Edit tour

Windows Analysis Report
http://7xv6.mjt.lu/lnk/AXMAAFFvlI0AAAAAAAAAA8Ye8moAAABKhgwAAAAAAAq7pgBnByOSeYt8cGpTTPaPBTAKJeV-UQAKnpI/1/EWmySlSHcyP6g54g0SDc-g/aHR0cHM6Ly9zbmlwLmx5L2V6NGxydw

Overview

General Information

Sample URL:	http://7xv6.mjt.lu/lnk/AXMAAFFvlI0AAAAAAAAAA8Ye8moAAABKhgwAAAAAAAq7pgBnByOSeYt8cGpTTPaPBTAKJeV-UQAKnpI/1/EWmySlSHcyP6g54g0SDc-g/aHR0cHM6Ly9zbmlwLmx5L2V6NGxydw
Analysis ID:	1530448
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Detected suspicious crossdomain redirect

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6292 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6848 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=1968,i,15726997978114663938,1510804845738046910,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3868 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://7xv6.mjt.lu/lnk/AXMAAFFvlI0AAAAAAAAAA8Ye8moAAABKhgwAAAAAAAq7pgBnByOSeYt8cGpTTPaPBTAKJeV-UQAKnpI/1/EWmySlSHcyP6g54g0SDc-g/aHR0cHM6Ly9zbmlwLmx5L2V6NGxydw" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://fqx.kqy.mybluehost.me/Review/

LLM: Score: 7 Reasons: The URL 'fqx.kqy.mybluehost.me' contains 'mybluehost', which suggests it is associated with Bluehost, a well-known web hosting service., The domain 'mybluehost.me' is not the primary domain for Bluehost, which is 'bluehost.com'., The use of subdomains and the '.me' extension could indicate a legitimate use case for a personal or custom service, but it is also a common tactic in phishing to mimic legitimate services., The brand 'Bluehost' is well-known, but the URL does not match the primary domain exactly, which raises suspicion., The presence of multiple subdomains ('fqx.kqy') adds to the complexity and potential for phishing. DOM: 0.1.pages.csv

Source: https://fqx.kqy.mybluehost.me/Review/	HTTP Parser: No favicon
Source: https://fqx.kqy.mybluehost.me/Review/	HTTP Parser: No favicon
Source: https://fqx.kqy.mybluehost.me/Review/	HTTP Parser: No favicon
Source: https://fqx.kqy.mybluehost.me/Review/	HTTP Parser: No favicon
Source: https://fqx.kqy.mybluehost.me/Review/	HTTP Parser: No favicon
Source: https://fqx.kqy.mybluehost.me/Review/	HTTP Parser: No favicon
Source: https://fqx.kqy.mybluehost.me/Review/	HTTP Parser: No favicon
Source: https://fqx.kqy.mybluehost.me/Review/	HTTP Parser: No favicon
Source: https://fqx.kqy.mybluehost.me/Review/	HTTP Parser: No favicon
Source: https://fqx.kqy.mybluehost.me/Review/client/index.php?userid=6707458b7abb8	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 104.102.46.111:443 -> 192.168.2.16:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.46.111:443 -> 192.168.2.16:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.16:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.16:49750 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: snip.ly to https://zpr.io/hhnlhl7pmpw3?utm_source=sniply&utm_campaign=sniply&utm_medium=sniply
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: zpr.io to https://fqx.kqy.mybluehost.me/review/

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 104.102.46.111
Source: unknown	TCP traffic detected without corresponding DNS query: 104.102.46.111
Source: unknown	TCP traffic detected without corresponding DNS query: 104.102.46.111
Source: unknown	TCP traffic detected without corresponding DNS query: 104.102.46.111
Source: unknown	TCP traffic detected without corresponding DNS query: 104.102.46.111
Source: unknown	TCP traffic detected without corresponding DNS query: 104.102.46.111
Source: unknown	TCP traffic detected without corresponding DNS query: 104.102.46.111
Source: unknown	TCP traffic detected without corresponding DNS query: 104.102.46.111
Source: unknown	TCP traffic detected without corresponding DNS query: 104.102.46.111
Source: unknown	TCP traffic detected without corresponding DNS query: 104.102.46.111
Source: unknown	TCP traffic detected without corresponding DNS query: 104.102.46.111
Source: unknown	TCP traffic detected without corresponding DNS query: 104.102.46.111
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 104.102.46.111
Source: unknown	TCP traffic detected without corresponding DNS query: 104.102.46.111
Source: unknown	TCP traffic detected without corresponding DNS query: 104.102.46.111
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 104.102.46.111
Source: unknown	TCP traffic detected without corresponding DNS query: 104.102.46.111
Source: unknown	TCP traffic detected without corresponding DNS query: 104.102.46.111
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.221.95
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.221.95
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /ez4lrw HTTP/1.1Host: snip.lyConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hhNLhL7PmPw3?utm_source=sniply&utm_campaign=sniply&utm_medium=sniply HTTP/1.1Host: zpr.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Review/ HTTP/1.1Host: fqx.kqy.mybluehost.meConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/api.js HTTP/1.1Host: js.hcaptcha.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://fqx.kqy.mybluehost.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: fqx.kqy.mybluehost.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://fqx.kqy.mybluehost.me/Review/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ebddcc4a9ecc86c7ab6d075bfd2e6982
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /1/api.js HTTP/1.1Host: js.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /captcha/v1/2766c43/static/hcaptcha.html HTTP/1.1Host: newassets.hcaptcha.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://fqx.kqy.mybluehost.me/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/5b8e65083fb03d69f7f1c7f37b70a61765f316bdd0f1f53ab286361d1bc32723/hsw.js HTTP/1.1Host: newassets.hcaptcha.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://newassets.hcaptcha.com/captcha/v1/2766c43/static/hcaptcha.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /checksiteconfig?v=2766c43&host=fqx.kqy.mybluehost.me&sitekey=fa9a729a-76ea-4876-8768-9194430429ac&sc=1&swa=1&spst=1 HTTP/1.1Host: api2.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cflb=0H28vk2VKwPbLoawFincekpozDKK5F2cb4R3Cv45z6y
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=W1cUeKZXXgpOeDt&MD=BTByaGWc HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /c/5b8e65083fb03d69f7f1c7f37b70a61765f316bdd0f1f53ab286361d1bc32723/hsw.js HTTP/1.1Host: newassets.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getcaptcha/fa9a729a-76ea-4876-8768-9194430429ac HTTP/1.1Host: api.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /captcha/v1/2766c43/challenge/image_label_area_select/challenge.js HTTP/1.1Host: newassets.hcaptcha.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://newassets.hcaptcha.com/captcha/v1/2766c43/static/hcaptcha.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /captcha/v1/2766c43/challenge/image_label_area_select/challenge.js HTTP/1.1Host: newassets.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/39a767c376904cc26ef5b4e59936075f893457cdd7d6cdc9a7fbfc3678ef1df5/8c90fadbde7152b959d45c77248ff00a8620bcd84edd7c79accbdb75ba983a8b.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://newassets.hcaptcha.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://newassets.hcaptcha.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/91570bad4bdd3913b054530049a4ef53d5363ed83f13aa0680890621968d0bb1/eb37d571818b4aebfc876b4f402d188934de1dcf2d867a29e51601aab7e9b8b9.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://newassets.hcaptcha.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/c5b4ce35c8332f3678faa22f494866b39406cf4ca5014903b63ae0f7d772e527/4290b4bf8b6b0cbadf947d4cb518093954dcf276c6a59f2e3e91f97f01a2ec59.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://newassets.hcaptcha.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/62de709702ece426880b4ae75ea1f5b330a40ae8a2f00e177885143e9b0083e7/dc0f9d7dba9d640f0a04d356079b7f10b58f25cfd3410a845b1db0886b07b365.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://newassets.hcaptcha.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/c5b4ce35c8332f3678faa22f494866b39406cf4ca5014903b63ae0f7d772e527/4290b4bf8b6b0cbadf947d4cb518093954dcf276c6a59f2e3e91f97f01a2ec59.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/91570bad4bdd3913b054530049a4ef53d5363ed83f13aa0680890621968d0bb1/eb37d571818b4aebfc876b4f402d188934de1dcf2d867a29e51601aab7e9b8b9.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/62de709702ece426880b4ae75ea1f5b330a40ae8a2f00e177885143e9b0083e7/dc0f9d7dba9d640f0a04d356079b7f10b58f25cfd3410a845b1db0886b07b365.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/39a767c376904cc26ef5b4e59936075f893457cdd7d6cdc9a7fbfc3678ef1df5/8c90fadbde7152b959d45c77248ff00a8620bcd84edd7c79accbdb75ba983a8b.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/3c39997cca2c97a840fe4728737ded0bf6e68424c69bf9d31875f2a7b0e12c0f/6ede35228d52f7eb95707fd17afc3fc3086d91d214bf2c231d1d439abe6f72d1.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://newassets.hcaptcha.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://newassets.hcaptcha.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/3c39997cca2c97a840fe4728737ded0bf6e68424c69bf9d31875f2a7b0e12c0f/6ede35228d52f7eb95707fd17afc3fc3086d91d214bf2c231d1d439abe6f72d1.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /checkcaptcha/fa9a729a-76ea-4876-8768-9194430429ac/E0_eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiRWhqWnNnMWg5ZVdURnFTMnQwYXJOaXUrbVZFeHlvbURzN1cvS3Rld1lIK0paU0FRQ3ZiTWdMT01NcndXdXdWc0xXc1M4NHcvRU9hVUsvWVE1QmpTK2kxcjg5dnBYbjBscjUxWmtYdENWaUlDQ3pSTENLdlMyZ1h4K3g5aTRlR25NRmZiR3YrcmVzS1BUdzBnZVVOTE1MZnk1ZnJDVE02VlBaSTBISmlpUzdDSkhPL0dVSU9kaVVuMlJpRy8zd24rSDJxTEdHaEVadFV4Zk9DRTJxSU1BN3dBMFphM0pOUkRhYnhnYkhVUk5aYUZjUVQ5R3BFYml6L2JlTU9ZZS9aVVpzZk1BNVZnVVNCalVYM0hBQT09ck5nb3hjZnlIMU80eGxGTSIsImV4cCI6MTcyODUyOTkwNiwia3IiOiIyZmZhMmE3YiJ9.HmN7sJ7dHNkeUX2FY5kyhD_4co0V-fYJAgqv0z7IenQ HTTP/1.1Host: api.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=W1cUeKZXXgpOeDt&MD=BTByaGWc HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /Review/client/index.php HTTP/1.1Host: fqx.kqy.mybluehost.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ebddcc4a9ecc86c7ab6d075bfd2e6982
Source: global traffic	HTTP traffic detected: GET /lnk/AXMAAFFvlI0AAAAAAAAAA8Ye8moAAABKhgwAAAAAAAq7pgBnByOSeYt8cGpTTPaPBTAKJeV-UQAKnpI/1/EWmySlSHcyP6g54g0SDc-g/aHR0cHM6Ly9zbmlwLmx5L2V6NGxydw HTTP/1.1Host: 7xv6.mjt.luConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: 7xv6.mjt.lu
Source: global traffic	DNS traffic detected: DNS query: snip.ly
Source: global traffic	DNS traffic detected: DNS query: zpr.io
Source: global traffic	DNS traffic detected: DNS query: fqx.kqy.mybluehost.me
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: js.hcaptcha.com
Source: global traffic	DNS traffic detected: DNS query: newassets.hcaptcha.com
Source: global traffic	DNS traffic detected: DNS query: api2.hcaptcha.com
Source: global traffic	DNS traffic detected: DNS query: api.hcaptcha.com
Source: global traffic	DNS traffic detected: DNS query: imgs3.hcaptcha.com

Source: unknown

HTTP traffic detected: POST /checksiteconfig?v=2766c43&host=fqx.kqy.mybluehost.me&sitekey=fa9a729a-76ea-4876-8768-9194430429ac&sc=1&swa=1&spst=1 HTTP/1.1Host: api2.hcaptcha.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonContent-Type: text/plainsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://newassets.hcaptcha.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://newassets.hcaptcha.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 10 Oct 2024 03:10:04 GMTServer: nginx/1.23.4Content-Type: text/html; charset=iso-8859-1Content-Length: 315host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 10 Oct 2024 03:10:38 GMTServer: ApacheExpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, must-revalidatePragma: no-cacheUpgrade: h2,h2cConnection: UpgradeVary: Accept-Encodinghost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==X-Newfold-Cache-Level: 2Transfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 10 Oct 2024 03:10:59 GMTServer: nginx/1.23.4Content-Type: text/html; charset=UTF-8Expires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, must-revalidatePragma: no-cacheVary: Accept-Encodinghost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==X-Newfold-Cache-Level: 2Transfer-Encoding: chunked

Source: chromecache_73.2.dr, chromecache_83.2.dr, chromecache_89.2.dr, chromecache_77.2.dr, chromecache_88.2.dr

String found in binary or memory: https://hcaptcha.com/license

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 104.102.46.111:443 -> 192.168.2.16:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.46.111:443 -> 192.168.2.16:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.16:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.16:49750 version: TLS 1.2

Source: classification engine

Classification label: mal48.phis.win@19/39@30/10

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=1968,i,15726997978114663938,1510804845738046910,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://7xv6.mjt.lu/lnk/AXMAAFFvlI0AAAAAAAAAA8Ye8moAAABKhgwAAAAAAAq7pgBnByOSeYt8cGpTTPaPBTAKJeV-UQAKnpI/1/EWmySlSHcyP6g54g0SDc-g/aHR0cHM6Ly9zbmlwLmx5L2V6NGxydw"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=1968,i,15726997978114663938,1510804845738046910,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Link
https://hcaptcha.com/license	0%	Virustotal	Browse
https://js.hcaptcha.com/1/api.js	0%	Virustotal	Browse
https://snip.ly/ez4lrw	0%	Virustotal	Browse
https://zpr.io/hhNLhL7PmPw3?utm_source=sniply&utm_campaign=sniply&utm_medium=sniply	1%	Virustotal	Browse
https://newassets.hcaptcha.com/captcha/v1/2766c43/static/hcaptcha.html	0%	Virustotal	Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
js.hcaptcha.com	104.19.229.21	true	false	unknown
api.hcaptcha.com	104.19.229.21	true	false	unknown
snip.ly	104.22.7.164	true	false	unknown
zpr.io	44.222.54.177	true	false	unknown
fqx.kqy.mybluehost.me	50.6.153.26	true	true	unknown
7xv6.mjt.lu	35.241.186.140	true	false	unknown
www.google.com	142.250.186.36	true	false	unknown
api2.hcaptcha.com	104.19.230.21	true	false	unknown
imgs3.hcaptcha.com	104.19.229.21	true	false	unknown
newassets.hcaptcha.com	104.19.229.21	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://newassets.hcaptcha.com/c/5b8e65083fb03d69f7f1c7f37b70a61765f316bdd0f1f53ab286361d1bc32723/hsw.js	false		unknown
https://newassets.hcaptcha.com/captcha/v1/2766c43/challenge/image_label_area_select/challenge.js	false		unknown
https://fqx.kqy.mybluehost.me/Review/client/index.php	true		unknown
https://js.hcaptcha.com/1/api.js	false	0%, Virustotal, Browse	unknown
https://imgs3.hcaptcha.com/tip/39a767c376904cc26ef5b4e59936075f893457cdd7d6cdc9a7fbfc3678ef1df5/8c90fadbde7152b959d45c77248ff00a8620bcd84edd7c79accbdb75ba983a8b.jpeg	false		unknown
https://snip.ly/ez4lrw	false	0%, Virustotal, Browse	unknown
https://imgs3.hcaptcha.com/tip/91570bad4bdd3913b054530049a4ef53d5363ed83f13aa0680890621968d0bb1/eb37d571818b4aebfc876b4f402d188934de1dcf2d867a29e51601aab7e9b8b9.jpeg	false		unknown
https://api.hcaptcha.com/checkcaptcha/fa9a729a-76ea-4876-8768-9194430429ac/E0_eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiRWhqWnNnMWg5ZVdURnFTMnQwYXJOaXUrbVZFeHlvbURzN1cvS3Rld1lIK0paU0FRQ3ZiTWdMT01NcndXdXdWc0xXc1M4NHcvRU9hVUsvWVE1QmpTK2kxcjg5dnBYbjBscjUxWmtYdENWaUlDQ3pSTENLdlMyZ1h4K3g5aTRlR25NRmZiR3YrcmVzS1BUdzBnZVVOTE1MZnk1ZnJDVE02VlBaSTBISmlpUzdDSkhPL0dVSU9kaVVuMlJpRy8zd24rSDJxTEdHaEVadFV4Zk9DRTJxSU1BN3dBMFphM0pOUkRhYnhnYkhVUk5aYUZjUVQ5R3BFYml6L2JlTU9ZZS9aVVpzZk1BNVZnVVNCalVYM0hBQT09ck5nb3hjZnlIMU80eGxGTSIsImV4cCI6MTcyODUyOTkwNiwia3IiOiIyZmZhMmE3YiJ9.HmN7sJ7dHNkeUX2FY5kyhD_4co0V-fYJAgqv0z7IenQ	false		unknown
https://fqx.kqy.mybluehost.me/Review/client/index.php?userid=6707458b7abb8	true		unknown
http://7xv6.mjt.lu/lnk/AXMAAFFvlI0AAAAAAAAAA8Ye8moAAABKhgwAAAAAAAq7pgBnByOSeYt8cGpTTPaPBTAKJeV-UQAKnpI/1/EWmySlSHcyP6g54g0SDc-g/aHR0cHM6Ly9zbmlwLmx5L2V6NGxydw	false		unknown
https://api2.hcaptcha.com/checksiteconfig?v=2766c43&host=fqx.kqy.mybluehost.me&sitekey=fa9a729a-76ea-4876-8768-9194430429ac&sc=1&swa=1&spst=1	false		unknown
https://imgs3.hcaptcha.com/tip/3c39997cca2c97a840fe4728737ded0bf6e68424c69bf9d31875f2a7b0e12c0f/6ede35228d52f7eb95707fd17afc3fc3086d91d214bf2c231d1d439abe6f72d1.jpeg	false		unknown
https://zpr.io/hhNLhL7PmPw3?utm_source=sniply&utm_campaign=sniply&utm_medium=sniply	false	1%, Virustotal, Browse	unknown
https://fqx.kqy.mybluehost.me/favicon.ico	false		unknown
https://imgs3.hcaptcha.com/tip/c5b4ce35c8332f3678faa22f494866b39406cf4ca5014903b63ae0f7d772e527/4290b4bf8b6b0cbadf947d4cb518093954dcf276c6a59f2e3e91f97f01a2ec59.jpeg	false		unknown
https://fqx.kqy.mybluehost.me/Review/	true		unknown
https://newassets.hcaptcha.com/captcha/v1/2766c43/static/hcaptcha.html	false	0%, Virustotal, Browse	unknown
https://api.hcaptcha.com/getcaptcha/fa9a729a-76ea-4876-8768-9194430429ac	false		unknown
https://imgs3.hcaptcha.com/tip/62de709702ece426880b4ae75ea1f5b330a40ae8a2f00e177885143e9b0083e7/dc0f9d7dba9d640f0a04d356079b7f10b58f25cfd3410a845b1db0886b07b365.jpeg	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://hcaptcha.com/license	chromecache_73.2.dr, chromecache_83.2.dr, chromecache_89.2.dr, chromecache_77.2.dr, chromecache_88.2.dr	false	0%, Virustotal, Browse	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.36	www.google.com	United States	15169	GOOGLEUS	false
104.22.7.164	snip.ly	United States	13335	CLOUDFLARENETUS	false
50.6.153.26	fqx.kqy.mybluehost.me	United States	46606	UNIFIEDLAYER-AS-1US	true
35.241.186.140	7xv6.mjt.lu	United States	15169	GOOGLEUS	false
44.222.54.177	zpr.io	United States	14618	AMAZON-AESUS	false
104.19.229.21	js.hcaptcha.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.19.230.21	api2.hcaptcha.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.17
192.168.2.16

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1530448
Start date and time:	2024-10-10 05:09:23 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 53s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	http://7xv6.mjt.lu/lnk/AXMAAFFvlI0AAAAAAAAAA8Ye8moAAABKhgwAAAAAAAq7pgBnByOSeYt8cGpTTPaPBTAKJeV-UQAKnpI/1/EWmySlSHcyP6g54g0SDc-g/aHR0cHM6Ly9zbmlwLmx5L2V6NGxydw
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@19/39@30/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.67, 142.250.185.238, 142.250.110.84, 34.104.35.123, 142.250.185.106, 142.250.185.202, 172.217.18.10, 142.250.186.74, 172.217.16.202, 142.250.186.170, 216.58.212.138, 142.250.186.138, 216.58.206.74, 142.250.185.74, 142.250.184.202, 142.250.185.138, 216.58.206.42, 142.250.186.42, 142.250.185.170, 142.250.186.106, 142.250.185.195, 142.250.185.174
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, clients2.google.com, accounts.google.com, edgedl.me.gvt1.com, content-autofill.googleapis.com, slscr.update.microsoft.com, update.googleapis.com, clientservices.googleapis.com, clients.l.google.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 10 02:10:00 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.988819596489074
Encrypted:	false
SSDEEP:	48:8lJdOTqWMHTidAKZdA1FehwiZUklqehTy+3:8UjwIy
MD5:	CD5ED24BCE9EEB6E29A331C193F58CA3
SHA1:	7BDD1891B82B9B22E02E98B55AB8D969E022E7DC
SHA-256:	18CC59A278B98FE4C84C8D34CB0160870799509EDEDE7ED65F108F18E1B848DC
SHA-512:	E7AC339F724FE373F0AD4D6D9C7B75EB7B590735466BA156EB7B30477B6CF891AFB4A54FDC8571D66206A8A83583CEF93FB20A7C36057D45FFB77CB4D745A72E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....N.......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IJY3.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VJY=.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VJY=.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VJY=............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VJYA............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........?.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 10 02:10:00 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.003606939262297
Encrypted:	false
SSDEEP:	48:8idOTqWMHTidAKZdA1seh/iZUkAQkqeh4y+2:8Pjm9Q1y
MD5:	48C9787CC89FAD49AB5D96E73CDC0245
SHA1:	4163363E7B874C56D94C5B602A6FF5CFFBFA1B4D
SHA-256:	D64C3618436B5A99063AF2C6517DE205B3CD8BE3123F545D1230DB7DE7AEFE72
SHA-512:	AA463A00C83532F53DEB1B925245B8438791DDFA4F82445DD19F2A1E94A62A240C52E5504B280E5F2499638CE7F7600C85C62EFC2322CEA60C24BADE79563E4E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....1......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IJY3.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VJY=.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VJY=.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VJY=............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VJYA............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........?.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.010798442714424
Encrypted:	false
SSDEEP:	48:8ddOTqWAHTidAKZdA14meh7sFiZUkmgqeh7s6y+BX:8+junUy
MD5:	1262ABB86CFEC8765F591F830D33B4AD
SHA1:	76F8BD002502455CE3E6D6B027A58C263DA731ED
SHA-256:	EC18D15AE990C7CFA48C119DF5DF9539F623D05126585D032A631AC15196D686
SHA-512:	839958DF06175F5860FA80905055AD61C95FD5CD7CF2462CDD12ECE3AA6B8F38F3E297FB973F5EE1A82F9BD24150982E4513CBC1E504FDFD8980575A1520C6BD
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IJY3.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VJY=.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VJY=.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VJY=............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........?.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 10 02:10:00 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	4.002131367582454
Encrypted:	false
SSDEEP:	48:87dOTqWMHTidAKZdA1TehDiZUkwqeh8y+R:8gj9Cy
MD5:	90CC5A7D7A8C62E49C78DD3972AEE913
SHA1:	182A1AF29F9525A90390A4AA51530C8F0887A6BC
SHA-256:	F8F02EC406F76223146D3A21E8A8D14C81C26B33EFE179EA126B74A2501AAFF8
SHA-512:	74CB8369046671B471952687210F922137254944DE83198C6B37E0920C262095D3AF458FDD85AE2FC7ED34B2D5A4D308846A7AE315A0A29D474098806030E6CC
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,............N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IJY3.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VJY=.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VJY=.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VJY=............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VJYA............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........?.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 10 02:10:00 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.989031865185727
Encrypted:	false
SSDEEP:	48:8ldOTqWMHTidAKZdA1dehBiZUk1W1qehGy+C:82j99my
MD5:	9090ED63E01938EB0EF35E11E0B7A3C4
SHA1:	0D411D3548A0E05A0E03CB46744EB5B1563A2788
SHA-256:	A1FF99BBD9A66BF72CDFAC853FA476DE888D34D00EEAFF0CAD2F828EB996CD0D
SHA-512:	800D71297918BFBF028D490FCCDADA3E8EC6BC530F856B3E7A5B47270D0A0EB402E0009B35D81EF32079CA24F331B4A1D61D7D20D6ACF8E38CA34EAA1C2A3EAC
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....JY......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IJY3.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VJY=.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VJY=.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VJY=............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VJYA............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........?.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 10 02:10:00 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.0014084110426245
Encrypted:	false
SSDEEP:	48:8JdOTqWMHTidAKZdA1duTeehOuTbbiZUk5OjqehOuTbUy+yT+:8CjFTfTbxWOvTbUy7T
MD5:	C34D5E8146697DCEEF4D81C23FA128C3
SHA1:	DED0FE960102B15A3330A2F8EB4333FC5F516BE6
SHA-256:	0046A4143F11432AE77EDD55E519C94B0E6331D0D90B1C9754C0855DD2451BF0
SHA-512:	12733167EA06A7776DE919FD70526184F4A87301A392F4810D3D5791713B4D14DEDAC620A419141225D2D817BC9262D4D234BAD76CE4B2AC8970F052D4B7CB40
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....."......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IJY3.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VJY=.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VJY=.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VJY=............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VJYA............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........?.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x128, components 3
Category:	downloaded
Size (bytes):	4804
Entropy (8bit):	7.895646381380881
Encrypted:	false
SSDEEP:	96:RhUEb4Rp4FFUkzKQtEHicgjsQF+hhmeL3NKknDwwlWibJuJuXHXKw6K/:LUi4azrtFcgjsQF+hIeBqw/bJeBwF/
MD5:	FBC23F7717AA38373A08E4CB38B410C8
SHA1:	C09A1C23218BB3F84C9E2F11B4E98679EA0CABFC
SHA-256:	DD6B40CC08B4E7BFDB6939C4C153C96C2645C8175A63BC6350A04295FAABF871
SHA-512:	C8B2F4D71607B18284C4258F64EEB8B43D10E526B82CF964EF78DB066E9E0A5C86DA79A5F638B8E5C8FE159D43D1BB900B140F060AA516C6C4190C0E95B1060C
Malicious:	false
Reputation:	low
URL:	https://imgs3.hcaptcha.com/tip/c5b4ce35c8332f3678faa22f494866b39406cf4ca5014903b63ae0f7d772e527/4290b4bf8b6b0cbadf947d4cb518093954dcf276c6a59f2e3e91f97f01a2ec59.jpeg
Preview:	......JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?........(........G_..+..(J..y..j...A.....e...8...P......<s.......;X.>......)....~....\..w..p=s....G........).?1}f}...8.r@....US.6O+F.....`k.t..?.......:....r~.S..X]&U.a...)...r.....L..v..O..O...p.:......2.x.YD.:rd.4.N.JA. ..8..?.TQ8...1.S.9?...\.w.%/.,..g..........c.-..U@....=...5.w.4.G.o..t..../.{X..W..7..j.]V...6...2O..5'.c..9....r.....U$......./....

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41625)
Category:	dropped
Size (bytes):	150357
Entropy (8bit):	5.40513258416899
Encrypted:	false
SSDEEP:	3072:AwlL47MnAPaiA2cudRCG0fW2MkdF5kpjm7L1ZVplqpU:AwlgMgaiA2cuX0+2MkdF5tL1/plqpU
MD5:	E6C1BF71E02CFBE1D8B39F3D11CD7B09
SHA1:	9F332E9E209FB6FBC799CAC9EF76DE35A2E17CF4
SHA-256:	B141867B06A062C3EF734B8600EB74821D6E80665790B9D306037F33976AD660
SHA-512:	796821E92FE3D84C83EBE3ACC1841CC858A0B808B486A0E7AB78AA6FCF05344A60BC41D25E2EB4E39487D74530025B207C1AF749B12F152E007E9C14ECAE0744
Malicious:	false
Reputation:	low
Preview:	/* https://hcaptcha.com/license */.!function(){"use strict";function e(e){var t=this.constructor;return this.then((function(n){return t.resolve(e()).then((function(){return n}))}),(function(n){return t.resolve(e()).then((function(){return t.reject(n)}))}))}function t(e){return new this((function(t,n){if(!e\|\|"undefined"==typeof e.length)return n(new TypeError(typeof e+" "+e+" is not iterable(cannot read property Symbol(Symbol.iterator))"));var r=Array.prototype.slice.call(e);if(0===r.length)return t([]);var i=r.length;function o(e,n){if(n&&("object"==typeof n\|\|"function"==typeof n)){var a=n.then;if("function"==typeof a)return void a.call(n,(function(t){o(e,t)}),(function(n){r[e]={status:"rejected",reason:n},0==--i&&t(r)}))}r[e]={status:"fulfilled",value:n},0==--i&&t(r)}for(var a=0;a<r.length;a++)o(a,r[a])}))}var n=setTimeout,r="undefined"!=typeof setImmediate?setImmediate:null;function i(e){return Boolean(e&&"undefined"!=typeof e.length)}function o(){}function a(e){if(!(this instanceof

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x128, components 3
Category:	dropped
Size (bytes):	4804
Entropy (8bit):	7.895646381380881
Encrypted:	false
SSDEEP:	96:RhUEb4Rp4FFUkzKQtEHicgjsQF+hhmeL3NKknDwwlWibJuJuXHXKw6K/:LUi4azrtFcgjsQF+hIeBqw/bJeBwF/
MD5:	FBC23F7717AA38373A08E4CB38B410C8
SHA1:	C09A1C23218BB3F84C9E2F11B4E98679EA0CABFC
SHA-256:	DD6B40CC08B4E7BFDB6939C4C153C96C2645C8175A63BC6350A04295FAABF871
SHA-512:	C8B2F4D71607B18284C4258F64EEB8B43D10E526B82CF964EF78DB066E9E0A5C86DA79A5F638B8E5C8FE159D43D1BB900B140F060AA516C6C4190C0E95B1060C
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?........(........G_..+..(J..y..j...A.....e...8...P......<s.......;X.>......)....~....\..w..p=s....G........).?1}f}...8.r@....US.6O+F.....`k.t..?.......:....r~.S..X]&U.a...)...r.....L..v..O..O...p.:......2.x.YD.:rd.4.N.JA. ..8..?.TQ8...1.S.9?...\.w.%/.,..g..........c.-..U@....=...5.w.4.G.o..t..../.{X..W..7..j.]V...6...2O..5'.c..9....r.....U$......./....

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x128, components 3
Category:	downloaded
Size (bytes):	4649
Entropy (8bit):	7.88892679380802
Encrypted:	false
SSDEEP:	96:RhUEqbIE9hNNTNycKJbwJkLh0PKM4rtOawYH2J8Q:LUNbIshX5cJcJkLeFo3H2eQ
MD5:	B8975C60E760E77F16937F74EDDDD6C1
SHA1:	1344C39127AAA626C7DCEB49204B67257EEC92FC
SHA-256:	3AC4DFBE8000528205725CF3BBAEA0616896FC402AF8A8B19599C8CB35D05D73
SHA-512:	DC15EE91E3ED48C4B4FEDDCE7DE6A9678C89E3B369D757C4F7CEBBEBB83562428B707B52340826EDC7DC88E68B8DA4BC6E7886FD3D27E91E52EAC2855B3C32BB
Malicious:	false
Reputation:	low
URL:	https://imgs3.hcaptcha.com/tip/62de709702ece426880b4ae75ea1f5b330a40ae8a2f00e177885143e9b0083e7/dc0f9d7dba9d640f0a04d356079b7f10b58f25cfd3410a845b1db0886b07b365.jpeg
Preview:	......JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......dz..Q.. <P...(..~....i2=G.@.3....~0.....~n..^v?mq..L.......-.f......zU;......>o.....8an.........7-.r7.Z....._...T#...?N.0.Vo.....V.b..sx.~kL.M...#..\|..}q.E$.._...:.....q.01P. )...U..O....S^L.....1@..:.._.Z..o...O8....<).`...... {..b.'..V...^....U....{.g..+..V.Q*2F..9.....p..~q.J.y.F...U.-.4.'.Rp..Q.f......Q.Q..?:\.....q.?J.....(.......).C.{..).C.{..C..h

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
Reputation:	low
URL:	https://fqx.kqy.mybluehost.me/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (39933)
Category:	downloaded
Size (bytes):	358510
Entropy (8bit):	5.523131372427568
Encrypted:	false
SSDEEP:	6144:AwckVD7n26Xla2C1FlrgBEp4a5wmScFdt2:4ea2i4
MD5:	E666C37A3E4ADE453DC0D057B27E3365
SHA1:	76CE7624F884BEAF3AA5570CC45EF067472EE8F4
SHA-256:	FA511A8A78D68366A83CFC8E5E33EF87B5FFA521D001953635D031EEA99D6C0D
SHA-512:	9139055954E8D2C68CEBB6B5A5169C070328B8B7888D0177122E859D048CDDD33F29D45B91FFF3C794FAC16B02200E6A891B11A60EA86F94CBCBF7BA324CA35D
Malicious:	false
Reputation:	low
URL:	https://newassets.hcaptcha.com/captcha/v1/2766c43/static/hcaptcha.html
Preview:	<!DOCTYPE html>.<html lang="en" data-id="hcaptcha-frame-2766c43">.<head>. <title>hCaptcha</title>. <meta charset="utf-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta http-equiv="Content-Security-Policy" content="object-src 'none'; base-uri 'self'; worker-src blob:; script-src 'self' 'unsafe-eval' 'sha256-1RDbk230aGzS3/Clwl86spvWPmIu48XoU2xaD9Vn8bE=';">. <style type="text/css">*{-webkit-tap-highlight-color:transparent;-webkit-font-smoothing:antialiased}body,html{margin:0;padding:0;font-family:-apple-system,system-ui,BlinkMacSystemFont,"Segoe UI",Roboto,Oxygen,Ubuntu,"Helvetica Neue",Arial,sans-serif;overflow:hidden;height:100%;width:100%;background-color:rgba(255,255,255,0);background-color:transparent}fieldset{margin:0;padding:15px 20px;border:none}button:focus,input:focus,select:focus,textarea:focus{outline:0}:focus{border:none;outline:0}textarea{border:none;overflow:auto;outline:0;-webkit-box-shadow:none;-moz-box-shadow:none;box-shadow:none;resize:non

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x128, components 3
Category:	downloaded
Size (bytes):	4981
Entropy (8bit):	7.846144095973362
Encrypted:	false
SSDEEP:	96:RhUEzBWHfzPvd9fjp1OV11Ja+3kJiQ7VoA+mlqjujeYe+lIbQeK:LUQBAzPl9fl1gDaL/o5rYJl7
MD5:	42E0ED784F548206453D39B454A9E427
SHA1:	A4A58AD381AE31CDEC138BA33828A31CBEDBE103
SHA-256:	4E0351BE49F3C624D8F027A1A7B11A53C19F500457EE915F51831D792FC3F733
SHA-512:	0BF40CAB3BBEB4A3F8E51A9307C192476374486160E2BEC7FE1E684BCF57C84D811AA4CB8B35B3C3B44CFB7EA4612C35B4EBF3D7851A4938F0E648DCC607C66D
Malicious:	false
Reputation:	low
URL:	https://imgs3.hcaptcha.com/tip/91570bad4bdd3913b054530049a4ef53d5363ed83f13aa0680890621968d0bb1/eb37d571818b4aebfc876b4f402d188934de1dcf2d867a29e51601aab7e9b8b9.jpeg
Preview:	......JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....Gn?J..h..QGo.:.......AZ.S...)?......_.[..4.k...........=s.............Z!..=.1..f.a.._.._.Tw........V..lG.:q..c@v.n............c...Z..l..`...VSz.....On.Oj.k..h..%....2.x.b.4...6........E..h.e.k.B.X..B.........q.:....=\|..z..F...k9]X..S...>.8....9.d..'.0{....^..7..~..j..5..L......;..i...K......X..u.En.x.s......3....i......_OU..n..2.0..2.L.0.>E..UR...6..~.

