 4a 44 62 77 77 30 56 47 64 33 59 48 5a 46 61 6a 31 6d 52 31 6c 6c 4d 56 5a 6a 59 74 6c 54 64 61 68 56 4d 74 46 32 56 57 4e 6e 57 49 35 45 62 6b 68 45 64 70 4a 32 4d 4b 74 6d 57 59 6c 6b 4e 4e 68 6c 51 30 6b 45 53 4f 5a 6e 59 48 78 32 61 4a 68 6b 54 77 4a 47 53 61 78 32 59 71 52 48 64 5a 68 6c 53 75 46 32 56 30 59 54 54 44 46 55 65 6a 68 30 5a 33 4d 32 52 47 74 6d 57 48 78 57 64 61 70 33 62 31 31 6b 65 57 78 6d 59 54 46 55 64 4f 70 57 53 78 6f 31 56 77 63 47 54 71 4e 57 4d 61 64 56 4d 35 49 32 52 57 35 6d 57 58 56 7a 61 6c 4a 6a 53 32 4e 57 62 53 78 32 59 71 39 32 64 50 4e 6a 51 6f 70 31 52 53 42 6e 59 74 4e 6d 4e 4e 68 55 4d 77 6f 46 57 6f 42 54 57 59 70 45 62 5a 68 46 64 32 52 57 62 57 6c 6e 57 74 68 6e 64 6b 70 Data Ascii: b2JmbzRHZyYVahJDbww0VGd3YHZFaj1mR1llMVZjYtlTdahVMtF2VWNnWI5EbkhEdpJ2MKtmWYlkNNhlQ0kESOZnYHx2aJhkTwJGSax2YqRHdZhlSuF2V0YTTDFUejh0Z3M2RGtmWHxWdap3b11keWxmYTFUdOpWSxo1VwcGTqNWMadVM5I2RW5mWXVzalJjS2NWbSx2Yq92dPNjQop1RSBnYtNmNNhUMwoFWoBTWYpEbZhFd2RWbWlnWthndkp
2024-09-20 16:19:33 UTC	1369	IN	Data Raw: 74 52 47 63 69 70 32 62 30 31 45 57 43 52 7a 54 7a 49 45 61 61 64 6b 55 77 4a 57 62 6a 5a 54 54 45 52 6e 64 6b 31 6d 56 35 70 56 62 34 5a 48 5a 36 42 33 62 68 64 6c 55 72 70 31 56 30 63 54 57 79 67 48 63 6a 52 45 63 35 70 31 56 4f 42 7a 53 45 46 30 63 4e 4e 30 64 33 78 45 52 42 42 33 54 79 6f 6b 64 6a 31 6d 55 73 4e 6d 61 76 64 6e 5a 54 56 6a 65 6a 6c 57 4d 32 4a 57 62 34 56 44 54 58 70 6c 64 5a 4e 6a 56 36 6c 31 56 4b 4e 6e 57 55 42 48 61 5a 4e 6a 55 77 52 57 62 56 4e 48 54 75 35 55 65 4d 64 56 4f 31 4a 47 53 72 52 6e 57 74 6c 6a 61 6b 68 6c 54 6f 6c 56 62 34 78 32 54 74 70 6c 64 5a 4e 6a 56 36 56 32 4d 43 5a 33 59 79 77 47 4d 68 64 56 4f 31 39 6b 62 4f 42 54 57 59 4a 46 63 5a 70 48 64 7a 45 32 56 53 42 54 59 45 42 48 61 6b 68 6c 55 32 39 6b 4d 6f 78 57 Data Ascii: tRGcip2b01EWCRzTzIEaadkUwJWbjZTTERndk1mV5pVb4ZHZ6B3bhdlUrp1V0cTWygHcjREc5p1VOBzSEF0cNN0d3xERBB3Tyokdj1mUsNmavdnZTVjejlWM2JWb4VDTXpldZNjV6l1VKNnWUBHaZNjUwRWbVNHTu5UeMdVO1JGSrRnWtljakhlTolVb4x2TtpldZNjV6V2MCZ3YywGMhdVO19kbOBTWYJFcZpHdzE2VSBTYEBHakhlU29kMoxW
2024-09-20 16:19:33 UTC	1369	IN	Data Raw: 39 30 4d 43 68 6d 57 48 4a 46 63 69 31 32 59 30 6c 56 62 35 41 44 5a 48 6c 44 64 50 6c 47 4e 35 31 30 4d 43 52 7a 54 7a 49 45 61 61 64 6b 55 77 4a 57 62 6a 52 48 5a 48 6c 7a 64 50 6c 47 4e 35 31 30 4d 43 52 7a 54 79 34 6b 64 69 64 55 4f 35 39 55 61 4e 64 58 54 45 46 30 4e 5a 31 6d 52 71 46 6d 4d 6b 6c 6e 59 7a 59 56 64 61 4e 55 4d 71 4a 6d 4d 34 5a 33 59 71 39 6d 61 61 31 6d 57 74 5a 32 56 47 64 54 57 79 6b 7a 63 69 4e 54 53 32 6b 6b 4d 4f 70 57 57 36 52 48 4d 61 68 46 61 77 77 30 56 53 78 57 57 79 6b 54 65 5a 68 6c 55 77 4a 6d 4d 30 59 6a 59 74 6c 54 64 61 68 56 4d 6f 39 55 62 34 42 6e 59 74 52 33 4e 5a 4a 54 4f 7a 4a 32 4d 4a 5a 54 53 36 46 30 64 4f 70 47 5a 70 39 45 53 78 67 32 54 75 70 46 63 6a 4a 44 62 77 6f 31 56 53 64 54 57 79 6b 7a 63 69 4e 54 53 Data Ascii: 90MChmWHJFci12Y0lVb5ADZHlDdPlGN510MCRzTzIEaadkUwJWbjRHZHlzdPlGN510MCRzTy4kdidUO59UaNdXTEF0NZ1mRqFmMklnYzYVdaNUMqJmM4Z3Yq9maa1mWtZ2VGdTWykzciNTS2kkMOpWW6RHMahFaww0VSxWWykTeZhlUwJmM0YjYtlTdahVMo9Ub4BnYtR3NZJTOzJ2MJZTS6F0dOpGZp9ESxg2TupFcjJDbwo1VSdTWykzciNTS
2024-09-20 16:19:33 UTC	1369	IN	Data Raw: 45 62 61 4a 54 4f 73 6c 6b 52 57 70 55 53 47 52 47 62 5a 31 6d 57 32 4a 6d 62 52 35 32 54 7a 34 55 65 5a 70 48 63 7a 4a 6d 4d 4f 68 6d 59 44 64 57 61 56 4a 6a 56 75 4a 6d 4d 56 64 6d 56 56 74 32 5a 55 64 45 62 75 46 47 53 52 6c 32 53 55 52 58 62 69 4a 54 4e 77 77 45 57 6b 78 57 59 58 52 32 62 6b 52 30 62 35 31 45 52 42 64 6a 57 74 6c 54 64 6b 4e 55 4d 36 52 47 53 73 4e 6e 57 55 42 58 64 69 4e 6a 53 30 6c 31 56 34 6c 54 55 48 70 6c 64 69 35 57 55 30 70 56 62 47 70 6d 57 59 52 58 62 69 4a 54 4e 77 77 30 56 61 68 6d 59 58 78 32 63 6c 52 31 62 75 56 6c 4d 57 35 6d 59 79 55 31 5a 57 56 31 61 6e 5a 6c 4d 57 6c 6d 57 74 6c 54 64 6b 4e 30 59 33 4d 32 4d 4b 70 32 54 74 68 6e 64 5a 4a 6a 52 7a 74 30 51 4b 52 6c 57 58 52 6d 64 61 4e 6c 51 57 4e 31 55 4a 42 33 54 79 Data Ascii: EbaJTOslkRWpUSGRGbZ1mW2JmbR52Tz4UeZpHczJmMOhmYDdWaVJjVuJmMVdmVVt2ZUdEbuFGSRl2SURXbiJTNwwEWkxWYXR2bkR0b51ERBdjWtlTdkNUM6RGSsNnWUBXdiNjS0l1V4lTUHpldi5WU0pVbGpmWYRXbiJTNww0VahmYXx2clR1buVlMW5mYyU1ZWV1anZlMWlmWtlTdkN0Y3M2MKp2TthndZJjRzt0QKRlWXRmdaNlQWN1UJB3Ty
2024-09-20 16:19:33 UTC	1369	IN	Data Raw: 65 72 46 7a 59 74 5a 46 64 6d 4e 56 4e 77 6f 46 57 6f 42 44 54 58 68 47 62 5a 64 6c 55 7a 46 32 56 31 77 47 54 75 4a 46 62 6c 68 55 55 30 4a 32 56 47 52 6a 59 48 78 57 64 61 68 56 54 30 31 6b 62 30 52 58 57 59 64 47 64 68 64 6b 56 77 70 6c 4d 6f 42 7a 54 71 56 6b 4d 4f 4e 45 4e 78 34 45 53 43 52 7a 54 79 45 44 61 6c 4e 55 4d 76 70 31 56 73 35 57 59 49 46 6c 4e 4e 52 56 51 31 31 6b 61 6e 70 33 54 55 5a 56 65 61 64 56 4d 35 77 6b 62 53 78 57 5a 49 46 46 64 68 64 6b 56 6f 70 31 52 34 42 6e 59 74 56 56 64 6b 64 6b 56 30 51 32 51 78 51 58 57 59 68 32 63 68 64 56 4e 73 4e 57 65 77 6f 58 5a 79 45 44 61 6c 4e 55 4d 76 70 31 56 73 35 57 59 49 46 6c 4e 4e 70 57 55 77 77 6b 61 56 42 7a 59 49 64 32 4e 69 64 6c 52 30 77 30 56 6f 78 57 59 58 52 32 62 6b 52 30 62 34 35 Data Ascii: erFzYtZFdmNVNwoFWoBDTXhGbZdlUzF2V1wGTuJFblhUU0J2VGRjYHxWdahVT01kb0RXWYdGdhdkVwplMoBzTqVkMONENx4ESCRzTyEDalNUMvp1Vs5WYIFlNNRVQ11kanp3TUZVeadVM5wkbSxWZIFFdhdkVop1R4BnYtVVdkdkV0Q2QxQXWYh2chdVNsNWewoXZyEDalNUMvp1Vs5WYIFlNNpWUwwkaVBzYId2NidlR0w0VoxWYXR2bkR0b45
2024-09-20 16:19:33 UTC	1369	IN	Data Raw: 6a 31 6d 56 30 5a 32 55 31 41 6a 57 59 68 47 4d 4d 68 6c 54 78 6b 56 62 6f 78 57 57 58 4a 46 62 6a 6c 47 65 76 31 6b 62 30 31 6d 59 79 55 44 4d 4d 68 6c 54 77 56 57 62 56 5a 54 54 36 4a 31 64 6c 52 45 64 7a 46 32 56 31 77 47 54 58 68 47 62 68 64 46 5a 76 52 47 52 76 42 54 54 49 4a 45 4e 50 4a 6a 57 32 4a 6d 62 52 52 48 5a 79 59 46 63 61 4a 44 61 77 38 6b 61 4a 64 58 54 45 52 58 62 69 4a 54 4e 77 77 45 57 4f 42 58 5a 74 56 6c 4e 4e 6c 47 4e 34 31 6b 61 57 6c 6e 57 58 42 7a 4e 69 64 45 62 31 70 31 55 78 38 6d 57 58 78 6d 62 68 68 55 55 32 30 55 61 30 45 7a 59 74 5a 46 64 50 4e 6a 51 6f 70 31 52 53 42 6e 59 74 4e 47 64 5a 31 57 4f 77 51 32 52 35 51 33 54 71 31 55 64 4e 52 46 61 33 56 47 52 30 64 58 57 58 4a 31 61 68 64 56 4e 75 78 45 57 53 5a 33 59 45 39 6d Data Ascii: j1mV0Z2U1AjWYhGMMhlTxkVboxWWXJFbjlGev1kb01mYyUDMMhlTwVWbVZTT6J1dlREdzF2V1wGTXhGbhdFZvRGRvBTTIJENPJjW2JmbRRHZyYFcaJDaw8kaJdXTERXbiJTNwwEWOBXZtVlNNlGN41kaWlnWXBzNidEb1p1Ux8mWXxmbhhUU20Ua0EzYtZFdPNjQop1RSBnYtNGdZ1WOwQ2R5Q3Tq1UdNRFa3VGR0dXWXJ1ahdVNuxEWSZ3YE9m
2024-09-20 16:19:33 UTC	1369	IN	Data Raw: 42 6a 57 59 68 47 4d 4d 64 56 4f 79 6f 46 57 4b 31 6d 59 48 6c 7a 4d 50 31 6d 56 7a 4a 32 52 73 64 33 59 79 77 6d 65 50 4a 54 4d 6f 56 32 51 78 38 6d 57 58 78 6d 62 68 68 55 55 32 30 6b 65 4a 56 6e 54 36 35 30 64 6c 52 45 64 30 6c 46 57 6e 52 58 59 48 5a 46 63 61 4a 44 61 77 38 6b 61 4a 56 58 54 45 46 56 4d 4f 68 6b 53 73 4a 47 57 77 55 48 5a 48 5a 46 4e 6b 4e 55 4d 77 45 47 57 53 4e 6e 57 54 56 44 4d 61 68 46 61 77 77 30 56 78 67 57 5a 48 68 48 63 69 31 6d 56 36 78 45 56 4a 4e 58 59 45 31 55 64 6b 64 6b 56 30 51 32 51 78 51 58 57 59 68 32 63 68 64 56 4e 73 4e 57 65 77 6b 58 5a 79 45 44 61 6c 4e 55 4d 76 70 31 56 73 35 57 59 49 46 6c 4e 4f 70 57 51 31 35 6b 65 4f 64 58 5a 45 52 48 64 5a 68 31 5a 30 46 32 52 57 42 6e 57 79 67 47 4d 50 70 57 54 31 35 6b 65 Data Ascii: BjWYhGMMdVOyoFWK1mYHlzMP1mVzJ2Rsd3YywmePJTMoV2Qx8mWXxmbhhUU20keJVnT650dlREd0lFWnRXYHZFcaJDaw8kaJVXTEFVMOhkSsJGWwUHZHZFNkNUMwEGWSNnWTVDMahFaww0VxgWZHhHci1mV6xEVJNXYE1UdkdkV0Q2QxQXWYh2chdVNsNWewkXZyEDalNUMvp1Vs5WYIFlNOpWQ15keOdXZERHdZh1Z0F2RWBnWygGMPpWT15ke

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.16	56648	188.114.96.3	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:31 UTC	410	OUT	GET /5a117d63-e078-4d65-be0b-fa7ab24a9f8f/uysfdiv0928e374.php HTTP/1.1 Host: agence-immobiliere-luberon.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:32 UTC	741	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:19:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=soE8rRLB%2BdAj4MqLN7mbC2%2FwnzLjd%2BVhqe25hPyWesuJexh5aEpL2NcJy20E5I1alLclC9LMTGJOTt%2FvPD%2FDtIjnBy%2BA7ZlUHQotjVtICTVtMEChWPwxxWeqglLjrAamb8M%2FuQGphcUWqOKmBKVUPus%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8c63233c5f947d0c-EWR