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x333, components 3
Category:	dropped
Size (bytes):	48583
Entropy (8bit):	7.945366690575832
Encrypted:	false
SSDEEP:	768:X7Z38YnpLVF82M1kMD0YaULVBqA89ydJoIhrSZieL00tXsuayrWtLVll9QJpbw/1:X7Gy7F8WMDNaUr1VeIhrV2009JaZLVl3
MD5:	A45B7BF5BBFECF6DC3A4C65CF3DC8826
SHA1:	B8FC4D10781C149915D94A5C3F13C599BC71A9FF
SHA-256:	071519D728682CEE5800633CC5078F92E9B088F8E21FB8C56BD1FEAA57921E3F
SHA-512:	4C788ABF554A621801C9F3F7663AB16F7604C78CD9EACD0C6A50B96D9F92022072363237DE1531F2C0055CA519A95B99B760CCA1D197177D9B8024972B917427
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......M...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....o.c.a....A.s.Kx./.xYO......2....`_..T..,.........)v.W=.B3.\v.~.y.Ov.,.fV...y.b..S\...E..y......1...O..\|..F....G......M.ki.z.....w.i`G.+k...?g......../..4.\...C......)cW.-.m.i....J......[.....M8..4x..`.N;.......H..A...*......,.BI=....I.........G"..bM9.5.r..,...m'...4..W.r......X..+4.......D.m.q..a..c.:.>.J+HRVO...G.JP.v~...\|.oI......U..u.p..>.b..T...1

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x333, components 3
Category:	dropped
Size (bytes):	52812
Entropy (8bit):	7.95502856586681
Encrypted:	false
SSDEEP:	1536:XsNoAIIqzw3jkjDMQYhtqngDB5W+y+PmgU7VAlXg:8NoAIdcjkjDMPUgDxvw
MD5:	87AAE7CA803C038310DA54E78332239E
SHA1:	A23E4E5C0D6F1992BF40708427FCFC9949C019C0
SHA-256:	416ED689BB60FDAD317C21D711920C59C4FD3975B71081A54AB1D903E372B021
SHA-512:	C4D4A7DF0003F240168DBC80B5AA8EFEBD2D8BE3BC265D2605A046AE69281D20FC1296162E0E1D09999D3DC4CEF85DF19E2B17F64A0F63B773E611C6A06F6A7C
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......M...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..%........e...7$...)...].1O...j.5.m..lTg..P."..f...D....r=...P..7.j..8..J\|..N.T%.3............A..g.....W..H...c.......[!.......c..........]wYS........k.[c.2.q..Q2.Er3xH. }.9.m..y.....r.R...i.Q..u&.08..\.S.8.j.........c../.QwW,\jL....9..Sn...u".4...V.a.(......]..&.-'..l.O+..-.{.....E..J.7)r..N..yxz.0..(..Z..o.t..H.a.K<.F%...]z..c5...#..{...D.]..3..ir...

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x128, components 3
Category:	dropped
Size (bytes):	4981
Entropy (8bit):	7.846144095973362
Encrypted:	false
SSDEEP:	96:RhUEzBWHfzPvd9fjp1OV11Ja+3kJiQ7VoA+mlqjujeYe+lIbQeK:LUQBAzPl9fl1gDaL/o5rYJl7
MD5:	42E0ED784F548206453D39B454A9E427
SHA1:	A4A58AD381AE31CDEC138BA33828A31CBEDBE103
SHA-256:	4E0351BE49F3C624D8F027A1A7B11A53C19F500457EE915F51831D792FC3F733
SHA-512:	0BF40CAB3BBEB4A3F8E51A9307C192476374486160E2BEC7FE1E684BCF57C84D811AA4CB8B35B3C3B44CFB7EA4612C35B4EBF3D7851A4938F0E648DCC607C66D
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....Gn?J..h..QGo.:.......AZ.S...)?......_.[..4.k...........=s.............Z!..=.1..f.a.._.._.Tw........V..lG.:q..c@v.n............c...Z..l..`...VSz.....On.Oj.k..h..%....2.x.b.4...6........E..h.e.k.B.X..B.........q.:....=\|..z..F...k9]X..S...>.8....9.d..'.0{....^..7..~..j..5..L......;..i...K......X..u.En.x.s......3....i......_OU..n..2.0..2.L.0.>E..UR...6..~.

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Category:	dropped
Size (bytes):	704583
Entropy (8bit):	5.42123117310688
Encrypted:	false
SSDEEP:	12288:OI8/7++B++AAjECoTgS8Rl3pjwPBAzsBHts0yVw8hWtZ/KolTTlHwTZ20/HKAEl:OI8z++B++AAjECoTgS8Rl5jwPBAzsBHX
MD5:	0960B0B99C86D423B9E44107A6C0BC77
SHA1:	58117C27A6240C8C1CA4A821C2A6D7FFA4331305
SHA-256:	AB1EC3BA5E18D983351EF8454960D1A8E2D81E10E927FC5294A57C4EBA586A59
SHA-512:	7FCF19892D1340952C78637001CC9EDCB779DDEDAC7306525726E877A05A8057877049E9293D94C6F323825BEFB7AF0FABA441AE34EA77F1D04B56156E345B9B
Malicious:	false
Reputation:	low
Preview:	var hsw=function BWJky(){"use strict";function A(A,Q,B){return Q<=A&&A<=B}function Q(A){if(void 0===A)return{};if(A===Object(A))return A;throw TypeError("Could not convert argument to dictionary")}var B=function(A){return A>=0&&A<=127},E=-1;function I(A){this.tokens=[].slice.call(A),this.tokens.reverse()}I.prototype={endOfStream:function(){return!this.tokens.length},read:function(){return this.tokens.length?this.tokens.pop():E},prepend:function(A){if(Array.isArray(A))for(var Q=A;Q.length;)this.tokens.push(Q.pop());else this.tokens.push(A)},push:function(A){if(Array.isArray(A))for(var Q=A;Q.length;)this.tokens.unshift(Q.shift());else this.tokens.unshift(A)}};var C=-1;function g(A,Q){if(A)throw TypeError("Decoder error");return Q\|\|65533}function D(A){return A=String(A).trim().toLowerCase(),Object.prototype.hasOwnProperty.call(w,A)?w[A]:null}var w={};[{encodings:[{labels:["unicode-1-1-utf-8","utf-8","utf8"],name:"UTF-8"}],heading:"The Encoding"}].forEach((function(A){A.encodings.forEach((

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65501)
Category:	downloaded
Size (bytes):	78514
Entropy (8bit):	5.789092451478665
Encrypted:	false
SSDEEP:	1536:WKJ3vlnpreimlo5xrY7+lGdLl+Gg3lkoHy8d3fnTv8Urho+:JvlnJolo3YioLl+Gg3lhSC3fnTvPdo+
MD5:	6FF4D76AA69AADDDF89F47B161C12899
SHA1:	A89B013E0AF6DFC73FDE82DD89EE12185F5F29E1
SHA-256:	8E5B248540F13C600F0431AD153FF15746EB58419F0B809A7F66C9C868456318
SHA-512:	9A7C10E69A31E1421D3CF05978B38548ADC228B40C46F0BAB67003CCF2D1C1E875E61BCE317A9A13DA30ADD471A137D04E90DA32BC2EE84928520E09D844C78B
Malicious:	false
Reputation:	low
URL:	https://newassets.hcaptcha.com/captcha/v1/2766c43/challenge/image_label_area_select/challenge.js
Preview:	/* https://hcaptcha.com/license */.var image_label_area_select=function(t,i,e,s,o,n,h,a,r){"use strict";function l(){i.Extend.self(this,i.DomComponent,"example-image"),this.width=0,this.height=0,this._image=null,this._visible=!1,this.$image=this.createElement(".image")}function p(){i.Extend.self(this,i.DomComponent,"bounding-box-example"),this.width=0,this.height=0,this._visible=!1,this.$container=this.createElement(".example-wrapper")}function c(){i.Extend.self(this,i.DomComponent,"challenge-prompt"),this.state={locales:null},this.width=0,this.height=0,this._visible=!1,this.$copy=this.createElement("h2",".prompt-text"),this.$block=this.createElement(".prompt-block")}s=s&&Object.prototype.hasOwnProperty.call(s,"default")?s["default"]:s,n=n&&Object.prototype.hasOwnProperty.call(n,"default")?n["default"]:n,i.Extend.proto(l,i.DomComponent),l.prototype.style=function(t,i){this.css({width:t,height:i,borderRadius:4,right:0,top:0,position:"absolute",overflow:"hidden"}),this.$image.css({opacit

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x333, components 3
Category:	downloaded
Size (bytes):	52812
Entropy (8bit):	7.95502856586681
Encrypted:	false
SSDEEP:	1536:XsNoAIIqzw3jkjDMQYhtqngDB5W+y+PmgU7VAlXg:8NoAIdcjkjDMPUgDxvw
MD5:	87AAE7CA803C038310DA54E78332239E
SHA1:	A23E4E5C0D6F1992BF40708427FCFC9949C019C0
SHA-256:	416ED689BB60FDAD317C21D711920C59C4FD3975B71081A54AB1D903E372B021
SHA-512:	C4D4A7DF0003F240168DBC80B5AA8EFEBD2D8BE3BC265D2605A046AE69281D20FC1296162E0E1D09999D3DC4CEF85DF19E2B17F64A0F63B773E611C6A06F6A7C
Malicious:	false
Reputation:	low
URL:	https://imgs3.hcaptcha.com/tip/39a767c376904cc26ef5b4e59936075f893457cdd7d6cdc9a7fbfc3678ef1df5/8c90fadbde7152b959d45c77248ff00a8620bcd84edd7c79accbdb75ba983a8b.jpeg
Preview:	......JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......M...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..%........e...7$...)...].1O...j.5.m..lTg..P."..f...D....r=...P..7.j..8..J\|..N.T%.3............A..g.....W..H...c.......[!.......c..........]wYS........k.[c.2.q..Q2.Er3xH. }.9.m..y.....r.R...i.Q..u&.08..\.S.8.j.........c../.QwW,\jL....9..Sn...u".4...V.a.(......]..&.-'..l.O+..-.{.....E..J.7)r..N..yxz.0..(..Z..o.t..H.a.K<.F%...]z..c5...#..{...D.]..3..ir...

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x128, components 3
Category:	dropped
Size (bytes):	4649
Entropy (8bit):	7.88892679380802
Encrypted:	false
SSDEEP:	96:RhUEqbIE9hNNTNycKJbwJkLh0PKM4rtOawYH2J8Q:LUNbIshX5cJcJkLeFo3H2eQ
MD5:	B8975C60E760E77F16937F74EDDDD6C1
SHA1:	1344C39127AAA626C7DCEB49204B67257EEC92FC
SHA-256:	3AC4DFBE8000528205725CF3BBAEA0616896FC402AF8A8B19599C8CB35D05D73
SHA-512:	DC15EE91E3ED48C4B4FEDDCE7DE6A9678C89E3B369D757C4F7CEBBEBB83562428B707B52340826EDC7DC88E68B8DA4BC6E7886FD3D27E91E52EAC2855B3C32BB
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......dz..Q.. <P...(..~....i2=G.@.3....~0.....~n..^v?mq..L.......-.f......zU;......>o.....8an.........7-.r7.Z....._...T#...?N.0.Vo.....V.b..sx.~kL.M...#..\|..}q.E$.._...:.....q.01P. )...U..O....S^L.....1@..:.._.Z..o...O8....<).`...... {..b.'..V...^....U....{.g..+..V.Q*2F..9.....p..~q.J.y.F...U.-.4.'.Rp..Q.f......Q.Q..?:\.....q.?J.....(.......).C.{..).C.{..C..h

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x333, components 3
Category:	downloaded
Size (bytes):	48583
Entropy (8bit):	7.945366690575832
Encrypted:	false
SSDEEP:	768:X7Z38YnpLVF82M1kMD0YaULVBqA89ydJoIhrSZieL00tXsuayrWtLVll9QJpbw/1:X7Gy7F8WMDNaUr1VeIhrV2009JaZLVl3
MD5:	A45B7BF5BBFECF6DC3A4C65CF3DC8826
SHA1:	B8FC4D10781C149915D94A5C3F13C599BC71A9FF
SHA-256:	071519D728682CEE5800633CC5078F92E9B088F8E21FB8C56BD1FEAA57921E3F
SHA-512:	4C788ABF554A621801C9F3F7663AB16F7604C78CD9EACD0C6A50B96D9F92022072363237DE1531F2C0055CA519A95B99B760CCA1D197177D9B8024972B917427
Malicious:	false
Reputation:	low
URL:	https://imgs3.hcaptcha.com/tip/3c39997cca2c97a840fe4728737ded0bf6e68424c69bf9d31875f2a7b0e12c0f/6ede35228d52f7eb95707fd17afc3fc3086d91d214bf2c231d1d439abe6f72d1.jpeg
Preview:	......JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......M...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....o.c.a....A.s.Kx./.xYO......2....`_..T..,.........)v.W=.B3.\v.~.y.Ov.,.fV...y.b..S\...E..y......1...O..\|..F....G......M.ki.z.....w.i`G.+k...?g......../..4.\...C......)cW.-.m.i....J......[.....M8..4x..`.N;.......H..A...*......,.BI=....I.........G"..bM9.5.r..,...m'...4..W.r......X..+4.......D.m.q..a..c.:.>.J+HRVO...G.JP.v~...\|.oI......U..u.p..>.b..T...1

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Category:	downloaded
Size (bytes):	704583
Entropy (8bit):	5.42123117310688
Encrypted:	false
SSDEEP:	12288:OI8/7++B++AAjECoTgS8Rl3pjwPBAzsBHts0yVw8hWtZ/KolTTlHwTZ20/HKAEl:OI8z++B++AAjECoTgS8Rl5jwPBAzsBHX
MD5:	0960B0B99C86D423B9E44107A6C0BC77
SHA1:	58117C27A6240C8C1CA4A821C2A6D7FFA4331305
SHA-256:	AB1EC3BA5E18D983351EF8454960D1A8E2D81E10E927FC5294A57C4EBA586A59
SHA-512:	7FCF19892D1340952C78637001CC9EDCB779DDEDAC7306525726E877A05A8057877049E9293D94C6F323825BEFB7AF0FABA441AE34EA77F1D04B56156E345B9B
Malicious:	false
Reputation:	low
URL:	https://newassets.hcaptcha.com/c/5b8e65083fb03d69f7f1c7f37b70a61765f316bdd0f1f53ab286361d1bc32723/hsw.js
Preview:	var hsw=function BWJky(){"use strict";function A(A,Q,B){return Q<=A&&A<=B}function Q(A){if(void 0===A)return{};if(A===Object(A))return A;throw TypeError("Could not convert argument to dictionary")}var B=function(A){return A>=0&&A<=127},E=-1;function I(A){this.tokens=[].slice.call(A),this.tokens.reverse()}I.prototype={endOfStream:function(){return!this.tokens.length},read:function(){return this.tokens.length?this.tokens.pop():E},prepend:function(A){if(Array.isArray(A))for(var Q=A;Q.length;)this.tokens.push(Q.pop());else this.tokens.push(A)},push:function(A){if(Array.isArray(A))for(var Q=A;Q.length;)this.tokens.unshift(Q.shift());else this.tokens.unshift(A)}};var C=-1;function g(A,Q){if(A)throw TypeError("Decoder error");return Q\|\|65533}function D(A){return A=String(A).trim().toLowerCase(),Object.prototype.hasOwnProperty.call(w,A)?w[A]:null}var w={};[{encodings:[{labels:["unicode-1-1-utf-8","utf-8","utf8"],name:"UTF-8"}],heading:"The Encoding"}].forEach((function(A){A.encodings.forEach((

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65501)
Category:	dropped
Size (bytes):	78514
Entropy (8bit):	5.789092451478665
Encrypted:	false
SSDEEP:	1536:WKJ3vlnpreimlo5xrY7+lGdLl+Gg3lkoHy8d3fnTv8Urho+:JvlnJolo3YioLl+Gg3lhSC3fnTvPdo+
MD5:	6FF4D76AA69AADDDF89F47B161C12899
SHA1:	A89B013E0AF6DFC73FDE82DD89EE12185F5F29E1
SHA-256:	8E5B248540F13C600F0431AD153FF15746EB58419F0B809A7F66C9C868456318
SHA-512:	9A7C10E69A31E1421D3CF05978B38548ADC228B40C46F0BAB67003CCF2D1C1E875E61BCE317A9A13DA30ADD471A137D04E90DA32BC2EE84928520E09D844C78B
Malicious:	false
Reputation:	low
Preview:	/* https://hcaptcha.com/license */.var image_label_area_select=function(t,i,e,s,o,n,h,a,r){"use strict";function l(){i.Extend.self(this,i.DomComponent,"example-image"),this.width=0,this.height=0,this._image=null,this._visible=!1,this.$image=this.createElement(".image")}function p(){i.Extend.self(this,i.DomComponent,"bounding-box-example"),this.width=0,this.height=0,this._visible=!1,this.$container=this.createElement(".example-wrapper")}function c(){i.Extend.self(this,i.DomComponent,"challenge-prompt"),this.state={locales:null},this.width=0,this.height=0,this._visible=!1,this.$copy=this.createElement("h2",".prompt-text"),this.$block=this.createElement(".prompt-block")}s=s&&Object.prototype.hasOwnProperty.call(s,"default")?s["default"]:s,n=n&&Object.prototype.hasOwnProperty.call(n,"default")?n["default"]:n,i.Extend.proto(l,i.DomComponent),l.prototype.style=function(t,i){this.css({width:t,height:i,borderRadius:4,right:0,top:0,position:"absolute",overflow:"hidden"}),this.$image.css({opacit

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41625)
Category:	downloaded
Size (bytes):	150357
Entropy (8bit):	5.40513258416899
Encrypted:	false
SSDEEP:	3072:AwlL47MnAPaiA2cudRCG0fW2MkdF5kpjm7L1ZVplqpU:AwlgMgaiA2cuX0+2MkdF5tL1/plqpU
MD5:	E6C1BF71E02CFBE1D8B39F3D11CD7B09
SHA1:	9F332E9E209FB6FBC799CAC9EF76DE35A2E17CF4
SHA-256:	B141867B06A062C3EF734B8600EB74821D6E80665790B9D306037F33976AD660
SHA-512:	796821E92FE3D84C83EBE3ACC1841CC858A0B808B486A0E7AB78AA6FCF05344A60BC41D25E2EB4E39487D74530025B207C1AF749B12F152E007E9C14ECAE0744
Malicious:	false
Reputation:	low
URL:	https://js.hcaptcha.com/1/api.js
Preview:	/* https://hcaptcha.com/license */.!function(){"use strict";function e(e){var t=this.constructor;return this.then((function(n){return t.resolve(e()).then((function(){return n}))}),(function(n){return t.resolve(e()).then((function(){return t.reject(n)}))}))}function t(e){return new this((function(t,n){if(!e\|\|"undefined"==typeof e.length)return n(new TypeError(typeof e+" "+e+" is not iterable(cannot read property Symbol(Symbol.iterator))"));var r=Array.prototype.slice.call(e);if(0===r.length)return t([]);var i=r.length;function o(e,n){if(n&&("object"==typeof n\|\|"function"==typeof n)){var a=n.then;if("function"==typeof a)return void a.call(n,(function(t){o(e,t)}),(function(n){r[e]={status:"rejected",reason:n},0==--i&&t(r)}))}r[e]={status:"fulfilled",value:n},0==--i&&t(r)}for(var a=0;a<r.length;a++)o(a,r[a])}))}var n=setTimeout,r="undefined"!=typeof setImmediate?setImmediate:null;function i(e){return Boolean(e&&"undefined"!=typeof e.length)}function o(){}function a(e){if(!(this instanceof

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	776
Entropy (8bit):	5.841003682108499
Encrypted:	false
SSDEEP:	24:Y2+S5HXnREsSNPO1x7N5nVnuEGIvwzfqEAIv0f0:Y2+m41mx7d7twmEHx
MD5:	13E56C775A61833969ED6C1EA7D8F3D1
SHA1:	6D635EAF0D57DD0E7262CCA20CDDBE64824C3EF7
SHA-256:	5E145398F3E9405893D69805C712A70A337EF3183A6390994710C7859D35941E
SHA-512:	78152C7777ADF0E83E43F26EDB2531113D867B099863FA6652EAC8FCD2A9E6BAC66300D19852A4629690666F27AFB9ED87CFFA319C523E53F558A674B9CC42E5
Malicious:	false
Reputation:	low
Preview:	{"features":{"enc_get_req":true},"c":{"type":"hsw","req":"eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.Do8_jQ6OPPGmxd_cuiUEbtxuWqncms3rrR9Y8ALCjzo"},"pass":true}

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	14
Entropy (8bit):	3.6644977792004623
Encrypted:	false
SSDEEP:	3:qIJM/YB:q0b
MD5:	0CEF85A06BA488876294077160628616
SHA1:	85ED668F4B9369F661F9F5D07AF7FA56F568471D
SHA-256:	E7196C74A5271AB14B6DB5B0D9F1BD22622CB7FD9F5E426F2A4BB578EC268ABE
SHA-512:	E7F076037848AA802510F6B271EFB46FB09A305D2F5EB3CB873145174275FD7F06498AE11F09827213CFF86A0E5563F44F6477D41775CBE228A81FDE828A76E9
Malicious:	false
Reputation:	low
Preview:	Invalid Method

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	14
Entropy (8bit):	3.6644977792004623
Encrypted:	false
SSDEEP:	3:qIJM/YB:q0b
MD5:	0CEF85A06BA488876294077160628616
SHA1:	85ED668F4B9369F661F9F5D07AF7FA56F568471D
SHA-256:	E7196C74A5271AB14B6DB5B0D9F1BD22622CB7FD9F5E426F2A4BB578EC268ABE
SHA-512:	E7F076037848AA802510F6B271EFB46FB09A305D2F5EB3CB873145174275FD7F06498AE11F09827213CFF86A0E5563F44F6477D41775CBE228A81FDE828A76E9
Malicious:	false
Reputation:	low
Preview:	Invalid Method

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.208966082694623
Encrypted:	false
SSDEEP:	3:HhCkuDjn:HUkuf
MD5:	89BE93E81169A3478F5B92F3C91AF580
SHA1:	C62E2852B394952919463742831CB4C66CCA1C8B
SHA-256:	77C5F518D3925E0083F47A20572ADB178B2204D07FAA396A2E3B0AFD803155B9
SHA-512:	0F837CB5A3E3C67CFE10B21FB4965A1B39E4C10CEA9137D03A9D5B743B6F36A02CDE5348752D59C0BF28F9CFA0163D99A7767CCE9255500E5C3E15EA1F74C173
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwnzQTd3OHwD1hIFDVNaR8USBQ2_JFKQ?alt=proto
Preview:	ChIKBw1TWkfFGgAKBw2/JFKQGgA=

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 10, 2024 05:09:56.394155025 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 10, 2024 05:09:56.696489096 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 10, 2024 05:09:57.300493002 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 10, 2024 05:09:58.508579016 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 10, 2024 05:09:58.971046925 CEST	49689	80	192.168.2.16	192.229.211.108
Oct 10, 2024 05:09:59.681418896 CEST	49709	80	192.168.2.16	35.241.186.140
Oct 10, 2024 05:09:59.681854963 CEST	49710	80	192.168.2.16	35.241.186.140
Oct 10, 2024 05:09:59.686353922 CEST	80	49709	35.241.186.140	192.168.2.16
Oct 10, 2024 05:09:59.686470985 CEST	49709	80	192.168.2.16	35.241.186.140
Oct 10, 2024 05:09:59.686640978 CEST	80	49710	35.241.186.140	192.168.2.16
Oct 10, 2024 05:09:59.686711073 CEST	49709	80	192.168.2.16	35.241.186.140
Oct 10, 2024 05:09:59.686711073 CEST	49710	80	192.168.2.16	35.241.186.140
Oct 10, 2024 05:09:59.691524982 CEST	80	49709	35.241.186.140	192.168.2.16
Oct 10, 2024 05:10:00.302140951 CEST	80	49709	35.241.186.140	192.168.2.16
Oct 10, 2024 05:10:00.357526064 CEST	49709	80	192.168.2.16	35.241.186.140
Oct 10, 2024 05:10:00.358656883 CEST	49711	443	192.168.2.16	104.22.7.164
Oct 10, 2024 05:10:00.358700037 CEST	443	49711	104.22.7.164	192.168.2.16
Oct 10, 2024 05:10:00.358845949 CEST	49711	443	192.168.2.16	104.22.7.164
Oct 10, 2024 05:10:00.359116077 CEST	49711	443	192.168.2.16	104.22.7.164
Oct 10, 2024 05:10:00.359153032 CEST	443	49711	104.22.7.164	192.168.2.16
Oct 10, 2024 05:10:00.826147079 CEST	443	49711	104.22.7.164	192.168.2.16
Oct 10, 2024 05:10:00.826591969 CEST	49711	443	192.168.2.16	104.22.7.164
Oct 10, 2024 05:10:00.826621056 CEST	443	49711	104.22.7.164	192.168.2.16
Oct 10, 2024 05:10:00.828269005 CEST	443	49711	104.22.7.164	192.168.2.16
Oct 10, 2024 05:10:00.828360081 CEST	49711	443	192.168.2.16	104.22.7.164
Oct 10, 2024 05:10:00.829695940 CEST	49711	443	192.168.2.16	104.22.7.164
Oct 10, 2024 05:10:00.829785109 CEST	443	49711	104.22.7.164	192.168.2.16
Oct 10, 2024 05:10:00.829926968 CEST	49711	443	192.168.2.16	104.22.7.164
Oct 10, 2024 05:10:00.829935074 CEST	443	49711	104.22.7.164	192.168.2.16
Oct 10, 2024 05:10:00.885521889 CEST	49711	443	192.168.2.16	104.22.7.164
Oct 10, 2024 05:10:00.917588949 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 10, 2024 05:10:02.077064037 CEST	443	49711	104.22.7.164	192.168.2.16
Oct 10, 2024 05:10:02.077163935 CEST	443	49711	104.22.7.164	192.168.2.16
Oct 10, 2024 05:10:02.077253103 CEST	49711	443	192.168.2.16	104.22.7.164
Oct 10, 2024 05:10:02.078044891 CEST	49711	443	192.168.2.16	104.22.7.164
Oct 10, 2024 05:10:02.078066111 CEST	443	49711	104.22.7.164	192.168.2.16
Oct 10, 2024 05:10:02.098345995 CEST	49714	443	192.168.2.16	44.222.54.177
Oct 10, 2024 05:10:02.098407984 CEST	443	49714	44.222.54.177	192.168.2.16
Oct 10, 2024 05:10:02.098623037 CEST	49714	443	192.168.2.16	44.222.54.177
Oct 10, 2024 05:10:02.098913908 CEST	49714	443	192.168.2.16	44.222.54.177
Oct 10, 2024 05:10:02.098944902 CEST	443	49714	44.222.54.177	192.168.2.16
Oct 10, 2024 05:10:02.783967972 CEST	443	49714	44.222.54.177	192.168.2.16
Oct 10, 2024 05:10:02.784555912 CEST	49714	443	192.168.2.16	44.222.54.177
Oct 10, 2024 05:10:02.784620047 CEST	443	49714	44.222.54.177	192.168.2.16
Oct 10, 2024 05:10:02.786115885 CEST	443	49714	44.222.54.177	192.168.2.16
Oct 10, 2024 05:10:02.786210060 CEST	49714	443	192.168.2.16	44.222.54.177
Oct 10, 2024 05:10:02.788270950 CEST	49714	443	192.168.2.16	44.222.54.177
Oct 10, 2024 05:10:02.788357019 CEST	443	49714	44.222.54.177	192.168.2.16
Oct 10, 2024 05:10:02.788526058 CEST	49714	443	192.168.2.16	44.222.54.177
Oct 10, 2024 05:10:02.788544893 CEST	443	49714	44.222.54.177	192.168.2.16
Oct 10, 2024 05:10:02.834583044 CEST	49714	443	192.168.2.16	44.222.54.177
Oct 10, 2024 05:10:02.899625063 CEST	443	49714	44.222.54.177	192.168.2.16
Oct 10, 2024 05:10:02.899681091 CEST	443	49714	44.222.54.177	192.168.2.16
Oct 10, 2024 05:10:02.899864912 CEST	49714	443	192.168.2.16	44.222.54.177
Oct 10, 2024 05:10:02.900187969 CEST	49714	443	192.168.2.16	44.222.54.177
Oct 10, 2024 05:10:02.900242090 CEST	443	49714	44.222.54.177	192.168.2.16
Oct 10, 2024 05:10:02.917692900 CEST	49715	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:02.917759895 CEST	443	49715	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:02.917838097 CEST	49715	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:02.918113947 CEST	49715	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:02.918137074 CEST	443	49715	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:03.158647060 CEST	49716	443	192.168.2.16	104.102.46.111
Oct 10, 2024 05:10:03.158735991 CEST	443	49716	104.102.46.111	192.168.2.16
Oct 10, 2024 05:10:03.158838987 CEST	49716	443	192.168.2.16	104.102.46.111
Oct 10, 2024 05:10:03.160747051 CEST	49716	443	192.168.2.16	104.102.46.111
Oct 10, 2024 05:10:03.160778046 CEST	443	49716	104.102.46.111	192.168.2.16
Oct 10, 2024 05:10:03.407594919 CEST	443	49715	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:03.408139944 CEST	49715	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:03.408179998 CEST	443	49715	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:03.409075022 CEST	443	49715	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:03.409151077 CEST	49715	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:03.410355091 CEST	49715	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:03.410423040 CEST	443	49715	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:03.410650969 CEST	49715	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:03.410665989 CEST	443	49715	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:03.457478046 CEST	49715	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:03.531625032 CEST	49717	443	192.168.2.16	142.250.186.36
Oct 10, 2024 05:10:03.531682968 CEST	443	49717	142.250.186.36	192.168.2.16
Oct 10, 2024 05:10:03.531754971 CEST	49717	443	192.168.2.16	142.250.186.36
Oct 10, 2024 05:10:03.532020092 CEST	49717	443	192.168.2.16	142.250.186.36
Oct 10, 2024 05:10:03.532042027 CEST	443	49717	142.250.186.36	192.168.2.16
Oct 10, 2024 05:10:03.551961899 CEST	443	49715	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:03.552021027 CEST	443	49715	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:03.552090883 CEST	49715	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:03.552126884 CEST	443	49715	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:03.585867882 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:03.585930109 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:03.586050034 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:03.586535931 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:03.586561918 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:03.601501942 CEST	49715	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:03.800679922 CEST	443	49716	104.102.46.111	192.168.2.16
Oct 10, 2024 05:10:03.800765038 CEST	49716	443	192.168.2.16	104.102.46.111
Oct 10, 2024 05:10:03.804394007 CEST	49716	443	192.168.2.16	104.102.46.111
Oct 10, 2024 05:10:03.804404020 CEST	443	49716	104.102.46.111	192.168.2.16
Oct 10, 2024 05:10:03.804786921 CEST	443	49716	104.102.46.111	192.168.2.16
Oct 10, 2024 05:10:03.848593950 CEST	49716	443	192.168.2.16	104.102.46.111
Oct 10, 2024 05:10:03.891417980 CEST	443	49716	104.102.46.111	192.168.2.16
Oct 10, 2024 05:10:04.071295023 CEST	443	49716	104.102.46.111	192.168.2.16
Oct 10, 2024 05:10:04.071518898 CEST	443	49716	104.102.46.111	192.168.2.16
Oct 10, 2024 05:10:04.071573973 CEST	49716	443	192.168.2.16	104.102.46.111
Oct 10, 2024 05:10:04.071660042 CEST	443	49716	104.102.46.111	192.168.2.16
Oct 10, 2024 05:10:04.071697950 CEST	49716	443	192.168.2.16	104.102.46.111
Oct 10, 2024 05:10:04.071697950 CEST	49716	443	192.168.2.16	104.102.46.111
Oct 10, 2024 05:10:04.071721077 CEST	443	49716	104.102.46.111	192.168.2.16
Oct 10, 2024 05:10:04.071739912 CEST	443	49716	104.102.46.111	192.168.2.16
Oct 10, 2024 05:10:04.073484898 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.073805094 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.073841095 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.075551033 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.075658083 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.080687046 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.080777884 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.081022024 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.081033945 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.117127895 CEST	49719	443	192.168.2.16	104.102.46.111
Oct 10, 2024 05:10:04.117161036 CEST	443	49719	104.102.46.111	192.168.2.16
Oct 10, 2024 05:10:04.117244005 CEST	49719	443	192.168.2.16	104.102.46.111
Oct 10, 2024 05:10:04.117547989 CEST	49719	443	192.168.2.16	104.102.46.111
Oct 10, 2024 05:10:04.117558002 CEST	443	49719	104.102.46.111	192.168.2.16
Oct 10, 2024 05:10:04.127482891 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.178828001 CEST	443	49717	142.250.186.36	192.168.2.16
Oct 10, 2024 05:10:04.179117918 CEST	49717	443	192.168.2.16	142.250.186.36
Oct 10, 2024 05:10:04.179153919 CEST	443	49717	142.250.186.36	192.168.2.16
Oct 10, 2024 05:10:04.180294991 CEST	443	49717	142.250.186.36	192.168.2.16
Oct 10, 2024 05:10:04.180355072 CEST	49717	443	192.168.2.16	142.250.186.36
Oct 10, 2024 05:10:04.181418896 CEST	49717	443	192.168.2.16	142.250.186.36
Oct 10, 2024 05:10:04.181495905 CEST	443	49717	142.250.186.36	192.168.2.16
Oct 10, 2024 05:10:04.194008112 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.194123983 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.194161892 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.194169044 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.194186926 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.194221973 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.194226027 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.194240093 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.194282055 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.194927931 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.195163965 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.195209980 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.195218086 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.195519924 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.195566893 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.195574999 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.223467112 CEST	49717	443	192.168.2.16	142.250.186.36
Oct 10, 2024 05:10:04.223475933 CEST	443	49717	142.250.186.36	192.168.2.16
Oct 10, 2024 05:10:04.237019062 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.237025976 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.271473885 CEST	49717	443	192.168.2.16	142.250.186.36
Oct 10, 2024 05:10:04.282653093 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.282696962 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.282737970 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.282772064 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.282819986 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.282898903 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.283212900 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.283243895 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.283258915 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.283267021 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.283351898 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.283757925 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.284050941 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.284087896 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.284104109 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.284111977 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.284224033 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.284231901 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.284606934 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.284646988 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.284653902 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.285130978 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.285166979 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.285182953 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.285191059 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.285269022 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.285275936 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.285756111 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.285799026 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.285805941 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.286118984 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.286165953 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.286173105 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.326822042 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.326898098 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.326908112 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.326982021 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.327090979 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.327099085 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.369441986 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.371321917 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.371596098 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.371645927 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.371654987 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.371942043 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.371954918 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.371984959 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.371993065 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.372009039 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.373054981 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.373095989 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.373107910 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.373115063 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.373133898 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.373656988 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.373713970 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.373720884 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.373790026 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.373938084 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.373994112 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.374933958 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.374986887 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.374988079 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.375003099 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.375024080 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.375901937 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.375957966 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.375966072 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.376069069 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.376754999 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.376856089 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.376863003 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.376873970 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.376909971 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.377686024 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.377739906 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.377760887 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.377810001 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.378688097 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.378743887 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.378758907 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.378813982 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.460005045 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.460092068 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.460120916 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.460150957 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.460180998 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.460196972 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.460592031 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.460656881 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.461538076 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.461604118 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.461611986 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.461635113 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.461663008 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.462126970 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.462178946 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.462194920 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.462243080 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.462956905 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.463015079 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.463025093 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.463073969 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.463875055 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.463947058 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.463949919 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.463963985 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.463989973 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.464008093 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.464015961 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.464061022 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.464148045 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.464350939 CEST	49718	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.464366913 CEST	443	49718	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.478115082 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.478157997 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.478228092 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.479186058 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.479203939 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.493469000 CEST	49715	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:04.495628119 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.495665073 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.495754957 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.495929956 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.495943069 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.539400101 CEST	443	49715	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:04.573982954 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 10, 2024 05:10:04.615438938 CEST	443	49715	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:04.668488979 CEST	49715	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:04.751801968 CEST	443	49719	104.102.46.111	192.168.2.16
Oct 10, 2024 05:10:04.751908064 CEST	49719	443	192.168.2.16	104.102.46.111
Oct 10, 2024 05:10:04.753144979 CEST	49719	443	192.168.2.16	104.102.46.111
Oct 10, 2024 05:10:04.753175974 CEST	443	49719	104.102.46.111	192.168.2.16
Oct 10, 2024 05:10:04.753520012 CEST	443	49719	104.102.46.111	192.168.2.16
Oct 10, 2024 05:10:04.754643917 CEST	49719	443	192.168.2.16	104.102.46.111
Oct 10, 2024 05:10:04.795413971 CEST	443	49719	104.102.46.111	192.168.2.16
Oct 10, 2024 05:10:04.875494003 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 10, 2024 05:10:04.934530020 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.938879013 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.938925028 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.940392017 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.940473080 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.942842007 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.942929983 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.943063974 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.943082094 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.978231907 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.981095076 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.981156111 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.982652903 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.982780933 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.987019062 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.987109900 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.987227917 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:04.987246990 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:04.988713980 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.020720005 CEST	443	49719	104.102.46.111	192.168.2.16
Oct 10, 2024 05:10:05.020883083 CEST	443	49719	104.102.46.111	192.168.2.16
Oct 10, 2024 05:10:05.021034002 CEST	49719	443	192.168.2.16	104.102.46.111
Oct 10, 2024 05:10:05.023711920 CEST	49719	443	192.168.2.16	104.102.46.111
Oct 10, 2024 05:10:05.023713112 CEST	49719	443	192.168.2.16	104.102.46.111
Oct 10, 2024 05:10:05.023761034 CEST	443	49719	104.102.46.111	192.168.2.16
Oct 10, 2024 05:10:05.023791075 CEST	443	49719	104.102.46.111	192.168.2.16
Oct 10, 2024 05:10:05.035680056 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.066560984 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.066637993 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.066673994 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.066704988 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.067089081 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.067198038 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.067361116 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.067631006 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.067878008 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.068542957 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.068629980 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.068782091 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.071238995 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.114494085 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.114562988 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.116918087 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.117094994 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.117170095 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.117175102 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.117228031 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.117280960 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.117305994 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.117470026 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.117590904 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.117652893 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.117666960 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.117716074 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.117722034 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.117985010 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.118046999 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.118053913 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.153358936 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.153426886 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.153475046 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.153681040 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.153712988 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.153836012 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.153871059 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.153923035 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.154155016 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.154531002 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.154566050 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.154583931 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.154593945 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.154685974 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.154891968 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.154947996 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.154993057 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.155000925 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.155428886 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.155462980 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.155515909 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.155525923 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.155566931 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.155836105 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.155889988 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.155968904 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.155977964 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.156459093 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.156506062 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.156512976 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.156774044 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.156850100 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.156857967 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.162619114 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.162648916 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.196857929 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.196942091 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.196969032 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.205820084 CEST	80	49710	35.241.186.140	192.168.2.16
Oct 10, 2024 05:10:05.205976963 CEST	80	49710	35.241.186.140	192.168.2.16
Oct 10, 2024 05:10:05.206043005 CEST	49710	80	192.168.2.16	35.241.186.140
Oct 10, 2024 05:10:05.209615946 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.209718943 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.209799051 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.209872961 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.209875107 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.209904909 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.209939003 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.209954977 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.209960938 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.210304022 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.210361004 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.210367918 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.210439920 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.210491896 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.210504055 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.210978985 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.211045980 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.211056948 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.211185932 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.211245060 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.211267948 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.211493015 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.211577892 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.211646080 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.211659908 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.211714983 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.212161064 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.212296009 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.212398052 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.212471962 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.212483883 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.212532997 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.212543964 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.212682009 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.213529110 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.213540077 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.239897966 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.239943981 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.240009069 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.240040064 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.240447044 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.240483046 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.240489006 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.240505934 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.240533113 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.240858078 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.240936995 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.240950108 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.241008043 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.241516113 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.241586924 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.241599083 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.241643906 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.242182016 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.242252111 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.242871046 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.242950916 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.243144989 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.243218899 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.243998051 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.244064093 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.244465113 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.244558096 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.245397091 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.245445013 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.245476007 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.245488882 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.245513916 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.246215105 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.246262074 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.246289968 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.246301889 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.246325970 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.257474899 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.283898115 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.283987045 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.284010887 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.284084082 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.302179098 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.302397966 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.302464008 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.302469969 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.302495956 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.302644968 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.302695036 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.302711964 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.302755117 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.302853107 CEST	80	49709	35.241.186.140	192.168.2.16
Oct 10, 2024 05:10:05.302906990 CEST	49709	80	192.168.2.16	35.241.186.140
Oct 10, 2024 05:10:05.303236008 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.303306103 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.303657055 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.303736925 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.303745031 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.303761959 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.303788900 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.304481983 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.304553986 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.304558992 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.304580927 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.304616928 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.305294037 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.305368900 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.305375099 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.305417061 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.305938959 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.306008101 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.306025028 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.306081057 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.306823015 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.306905031 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.306921959 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.306992054 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.326702118 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.326792002 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.327244997 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.327315092 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.327574015 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.327646971 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.327883959 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.327946901 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.328320026 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.328385115 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.328722954 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.328788042 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.329186916 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.329230070 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.329255104 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.329269886 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.329296112 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.329328060 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.330168962 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.330260992 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.330343962 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.330414057 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.330965996 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.331044912 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.331056118 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.331079960 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.331110001 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.331150055 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.331299067 CEST	49720	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.331332922 CEST	443	49720	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.394697905 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.394795895 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.394814968 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.394855022 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.394876957 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.394895077 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.395148993 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.395210981 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.395642996 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.395720005 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.396094084 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.396162033 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.396603107 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.396675110 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.396698952 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.396752119 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.397264957 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.397325039 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.398030996 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.398096085 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.398138046 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.398189068 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.398644924 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.398713112 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.398730040 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.398780107 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.399576902 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.399647951 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.399662018 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.399718046 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.400424957 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.400485039 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.400502920 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.400551081 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.480055094 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 10, 2024 05:10:05.500674009 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.500765085 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.500792027 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.500864983 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.501076937 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.501157999 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.501172066 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.501244068 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.501698017 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.501754045 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.502008915 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.502065897 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.502490997 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.502536058 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.502552986 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.502563000 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.502583027 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.502604961 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.503361940 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.503412008 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.503444910 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.503459930 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.503482103 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.503624916 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.504213095 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.504256964 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.504288912 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.504300117 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.504317999 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.504611015 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.505067110 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.505110979 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.505125999 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.505134106 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.505160093 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.505177021 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.506820917 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.506840944 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.506916046 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.506928921 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.506975889 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.507667065 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.507757902 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.509301901 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.509329081 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.509377003 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.509382963 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.509413004 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.509432077 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.510489941 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.510526896 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.510579109 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.510584116 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.510613918 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.510629892 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.510634899 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.546555996 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.546614885 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.546658993 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.546691895 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.546708107 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.591500998 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.593720913 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.593746901 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.593790054 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.593817949 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.593847036 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.593878031 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.593899965 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.593905926 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.595731974 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.595803022 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.595824957 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.595846891 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.595875978 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.597172022 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.597215891 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.597243071 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.597265959 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.597290993 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.598061085 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.598124981 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.598148108 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.598165989 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.598186016 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.598793983 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.598855972 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.598871946 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.599034071 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.599107981 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.599282026 CEST	49721	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:05.599299908 CEST	443	49721	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:05.640100002 CEST	49709	80	192.168.2.16	35.241.186.140
Oct 10, 2024 05:10:05.644993067 CEST	80	49709	35.241.186.140	192.168.2.16
Oct 10, 2024 05:10:05.648133039 CEST	49723	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:05.648215055 CEST	443	49723	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:05.648303032 CEST	49723	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:05.648509026 CEST	49723	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:05.648540974 CEST	443	49723	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:05.719651937 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 10, 2024 05:10:06.105180025 CEST	443	49723	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:06.105531931 CEST	49723	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:06.105602026 CEST	443	49723	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:06.106671095 CEST	443	49723	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:06.106761932 CEST	49723	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:06.107808113 CEST	49723	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:06.107903957 CEST	443	49723	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:06.108032942 CEST	49723	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:06.108050108 CEST	443	49723	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:06.150506973 CEST	49723	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:06.284478903 CEST	443	49723	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:06.284600019 CEST	443	49723	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:06.285115004 CEST	49723	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:06.285491943 CEST	49723	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:06.285514116 CEST	443	49723	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:06.296101093 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:06.296144962 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:06.296278000 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:06.296571016 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:06.296590090 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:06.297519922 CEST	49725	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:06.297563076 CEST	443	49725	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:06.297635078 CEST	49725	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:06.297863007 CEST	49725	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:06.297873974 CEST	443	49725	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:06.677553892 CEST	49726	443	192.168.2.16	20.109.210.53
Oct 10, 2024 05:10:06.677618027 CEST	443	49726	20.109.210.53	192.168.2.16
Oct 10, 2024 05:10:06.677717924 CEST	49726	443	192.168.2.16	20.109.210.53
Oct 10, 2024 05:10:06.679002047 CEST	49726	443	192.168.2.16	20.109.210.53
Oct 10, 2024 05:10:06.679017067 CEST	443	49726	20.109.210.53	192.168.2.16
Oct 10, 2024 05:10:06.692501068 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 10, 2024 05:10:06.751106024 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:06.751401901 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:06.751420021 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:06.751775026 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:06.752152920 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:06.752229929 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:06.752350092 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:06.771190882 CEST	443	49725	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:06.771414042 CEST	49725	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:06.771436930 CEST	443	49725	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:06.772850037 CEST	443	49725	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:06.772927999 CEST	49725	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:06.773242950 CEST	49725	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:06.773322105 CEST	443	49725	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:06.773480892 CEST	49725	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:06.773490906 CEST	443	49725	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:06.795402050 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:06.807272911 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:06.820470095 CEST	49725	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:06.878210068 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:06.878262043 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:06.878302097 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:06.878339052 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:06.878348112 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:06.878360987 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:06.878386021 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:06.878588915 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:06.878669024 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:06.878675938 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:06.878829956 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:06.878882885 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:06.878889084 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:06.882848978 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:06.882884026 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:06.882905006 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:06.882910013 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:06.883028984 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:06.953908920 CEST	443	49725	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:06.954051971 CEST	443	49725	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:06.954116106 CEST	49725	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:06.954852104 CEST	49725	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:06.954866886 CEST	443	49725	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:06.964909077 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:06.964977026 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:06.965123892 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:06.965152979 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:06.965169907 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:06.965183973 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:06.965193987 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:06.965418100 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:06.965519905 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:06.965526104 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:06.965820074 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:06.965847969 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:06.965867043 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:06.965874910 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:06.965905905 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:06.965909958 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:06.966231108 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:06.966259956 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:06.966283083 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:06.966286898 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:06.966337919 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:06.966463089 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:06.966919899 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:06.966964006 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:06.966973066 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:06.967041016 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:06.967087030 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:06.967091084 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:06.967287064 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:06.967324972 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:06.967339039 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:06.967344046 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:06.967374086 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:06.967789888 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:06.968077898 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:06.968312979 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:06.968318939 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.012480021 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.052264929 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.052455902 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.052531958 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.052539110 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.052570105 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.052618027 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.052668095 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.052812099 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.052870035 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.052886963 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.052928925 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.052941084 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.052954912 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.052994967 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.053442001 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.053518057 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.053525925 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.053925991 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.053994894 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.054001093 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.054240942 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.054465055 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.054527998 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.054544926 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.054606915 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.055016041 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.055465937 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.055977106 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.061638117 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.061650991 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.061726093 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.138602018 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.138669014 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.138734102 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.138745070 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.138782978 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.139081001 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.139143944 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.139488935 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.139523983 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.139548063 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.139552116 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.139565945 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.140042067 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.140091896 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.140095949 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.140232086 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.140481949 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.140541077 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.141097069 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.141132116 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.141160965 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.141165018 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.141176939 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.141957045 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.142013073 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.142019033 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.142024040 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.142045975 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.142096996 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.142102003 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.142183065 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.142803907 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.142836094 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.142868996 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.142873049 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.142901897 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.142921925 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.143452883 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.143485069 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.143508911 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.143513918 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.143538952 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.143558979 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.144337893 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.144449949 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.144478083 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.144484043 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.144530058 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.144547939 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.145420074 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.145478010 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.145509958 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.145514011 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.145538092 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.145555019 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.145952940 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.146007061 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.146044970 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.146126986 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.146132946 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.146744013 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.146895885 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.146902084 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.147169113 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.181155920 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.181221962 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.227648020 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.227694988 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.227726936 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.227739096 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.227770090 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.227776051 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.227840900 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.227863073 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.227876902 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.227881908 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.227890968 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.227921963 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.228002071 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.228063107 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.230007887 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.230031967 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.230101109 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.230108023 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.230372906 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.231004000 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.231023073 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.231084108 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.231090069 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.231204033 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.232305050 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.232322931 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.232561111 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.232567072 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.234039068 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.234061956 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.234101057 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.234106064 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.234118938 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.234148026 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.234988928 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.235008001 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.235068083 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.235074997 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.235274076 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.312690020 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.312736034 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.312803984 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.312823057 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.312859058 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.312872887 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.312877893 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.313664913 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.313715935 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.313739061 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.313746929 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.313779116 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.313791037 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.314675093 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.314728022 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.314744949 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.314750910 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.314804077 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.315701008 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.315742016 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.315782070 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.315788031 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.315805912 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.315824032 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.317351103 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.317389011 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.317418098 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.317423105 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.317473888 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.318326950 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.318371058 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.318404913 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.318409920 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.318438053 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.318461895 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.318465948 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.319379091 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.319439888 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.319444895 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.319469929 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.319523096 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.319528103 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.319988966 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.320050001 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.320060015 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.320974112 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.321012020 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.321043015 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.321049929 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.321074009 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.364489079 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.368846893 CEST	443	49726	20.109.210.53	192.168.2.16
Oct 10, 2024 05:10:07.368952990 CEST	49726	443	192.168.2.16	20.109.210.53
Oct 10, 2024 05:10:07.381067038 CEST	49726	443	192.168.2.16	20.109.210.53
Oct 10, 2024 05:10:07.381124020 CEST	443	49726	20.109.210.53	192.168.2.16
Oct 10, 2024 05:10:07.382128954 CEST	443	49726	20.109.210.53	192.168.2.16
Oct 10, 2024 05:10:07.399840117 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.399887085 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.399918079 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.399930954 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.399960041 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.399971008 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.400515079 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.400554895 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.400589943 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.400595903 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.400623083 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.400640965 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.401837111 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.401875973 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.401901007 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.401906013 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.401932001 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.401946068 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.401953936 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.402683020 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.402724028 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.402740002 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.402745962 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.402781963 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.402801991 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.404124975 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.404130936 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.404278994 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.404325962 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.404352903 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.404357910 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.404393911 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.405234098 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.405275106 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.405292034 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.405298948 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.405322075 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.406132936 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.406178951 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.406192064 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.406208992 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.406234026 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.406804085 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.406821012 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.406848907 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.406853914 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.406879902 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.407836914 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.407840967 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.407885075 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.446481943 CEST	49726	443	192.168.2.16	20.109.210.53
Oct 10, 2024 05:10:07.458873034 CEST	49726	443	192.168.2.16	20.109.210.53
Oct 10, 2024 05:10:07.486682892 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.486711979 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.486768961 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.486773968 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.486785889 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.486815929 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.486838102 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.487823963 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.487843037 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.487886906 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.487894058 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.487926960 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.488682032 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.488699913 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.488766909 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.488773108 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.488900900 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.489439964 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.489458084 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.489500046 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.489506006 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.489532948 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.489545107 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.490370035 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.490390062 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.490468025 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.490473986 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.490537882 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.491122961 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.491141081 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.491204977 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.491209984 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.491235971 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.491247892 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.491924047 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.491954088 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.492120028 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.492126942 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.492142916 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.492186069 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.492455006 CEST	49724	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:07.492470980 CEST	443	49724	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:07.503405094 CEST	443	49726	20.109.210.53	192.168.2.16
Oct 10, 2024 05:10:07.503737926 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:07.503834963 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:07.503935099 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:07.504133940 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:07.504169941 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:07.680458069 CEST	443	49726	20.109.210.53	192.168.2.16
Oct 10, 2024 05:10:07.680516958 CEST	443	49726	20.109.210.53	192.168.2.16
Oct 10, 2024 05:10:07.680536985 CEST	443	49726	20.109.210.53	192.168.2.16
Oct 10, 2024 05:10:07.680557013 CEST	443	49726	20.109.210.53	192.168.2.16
Oct 10, 2024 05:10:07.680587053 CEST	49726	443	192.168.2.16	20.109.210.53
Oct 10, 2024 05:10:07.680630922 CEST	49726	443	192.168.2.16	20.109.210.53
Oct 10, 2024 05:10:07.680649042 CEST	443	49726	20.109.210.53	192.168.2.16
Oct 10, 2024 05:10:07.680691957 CEST	443	49726	20.109.210.53	192.168.2.16
Oct 10, 2024 05:10:07.680735111 CEST	443	49726	20.109.210.53	192.168.2.16
Oct 10, 2024 05:10:07.680752039 CEST	49726	443	192.168.2.16	20.109.210.53
Oct 10, 2024 05:10:07.680767059 CEST	443	49726	20.109.210.53	192.168.2.16
Oct 10, 2024 05:10:07.680793047 CEST	49726	443	192.168.2.16	20.109.210.53
Oct 10, 2024 05:10:07.680969954 CEST	443	49726	20.109.210.53	192.168.2.16
Oct 10, 2024 05:10:07.681042910 CEST	49726	443	192.168.2.16	20.109.210.53
Oct 10, 2024 05:10:07.681056976 CEST	443	49726	20.109.210.53	192.168.2.16
Oct 10, 2024 05:10:07.681229115 CEST	443	49726	20.109.210.53	192.168.2.16
Oct 10, 2024 05:10:07.681282997 CEST	49726	443	192.168.2.16	20.109.210.53
Oct 10, 2024 05:10:07.694837093 CEST	49726	443	192.168.2.16	20.109.210.53
Oct 10, 2024 05:10:07.694901943 CEST	443	49726	20.109.210.53	192.168.2.16
Oct 10, 2024 05:10:07.981077909 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:07.981491089 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:07.981527090 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:07.982974052 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:07.983042955 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:07.983598948 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:07.983700991 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:07.983916998 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:07.983936071 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.032511950 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.134159088 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.134303093 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.134402037 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.134404898 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.134474039 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.134562016 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.134573936 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.134603024 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.134659052 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.134690046 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.134845972 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.134934902 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.134988070 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.135004997 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.135252953 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.138446093 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.138597012 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.138665915 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.138681889 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.190561056 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.223973036 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.224178076 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.224247932 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.224277020 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.224373102 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.224464893 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.224484921 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.224499941 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.224667072 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.224704981 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.224718094 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.224844933 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.224934101 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.224935055 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.224966049 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.225152969 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.225166082 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.225229025 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.225507975 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.225689888 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.225758076 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.225773096 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.225857973 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.225943089 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.225985050 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.225996971 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.226146936 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.226402044 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.226581097 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.226660967 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.226752043 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.226768017 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.226989031 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.264633894 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.315561056 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.315680027 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.315690994 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.315722942 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.315779924 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.315817118 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.316044092 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.316091061 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.316101074 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.316149950 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.316210985 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.316216946 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.316247940 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.316303968 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.316308975 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.316416025 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.316476107 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.316479921 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.316519976 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.316618919 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.316684008 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.316793919 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.316857100 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.317003012 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.317060947 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.317537069 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.317605972 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.317648888 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.317713976 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.318401098 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.318578005 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.318603992 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.318670034 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.318694115 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.318782091 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.319279909 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.319355011 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.319439888 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.319495916 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.355896950 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.355983973 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.406091928 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.406197071 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.406225920 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.406280041 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.406373024 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.406420946 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.406480074 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.406600952 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.406635046 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.406753063 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.406858921 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.406910896 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.407071114 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.407126904 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.407305002 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.407357931 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.407435894 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.407491922 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.407663107 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.407716036 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.407761097 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.407810926 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.408143044 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.408199072 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.408262014 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.408315897 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.408520937 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.408572912 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.445838928 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.445992947 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.446090937 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.446115971 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.446155071 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.496772051 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.496869087 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.496911049 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.496968031 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.497014046 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.497070074 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.497112036 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.497188091 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.497210979 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.497267962 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.497396946 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.497467041 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.497519016 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.497570038 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.497719049 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.497776031 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.497817039 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.497869015 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.498471975 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.498492956 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.498531103 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.498543024 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.498558998 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.498577118 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.499269962 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.499317884 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.499336958 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.499350071 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.499373913 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.500232935 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.500261068 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.500309944 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.500323057 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.500423908 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.500938892 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.500957966 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.501004934 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.501013041 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.501054049 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.501750946 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.501773119 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.501820087 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.501827955 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.501857996 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.536511898 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.536571980 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.536631107 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.536648035 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.536676884 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.536695004 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.587622881 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.587687969 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.587799072 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.587825060 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.588022947 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.588290930 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.588335037 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.588426113 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.588430882 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.588824987 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.588897943 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.588946104 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.589040041 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.589045048 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.589082956 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.589118004 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.591636896 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.591692924 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.591737986 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.591749907 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.591779947 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.591976881 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.591991901 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.592194080 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.592247009 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.592274904 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.592335939 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.592561960 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.592845917 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.592900038 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.592938900 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.592950106 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.592983961 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.593621016 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.593667030 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.593694925 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.593705893 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.593744993 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.627058029 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.627099037 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.627135992 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.627151966 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.627194881 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.669512987 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.679066896 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.679096937 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.679145098 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.679174900 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.679240942 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.679282904 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.679305077 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.679318905 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.679928064 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.679980993 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.680006027 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.680012941 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.680043936 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.680418015 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.680490971 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.680496931 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.681361914 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.681401014 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.681440115 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.681444883 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.681499004 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.681503057 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.681526899 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.681559086 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.681577921 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.681646109 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.681652069 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.682342052 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.682415962 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.682420969 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.682462931 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.682528019 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.683110952 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.683160067 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.683202028 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.683206081 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.683234930 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.683314085 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.683357000 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.683425903 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.683428049 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.683453083 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.683496952 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.683516026 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.717746019 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.717808962 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.717849016 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.717861891 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.717889071 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.717931032 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.769736052 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.769772053 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.769869089 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.769932985 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.769996881 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.770195007 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.770224094 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.770276070 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.770303965 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.770320892 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.770354033 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.770921946 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.770942926 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.771004915 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.771013975 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.771051884 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.771831989 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.771858931 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.771898985 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.771909952 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.771934032 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.771950006 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.772883892 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.772939920 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.772986889 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.772995949 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.773017883 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.773034096 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.773040056 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.773053885 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.773082972 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.773108959 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.773113966 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.773144007 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.773775101 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.773792028 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.773827076 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.773839951 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.773857117 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.808218002 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.808286905 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.808325052 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.808393955 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.808428049 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.859513998 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.859954119 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.860264063 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:08.860280037 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.860723972 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.860817909 CEST	49729	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:08.860848904 CEST	443	49729	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:09.034719944 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 10, 2024 05:10:09.097520113 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 10, 2024 05:10:09.336504936 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 10, 2024 05:10:09.616199970 CEST	443	49715	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:09.616307974 CEST	443	49715	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:09.616379023 CEST	49715	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:09.943485022 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 10, 2024 05:10:11.028872967 CEST	49715	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:11.028872967 CEST	49715	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:11.028965950 CEST	443	49715	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:11.029217005 CEST	49715	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:11.144500971 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 10, 2024 05:10:13.551542044 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 10, 2024 05:10:13.903533936 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 10, 2024 05:10:14.100162029 CEST	443	49717	142.250.186.36	192.168.2.16
Oct 10, 2024 05:10:14.100243092 CEST	443	49717	142.250.186.36	192.168.2.16
Oct 10, 2024 05:10:14.100481987 CEST	49717	443	192.168.2.16	142.250.186.36
Oct 10, 2024 05:10:14.550756931 CEST	49717	443	192.168.2.16	142.250.186.36
Oct 10, 2024 05:10:14.550811052 CEST	443	49717	142.250.186.36	192.168.2.16
Oct 10, 2024 05:10:14.649039030 CEST	49730	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:14.649131060 CEST	443	49730	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:14.649245977 CEST	49730	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:14.649449110 CEST	49730	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:14.649471998 CEST	443	49730	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:15.110610008 CEST	443	49730	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:15.111001015 CEST	49730	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:15.111061096 CEST	443	49730	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:15.112653971 CEST	443	49730	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:15.112828016 CEST	49730	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:15.113827944 CEST	49730	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:15.113919973 CEST	443	49730	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:15.114053011 CEST	49730	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:15.114073038 CEST	443	49730	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:15.165641069 CEST	49730	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:15.235862970 CEST	443	49730	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:15.235950947 CEST	443	49730	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:15.236042023 CEST	49730	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:15.236524105 CEST	49730	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:15.236567974 CEST	443	49730	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:15.237729073 CEST	49731	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:15.237832069 CEST	443	49731	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:15.237935066 CEST	49731	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:15.238209963 CEST	49731	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:15.238238096 CEST	443	49731	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:15.323620081 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 10, 2024 05:10:15.725985050 CEST	443	49731	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:15.726439953 CEST	49731	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:15.726510048 CEST	443	49731	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:15.730087042 CEST	443	49731	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:15.730189085 CEST	49731	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:15.730534077 CEST	49731	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:15.730629921 CEST	443	49731	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:15.730676889 CEST	49731	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:15.730804920 CEST	49731	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:15.730848074 CEST	443	49731	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:15.730915070 CEST	49731	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:15.775410891 CEST	443	49731	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.164617062 CEST	443	49731	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.164675951 CEST	443	49731	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.164715052 CEST	443	49731	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.164731026 CEST	49731	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:16.164757967 CEST	443	49731	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.164772987 CEST	443	49731	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.164802074 CEST	49731	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:16.164865017 CEST	443	49731	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.164901972 CEST	49731	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:16.164918900 CEST	443	49731	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.164943933 CEST	443	49731	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.165002108 CEST	49731	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:16.166774035 CEST	49731	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:16.166795969 CEST	443	49731	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.191589117 CEST	49732	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:16.191643000 CEST	443	49732	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:16.191706896 CEST	49732	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:16.193762064 CEST	49732	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:16.193792105 CEST	443	49732	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:16.207154036 CEST	49733	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:16.207201004 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.207282066 CEST	49733	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:16.207583904 CEST	49733	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:16.207598925 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.657828093 CEST	443	49732	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:16.658332109 CEST	49732	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:16.658375025 CEST	443	49732	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:16.659940958 CEST	443	49732	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:16.660022020 CEST	49732	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:16.660437107 CEST	49732	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:16.660547018 CEST	443	49732	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:16.660634995 CEST	49732	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:16.660648108 CEST	443	49732	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:16.671730042 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.672024965 CEST	49733	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:16.672058105 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.672522068 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.672900915 CEST	49733	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:16.672980070 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.673147917 CEST	49733	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:16.710535049 CEST	49732	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:16.715446949 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.784586906 CEST	443	49732	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:16.784816980 CEST	443	49732	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:16.784917116 CEST	49732	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:16.785691977 CEST	49732	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:16.785742044 CEST	443	49732	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:16.818250895 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.818377972 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.818445921 CEST	49733	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:16.818461895 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.818490982 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.818536043 CEST	49733	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:16.818574905 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.818708897 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.818749905 CEST	49733	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:16.818763971 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.818849087 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.818897963 CEST	49733	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:16.818905115 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.819001913 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.819052935 CEST	49733	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:16.819057941 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.870568037 CEST	49733	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:16.870601892 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.906655073 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.906759024 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.906836987 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.906858921 CEST	49733	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:16.906882048 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.906898975 CEST	49733	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:16.906968117 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.907012939 CEST	49733	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:16.907020092 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.907187939 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.907233000 CEST	49733	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:16.907238960 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.907706022 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.907758951 CEST	49733	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:16.907764912 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.907849073 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.907895088 CEST	49733	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:16.907901049 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.908632040 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.908684969 CEST	49733	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:16.908691883 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.908797979 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.908842087 CEST	49733	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:16.908847094 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.908921957 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.908968925 CEST	49733	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:16.908974886 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.909542084 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.909595966 CEST	49733	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:16.909603119 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.909719944 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.909763098 CEST	49733	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:16.909769058 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.910403013 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.910445929 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.910451889 CEST	49733	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:16.910463095 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.910501957 CEST	49733	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:16.994879007 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.994968891 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.995016098 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.995053053 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.995085955 CEST	49733	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:16.995111942 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.995136023 CEST	49733	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:16.995182037 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.995235920 CEST	49733	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:16.995243073 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.995289087 CEST	49733	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:16.995358944 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.995419025 CEST	49733	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:16.996004105 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.996052980 CEST	49733	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:16.996160030 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.996212006 CEST	49733	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:16.996329069 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.996377945 CEST	49733	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:16.996933937 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.996997118 CEST	49733	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:16.997008085 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.997050047 CEST	49733	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:16.997059107 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.997173071 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.997214079 CEST	49733	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:16.997319937 CEST	49733	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:16.997339964 CEST	443	49733	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:16.997376919 CEST	49733	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:16.997407913 CEST	49733	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.001068115 CEST	49734	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:17.001121998 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.001205921 CEST	49734	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:17.001441002 CEST	49734	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:17.001461029 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.016716957 CEST	49735	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.016758919 CEST	443	49735	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.016827106 CEST	49735	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.017098904 CEST	49736	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.017151117 CEST	443	49736	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.017214060 CEST	49736	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.017472982 CEST	49737	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.017523050 CEST	443	49737	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.017573118 CEST	49737	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.017879009 CEST	49738	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.017885923 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.017932892 CEST	49738	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.018412113 CEST	49736	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.018436909 CEST	443	49736	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.018613100 CEST	49735	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.018630981 CEST	443	49735	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.018945932 CEST	49737	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.018961906 CEST	443	49737	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.019083977 CEST	49738	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.019090891 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.459675074 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.460182905 CEST	49734	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:17.460247993 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.460731030 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.461045980 CEST	49734	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:17.461137056 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.461179018 CEST	49734	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:17.472654104 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.473026991 CEST	49738	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.473043919 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.474160910 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.474257946 CEST	49738	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.475369930 CEST	49738	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.475447893 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.475558996 CEST	49738	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.475565910 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.477349043 CEST	443	49737	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.477587938 CEST	49737	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.477601051 CEST	443	49737	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.477766991 CEST	443	49735	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.477931976 CEST	49735	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.477967978 CEST	443	49735	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.480613947 CEST	443	49735	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.480678082 CEST	49735	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.480982065 CEST	49735	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.480986118 CEST	443	49737	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.481054068 CEST	49737	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.481126070 CEST	49735	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.481134892 CEST	443	49735	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.481353045 CEST	49737	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.481434107 CEST	443	49737	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.481435061 CEST	49737	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.481520891 CEST	443	49735	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.481906891 CEST	443	49736	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.482088089 CEST	49736	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.482120037 CEST	443	49736	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.484875917 CEST	443	49736	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.484968901 CEST	49736	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.485750914 CEST	49736	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.485817909 CEST	49736	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.485831022 CEST	443	49736	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.485857010 CEST	443	49736	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.507405996 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.511552095 CEST	49734	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:17.523416996 CEST	443	49737	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.527534962 CEST	49736	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.527535915 CEST	49735	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.527535915 CEST	49737	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.527550936 CEST	443	49735	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.527551889 CEST	443	49737	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.527554035 CEST	443	49736	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.527579069 CEST	49738	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.575584888 CEST	49736	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.575587034 CEST	49735	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.575587034 CEST	49737	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.594253063 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.594306946 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.594342947 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.594366074 CEST	49734	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:17.594378948 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.594417095 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.594429016 CEST	49734	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:17.594439030 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.594485044 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.594499111 CEST	49734	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:17.594506979 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.594551086 CEST	49734	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:17.594556093 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.594785929 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.594837904 CEST	49734	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:17.594845057 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.616477966 CEST	443	49735	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.616529942 CEST	443	49735	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.616584063 CEST	49735	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.616591930 CEST	443	49735	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.616606951 CEST	443	49735	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.616651058 CEST	49735	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.616661072 CEST	443	49735	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.616733074 CEST	443	49735	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.616780996 CEST	49735	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.617265940 CEST	49735	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.617285013 CEST	443	49735	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.623775005 CEST	443	49737	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.623823881 CEST	443	49737	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.623857975 CEST	443	49737	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.623871088 CEST	49737	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.623893976 CEST	443	49737	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.623927116 CEST	49737	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.623933077 CEST	443	49737	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.623954058 CEST	443	49737	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.623997927 CEST	49737	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.624525070 CEST	49737	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.624536991 CEST	443	49737	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.627321959 CEST	49739	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.627357006 CEST	443	49739	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.627422094 CEST	49739	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.627456903 CEST	49740	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.627504110 CEST	443	49740	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.627566099 CEST	49740	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.627679110 CEST	49739	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.627692938 CEST	443	49739	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.627875090 CEST	49740	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.627892971 CEST	443	49740	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.634083986 CEST	443	49736	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.634128094 CEST	443	49736	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.634181976 CEST	443	49736	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.634243011 CEST	443	49736	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.634294987 CEST	49736	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.634294987 CEST	49736	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.634294987 CEST	49736	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.634855032 CEST	49736	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.634885073 CEST	443	49736	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.636725903 CEST	49741	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.636786938 CEST	443	49741	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.636864901 CEST	49741	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.637038946 CEST	49741	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.637058973 CEST	443	49741	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.639635086 CEST	49734	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:17.639664888 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.681601048 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.681705952 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.681792974 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.681849957 CEST	49734	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:17.681850910 CEST	49734	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:17.681874037 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.681905985 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.681989908 CEST	49734	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:17.682024002 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.682168961 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.682229996 CEST	49734	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:17.682260036 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.682354927 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.682410955 CEST	49734	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:17.682425976 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.682647943 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.682703972 CEST	49734	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:17.682715893 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.682802916 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.682857037 CEST	49734	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:17.682868958 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.682948112 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.683001041 CEST	49734	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:17.683012962 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.683418036 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.683476925 CEST	49734	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:17.683489084 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.683593988 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.683650970 CEST	49734	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:17.683662891 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.684267044 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.684330940 CEST	49734	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:17.684341908 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.684442043 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.684509993 CEST	49734	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:17.684521914 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.699664116 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.699707031 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.699737072 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.699806929 CEST	49738	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.699822903 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.699846029 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.699866056 CEST	49738	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.699893951 CEST	49738	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.700232983 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.700419903 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.700459003 CEST	49738	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.700464964 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.700491905 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.700532913 CEST	49738	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.700537920 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.704370975 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.704428911 CEST	49738	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.704435110 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.735594034 CEST	49734	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:17.751538038 CEST	49738	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.768418074 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.768626928 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.768709898 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.768791914 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.768810987 CEST	49734	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:17.768883944 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.768929005 CEST	49734	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:17.768992901 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.769012928 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.769098043 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.769119024 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.769180059 CEST	49734	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:17.769181013 CEST	49734	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:17.769181013 CEST	49734	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:17.769208908 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.769239902 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.769284010 CEST	49734	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:17.769331932 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.769395113 CEST	49734	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:17.769426107 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.769459963 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.769488096 CEST	49734	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:17.769503117 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.769591093 CEST	49734	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:17.769957066 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.770031929 CEST	49734	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:17.770044088 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.770112038 CEST	49734	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:17.770123959 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.770301104 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.770364046 CEST	49734	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:17.770438910 CEST	49734	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:17.770469904 CEST	443	49734	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:17.786281109 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.786412001 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.786439896 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.786468029 CEST	49738	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.786480904 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.786516905 CEST	49738	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.786521912 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.786786079 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.786827087 CEST	49738	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.786832094 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.787267923 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.787288904 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.787317038 CEST	49738	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.787322044 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.787364960 CEST	49738	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.787427902 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.788475037 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.788517952 CEST	49738	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.788523912 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.788561106 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.788603067 CEST	49738	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.788608074 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.788661957 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.788687944 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.788708925 CEST	49738	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.788712978 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.788748980 CEST	49738	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.789112091 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.789275885 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.789315939 CEST	49738	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.789320946 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.829092026 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.829129934 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.829195976 CEST	49738	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.829211950 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.829257965 CEST	49738	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.873092890 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.873136044 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.873198986 CEST	49738	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.873210907 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.873249054 CEST	49738	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.873274088 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.873313904 CEST	49738	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.873542070 CEST	49738	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.873554945 CEST	443	49738	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.877265930 CEST	49742	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.877370119 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:17.877481937 CEST	49742	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.877691031 CEST	49742	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:17.877712965 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.082079887 CEST	443	49739	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.082494020 CEST	49739	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.082556963 CEST	443	49739	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.082722902 CEST	443	49740	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.082900047 CEST	49740	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.082959890 CEST	443	49740	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.084013939 CEST	443	49739	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.084122896 CEST	49739	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.084407091 CEST	49739	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.084422112 CEST	443	49740	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.084495068 CEST	443	49739	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.084517956 CEST	49740	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.084553003 CEST	49739	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.084773064 CEST	49740	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.084857941 CEST	443	49740	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.084882021 CEST	49740	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.111588001 CEST	443	49741	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.111916065 CEST	49741	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.111953020 CEST	443	49741	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.113380909 CEST	443	49741	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.113502026 CEST	49741	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.113805056 CEST	49741	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.113889933 CEST	443	49741	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.113950014 CEST	49741	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.113964081 CEST	443	49741	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.127418041 CEST	443	49740	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.127438068 CEST	443	49739	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.127605915 CEST	49739	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.127609015 CEST	49740	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.127628088 CEST	443	49739	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.127635002 CEST	443	49740	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.158574104 CEST	49741	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.174599886 CEST	49740	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.174606085 CEST	49739	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.228091955 CEST	443	49739	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.228256941 CEST	443	49739	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.228342056 CEST	49739	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.228358984 CEST	443	49739	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.228389978 CEST	443	49739	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.228442907 CEST	49739	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.228491068 CEST	443	49739	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.228645086 CEST	443	49739	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.228701115 CEST	49739	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.229532957 CEST	49739	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.229576111 CEST	443	49739	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.231131077 CEST	443	49740	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.231187105 CEST	443	49740	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.231224060 CEST	443	49740	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.231261015 CEST	49740	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.231278896 CEST	443	49740	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.231295109 CEST	443	49740	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.231318951 CEST	49740	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.231368065 CEST	443	49740	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.231404066 CEST	49740	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.232093096 CEST	49740	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.232110023 CEST	443	49740	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.232125998 CEST	49740	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.232167006 CEST	49740	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.240041018 CEST	443	49741	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.240180016 CEST	443	49741	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.240236998 CEST	49741	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.240279913 CEST	443	49741	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.240375996 CEST	443	49741	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.240504980 CEST	49741	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.240535021 CEST	443	49741	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.240648031 CEST	443	49741	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.240689993 CEST	49741	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.240943909 CEST	49741	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.240974903 CEST	443	49741	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.335985899 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.336363077 CEST	49742	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.336410046 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.339874983 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.339973927 CEST	49742	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.340327978 CEST	49742	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.340416908 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.340615988 CEST	49742	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.340636969 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.365705013 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 10, 2024 05:10:18.382011890 CEST	49742	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.494846106 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.494980097 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.495135069 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.495208979 CEST	49742	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.495220900 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.495275974 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.495301962 CEST	49742	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.495382071 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.495456934 CEST	49742	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.495471001 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.495574951 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.495629072 CEST	49742	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.495640993 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.495969057 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.496028900 CEST	49742	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.496043921 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.541635036 CEST	49742	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.541692019 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.587157965 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.587302923 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.587373972 CEST	49742	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.587409019 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.587441921 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.587469101 CEST	49742	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.587599993 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.587660074 CEST	49742	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.587699890 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.587788105 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.587846994 CEST	49742	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.587863922 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.587949038 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.588011026 CEST	49742	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.588042021 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.588123083 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.588181019 CEST	49742	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.588197947 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.588295937 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.588356972 CEST	49742	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.588375092 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.588476896 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.588543892 CEST	49742	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.588557959 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.588633060 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.588685036 CEST	49742	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.588699102 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.588799953 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.588852882 CEST	49742	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.588865995 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.588943005 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.588999033 CEST	49742	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.589011908 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.589492083 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.589560032 CEST	49742	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.589565992 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.589591980 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.589643002 CEST	49742	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.672599077 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.672709942 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.672749996 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.672805071 CEST	49742	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.672827005 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.672843933 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:18.672864914 CEST	49742	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.672893047 CEST	49742	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.690329075 CEST	49742	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:18.690363884 CEST	443	49742	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:23.517582893 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 10, 2024 05:10:26.591252089 CEST	49743	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:26.591346979 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:26.591481924 CEST	49743	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:26.591810942 CEST	49743	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:26.591872931 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.053132057 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.053667068 CEST	49743	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:27.053730965 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.055190086 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.055751085 CEST	49743	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:27.055840969 CEST	49743	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:27.055869102 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.056083918 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.096786022 CEST	49743	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:27.290760994 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.290894032 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.290971041 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.291044950 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.291079998 CEST	49743	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:27.291101933 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.291131973 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.291220903 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.291300058 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.291337013 CEST	49743	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:27.291337013 CEST	49743	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:27.291446924 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.291512966 CEST	49743	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:27.291552067 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.291605949 CEST	49743	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:27.291620970 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.296592951 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.296785116 CEST	49743	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:27.296844959 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.336391926 CEST	49743	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:27.377223969 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.377376080 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.377470970 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.377556086 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.377628088 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.377695084 CEST	49743	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:27.377695084 CEST	49743	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:27.377732038 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.377791882 CEST	49743	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:27.378325939 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.378498077 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.378587008 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.378635883 CEST	49743	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:27.378669024 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.378719091 CEST	49743	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:27.378729105 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.378828049 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.378891945 CEST	49743	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:27.378899097 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.379753113 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.379822969 CEST	49743	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:27.379829884 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.379936934 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.379992008 CEST	49743	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:27.379998922 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.380075932 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.380120039 CEST	49743	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:27.380125999 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.380330086 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.380362988 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.380379915 CEST	49743	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:27.380387068 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.380430937 CEST	49743	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:27.425209999 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.425407887 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.425494909 CEST	49743	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:27.425555944 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.425590038 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.425646067 CEST	49743	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:27.425785065 CEST	49743	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:27.425822020 CEST	443	49743	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.425848007 CEST	49743	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:27.425889969 CEST	49743	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:27.428575039 CEST	49744	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:27.428620100 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.428699970 CEST	49744	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:27.428936005 CEST	49744	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:27.428950071 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.887856960 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.888834000 CEST	49744	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:27.888865948 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.889303923 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.889914036 CEST	49744	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:27.889997005 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.890144110 CEST	49744	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:27.931407928 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:27.943356037 CEST	49744	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:27.975136042 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 10, 2024 05:10:28.049173117 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:28.049242020 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:28.049321890 CEST	49744	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:28.049346924 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:28.055167913 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:28.055315018 CEST	49744	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:28.055336952 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:28.056233883 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:28.057118893 CEST	49744	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:28.057128906 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:28.060538054 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:28.060604095 CEST	49744	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:28.060616016 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:28.065851927 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:28.065901995 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:28.065927029 CEST	49744	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:28.065939903 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:28.065989971 CEST	49744	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:28.065995932 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:28.118733883 CEST	49744	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:28.136795044 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:28.136909008 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:28.136986017 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:28.137094021 CEST	49744	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:28.137159109 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:28.137248039 CEST	49744	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:28.137563944 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:28.137676954 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:28.137742043 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:28.137861013 CEST	49744	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:28.137923956 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:28.138011932 CEST	49744	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:28.138323069 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:28.138442993 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:28.138500929 CEST	49744	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:28.138505936 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:28.138534069 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:28.138586044 CEST	49744	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:28.138624907 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:28.139030933 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:28.139092922 CEST	49744	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:28.139107943 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:28.139192104 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:28.139245987 CEST	49744	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:28.139257908 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:28.139708042 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:28.139774084 CEST	49744	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:28.139786005 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:28.139873981 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:28.139928102 CEST	49744	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:28.139940023 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:28.142587900 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:28.142653942 CEST	49744	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:28.142664909 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:28.142772913 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:28.142910004 CEST	443	49744	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:28.142940998 CEST	49744	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:28.143009901 CEST	49744	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:28.143009901 CEST	49744	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:28.143059015 CEST	49744	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:33.797036886 CEST	49745	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:33.797082901 CEST	443	49745	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:33.797188044 CEST	49745	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:33.797432899 CEST	49745	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:33.797447920 CEST	443	49745	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:34.263683081 CEST	443	49745	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:34.264020920 CEST	49745	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:34.264035940 CEST	443	49745	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:34.264692068 CEST	443	49745	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:34.265017033 CEST	49745	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:34.265100956 CEST	443	49745	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:34.265192032 CEST	49745	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:34.311391115 CEST	443	49745	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:34.395741940 CEST	443	49745	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:34.395900965 CEST	443	49745	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:34.396009922 CEST	49745	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:34.396239996 CEST	49745	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:34.396251917 CEST	443	49745	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:34.396262884 CEST	49745	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:34.396303892 CEST	49745	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:34.397349119 CEST	49746	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:34.397366047 CEST	443	49746	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:34.397432089 CEST	49746	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:34.397743940 CEST	49746	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:34.397748947 CEST	443	49746	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:34.880168915 CEST	443	49746	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:34.880577087 CEST	49746	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:34.880613089 CEST	443	49746	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:34.881086111 CEST	443	49746	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:34.881406069 CEST	49746	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:34.881489992 CEST	443	49746	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:34.881534100 CEST	49746	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:34.881649017 CEST	49746	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:34.881695032 CEST	443	49746	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:34.881778955 CEST	49746	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:34.881795883 CEST	443	49746	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:35.308407068 CEST	443	49746	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:35.308540106 CEST	443	49746	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:35.308710098 CEST	49746	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:35.308732986 CEST	443	49746	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:35.308758020 CEST	443	49746	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:35.308809042 CEST	49746	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:35.315119028 CEST	49746	443	192.168.2.16	104.19.229.21
Oct 10, 2024 05:10:35.315139055 CEST	443	49746	104.19.229.21	192.168.2.16
Oct 10, 2024 05:10:35.358860016 CEST	49747	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:35.358928919 CEST	443	49747	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:35.359132051 CEST	49747	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:35.359335899 CEST	49747	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:35.359359026 CEST	443	49747	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:35.820777893 CEST	443	49747	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:35.821141005 CEST	49747	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:35.821173906 CEST	443	49747	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:35.821638107 CEST	443	49747	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:35.821949005 CEST	49747	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:35.822030067 CEST	443	49747	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:35.822088003 CEST	49747	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:35.867394924 CEST	443	49747	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:35.970458984 CEST	443	49747	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:35.970570087 CEST	443	49747	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:35.970647097 CEST	49747	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:35.971343994 CEST	49747	443	192.168.2.16	104.19.230.21
Oct 10, 2024 05:10:35.971360922 CEST	443	49747	104.19.230.21	192.168.2.16
Oct 10, 2024 05:10:38.230662107 CEST	49748	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:38.230717897 CEST	443	49748	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:38.230806112 CEST	49749	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:38.230838060 CEST	49748	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:38.230889082 CEST	443	49749	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:38.230979919 CEST	49749	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:38.231065989 CEST	49748	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:38.231081963 CEST	443	49748	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:38.231197119 CEST	49749	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:38.231231928 CEST	443	49749	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:38.721816063 CEST	443	49749	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:38.722206116 CEST	49749	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:38.722269058 CEST	443	49749	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:38.722795010 CEST	443	49749	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:38.723202944 CEST	49749	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:38.723323107 CEST	443	49749	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:38.723454952 CEST	49749	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:38.723516941 CEST	49749	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:38.723547935 CEST	443	49749	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:38.725615978 CEST	443	49748	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:38.725878954 CEST	49748	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:38.725902081 CEST	443	49748	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:38.727029085 CEST	443	49748	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:38.727299929 CEST	49748	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:38.727510929 CEST	443	49748	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:38.780625105 CEST	49748	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:40.962727070 CEST	443	49749	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:41.013641119 CEST	49749	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:41.013674021 CEST	443	49749	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:41.061646938 CEST	49749	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:44.505425930 CEST	49750	443	192.168.2.16	20.109.210.53
Oct 10, 2024 05:10:44.505534887 CEST	443	49750	20.109.210.53	192.168.2.16
Oct 10, 2024 05:10:44.505676031 CEST	49750	443	192.168.2.16	20.109.210.53
Oct 10, 2024 05:10:44.506196022 CEST	49750	443	192.168.2.16	20.109.210.53
Oct 10, 2024 05:10:44.506233931 CEST	443	49750	20.109.210.53	192.168.2.16
Oct 10, 2024 05:10:44.762830973 CEST	49698	80	192.168.2.16	93.184.221.240
Oct 10, 2024 05:10:44.762933969 CEST	49699	80	192.168.2.16	93.184.221.240
Oct 10, 2024 05:10:44.768170118 CEST	80	49698	93.184.221.240	192.168.2.16
Oct 10, 2024 05:10:44.768244982 CEST	49698	80	192.168.2.16	93.184.221.240
Oct 10, 2024 05:10:44.768412113 CEST	80	49699	93.184.221.240	192.168.2.16
Oct 10, 2024 05:10:44.768455029 CEST	49699	80	192.168.2.16	93.184.221.240
Oct 10, 2024 05:10:45.298440933 CEST	443	49750	20.109.210.53	192.168.2.16
Oct 10, 2024 05:10:45.298528910 CEST	49750	443	192.168.2.16	20.109.210.53
Oct 10, 2024 05:10:45.300430059 CEST	49750	443	192.168.2.16	20.109.210.53
Oct 10, 2024 05:10:45.300445080 CEST	443	49750	20.109.210.53	192.168.2.16
Oct 10, 2024 05:10:45.300774097 CEST	443	49750	20.109.210.53	192.168.2.16
Oct 10, 2024 05:10:45.302705050 CEST	49750	443	192.168.2.16	20.109.210.53
Oct 10, 2024 05:10:45.343441010 CEST	443	49750	20.109.210.53	192.168.2.16
Oct 10, 2024 05:10:45.553467035 CEST	443	49750	20.109.210.53	192.168.2.16
Oct 10, 2024 05:10:45.553497076 CEST	443	49750	20.109.210.53	192.168.2.16
Oct 10, 2024 05:10:45.553515911 CEST	443	49750	20.109.210.53	192.168.2.16
Oct 10, 2024 05:10:45.553615093 CEST	49750	443	192.168.2.16	20.109.210.53
Oct 10, 2024 05:10:45.553684950 CEST	443	49750	20.109.210.53	192.168.2.16
Oct 10, 2024 05:10:45.553721905 CEST	49750	443	192.168.2.16	20.109.210.53
Oct 10, 2024 05:10:45.553754091 CEST	49750	443	192.168.2.16	20.109.210.53
Oct 10, 2024 05:10:45.554421902 CEST	443	49750	20.109.210.53	192.168.2.16
Oct 10, 2024 05:10:45.554474115 CEST	443	49750	20.109.210.53	192.168.2.16
Oct 10, 2024 05:10:45.554538965 CEST	49750	443	192.168.2.16	20.109.210.53
Oct 10, 2024 05:10:45.554539919 CEST	49750	443	192.168.2.16	20.109.210.53
Oct 10, 2024 05:10:45.554544926 CEST	443	49750	20.109.210.53	192.168.2.16
Oct 10, 2024 05:10:45.554624081 CEST	49750	443	192.168.2.16	20.109.210.53
Oct 10, 2024 05:10:45.556112051 CEST	49750	443	192.168.2.16	20.109.210.53
Oct 10, 2024 05:10:45.556150913 CEST	443	49750	20.109.210.53	192.168.2.16
Oct 10, 2024 05:10:45.556175947 CEST	49750	443	192.168.2.16	20.109.210.53
Oct 10, 2024 05:10:45.556191921 CEST	443	49750	20.109.210.53	192.168.2.16
Oct 10, 2024 05:10:45.960781097 CEST	443	49749	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:45.961014032 CEST	443	49749	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:45.961098909 CEST	49749	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:47.018600941 CEST	49749	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:47.018600941 CEST	49749	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:47.018677950 CEST	443	49749	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:47.018764019 CEST	49749	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:48.845814943 CEST	443	49748	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:48.846014977 CEST	443	49748	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:48.846112967 CEST	49748	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:49.015598059 CEST	49748	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:49.015628099 CEST	443	49748	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:50.221657991 CEST	49710	80	192.168.2.16	35.241.186.140
Oct 10, 2024 05:10:50.226483107 CEST	80	49710	35.241.186.140	192.168.2.16
Oct 10, 2024 05:10:56.332268953 CEST	49751	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:56.332375050 CEST	443	49751	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:56.332472086 CEST	49751	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:56.332812071 CEST	49751	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:56.332849979 CEST	443	49751	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:56.334081888 CEST	49752	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:56.334148884 CEST	443	49752	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:56.334328890 CEST	49752	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:56.334415913 CEST	49752	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:56.334433079 CEST	443	49752	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:56.828846931 CEST	443	49752	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:56.829283953 CEST	49752	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:56.829318047 CEST	443	49752	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:56.831015110 CEST	443	49752	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:56.831361055 CEST	49752	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:56.831502914 CEST	443	49752	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:56.831516981 CEST	49752	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:56.839435101 CEST	443	49751	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:56.840006113 CEST	49751	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:56.840040922 CEST	443	49751	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:56.840384007 CEST	443	49751	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:56.840791941 CEST	49751	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:56.840852022 CEST	443	49751	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:56.875441074 CEST	443	49752	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:56.879765987 CEST	49752	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:56.894670963 CEST	49751	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:59.177378893 CEST	443	49752	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:59.224822998 CEST	49752	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:59.224886894 CEST	443	49752	50.6.153.26	192.168.2.16
Oct 10, 2024 05:10:59.272838116 CEST	49752	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:10:59.769946098 CEST	49710	80	192.168.2.16	35.241.186.140
Oct 10, 2024 05:10:59.770766020 CEST	49710	80	192.168.2.16	35.241.186.140
Oct 10, 2024 05:10:59.775515079 CEST	80	49710	35.241.186.140	192.168.2.16
Oct 10, 2024 05:10:59.775583029 CEST	49710	80	192.168.2.16	35.241.186.140
Oct 10, 2024 05:11:03.577018976 CEST	49754	443	192.168.2.16	142.250.186.36
Oct 10, 2024 05:11:03.577060938 CEST	443	49754	142.250.186.36	192.168.2.16
Oct 10, 2024 05:11:03.577158928 CEST	49754	443	192.168.2.16	142.250.186.36
Oct 10, 2024 05:11:03.577538013 CEST	49754	443	192.168.2.16	142.250.186.36
Oct 10, 2024 05:11:03.577558994 CEST	443	49754	142.250.186.36	192.168.2.16
Oct 10, 2024 05:11:04.178803921 CEST	443	49752	50.6.153.26	192.168.2.16
Oct 10, 2024 05:11:04.178980112 CEST	443	49752	50.6.153.26	192.168.2.16
Oct 10, 2024 05:11:04.179054976 CEST	49752	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:11:04.210716963 CEST	443	49754	142.250.186.36	192.168.2.16
Oct 10, 2024 05:11:04.211028099 CEST	49754	443	192.168.2.16	142.250.186.36
Oct 10, 2024 05:11:04.211050034 CEST	443	49754	142.250.186.36	192.168.2.16
Oct 10, 2024 05:11:04.211421013 CEST	443	49754	142.250.186.36	192.168.2.16
Oct 10, 2024 05:11:04.211735010 CEST	49754	443	192.168.2.16	142.250.186.36
Oct 10, 2024 05:11:04.211807966 CEST	443	49754	142.250.186.36	192.168.2.16
Oct 10, 2024 05:11:04.262716055 CEST	49754	443	192.168.2.16	142.250.186.36
Oct 10, 2024 05:11:05.029537916 CEST	49752	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:11:05.029580116 CEST	443	49752	50.6.153.26	192.168.2.16
Oct 10, 2024 05:11:05.029594898 CEST	49752	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:11:05.029661894 CEST	49752	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:11:06.962610960 CEST	443	49751	50.6.153.26	192.168.2.16
Oct 10, 2024 05:11:06.962814093 CEST	443	49751	50.6.153.26	192.168.2.16
Oct 10, 2024 05:11:06.962949991 CEST	49751	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:11:07.027782917 CEST	49751	443	192.168.2.16	50.6.153.26
Oct 10, 2024 05:11:07.027817011 CEST	443	49751	50.6.153.26	192.168.2.16
Oct 10, 2024 05:11:14.127506018 CEST	443	49754	142.250.186.36	192.168.2.16
Oct 10, 2024 05:11:14.127577066 CEST	443	49754	142.250.186.36	192.168.2.16
Oct 10, 2024 05:11:14.127770901 CEST	49754	443	192.168.2.16	142.250.186.36
Oct 10, 2024 05:11:15.028605938 CEST	49754	443	192.168.2.16	142.250.186.36
Oct 10, 2024 05:11:15.028631926 CEST	443	49754	142.250.186.36	192.168.2.16
Oct 10, 2024 05:11:35.076088905 CEST	49701	80	192.168.2.16	192.229.221.95
Oct 10, 2024 05:11:35.083173037 CEST	80	49701	192.229.221.95	192.168.2.16
Oct 10, 2024 05:11:35.083312988 CEST	49701	80	192.168.2.16	192.229.221.95