2024-09-20 16:19:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.16	56649	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:33 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ttT+bP95t2rbeus&MD=Ynh5PAfb HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-09-20 16:19:33 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 85b222b7-1284-47a8-bd5a-c11b62519c53 MS-RequestId: b7005ce7-edb2-4342-8c86-3979eefc55b0 MS-CV: xO7dF+EEWUS/xliW.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 20 Sep 2024 16:19:33 GMT Connection: close Content-Length: 30005
2024-09-20 16:19:33 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-09-20 16:19:33 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.16	56652	151.101.193.229	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:34 UTC	557	OUT	GET /npm/axios/dist/axios.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://agence-immobiliere-luberon.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:34 UTC	756	IN	HTTP/1.1 200 OK Connection: close Content-Length: 54147 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 1.7.7 X-JSD-Version-Type: version ETag: W/"d383-UevtiR1Ub6VyiQ12MPIw3BrQgvI" Accept-Ranges: bytes Age: 4785 Date: Fri, 20 Sep 2024 16:19:34 GMT X-Served-By: cache-fra-etou8220107-FRA, cache-ewr-kewr1740048-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-09-20 16:19:34 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 74 29 3a 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 65 7c 7c 73 65 6c 66 29 2e 61 78 69 6f 73 3d 74 28 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 76 61 72 20 72 2c 6e 3b 66 75 6e Data Ascii: !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).axios=t()}(this,(function(){"use strict";function e(e){var r,n;fun
2024-09-20 16:19:34 UTC	1378	IN	Data Raw: 6e 28 65 29 7b 76 61 72 20 74 2c 72 2c 6e 2c 69 3d 32 3b 66 6f 72 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 72 3d 53 79 6d 62 6f 6c 2e 61 73 79 6e 63 49 74 65 72 61 74 6f 72 2c 6e 3d 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 29 3b 69 2d 2d 3b 29 7b 69 66 28 72 26 26 6e 75 6c 6c 21 3d 28 74 3d 65 5b 72 5d 29 29 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 65 29 3b 69 66 28 6e 26 26 6e 75 6c 6c 21 3d 28 74 3d 65 5b 6e 5d 29 29 72 65 74 75 72 6e 20 6e 65 77 20 6f 28 74 2e 63 61 6c 6c 28 65 29 29 3b 72 3d 22 40 40 61 73 79 6e 63 49 74 65 72 61 74 6f 72 22 2c 6e 3d 22 40 40 69 74 65 72 61 74 6f 72 22 7d 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 4f 62 6a 65 63 74 20 69 73 20 6e 6f 74 20 61 73 Data Ascii: n(e){var t,r,n,i=2;for("undefined"!=typeof Symbol&&(r=Symbol.asyncIterator,n=Symbol.iterator);i--;){if(r&&null!=(t=e[r]))return t.call(e);if(n&&null!=(t=e[n]))return new o(t.call(e));r="@@asyncIterator",n="@@iterator"}throw new TypeError("Object is not as
2024-09-20 16:19:34 UTC	1378	IN	Data Raw: 70 65 72 74 79 28 65 2c 74 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 72 2c 74 29 29 7d 29 29 7d 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 7d 3b 76 61 72 20 65 2c 74 3d 7b 7d 2c 72 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 3d 72 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 6f 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 65 5b 74 5d 3d 72 2e 76 61 6c 75 65 7d 2c 69 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3f 53 79 6d 62 6f 6c 3a 7b 7d 2c 61 3d 69 2e 69 74 65 72 61 74 6f 72 7c 7c 22 40 40 Data Ascii: perty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function s(){s=function(){return t};var e,t={},r=Object.prototype,n=r.hasOwnProperty,o=Object.defineProperty\|\|function(e,t,r){e[t]=r.value},i="function"==typeof Symbol?Symbol:{},a=i.iterator\|\|"@@
2024-09-20 16:19:34 UTC	1378	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 29 7b 63 2e 76 61 6c 75 65 3d 65 2c 61 28 63 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 72 28 22 74 68 72 6f 77 22 2c 65 2c 61 2c 75 29 7d 29 29 7d 75 28 73 2e 61 72 67 29 7d 76 61 72 20 69 3b 6f 28 74 68 69 73 2c 22 5f 69 6e 76 6f 6b 65 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 74 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 29 7b 72 28 65 2c 6e 2c 74 2c 6f 29 7d 29 29 7d 72 65 74 75 72 6e 20 69 3d 69 3f 69 2e 74 68 65 6e 28 6f 2c 6f 29 3a 6f 28 29 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 54 28 74 2c 72 2c 6e 29 7b 76 61 72 20 6f 3d 70 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 69 2c 61 29 7b 69 66 28 Data Ascii: nction(e){c.value=e,a(c)}),(function(e){return r("throw",e,a,u)}))}u(s.arg)}var i;o(this,"_invoke",{value:function(e,n){function o(){return new t((function(t,o){r(e,n,t,o)}))}return i=i?i.then(o,o):o()}})}function T(t,r,n){var o=p;return function(i,a){if(
2024-09-20 16:19:34 UTC	1378	IN	Data Raw: 69 73 20 6e 6f 74 20 61 6e 20 6f 62 6a 65 63 74 22 29 2c 72 2e 64 65 6c 65 67 61 74 65 3d 6e 75 6c 6c 2c 79 29 7d 66 75 6e 63 74 69 6f 6e 20 41 28 65 29 7b 76 61 72 20 74 3d 7b 74 72 79 4c 6f 63 3a 65 5b 30 5d 7d 3b 31 20 69 6e 20 65 26 26 28 74 2e 63 61 74 63 68 4c 6f 63 3d 65 5b 31 5d 29 2c 32 20 69 6e 20 65 26 26 28 74 2e 66 69 6e 61 6c 6c 79 4c 6f 63 3d 65 5b 32 5d 2c 74 2e 61 66 74 65 72 4c 6f 63 3d 65 5b 33 5d 29 2c 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 2e 70 75 73 68 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 65 29 7b 76 61 72 20 74 3d 65 2e 63 6f 6d 70 6c 65 74 69 6f 6e 7c 7c 7b 7d 3b 74 2e 74 79 70 65 3d 22 6e 6f 72 6d 61 6c 22 2c 64 65 6c 65 74 65 20 74 2e 61 72 67 2c 65 2e 63 6f 6d 70 6c 65 74 69 6f 6e 3d 74 7d 66 75 6e 63 74 69 6f 6e Data Ascii: is not an object"),r.delegate=null,y)}function A(e){var t={tryLoc:e[0]};1 in e&&(t.catchLoc=e[1]),2 in e&&(t.finallyLoc=e[2],t.afterLoc=e[3]),this.tryEntries.push(t)}function j(e){var t=e.completion\|\|{};t.type="normal",delete t.arg,e.completion=t}function
2024-09-20 16:19:34 UTC	1378	IN	Data Raw: 2c 22 47 65 6e 65 72 61 74 6f 72 22 29 2c 66 28 53 2c 61 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 29 29 2c 66 28 53 2c 22 74 6f 53 74 72 69 6e 67 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 47 65 6e 65 72 61 74 6f 72 5d 22 7d 29 29 2c 74 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 4f 62 6a 65 63 74 28 65 29 2c 72 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 72 2e 70 75 73 68 28 6e 29 3b 72 65 74 75 72 6e 20 72 2e 72 65 76 65 72 73 65 28 29 2c 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 66 6f 72 28 3b 72 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 6e 3d 72 2e 70 6f 70 28 29 3b 69 66 28 6e 20 69 6e 20 74 29 72 65 74 75 72 6e 20 65 2e 76 61 6c 75 65 Data Ascii: ,"Generator"),f(S,a,(function(){return this})),f(S,"toString",(function(){return"[object Generator]"})),t.keys=function(e){var t=Object(e),r=[];for(var n in t)r.push(n);return r.reverse(),function e(){for(;r.length;){var n=r.pop();if(n in t)return e.value
2024-09-20 16:19:34 UTC	1378	IN	Data Raw: 68 2d 31 3b 72 3e 3d 30 3b 2d 2d 72 29 7b 76 61 72 20 6f 3d 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 5b 72 5d 3b 69 66 28 6f 2e 74 72 79 4c 6f 63 3c 3d 74 68 69 73 2e 70 72 65 76 26 26 6e 2e 63 61 6c 6c 28 6f 2c 22 66 69 6e 61 6c 6c 79 4c 6f 63 22 29 26 26 74 68 69 73 2e 70 72 65 76 3c 6f 2e 66 69 6e 61 6c 6c 79 4c 6f 63 29 7b 76 61 72 20 69 3d 6f 3b 62 72 65 61 6b 7d 7d 69 26 26 28 22 62 72 65 61 6b 22 3d 3d 3d 65 7c 7c 22 63 6f 6e 74 69 6e 75 65 22 3d 3d 3d 65 29 26 26 69 2e 74 72 79 4c 6f 63 3c 3d 74 26 26 74 3c 3d 69 2e 66 69 6e 61 6c 6c 79 4c 6f 63 26 26 28 69 3d 6e 75 6c 6c 29 3b 76 61 72 20 61 3d 69 3f 69 2e 63 6f 6d 70 6c 65 74 69 6f 6e 3a 7b 7d 3b 72 65 74 75 72 6e 20 61 2e 74 79 70 65 3d 65 2c 61 2e 61 72 67 3d 74 2c 69 3f 28 74 68 69 73 2e Data Ascii: h-1;r>=0;--r){var o=this.tryEntries[r];if(o.tryLoc<=this.prev&&n.call(o,"finallyLoc")&&this.prev<o.finallyLoc){var i=o;break}}i&&("break"===e\|\|"continue"===e)&&i.tryLoc<=t&&t<=i.finallyLoc&&(i=null);var a=i?i.completion:{};return a.type=e,a.arg=t,i?(this.
2024-09-20 16:19:34 UTC	1378	IN	Data Raw: 72 69 6e 67 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 29 7b 72 65 74 75 72 6e 20 66 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 2c 66 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 74 29 7b 72 65 74 Data Ascii: ring(t)}function f(e){return f="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},f(e)}function l(t){ret
2024-09-20 16:19:34 UTC	1378	IN	Data Raw: 64 6f 6e 65 29 26 26 28 75 2e 70 75 73 68 28 6e 2e 76 61 6c 75 65 29 2c 75 2e 6c 65 6e 67 74 68 21 3d 3d 74 29 3b 73 3d 21 30 29 3b 7d 63 61 74 63 68 28 65 29 7b 63 3d 21 30 2c 6f 3d 65 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 69 66 28 21 73 26 26 6e 75 6c 6c 21 3d 72 2e 72 65 74 75 72 6e 26 26 28 61 3d 72 2e 72 65 74 75 72 6e 28 29 2c 4f 62 6a 65 63 74 28 61 29 21 3d 3d 61 29 29 72 65 74 75 72 6e 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 63 29 74 68 72 6f 77 20 6f 7d 7d 72 65 74 75 72 6e 20 75 7d 7d 28 65 2c 74 29 7c 7c 4f 28 65 2c 74 29 7c 7c 78 28 29 7d 66 75 6e 63 74 69 6f 6e 20 67 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 53 28 65 29 7d 28 65 29 7c 7c Data Ascii: done)&&(u.push(n.value),u.length!==t);s=!0);}catch(e){c=!0,o=e}finally{try{if(!s&&null!=r.return&&(a=r.return(),Object(a)!==a))return}finally{if(c)throw o}}return u}}(e,t)\|\|O(e,t)\|\|x()}function g(e){return function(e){if(Array.isArray(e))return S(e)}(e)\|\|
2024-09-20 16:19:34 UTC	1378	IN	Data Raw: 65 78 74 22 2c 65 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 72 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 6e 76 6f 6b 65 28 22 74 68 72 6f 77 22 2c 65 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 6e 76 6f 6b 65 28 22 72 65 74 75 72 6e 22 2c 65 29 7d 3b 76 61 72 20 54 2c 6b 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2c 41 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 6a 3d 28 54 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6b 2e 63 61 6c 6c 28 65 29 3b 72 65 74 75 72 6e 20 54 5b Data Ascii: ext",e)},e.prototype.throw=function(e){return this._invoke("throw",e)},e.prototype.return=function(e){return this._invoke("return",e)};var T,k=Object.prototype.toString,A=Object.getPrototypeOf,j=(T=Object.create(null),function(e){var t=k.call(e);return T[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.16	56659	188.114.97.3	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:34 UTC	998	OUT	POST /5a117d63-e078-4d65-be0b-fa7ab24a9f8f/uryfdsk2o3294djfshg.php HTTP/1.1 Host: agence-immobiliere-luberon.com Connection: keep-alive Content-Length: 26 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://agence-immobiliere-luberon.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://agence-immobiliere-luberon.com/5a117d63-e078-4d65-be0b-fa7ab24a9f8f/CIUIhu3Il%5Ej8d~hCXGBXQyj488CBOiZ1sBu85VOVjdrfR0wHePNTggGPy9a3-=Zwh5%5E7n9pEiH6Zv30Ct5r9X-BK3djTxG2Fz5OB Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qj4ss5qbim4qnl4scfog2a54j2
2024-09-20 16:19:34 UTC	26	OUT	Data Raw: 64 5f 6c 6f 67 3d 73 64 65 6c 73 6d 61 6e 25 34 30 67 6b 6c 61 77 2e 63 6f 6d Data Ascii: d_log=sdelsman%40gklaw.com
2024-09-20 16:19:35 UTC	827	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:19:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BzerOYR6mpI1oqdI8Kz6QJ4z1uC3TY%2BfaP5FA9hpq%2Fpz4rQ6Dg0eWeWasP7gpNuY2y%2BtK%2BNlcYG7UOwhH60gAz5S6s26iMmt101luWvVy4K5aWW2pn1B2Lh49nYMCUIu5eGcgN%2FW9QQWaktSrzNWeP8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c63234e6c304337-EWR
2024-09-20 16:19:35 UTC	542	IN	Data Raw: 32 35 62 0d 0a 7b 22 6c 6f 67 6f 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 61 64 63 64 6e 2e 6d 73 61 75 74 68 69 6d 61 67 65 73 2e 6e 65 74 5c 2f 64 62 64 35 61 32 64 64 2d 72 77 6f 6e 35 6e 61 77 6c 6b 6d 73 72 70 79 71 6d 36 65 39 70 66 65 6d 70 7a 33 7a 63 63 74 6e 7a 6b 38 71 75 6c 72 2d 70 32 6f 5c 2f 6c 6f 67 69 6e 74 65 6e 61 6e 74 62 72 61 6e 64 69 6e 67 5c 2f 30 5c 2f 62 61 6e 6e 65 72 6c 6f 67 6f 3f 74 73 3d 36 33 36 37 30 35 36 35 32 33 31 36 35 33 33 38 33 36 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 22 3a 66 61 6c 73 65 2c 22 73 73 6f 22 3a 66 61 6c 73 65 2c 22 61 64 66 73 22 3a 66 61 6c 73 65 2c 22 6f 6b 74 61 22 3a 66 61 6c 73 65 2c 22 72 65 64 69 72 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 75 2e 64 6f 63 75 73 69 67 6e 2e 6e 65 74 5c 2f 53 Data Ascii: 25b{"logo":"https:\/\/aadcdn.msauthimages.net\/dbd5a2dd-rwon5nawlkmsrpyqm6e9pfempz3zcctnzk8qulr-p2o\/logintenantbranding\/0\/bannerlogo?ts=636705652316533836","background":false,"sso":false,"adfs":false,"okta":false,"redir":"https:\/\/au.docusign.net\/S
2024-09-20 16:19:35 UTC	68	IN	Data Raw: 3d 5c 22 23 66 66 30 30 30 30 5c 22 3e 59 6f 75 72 20 73 65 73 73 69 6f 6e 20 68 61 73 20 65 78 70 69 72 65 64 2c 20 70 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 2e 3c 5c 2f 66 6f 6e 74 3e 22 7d 0d 0a Data Ascii: =\"#ff0000\">Your session has expired, please try again.<\/font>"}
2024-09-20 16:19:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.16	56653	13.107.246.60	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:34 UTC	664	OUT	GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://agence-immobiliere-luberon.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:35 UTC	779	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:19:35 GMT Content-Type: image/svg+xml Content-Length: 276 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 17 Jan 2020 19:28:34 GMT ETag: 0x8D79B8371B97A82 x-ms-request-id: 83166c89-301e-002e-7578-0baeec000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240920T161934Z-185ffdfffcfwr5pje2bwnggs5n0000000aq000000000qfex x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-09-20 16:19:35 UTC	276	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 95 51 3d 6f c3 20 10 fd 2b 88 ae e6 e0 08 d8 b8 b2 3d 74 ca 90 ae 1d ba 45 8a 6b 5b 22 1f aa 91 c9 cf 2f 67 3b 6e 87 2c 15 f0 80 bb 7b ef 9e a0 1a a7 8e dd cf fe 32 d6 bc 0f e1 f6 2a 65 8c 11 e2 0e ae df 9d d4 4a 29 99 2a 38 8b c3 29 f4 35 d7 86 b3 be 1d ba 3e 2c e7 69 68 e3 db f5 5e 73 c5 14 d3 26 4d de 54 61 08 be 6d 8e e3 d8 86 b1 92 cb ad ba 1d 43 cf 4e 35 7f 47 97 21 82 2d dc 04 ce 98 7d 01 39 16 7e 07 a5 c6 8c d0 09 b0 a5 a1 75 c8 33 d4 de 40 69 8c 98 71 4b cc 9c 55 e5 93 b3 af c1 fb 9a bf 18 45 83 cb bf bd 14 f1 b2 02 94 cd fd 53 fa 1e ff ef e3 ac 04 a0 41 01 aa c0 b4 0e 36 95 97 a4 47 9b 05 67 1d 11 d6 2c 66 33 67 c1 35 46 1b b1 49 9d da d8 47 40 3c 0e 98 4c 2e 3a 60 b5 4e 26 01 3f 52 03 93 0c cf 89 64 b4 b0 28 08 37 Data Ascii: Q=o +=tEk["/g;n,{2eJ)8)5>,ih^s&MTamCN5G!-}9~u3@iqKUESA6Gg,f3g5FIG@<L.:`N&?Rd(7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.16	56654	13.107.246.60	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:34 UTC	668	OUT	GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://agence-immobiliere-luberon.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:34 UTC	799	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:19:34 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 10 Nov 2020 03:41:24 GMT ETag: 0x8D8852A7FA6B761 x-ms-request-id: ff7dd01a-e01e-0026-3652-0bfcf1000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240920T161934Z-185ffdfffcf8zq9k2duty0refn00000001p000000000w50t x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-09-20 16:19:34 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.16	56655	13.107.246.60	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:34 UTC	667	OUT	GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://agence-immobiliere-luberon.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:35 UTC	779	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:19:35 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 12 Feb 2020 22:01:30 GMT ETag: 0x8D7B0071D86E386 x-ms-request-id: edb98226-a01e-0000-0778-0bc356000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240920T161934Z-185ffdfffcfr4gp898pc2462k40000000b10000000005pr0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-09-20 16:19:35 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.16	56656	18.165.122.119	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:34 UTC	613	OUT	GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1 Host: ok4static.oktacdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://agence-immobiliere-luberon.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:35 UTC	757	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 222931 Connection: close Date: Fri, 20 Sep 2024 16:19:35 GMT Server: nginx Last-Modified: Tue, 14 May 2024 21:48:24 GMT ETag: "0329c939fca7c78756b94fbcd95e322b" x-amz-meta-sha1sum: 7b5499b46660a0348cc2b22cae927dcc3fda8b20 Expires: Sat, 20 Sep 2025 16:19:35 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 a3e8473f1ae4b9f43e92c95af9370bbc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: HEL51-P2 X-Amz-Cf-Id: icCuqgOdGfpN9zLpp7T8U7grBznOZaG7qZgvyO68wCmsjZ7nhER_Vg==