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 10, 2024 05:09:58.750241995 CEST	53	50593	1.1.1.1	192.168.2.16
Oct 10, 2024 05:09:58.807148933 CEST	53	64630	1.1.1.1	192.168.2.16
Oct 10, 2024 05:09:59.658716917 CEST	57816	53	192.168.2.16	1.1.1.1
Oct 10, 2024 05:09:59.659120083 CEST	53795	53	192.168.2.16	1.1.1.1
Oct 10, 2024 05:09:59.680576086 CEST	53	57816	1.1.1.1	192.168.2.16
Oct 10, 2024 05:09:59.680598021 CEST	53	53795	1.1.1.1	192.168.2.16
Oct 10, 2024 05:09:59.835659981 CEST	53	58807	1.1.1.1	192.168.2.16
Oct 10, 2024 05:10:00.338907957 CEST	59436	53	192.168.2.16	1.1.1.1
Oct 10, 2024 05:10:00.339128971 CEST	53038	53	192.168.2.16	1.1.1.1
Oct 10, 2024 05:10:00.350445032 CEST	53	59436	1.1.1.1	192.168.2.16
Oct 10, 2024 05:10:00.688332081 CEST	53	53038	1.1.1.1	192.168.2.16
Oct 10, 2024 05:10:02.081572056 CEST	57715	53	192.168.2.16	1.1.1.1
Oct 10, 2024 05:10:02.081799984 CEST	56865	53	192.168.2.16	1.1.1.1
Oct 10, 2024 05:10:02.090692997 CEST	53	56865	1.1.1.1	192.168.2.16
Oct 10, 2024 05:10:02.097635984 CEST	53	57715	1.1.1.1	192.168.2.16
Oct 10, 2024 05:10:02.902961969 CEST	50428	53	192.168.2.16	1.1.1.1
Oct 10, 2024 05:10:02.903072119 CEST	63968	53	192.168.2.16	1.1.1.1
Oct 10, 2024 05:10:02.915361881 CEST	53	63968	1.1.1.1	192.168.2.16
Oct 10, 2024 05:10:02.917026997 CEST	53	50428	1.1.1.1	192.168.2.16
Oct 10, 2024 05:10:03.523376942 CEST	59107	53	192.168.2.16	1.1.1.1
Oct 10, 2024 05:10:03.523725986 CEST	49582	53	192.168.2.16	1.1.1.1
Oct 10, 2024 05:10:03.530333042 CEST	53	59107	1.1.1.1	192.168.2.16
Oct 10, 2024 05:10:03.530642033 CEST	53	49582	1.1.1.1	192.168.2.16
Oct 10, 2024 05:10:03.577405930 CEST	65523	53	192.168.2.16	1.1.1.1
Oct 10, 2024 05:10:03.577821016 CEST	63691	53	192.168.2.16	1.1.1.1
Oct 10, 2024 05:10:03.584630013 CEST	53	65523	1.1.1.1	192.168.2.16
Oct 10, 2024 05:10:03.584923029 CEST	53	63691	1.1.1.1	192.168.2.16
Oct 10, 2024 05:10:04.469005108 CEST	57791	53	192.168.2.16	1.1.1.1
Oct 10, 2024 05:10:04.469228983 CEST	56679	53	192.168.2.16	1.1.1.1
Oct 10, 2024 05:10:04.476494074 CEST	53	57791	1.1.1.1	192.168.2.16
Oct 10, 2024 05:10:04.477416992 CEST	53	56679	1.1.1.1	192.168.2.16
Oct 10, 2024 05:10:04.487078905 CEST	61462	53	192.168.2.16	1.1.1.1
Oct 10, 2024 05:10:04.487289906 CEST	56448	53	192.168.2.16	1.1.1.1
Oct 10, 2024 05:10:04.495101929 CEST	53	61462	1.1.1.1	192.168.2.16
Oct 10, 2024 05:10:04.495115042 CEST	53	56448	1.1.1.1	192.168.2.16
Oct 10, 2024 05:10:04.601062059 CEST	53	61010	1.1.1.1	192.168.2.16
Oct 10, 2024 05:10:05.640499115 CEST	60590	53	192.168.2.16	1.1.1.1
Oct 10, 2024 05:10:05.640640020 CEST	57202	53	192.168.2.16	1.1.1.1
Oct 10, 2024 05:10:05.647533894 CEST	53	60590	1.1.1.1	192.168.2.16
Oct 10, 2024 05:10:05.647684097 CEST	53	57202	1.1.1.1	192.168.2.16
Oct 10, 2024 05:10:06.289757013 CEST	51229	53	192.168.2.16	1.1.1.1
Oct 10, 2024 05:10:06.289904118 CEST	54773	53	192.168.2.16	1.1.1.1
Oct 10, 2024 05:10:06.296710014 CEST	53	51229	1.1.1.1	192.168.2.16
Oct 10, 2024 05:10:06.296961069 CEST	53	54773	1.1.1.1	192.168.2.16
Oct 10, 2024 05:10:07.496164083 CEST	63750	53	192.168.2.16	1.1.1.1
Oct 10, 2024 05:10:07.496356964 CEST	60509	53	192.168.2.16	1.1.1.1
Oct 10, 2024 05:10:07.503168106 CEST	53	63750	1.1.1.1	192.168.2.16
Oct 10, 2024 05:10:07.503272057 CEST	53	60509	1.1.1.1	192.168.2.16
Oct 10, 2024 05:10:14.551315069 CEST	55758	53	192.168.2.16	1.1.1.1
Oct 10, 2024 05:10:14.551620007 CEST	52904	53	192.168.2.16	1.1.1.1
Oct 10, 2024 05:10:14.648014069 CEST	53	52904	1.1.1.1	192.168.2.16
Oct 10, 2024 05:10:14.648300886 CEST	53	55758	1.1.1.1	192.168.2.16
Oct 10, 2024 05:10:16.178086996 CEST	59681	53	192.168.2.16	1.1.1.1
Oct 10, 2024 05:10:16.179971933 CEST	59135	53	192.168.2.16	1.1.1.1
Oct 10, 2024 05:10:16.185441017 CEST	53	59681	1.1.1.1	192.168.2.16
Oct 10, 2024 05:10:16.188215971 CEST	53	59135	1.1.1.1	192.168.2.16
Oct 10, 2024 05:10:16.800421953 CEST	53	56376	1.1.1.1	192.168.2.16
Oct 10, 2024 05:10:17.008585930 CEST	59422	53	192.168.2.16	1.1.1.1
Oct 10, 2024 05:10:17.008764982 CEST	50348	53	192.168.2.16	1.1.1.1
Oct 10, 2024 05:10:17.015579939 CEST	53	50348	1.1.1.1	192.168.2.16
Oct 10, 2024 05:10:17.015626907 CEST	53	59422	1.1.1.1	192.168.2.16
Oct 10, 2024 05:10:17.619890928 CEST	60084	53	192.168.2.16	1.1.1.1
Oct 10, 2024 05:10:17.620063066 CEST	62378	53	192.168.2.16	1.1.1.1
Oct 10, 2024 05:10:17.626643896 CEST	53	60084	1.1.1.1	192.168.2.16
Oct 10, 2024 05:10:17.626893044 CEST	53	62378	1.1.1.1	192.168.2.16
Oct 10, 2024 05:10:35.707911968 CEST	53	56882	1.1.1.1	192.168.2.16
Oct 10, 2024 05:10:58.703644991 CEST	53	60236	1.1.1.1	192.168.2.16
Oct 10, 2024 05:10:58.705252886 CEST	53	60548	1.1.1.1	192.168.2.16
Oct 10, 2024 05:11:00.730928898 CEST	138	138	192.168.2.16	192.168.2.255
Oct 10, 2024 05:11:27.338151932 CEST	53	61850	1.1.1.1	192.168.2.16

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 10, 2024 05:10:00.688579082 CEST	192.168.2.16	1.1.1.1	c243	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 10, 2024 05:09:59.658716917 CEST	192.168.2.16	1.1.1.1	0x4e3c	Standard query (0)	7xv6.mjt.lu	A (IP address)	IN (0x0001)	false
Oct 10, 2024 05:09:59.659120083 CEST	192.168.2.16	1.1.1.1	0x118c	Standard query (0)	7xv6.mjt.lu	65	IN (0x0001)	false
Oct 10, 2024 05:10:00.338907957 CEST	192.168.2.16	1.1.1.1	0x2c99	Standard query (0)	snip.ly	A (IP address)	IN (0x0001)	false
Oct 10, 2024 05:10:00.339128971 CEST	192.168.2.16	1.1.1.1	0x3023	Standard query (0)	snip.ly	65	IN (0x0001)	false
Oct 10, 2024 05:10:02.081572056 CEST	192.168.2.16	1.1.1.1	0xaced	Standard query (0)	zpr.io	A (IP address)	IN (0x0001)	false
Oct 10, 2024 05:10:02.081799984 CEST	192.168.2.16	1.1.1.1	0x56b1	Standard query (0)	zpr.io	65	IN (0x0001)	false
Oct 10, 2024 05:10:02.902961969 CEST	192.168.2.16	1.1.1.1	0x5f5c	Standard query (0)	fqx.kqy.mybluehost.me	A (IP address)	IN (0x0001)	false
Oct 10, 2024 05:10:02.903072119 CEST	192.168.2.16	1.1.1.1	0x696	Standard query (0)	fqx.kqy.mybluehost.me	65	IN (0x0001)	false
Oct 10, 2024 05:10:03.523376942 CEST	192.168.2.16	1.1.1.1	0xd2ea	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 05:10:03.523725986 CEST	192.168.2.16	1.1.1.1	0xf12f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 10, 2024 05:10:03.577405930 CEST	192.168.2.16	1.1.1.1	0xf9bb	Standard query (0)	js.hcaptcha.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 05:10:03.577821016 CEST	192.168.2.16	1.1.1.1	0xee96	Standard query (0)	js.hcaptcha.com	65	IN (0x0001)	false
Oct 10, 2024 05:10:04.469005108 CEST	192.168.2.16	1.1.1.1	0x5897	Standard query (0)	js.hcaptcha.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 05:10:04.469228983 CEST	192.168.2.16	1.1.1.1	0x331b	Standard query (0)	js.hcaptcha.com	65	IN (0x0001)	false
Oct 10, 2024 05:10:04.487078905 CEST	192.168.2.16	1.1.1.1	0x30b5	Standard query (0)	newassets.hcaptcha.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 05:10:04.487289906 CEST	192.168.2.16	1.1.1.1	0x6d48	Standard query (0)	newassets.hcaptcha.com	65	IN (0x0001)	false
Oct 10, 2024 05:10:05.640499115 CEST	192.168.2.16	1.1.1.1	0x3761	Standard query (0)	api2.hcaptcha.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 05:10:05.640640020 CEST	192.168.2.16	1.1.1.1	0x1b06	Standard query (0)	api2.hcaptcha.com	65	IN (0x0001)	false
Oct 10, 2024 05:10:06.289757013 CEST	192.168.2.16	1.1.1.1	0x9e08	Standard query (0)	api2.hcaptcha.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 05:10:06.289904118 CEST	192.168.2.16	1.1.1.1	0xacdd	Standard query (0)	api2.hcaptcha.com	65	IN (0x0001)	false
Oct 10, 2024 05:10:07.496164083 CEST	192.168.2.16	1.1.1.1	0xc91c	Standard query (0)	newassets.hcaptcha.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 05:10:07.496356964 CEST	192.168.2.16	1.1.1.1	0xa95d	Standard query (0)	newassets.hcaptcha.com	65	IN (0x0001)	false
Oct 10, 2024 05:10:14.551315069 CEST	192.168.2.16	1.1.1.1	0x9a1d	Standard query (0)	api.hcaptcha.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 05:10:14.551620007 CEST	192.168.2.16	1.1.1.1	0x5c52	Standard query (0)	api.hcaptcha.com	65	IN (0x0001)	false
Oct 10, 2024 05:10:16.178086996 CEST	192.168.2.16	1.1.1.1	0xa720	Standard query (0)	api.hcaptcha.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 05:10:16.179971933 CEST	192.168.2.16	1.1.1.1	0xfaee	Standard query (0)	api.hcaptcha.com	65	IN (0x0001)	false
Oct 10, 2024 05:10:17.008585930 CEST	192.168.2.16	1.1.1.1	0xbcda	Standard query (0)	imgs3.hcaptcha.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 05:10:17.008764982 CEST	192.168.2.16	1.1.1.1	0x177a	Standard query (0)	imgs3.hcaptcha.com	65	IN (0x0001)	false
Oct 10, 2024 05:10:17.619890928 CEST	192.168.2.16	1.1.1.1	0xbe08	Standard query (0)	imgs3.hcaptcha.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 05:10:17.620063066 CEST	192.168.2.16	1.1.1.1	0xe1a9	Standard query (0)	imgs3.hcaptcha.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Oct 10, 2024 05:09:59.680576086 CEST	1.1.1.1	192.168.2.16	0x4e3c	No error (0)	7xv6.mjt.lu	35.241.186.140	A (IP address)	IN (0x0001)	false
Oct 10, 2024 05:10:00.350445032 CEST	1.1.1.1	192.168.2.16	0x2c99	No error (0)	snip.ly	104.22.7.164	A (IP address)	IN (0x0001)	false
Oct 10, 2024 05:10:00.350445032 CEST	1.1.1.1	192.168.2.16	0x2c99	No error (0)	snip.ly	104.22.6.164	A (IP address)	IN (0x0001)	false
Oct 10, 2024 05:10:00.350445032 CEST	1.1.1.1	192.168.2.16	0x2c99	No error (0)	snip.ly	172.67.11.119	A (IP address)	IN (0x0001)	false
Oct 10, 2024 05:10:00.688332081 CEST	1.1.1.1	192.168.2.16	0x3023	No error (0)	snip.ly		65	IN (0x0001)	false
Oct 10, 2024 05:10:02.097635984 CEST	1.1.1.1	192.168.2.16	0xaced	No error (0)	zpr.io	44.222.54.177	A (IP address)	IN (0x0001)	false
Oct 10, 2024 05:10:02.097635984 CEST	1.1.1.1	192.168.2.16	0xaced	No error (0)	zpr.io	54.82.42.206	A (IP address)	IN (0x0001)	false
Oct 10, 2024 05:10:02.097635984 CEST	1.1.1.1	192.168.2.16	0xaced	No error (0)	zpr.io	100.26.95.221	A (IP address)	IN (0x0001)	false
Oct 10, 2024 05:10:02.917026997 CEST	1.1.1.1	192.168.2.16	0x5f5c	No error (0)	fqx.kqy.mybluehost.me	50.6.153.26	A (IP address)	IN (0x0001)	false
Oct 10, 2024 05:10:03.530333042 CEST	1.1.1.1	192.168.2.16	0xd2ea	No error (0)	www.google.com	142.250.186.36	A (IP address)	IN (0x0001)	false
Oct 10, 2024 05:10:03.530642033 CEST	1.1.1.1	192.168.2.16	0xf12f	No error (0)	www.google.com		65	IN (0x0001)	false
Oct 10, 2024 05:10:03.584630013 CEST	1.1.1.1	192.168.2.16	0xf9bb	No error (0)	js.hcaptcha.com	104.19.229.21	A (IP address)	IN (0x0001)	false
Oct 10, 2024 05:10:03.584630013 CEST	1.1.1.1	192.168.2.16	0xf9bb	No error (0)	js.hcaptcha.com	104.19.230.21	A (IP address)	IN (0x0001)	false
Oct 10, 2024 05:10:03.584923029 CEST	1.1.1.1	192.168.2.16	0xee96	No error (0)	js.hcaptcha.com		65	IN (0x0001)	false
Oct 10, 2024 05:10:04.476494074 CEST	1.1.1.1	192.168.2.16	0x5897	No error (0)	js.hcaptcha.com	104.19.229.21	A (IP address)	IN (0x0001)	false
Oct 10, 2024 05:10:04.476494074 CEST	1.1.1.1	192.168.2.16	0x5897	No error (0)	js.hcaptcha.com	104.19.230.21	A (IP address)	IN (0x0001)	false
Oct 10, 2024 05:10:04.477416992 CEST	1.1.1.1	192.168.2.16	0x331b	No error (0)	js.hcaptcha.com		65	IN (0x0001)	false
Oct 10, 2024 05:10:04.495101929 CEST	1.1.1.1	192.168.2.16	0x30b5	No error (0)	newassets.hcaptcha.com	104.19.229.21	A (IP address)	IN (0x0001)	false
Oct 10, 2024 05:10:04.495101929 CEST	1.1.1.1	192.168.2.16	0x30b5	No error (0)	newassets.hcaptcha.com	104.19.230.21	A (IP address)	IN (0x0001)	false
Oct 10, 2024 05:10:04.495115042 CEST	1.1.1.1	192.168.2.16	0x6d48	No error (0)	newassets.hcaptcha.com		65	IN (0x0001)	false
Oct 10, 2024 05:10:05.647533894 CEST	1.1.1.1	192.168.2.16	0x3761	No error (0)	api2.hcaptcha.com	104.19.230.21	A (IP address)	IN (0x0001)	false
Oct 10, 2024 05:10:05.647533894 CEST	1.1.1.1	192.168.2.16	0x3761	No error (0)	api2.hcaptcha.com	104.19.229.21	A (IP address)	IN (0x0001)	false
Oct 10, 2024 05:10:05.647684097 CEST	1.1.1.1	192.168.2.16	0x1b06	No error (0)	api2.hcaptcha.com		65	IN (0x0001)	false
Oct 10, 2024 05:10:06.296710014 CEST	1.1.1.1	192.168.2.16	0x9e08	No error (0)	api2.hcaptcha.com	104.19.230.21	A (IP address)	IN (0x0001)	false
Oct 10, 2024 05:10:06.296710014 CEST	1.1.1.1	192.168.2.16	0x9e08	No error (0)	api2.hcaptcha.com	104.19.229.21	A (IP address)	IN (0x0001)	false
Oct 10, 2024 05:10:06.296961069 CEST	1.1.1.1	192.168.2.16	0xacdd	No error (0)	api2.hcaptcha.com		65	IN (0x0001)	false
Oct 10, 2024 05:10:07.503168106 CEST	1.1.1.1	192.168.2.16	0xc91c	No error (0)	newassets.hcaptcha.com	104.19.230.21	A (IP address)	IN (0x0001)	false
Oct 10, 2024 05:10:07.503168106 CEST	1.1.1.1	192.168.2.16	0xc91c	No error (0)	newassets.hcaptcha.com	104.19.229.21	A (IP address)	IN (0x0001)	false
Oct 10, 2024 05:10:07.503272057 CEST	1.1.1.1	192.168.2.16	0xa95d	No error (0)	newassets.hcaptcha.com		65	IN (0x0001)	false
Oct 10, 2024 05:10:14.648014069 CEST	1.1.1.1	192.168.2.16	0x5c52	No error (0)	api.hcaptcha.com		65	IN (0x0001)	false
Oct 10, 2024 05:10:14.648300886 CEST	1.1.1.1	192.168.2.16	0x9a1d	No error (0)	api.hcaptcha.com	104.19.229.21	A (IP address)	IN (0x0001)	false
Oct 10, 2024 05:10:14.648300886 CEST	1.1.1.1	192.168.2.16	0x9a1d	No error (0)	api.hcaptcha.com	104.19.230.21	A (IP address)	IN (0x0001)	false
Oct 10, 2024 05:10:16.185441017 CEST	1.1.1.1	192.168.2.16	0xa720	No error (0)	api.hcaptcha.com	104.19.230.21	A (IP address)	IN (0x0001)	false
Oct 10, 2024 05:10:16.185441017 CEST	1.1.1.1	192.168.2.16	0xa720	No error (0)	api.hcaptcha.com	104.19.229.21	A (IP address)	IN (0x0001)	false
Oct 10, 2024 05:10:16.188215971 CEST	1.1.1.1	192.168.2.16	0xfaee	No error (0)	api.hcaptcha.com		65	IN (0x0001)	false
Oct 10, 2024 05:10:17.015579939 CEST	1.1.1.1	192.168.2.16	0x177a	No error (0)	imgs3.hcaptcha.com		65	IN (0x0001)	false
Oct 10, 2024 05:10:17.015626907 CEST	1.1.1.1	192.168.2.16	0xbcda	No error (0)	imgs3.hcaptcha.com	104.19.229.21	A (IP address)	IN (0x0001)	false
Oct 10, 2024 05:10:17.015626907 CEST	1.1.1.1	192.168.2.16	0xbcda	No error (0)	imgs3.hcaptcha.com	104.19.230.21	A (IP address)	IN (0x0001)	false
Oct 10, 2024 05:10:17.626643896 CEST	1.1.1.1	192.168.2.16	0xbe08	No error (0)	imgs3.hcaptcha.com	104.19.229.21	A (IP address)	IN (0x0001)	false
Oct 10, 2024 05:10:17.626643896 CEST	1.1.1.1	192.168.2.16	0xbe08	No error (0)	imgs3.hcaptcha.com	104.19.230.21	A (IP address)	IN (0x0001)	false
Oct 10, 2024 05:10:17.626893044 CEST	1.1.1.1	192.168.2.16	0xe1a9	No error (0)	imgs3.hcaptcha.com		65	IN (0x0001)	false