2024-09-20 16:19:35 UTC	8028	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 71 74 69 70 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 2e 35 70 78 3b 6c 65 66 74 3a 2d 32 38 30 30 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 32 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 32 38 30 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 35 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2d 32 38 30 30 30 70 78 7d 2e 71 74 69 70 2d 63 6f 6e 74 65 6e 74 7b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 70 61 64 64 69 6e 67 3a 35 70 78 20 39 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 71 Data Ascii: @charset "UTF-8";.qtip{box-shadow:none;direction:ltr;display:none;font-size:10.5px;left:-28000px;line-height:12px;max-width:280px;min-width:50px;padding:0;position:absolute;top:-28000px}.qtip-content{word-wrap:break-word;padding:5px 9px;text-align:left}.q
2024-09-20 16:19:35 UTC	16384	IN	Data Raw: 73 70 61 72 65 6e 74 7d 2e 71 74 69 70 2d 62 6f 6f 74 73 74 72 61 70 20 2e 71 74 69 70 2d 69 63 6f 6e 20 2e 75 69 2d 69 63 6f 6e 7b 63 6f 6c 6f 72 3a 23 30 30 30 3b 66 69 6c 74 65 72 3a 61 6c 70 68 61 28 6f 70 61 63 69 74 79 3d 32 30 29 3b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 38 70 78 3b 6f 70 61 63 69 74 79 3a 2e 32 3b 74 65 78 74 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 30 20 23 66 66 66 3b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 71 74 69 70 2d 62 6f 6f 74 73 74 72 61 70 20 2e 71 74 69 70 2d 69 63 6f 6e 20 2e 75 69 2d 69 63 6f 6e 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 30 30 30 3b 63 75 72 Data Ascii: sparent}.qtip-bootstrap .qtip-icon .ui-icon{color:#000;filter:alpha(opacity=20);float:right;font-size:20px;font-weight:700;height:auto;line-height:18px;opacity:.2;text-shadow:0 1px 0 #fff;width:auto}.qtip-bootstrap .qtip-icon .ui-icon:hover{color:#000;cur
2024-09-20 16:19:35 UTC	356	IN	Data Raw: 23 35 65 35 65 35 65 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 33 63 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6c 61 75 6e 63 68 2d 31 36 3a 62 65 66 6f 72 65 7b 63 6f 6c 6f 72 3a 23 35 65 35 65 35 65 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 36 66 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 61 70 70 2d 31 36 2d 67 72 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6c 6f 72 3a 23 35 65 35 65 35 65 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 32 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 70 72 65 76 2d 31 36 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 32 30 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 70 72 65 76 2d 31 33 3a 62 65 66 6f 72 65 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 70 72 65 76 2d 31 36 3a 62 65 66 6f 72 65 Data Ascii: #5e5e5e;content:"\e03c"}#okta-sign-in .launch-16:before{color:#5e5e5e;content:"\e06f"}#okta-sign-in .app-16-gray:before{color:#5e5e5e;content:"\e042"}#okta-sign-in .prev-16:before{content:"\e020"}#okta-sign-in .prev-13:before,#okta-sign-in .prev-16:before
2024-09-20 16:19:35 UTC	16384	IN	Data Raw: 30 64 65 67 29 3b 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 70 72 65 76 2d 31 33 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 66 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6e 65 78 74 2d 31 36 3a 62 65 66 6f 72 65 7b 63 6f 6c 6f 72 3a 23 35 65 35 65 35 65 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 32 30 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6e 65 78 74 2d 31 33 3a 62 65 66 6f 72 65 7b 63 6f 6c 6f 72 3a 23 35 65 35 65 35 65 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 66 22 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e Data Ascii: 0deg);-o-transform:rotate(180deg);transform:rotate(180deg)}#okta-sign-in .prev-13:before{content:"\e01f"}#okta-sign-in .next-16:before{color:#5e5e5e;content:"\e020"}#okta-sign-in .next-13:before{color:#5e5e5e;content:"\e01f";font-size:16px}#okta-sign-in .
2024-09-20 16:19:35 UTC	16384	IN	Data Raw: 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 64 69 72 65 63 74 6f 72 79 2d 32 34 2d 67 72 65 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6c 6f 72 3a 23 34 63 62 66 39 63 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 32 38 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 64 69 72 65 63 74 6f 72 79 2d 32 34 2d 72 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6c 6f 72 3a 23 65 33 34 38 34 33 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 32 38 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 70 72 65 76 69 65 77 2d 32 34 3a 62 65 66 6f 72 65 7b 63 6f 6c 6f 72 3a 23 65 33 34 38 34 33 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 32 32 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 74 6f 6b 65 6e 2d 61 64 64 2d 32 34 3a 62 65 66 6f 72 65 7b 63 6f 6c 6f 72 3a 23 35 65 35 65 35 65 3b 63 6f 6e Data Ascii: #okta-sign-in .directory-24-green:before{color:#4cbf9c;content:"\e028"}#okta-sign-in .directory-24-red:before{color:#e34843;content:"\e028"}#okta-sign-in .preview-24:before{color:#e34843;content:"\e022"}#okta-sign-in .token-add-24:before{color:#5e5e5e;con
2024-09-20 16:19:35 UTC	16384	IN	Data Raw: 6e 74 28 23 66 34 66 34 66 34 20 32 30 25 2c 23 66 30 66 30 66 30 20 35 30 25 2c 23 65 38 65 38 65 38 20 35 32 25 2c 23 65 65 65 29 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 61 61 61 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 32 70 78 20 23 66 66 66 2c 30 20 31 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 35 29 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 32 70 78 20 23 66 66 66 2c 30 20 31 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 35 29 3b Data Ascii: nt(#f4f4f4 20%,#f0f0f0 50%,#e8e8e8 52%,#eee);border:1px solid #aaa;-webkit-border-radius:3px;-moz-border-radius:3px;border-radius:3px;-webkit-box-shadow:inset 0 0 2px #fff,0 1px 0 rgba(0,0,0,.05);-moz-box-shadow:inset 0 0 2px #fff,0 1px 0 rgba(0,0,0,.05);
2024-09-20 16:19:35 UTC	7435	IN	Data Raw: 33 20 2e 63 68 7a 6e 2d 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 33 32 25 21 69 6d 70 6f 72 74 61 6e 74 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 2d 77 69 64 65 20 2e 63 68 7a 6e 2d 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e 74 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 74 65 78 74 2d 73 65 6c 65 63 74 20 2e 69 6e 70 75 74 2d 66 69 78 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 3b 77 69 64 74 68 3a 38 34 25 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 68 7a 6e 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 69 Data Ascii: 3 .chzn-container{width:32%!important}#okta-sign-in .o-form-wide .chzn-container{width:100%!important}#okta-sign-in .text-select .input-fix{border-bottom-right-radius:0;border-right:none;border-top-right-radius:0;width:84%}#okta-sign-in .chzn-container-si
2024-09-20 16:19:35 UTC	16384	IN	Data Raw: 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 2d 72 65 61 64 2d 6d 6f 64 65 2e 63 75 73 74 6f 6d 2d 72 61 64 69 6f 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 38 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 2d 65 64 69 74 2d 6d 6f 64 65 20 2e 6f 2d 66 6f 72 6d 2d 63 6f 6e 74 65 6e 74 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 75 73 74 6f 6d 2d 63 68 65 63 6b 62 6f 78 20 6c 61 62 65 6c 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 75 73 74 6f 6d 2d 72 61 64 69 6f 20 6c 61 62 65 6c 7b 62 61 63 6b 67 72 6f Data Ascii: okta-sign-in .o-form-read-mode.custom-radio:first-child{margin-top:-8px}#okta-sign-in .o-form-edit-mode .o-form-content{border-bottom-left-radius:0;border-bottom-right-radius:0}#okta-sign-in .custom-checkbox label,#okta-sign-in .custom-radio label{backgro
2024-09-20 16:19:35 UTC	1514	IN	Data Raw: 64 74 68 3a 33 32 30 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 64 65 76 69 63 65 2d 77 69 64 74 68 3a 34 38 30 70 78 29 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 2e 69 6e 70 75 74 2d 66 69 78 20 69 6e 70 75 74 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 2e 74 65 78 74 61 72 65 61 2d 66 69 78 20 69 6e 70 75 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 64 65 76 69 63 65 2d 77 69 64 74 68 3a 33 32 30 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 64 65 76 69 63 65 2d 77 69 64 74 68 3a 35 36 38 70 78 29 20 61 6e Data Ascii: dth:320px) and (max-device-width:480px) and (-webkit-min-device-pixel-ratio:2){#okta-sign-in .o-form .input-fix input,#okta-sign-in .o-form .textarea-fix input{font-size:15px}}@media only screen and (min-device-width:320px) and (max-device-width:568px) an
2024-09-20 16:19:35 UTC	16384	IN	Data Raw: 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 2e 69 6e 70 75 74 2d 66 69 78 20 69 6e 70 75 74 3a 2d 6d 73 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 2e 74 65 78 74 61 72 65 61 2d 66 69 78 20 69 6e 70 75 74 3a 2d 6d 73 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 37 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 2e 69 6e 70 75 74 2d 66 69 78 20 69 6e 70 75 74 3a 2d 77 65 62 6b 69 74 2d 61 75 74 6f 66 69 6c 6c 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 2e 74 65 78 74 61 72 65 61 2d 66 69 78 20 69 6e 70 75 74 3a 2d 77 65 62 6b 69 Data Ascii: sign-in .o-form .input-fix input:-ms-input-placeholder,#okta-sign-in .o-form .textarea-fix input:-ms-input-placeholder{font-size:14px;line-height:27px}#okta-sign-in .o-form .input-fix input:-webkit-autofill,#okta-sign-in .o-form .textarea-fix input:-webki

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.16	56657	18.165.122.119	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:34 UTC	622	OUT	GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1 Host: ok4static.oktacdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://agence-immobiliere-luberon.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:35 UTC	767	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 10498 Connection: close Date: Thu, 19 Sep 2024 18:49:27 GMT Server: nginx Last-Modified: Thu, 14 Mar 2024 00:03:58 GMT ETag: "e0d37a504604ef874bad26435d62011f" x-amz-meta-sha1sum: 4301f0d2b729ae22adece657d79eccaa25f429b1 Expires: Fri, 19 Sep 2025 18:49:27 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 21305ab0d95c2d5c15ba0379048ef740.cloudfront.net (CloudFront) X-Amz-Cf-Pop: HEL51-P2 X-Amz-Cf-Id: bIplGgUzukMrUMx6NUsr04yvTVwwGO9RzYNr1cuqB9RMwuid046Bug== Age: 77408
2024-09-20 16:19:35 UTC	10498	IN	Data Raw: 61 2c 61 62 62 72 2c 61 63 72 6f 6e 79 6d 2c 61 64 64 72 65 73 73 2c 61 70 70 6c 65 74 2c 62 2c 62 69 67 2c 62 6c 6f 63 6b 71 75 6f 74 65 2c 62 6f 64 79 2c 63 61 70 74 69 6f 6e 2c 63 65 6e 74 65 72 2c 63 69 74 65 2c 63 6f 64 65 2c 64 64 2c 64 65 6c 2c 64 66 6e 2c 64 69 76 2c 64 6c 2c 64 74 2c 65 6d 2c 66 69 65 6c 64 73 65 74 2c 66 6f 72 6d 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 68 74 6d 6c 2c 69 2c 69 66 72 61 6d 65 2c 69 6d 67 2c 69 6e 73 2c 6b 62 64 2c 6c 61 62 65 6c 2c 6c 65 67 65 6e 64 2c 6c 69 2c 6f 62 6a 65 63 74 2c 6f 6c 2c 70 2c 70 72 65 2c 71 2c 73 2c 73 61 6d 70 2c 73 6d 61 6c 6c 2c 73 70 61 6e 2c 73 74 72 69 6b 65 2c 73 74 72 6f 6e 67 2c 73 75 62 2c 73 75 70 2c 74 61 62 6c 65 2c 74 62 6f 64 79 2c 74 64 2c 74 66 6f 6f 74 2c 74 Data Ascii: a,abbr,acronym,address,applet,b,big,blockquote,body,caption,center,cite,code,dd,del,dfn,div,dl,dt,em,fieldset,form,h1,h2,h3,h4,h5,h6,html,i,iframe,img,ins,kbd,label,legend,li,object,ol,p,pre,q,s,samp,small,span,strike,strong,sub,sup,table,tbody,td,tfoot,t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.16	56658	18.165.122.119	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:34 UTC	624	OUT	GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1 Host: ok4static.oktacdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://agence-immobiliere-luberon.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:35 UTC	683	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 10796 Connection: close Date: Fri, 20 Sep 2024 01:52:20 GMT Server: nginx Last-Modified: Tue, 23 Feb 2021 04:20:08 GMT ETag: "12bdacc832185d0367ecc23fd24c86ce" Expires: Sat, 20 Sep 2025 01:52:20 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 ae0cff7f17410a646b3f11a808a37446.cloudfront.net (CloudFront) X-Amz-Cf-Pop: HEL51-P2 X-Amz-Cf-Id: dUMSxQ9Fn78byPEfCqZF8RODY73_6sQQnir1VZbLQc1q4J3bRiJpcw== Age: 52035
2024-09-20 16:19:35 UTC	10796	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 a4 00 00 00 5e 08 06 00 00 00 6c 32 60 fe 00 00 29 f3 49 44 41 54 78 da ed 7d 09 9c 1c 55 9d ff a0 8b 20 77 a6 eb bd 1a 42 10 10 50 24 8a 48 76 09 c9 74 d5 ab ea 09 91 b8 a0 78 84 45 41 40 04 51 60 81 45 14 d0 15 02 88 c8 2d ec 8a 9c 22 97 28 e7 9f e5 58 60 89 11 44 2e c3 11 c8 35 5d 5d 55 7d cd 95 c9 9d 90 83 24 33 ff df af aa 26 e9 cc bc d7 67 75 4f 77 cf fb 7d 3e ef 13 98 99 ae 7e f5 8e df f7 77 ff 5a 5a 9a 84 12 7a eb be 96 d6 46 5a 24 49 92 24 49 92 a4 d1 a0 b8 4e fe b3 c7 a4 9d 09 9d ac 74 74 b2 24 65 90 c5 09 4d f9 c5 bc e9 ea ae 72 75 24 49 92 24 49 52 d5 68 81 41 76 4b 30 c5 74 19 b9 77 79 87 3a 98 31 e8 a0 a5 93 c1 44 ce 48 c3 cf d6 4c 53 07 01 98 92 69 46 7e b6 58 8f c4 e0 73 6d 72 f5 24 Data Ascii: PNGIHDR^l2`)IDATx}U wBP$HvtxEA@Q`E-"(X`D.5]]U}$3&guOw}>~wZZzFZ$I$INtt$eMru$I$IRhAvK0twy:1DHLSiF~Xsmr$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.16	56651	152.199.21.175	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:34 UTC	670	OUT	GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://agence-immobiliere-luberon.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:35 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 15499399 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Fri, 20 Sep 2024 16:19:35 GMT Etag: 0x8D79A1B9F5E121A Last-Modified: Thu, 16 Jan 2020 00:32:52 GMT Server: ECAcc (lhc/7936) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 91dbb46b-a01e-00e9-0b81-7e3c42000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-09-20 16:19:35 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.16	56661	188.114.96.3	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:34 UTC	453	OUT	GET /5a117d63-e078-4d65-be0b-fa7ab24a9f8f/admin/lifeattach HTTP/1.1 Host: agence-immobiliere-luberon.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qj4ss5qbim4qnl4scfog2a54j2
2024-09-20 16:19:37 UTC	872	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:19:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DaoBpqL9RlOyLfc4QVA%2BbX2CWf%2BnkMsNzeG8p4lT%2BsBmXky78vdb%2Bf5MidQFDddrJRvyfo7i7xDIXxkinl616kPKwx%2BADygM0Kot%2FvxPXjLY3usZadlC4lob92X62HEIyIGjRGGLv7Rtzs6lb8xKgo8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8c6323503d15195d-EWR