HTTP Request Dependency Graph

snip.ly

zpr.io

fqx.kqy.mybluehost.me

https:

js.hcaptcha.com

newassets.hcaptcha.com

api2.hcaptcha.com

api.hcaptcha.com

imgs3.hcaptcha.com

fs.microsoft.com

slscr.update.microsoft.com

7xv6.mjt.lu

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49709	35.241.186.140	80	6848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 10, 2024 05:09:59.686711073 CEST	565	OUT	GET /lnk/AXMAAFFvlI0AAAAAAAAAA8Ye8moAAABKhgwAAAAAAAq7pgBnByOSeYt8cGpTTPaPBTAKJeV-UQAKnpI/1/EWmySlSHcyP6g54g0SDc-g/aHR0cHM6Ly9zbmlwLmx5L2V6NGxydw HTTP/1.1 Host: 7xv6.mjt.lu Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 10, 2024 05:10:00.302140951 CEST	198	IN	HTTP/1.1 302 Found content-type: text/html; charset=utf-8 location: https://snip.ly/ez4lrw date: Thu, 10 Oct 2024 03:10:00 GMT content-length: 45 Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 6e 69 70 2e 6c 79 2f 65 7a 34 6c 72 77 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://snip.ly/ez4lrw">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49710	35.241.186.140	80	6848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 10, 2024 05:10:05.205820084 CEST	233	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>
Oct 10, 2024 05:10:50.221657991 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49711	104.22.7.164	443	6848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 03:10:00 UTC	656	OUT	GET /ez4lrw HTTP/1.1 Host: snip.ly Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 03:10:02 UTC	511	IN	HTTP/1.1 302 Found Date: Thu, 10 Oct 2024 03:10:02 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Location: https://zpr.io/hhNLhL7PmPw3?utm_source=sniply&utm_campaign=sniply&utm_medium=sniply Referer: (direct) Vary: Cookie, Origin Set-Cookie: sessionid=x84k677w76t1cvpyuqpzlgyejqyq0hkp; expires=Wed, 08 Jan 2025 03:10:02 GMT; HttpOnly; Max-Age=7776000; Path=/; SameSite=None; Secure CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8d036a37bd4343ed-EWR
2024-10-10 03:10:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49714	44.222.54.177	443	6848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 03:10:02 UTC	717	OUT	GET /hhNLhL7PmPw3?utm_source=sniply&utm_campaign=sniply&utm_medium=sniply HTTP/1.1 Host: zpr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 03:10:02 UTC	188	IN	HTTP/1.1 302 FOUND Date: Thu, 10 Oct 2024 03:10:02 GMT Content-Type: text/html; charset=utf-8 Content-Length: 261 Connection: close Location: https://fqx.kqy.mybluehost.me/Review/
2024-10-10 03:10:02 UTC	261	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 74 6f 20 74 68 65 20 74 61 72 67 65 74 20 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 71 78 2e 6b 71 79 2e 6d 79 62 6c 75 65 68 6f 73 74 2e 6d 65 2f 52 65 76 69 65 77 2f 22 3e 68 74 74 70 73 3a 2f 2f 66 71 78 2e 6b 71 79 2e 6d 79 62 6c 75 65 68 6f 73 74 2e 6d 65 2f 52 65 76 69 65 77 2f 3c 2f 61 3e 2e 20 49 66 20 6e 6f 74 2c 20 63 6c 69 63 6b 20 74 68 65 20 Data Ascii: <!doctype html><html lang=en><title>Redirecting...</title><h1>Redirecting...</h1><p>You should be redirected automatically to the target URL: <a href="https://fqx.kqy.mybluehost.me/Review/">https://fqx.kqy.mybluehost.me/Review/</a>. If not, click the