2024-09-20 16:19:37 UTC	497	IN	Data Raw: 37 63 33 36 0d 0a 51 5a 71 4a 30 62 4f 56 46 61 32 35 45 4d 6f 5a 46 56 46 4a 46 53 56 31 57 4d 32 4d 46 62 53 6c 6b 57 59 42 6e 51 68 78 47 61 4f 4a 57 56 31 67 6e 54 56 52 6d 63 56 56 55 4d 56 64 31 52 77 68 58 5a 56 68 6e 63 55 64 46 63 46 56 6d 62 73 4e 33 55 48 70 46 64 4f 52 6c 55 36 52 6c 4d 6e 42 54 5a 57 64 47 4f 68 68 6b 55 30 4a 32 51 43 4e 58 57 58 56 6a 62 51 4e 6c 53 73 4a 57 61 4a 74 79 51 71 68 33 62 61 64 6c 52 72 42 31 5a 76 68 7a 59 7a 49 56 4e 69 64 55 56 6e 46 32 56 52 6c 54 53 74 4a 46 62 61 31 6d 52 78 49 47 53 53 5a 57 57 7a 34 6b 65 4a 70 57 4e 76 52 32 52 78 4d 58 5a 79 6f 6c 64 69 35 57 55 30 70 56 62 47 52 58 59 58 68 58 4e 50 35 6d 54 6f 4a 6d 62 4e 52 33 59 79 59 56 65 68 64 56 57 33 77 30 56 78 6f 48 54 59 4a 46 62 6c 68 55 Data Ascii: 7c36QZqJ0bOVFa25EMoZFVFJFSV1WM2MFbSlkWYBnQhxGaOJWV1gnTVRmcVVUMVd1RwhXZVhncUdFcFVmbsN3UHpFdORlU6RlMnBTZWdGOhhkU0J2QCNXWXVjbQNlSsJWaJtyQqh3badlRrB1ZvhzYzIVNidUVnF2VRlTStJFba1mRxIGSSZWWz4keJpWNvR2RxMXZyoldi5WU0pVbGRXYXhXNP5mToJmbNR3YyYVehdVW3w0VxoHTYJFblhU
2024-09-20 16:19:37 UTC	1369	IN	Data Raw: 77 45 53 4f 78 57 57 7a 49 46 63 69 4a 44 4e 7a 4e 32 4d 57 52 6e 59 58 5a 55 65 6c 68 46 64 72 46 47 57 4f 64 6e 59 48 5a 55 4e 50 31 6d 53 7a 4a 6d 4d 4f 4a 6e 5a 58 5a 55 4d 61 64 45 62 32 78 30 52 4f 68 6d 59 75 70 46 61 6a 6c 48 65 33 4e 57 62 35 34 32 59 74 5a 6c 65 6a 6c 48 65 79 45 32 56 53 78 6d 59 7a 51 33 61 68 68 6c 54 33 4a 32 52 47 56 7a 54 74 78 57 64 69 64 45 62 31 70 31 55 78 6b 6d 59 48 6c 6a 61 68 70 48 64 79 6f 46 57 4b 42 54 59 58 35 45 61 69 4e 55 4d 6f 4a 32 52 73 35 6d 59 71 42 58 61 5a 68 6c 54 73 4a 32 52 73 56 6e 57 59 46 44 61 6b 64 6c 55 77 4a 6d 65 77 56 6e 59 7a 45 31 62 58 4a 6a 54 32 4a 6d 62 53 6c 6e 59 79 67 6e 65 59 4e 46 62 33 6f 31 52 73 70 33 59 48 68 48 61 6c 52 46 63 31 4a 6d 4d 31 77 32 54 79 67 47 62 68 64 46 5a Data Ascii: wESOxWWzIFciJDNzN2MWRnYXZUelhFdrFGWOdnYHZUNP1mSzJmMOJnZXZUMadEb2x0ROhmYupFajlHe3NWb542YtZlejlHeyE2VSxmYzQ3ahhlT3J2RGVzTtxWdidEb1p1UxkmYHljahpHdyoFWKBTYX5EaiNUMoJ2Rs5mYqBXaZhlTsJ2RsVnWYFDakdlUwJmewVnYzE1bXJjT2JmbSlnYygneYNFb3o1Rsp3YHhHalRFc1JmM1w2TygGbhdFZ
2024-09-20 16:19:37 UTC	1369	IN	Data Raw: 6b 4e 68 64 56 4e 76 70 46 57 4b 42 48 5a 45 52 58 62 69 4a 54 4e 77 38 55 62 73 56 58 59 48 5a 56 65 68 68 56 55 33 49 32 56 47 6c 6e 57 79 77 57 64 50 70 6d 51 35 6b 6c 62 57 42 44 5a 48 6c 54 64 6c 4a 54 4f 79 6f 46 57 4b 31 6d 59 48 6c 7a 4d 50 35 6d 57 77 4e 6d 4d 73 6c 6d 59 48 5a 56 4f 5a 35 6d 56 77 51 32 52 35 55 48 54 49 35 45 62 69 64 6b 56 71 52 47 53 30 42 6a 57 59 68 47 4d 4d 68 6c 55 35 6c 31 56 31 6f 6e 57 74 6c 54 65 69 52 46 63 31 4a 6d 4d 31 77 6d 5a 58 70 55 4d 6b 68 6b 55 32 4a 57 61 34 39 47 5a 48 46 7a 63 4a 64 45 62 31 4e 47 53 57 42 7a 56 7a 49 56 4e 6a 64 55 56 35 6b 6c 62 57 42 44 5a 48 6c 54 64 59 4e 46 65 77 4a 6d 62 43 46 44 5a 47 52 48 4d 6c 68 6c 51 73 42 46 57 4b 78 32 59 79 59 46 4d 59 4e 46 65 77 4a 6d 62 43 46 44 5a 47 Data Ascii: kNhdVNvpFWKBHZERXbiJTNw8UbsVXYHZVehhVU3I2VGlnWywWdPpmQ5klbWBDZHlTdlJTOyoFWK1mYHlzMP5mWwNmMslmYHZVOZ5mVwQ2R5UHTI5EbidkVqRGS0BjWYhGMMhlU5l1V1onWtlTeiRFc1JmM1wmZXpUMkhkU2JWa49GZHFzcJdEb1NGSWBzVzIVNjdUV5klbWBDZHlTdYNFewJmbCFDZGRHMlhlQsBFWKx2YyYFMYNFewJmbCFDZG
2024-09-20 16:19:37 UTC	1369	IN	Data Raw: 56 57 4e 6e 57 49 35 45 62 6b 68 45 64 70 4a 32 4d 4b 74 6d 57 59 6c 6b 4e 4e 68 6c 51 30 6b 45 53 4f 5a 6e 59 48 78 32 61 4a 68 6b 54 77 4a 47 53 61 78 32 59 71 52 48 64 5a 68 6c 53 75 46 32 56 30 59 54 54 44 46 55 65 6a 68 30 5a 33 4d 32 52 47 74 6d 57 48 78 57 64 61 70 33 62 31 31 6b 65 57 78 6d 59 54 46 55 64 4f 70 57 53 78 6f 31 56 77 63 47 54 71 4e 57 4d 61 64 56 4d 35 49 32 52 57 35 6d 57 58 56 7a 61 6c 4a 6a 53 32 4e 57 62 53 78 32 59 71 39 32 64 50 4e 6a 51 6f 70 31 52 53 42 6e 59 74 4e 6d 4e 4e 68 55 4d 77 6f 46 57 6f 42 54 57 59 70 45 62 5a 68 46 64 32 52 57 62 57 6c 6e 57 74 68 6e 64 6b 70 48 63 6f 52 47 57 53 5a 6e 5a 58 6c 7a 64 6b 64 45 5a 35 4a 32 4d 57 64 58 5a 79 6f 6c 64 69 35 57 55 30 52 6d 4d 57 42 6e 57 79 67 47 4d 50 70 32 59 33 31 Data Ascii: VWNnWI5EbkhEdpJ2MKtmWYlkNNhlQ0kESOZnYHx2aJhkTwJGSax2YqRHdZhlSuF2V0YTTDFUejh0Z3M2RGtmWHxWdap3b11keWxmYTFUdOpWSxo1VwcGTqNWMadVM5I2RW5mWXVzalJjS2NWbSx2Yq92dPNjQop1RSBnYtNmNNhUMwoFWoBTWYpEbZhFd2RWbWlnWthndkpHcoRGWSZnZXlzdkdEZ5J2MWdXZyoldi5WU0RmMWBnWygGMPp2Y31
2024-09-20 16:19:37 UTC	1369	IN	Data Raw: 68 64 6c 55 72 70 31 56 30 63 54 57 79 67 48 63 6a 52 45 63 35 70 31 56 4f 42 7a 53 45 46 30 63 4e 4e 30 64 33 78 45 52 42 42 33 54 79 6f 6b 64 6a 31 6d 55 73 4e 6d 61 76 64 6e 5a 54 56 6a 65 6a 6c 57 4d 32 4a 57 62 34 56 44 54 58 70 6c 64 5a 4e 6a 56 36 6c 31 56 4b 4e 6e 57 55 42 48 61 5a 4e 6a 55 77 52 57 62 56 4e 48 54 75 35 55 65 4d 64 56 4f 31 4a 47 53 72 52 6e 57 74 6c 6a 61 6b 68 6c 54 6f 6c 56 62 34 78 32 54 74 70 6c 64 5a 4e 6a 56 36 56 32 4d 43 5a 33 59 79 77 47 4d 68 64 56 4f 31 39 6b 62 4f 42 54 57 59 4a 46 63 5a 70 48 64 7a 45 32 56 53 42 54 59 45 42 48 61 6b 68 6c 55 32 39 6b 4d 6f 78 57 59 58 52 32 62 6b 52 45 63 6f 52 47 57 53 5a 33 54 79 45 44 61 6a 31 47 5a 77 4a 6d 61 76 64 33 54 79 6b 6a 4d 61 68 6c 53 74 4a 32 52 35 4d 7a 54 75 70 46 Data Ascii: hdlUrp1V0cTWygHcjREc5p1VOBzSEF0cNN0d3xERBB3Tyokdj1mUsNmavdnZTVjejlWM2JWb4VDTXpldZNjV6l1VKNnWUBHaZNjUwRWbVNHTu5UeMdVO1JGSrRnWtljakhlTolVb4x2TtpldZNjV6V2MCZ3YywGMhdVO19kbOBTWYJFcZpHdzE2VSBTYEBHakhlU29kMoxWYXR2bkREcoRGWSZ3TyEDaj1GZwJmavd3TykjMahlStJ2R5MzTupF
2024-09-20 16:19:37 UTC	1369	IN	Data Raw: 52 48 5a 48 6c 7a 64 50 6c 47 4e 35 31 30 4d 43 52 7a 54 79 34 6b 64 69 64 55 4f 35 39 55 61 4e 64 58 54 45 46 30 4e 5a 31 6d 52 71 46 6d 4d 6b 6c 6e 59 7a 59 56 64 61 4e 55 4d 71 4a 6d 4d 34 5a 33 59 71 39 6d 61 61 31 6d 57 74 5a 32 56 47 64 54 57 79 6b 7a 63 69 4e 54 53 32 6b 6b 4d 4f 70 57 57 36 52 48 4d 61 68 46 61 77 77 30 56 53 78 57 57 79 6b 54 65 5a 68 6c 55 77 4a 6d 4d 30 59 6a 59 74 6c 54 64 61 68 56 4d 6f 39 55 62 34 42 6e 59 74 52 33 4e 5a 4a 54 4f 7a 4a 32 4d 4a 5a 54 53 36 46 30 64 4f 70 47 5a 70 39 45 53 78 67 32 54 75 70 46 63 6a 4a 44 62 77 6f 31 56 53 64 54 57 79 6b 7a 63 69 4e 54 53 32 6b 6b 65 42 64 6e 54 71 52 57 61 50 68 55 4d 6f 39 55 62 6f 5a 48 5a 74 5a 56 65 6c 4a 6a 54 32 4a 32 52 35 6b 33 54 70 31 6b 4d 4f 70 6d 57 35 6b 46 56 Data Ascii: RHZHlzdPlGN510MCRzTy4kdidUO59UaNdXTEF0NZ1mRqFmMklnYzYVdaNUMqJmM4Z3Yq9maa1mWtZ2VGdTWykzciNTS2kkMOpWW6RHMahFaww0VSxWWykTeZhlUwJmM0YjYtlTdahVMo9Ub4BnYtR3NZJTOzJ2MJZTS6F0dOpGZp9ESxg2TupFcjJDbwo1VSdTWykzciNTS2kkeBdnTqRWaPhUMo9UboZHZtZVelJjT2J2R5k3Tp1kMOpmW5kFV
2024-09-20 16:19:37 UTC	1369	IN	Data Raw: 6a 56 75 4a 6d 4d 56 64 6d 56 56 74 32 5a 55 64 45 62 75 46 47 53 52 6c 32 53 55 52 58 62 69 4a 54 4e 77 77 45 57 6b 78 57 59 58 52 32 62 6b 52 30 62 35 31 45 52 42 64 6a 57 74 6c 54 64 6b 4e 55 4d 36 52 47 53 73 4e 6e 57 55 42 58 64 69 4e 6a 53 30 6c 31 56 34 6c 54 55 48 70 6c 64 69 35 57 55 30 70 56 62 47 70 6d 57 59 52 58 62 69 4a 54 4e 77 77 30 56 61 68 6d 59 58 78 32 63 6c 52 31 62 75 56 6c 4d 57 35 6d 59 79 55 31 5a 57 56 31 61 6e 5a 6c 4d 57 6c 6d 57 74 6c 54 64 6b 4e 30 59 33 4d 32 4d 4b 70 32 54 74 68 6e 64 5a 4a 6a 52 7a 74 30 51 4b 52 6c 57 58 52 6d 64 61 4e 6c 51 57 4e 31 55 4a 42 33 54 79 6f 6c 64 69 35 57 55 30 52 6d 4d 57 42 6e 57 79 67 47 4d 50 70 57 55 33 31 45 52 30 31 6d 59 79 55 44 4d 4d 68 6c 54 77 55 32 56 34 78 32 54 74 56 6a 64 6a Data Ascii: jVuJmMVdmVVt2ZUdEbuFGSRl2SURXbiJTNwwEWkxWYXR2bkR0b51ERBdjWtlTdkNUM6RGSsNnWUBXdiNjS0l1V4lTUHpldi5WU0pVbGpmWYRXbiJTNww0VahmYXx2clR1buVlMW5mYyU1ZWV1anZlMWlmWtlTdkN0Y3M2MKp2TthndZJjRzt0QKRlWXRmdaNlQWN1UJB3Tyoldi5WU0RmMWBnWygGMPpWU31ER01mYyUDMMhlTwU2V4x2TtVjdj
2024-09-20 16:19:37 UTC	1369	IN	Data Raw: 59 48 78 57 64 61 68 56 54 30 31 6b 62 30 52 58 57 59 64 47 64 68 64 6b 56 77 70 6c 4d 6f 42 7a 54 71 56 6b 4d 4f 4e 45 4e 78 34 45 53 43 52 7a 54 79 45 44 61 6c 4e 55 4d 76 70 31 56 73 35 57 59 49 46 6c 4e 4e 52 56 51 31 31 6b 61 6e 70 33 54 55 5a 56 65 61 64 56 4d 35 77 6b 62 53 78 57 5a 49 46 46 64 68 64 6b 56 6f 70 31 52 34 42 6e 59 74 56 56 64 6b 64 6b 56 30 51 32 51 78 51 58 57 59 68 32 63 68 64 56 4e 73 4e 57 65 77 6f 58 5a 79 45 44 61 6c 4e 55 4d 76 70 31 56 73 35 57 59 49 46 6c 4e 4e 70 57 55 77 77 6b 61 56 42 7a 59 49 64 32 4e 69 64 6c 52 30 77 30 56 6f 78 57 59 58 52 32 62 6b 52 30 62 34 35 30 55 30 6b 33 54 45 31 55 4e 4f 68 6c 53 73 4a 47 57 77 55 48 5a 48 5a 46 4e 6b 4e 55 4d 76 70 31 56 47 74 6d 59 48 78 57 64 61 4e 56 4e 77 6f 46 57 6f 42 Data Ascii: YHxWdahVT01kb0RXWYdGdhdkVwplMoBzTqVkMONENx4ESCRzTyEDalNUMvp1Vs5WYIFlNNRVQ11kanp3TUZVeadVM5wkbSxWZIFFdhdkVop1R4BnYtVVdkdkV0Q2QxQXWYh2chdVNsNWewoXZyEDalNUMvp1Vs5WYIFlNNpWUwwkaVBzYId2NidlR0w0VoxWYXR2bkR0b450U0k3TE1UNOhlSsJGWwUHZHZFNkNUMvp1VGtmYHxWdaNVNwoFWoB
2024-09-20 16:19:37 UTC	1369	IN	Data Raw: 77 56 57 62 56 5a 54 54 36 4a 31 64 6c 52 45 64 7a 46 32 56 31 77 47 54 58 68 47 62 68 64 46 5a 76 52 47 52 76 42 54 54 49 4a 45 4e 50 4a 6a 57 32 4a 6d 62 52 52 48 5a 79 59 46 63 61 4a 44 61 77 38 6b 61 4a 64 58 54 45 52 58 62 69 4a 54 4e 77 77 45 57 4f 42 58 5a 74 56 6c 4e 4e 6c 47 4e 34 31 6b 61 57 6c 6e 57 58 42 7a 4e 69 64 45 62 31 70 31 55 78 38 6d 57 58 78 6d 62 68 68 55 55 32 30 55 61 30 45 7a 59 74 5a 46 64 50 4e 6a 51 6f 70 31 52 53 42 6e 59 74 4e 47 64 5a 31 57 4f 77 51 32 52 35 51 33 54 71 31 55 64 4e 52 46 61 33 56 47 52 30 64 58 57 58 4a 31 61 68 64 56 4e 75 78 45 57 53 5a 33 59 45 39 6d 65 4d 70 57 52 30 4d 47 53 6f 6c 44 54 75 4a 46 62 6c 68 55 55 30 4e 32 4d 57 6c 57 59 48 5a 46 61 61 64 6b 56 35 78 6b 62 53 78 57 5a 49 46 46 64 69 64 6c Data Ascii: wVWbVZTT6J1dlREdzF2V1wGTXhGbhdFZvRGRvBTTIJENPJjW2JmbRRHZyYFcaJDaw8kaJdXTERXbiJTNwwEWOBXZtVlNNlGN41kaWlnWXBzNidEb1p1Ux8mWXxmbhhUU20Ua0EzYtZFdPNjQop1RSBnYtNGdZ1WOwQ2R5Q3Tq1UdNRFa3VGR0dXWXJ1ahdVNuxEWSZ3YE9meMpWR0MGSolDTuJFblhUU0N2MWlWYHZFaadkV5xkbSxWZIFFdidl
2024-09-20 16:19:37 UTC	1369	IN	Data Raw: 78 6d 62 68 68 55 55 32 30 6b 65 4a 56 6e 54 36 35 30 64 6c 52 45 64 30 6c 46 57 6e 52 58 59 48 5a 46 63 61 4a 44 61 77 38 6b 61 4a 56 58 54 45 46 56 4d 4f 68 6b 53 73 4a 47 57 77 55 48 5a 48 5a 46 4e 6b 4e 55 4d 77 45 47 57 53 4e 6e 57 54 56 44 4d 61 68 46 61 77 77 30 56 78 67 57 5a 48 68 48 63 69 31 6d 56 36 78 45 56 4a 4e 58 59 45 31 55 64 6b 64 6b 56 30 51 32 51 78 51 58 57 59 68 32 63 68 64 56 4e 73 4e 57 65 77 6b 58 5a 79 45 44 61 6c 4e 55 4d 76 70 31 56 73 35 57 59 49 46 6c 4e 4f 70 57 51 31 35 6b 65 4f 64 58 5a 45 52 48 64 5a 68 31 5a 30 46 32 52 57 42 6e 57 79 67 47 4d 50 70 57 54 31 35 6b 65 72 46 6a 54 49 70 45 62 69 68 46 4d 31 52 32 52 57 52 44 5a 44 46 44 4d 68 68 6c 55 7a 70 31 55 31 41 6a 57 59 68 47 4d 4d 64 56 4d 6f 56 32 52 34 42 6e 59 Data Ascii: xmbhhUU20keJVnT650dlREd0lFWnRXYHZFcaJDaw8kaJVXTEFVMOhkSsJGWwUHZHZFNkNUMwEGWSNnWTVDMahFaww0VxgWZHhHci1mV6xEVJNXYE1UdkdkV0Q2QxQXWYh2chdVNsNWewkXZyEDalNUMvp1Vs5WYIFlNOpWQ15keOdXZERHdZh1Z0F2RWBnWygGMPpWT15kerFjTIpEbihFM1R2RWRDZDFDMhhlUzp1U1AjWYhGMMdVMoV2R4BnY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.16	56662	13.107.246.60	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:35 UTC	418	OUT	GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:36 UTC	799	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:19:36 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 10 Nov 2020 03:41:24 GMT ETag: 0x8D8852A7FA6B761 x-ms-request-id: ff7dd01a-e01e-0026-3652-0bfcf1000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240920T161935Z-185ffdfffcfw4hptb63w10480n0000000b000000000079a3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-09-20 16:19:36 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.16	56664	13.107.246.60	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:35 UTC	417	OUT	GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:35 UTC	799	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:19:35 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 12 Feb 2020 22:01:30 GMT ETag: 0x8D7B0071D86E386 x-ms-request-id: edb98226-a01e-0000-0778-0bc356000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240920T161935Z-185ffdfffcf8zq9k2duty0refn00000001u0000000009pa5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-09-20 16:19:35 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.16	56665	13.107.246.60	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:35 UTC	414	OUT	GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:35 UTC	799	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:19:35 GMT Content-Type: image/svg+xml Content-Length: 276 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 17 Jan 2020 19:28:34 GMT ETag: 0x8D79B8371B97A82 x-ms-request-id: 83166c89-301e-002e-7578-0baeec000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240920T161935Z-185ffdfffcflzdkd2ky4f02pk80000000ay000000000aya7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-09-20 16:19:35 UTC	276	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 95 51 3d 6f c3 20 10 fd 2b 88 ae e6 e0 08 d8 b8 b2 3d 74 ca 90 ae 1d ba 45 8a 6b 5b 22 1f aa 91 c9 cf 2f 67 3b 6e 87 2c 15 f0 80 bb 7b ef 9e a0 1a a7 8e dd cf fe 32 d6 bc 0f e1 f6 2a 65 8c 11 e2 0e ae df 9d d4 4a 29 99 2a 38 8b c3 29 f4 35 d7 86 b3 be 1d ba 3e 2c e7 69 68 e3 db f5 5e 73 c5 14 d3 26 4d de 54 61 08 be 6d 8e e3 d8 86 b1 92 cb ad ba 1d 43 cf 4e 35 7f 47 97 21 82 2d dc 04 ce 98 7d 01 39 16 7e 07 a5 c6 8c d0 09 b0 a5 a1 75 c8 33 d4 de 40 69 8c 98 71 4b cc 9c 55 e5 93 b3 af c1 fb 9a bf 18 45 83 cb bf bd 14 f1 b2 02 94 cd fd 53 fa 1e ff ef e3 ac 04 a0 41 01 aa c0 b4 0e 36 95 97 a4 47 9b 05 67 1d 11 d6 2c 66 33 67 c1 35 46 1b b1 49 9d da d8 47 40 3c 0e 98 4c 2e 3a 60 b5 4e 26 01 3f 52 03 93 0c cf 89 64 b4 b0 28 08 37 Data Ascii: Q=o +=tEk["/g;n,{2eJ)8)5>,ih^s&MTamCN5G!-}9~u3@iqKUESA6Gg,f3g5FIG@<L.:`N&?Rd(7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.16	56667	13.33.187.120	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:36 UTC	374	OUT	GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1 Host: ok4static.oktacdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:36 UTC	685	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 10796 Connection: close Date: Mon, 02 Sep 2024 08:29:47 GMT Server: nginx Last-Modified: Tue, 23 Feb 2021 04:20:08 GMT ETag: "12bdacc832185d0367ecc23fd24c86ce" Expires: Tue, 02 Sep 2025 08:29:47 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 d2c570942164f5ee69dab53f43b0f1d2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: SPC8Yjq4X4dqPaWt0Evsjl-6zOi3mOIjFoOoP8rQZ4N7Lo_rpV87uQ== Age: 1583389
2024-09-20 16:19:36 UTC	10796	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 a4 00 00 00 5e 08 06 00 00 00 6c 32 60 fe 00 00 29 f3 49 44 41 54 78 da ed 7d 09 9c 1c 55 9d ff a0 8b 20 77 a6 eb bd 1a 42 10 10 50 24 8a 48 76 09 c9 74 d5 ab ea 09 91 b8 a0 78 84 45 41 40 04 51 60 81 45 14 d0 15 02 88 c8 2d ec 8a 9c 22 97 28 e7 9f e5 58 60 89 11 44 2e c3 11 c8 35 5d 5d 55 7d cd 95 c9 9d 90 83 24 33 ff df af aa 26 e9 cc bc d7 67 75 4f 77 cf fb 7d 3e ef 13 98 99 ae 7e f5 8e df f7 77 ff 5a 5a 9a 84 12 7a eb be 96 d6 46 5a 24 49 92 24 49 92 a4 d1 a0 b8 4e fe b3 c7 a4 9d 09 9d ac 74 74 b2 24 65 90 c5 09 4d f9 c5 bc e9 ea ae 72 75 24 49 92 24 49 52 d5 68 81 41 76 4b 30 c5 74 19 b9 77 79 87 3a 98 31 e8 a0 a5 93 c1 44 ce 48 c3 cf d6 4c 53 07 01 98 92 69 46 7e b6 58 8f c4 e0 73 6d 72 f5 24 Data Ascii: PNGIHDR^l2`)IDATx}U wBP$HvtxEA@Q`E-"(X`D.5]]U}$3&guOw}>~wZZzFZ$I$INtt$eMru$I$IRhAvK0twy:1DHLSiF~Xsmr$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.16	56666	152.199.21.175	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:36 UTC	420	OUT	GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:36 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 15499400 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Fri, 20 Sep 2024 16:19:36 GMT Etag: 0x8D79A1B9F5E121A Last-Modified: Thu, 16 Jan 2020 00:32:52 GMT Server: ECAcc (lhc/7936) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 91dbb46b-a01e-00e9-0b81-7e3c42000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-09-20 16:19:36 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.16	56669	152.199.21.175	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:36 UTC	704	OUT	GET /dbd5a2dd-rwon5nawlkmsrpyqm6e9pfempz3zcctnzk8qulr-p2o/logintenantbranding/0/bannerlogo?ts=636705652316533836 HTTP/1.1 Host: aadcdn.msauthimages.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://agence-immobiliere-luberon.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:37 UTC	652	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=86400 Content-MD5: fP7WnDisPQ8YccNiKre1ww== Content-Type: image/* Date: Fri, 20 Sep 2024 16:19:37 GMT Etag: 0x8D6086AD91762EA Last-Modified: Wed, 22 Aug 2018 20:07:12 GMT Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: aab88805-901e-0031-2178-0ba2f1000000 x-ms-version: 2009-09-19 Content-Length: 2541 Connection: close