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49715	50.6.153.26	443	6848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 03:10:03 UTC	671	OUT	GET /Review/ HTTP/1.1 Host: fqx.kqy.mybluehost.me Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 03:10:03 UTC	455	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 03:10:03 GMT Server: nginx/1.23.4 Content-Type: text/html; charset=UTF-8 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Newfold-Cache-Level: 2 X-Server-Cache: true X-Proxy-Cache: MISS Set-Cookie: PHPSESSID=ebddcc4a9ecc86c7ab6d075bfd2e6982; path=/ Transfer-Encoding: chunked
2024-10-10 03:10:03 UTC	4733	IN	Data Raw: 31 32 37 30 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 43 41 50 54 43 48 41 20 56 65 72 69 66 69 63 61 74 69 6f 6e 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c Data Ascii: 1270<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>CAPTCHA Verification</title> <style> body { font-family: Arial
2024-10-10 03:10:04 UTC	657	OUT	GET /favicon.ico HTTP/1.1 Host: fqx.kqy.mybluehost.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://fqx.kqy.mybluehost.me/Review/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ebddcc4a9ecc86c7ab6d075bfd2e6982
2024-10-10 03:10:04 UTC	509	IN	HTTP/1.1 404 Not Found Date: Thu, 10 Oct 2024 03:10:04 GMT Server: nginx/1.23.4 Content-Type: text/html; charset=iso-8859-1 Content-Length: 315 host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>404 Not Found</title> </head><body> <h1>Not Found</h1> <p>The requested URL was not found on this server.</p> <p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49716	104.102.46.111	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 03:10:03 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-10 03:10:04 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=221699 Date: Thu, 10 Oct 2024 03:10:03 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49718	104.19.229.21	443	6848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 03:10:04 UTC	528	OUT	GET /1/api.js HTTP/1.1 Host: js.hcaptcha.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://fqx.kqy.mybluehost.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 03:10:04 UTC	487	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 03:10:04 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close etag: W/"d398b0b19fb270aa1839ac1a5c490eb3" Cache-Control: max-age=300 alt-svc: h3=":443"; ma=86400 vary: Origin CF-Cache-Status: HIT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff age: 0 cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8d036a4bd9e2c40e-EWR
2024-10-10 03:10:04 UTC	882	IN	Data Raw: 37 64 61 64 0d 0a 2f 2a 20 68 74 74 70 73 3a 2f 2f 68 63 61 70 74 63 68 61 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 73 6f 6c 76 65 28 65 28 29 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7d 29 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 73 6f 6c 76 65 28 65 28 29 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 6a 65 63 74 28 6e Data Ascii: 7dad/* https://hcaptcha.com/license */!function(){"use strict";function e(e){var t=this.constructor;return this.then((function(n){return t.resolve(e()).then((function(){return n}))}),(function(n){return t.resolve(e()).then((function(){return t.reject(n
2024-10-10 03:10:04 UTC	1369	IN	Data Raw: 6d 65 64 69 61 74 65 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 6c 65 6e 67 74 68 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 69 66 28 21 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 61 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 73 20 6d 75 73 74 20 62 65 20 63 6f 6e 73 74 72 75 63 74 65 64 20 76 69 61 20 6e 65 77 22 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 74 68 69 73 2e 5f Data Ascii: mediate:null;function i(e){return Boolean(e&&"undefined"!=typeof e.length)}function o(){}function a(e){if(!(this instanceof a))throw new TypeError("Promises must be constructed via new");if("function"!=typeof e)throw new TypeError("not a function");this._
2024-10-10 03:10:04 UTC	1369	IN	Data Raw: 65 2c 74 29 7b 76 61 72 20 6e 3d 21 31 3b 74 72 79 7b 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 7c 7c 28 6e 3d 21 30 2c 63 28 74 2c 65 29 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 7c 7c 28 6e 3d 21 30 2c 6c 28 74 2c 65 29 29 7d 29 29 7d 63 61 74 63 68 28 72 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 3b 6e 3d 21 30 2c 6c 28 74 2c 72 29 7d 7d 61 2e 70 72 6f 74 6f 74 79 70 65 5b 22 63 61 74 63 68 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 6e 75 6c 6c 2c 65 29 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 6e 65 77 20 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 6f 29 3b 72 65 74 75 72 6e 20 73 28 74 68 69 73 2c 6e 65 Data Ascii: e,t){var n=!1;try{e((function(e){n\|\|(n=!0,c(t,e))}),(function(e){n\|\|(n=!0,l(t,e))}))}catch(r){if(n)return;n=!0,l(t,r)}}a.prototype["catch"]=function(e){return this.then(null,e)},a.prototype.then=function(e,t){var n=new this.constructor(o);return s(this,ne
2024-10-10 03:10:04 UTC	1369	IN	Data Raw: 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 29 72 65 74 75 72 6e 20 67 6c 6f 62 61 6c 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 75 6e 61 62 6c 65 20 74 6f 20 6c 6f 63 61 74 65 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 3c 3d 65 26 26 65 3c 3d 6e 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 29 7b 69 66 28 65 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 72 65 74 75 72 6e 7b 7d 3b 69 66 28 65 3d 3d 3d 4f 62 6a 65 63 74 28 65 29 29 72 65 74 75 72 6e 20 65 3b 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 6f 75 6c 64 20 6e 6f 74 20 63 6f 6e 76 65 72 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 64 69 63 74 69 6f 6e 61 Data Ascii: ;if("undefined"!=typeof global)return global;throw new Error("unable to locate global object")}();function p(e,t,n){return t<=e&&e<=n}function m(e){if(e===undefined)return{};if(e===Object(e))return e;throw TypeError("Could not convert argument to dictiona
2024-10-10 03:10:04 UTC	1369	IN	Data Raw: 75 74 66 2d 38 22 3b 66 75 6e 63 74 69 6f 6e 20 4f 28 65 2c 74 29 7b 69 66 28 21 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 4f 29 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6c 6c 65 64 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 2e 20 44 69 64 20 79 6f 75 20 66 6f 72 67 65 74 20 27 6e 65 77 27 3f 22 29 3b 65 3d 65 21 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 53 74 72 69 6e 67 28 65 29 3a 53 2c 74 3d 6d 28 74 29 2c 74 68 69 73 2e 5f 65 6e 63 6f 64 69 6e 67 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 64 65 63 6f 64 65 72 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 67 6e 6f 72 65 42 4f 4d 3d 21 31 2c 74 68 69 73 2e 5f 42 4f 4d 73 65 65 6e 3d 21 31 2c 74 68 69 73 2e 5f 65 72 72 6f 72 5f 6d 6f 64 65 3d 22 72 65 70 6c 61 63 65 6d 65 6e 74 22 2c 74 68 69 73 Data Ascii: utf-8";function O(e,t){if(!(this instanceof O))throw TypeError("Called as a function. Did you forget 'new'?");e=e!==undefined?String(e):S,t=m(t),this._encoding=null,this._decoder=null,this._ignoreBOM=!1,this._BOMseen=!1,this._error_mode="replacement",this
2024-10-10 03:10:04 UTC	1369	IN	Data Raw: 65 2c 73 29 7b 69 66 28 73 3d 3d 3d 79 26 26 30 21 3d 3d 69 29 72 65 74 75 72 6e 20 69 3d 30 2c 62 28 74 29 3b 69 66 28 73 3d 3d 3d 79 29 72 65 74 75 72 6e 20 77 3b 69 66 28 30 3d 3d 3d 69 29 7b 69 66 28 70 28 73 2c 30 2c 31 32 37 29 29 72 65 74 75 72 6e 20 73 3b 69 66 28 70 28 73 2c 31 39 34 2c 32 32 33 29 29 69 3d 31 2c 6e 3d 33 31 26 73 3b 65 6c 73 65 20 69 66 28 70 28 73 2c 32 32 34 2c 32 33 39 29 29 32 32 34 3d 3d 3d 73 26 26 28 6f 3d 31 36 30 29 2c 32 33 37 3d 3d 3d 73 26 26 28 61 3d 31 35 39 29 2c 69 3d 32 2c 6e 3d 31 35 26 73 3b 65 6c 73 65 7b 69 66 28 21 70 28 73 2c 32 34 30 2c 32 34 34 29 29 72 65 74 75 72 6e 20 62 28 74 29 3b 32 34 30 3d 3d 3d 73 26 26 28 6f 3d 31 34 34 29 2c 32 34 34 3d 3d 3d 73 26 26 28 61 3d 31 34 33 29 2c 69 3d 33 2c 6e 3d Data Ascii: e,s){if(s===y&&0!==i)return i=0,b(t);if(s===y)return w;if(0===i){if(p(s,0,127))return s;if(p(s,194,223))i=1,n=31&s;else if(p(s,224,239))224===s&&(o=160),237===s&&(a=159),i=2,n=15&s;else{if(!p(s,240,244))return b(t);240===s&&(o=144),244===s&&(a=143),i=3,n=
2024-10-10 03:10:04 UTC	1369	IN	Data Raw: 6f 72 28 76 61 72 20 72 2c 69 3d 6e 65 77 20 76 28 6e 29 2c 6f 3d 5b 5d 3b 3b 29 7b 76 61 72 20 61 3d 69 2e 72 65 61 64 28 29 3b 69 66 28 61 3d 3d 3d 79 29 62 72 65 61 6b 3b 69 66 28 28 72 3d 74 68 69 73 2e 5f 64 65 63 6f 64 65 72 2e 68 61 6e 64 6c 65 72 28 69 2c 61 29 29 3d 3d 3d 77 29 62 72 65 61 6b 3b 6e 75 6c 6c 21 3d 3d 72 26 26 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 3f 6f 2e 70 75 73 68 2e 61 70 70 6c 79 28 6f 2c 72 29 3a 6f 2e 70 75 73 68 28 72 29 29 7d 69 66 28 21 74 68 69 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c 75 73 68 29 7b 64 6f 7b 69 66 28 28 72 3d 74 68 69 73 2e 5f 64 65 63 6f 64 65 72 2e 68 61 6e 64 6c 65 72 28 69 2c 69 2e 72 65 61 64 28 29 29 29 3d 3d 3d 77 29 62 72 65 61 6b 3b 6e 75 6c 6c 21 3d 3d 72 26 26 28 41 72 72 61 79 2e 69 Data Ascii: or(var r,i=new v(n),o=[];;){var a=i.read();if(a===y)break;if((r=this._decoder.handler(i,a))===w)break;null!==r&&(Array.isArray(r)?o.push.apply(o,r):o.push(r))}if(!this._do_not_flush){do{if((r=this._decoder.handler(i,i.read()))===w)break;null!==r&&(Array.i
2024-10-10 03:10:04 UTC	1369	IN	Data Raw: 70 75 73 68 28 36 35 35 33 36 2b 28 73 3c 3c 31 30 29 2b 63 29 2c 72 2b 3d 31 7d 65 6c 73 65 20 69 2e 70 75 73 68 28 36 35 35 33 33 29 7d 72 2b 3d 31 7d 72 65 74 75 72 6e 20 69 7d 28 65 29 29 2c 69 3d 5b 5d 3b 3b 29 7b 76 61 72 20 6f 3d 72 2e 72 65 61 64 28 29 3b 69 66 28 6f 3d 3d 3d 79 29 62 72 65 61 6b 3b 69 66 28 28 6e 3d 74 68 69 73 2e 5f 65 6e 63 6f 64 65 72 2e 68 61 6e 64 6c 65 72 28 72 2c 6f 29 29 3d 3d 3d 77 29 62 72 65 61 6b 3b 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6e 29 3f 69 2e 70 75 73 68 2e 61 70 70 6c 79 28 69 2c 6e 29 3a 69 2e 70 75 73 68 28 6e 29 7d 69 66 28 21 74 68 69 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c 75 73 68 29 7b 66 6f 72 28 3b 28 6e 3d 74 68 69 73 2e 5f 65 6e 63 6f 64 65 72 2e 68 61 6e 64 6c 65 72 28 72 2c 72 2e 72 65 61 64 28 Data Ascii: push(65536+(s<<10)+c),r+=1}else i.push(65533)}r+=1}return i}(e)),i=[];;){var o=r.read();if(o===y)break;if((n=this._encoder.handler(r,o))===w)break;Array.isArray(n)?i.push.apply(i,n):i.push(n)}if(!this._do_not_flush){for(;(n=this._encoder.handler(r,r.read(
2024-10-10 03:10:04 UTC	1369	IN	Data Raw: 22 3a 35 31 32 2c 22 53 48 41 2d 33 38 34 22 3a 31 30 32 34 2c 22 53 48 41 2d 35 31 32 22 3a 31 30 32 34 7d 5b 6c 2e 68 61 73 68 2e 6e 61 6d 65 5d 2c 6e 2e 69 6d 70 6f 72 74 4b 65 79 28 22 72 61 77 22 2c 74 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 6c 2e 6c 65 6e 67 74 68 2b 37 3e 3e 33 29 29 2c 6c 2c 75 2c 68 29 3b 69 66 28 73 26 26 22 67 65 6e 65 72 61 74 65 4b 65 79 22 3d 3d 3d 65 26 26 22 52 53 41 53 53 41 2d 50 4b 43 53 31 2d 76 31 5f 35 22 3d 3d 3d 6c 2e 6e 61 6d 65 26 26 28 21 6c 2e 6d 6f 64 75 6c 75 73 4c 65 6e 67 74 68 7c 7c 6c 2e 6d 6f 64 75 6c 75 73 4c 65 6e 67 74 68 3e 3d 32 30 34 38 29 29 72 65 74 75 72 6e 28 69 3d 6d 28 69 29 29 2e 6e 61 6d 65 3d 22 52 53 41 45 53 2d 50 4b 43 53 31 2d 76 Data Ascii: ":512,"SHA-384":1024,"SHA-512":1024}[l.hash.name],n.importKey("raw",t.getRandomValues(new Uint8Array(l.length+7>>3)),l,u,h);if(s&&"generateKey"===e&&"RSASSA-PKCS1-v1_5"===l.name&&(!l.modulusLength\|\|l.modulusLength>=2048))return(i=m(i)).name="RSAES-PKCS1-v
2024-10-10 03:10:04 UTC	1369	IN	Data Raw: 79 7c 7c 65 29 2e 61 6c 67 6f 72 69 74 68 6d 2e 6d 6f 64 75 6c 75 73 4c 65 6e 67 74 68 29 2c 6c 2e 70 75 62 6c 69 63 45 78 70 6f 6e 65 6e 74 7c 7c 28 6c 2e 70 75 62 6c 69 63 45 78 70 6f 6e 65 6e 74 3d 28 65 2e 70 75 62 6c 69 63 4b 65 79 7c 7c 65 29 2e 61 6c 67 6f 72 69 74 68 6d 2e 70 75 62 6c 69 63 45 78 70 6f 6e 65 6e 74 29 29 2c 65 3d 65 2e 70 75 62 6c 69 63 4b 65 79 26 26 65 2e 70 72 69 76 61 74 65 4b 65 79 3f 7b 70 75 62 6c 69 63 4b 65 79 3a 6e 65 77 20 78 28 65 2e 70 75 62 6c 69 63 4b 65 79 2c 6c 2c 75 2c 68 2e 66 69 6c 74 65 72 28 45 29 29 2c 70 72 69 76 61 74 65 4b 65 79 3a 6e 65 77 20 78 28 65 2e 70 72 69 76 61 74 65 4b 65 79 2c 6c 2c 75 2c 68 2e 66 69 6c 74 65 72 28 43 29 29 7d 3a 6e 65 77 20 78 28 65 2c 6c 2c 75 2c 68 29 7d 29 29 7d 7d 29 29 2c Data Ascii: y\|\|e).algorithm.modulusLength),l.publicExponent\|\|(l.publicExponent=(e.publicKey\|\|e).algorithm.publicExponent)),e=e.publicKey&&e.privateKey?{publicKey:new x(e.publicKey,l,u,h.filter(E)),privateKey:new x(e.privateKey,l,u,h.filter(C))}:new x(e,l,u,h)}))}})),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49719	104.102.46.111	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 03:10:04 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-10 03:10:05 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=221676 Date: Thu, 10 Oct 2024 03:10:04 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-10 03:10:05 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49720	104.19.229.21	443	6848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 03:10:04 UTC	347	OUT	GET /1/api.js HTTP/1.1 Host: js.hcaptcha.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 03:10:05 UTC	487	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 03:10:05 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close etag: W/"d398b0b19fb270aa1839ac1a5c490eb3" Cache-Control: max-age=300 alt-svc: h3=":443"; ma=86400 vary: Origin CF-Cache-Status: HIT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff age: 0 cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8d036a515fc4429a-EWR
2024-10-10 03:10:05 UTC	882	IN	Data Raw: 37 64 61 64 0d 0a 2f 2a 20 68 74 74 70 73 3a 2f 2f 68 63 61 70 74 63 68 61 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 73 6f 6c 76 65 28 65 28 29 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7d 29 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 73 6f 6c 76 65 28 65 28 29 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 6a 65 63 74 28 6e Data Ascii: 7dad/* https://hcaptcha.com/license */!function(){"use strict";function e(e){var t=this.constructor;return this.then((function(n){return t.resolve(e()).then((function(){return n}))}),(function(n){return t.resolve(e()).then((function(){return t.reject(n
2024-10-10 03:10:05 UTC	1369	IN	Data Raw: 6d 65 64 69 61 74 65 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 6c 65 6e 67 74 68 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 69 66 28 21 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 61 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 73 20 6d 75 73 74 20 62 65 20 63 6f 6e 73 74 72 75 63 74 65 64 20 76 69 61 20 6e 65 77 22 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 74 68 69 73 2e 5f Data Ascii: mediate:null;function i(e){return Boolean(e&&"undefined"!=typeof e.length)}function o(){}function a(e){if(!(this instanceof a))throw new TypeError("Promises must be constructed via new");if("function"!=typeof e)throw new TypeError("not a function");this._
2024-10-10 03:10:05 UTC	1369	IN	Data Raw: 65 2c 74 29 7b 76 61 72 20 6e 3d 21 31 3b 74 72 79 7b 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 7c 7c 28 6e 3d 21 30 2c 63 28 74 2c 65 29 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 7c 7c 28 6e 3d 21 30 2c 6c 28 74 2c 65 29 29 7d 29 29 7d 63 61 74 63 68 28 72 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 3b 6e 3d 21 30 2c 6c 28 74 2c 72 29 7d 7d 61 2e 70 72 6f 74 6f 74 79 70 65 5b 22 63 61 74 63 68 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 6e 75 6c 6c 2c 65 29 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 6e 65 77 20 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 6f 29 3b 72 65 74 75 72 6e 20 73 28 74 68 69 73 2c 6e 65 Data Ascii: e,t){var n=!1;try{e((function(e){n\|\|(n=!0,c(t,e))}),(function(e){n\|\|(n=!0,l(t,e))}))}catch(r){if(n)return;n=!0,l(t,r)}}a.prototype["catch"]=function(e){return this.then(null,e)},a.prototype.then=function(e,t){var n=new this.constructor(o);return s(this,ne
2024-10-10 03:10:05 UTC	1369	IN	Data Raw: 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 29 72 65 74 75 72 6e 20 67 6c 6f 62 61 6c 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 75 6e 61 62 6c 65 20 74 6f 20 6c 6f 63 61 74 65 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 3c 3d 65 26 26 65 3c 3d 6e 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 29 7b 69 66 28 65 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 72 65 74 75 72 6e 7b 7d 3b 69 66 28 65 3d 3d 3d 4f 62 6a 65 63 74 28 65 29 29 72 65 74 75 72 6e 20 65 3b 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 6f 75 6c 64 20 6e 6f 74 20 63 6f 6e 76 65 72 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 64 69 63 74 69 6f 6e 61 Data Ascii: ;if("undefined"!=typeof global)return global;throw new Error("unable to locate global object")}();function p(e,t,n){return t<=e&&e<=n}function m(e){if(e===undefined)return{};if(e===Object(e))return e;throw TypeError("Could not convert argument to dictiona
2024-10-10 03:10:05 UTC	1369	IN	Data Raw: 75 74 66 2d 38 22 3b 66 75 6e 63 74 69 6f 6e 20 4f 28 65 2c 74 29 7b 69 66 28 21 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 4f 29 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6c 6c 65 64 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 2e 20 44 69 64 20 79 6f 75 20 66 6f 72 67 65 74 20 27 6e 65 77 27 3f 22 29 3b 65 3d 65 21 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 53 74 72 69 6e 67 28 65 29 3a 53 2c 74 3d 6d 28 74 29 2c 74 68 69 73 2e 5f 65 6e 63 6f 64 69 6e 67 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 64 65 63 6f 64 65 72 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 67 6e 6f 72 65 42 4f 4d 3d 21 31 2c 74 68 69 73 2e 5f 42 4f 4d 73 65 65 6e 3d 21 31 2c 74 68 69 73 2e 5f 65 72 72 6f 72 5f 6d 6f 64 65 3d 22 72 65 70 6c 61 63 65 6d 65 6e 74 22 2c 74 68 69 73 Data Ascii: utf-8";function O(e,t){if(!(this instanceof O))throw TypeError("Called as a function. Did you forget 'new'?");e=e!==undefined?String(e):S,t=m(t),this._encoding=null,this._decoder=null,this._ignoreBOM=!1,this._BOMseen=!1,this._error_mode="replacement",this
2024-10-10 03:10:05 UTC	1369	IN	Data Raw: 65 2c 73 29 7b 69 66 28 73 3d 3d 3d 79 26 26 30 21 3d 3d 69 29 72 65 74 75 72 6e 20 69 3d 30 2c 62 28 74 29 3b 69 66 28 73 3d 3d 3d 79 29 72 65 74 75 72 6e 20 77 3b 69 66 28 30 3d 3d 3d 69 29 7b 69 66 28 70 28 73 2c 30 2c 31 32 37 29 29 72 65 74 75 72 6e 20 73 3b 69 66 28 70 28 73 2c 31 39 34 2c 32 32 33 29 29 69 3d 31 2c 6e 3d 33 31 26 73 3b 65 6c 73 65 20 69 66 28 70 28 73 2c 32 32 34 2c 32 33 39 29 29 32 32 34 3d 3d 3d 73 26 26 28 6f 3d 31 36 30 29 2c 32 33 37 3d 3d 3d 73 26 26 28 61 3d 31 35 39 29 2c 69 3d 32 2c 6e 3d 31 35 26 73 3b 65 6c 73 65 7b 69 66 28 21 70 28 73 2c 32 34 30 2c 32 34 34 29 29 72 65 74 75 72 6e 20 62 28 74 29 3b 32 34 30 3d 3d 3d 73 26 26 28 6f 3d 31 34 34 29 2c 32 34 34 3d 3d 3d 73 26 26 28 61 3d 31 34 33 29 2c 69 3d 33 2c 6e 3d Data Ascii: e,s){if(s===y&&0!==i)return i=0,b(t);if(s===y)return w;if(0===i){if(p(s,0,127))return s;if(p(s,194,223))i=1,n=31&s;else if(p(s,224,239))224===s&&(o=160),237===s&&(a=159),i=2,n=15&s;else{if(!p(s,240,244))return b(t);240===s&&(o=144),244===s&&(a=143),i=3,n=
2024-10-10 03:10:05 UTC	1369	IN	Data Raw: 6f 72 28 76 61 72 20 72 2c 69 3d 6e 65 77 20 76 28 6e 29 2c 6f 3d 5b 5d 3b 3b 29 7b 76 61 72 20 61 3d 69 2e 72 65 61 64 28 29 3b 69 66 28 61 3d 3d 3d 79 29 62 72 65 61 6b 3b 69 66 28 28 72 3d 74 68 69 73 2e 5f 64 65 63 6f 64 65 72 2e 68 61 6e 64 6c 65 72 28 69 2c 61 29 29 3d 3d 3d 77 29 62 72 65 61 6b 3b 6e 75 6c 6c 21 3d 3d 72 26 26 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 3f 6f 2e 70 75 73 68 2e 61 70 70 6c 79 28 6f 2c 72 29 3a 6f 2e 70 75 73 68 28 72 29 29 7d 69 66 28 21 74 68 69 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c 75 73 68 29 7b 64 6f 7b 69 66 28 28 72 3d 74 68 69 73 2e 5f 64 65 63 6f 64 65 72 2e 68 61 6e 64 6c 65 72 28 69 2c 69 2e 72 65 61 64 28 29 29 29 3d 3d 3d 77 29 62 72 65 61 6b 3b 6e 75 6c 6c 21 3d 3d 72 26 26 28 41 72 72 61 79 2e 69 Data Ascii: or(var r,i=new v(n),o=[];;){var a=i.read();if(a===y)break;if((r=this._decoder.handler(i,a))===w)break;null!==r&&(Array.isArray(r)?o.push.apply(o,r):o.push(r))}if(!this._do_not_flush){do{if((r=this._decoder.handler(i,i.read()))===w)break;null!==r&&(Array.i
2024-10-10 03:10:05 UTC	1369	IN	Data Raw: 70 75 73 68 28 36 35 35 33 36 2b 28 73 3c 3c 31 30 29 2b 63 29 2c 72 2b 3d 31 7d 65 6c 73 65 20 69 2e 70 75 73 68 28 36 35 35 33 33 29 7d 72 2b 3d 31 7d 72 65 74 75 72 6e 20 69 7d 28 65 29 29 2c 69 3d 5b 5d 3b 3b 29 7b 76 61 72 20 6f 3d 72 2e 72 65 61 64 28 29 3b 69 66 28 6f 3d 3d 3d 79 29 62 72 65 61 6b 3b 69 66 28 28 6e 3d 74 68 69 73 2e 5f 65 6e 63 6f 64 65 72 2e 68 61 6e 64 6c 65 72 28 72 2c 6f 29 29 3d 3d 3d 77 29 62 72 65 61 6b 3b 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6e 29 3f 69 2e 70 75 73 68 2e 61 70 70 6c 79 28 69 2c 6e 29 3a 69 2e 70 75 73 68 28 6e 29 7d 69 66 28 21 74 68 69 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c 75 73 68 29 7b 66 6f 72 28 3b 28 6e 3d 74 68 69 73 2e 5f 65 6e 63 6f 64 65 72 2e 68 61 6e 64 6c 65 72 28 72 2c 72 2e 72 65 61 64 28 Data Ascii: push(65536+(s<<10)+c),r+=1}else i.push(65533)}r+=1}return i}(e)),i=[];;){var o=r.read();if(o===y)break;if((n=this._encoder.handler(r,o))===w)break;Array.isArray(n)?i.push.apply(i,n):i.push(n)}if(!this._do_not_flush){for(;(n=this._encoder.handler(r,r.read(
2024-10-10 03:10:05 UTC	1369	IN	Data Raw: 22 3a 35 31 32 2c 22 53 48 41 2d 33 38 34 22 3a 31 30 32 34 2c 22 53 48 41 2d 35 31 32 22 3a 31 30 32 34 7d 5b 6c 2e 68 61 73 68 2e 6e 61 6d 65 5d 2c 6e 2e 69 6d 70 6f 72 74 4b 65 79 28 22 72 61 77 22 2c 74 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 6c 2e 6c 65 6e 67 74 68 2b 37 3e 3e 33 29 29 2c 6c 2c 75 2c 68 29 3b 69 66 28 73 26 26 22 67 65 6e 65 72 61 74 65 4b 65 79 22 3d 3d 3d 65 26 26 22 52 53 41 53 53 41 2d 50 4b 43 53 31 2d 76 31 5f 35 22 3d 3d 3d 6c 2e 6e 61 6d 65 26 26 28 21 6c 2e 6d 6f 64 75 6c 75 73 4c 65 6e 67 74 68 7c 7c 6c 2e 6d 6f 64 75 6c 75 73 4c 65 6e 67 74 68 3e 3d 32 30 34 38 29 29 72 65 74 75 72 6e 28 69 3d 6d 28 69 29 29 2e 6e 61 6d 65 3d 22 52 53 41 45 53 2d 50 4b 43 53 31 2d 76 Data Ascii: ":512,"SHA-384":1024,"SHA-512":1024}[l.hash.name],n.importKey("raw",t.getRandomValues(new Uint8Array(l.length+7>>3)),l,u,h);if(s&&"generateKey"===e&&"RSASSA-PKCS1-v1_5"===l.name&&(!l.modulusLength\|\|l.modulusLength>=2048))return(i=m(i)).name="RSAES-PKCS1-v
2024-10-10 03:10:05 UTC	1369	IN	Data Raw: 79 7c 7c 65 29 2e 61 6c 67 6f 72 69 74 68 6d 2e 6d 6f 64 75 6c 75 73 4c 65 6e 67 74 68 29 2c 6c 2e 70 75 62 6c 69 63 45 78 70 6f 6e 65 6e 74 7c 7c 28 6c 2e 70 75 62 6c 69 63 45 78 70 6f 6e 65 6e 74 3d 28 65 2e 70 75 62 6c 69 63 4b 65 79 7c 7c 65 29 2e 61 6c 67 6f 72 69 74 68 6d 2e 70 75 62 6c 69 63 45 78 70 6f 6e 65 6e 74 29 29 2c 65 3d 65 2e 70 75 62 6c 69 63 4b 65 79 26 26 65 2e 70 72 69 76 61 74 65 4b 65 79 3f 7b 70 75 62 6c 69 63 4b 65 79 3a 6e 65 77 20 78 28 65 2e 70 75 62 6c 69 63 4b 65 79 2c 6c 2c 75 2c 68 2e 66 69 6c 74 65 72 28 45 29 29 2c 70 72 69 76 61 74 65 4b 65 79 3a 6e 65 77 20 78 28 65 2e 70 72 69 76 61 74 65 4b 65 79 2c 6c 2c 75 2c 68 2e 66 69 6c 74 65 72 28 43 29 29 7d 3a 6e 65 77 20 78 28 65 2c 6c 2c 75 2c 68 29 7d 29 29 7d 7d 29 29 2c Data Ascii: y\|\|e).algorithm.modulusLength),l.publicExponent\|\|(l.publicExponent=(e.publicKey\|\|e).algorithm.publicExponent)),e=e.publicKey&&e.privateKey?{publicKey:new x(e.publicKey,l,u,h.filter(E)),privateKey:new x(e.privateKey,l,u,h.filter(C))}:new x(e,l,u,h)}))}})),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49721	104.19.229.21	443	6848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 03:10:04 UTC	729	OUT	GET /captcha/v1/2766c43/static/hcaptcha.html HTTP/1.1 Host: newassets.hcaptcha.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://fqx.kqy.mybluehost.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 03:10:05 UTC	572	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 03:10:05 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Cache-Control: max-age=3600 vary: Accept-Encoding vary: Origin alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Content-Security-Policy: report-uri https://sentry.hcaptcha.com/api/6/security/?sentry_key=30910f52569b4c17b1081ead2dae43b4&sentry_environment=prod&sentry_release=csp1; Server: cloudflare CF-RAY: 8d036a51af1a4285-EWR
2024-10-10 03:10:05 UTC	797	IN	Data Raw: 37 64 35 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 61 74 61 2d 69 64 3d 22 68 63 61 70 74 63 68 61 2d 66 72 61 6d 65 2d 32 37 36 36 63 34 33 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 68 43 61 70 74 63 68 61 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 62 6a 65 63 74 2d Data Ascii: 7d59<!DOCTYPE html><html lang="en" data-id="hcaptcha-frame-2766c43"><head> <title>hCaptcha</title> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Security-Policy" content="object-
2024-10-10 03:10:05 UTC	1369	IN	Data Raw: 7d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 69 6e 70 75 74 3a 66 6f 63 75 73 2c 73 65 6c 65 63 74 3a 66 6f 63 75 73 2c 74 65 78 74 61 72 65 61 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 30 7d 3a 66 6f 63 75 73 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 6f 75 74 6c 69 6e 65 3a 30 7d 74 65 78 74 61 72 65 61 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 3b 6f 75 74 6c 69 6e 65 3a 30 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 72 65 73 69 7a 65 3a 6e 6f 6e 65 7d 2e 6e 6f 2d 73 65 6c 65 63 74 69 6f 6e 7b 2d 77 65 62 6b 69 74 2d 74 6f 75 63 68 2d 63 61 6c 6c 6f 75 74 3a 6e 6f 6e 65 3b 2d 77 65 Data Ascii: }button:focus,input:focus,select:focus,textarea:focus{outline:0}:focus{border:none;outline:0}textarea{border:none;overflow:auto;outline:0;-webkit-box-shadow:none;-moz-box-shadow:none;box-shadow:none;resize:none}.no-selection{-webkit-touch-callout:none;-we
2024-10-10 03:10:05 UTC	1369	IN	Data Raw: 63 65 2e 63 61 6c 6c 28 74 29 3b 69 66 28 30 3d 3d 3d 6e 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 65 28 5b 5d 29 3b 76 61 72 20 72 3d 6e 2e 6c 65 6e 67 74 68 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 69 29 7b 69 66 28 69 26 26 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 69 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 29 29 7b 76 61 72 20 73 3d 69 2e 74 68 65 6e 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 29 72 65 74 75 72 6e 20 76 6f 69 64 20 73 2e 63 61 6c 6c 28 69 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6f 28 74 2c 65 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 6e 5b 74 5d 3d 7b 73 74 61 74 75 73 3a 22 72 65 6a 65 63 74 65 64 22 2c 72 65 61 73 6f 6e 3a 69 7d 2c 30 3d 3d 2d 2d 72 26 Data Ascii: ce.call(t);if(0===n.length)return e([]);var r=n.length;function o(t,i){if(i&&("object"==typeof i\|\|"function"==typeof i)){var s=i.then;if("function"==typeof s)return void s.call(i,(function(e){o(t,e)}),(function(i){n[t]={status:"rejected",reason:i},0==--r&
2024-10-10 03:10:05 UTC	1369	IN	Data Raw: 74 63 68 28 6f 29 7b 63 28 74 2c 6f 29 7d 76 61 72 20 6e 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 2c 65 29 7b 74 2e 5f 73 74 61 74 65 3d 32 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 68 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 74 29 7b 32 3d 3d 3d 74 2e 5f 73 74 61 74 65 26 26 30 3d 3d 3d 74 2e 5f 64 65 66 65 72 72 65 64 73 2e 6c 65 6e 67 74 68 26 26 73 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 5f 68 61 6e 64 6c 65 64 7c 7c 73 2e 5f 75 6e 68 61 6e 64 6c 65 64 52 65 6a 65 63 74 69 6f 6e 46 6e 28 74 2e 5f 76 61 6c 75 65 29 7d 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 30 2c 69 3d 74 2e 5f 64 65 66 65 72 72 65 64 73 2e 6c 65 6e 67 74 68 3b 65 3c 69 3b 65 2b 2b 29 61 28 74 2c 74 2e 5f 64 65 66 65 72 72 65 64 73 5b 65 5d Data Ascii: tch(o){c(t,o)}var n,r}function c(t,e){t._state=2,t._value=e,h(t)}function h(t){2===t._state&&0===t._deferreds.length&&s._immediateFn((function(){t._handled\|\|s._unhandledRejectionFn(t._value)}));for(var e=0,i=t._deferreds.length;e<i;e++)a(t,t._deferreds[e]
2024-10-10 03:10:05 UTC	1369	IN	Data Raw: 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 2e 72 61 63 65 20 61 63 63 65 70 74 73 20 61 6e 20 61 72 72 61 79 22 29 29 3b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 6f 3d 74 2e 6c 65 6e 67 74 68 3b 6e 3c 6f 3b 6e 2b 2b 29 73 2e 72 65 73 6f 6c 76 65 28 74 5b 6e 5d 29 2e 74 68 65 6e 28 65 2c 69 29 7d 29 29 7d 2c 73 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 28 74 29 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 28 74 2c 30 29 7d 2c 73 2e 5f 75 6e 68 61 6e 64 6c 65 64 52 65 6a 65 63 74 69 6f 6e 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 Data Ascii: Error("Promise.race accepts an array"));for(var n=0,o=t.length;n<o;n++)s.resolve(t[n]).then(e,i)}))},s._immediateFn="function"==typeof n&&function(t){n(t)}\|\|function(t){i(t,0)},s._unhandledRejectionFn=function(t){"undefined"!=typeof console&&console&&cons
2024-10-10 03:10:05 UTC	1369	IN	Data Raw: 35 33 33 7d 66 75 6e 63 74 69 6f 6e 20 78 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 53 74 72 69 6e 67 28 74 29 2e 74 72 69 6d 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6b 2c 74 29 3f 6b 5b 74 5d 3a 6e 75 6c 6c 7d 76 61 72 20 6b 3d 7b 7d 3b 5b 7b 65 6e 63 6f 64 69 6e 67 73 3a 5b 7b 6c 61 62 65 6c 73 3a 5b 22 75 6e 69 63 6f 64 65 2d 31 2d 31 2d 75 74 66 2d 38 22 2c 22 75 74 66 2d 38 22 2c 22 75 74 66 38 22 5d 2c 6e 61 6d 65 3a 22 55 54 46 2d 38 22 7d 5d 2c 68 65 61 64 69 6e 67 3a 22 54 68 65 20 45 6e 63 6f 64 69 6e 67 22 7d 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 65 6e 63 6f 64 69 6e 67 73 2e 66 6f 72 45 61 Data Ascii: 533}function x(t){return t=String(t).trim().toLowerCase(),Object.prototype.hasOwnProperty.call(k,t)?k[t]:null}var k={};[{encodings:[{labels:["unicode-1-1-utf-8","utf-8","utf8"],name:"UTF-8"}],heading:"The Encoding"}].forEach((function(t){t.encodings.forEa
2024-10-10 03:10:05 UTC	1369	IN	Data Raw: 6e 3d 78 28 74 3d 74 21 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 53 74 72 69 6e 67 28 74 29 3a 41 29 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 6e 7c 7c 22 72 65 70 6c 61 63 65 6d 65 6e 74 22 3d 3d 3d 6e 2e 6e 61 6d 65 29 74 68 72 6f 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 55 6e 6b 6e 6f 77 6e 20 65 6e 63 6f 64 69 6e 67 3a 20 22 2b 74 29 3b 69 66 28 21 45 5b 6e 2e 6e 61 6d 65 5d 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 45 6e 63 6f 64 65 72 20 6e 6f 74 20 70 72 65 73 65 6e 74 2e 20 44 69 64 20 79 6f 75 20 66 6f 72 67 65 74 20 74 6f 20 69 6e 63 6c 75 64 65 20 65 6e 63 6f 64 69 6e 67 2d 69 6e 64 65 78 65 73 2e 6a 73 20 66 69 72 73 74 3f 22 29 3b 69 2e 5f 65 6e 63 6f 64 69 6e 67 3d 6e 7d 65 6c 73 65 20 69 2e 5f 65 6e 63 6f 64 69 6e 67 3d 78 28 22 75 74 66 2d 38 22 29 3b Data Ascii: n=x(t=t!==undefined?String(t):A);if(null===n\|\|"replacement"===n.name)throw RangeError("Unknown encoding: "+t);if(!E[n.name])throw Error("Encoder not present. Did you forget to include encoding-indexes.js first?");i._encoding=n}else i._encoding=x("utf-8");
2024-10-10 03:10:05 UTC	1369	IN	Data Raw: 6e 6f 72 65 42 4f 4d 7d 7d 29 29 2c 53 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 63 6f 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 3b 69 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 3f 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 22 62 75 66 66 65 72 22 69 6e 20 74 26 26 74 2e 62 75 66 66 65 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 3f 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 74 2e 62 75 66 66 65 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 30 29 2c 65 3d 79 28 Data Ascii: noreBOM}})),S.prototype.decode=function(t,e){var i;i="object"==typeof t&&t instanceof ArrayBuffer?new Uint8Array(t):"object"==typeof t&&"buffer"in t&&t.buffer instanceof ArrayBuffer?new Uint8Array(t.buffer,t.byteOffset,t.byteLength):new Uint8Array(0),e=y(
2024-10-10 03:10:05 UTC	1369	IN	Data Raw: 73 68 7c 7c 28 74 68 69 73 2e 5f 65 6e 63 6f 64 65 72 3d 45 5b 74 68 69 73 2e 5f 65 6e 63 6f 64 69 6e 67 2e 6e 61 6d 65 5d 28 7b 66 61 74 61 6c 3a 22 66 61 74 61 6c 22 3d 3d 3d 74 68 69 73 2e 5f 66 61 74 61 6c 7d 29 29 2c 74 68 69 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c 75 73 68 3d 42 6f 6f 6c 65 61 6e 28 65 2e 73 74 72 65 61 6d 29 3b 66 6f 72 28 76 61 72 20 69 2c 6e 3d 6e 65 77 20 76 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 53 74 72 69 6e 67 28 74 29 2c 69 3d 65 2e 6c 65 6e 67 74 68 2c 6e 3d 30 2c 72 3d 5b 5d 3b 6e 3c 69 3b 29 7b 76 61 72 20 6f 3d 65 2e 63 68 61 72 43 6f 64 65 41 74 28 6e 29 3b 69 66 28 6f 3c 35 35 32 39 36 7c 7c 6f 3e 35 37 33 34 33 29 72 2e 70 75 73 68 28 6f 29 3b 65 6c 73 65 20 69 66 28 6f 3e 3d 35 36 33 32 30 Data Ascii: sh\|\|(this._encoder=E[this._encoding.name]({fatal:"fatal"===this._fatal})),this._do_not_flush=Boolean(e.stream);for(var i,n=new v(function(t){for(var e=String(t),i=e.length,n=0,r=[];n<i;){var o=e.charCodeAt(n);if(o<55296\|\|o>57343)r.push(o);else if(o>=56320
2024-10-10 03:10:05 UTC	1369	IN	Data Raw: 2c 6f 2c 6c 29 7b 76 61 72 20 63 2c 68 2c 75 2c 70 2c 77 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 3b 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 22 67 65 6e 65 72 61 74 65 4b 65 79 22 3a 63 3d 79 28 72 29 2c 68 3d 6f 2c 75 3d 6c 3b 62 72 65 61 6b 3b 63 61 73 65 22 69 6d 70 6f 72 74 4b 65 79 22 3a 63 3d 79 28 6c 29 2c 68 3d 77 5b 33 5d 2c 75 3d 77 5b 34 5d 2c 22 6a 77 6b 22 3d 3d 3d 72 26 26 28 28 6f 3d 67 28 6f 29 29 2e 61 6c 67 7c 7c 28 6f 2e 61 6c 67 3d 6d 28 63 29 29 2c 6f 2e 6b 65 79 5f 6f 70 73 7c 7c 28 6f 2e 6b 65 79 5f 6f 70 73 3d 22 6f 63 74 22 21 3d 3d 6f 2e 6b 74 79 3f 22 64 22 69 6e 20 6f 3f 75 2e 66 69 6c 74 65 72 28 5f 29 3a 75 2e 66 69 6c 74 65 72 28 45 29 3a 75 2e 73 6c 69 63 65 28 29 29 2c 77 5b 31 5d 3d 76 Data Ascii: ,o,l){var c,h,u,p,w=[].slice.call(arguments);switch(t){case"generateKey":c=y(r),h=o,u=l;break;case"importKey":c=y(l),h=w[3],u=w[4],"jwk"===r&&((o=g(o)).alg\|\|(o.alg=m(c)),o.key_ops\|\|(o.key_ops="oct"!==o.kty?"d"in o?u.filter(_):u.filter(E):u.slice()),w[1]=v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49723	104.19.230.21	443	6848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 03:10:06 UTC	732	OUT	POST /checksiteconfig?v=2766c43&host=fqx.kqy.mybluehost.me&sitekey=fa9a729a-76ea-4876-8768-9194430429ac&sc=1&swa=1&spst=1 HTTP/1.1 Host: api2.hcaptcha.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Content-Type: text/plain sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://newassets.hcaptcha.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://newassets.hcaptcha.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 03:10:06 UTC	762	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 03:10:06 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-headers: Cache-Control, Content-Type, DNT, Referer, User-Agent access-control-allow-methods: GET, HEAD, POST, OPTIONS access-control-allow-origin: https://newassets.hcaptcha.com vary: Origin, Accept-Encoding CF-Cache-Status: DYNAMIC Set-Cookie: __cflb=0H28vk2VKwPbLoawFincekpozDKK5F2cb4R3Cv45z6y; SameSite=None; Secure; path=/; expires=Thu, 10-Oct-24 03:40:06 GMT; HttpOnly Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8d036a58cd7f8c63-EWR alt-svc: h3=":443"; ma=86400
2024-10-10 03:10:06 UTC	607	IN	Data Raw: 33 30 38 0d 0a 7b 22 66 65 61 74 75 72 65 73 22 3a 7b 22 65 6e 63 5f 67 65 74 5f 72 65 71 22 3a 74 72 75 65 7d 2c 22 63 22 3a 7b 22 74 79 70 65 22 3a 22 68 73 77 22 2c 22 72 65 71 22 3a 22 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 4c 43 4a 68 62 47 63 69 4f 69 4a 49 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 6d 49 6a 6f 77 4c 43 4a 7a 49 6a 6f 79 4c 43 4a 30 49 6a 6f 69 64 79 49 73 49 6d 51 69 4f 69 49 33 61 57 64 4c 59 56 70 6b 57 45 39 6a 4d 30 6b 33 4e 55 51 72 55 32 4a 48 59 33 64 73 56 48 4d 33 57 6d 6f 34 4e 7a 4a 4e 53 6b 70 79 55 6b 4a 34 59 57 56 75 56 6c 56 36 53 47 46 4d 57 55 77 78 55 32 70 36 61 45 78 72 4d 56 70 42 53 6b 6c 61 57 44 4e 52 4e 6b 64 73 55 55 35 5a 56 6c 4d 72 51 54 46 73 61 6a 4a 33 4d 56 70 6b 53 6b 6b 33 62 54 41 79 61 45 4e Data Ascii: 308{"features":{"enc_get_req":true},"c":{"type":"hsw","req":"eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJmIjowLCJzIjoyLCJ0IjoidyIsImQiOiI3aWdLYVpkWE9jM0k3NUQrU2JHY3dsVHM3Wmo4NzJNSkpyUkJ4YWVuVlV6SGFMWUwxU2p6aExrMVpBSklaWDNRNkdsUU5ZVlMrQTFsajJ3MVpkSkk3bTAyaEN
2024-10-10 03:10:06 UTC	176	IN	Data Raw: 6f 59 54 49 31 4e 69 31 78 65 44 64 45 64 57 77 30 57 54 4a 5a 54 54 46 49 64 6d 68 47 55 31 64 45 55 6e 46 50 54 46 6c 49 61 45 52 77 53 69 39 34 55 32 78 4c 56 6a 68 55 63 6e 42 5a 59 57 78 72 50 53 49 73 49 6d 55 69 4f 6a 45 33 4d 6a 67 31 4d 7a 41 78 4e 6a 59 73 49 6d 34 69 4f 69 4a 6f 63 33 63 69 4c 43 4a 6a 49 6a 6f 78 4d 44 41 77 66 51 2e 6d 43 39 35 4d 55 47 50 77 30 59 2d 68 31 57 45 31 6b 71 4f 73 70 57 74 4f 76 2d 56 6f 72 66 58 44 51 74 4f 37 61 41 35 64 6c 55 22 7d 2c 22 70 61 73 73 22 3a 74 72 75 65 7d 0d 0a Data Ascii: oYTI1Ni1xeDdEdWw0WTJZTTFIdmhGU1dEUnFPTFlIaERwSi94U2xLVjhUcnBZYWxrPSIsImUiOjE3Mjg1MzAxNjYsIm4iOiJoc3ciLCJjIjoxMDAwfQ.mC95MUGPw0Y-h1WE1kqOspWtOv-VorfXDQtO7aA5dlU"},"pass":true}
2024-10-10 03:10:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49724	104.19.229.21	443	6848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 03:10:06 UTC	641	OUT	GET /c/5b8e65083fb03d69f7f1c7f37b70a61765f316bdd0f1f53ab286361d1bc32723/hsw.js HTTP/1.1 Host: newassets.hcaptcha.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://newassets.hcaptcha.com/captcha/v1/2766c43/static/hcaptcha.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 03:10:06 UTC	462	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 03:10:06 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close etag: W/"0960b0b99c86d423b9e44107a6c0bc77" Cache-Control: max-age=3024000 vary: Accept-Encoding vary: Origin alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8d036a5caf528c0b-EWR
2024-10-10 03:10:06 UTC	907	IN	Data Raw: 37 64 63 37 0d 0a 76 61 72 20 68 73 77 3d 66 75 6e 63 74 69 6f 6e 20 42 57 4a 6b 79 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 41 28 41 2c 51 2c 42 29 7b 72 65 74 75 72 6e 20 51 3c 3d 41 26 26 41 3c 3d 42 7d 66 75 6e 63 74 69 6f 6e 20 51 28 41 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 41 29 72 65 74 75 72 6e 7b 7d 3b 69 66 28 41 3d 3d 3d 4f 62 6a 65 63 74 28 41 29 29 72 65 74 75 72 6e 20 41 3b 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 6f 75 6c 64 20 6e 6f 74 20 63 6f 6e 76 65 72 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 64 69 63 74 69 6f 6e 61 72 79 22 29 7d 76 61 72 20 42 3d 66 75 6e 63 74 69 6f 6e 28 41 29 7b 72 65 74 75 72 6e 20 41 3e 3d 30 26 26 41 3c 3d 31 32 37 7d 2c 45 3d 2d 31 3b 66 75 6e 63 74 69 6f 6e Data Ascii: 7dc7var hsw=function BWJky(){"use strict";function A(A,Q,B){return Q<=A&&A<=B}function Q(A){if(void 0===A)return{};if(A===Object(A))return A;throw TypeError("Could not convert argument to dictionary")}var B=function(A){return A>=0&&A<=127},E=-1;function
2024-10-10 03:10:06 UTC	1369	IN	Data Raw: 2c 22 75 74 66 2d 38 22 2c 22 75 74 66 38 22 5d 2c 6e 61 6d 65 3a 22 55 54 46 2d 38 22 7d 5d 2c 68 65 61 64 69 6e 67 3a 22 54 68 65 20 45 6e 63 6f 64 69 6e 67 22 7d 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 41 29 7b 41 2e 65 6e 63 6f 64 69 6e 67 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 41 29 7b 41 2e 6c 61 62 65 6c 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 51 29 7b 77 5b 51 5d 3d 41 7d 29 29 7d 29 29 7d 29 29 3b 76 61 72 20 4d 2c 6b 2c 68 3d 7b 22 55 54 46 2d 38 22 3a 66 75 6e 63 74 69 6f 6e 28 41 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 53 28 41 29 7d 7d 2c 79 3d 7b 22 55 54 46 2d 38 22 3a 66 75 6e 63 74 69 6f 6e 28 41 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 46 28 41 29 7d 7d 2c 4a 3d 22 75 74 66 2d 38 Data Ascii: ,"utf-8","utf8"],name:"UTF-8"}],heading:"The Encoding"}].forEach((function(A){A.encodings.forEach((function(A){A.labels.forEach((function(Q){w[Q]=A}))}))}));var M,k,h={"UTF-8":function(A){return new S(A)}},y={"UTF-8":function(A){return new F(A)}},J="utf-8
2024-10-10 03:10:06 UTC	1369	IN	Data Raw: 75 20 66 6f 72 67 65 74 20 74 6f 20 69 6e 63 6c 75 64 65 20 65 6e 63 6f 64 69 6e 67 2d 69 6e 64 65 78 65 73 2e 6a 73 20 66 69 72 73 74 3f 22 29 3b 45 2e 5f 65 6e 63 6f 64 69 6e 67 3d 49 7d 65 6c 73 65 20 45 2e 5f 65 6e 63 6f 64 69 6e 67 3d 44 28 22 75 74 66 2d 38 22 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 7c 7c 28 74 68 69 73 2e 65 6e 63 6f 64 69 6e 67 3d 45 2e 5f 65 6e 63 6f 64 69 6e 67 2e 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 2c 45 7d 66 75 6e 63 74 69 6f 6e 20 46 28 51 29 7b 76 61 72 20 42 3d 51 2e 66 61 74 61 6c 2c 49 3d 30 2c 44 3d 30 2c 77 3d 30 2c 4d 3d 31 32 38 2c 6b 3d 31 39 31 3b 74 68 69 73 2e 68 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 51 2c 68 29 7b 69 66 28 68 3d 3d Data Ascii: u forget to include encoding-indexes.js first?");E._encoding=I}else E._encoding=D("utf-8");return Object.defineProperty\|\|(this.encoding=E._encoding.name.toLowerCase()),E}function F(Q){var B=Q.fatal,I=0,D=0,w=0,M=128,k=191;this.handler=function(Q,h){if(h==
2024-10-10 03:10:06 UTC	1369	IN	Data Raw: 6e 63 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 3f 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 41 2e 62 75 66 66 65 72 2c 41 2e 62 79 74 65 4f 66 66 73 65 74 2c 41 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 30 29 2c 42 3d 51 28 42 29 2c 74 68 69 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c 75 73 68 7c 7c 28 74 68 69 73 2e 5f 64 65 63 6f 64 65 72 3d 79 5b 74 68 69 73 2e 5f 65 6e 63 6f 64 69 6e 67 2e 6e 61 6d 65 5d 28 7b 66 61 74 61 6c 3a 22 66 61 74 61 6c 22 3d 3d 3d 74 68 69 73 2e 5f 65 72 72 6f 72 5f 6d 6f 64 65 7d 29 2c 74 68 69 73 2e 5f 42 4f 4d 73 65 65 6e 3d 21 31 29 2c 74 68 69 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c 75 73 68 3d 42 6f 6f 6c 65 61 6e 28 42 2e 73 74 72 65 61 6d 29 3b 66 6f 72 28 76 61 72 20 44 2c 77 3d Data Ascii: nceof ArrayBuffer?new Uint8Array(A.buffer,A.byteOffset,A.byteLength):new Uint8Array(0),B=Q(B),this._do_not_flush\|\|(this._decoder=y[this._encoding.name]({fatal:"fatal"===this._error_mode}),this._BOMseen=!1),this._do_not_flush=Boolean(B.stream);for(var D,w=
2024-10-10 03:10:06 UTC	1369	IN	Data Raw: 6e 67 74 68 2c 45 3d 30 2c 49 3d 5b 5d 3b 45 3c 42 3b 29 7b 76 61 72 20 43 3d 51 2e 63 68 61 72 43 6f 64 65 41 74 28 45 29 3b 69 66 28 43 3c 35 35 32 39 36 7c 7c 43 3e 35 37 33 34 33 29 49 2e 70 75 73 68 28 43 29 3b 65 6c 73 65 20 69 66 28 43 3e 3d 35 36 33 32 30 26 26 43 3c 3d 35 37 33 34 33 29 49 2e 70 75 73 68 28 36 35 35 33 33 29 3b 65 6c 73 65 20 69 66 28 43 3e 3d 35 35 32 39 36 26 26 43 3c 3d 35 36 33 31 39 29 69 66 28 45 3d 3d 3d 42 2d 31 29 49 2e 70 75 73 68 28 36 35 35 33 33 29 3b 65 6c 73 65 7b 76 61 72 20 67 3d 51 2e 63 68 61 72 43 6f 64 65 41 74 28 45 2b 31 29 3b 69 66 28 67 3e 3d 35 36 33 32 30 26 26 67 3c 3d 35 37 33 34 33 29 7b 76 61 72 20 44 3d 31 30 32 33 26 43 2c 77 3d 31 30 32 33 26 67 3b 49 2e 70 75 73 68 28 36 35 35 33 36 2b 28 44 3c Data Ascii: ngth,E=0,I=[];E<B;){var C=Q.charCodeAt(E);if(C<55296\|\|C>57343)I.push(C);else if(C>=56320&&C<=57343)I.push(65533);else if(C>=55296&&C<=56319)if(E===B-1)I.push(65533);else{var g=Q.charCodeAt(E+1);if(g>=56320&&g<=57343){var D=1023&C,w=1023&g;I.push(65536+(D<
2024-10-10 03:10:06 UTC	1369	IN	Data Raw: 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 46 61 69 6c 65 64 20 74 6f 20 65 78 65 63 75 74 65 20 27 61 74 6f 62 27 20 6f 6e 20 27 57 69 6e 64 6f 77 27 3a 20 54 68 65 20 73 74 72 69 6e 67 20 74 6f 20 62 65 20 64 65 63 6f 64 65 64 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 6c 79 20 65 6e 63 6f 64 65 64 2e 22 29 3b 76 61 72 20 51 2c 42 2c 45 3b 41 2b 3d 22 3d 3d 22 2e 73 6c 69 63 65 28 32 2d 28 33 26 41 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 49 3d 22 22 2c 43 3d 30 3b 43 3c 41 2e 6c 65 6e 67 74 68 3b 29 51 3d 4d 2e 69 6e 64 65 78 4f 66 28 41 2e 63 68 61 72 41 74 28 43 2b 2b 29 29 3c 3c 31 38 7c 4d 2e 69 6e 64 65 78 4f 66 28 41 2e 63 68 61 72 41 74 28 43 2b 2b 29 29 3c 3c 31 32 7c 28 42 3d 4d 2e 69 6e 64 65 78 4f 66 28 41 2e Data Ascii: hrow new TypeError("Failed to execute 'atob' on 'Window': The string to be decoded is not correctly encoded.");var Q,B,E;A+="==".slice(2-(3&A.length));for(var I="",C=0;C<A.length;)Q=M.indexOf(A.charAt(C++))<<18\|M.indexOf(A.charAt(C++))<<12\|(B=M.indexOf(A.
2024-10-10 03:10:06 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 20 6b 28 41 29 7b 76 61 72 20 51 2c 45 3d 56 41 3b 41 5b 45 28 35 31 39 29 5d 3f 49 28 41 5b 45 28 33 35 32 29 5d 29 3a 28 51 3d 41 5b 45 28 33 35 32 29 5d 2c 51 20 69 6e 73 74 61 6e 63 65 6f 66 20 42 3f 51 3a 6e 65 77 20 42 28 28 66 75 6e 63 74 69 6f 6e 28 41 29 7b 41 28 51 29 7d 29 29 29 5b 45 28 67 2e 5f 30 78 35 63 63 33 33 63 29 5d 28 77 2c 4d 29 7d 6b 28 28 45 3d 45 2e 61 70 70 6c 79 28 41 2c 51 7c 7c 5b 5d 29 29 5b 44 28 33 32 39 29 5d 28 29 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 55 28 41 2c 51 29 7b 76 61 72 20 42 2c 45 2c 49 2c 43 3d 34 35 39 2c 67 3d 56 41 2c 44 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 31 26 49 5b 30 5d 29 74 68 72 6f 77 20 49 5b 31 5d 3b 72 65 74 75 72 6e 20 49 Data Ascii: nction k(A){var Q,E=VA;A[E(519)]?I(A[E(352)]):(Q=A[E(352)],Q instanceof B?Q:new B((function(A){A(Q)})))[E(g._0x5cc33c)](w,M)}k((E=E.apply(A,Q\|\|[]))[D(329)]())}))}function U(A,Q){var B,E,I,C=459,g=VA,D={label:0,sent:function(){if(1&I[0])throw I[1];return I
2024-10-10 03:10:06 UTC	1369	IN	Data Raw: 20 52 3d 7b 7d 3b 72 65 74 75 72 6e 20 52 5b 67 28 73 29 5d 3d 43 5b 30 5d 3f 43 5b 31 5d 3a 76 6f 69 64 20 30 2c 52 5b 67 28 68 29 5d 3d 21 30 2c 52 7d 28 5b 43 2c 67 5d 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 48 28 41 2c 51 2c 42 29 7b 76 61 72 20 45 3d 35 38 34 2c 49 3d 33 36 37 2c 43 3d 56 41 3b 69 66 28 42 7c 7c 32 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 43 28 33 34 32 29 5d 29 66 6f 72 28 76 61 72 20 67 2c 44 3d 30 2c 77 3d 51 2e 6c 65 6e 67 74 68 3b 44 3c 77 3b 44 2b 2b 29 21 67 26 26 44 20 69 6e 20 51 7c 7c 28 67 7c 7c 28 67 3d 41 72 72 61 79 5b 43 28 45 29 5d 5b 43 28 34 33 38 29 5d 5b 43 28 32 35 32 29 5d 28 51 2c 30 2c 44 29 29 2c 67 5b 44 5d 3d 51 5b 44 5d 29 3b 72 65 74 75 72 6e 20 41 5b 43 28 49 29 5d 28 67 7c 7c 41 72 72 61 79 5b 43 28 35 38 Data Ascii: R={};return R[g(s)]=C[0]?C[1]:void 0,R[g(h)]=!0,R}([C,g])}}}function H(A,Q,B){var E=584,I=367,C=VA;if(B\|\|2===arguments[C(342)])for(var g,D=0,w=Q.length;D<w;D++)!g&&D in Q\|\|(g\|\|(g=Array[C(E)][C(438)][C(252)](Q,0,D)),g[D]=Q[D]);return A[C(I)](g\|\|Array[C(58
2024-10-10 03:10:06 UTC	1369	IN	Data Raw: 2e 63 6f 6e 6e 65 63 74 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 50 3f 76 6f 69 64 20 30 3a 50 2e 74 79 70 65 29 2c 5a 3d 4c 28 33 35 38 29 69 6e 20 77 69 6e 64 6f 77 2c 75 3d 77 69 6e 64 6f 77 5b 4c 28 33 39 32 29 5d 3e 31 2c 70 3d 4d 61 74 68 5b 4c 28 34 36 37 29 5d 28 6e 75 6c 6c 3d 3d 3d 28 6e 3d 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 5b 4c 28 33 38 38 29 5d 2c 6e 75 6c 6c 3d 3d 3d 28 72 3d 77 69 6e 64 6f 77 5b 4c 28 35 33 30 29 5d 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 68 65 69 67 68 74 29 2c 76 3d 6e 61 76 69 67 61 74 6f 72 2e 6d 61 78 54 6f 75 63 68 50 6f 69 6e 74 73 2c 6c 3d 6e 61 76 69 67 61 74 6f 72 5b 4c 28 33 37 37 29 5d 2c 56 3d 4c 28 33 30 39 Data Ascii: .connection)\|\|void 0===P?void 0:P.type),Z=L(358)in window,u=window[L(392)]>1,p=Math[L(467)](null===(n=window.screen)\|\|void 0===n?void 0:n[L(388)],null===(r=window[L(530)])\|\|void 0===r?void 0:r.height),v=navigator.maxTouchPoints,l=navigator[L(377)],V=L(309
2024-10-10 03:10:06 UTC	1369	IN	Data Raw: 28 45 29 69 6e 20 77 69 6e 64 6f 77 2c 22 42 6c 6f 63 6b 65 64 22 29 2c 5b 34 2c 42 28 6a 28 29 2c 31 30 30 29 5d 29 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 28 51 3d 67 5b 44 28 49 29 5d 28 29 29 26 26 51 2e 6c 65 6e 67 74 68 3f 28 41 28 44 28 43 29 2c 51 29 2c 5b 32 5d 29 3a 5b 32 5d 7d 7d 29 29 7d 29 29 7d 29 29 2c 24 3d 5b 4c 28 35 36 31 29 2c 4c 28 36 32 38 29 2c 22 6d 6f 64 65 6c 22 2c 4c 28 36 36 34 29 2c 4c 28 35 39 38 29 2c 4c 28 33 32 33 29 5d 2c 41 41 3d 6f 28 4c 28 35 36 38 29 2c 28 66 75 6e 63 74 69 6f 6e 28 41 2c 51 2c 42 29 7b 72 65 74 75 72 6e 20 52 28 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 51 2c 45 2c 49 2c 43 3d 35 39 36 2c 67 3d 32 35 37 3b 72 65 74 75 72 6e 20 55 Data Ascii: (E)in window,"Blocked"),[4,B(j(),100)]);case 1:return(Q=g[D(I)]())&&Q.length?(A(D(C),Q),[2]):[2]}}))}))})),$=[L(561),L(628),"model",L(664),L(598),L(323)],AA=o(L(568),(function(A,Q,B){return R(void 0,void 0,void 0,(function(){var Q,E,I,C=596,g=257;return U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49725	104.19.230.21	443	6848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 03:10:06 UTC	516	OUT	GET /checksiteconfig?v=2766c43&host=fqx.kqy.mybluehost.me&sitekey=fa9a729a-76ea-4876-8768-9194430429ac&sc=1&swa=1&spst=1 HTTP/1.1 Host: api2.hcaptcha.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cflb=0H28vk2VKwPbLoawFincekpozDKK5F2cb4R3Cv45z6y
2024-10-10 03:10:06 UTC	590	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 03:10:06 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-headers: Cache-Control, Content-Type, DNT, Referer, User-Agent access-control-allow-methods: GET, HEAD, POST, OPTIONS access-control-allow-origin: vary: Origin, Accept-Encoding CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8d036a5cd8800f7c-EWR alt-svc: h3=":443"; ma=86400
2024-10-10 03:10:06 UTC	779	IN	Data Raw: 33 30 38 0d 0a 7b 22 66 65 61 74 75 72 65 73 22 3a 7b 22 65 6e 63 5f 67 65 74 5f 72 65 71 22 3a 74 72 75 65 7d 2c 22 63 22 3a 7b 22 74 79 70 65 22 3a 22 68 73 77 22 2c 22 72 65 71 22 3a 22 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 4c 43 4a 68 62 47 63 69 4f 69 4a 49 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 6d 49 6a 6f 77 4c 43 4a 7a 49 6a 6f 79 4c 43 4a 30 49 6a 6f 69 64 79 49 73 49 6d 51 69 4f 69 4a 70 63 45 56 71 51 7a 41 78 64 47 38 35 64 6d 35 74 4c 30 68 72 52 47 31 6b 62 32 64 78 4e 56 46 74 4b 7a 4e 31 65 45 30 79 4d 48 51 79 53 32 63 33 63 6b 35 34 57 55 34 79 51 54 4e 31 53 58 68 58 56 48 64 43 55 31 42 53 52 33 56 4c 56 33 52 42 59 56 4e 59 54 7a 52 46 55 6d 30 79 4d 58 55 77 51 31 70 58 4d 46 56 32 53 57 6c 42 4d 48 52 51 55 6c 70 4a 54 55 56 Data Ascii: 308{"features":{"enc_get_req":true},"c":{"type":"hsw","req":"eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJmIjowLCJzIjoyLCJ0IjoidyIsImQiOiJpcEVqQzAxdG85dm5tL0hrRG1kb2dxNVFtKzN1eE0yMHQyS2c3ck54WU4yQTN1SXhXVHdCU1BSR3VLV3RBYVNYTzRFUm0yMXUwQ1pXMFV2SWlBMHRQUlpJTUV
2024-10-10 03:10:06 UTC	4	IN	Data Raw: 65 7d 0d 0a Data Ascii: e}
2024-10-10 03:10:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49726	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 03:10:07 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=W1cUeKZXXgpOeDt&MD=BTByaGWc HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-10 03:10:07 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 64a9c830-61f9-4376-b8fa-c790800a7fe7 MS-RequestId: 8aa26179-d44f-474f-8a7f-3cccedc7165d MS-CV: Z3XNMxDGTUmDbAPo.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 10 Oct 2024 03:10:06 GMT Connection: close Content-Length: 24490
2024-10-10 03:10:07 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-10 03:10:07 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49729	104.19.230.21	443	6848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 03:10:07 UTC	419	OUT	GET /c/5b8e65083fb03d69f7f1c7f37b70a61765f316bdd0f1f53ab286361d1bc32723/hsw.js HTTP/1.1 Host: newassets.hcaptcha.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 03:10:08 UTC	462	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 03:10:08 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close etag: W/"0960b0b99c86d423b9e44107a6c0bc77" Cache-Control: max-age=3024000 vary: Accept-Encoding vary: Origin alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8d036a647a0e42b7-EWR
2024-10-10 03:10:08 UTC	907	IN	Data Raw: 37 64 63 36 0d 0a 76 61 72 20 68 73 77 3d 66 75 6e 63 74 69 6f 6e 20 42 57 4a 6b 79 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 41 28 41 2c 51 2c 42 29 7b 72 65 74 75 72 6e 20 51 3c 3d 41 26 26 41 3c 3d 42 7d 66 75 6e 63 74 69 6f 6e 20 51 28 41 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 41 29 72 65 74 75 72 6e 7b 7d 3b 69 66 28 41 3d 3d 3d 4f 62 6a 65 63 74 28 41 29 29 72 65 74 75 72 6e 20 41 3b 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 6f 75 6c 64 20 6e 6f 74 20 63 6f 6e 76 65 72 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 64 69 63 74 69 6f 6e 61 72 79 22 29 7d 76 61 72 20 42 3d 66 75 6e 63 74 69 6f 6e 28 41 29 7b 72 65 74 75 72 6e 20 41 3e 3d 30 26 26 41 3c 3d 31 32 37 7d 2c 45 3d 2d 31 3b 66 75 6e 63 74 69 6f 6e Data Ascii: 7dc6var hsw=function BWJky(){"use strict";function A(A,Q,B){return Q<=A&&A<=B}function Q(A){if(void 0===A)return{};if(A===Object(A))return A;throw TypeError("Could not convert argument to dictionary")}var B=function(A){return A>=0&&A<=127},E=-1;function
2024-10-10 03:10:08 UTC	1369	IN	Data Raw: 2c 22 75 74 66 2d 38 22 2c 22 75 74 66 38 22 5d 2c 6e 61 6d 65 3a 22 55 54 46 2d 38 22 7d 5d 2c 68 65 61 64 69 6e 67 3a 22 54 68 65 20 45 6e 63 6f 64 69 6e 67 22 7d 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 41 29 7b 41 2e 65 6e 63 6f 64 69 6e 67 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 41 29 7b 41 2e 6c 61 62 65 6c 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 51 29 7b 77 5b 51 5d 3d 41 7d 29 29 7d 29 29 7d 29 29 3b 76 61 72 20 4d 2c 6b 2c 68 3d 7b 22 55 54 46 2d 38 22 3a 66 75 6e 63 74 69 6f 6e 28 41 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 53 28 41 29 7d 7d 2c 79 3d 7b 22 55 54 46 2d 38 22 3a 66 75 6e 63 74 69 6f 6e 28 41 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 46 28 41 29 7d 7d 2c 4a 3d 22 75 74 66 2d 38 Data Ascii: ,"utf-8","utf8"],name:"UTF-8"}],heading:"The Encoding"}].forEach((function(A){A.encodings.forEach((function(A){A.labels.forEach((function(Q){w[Q]=A}))}))}));var M,k,h={"UTF-8":function(A){return new S(A)}},y={"UTF-8":function(A){return new F(A)}},J="utf-8
2024-10-10 03:10:08 UTC	1369	IN	Data Raw: 75 20 66 6f 72 67 65 74 20 74 6f 20 69 6e 63 6c 75 64 65 20 65 6e 63 6f 64 69 6e 67 2d 69 6e 64 65 78 65 73 2e 6a 73 20 66 69 72 73 74 3f 22 29 3b 45 2e 5f 65 6e 63 6f 64 69 6e 67 3d 49 7d 65 6c 73 65 20 45 2e 5f 65 6e 63 6f 64 69 6e 67 3d 44 28 22 75 74 66 2d 38 22 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 7c 7c 28 74 68 69 73 2e 65 6e 63 6f 64 69 6e 67 3d 45 2e 5f 65 6e 63 6f 64 69 6e 67 2e 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 2c 45 7d 66 75 6e 63 74 69 6f 6e 20 46 28 51 29 7b 76 61 72 20 42 3d 51 2e 66 61 74 61 6c 2c 49 3d 30 2c 44 3d 30 2c 77 3d 30 2c 4d 3d 31 32 38 2c 6b 3d 31 39 31 3b 74 68 69 73 2e 68 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 51 2c 68 29 7b 69 66 28 68 3d 3d Data Ascii: u forget to include encoding-indexes.js first?");E._encoding=I}else E._encoding=D("utf-8");return Object.defineProperty\|\|(this.encoding=E._encoding.name.toLowerCase()),E}function F(Q){var B=Q.fatal,I=0,D=0,w=0,M=128,k=191;this.handler=function(Q,h){if(h==
2024-10-10 03:10:08 UTC	1369	IN	Data Raw: 6e 63 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 3f 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 41 2e 62 75 66 66 65 72 2c 41 2e 62 79 74 65 4f 66 66 73 65 74 2c 41 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 30 29 2c 42 3d 51 28 42 29 2c 74 68 69 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c 75 73 68 7c 7c 28 74 68 69 73 2e 5f 64 65 63 6f 64 65 72 3d 79 5b 74 68 69 73 2e 5f 65 6e 63 6f 64 69 6e 67 2e 6e 61 6d 65 5d 28 7b 66 61 74 61 6c 3a 22 66 61 74 61 6c 22 3d 3d 3d 74 68 69 73 2e 5f 65 72 72 6f 72 5f 6d 6f 64 65 7d 29 2c 74 68 69 73 2e 5f 42 4f 4d 73 65 65 6e 3d 21 31 29 2c 74 68 69 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c 75 73 68 3d 42 6f 6f 6c 65 61 6e 28 42 2e 73 74 72 65 61 6d 29 3b 66 6f 72 28 76 61 72 20 44 2c 77 3d Data Ascii: nceof ArrayBuffer?new Uint8Array(A.buffer,A.byteOffset,A.byteLength):new Uint8Array(0),B=Q(B),this._do_not_flush\|\|(this._decoder=y[this._encoding.name]({fatal:"fatal"===this._error_mode}),this._BOMseen=!1),this._do_not_flush=Boolean(B.stream);for(var D,w=
2024-10-10 03:10:08 UTC	1369	IN	Data Raw: 6e 67 74 68 2c 45 3d 30 2c 49 3d 5b 5d 3b 45 3c 42 3b 29 7b 76 61 72 20 43 3d 51 2e 63 68 61 72 43 6f 64 65 41 74 28 45 29 3b 69 66 28 43 3c 35 35 32 39 36 7c 7c 43 3e 35 37 33 34 33 29 49 2e 70 75 73 68 28 43 29 3b 65 6c 73 65 20 69 66 28 43 3e 3d 35 36 33 32 30 26 26 43 3c 3d 35 37 33 34 33 29 49 2e 70 75 73 68 28 36 35 35 33 33 29 3b 65 6c 73 65 20 69 66 28 43 3e 3d 35 35 32 39 36 26 26 43 3c 3d 35 36 33 31 39 29 69 66 28 45 3d 3d 3d 42 2d 31 29 49 2e 70 75 73 68 28 36 35 35 33 33 29 3b 65 6c 73 65 7b 76 61 72 20 67 3d 51 2e 63 68 61 72 43 6f 64 65 41 74 28 45 2b 31 29 3b 69 66 28 67 3e 3d 35 36 33 32 30 26 26 67 3c 3d 35 37 33 34 33 29 7b 76 61 72 20 44 3d 31 30 32 33 26 43 2c 77 3d 31 30 32 33 26 67 3b 49 2e 70 75 73 68 28 36 35 35 33 36 2b 28 44 3c Data Ascii: ngth,E=0,I=[];E<B;){var C=Q.charCodeAt(E);if(C<55296\|\|C>57343)I.push(C);else if(C>=56320&&C<=57343)I.push(65533);else if(C>=55296&&C<=56319)if(E===B-1)I.push(65533);else{var g=Q.charCodeAt(E+1);if(g>=56320&&g<=57343){var D=1023&C,w=1023&g;I.push(65536+(D<
2024-10-10 03:10:08 UTC	1369	IN	Data Raw: 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 46 61 69 6c 65 64 20 74 6f 20 65 78 65 63 75 74 65 20 27 61 74 6f 62 27 20 6f 6e 20 27 57 69 6e 64 6f 77 27 3a 20 54 68 65 20 73 74 72 69 6e 67 20 74 6f 20 62 65 20 64 65 63 6f 64 65 64 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 6c 79 20 65 6e 63 6f 64 65 64 2e 22 29 3b 76 61 72 20 51 2c 42 2c 45 3b 41 2b 3d 22 3d 3d 22 2e 73 6c 69 63 65 28 32 2d 28 33 26 41 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 49 3d 22 22 2c 43 3d 30 3b 43 3c 41 2e 6c 65 6e 67 74 68 3b 29 51 3d 4d 2e 69 6e 64 65 78 4f 66 28 41 2e 63 68 61 72 41 74 28 43 2b 2b 29 29 3c 3c 31 38 7c 4d 2e 69 6e 64 65 78 4f 66 28 41 2e 63 68 61 72 41 74 28 43 2b 2b 29 29 3c 3c 31 32 7c 28 42 3d 4d 2e 69 6e 64 65 78 4f 66 28 41 2e Data Ascii: hrow new TypeError("Failed to execute 'atob' on 'Window': The string to be decoded is not correctly encoded.");var Q,B,E;A+="==".slice(2-(3&A.length));for(var I="",C=0;C<A.length;)Q=M.indexOf(A.charAt(C++))<<18\|M.indexOf(A.charAt(C++))<<12\|(B=M.indexOf(A.
2024-10-10 03:10:08 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 20 6b 28 41 29 7b 76 61 72 20 51 2c 45 3d 56 41 3b 41 5b 45 28 35 31 39 29 5d 3f 49 28 41 5b 45 28 33 35 32 29 5d 29 3a 28 51 3d 41 5b 45 28 33 35 32 29 5d 2c 51 20 69 6e 73 74 61 6e 63 65 6f 66 20 42 3f 51 3a 6e 65 77 20 42 28 28 66 75 6e 63 74 69 6f 6e 28 41 29 7b 41 28 51 29 7d 29 29 29 5b 45 28 67 2e 5f 30 78 35 63 63 33 33 63 29 5d 28 77 2c 4d 29 7d 6b 28 28 45 3d 45 2e 61 70 70 6c 79 28 41 2c 51 7c 7c 5b 5d 29 29 5b 44 28 33 32 39 29 5d 28 29 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 55 28 41 2c 51 29 7b 76 61 72 20 42 2c 45 2c 49 2c 43 3d 34 35 39 2c 67 3d 56 41 2c 44 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 31 26 49 5b 30 5d 29 74 68 72 6f 77 20 49 5b 31 5d 3b 72 65 74 75 72 6e 20 49 Data Ascii: nction k(A){var Q,E=VA;A[E(519)]?I(A[E(352)]):(Q=A[E(352)],Q instanceof B?Q:new B((function(A){A(Q)})))[E(g._0x5cc33c)](w,M)}k((E=E.apply(A,Q\|\|[]))[D(329)]())}))}function U(A,Q){var B,E,I,C=459,g=VA,D={label:0,sent:function(){if(1&I[0])throw I[1];return I
2024-10-10 03:10:08 UTC	1369	IN	Data Raw: 20 52 3d 7b 7d 3b 72 65 74 75 72 6e 20 52 5b 67 28 73 29 5d 3d 43 5b 30 5d 3f 43 5b 31 5d 3a 76 6f 69 64 20 30 2c 52 5b 67 28 68 29 5d 3d 21 30 2c 52 7d 28 5b 43 2c 67 5d 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 48 28 41 2c 51 2c 42 29 7b 76 61 72 20 45 3d 35 38 34 2c 49 3d 33 36 37 2c 43 3d 56 41 3b 69 66 28 42 7c 7c 32 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 43 28 33 34 32 29 5d 29 66 6f 72 28 76 61 72 20 67 2c 44 3d 30 2c 77 3d 51 2e 6c 65 6e 67 74 68 3b 44 3c 77 3b 44 2b 2b 29 21 67 26 26 44 20 69 6e 20 51 7c 7c 28 67 7c 7c 28 67 3d 41 72 72 61 79 5b 43 28 45 29 5d 5b 43 28 34 33 38 29 5d 5b 43 28 32 35 32 29 5d 28 51 2c 30 2c 44 29 29 2c 67 5b 44 5d 3d 51 5b 44 5d 29 3b 72 65 74 75 72 6e 20 41 5b 43 28 49 29 5d 28 67 7c 7c 41 72 72 61 79 5b 43 28 35 38 Data Ascii: R={};return R[g(s)]=C[0]?C[1]:void 0,R[g(h)]=!0,R}([C,g])}}}function H(A,Q,B){var E=584,I=367,C=VA;if(B\|\|2===arguments[C(342)])for(var g,D=0,w=Q.length;D<w;D++)!g&&D in Q\|\|(g\|\|(g=Array[C(E)][C(438)][C(252)](Q,0,D)),g[D]=Q[D]);return A[C(I)](g\|\|Array[C(58
2024-10-10 03:10:08 UTC	1369	IN	Data Raw: 2e 63 6f 6e 6e 65 63 74 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 50 3f 76 6f 69 64 20 30 3a 50 2e 74 79 70 65 29 2c 5a 3d 4c 28 33 35 38 29 69 6e 20 77 69 6e 64 6f 77 2c 75 3d 77 69 6e 64 6f 77 5b 4c 28 33 39 32 29 5d 3e 31 2c 70 3d 4d 61 74 68 5b 4c 28 34 36 37 29 5d 28 6e 75 6c 6c 3d 3d 3d 28 6e 3d 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 5b 4c 28 33 38 38 29 5d 2c 6e 75 6c 6c 3d 3d 3d 28 72 3d 77 69 6e 64 6f 77 5b 4c 28 35 33 30 29 5d 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 68 65 69 67 68 74 29 2c 76 3d 6e 61 76 69 67 61 74 6f 72 2e 6d 61 78 54 6f 75 63 68 50 6f 69 6e 74 73 2c 6c 3d 6e 61 76 69 67 61 74 6f 72 5b 4c 28 33 37 37 29 5d 2c 56 3d 4c 28 33 30 39 Data Ascii: .connection)\|\|void 0===P?void 0:P.type),Z=L(358)in window,u=window[L(392)]>1,p=Math[L(467)](null===(n=window.screen)\|\|void 0===n?void 0:n[L(388)],null===(r=window[L(530)])\|\|void 0===r?void 0:r.height),v=navigator.maxTouchPoints,l=navigator[L(377)],V=L(309
2024-10-10 03:10:08 UTC	1369	IN	Data Raw: 28 45 29 69 6e 20 77 69 6e 64 6f 77 2c 22 42 6c 6f 63 6b 65 64 22 29 2c 5b 34 2c 42 28 6a 28 29 2c 31 30 30 29 5d 29 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 28 51 3d 67 5b 44 28 49 29 5d 28 29 29 26 26 51 2e 6c 65 6e 67 74 68 3f 28 41 28 44 28 43 29 2c 51 29 2c 5b 32 5d 29 3a 5b 32 5d 7d 7d 29 29 7d 29 29 7d 29 29 2c 24 3d 5b 4c 28 35 36 31 29 2c 4c 28 36 32 38 29 2c 22 6d 6f 64 65 6c 22 2c 4c 28 36 36 34 29 2c 4c 28 35 39 38 29 2c 4c 28 33 32 33 29 5d 2c 41 41 3d 6f 28 4c 28 35 36 38 29 2c 28 66 75 6e 63 74 69 6f 6e 28 41 2c 51 2c 42 29 7b 72 65 74 75 72 6e 20 52 28 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 51 2c 45 2c 49 2c 43 3d 35 39 36 2c 67 3d 32 35 37 3b 72 65 74 75 72 6e 20 55 Data Ascii: (E)in window,"Blocked"),[4,B(j(),100)]);case 1:return(Q=g[D(I)]())&&Q.length?(A(D(C),Q),[2]):[2]}}))}))})),$=[L(561),L(628),"model",L(664),L(598),L(323)],AA=o(L(568),(function(A,Q,B){return R(void 0,void 0,void 0,(function(){var Q,E,I,C=596,g=257;return U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49730	104.19.229.21	443	6848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 03:10:15 UTC	561	OUT	OPTIONS /getcaptcha/fa9a729a-76ea-4876-8768-9194430429ac HTTP/1.1 Host: api.hcaptcha.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://newassets.hcaptcha.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://newassets.hcaptcha.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 03:10:15 UTC	553	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 03:10:15 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://newassets.hcaptcha.com Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Cache-Control, Content-Type, DNT, Referer, User-Agent Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8d036a90e9b18ce0-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49731	104.19.229.21	443	6848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 03:10:15 UTC	707	OUT	POST /getcaptcha/fa9a729a-76ea-4876-8768-9194430429ac HTTP/1.1 Host: api.hcaptcha.com Connection: keep-alive Content-Length: 15100 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json, application/octet-stream content-type: application/octet-stream sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://newassets.hcaptcha.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://newassets.hcaptcha.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 03:10:15 UTC	15100	OUT	Data Raw: 92 da 02 d6 7b 22 74 79 70 65 22 3a 22 68 73 77 22 2c 22 72 65 71 22 3a 22 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 4c 43 4a 68 62 47 63 69 4f 69 4a 49 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 6d 49 6a 6f 77 4c 43 4a 7a 49 6a 6f 79 4c 43 4a 30 49 6a 6f 69 64 79 49 73 49 6d 51 69 4f 69 49 33 61 57 64 4c 59 56 70 6b 57 45 39 6a 4d 30 6b 33 4e 55 51 72 55 32 4a 48 59 33 64 73 56 48 4d 33 57 6d 6f 34 4e 7a 4a 4e 53 6b 70 79 55 6b 4a 34 59 57 56 75 56 6c 56 36 53 47 46 4d 57 55 77 78 55 32 70 36 61 45 78 72 4d 56 70 42 53 6b 6c 61 57 44 4e 52 4e 6b 64 73 55 55 35 5a 56 6c 4d 72 51 54 46 73 61 6a 4a 33 4d 56 70 6b 53 6b 6b 33 62 54 41 79 61 45 4e 47 57 58 4a 61 57 44 41 78 55 48 64 5a 54 69 74 73 64 6b 35 57 54 79 73 31 61 33 52 45 52 30 70 70 63 48 55 33 63 Data Ascii: {"type":"hsw","req":"eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJmIjowLCJzIjoyLCJ0IjoidyIsImQiOiI3aWdLYVpkWE9jM0k3NUQrU2JHY3dsVHM3Wmo4NzJNSkpyUkJ4YWVuVlV6SGFMWUwxU2p6aExrMVpBSklaWDNRNkdsUU5ZVlMrQTFsajJ3MVpkSkk3bTAyaENGWXJaWDAxUHdZTitsdk5WTys1a3RER0ppcHU3c
2024-10-10 03:10:16 UTC	597	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 03:10:16 GMT Content-Type: application/octet-stream Content-Length: 7199 Connection: close CF-Ray: 8d036a94aa23185d-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://newassets.hcaptcha.com Set-Cookie: __cflb=0H28vk2VKwPbLoawFincekpozDKK5F2ccjRmLzF24n9; SameSite=Lax; path=/; expires=Thu, 10-Oct-24 03:40:16 GMT; HttpOnly Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin access-control-allow-credentials: true x-content-type-options: nosniff Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-10-10 03:10:16 UTC	772	IN	Data Raw: 09 ba f9 eb a2 b6 40 d4 bb 9a 83 74 f6 d1 e9 b4 38 8e f9 fd 3d e6 1f a7 1d 13 7e 34 e4 fb 4c f6 cf ea d6 4a d6 02 69 06 cc 3a 05 9e f4 c8 9a e4 5c b4 57 cd fe ea 7e 2f b4 a5 03 fa ba ca c1 06 42 db c8 e9 2c 50 93 00 38 cd 98 80 ca 92 f0 09 07 fb 87 9b 88 25 81 4d 64 ed 23 a8 e1 d5 ce bf 48 7a f0 dc ba fb c0 d6 01 a9 8d 5e 85 5a 54 64 1d 41 71 57 24 2a 72 7c 16 d7 93 fa bd 56 20 ae d0 2d b5 27 4a da 14 a2 e1 85 66 f6 b1 b3 0a d3 d7 1f 07 ec 83 81 df 06 80 b7 3f fd 8f cc 45 73 06 30 c9 ca 69 a1 7b fd 49 d4 ae 24 a4 2a 89 18 8b 03 d9 13 32 1f ac 44 4c 6d b9 0d 75 dc 2a 5f 49 91 97 ed f8 94 e2 a1 ee 5d 52 ea 1e b2 25 4d e7 90 51 78 d3 78 f0 1c 6c 3d 6f 69 bb 75 84 ad 87 97 72 a8 f0 d3 2b ce ce f2 a7 dc 0a 64 e2 5b bd 49 49 c5 f2 1a 69 ea e0 2d 17 f6 55 24 0f Data Ascii: @t8=~4LJi:\W~/B,P8%Md#Hz^ZTdAqW$r\|V -'Jf?Es0i{I$2DLmu*_I]R%MQxxl=oiur+d[IIi-U$
2024-10-10 03:10:16 UTC	1369	IN	Data Raw: a6 25 84 52 d3 af 80 dd f2 ce ee d7 bc 4e 85 5d b8 46 af f8 ef a2 84 bd 25 9d d6 cd 1e 97 d9 b5 41 a1 15 a4 36 c3 ad 8f ba c0 13 d3 ef 40 c2 9c d9 ce 66 46 35 ee 65 21 15 6e 62 72 ab f9 5c fe a6 7e a4 27 4d a6 e4 c7 94 b0 61 c9 00 7d b3 f6 2d 0b f6 4c 46 53 d7 57 14 04 3f 48 5a c0 69 dd dc 7e 32 5c 1f a7 0e 79 ed bd 58 69 49 3a d2 01 78 a1 4d 27 13 39 dd b2 a6 bd a6 5c f6 dd 5c 2a 20 c0 48 61 fb 99 fb e3 f7 85 4c 81 82 4c b7 58 41 12 c5 27 76 c5 cf ba 99 f4 8e f3 02 ea b1 5d 9c 1f 4f 99 6b af 05 6e 38 9d c7 1f 79 01 26 b0 7a f2 6e 8c d1 6a 45 ec 1b 14 a7 81 6f 04 f1 98 0a 6c ea 2d 3f 4f 2c c2 3d 98 ed 9a 57 55 37 94 c2 60 20 82 db 53 e2 dd a2 4c a3 8c 00 90 f9 e8 1f 4f c8 47 5b 8d 5a f8 66 92 ca 83 e5 d2 7a f8 22 94 30 37 41 59 37 ac 1e 02 db af ab e6 a1 Data Ascii: %RN]F%A6@fF5e!nbr\~'Ma}-LFSW?HZi~2\yXiI:xM'9\\* HaLLXA'v]Okn8y&znjEol-?O,=WU7` SLOG[Zfz"07AY7
2024-10-10 03:10:16 UTC	1369	IN	Data Raw: 26 2a 8d 53 e8 d9 f2 7e 5c e8 c9 4f 4f bb 9c 97 3a 38 83 fe 8f 64 f8 d0 7f f5 62 85 46 d8 fd 4a cc d9 c5 e1 da 6d 2e 40 89 7d a2 d0 e9 a5 69 14 a5 d9 d3 a7 e1 b3 6d 75 ee bf 32 6e cd 31 40 14 fc 8e 01 1a c4 c8 19 50 bc 6f 7e 56 80 62 88 c8 09 eb 4a 1d ee a1 62 f6 f9 37 76 a8 f4 fb 2d 22 10 ce a5 36 b9 00 0a 0b aa 74 4e 9c 1b 4c fb 8b b5 66 78 ab da c6 d7 b0 ae da 86 e0 de 87 26 b4 12 ed 22 e2 9a 2c 95 f9 71 98 b8 40 27 2f 7d 6f 61 01 14 81 d3 17 b3 4f d0 f5 d6 96 49 d1 d2 f5 50 34 57 a2 43 a9 40 cd bd 7f 4c b0 b9 5a 63 f0 d7 fa ff 1d 91 78 96 f6 cb 97 39 ea 27 aa 20 33 05 c4 e7 58 20 d2 e6 af 7f f1 f8 33 93 70 82 64 0a 59 2f 96 b5 e9 de 69 f5 43 d4 42 6b 1c 77 0b e2 bc 54 26 98 b7 18 5c ce 67 22 db a0 de 71 6f ad 22 8c e0 5f 91 a5 a2 85 ad f9 a9 74 68 90 Data Ascii: &*S~\OO:8dbFJm.@}imu2n1@Po~VbJb7v-"6tNLfx&",q@'/}oaOIP4WC@LZcx9' 3X 3pdY/iCBkwT&\g"qo"_th
2024-10-10 03:10:16 UTC	1369	IN	Data Raw: 71 2b d9 1e 4e 1a 6a 92 23 1e a2 56 7b 67 6c 19 1e 54 a3 45 99 24 e2 b7 5b e6 67 29 f6 15 1f d5 53 43 78 28 93 75 a6 b3 fb d6 11 9c ce 9e 66 f5 26 29 5b 62 49 6d c8 94 c4 5d e0 93 1f d3 37 5f 06 3b c0 d9 0e d4 59 62 87 ea 8d e6 3c f5 3c 53 d7 64 22 4f 7f a7 3d c6 52 04 ff b8 74 a6 23 18 f8 9c 36 b4 5a 89 70 54 24 e9 85 d0 d1 64 9c ec 92 c6 02 2b 18 ab 8e a6 5c fe f8 3f a6 dd 23 32 02 2d 84 94 46 cb b3 1d 6e 98 23 17 0e 10 3d df cf 11 2b fd b2 1d eb d7 f5 d6 60 43 40 bf c1 36 08 ff 40 89 01 0d 97 57 79 02 57 de 3e 34 00 b2 ad d0 24 05 56 16 81 d5 b7 6f 57 3a 4a 5c 3e 4b d1 8d 4d 88 26 1e 9d 85 2d 0b 40 fe e1 6e 76 be 78 67 8d cc 58 76 50 d3 e1 81 c1 a5 f1 03 2a b4 f1 0e 60 88 2b 49 1a b0 3b be e0 b4 f9 3a 7f 71 be 5b 5c 35 a9 bc 4f cd 72 2a 05 5e 32 77 21 Data Ascii: q+Nj#V{glTE$[g)SCx(uf&)[bIm]7_;Yb<<Sd"O=Rt#6ZpT$d+\?#2-Fn#=+`C@6@WyW>4$VoW:J\>KM&-@nvxgXvP`+I;:q[\5Or^2w!
2024-10-10 03:10:16 UTC	1369	IN	Data Raw: 9d 02 84 e4 c9 8f 2f af 89 c6 1a 19 d3 91 d6 af cd 8c 6c f6 cf 61 79 20 8c 78 9c dd d6 71 d5 72 e2 33 d1 57 b4 6a df 5f 01 72 34 5a 41 7f e4 1b e3 71 8c bc 47 4d 52 d6 11 aa 03 d2 a0 89 11 ab eb 6c 04 d5 71 db bb 83 80 4e e6 b2 c1 49 0b 78 f2 ac b6 24 5e 23 e2 71 0c ee 59 53 5c b0 91 71 fa 1c 50 57 39 a2 ae 9f 81 c4 94 c7 58 e6 ad 5e f5 55 70 ca a1 47 5d 8f 95 67 b3 7f 32 85 b9 c9 ca 78 c2 ef 07 b8 e6 b4 e0 ce 53 a7 6f 1c 50 ae 7c 6a d3 76 1f 60 25 28 58 55 87 50 98 24 c3 28 e5 2d 52 b4 f4 88 2e db f4 7c c8 5f 6b 26 7c 7a c4 7e fd e4 71 4b 6b 19 a9 3f 0c d0 2e df 46 5f f2 6e 7a 23 35 54 58 5d 43 3f 40 7e b6 67 2c 20 ba 0e e5 51 14 27 79 a5 f0 10 95 2f 06 f0 4a 34 5e 20 0b 84 0f 02 26 96 0a 58 46 f7 f6 9a 98 f1 ed 4d 23 d6 03 6f f8 4a 35 0b 6c f6 e1 8b fc Data Ascii: /lay xqr3Wj_r4ZAqGMRlqNIx$^#qYS\qPW9X^UpG]g2xSoP\|jv`%(XUP$(-R.\|_k&\|z~qKk?.F_nz#5TX]C?@~g, Q'y/J4^ &XFM#oJ5l
2024-10-10 03:10:16 UTC	951	IN	Data Raw: e5 cc de 5a e9 96 87 7d c9 17 68 72 9e 88 07 d7 74 6a 70 8d 1f 16 74 5b ad 6a db f9 d2 d3 ab c2 21 12 04 35 62 83 eb 78 ec 76 01 7f 39 a0 91 bc da af 43 cc 0d de f0 99 a8 e9 ed 4e ce 49 9c 38 16 bf 2c d2 8e ce 70 31 12 68 21 da 6f d2 cc 50 1e 0f b0 42 b4 4a 6a ee 61 bc 4a ea f3 d9 73 79 35 e7 79 4d af 7e 0d e0 bb 3b ca 8e 7e 52 03 80 fd 88 11 fa 42 95 98 aa 5b 65 e9 70 f1 a2 33 3a 3f cc 3a 0e 2a 88 19 01 02 eb f4 df 06 36 4a d9 d5 01 03 25 b5 20 ff 36 34 f7 15 09 23 3c b1 4e 76 8b 64 e7 79 b8 f5 76 cf d4 b4 86 56 e4 7d f7 4e c0 b2 84 b8 20 15 db 85 18 a9 b3 d7 76 13 46 e8 97 29 1f a6 2c d7 85 80 c3 90 76 0a 90 1e 3d d8 56 d4 32 18 d1 58 26 4f fd 90 e5 7e f6 14 d3 12 5a d8 cc c7 97 c3 1b db cf 4d d4 4f 1b b0 71 4f 06 a3 d9 a6 96 52 f9 b1 0d e3 94 0f 93 4a Data Ascii: Z}hrtjpt[j!5bxv9CNI8,p1h!oPBJjaJsy5yM~;~RB[ep3:?:*6J% 64#<NvdyvV}N vF),v=V2X&O~ZMOqORJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49732	104.19.230.21	443	6848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 03:10:16 UTC	387	OUT	GET /getcaptcha/fa9a729a-76ea-4876-8768-9194430429ac HTTP/1.1 Host: api.hcaptcha.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 03:10:16 UTC	535	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 10 Oct 2024 03:10:16 GMT Content-Type: text/plain Content-Length: 14 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Cache-Control, Content-Type, DNT, Referer, User-Agent Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8d036a9a9e7642ef-EWR alt-svc: h3=":443"; ma=86400
2024-10-10 03:10:16 UTC	14	IN	Data Raw: 49 6e 76 61 6c 69 64 20 4d 65 74 68 6f 64 Data Ascii: Invalid Method

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49733	104.19.229.21	443	6848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 03:10:16 UTC	633	OUT	GET /captcha/v1/2766c43/challenge/image_label_area_select/challenge.js HTTP/1.1 Host: newassets.hcaptcha.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://newassets.hcaptcha.com/captcha/v1/2766c43/static/hcaptcha.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 03:10:16 UTC	429	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 03:10:16 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close etag: W/"e7eb40a17f017e7b0651dec263c01ffc" Cache-Control: max-age=3600 alt-svc: h3=":443"; ma=86400 vary: Origin CF-Cache-Status: HIT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8d036a9acc7b18f2-EWR
2024-10-10 03:10:16 UTC	940	IN	Data Raw: 37 64 65 37 0d 0a 2f 2a 20 68 74 74 70 73 3a 2f 2f 68 63 61 70 74 63 68 61 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 76 61 72 20 69 6d 61 67 65 5f 6c 61 62 65 6c 5f 61 72 65 61 5f 73 65 6c 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 65 2c 73 2c 6f 2c 6e 2c 68 2c 61 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 69 2e 45 78 74 65 6e 64 2e 73 65 6c 66 28 74 68 69 73 2c 69 2e 44 6f 6d 43 6f 6d 70 6f 6e 65 6e 74 2c 22 65 78 61 6d 70 6c 65 2d 69 6d 61 67 65 22 29 2c 74 68 69 73 2e 77 69 64 74 68 3d 30 2c 74 68 69 73 2e 68 65 69 67 68 74 3d 30 2c 74 68 69 73 2e 5f 69 6d 61 67 65 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 76 69 73 69 62 6c 65 3d 21 31 2c 74 68 69 73 2e 24 69 6d 61 67 65 3d 74 68 69 73 2e 63 72 65 Data Ascii: 7de7/* https://hcaptcha.com/license */var image_label_area_select=function(t,i,e,s,o,n,h,a,r){"use strict";function l(){i.Extend.self(this,i.DomComponent,"example-image"),this.width=0,this.height=0,this._image=null,this._visible=!1,this.$image=this.cre
2024-10-10 03:10:16 UTC	1369	IN	Data Raw: 3a 30 2c 70 6f 73 69 74 69 6f 6e 3a 22 61 62 73 6f 6c 75 74 65 22 2c 6f 76 65 72 66 6c 6f 77 3a 22 68 69 64 64 65 6e 22 7d 29 2c 74 68 69 73 2e 24 69 6d 61 67 65 2e 63 73 73 28 7b 6f 70 61 63 69 74 79 3a 74 68 69 73 2e 5f 76 69 73 69 62 6c 65 3f 31 3a 30 7d 29 2c 6e 75 6c 6c 21 3d 3d 74 68 69 73 2e 5f 69 6d 61 67 65 26 26 74 68 69 73 2e 24 69 6d 61 67 65 2e 62 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 28 74 68 69 73 2e 5f 69 6d 61 67 65 2c 74 2c 69 2c 7b 63 6f 76 65 72 3a 21 30 2c 63 65 6e 74 65 72 3a 21 30 7d 29 2c 74 68 69 73 2e 77 69 64 74 68 3d 74 2c 74 68 69 73 2e 68 65 69 67 68 74 3d 69 7d 2c 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 69 2e 4c 6f 61 64 Data Ascii: :0,position:"absolute",overflow:"hidden"}),this.$image.css({opacity:this._visible?1:0}),null!==this._image&&this.$image.backgroundImage(this._image,t,i,{cover:!0,center:!0}),this.width=t,this.height=i},l.prototype.load=function(t){var e=this;return i.Load
2024-10-10 03:10:16 UTC	1369	IN	Data Raw: 64 69 73 70 6c 61 79 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 5f 76 69 73 69 62 6c 65 3d 74 2c 74 68 69 73 2e 63 73 73 28 7b 64 69 73 70 6c 61 79 3a 74 68 69 73 2e 68 61 73 45 78 61 6d 70 6c 65 73 28 29 3f 22 62 6c 6f 63 6b 22 3a 22 6e 6f 6e 65 22 2c 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 74 3f 22 23 66 66 66 22 3a 22 23 65 36 65 36 65 36 22 7d 29 3b 66 6f 72 28 76 61 72 20 69 3d 2d 31 3b 2b 2b 69 3c 74 68 69 73 2e 63 68 69 6c 64 72 65 6e 2e 6c 65 6e 67 74 68 3b 29 74 68 69 73 2e 63 68 69 6c 64 72 65 6e 5b 69 5d 2e 64 69 73 70 6c 61 79 28 74 29 7d 2c 70 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 69 3d 2d 31 3b 69 66 28 74 68 69 73 2e 63 68 69 6c 64 72 65 6e 2e 6c 65 6e 67 74 Data Ascii: display=function(t){this._visible=t,this.css({display:this.hasExamples()?"block":"none",backgroundColor:t?"#fff":"#e6e6e6"});for(var i=-1;++i<this.children.length;)this.children[i].display(t)},p.prototype.clear=function(){var t,i=-1;if(this.children.lengt
2024-10-10 03:10:16 UTC	1369	IN	Data Raw: 66 44 77 38 50 48 78 38 66 7a 38 2f 50 33 39 2f 65 66 6e 35 2f 37 2b 2f 76 2f 2f 2f 2b 62 6d 35 67 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 43 48 2f 43 30 35 46 56 46 4e 44 51 56 42 46 4d 69 34 77 41 77 45 41 41 41 41 68 2f 77 74 59 54 56 41 67 52 47 46 30 59 56 68 4e 55 44 77 2f 65 48 42 68 59 32 74 6c 64 43 42 69 5a 57 64 70 62 6a 30 69 37 37 75 2f 49 69 42 70 5a 44 30 69 56 7a 56 4e 4d 45 31 77 51 32 56 6f 61 55 68 36 63 6d 56 54 65 6b 35 55 59 33 70 72 59 7a 6c 6b 49 6a 38 2b 49 44 78 34 4f 6e 68 74 63 47 31 6c 64 47 45 67 65 47 31 73 62 6e 4d 36 65 44 30 69 59 57 52 76 59 6d 55 36 62 6e 4d 36 62 57 56 30 59 53 38 69 49 48 67 36 65 47 31 77 64 47 73 39 49 6b 46 6b 62 32 4a 6c 49 46 68 4e 55 43 42 44 62 33 4a 6c 49 44 59 75 Data Ascii: fDw8PHx8fz8/P39/efn5/7+/v///+bm5gAAAAAAAAAAAAAAAAAAAAAAACH/C05FVFNDQVBFMi4wAwEAAAAh/wtYTVAgRGF0YVhNUDw/eHBhY2tldCBiZWdpbj0i77u/IiBpZD0iVzVNME1wQ2VoaUh6cmVTek5UY3prYzlkIj8+IDx4OnhtcG1ldGEgeG1sbnM6eD0iYWRvYmU6bnM6bWV0YS8iIHg6eG1wdGs9IkFkb2JlIFhNUCBDb3JlIDYu
2024-10-10 03:10:16 UTC	1369	IN	Data Raw: 68 58 56 6c 56 55 55 31 4a 52 55 45 39 4f 54 55 78 4c 53 6b 6c 49 52 30 5a 46 52 45 4e 43 51 55 41 2f 50 6a 30 38 4f 7a 6f 35 4f 44 63 32 4e 54 51 7a 4d 6a 45 77 4c 79 34 74 4c 43 73 71 4b 53 67 6e 4a 69 55 6b 49 79 49 68 49 42 38 65 48 52 77 62 47 68 6b 59 46 78 59 56 46 42 4d 53 45 52 41 50 44 67 30 4d 43 77 6f 4a 43 41 63 47 42 51 51 44 41 67 45 41 41 43 48 35 42 41 51 44 41 50 38 41 49 66 34 5a 54 33 42 30 61 57 31 70 65 6d 56 6b 49 48 56 7a 61 57 35 6e 49 47 56 36 5a 32 6c 6d 4c 6d 4e 76 62 51 41 73 41 41 41 41 41 4d 67 41 79 41 41 41 42 66 39 67 4a 6f 35 6b 61 5a 35 6f 71 71 35 73 36 37 35 77 4c 4d 39 30 62 64 39 34 72 75 39 38 37 2f 2f 41 6f 48 42 49 4c 42 71 50 79 4b 52 79 79 57 77 36 6e 39 43 6f 64 45 71 74 57 71 2f 59 72 48 62 4c 37 58 71 2f 34 Data Ascii: hXVlVUU1JRUE9OTUxLSklIR0ZFRENCQUA/Pj08Ozo5ODc2NTQzMjEwLy4tLCsqKSgnJiUkIyIhIB8eHRwbGhkYFxYVFBMSERAPDg0MCwoJCAcGBQQDAgEAACH5BAQDAP8AIf4ZT3B0aW1pemVkIHVzaW5nIGV6Z2lmLmNvbQAsAAAAAMgAyAAABf9gJo5kaZ5oqq5s675wLM90bd94ru987//AoHBILBqPyKRyyWw6n9CodEqtWq/YrHbL7Xq/4
2024-10-10 03:10:16 UTC	1369	IN	Data Raw: 77 4a 67 72 72 72 4f 35 7a 4b 65 62 4d 30 50 52 38 4d 2f 62 33 2b 76 49 78 34 37 65 6e 33 62 38 72 38 52 4b 75 49 75 68 6d 33 45 47 45 41 74 48 74 59 78 6a 47 34 4d 4d 67 43 68 56 53 62 47 6a 78 59 55 61 4e 47 2b 45 34 76 42 69 70 30 6a 4d 32 4a 38 31 74 68 55 52 42 67 75 53 51 6a 2f 45 51 72 45 53 42 62 4f 54 46 58 6e 5a 32 6d 51 7a 70 36 69 5a 4d 6b 42 74 56 65 44 79 31 70 6b 76 52 58 68 52 4a 48 66 7a 35 4d 52 73 39 54 66 61 47 47 56 6f 79 4e 5a 5a 54 62 55 6a 63 44 5a 4a 56 64 59 71 31 71 37 35 67 62 41 72 47 74 4f 7a 43 73 48 46 65 78 56 51 54 7a 39 67 55 54 68 6c 31 54 6f 6f 72 62 6b 6b 5a 73 79 6c 4c 35 46 30 4c 6c 6d 58 4e 4c 43 7a 4e 36 6e 55 69 52 58 43 50 64 43 39 43 41 41 41 68 2b 51 51 46 41 77 41 41 41 43 77 4e 41 46 49 41 72 77 41 6b 41 41 Data Ascii: wJgrrrO5zKebM0PR8M/b3+vIx47en3b8r8RKuIuhm3EGEAtHtYxjG4MMgChVSbGjxYUaNG+E4vBip0jM2J81thURBguSQj/EQrESBbOTFXnZ2mQzp6iZMkBtVeDy1pkvRXhRJHfz5MRs9TfaGGVoyNZZTbUjcDZJVdYq1q75gbArGtOzCsHFexVQTz9gUThl1ToorbkkZsylL5F0LlmXNLCzN6nUiRXCPdC9CAAAh+QQFAwAAACwNAFIArwAkAA
2024-10-10 03:10:16 UTC	1369	IN	Data Raw: 55 65 55 50 6e 35 69 7a 55 2f 6e 6f 6c 6c 76 33 37 68 77 68 41 41 41 68 2b 51 51 46 41 77 41 49 41 43 77 4d 41 46 49 41 73 41 41 6b 41 41 41 45 2f 78 44 4a 53 61 75 67 74 2b 72 4e 75 2f 39 67 4b 49 34 6b 52 30 68 6e 36 51 30 4e 31 77 78 71 4c 45 73 42 59 4e 2f 33 72 4b 74 4d 37 2f 63 37 68 45 4d 30 44 42 6f 72 75 47 54 79 79 4a 7a 38 6e 73 2b 6d 64 45 70 54 57 70 56 55 47 58 51 62 46 53 6c 61 73 59 59 69 4f 36 70 64 7a 7a 6c 79 61 47 48 67 75 72 73 72 33 55 45 64 51 74 73 42 64 4e 42 37 37 2f 4e 38 67 77 64 6a 65 52 74 33 64 34 4d 62 62 48 79 4b 43 79 35 48 59 49 64 56 68 59 57 51 54 6f 75 4b 6c 49 4d 46 6b 70 75 59 6c 70 65 59 64 4a 75 63 6b 4a 36 4c 53 46 4e 46 6d 61 4b 54 70 4b 56 38 6f 47 53 72 6f 33 6d 75 70 6a 52 5a 4d 4c 53 79 72 4c 71 31 65 78 4f Data Ascii: UeUPn5izU/nollv37hwhAAAh+QQFAwAIACwMAFIAsAAkAAAE/xDJSaugt+rNu/9gKI4kR0hn6Q0N1wxqLEsBYN/3rKtM7/c7hEM0DBoruGTyyJz8ns+mdEpTWpVUGXQbFSlasYYiO6pdzzlyaGHgursr3UEdQtsBdNB77/N8gwdjeRt3d4MbbHyKCy5HYIdVhYWQTouKlIMFkpuYlpeYdJuckJ6LSFNFmaKTpKV8oGSro3mupjRZMLSyrLq1exO
2024-10-10 03:10:16 UTC	1369	IN	Data Raw: 38 2f 69 36 53 49 49 35 4d 7a 6e 36 48 77 7a 67 66 4c 7a 37 57 72 6d 37 32 43 37 69 2f 54 78 39 6d 6e 34 38 6a 6c 52 52 35 44 64 50 34 41 43 39 52 46 55 64 35 42 4c 74 59 52 4f 73 43 33 4d 31 6e 44 4c 43 49 67 2f 4a 6a 4b 73 75 4d 59 62 52 69 41 61 30 33 46 45 30 67 78 6a 53 4a 45 6a 53 31 39 38 64 4b 55 72 53 73 74 36 48 46 57 61 50 43 6b 75 56 6b 4d 70 43 59 4f 5a 79 76 51 4b 31 63 46 4c 2b 5a 42 70 47 69 50 73 5a 6f 74 33 30 42 6f 4e 55 64 72 54 48 69 4e 72 32 5a 6a 65 6b 4f 72 4b 35 72 51 59 7a 73 49 4e 37 61 4f 4e 57 35 39 61 49 73 75 45 38 35 6b 71 69 43 31 31 4c 79 38 56 35 45 58 74 7a 78 65 61 63 41 58 64 75 34 4a 43 49 6c 77 47 2f 65 4b 75 32 31 73 6a 42 41 41 68 2b 51 51 46 41 77 41 42 41 43 77 4d 41 46 49 41 73 41 41 6b 41 41 41 46 2f 32 41 67 Data Ascii: 8/i6SII5Mzn6HwzgfLz7Wrm72C7i/Tx9mn48jlRR5DdP4AC9RFUd5BLtYROsC3M1nDLCIg/JjKsuMYbRiAa03FE0gxjSJEjS198dKUrSst6HFWaPCkuVkMpCYOZyvQK1cFL+ZBpGiPsZot30BoNUdrTHiNr2ZjekOrK5rQYzsIN7aONW59aIsuE85kqiC11Ly8V5EXtzxeacAXdu4JCIlwG/eKu21sjBAAh+QQFAwABACwMAFIAsAAkAAAF/2Ag
2024-10-10 03:10:16 UTC	1369	IN	Data Raw: 48 49 75 4e 32 63 6a 4c 50 67 69 62 5a 78 35 75 54 6c 33 2b 68 74 34 75 50 74 5a 74 62 77 65 38 2f 73 39 50 57 4e 39 2f 6a 6d 2b 76 5a 68 73 65 66 50 6a 54 77 74 41 72 73 38 4b 38 68 47 6e 5a 67 62 68 78 41 6b 48 4e 69 50 6f 61 2b 44 56 69 59 4f 71 57 68 78 45 63 42 6f 71 7a 51 61 34 74 67 52 67 6a 61 51 49 53 64 64 58 69 4a 57 45 71 4d 61 6c 62 74 61 75 6b 51 49 63 36 58 4d 6d 52 6e 33 71 56 72 44 45 4f 64 4c 6e 54 73 4c 75 6e 49 59 79 4d 57 2b 53 4b 4c 38 2b 55 78 47 44 74 6f 74 65 45 76 4a 79 4b 47 47 39 43 6d 32 67 30 52 37 7a 4d 67 31 6b 79 65 74 71 49 65 57 7a 54 78 58 43 32 7a 41 4c 68 50 4d 73 74 78 7a 4c 4b 6f 55 46 41 4b 63 6d 6a 30 70 49 69 76 4f 47 7a 6c 32 79 41 67 42 41 43 48 35 42 41 55 44 41 41 6f 41 4c 41 77 41 55 67 43 77 41 43 51 41 41 Data Ascii: HIuN2cjLPgibZx5uTl3+ht4uPtZtbwe8/s9PWN9/jm+vZhsefPjTwtArs8K8hGnZgbhxAkHNiPoa+DViYOqWhxEcBoqzQa4tgRgjaQISddXiJWEqMalbtaukQIc6XMmRn3qVrDEOdLnTsLunIYyMW+SKL8+UxGDtoteEvJyKGG9Cm2g0R7zMg1kyetqIeWzTxXC2zALhPMstxzLKoUFAKcmj0pIivOGzl2yAgBACH5BAUDAAoALAwAUgCwACQAA
2024-10-10 03:10:16 UTC	1369	IN	Data Raw: 49 68 7a 6f 45 68 4d 69 61 5a 4d 6c 63 4a 67 47 2b 61 50 52 4a 4e 55 56 6b 31 36 6f 57 32 75 77 32 63 78 4f 70 57 4c 6f 74 6d 38 38 6a 72 37 6f 37 32 34 33 66 50 37 51 73 63 51 67 65 45 76 49 57 67 72 48 75 73 33 56 77 67 58 6b 74 46 45 69 46 67 79 70 2b 69 6b 79 41 67 59 4b 49 4a 33 52 50 46 48 69 51 4d 49 75 59 54 6c 61 4f 6e 45 53 57 49 33 56 55 6f 5a 39 63 6d 59 73 75 6e 61 6d 6b 71 32 61 6d 6d 4a 75 70 6e 4b 79 7a 56 4b 36 5a 4a 62 47 64 6e 31 6c 62 76 49 69 32 72 32 6d 35 75 72 54 46 59 4d 44 42 70 63 4f 50 67 30 64 6e 7a 73 33 49 70 38 72 4c 7a 48 4b 6a 5a 64 68 79 30 74 50 56 78 4d 62 67 67 4e 79 4b 31 4e 35 6a 7a 58 6b 78 32 2b 50 6b 35 6f 37 68 38 43 67 4b 37 4a 6e 75 62 2f 48 34 75 50 52 39 35 66 59 2b 2b 51 43 56 37 57 50 6a 37 31 37 41 65 50 Data Ascii: IhzoEhMiaZMlcJgG+aPRJNUVk16oW2uw2cxOpWLotm88jr7o7243fP7QscQgeEvIWgrHus3VwgXktFEiFgyp+ikyAgYKIJ3RPFHiQMIuYTlaOnESWI3VUoZ9cmYsunamkq2ammJupnKyzVK6ZJbGdn1lbvIi2r2m5urTFYMDBpcOPg0dnzs3Ip8rLzHKjZdhy0tPVxMbggNyK1N5jzXkx2+Pk5o7h8CgK7Jnub/H4uPR95fY++QCV7WPj717AeP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49734	104.19.230.21	443	6848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 03:10:17 UTC	411	OUT	GET /captcha/v1/2766c43/challenge/image_label_area_select/challenge.js HTTP/1.1 Host: newassets.hcaptcha.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 03:10:17 UTC	429	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 03:10:17 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close etag: W/"e7eb40a17f017e7b0651dec263c01ffc" Cache-Control: max-age=3600 alt-svc: h3=":443"; ma=86400 vary: Origin CF-Cache-Status: HIT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8d036a9f8ff618bc-EWR
2024-10-10 03:10:17 UTC	940	IN	Data Raw: 37 64 65 37 0d 0a 2f 2a 20 68 74 74 70 73 3a 2f 2f 68 63 61 70 74 63 68 61 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 76 61 72 20 69 6d 61 67 65 5f 6c 61 62 65 6c 5f 61 72 65 61 5f 73 65 6c 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 65 2c 73 2c 6f 2c 6e 2c 68 2c 61 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 69 2e 45 78 74 65 6e 64 2e 73 65 6c 66 28 74 68 69 73 2c 69 2e 44 6f 6d 43 6f 6d 70 6f 6e 65 6e 74 2c 22 65 78 61 6d 70 6c 65 2d 69 6d 61 67 65 22 29 2c 74 68 69 73 2e 77 69 64 74 68 3d 30 2c 74 68 69 73 2e 68 65 69 67 68 74 3d 30 2c 74 68 69 73 2e 5f 69 6d 61 67 65 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 76 69 73 69 62 6c 65 3d 21 31 2c 74 68 69 73 2e 24 69 6d 61 67 65 3d 74 68 69 73 2e 63 72 65 Data Ascii: 7de7/* https://hcaptcha.com/license */var image_label_area_select=function(t,i,e,s,o,n,h,a,r){"use strict";function l(){i.Extend.self(this,i.DomComponent,"example-image"),this.width=0,this.height=0,this._image=null,this._visible=!1,this.$image=this.cre
2024-10-10 03:10:17 UTC	1369	IN	Data Raw: 3a 30 2c 70 6f 73 69 74 69 6f 6e 3a 22 61 62 73 6f 6c 75 74 65 22 2c 6f 76 65 72 66 6c 6f 77 3a 22 68 69 64 64 65 6e 22 7d 29 2c 74 68 69 73 2e 24 69 6d 61 67 65 2e 63 73 73 28 7b 6f 70 61 63 69 74 79 3a 74 68 69 73 2e 5f 76 69 73 69 62 6c 65 3f 31 3a 30 7d 29 2c 6e 75 6c 6c 21 3d 3d 74 68 69 73 2e 5f 69 6d 61 67 65 26 26 74 68 69 73 2e 24 69 6d 61 67 65 2e 62 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 28 74 68 69 73 2e 5f 69 6d 61 67 65 2c 74 2c 69 2c 7b 63 6f 76 65 72 3a 21 30 2c 63 65 6e 74 65 72 3a 21 30 7d 29 2c 74 68 69 73 2e 77 69 64 74 68 3d 74 2c 74 68 69 73 2e 68 65 69 67 68 74 3d 69 7d 2c 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 69 2e 4c 6f 61 64 Data Ascii: :0,position:"absolute",overflow:"hidden"}),this.$image.css({opacity:this._visible?1:0}),null!==this._image&&this.$image.backgroundImage(this._image,t,i,{cover:!0,center:!0}),this.width=t,this.height=i},l.prototype.load=function(t){var e=this;return i.Load
2024-10-10 03:10:17 UTC	1369	IN	Data Raw: 64 69 73 70 6c 61 79 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 5f 76 69 73 69 62 6c 65 3d 74 2c 74 68 69 73 2e 63 73 73 28 7b 64 69 73 70 6c 61 79 3a 74 68 69 73 2e 68 61 73 45 78 61 6d 70 6c 65 73 28 29 3f 22 62 6c 6f 63 6b 22 3a 22 6e 6f 6e 65 22 2c 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 74 3f 22 23 66 66 66 22 3a 22 23 65 36 65 36 65 36 22 7d 29 3b 66 6f 72 28 76 61 72 20 69 3d 2d 31 3b 2b 2b 69 3c 74 68 69 73 2e 63 68 69 6c 64 72 65 6e 2e 6c 65 6e 67 74 68 3b 29 74 68 69 73 2e 63 68 69 6c 64 72 65 6e 5b 69 5d 2e 64 69 73 70 6c 61 79 28 74 29 7d 2c 70 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 69 3d 2d 31 3b 69 66 28 74 68 69 73 2e 63 68 69 6c 64 72 65 6e 2e 6c 65 6e 67 74 Data Ascii: display=function(t){this._visible=t,this.css({display:this.hasExamples()?"block":"none",backgroundColor:t?"#fff":"#e6e6e6"});for(var i=-1;++i<this.children.length;)this.children[i].display(t)},p.prototype.clear=function(){var t,i=-1;if(this.children.lengt
2024-10-10 03:10:17 UTC	1369	IN	Data Raw: 66 44 77 38 50 48 78 38 66 7a 38 2f 50 33 39 2f 65 66 6e 35 2f 37 2b 2f 76 2f 2f 2f 2b 62 6d 35 67 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 43 48 2f 43 30 35 46 56 46 4e 44 51 56 42 46 4d 69 34 77 41 77 45 41 41 41 41 68 2f 77 74 59 54 56 41 67 52 47 46 30 59 56 68 4e 55 44 77 2f 65 48 42 68 59 32 74 6c 64 43 42 69 5a 57 64 70 62 6a 30 69 37 37 75 2f 49 69 42 70 5a 44 30 69 56 7a 56 4e 4d 45 31 77 51 32 56 6f 61 55 68 36 63 6d 56 54 65 6b 35 55 59 33 70 72 59 7a 6c 6b 49 6a 38 2b 49 44 78 34 4f 6e 68 74 63 47 31 6c 64 47 45 67 65 47 31 73 62 6e 4d 36 65 44 30 69 59 57 52 76 59 6d 55 36 62 6e 4d 36 62 57 56 30 59 53 38 69 49 48 67 36 65 47 31 77 64 47 73 39 49 6b 46 6b 62 32 4a 6c 49 46 68 4e 55 43 42 44 62 33 4a 6c 49 44 59 75 Data Ascii: fDw8PHx8fz8/P39/efn5/7+/v///+bm5gAAAAAAAAAAAAAAAAAAAAAAACH/C05FVFNDQVBFMi4wAwEAAAAh/wtYTVAgRGF0YVhNUDw/eHBhY2tldCBiZWdpbj0i77u/IiBpZD0iVzVNME1wQ2VoaUh6cmVTek5UY3prYzlkIj8+IDx4OnhtcG1ldGEgeG1sbnM6eD0iYWRvYmU6bnM6bWV0YS8iIHg6eG1wdGs9IkFkb2JlIFhNUCBDb3JlIDYu
2024-10-10 03:10:17 UTC	1369	IN	Data Raw: 68 58 56 6c 56 55 55 31 4a 52 55 45 39 4f 54 55 78 4c 53 6b 6c 49 52 30 5a 46 52 45 4e 43 51 55 41 2f 50 6a 30 38 4f 7a 6f 35 4f 44 63 32 4e 54 51 7a 4d 6a 45 77 4c 79 34 74 4c 43 73 71 4b 53 67 6e 4a 69 55 6b 49 79 49 68 49 42 38 65 48 52 77 62 47 68 6b 59 46 78 59 56 46 42 4d 53 45 52 41 50 44 67 30 4d 43 77 6f 4a 43 41 63 47 42 51 51 44 41 67 45 41 41 43 48 35 42 41 51 44 41 50 38 41 49 66 34 5a 54 33 42 30 61 57 31 70 65 6d 56 6b 49 48 56 7a 61 57 35 6e 49 47 56 36 5a 32 6c 6d 4c 6d 4e 76 62 51 41 73 41 41 41 41 41 4d 67 41 79 41 41 41 42 66 39 67 4a 6f 35 6b 61 5a 35 6f 71 71 35 73 36 37 35 77 4c 4d 39 30 62 64 39 34 72 75 39 38 37 2f 2f 41 6f 48 42 49 4c 42 71 50 79 4b 52 79 79 57 77 36 6e 39 43 6f 64 45 71 74 57 71 2f 59 72 48 62 4c 37 58 71 2f 34 Data Ascii: hXVlVUU1JRUE9OTUxLSklIR0ZFRENCQUA/Pj08Ozo5ODc2NTQzMjEwLy4tLCsqKSgnJiUkIyIhIB8eHRwbGhkYFxYVFBMSERAPDg0MCwoJCAcGBQQDAgEAACH5BAQDAP8AIf4ZT3B0aW1pemVkIHVzaW5nIGV6Z2lmLmNvbQAsAAAAAMgAyAAABf9gJo5kaZ5oqq5s675wLM90bd94ru987//AoHBILBqPyKRyyWw6n9CodEqtWq/YrHbL7Xq/4
2024-10-10 03:10:17 UTC	1369	IN	Data Raw: 77 4a 67 72 72 72 4f 35 7a 4b 65 62 4d 30 50 52 38 4d 2f 62 33 2b 76 49 78 34 37 65 6e 33 62 38 72 38 52 4b 75 49 75 68 6d 33 45 47 45 41 74 48 74 59 78 6a 47 34 4d 4d 67 43 68 56 53 62 47 6a 78 59 55 61 4e 47 2b 45 34 76 42 69 70 30 6a 4d 32 4a 38 31 74 68 55 52 42 67 75 53 51 6a 2f 45 51 72 45 53 42 62 4f 54 46 58 6e 5a 32 6d 51 7a 70 36 69 5a 4d 6b 42 74 56 65 44 79 31 70 6b 76 52 58 68 52 4a 48 66 7a 35 4d 52 73 39 54 66 61 47 47 56 6f 79 4e 5a 5a 54 62 55 6a 63 44 5a 4a 56 64 59 71 31 71 37 35 67 62 41 72 47 74 4f 7a 43 73 48 46 65 78 56 51 54 7a 39 67 55 54 68 6c 31 54 6f 6f 72 62 6b 6b 5a 73 79 6c 4c 35 46 30 4c 6c 6d 58 4e 4c 43 7a 4e 36 6e 55 69 52 58 43 50 64 43 39 43 41 41 41 68 2b 51 51 46 41 77 41 41 41 43 77 4e 41 46 49 41 72 77 41 6b 41 41 Data Ascii: wJgrrrO5zKebM0PR8M/b3+vIx47en3b8r8RKuIuhm3EGEAtHtYxjG4MMgChVSbGjxYUaNG+E4vBip0jM2J81thURBguSQj/EQrESBbOTFXnZ2mQzp6iZMkBtVeDy1pkvRXhRJHfz5MRs9TfaGGVoyNZZTbUjcDZJVdYq1q75gbArGtOzCsHFexVQTz9gUThl1ToorbkkZsylL5F0LlmXNLCzN6nUiRXCPdC9CAAAh+QQFAwAAACwNAFIArwAkAA
2024-10-10 03:10:17 UTC	1369	IN	Data Raw: 55 65 55 50 6e 35 69 7a 55 2f 6e 6f 6c 6c 76 33 37 68 77 68 41 41 41 68 2b 51 51 46 41 77 41 49 41 43 77 4d 41 46 49 41 73 41 41 6b 41 41 41 45 2f 78 44 4a 53 61 75 67 74 2b 72 4e 75 2f 39 67 4b 49 34 6b 52 30 68 6e 36 51 30 4e 31 77 78 71 4c 45 73 42 59 4e 2f 33 72 4b 74 4d 37 2f 63 37 68 45 4d 30 44 42 6f 72 75 47 54 79 79 4a 7a 38 6e 73 2b 6d 64 45 70 54 57 70 56 55 47 58 51 62 46 53 6c 61 73 59 59 69 4f 36 70 64 7a 7a 6c 79 61 47 48 67 75 72 73 72 33 55 45 64 51 74 73 42 64 4e 42 37 37 2f 4e 38 67 77 64 6a 65 52 74 33 64 34 4d 62 62 48 79 4b 43 79 35 48 59 49 64 56 68 59 57 51 54 6f 75 4b 6c 49 4d 46 6b 70 75 59 6c 70 65 59 64 4a 75 63 6b 4a 36 4c 53 46 4e 46 6d 61 4b 54 70 4b 56 38 6f 47 53 72 6f 33 6d 75 70 6a 52 5a 4d 4c 53 79 72 4c 71 31 65 78 4f Data Ascii: UeUPn5izU/nollv37hwhAAAh+QQFAwAIACwMAFIAsAAkAAAE/xDJSaugt+rNu/9gKI4kR0hn6Q0N1wxqLEsBYN/3rKtM7/c7hEM0DBoruGTyyJz8ns+mdEpTWpVUGXQbFSlasYYiO6pdzzlyaGHgursr3UEdQtsBdNB77/N8gwdjeRt3d4MbbHyKCy5HYIdVhYWQTouKlIMFkpuYlpeYdJuckJ6LSFNFmaKTpKV8oGSro3mupjRZMLSyrLq1exO
2024-10-10 03:10:17 UTC	1369	IN	Data Raw: 38 2f 69 36 53 49 49 35 4d 7a 6e 36 48 77 7a 67 66 4c 7a 37 57 72 6d 37 32 43 37 69 2f 54 78 39 6d 6e 34 38 6a 6c 52 52 35 44 64 50 34 41 43 39 52 46 55 64 35 42 4c 74 59 52 4f 73 43 33 4d 31 6e 44 4c 43 49 67 2f 4a 6a 4b 73 75 4d 59 62 52 69 41 61 30 33 46 45 30 67 78 6a 53 4a 45 6a 53 31 39 38 64 4b 55 72 53 73 74 36 48 46 57 61 50 43 6b 75 56 6b 4d 70 43 59 4f 5a 79 76 51 4b 31 63 46 4c 2b 5a 42 70 47 69 50 73 5a 6f 74 33 30 42 6f 4e 55 64 72 54 48 69 4e 72 32 5a 6a 65 6b 4f 72 4b 35 72 51 59 7a 73 49 4e 37 61 4f 4e 57 35 39 61 49 73 75 45 38 35 6b 71 69 43 31 31 4c 79 38 56 35 45 58 74 7a 78 65 61 63 41 58 64 75 34 4a 43 49 6c 77 47 2f 65 4b 75 32 31 73 6a 42 41 41 68 2b 51 51 46 41 77 41 42 41 43 77 4d 41 46 49 41 73 41 41 6b 41 41 41 46 2f 32 41 67 Data Ascii: 8/i6SII5Mzn6HwzgfLz7Wrm72C7i/Tx9mn48jlRR5DdP4AC9RFUd5BLtYROsC3M1nDLCIg/JjKsuMYbRiAa03FE0gxjSJEjS198dKUrSst6HFWaPCkuVkMpCYOZyvQK1cFL+ZBpGiPsZot30BoNUdrTHiNr2ZjekOrK5rQYzsIN7aONW59aIsuE85kqiC11Ly8V5EXtzxeacAXdu4JCIlwG/eKu21sjBAAh+QQFAwABACwMAFIAsAAkAAAF/2Ag
2024-10-10 03:10:17 UTC	1369	IN	Data Raw: 48 49 75 4e 32 63 6a 4c 50 67 69 62 5a 78 35 75 54 6c 33 2b 68 74 34 75 50 74 5a 74 62 77 65 38 2f 73 39 50 57 4e 39 2f 6a 6d 2b 76 5a 68 73 65 66 50 6a 54 77 74 41 72 73 38 4b 38 68 47 6e 5a 67 62 68 78 41 6b 48 4e 69 50 6f 61 2b 44 56 69 59 4f 71 57 68 78 45 63 42 6f 71 7a 51 61 34 74 67 52 67 6a 61 51 49 53 64 64 58 69 4a 57 45 71 4d 61 6c 62 74 61 75 6b 51 49 63 36 58 4d 6d 52 6e 33 71 56 72 44 45 4f 64 4c 6e 54 73 4c 75 6e 49 59 79 4d 57 2b 53 4b 4c 38 2b 55 78 47 44 74 6f 74 65 45 76 4a 79 4b 47 47 39 43 6d 32 67 30 52 37 7a 4d 67 31 6b 79 65 74 71 49 65 57 7a 54 78 58 43 32 7a 41 4c 68 50 4d 73 74 78 7a 4c 4b 6f 55 46 41 4b 63 6d 6a 30 70 49 69 76 4f 47 7a 6c 32 79 41 67 42 41 43 48 35 42 41 55 44 41 41 6f 41 4c 41 77 41 55 67 43 77 41 43 51 41 41 Data Ascii: HIuN2cjLPgibZx5uTl3+ht4uPtZtbwe8/s9PWN9/jm+vZhsefPjTwtArs8K8hGnZgbhxAkHNiPoa+DViYOqWhxEcBoqzQa4tgRgjaQISddXiJWEqMalbtaukQIc6XMmRn3qVrDEOdLnTsLunIYyMW+SKL8+UxGDtoteEvJyKGG9Cm2g0R7zMg1kyetqIeWzTxXC2zALhPMstxzLKoUFAKcmj0pIivOGzl2yAgBACH5BAUDAAoALAwAUgCwACQAA
2024-10-10 03:10:17 UTC	1369	IN	Data Raw: 49 68 7a 6f 45 68 4d 69 61 5a 4d 6c 63 4a 67 47 2b 61 50 52 4a 4e 55 56 6b 31 36 6f 57 32 75 77 32 63 78 4f 70 57 4c 6f 74 6d 38 38 6a 72 37 6f 37 32 34 33 66 50 37 51 73 63 51 67 65 45 76 49 57 67 72 48 75 73 33 56 77 67 58 6b 74 46 45 69 46 67 79 70 2b 69 6b 79 41 67 59 4b 49 4a 33 52 50 46 48 69 51 4d 49 75 59 54 6c 61 4f 6e 45 53 57 49 33 56 55 6f 5a 39 63 6d 59 73 75 6e 61 6d 6b 71 32 61 6d 6d 4a 75 70 6e 4b 79 7a 56 4b 36 5a 4a 62 47 64 6e 31 6c 62 76 49 69 32 72 32 6d 35 75 72 54 46 59 4d 44 42 70 63 4f 50 67 30 64 6e 7a 73 33 49 70 38 72 4c 7a 48 4b 6a 5a 64 68 79 30 74 50 56 78 4d 62 67 67 4e 79 4b 31 4e 35 6a 7a 58 6b 78 32 2b 50 6b 35 6f 37 68 38 43 67 4b 37 4a 6e 75 62 2f 48 34 75 50 52 39 35 66 59 2b 2b 51 43 56 37 57 50 6a 37 31 37 41 65 50 Data Ascii: IhzoEhMiaZMlcJgG+aPRJNUVk16oW2uw2cxOpWLotm88jr7o7243fP7QscQgeEvIWgrHus3VwgXktFEiFgyp+ikyAgYKIJ3RPFHiQMIuYTlaOnESWI3VUoZ9cmYsunamkq2ammJupnKyzVK6ZJbGdn1lbvIi2r2m5urTFYMDBpcOPg0dnzs3Ip8rLzHKjZdhy0tPVxMbggNyK1N5jzXkx2+Pk5o7h8CgK7Jnub/H4uPR95fY++QCV7WPj717AeP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49738	104.19.229.21	443	6848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 03:10:17 UTC	758	OUT	GET /tip/39a767c376904cc26ef5b4e59936075f893457cdd7d6cdc9a7fbfc3678ef1df5/8c90fadbde7152b959d45c77248ff00a8620bcd84edd7c79accbdb75ba983a8b.jpeg HTTP/1.1 Host: imgs3.hcaptcha.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://newassets.hcaptcha.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: image Referer: https://newassets.hcaptcha.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 03:10:17 UTC	536	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 03:10:17 GMT Content-Type: image/jpeg Content-Length: 52812 Connection: close Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 Cache-Control: public, max-age=86400 Alt-Svc: h3=":443"; ma=86400 CF-Cache-Status: MISS Expires: Fri, 11 Oct 2024 03:10:17 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 8d036a9fa9f08c45-EWR
2024-10-10 03:10:17 UTC	833	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 01 4d 01 f4 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222M"}!1AQa"q2
2024-10-10 03:10:17 UTC	1369	IN	Data Raw: 75 26 e0 30 38 19 ed 5c c9 53 a7 38 aa 6a e9 da fa ad 19 ad 1a 14 e8 63 bd 85 2f 86 51 77 57 2c 5c 6a 4c 96 d2 c8 1c 39 8f 19 53 6e 10 e0 9c 75 22 9b 34 92 99 9d 56 e5 61 8e 28 e3 e3 c9 0f 9c d3 5d 85 c6 83 26 f6 2d 27 91 11 6c 9e 4f 2b fe 15 2d bc 7b ef 2e dc f4 11 45 f9 e6 b7 4a 85 37 29 72 d9 c7 4e fe 9f 79 78 7a 94 30 b4 ea 28 c6 dc ba 5a ed fa 6f dc 9a 74 b8 1b 48 bd 61 9f 4b 3c d2 46 25 97 2a b7 85 5d 7a 9f b1 63 35 1d f6 f9 23 99 de 7b c2 c6 f1 a2 44 8e 5d a0 00 33 de ac d9 69 72 c5 10 9c 8b f6 76 1c 66 e9 7a 57 2d 2c 1d 39 52 75 65 a5 fa 5c f3 96 2e 30 cb e3 52 52 6a 49 bb 7f 5d 8a 66 3b a5 b8 21 af 98 30 1c 1f b1 f6 ac eb f8 2f da 42 cb 7f 21 53 8c a8 b2 35 af 78 51 99 e2 78 6f 7c ed bc 32 dc 8c 8f 4a cd 30 4e 0e 09 d4 33 ff 00 5f 2b 5e 96 16 94 Data Ascii: u&08\S8jc/QwW,\jL9Snu"4Va(]&-'lO+-{.EJ7)rNyxz0(ZotHaK<F%*]zc5#{D]3irvfzW-,9Rue\.0RRjI]f;!0/B!S5xQxo\|2J0N3_+^
2024-10-10 03:10:17 UTC	1369	IN	Data Raw: 48 d4 0b c6 c6 3a fd 90 55 7b 95 99 de de 3f b4 2c cb 21 24 7e e8 27 4f a5 32 7d 45 6d f5 1b 5b 40 f7 82 66 9c 46 ea f2 ee 50 31 9f 41 9a 65 bc 2f 6f 3d a3 3c 8d 26 e6 90 80 3b 7d 2b a6 58 9a c9 73 b5 6b ec 9f 55 dc f9 99 51 58 79 29 c6 77 92 6b 4e e5 0d 2a ee e5 bc b6 9a f5 47 9c 58 2a 8b 70 d8 c3 63 ad 5a 43 71 fd b2 a3 ed a7 66 e1 ff 00 2e 9c 74 fc ab 32 dd 65 92 c5 e5 8c 30 2b 15 c3 06 5e 30 77 64 63 df 8a 9a d3 cd b8 be b7 90 4b 7c f2 34 48 ef b6 e0 28 04 af bf d0 d7 a9 45 7b 75 29 69 b3 4d 69 f7 dc fa 7a d4 61 19 ca b2 dd c5 df d7 a1 d0 6a 6e e9 6c 4a 5e 10 e7 85 02 cc 1a cf b7 b5 b9 93 4f 95 05 e9 57 97 03 71 b2 ce 17 e9 ef 50 5c c1 71 77 7a b0 83 a8 65 4e de 2e 97 1e f5 a0 2c ee 55 42 81 a8 00 06 00 17 4b 4e 9e 0e 34 28 aa 7b eb 7d 5a 3c ba d5 fd Data Ascii: H:U{?,!$~'O2}Em[@fFP1Ae/o=<&;}+XskUQXy)wkNGXpcZCqf.t2e0+^0wdcK\|4H(E{u)iMizajnlJ^OWqP\qwzeN.,UBKN4({}Z<
2024-10-10 03:10:17 UTC	1369	IN	Data Raw: 94 21 31 b2 10 41 f5 e7 15 5c a9 5d 46 dc 1f f9 fa 93 ff 00 41 af 46 ac 2d 34 d5 ac fb 6c 7d 26 16 78 85 4e 4a ab b3 5b 59 bb 58 d6 d3 14 2e 9e ec 79 26 d2 53 ff 00 8f 1a a3 a8 cb 2c 90 49 f3 1f 95 a1 c6 2a e6 9b 28 16 8f 1b 1e 4d ac bb 47 fc 0a a5 9e d2 31 69 23 30 dd 96 89 b3 f5 19 c5 73 bc 45 3c 2e 2e ac f1 0a ed a5 6f 4f 23 e7 6a 56 86 17 1b 5e 55 d5 ee f4 f4 b9 4d e3 37 1a 8d ca 48 ec 76 cb 06 09 3e d4 db 6d 20 99 56 51 b8 c6 2e a7 19 e3 d3 fc 4d 5e 6b 63 06 a7 76 dd 41 96 0e 7d 28 b5 b0 73 3a 5c 02 08 fb 44 ed 8d dd 38 f4 fc 69 57 cc 17 37 ee 27 68 d9 db 4d 36 d4 f4 95 4a 13 84 6a 52 b5 9b f4 fe 99 53 46 b4 88 4e 6d 5a c6 d2 6f f4 6f 3f 7c c0 e7 ae 3b 1a ad f6 07 8e e7 7a 7f 66 aa e7 a7 98 fc 56 de 9a 6d ad b7 cf 24 a0 39 b2 03 07 a8 1b 87 4f 5a a9 Data Ascii: !1A\]FAF-4l}&xNJ[YX.y&S,I*(MG1i#0sE<..oO#jV^UM7Hv>m VQ.M^kcvA}(s:\D8iW7'hM6JjRSFNmZoo?\|;zfVm$9OZ
2024-10-10 03:10:17 UTC	1369	IN	Data Raw: 76 b2 35 c0 90 21 85 f2 1a 10 a0 1e dc d6 f1 a7 29 41 cd ec 8f 2f 17 84 ab 85 e4 f6 93 6d bf 31 cb 12 e2 e5 25 86 10 f0 98 c8 68 99 88 3b 8f b9 f4 ab 6a c3 ed b1 8d e1