2024-09-20 16:19:37 UTC	2541	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 20 00 00 00 1c 08 06 00 00 00 c1 4c 62 e2 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 09 8f 49 44 41 54 78 da ec 5d 4d 72 e2 38 14 56 52 ec 87 1b b4 73 00 aa 9d 13 c4 ac 7a 09 a9 ea 3d 86 dd ac 02 27 00 4e 00 ac 7a 17 9b 7d 57 05 96 bd c2 39 41 3c 95 03 b4 e7 06 9e 13 f4 58 48 0e b6 fc 64 3d 19 1b 34 d3 7e 55 0e 55 60 3f cb 4f 9f be f7 23 c9 b9 f9 f5 eb 17 69 a5 95 56 5a b9 86 dc b6 26 68 a5 95 56 5a 02 6a a5 95 56 7e 3b b9 91 fe d2 9b 38 c9 df 51 72 d0 4f 4b f8 35 4e 8e 20 39 f6 e4 fd d9 d7 be 6b 6f d2 4d fe ba c9 31 e0 fa 45 09 b9 fe 4d a2 3f 52 e8 72 81 f6 c9 24 3c 1e 2a 9d 4c af c5 db 58 4d de 9f 17 82 be 85 a6 86 20 d1 11 Data Ascii: PNGIHDR LbtEXtSoftwareAdobe ImageReadyqe<IDATx]Mr8VRsz='Nz}W9A<XHd=4~UU`?O#iVZ&hVZjV~;8QrOK5N 9koM1EM?Rr$<*LXM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.16	56670	188.114.96.3	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:36 UTC	460	OUT	GET /5a117d63-e078-4d65-be0b-fa7ab24a9f8f/uryfdsk2o3294djfshg.php HTTP/1.1 Host: agence-immobiliere-luberon.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qj4ss5qbim4qnl4scfog2a54j2
2024-09-20 16:19:37 UTC	862	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:19:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S1N9Kdkipiokc0GuGjEm7xVxu4MNg9uFInEZfLp0XWERFCYovMP6Ziyebggu2Yatr%2F3EwPRk3y4F9LlVk77BMSWcHTJzDlQSmtISTei4TxYaHaSHfxQGBqzurbLHtykLi8LCCyDt68rQLM1Fy1yfuHA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8c63235b2f2e8c1b-EWR
2024-09-20 16:19:37 UTC	439	IN	Data Raw: 31 62 30 0d 0a 7b 22 6c 69 76 65 22 3a 66 61 6c 73 65 2c 22 69 73 5f 62 75 73 69 6e 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 64 75 22 3a 66 61 6c 73 65 2c 22 72 6f 6c 65 22 3a 66 61 6c 73 65 2c 22 61 70 70 22 3a 66 61 6c 73 65 2c 22 32 66 61 22 3a 66 61 6c 73 65 2c 22 73 6d 73 22 3a 66 61 6c 73 65 2c 22 61 70 70 63 6f 64 65 22 3a 66 61 6c 73 65 2c 22 63 61 6c 6c 22 3a 66 61 6c 73 65 2c 22 73 73 6f 22 3a 66 61 6c 73 65 2c 22 6f 6b 74 61 22 3a 66 61 6c 73 65 2c 22 61 64 66 73 22 3a 66 61 6c 73 65 2c 22 6e 6f 72 6d 61 6c 22 3a 66 61 6c 73 65 2c 22 72 65 73 75 6c 74 22 3a 22 7b 26 71 75 6f 74 3b 65 72 72 6f 72 26 71 75 6f 74 3b 3a 7b 26 71 75 6f 74 3b 63 6f 64 65 26 71 75 6f 74 3b 3a 36 30 30 32 2c 26 71 75 6f 74 3b 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 26 71 Data Ascii: 1b0{"live":false,"is_business":false,"edu":false,"role":false,"app":false,"2fa":false,"sms":false,"appcode":false,"call":false,"sso":false,"okta":false,"adfs":false,"normal":false,"result":"{"error":{"code":6002,"correlationId&q
2024-09-20 16:19:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.16	56671	152.199.21.175	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:38 UTC	454	OUT	GET /dbd5a2dd-rwon5nawlkmsrpyqm6e9pfempz3zcctnzk8qulr-p2o/logintenantbranding/0/bannerlogo?ts=636705652316533836 HTTP/1.1 Host: aadcdn.msauthimages.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:38 UTC	646	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 1 Cache-Control: public, max-age=86400 Content-MD5: fP7WnDisPQ8YccNiKre1ww== Content-Type: image/* Date: Fri, 20 Sep 2024 16:19:38 GMT Etag: 0x8D6086AD91762EA Last-Modified: Wed, 22 Aug 2018 20:07:12 GMT Server: ECAcc (lhc/7914) X-Cache: HIT X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: aab88805-901e-0031-2178-0ba2f1000000 x-ms-version: 2009-09-19 Content-Length: 2541 Connection: close
2024-09-20 16:19:38 UTC	2541	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 20 00 00 00 1c 08 06 00 00 00 c1 4c 62 e2 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 09 8f 49 44 41 54 78 da ec 5d 4d 72 e2 38 14 56 52 ec 87 1b b4 73 00 aa 9d 13 c4 ac 7a 09 a9 ea 3d 86 dd ac 02 27 00 4e 00 ac 7a 17 9b 7d 57 05 96 bd c2 39 41 3c 95 03 b4 e7 06 9e 13 f4 58 48 0e b6 fc 64 3d 19 1b 34 d3 7e 55 0e 55 60 3f cb 4f 9f be f7 23 c9 b9 f9 f5 eb 17 69 a5 95 56 5a b9 86 dc b6 26 68 a5 95 56 5a 02 6a a5 95 56 7e 3b b9 91 fe d2 9b 38 c9 df 51 72 d0 4f 4b f8 35 4e 8e 20 39 f6 e4 fd d9 d7 be 6b 6f d2 4d fe ba c9 31 e0 fa 45 09 b9 fe 4d a2 3f 52 e8 72 81 f6 c9 24 3c 1e 2a 9d 4c af c5 db 58 4d de 9f 17 82 be 85 a6 86 20 d1 11 Data Ascii: PNGIHDR LbtEXtSoftwareAdobe ImageReadyqe<IDATx]Mr8VRsz='Nz}W9A<XHd=4~UU`?O#iVZ&hVZjV~;8QrOK5N 9koM1EM?Rr$<*LXM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.16	56673	142.250.181.228	443	3016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 16:19:59 UTC	609	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 16:19:59 UTC	1266	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 16:19:59 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-CqyM_ibN7m_3ul1vi-8PHA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-20 16:19:59 UTC	124	IN	Data Raw: 34 32 62 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 68 61 6d 73 74 65 72 20 6b 6f 6d 62 61 74 20 64 61 69 6c 79 20 63 6f 6d 62 6f 20 63 61 72 64 73 22 2c 22 66 62 69 20 72 61 69 64 73 20 72 61 68 61 6c 20 6c 65 74 74 65 72 6d 61 6e 20 6c 61 6e 69 67 61 6e 20 72 61 63 69 6e 67 22 2c 22 73 65 76 65 72 65 20 77 65 61 74 68 65 72 20 6d 69 6e 6e 65 73 6f 74 61 20 74 68 75 6e 64 Data Ascii: 42b)]}'["",["hamster kombat daily combo cards","fbi raids rahal letterman lanigan racing","severe weather minnesota thund
2024-09-20 16:19:59 UTC	950	IN	Data Raw: 65 72 73 74 6f 72 6d 73 22 2c 22 70 6f 72 74 20 77 6f 72 6b 65 72 73 20 73 74 72 69 6b 65 22 2c 22 70 73 35 20 63 6f 6e 73 6f 6c 65 20 33 30 74 68 20 61 6e 6e 69 76 65 72 73 61 72 79 20 65 64 69 74 69 6f 6e 22 2c 22 70 61 74 72 69 6f 74 73 20 76 73 20 6a 65 74 73 20 74 68 75 72 73 64 61 79 20 6e 69 67 68 74 20 66 6f 6f 74 62 61 6c 6c 22 2c 22 66 75 74 75 72 65 20 6d 69 78 74 61 70 65 20 70 6c 75 74 6f 20 61 6c 62 75 6d 22 2c 22 63 68 69 6e 65 73 65 20 7a 6f 6f 20 70 61 69 6e 74 65 64 20 64 6f 67 73 20 6c 69 6b 65 20 70 61 6e 64 61 73 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c Data Ascii: erstorms","port workers strike","ps5 console 30th anniversary edition","patriots vs jets thursday night football","future mixtape pluto album","chinese zoo painted dogs like pandas"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":fal
2024-09-20 16:19:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 6212, Parent PID: 6096

General

Target ID:	10
Start time:	12:18:46
Start date:	20/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://us-east-2.protection.sophos.com/?d=cudasvc.com&u=aHR0cHM6Ly9saW5rcHJvdGVjdC5jdWRhc3ZjLmNvbS91cmw_YT1odHRwcyUzYSUyZiUyZjBvQlQubWVudXMtdW5saW1pdGVkLmNvbSUyZnU4dzV2JmM9RSwxLDNMZjFnY0lEMmR3OUkyLXVKRDBDeGxiYnR1bkk1dkJsWGVCYXNuLTFGZWRjazY1MEJKU211cW9fR2FoVC1ucldtTHVOUzhvbW5ZdUZJZXIwM0VfWjJnQmFjTVpMaFJKZThFSmNxMVphT3NocyZ0eXBvPTE=&i=NWZhMzIyNDYxN2RkOWQwZTA5ZGFiYTQ4&t=bW5wRlRmNkZQMDh0c012RnRzQnR6eVRLWXRVSFFORXhvTG1DZ2FvVWNvaz0#/CMjrbGm/c2RlbHNtYW5AZ2tsYXcuY29t
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3016, Parent PID: 6212

General

Target ID:	11
Start time:	12:18:47
Start date:	20/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2184 --field-trial-handle=1952,i,1790333140127612858,1956491159581477358,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly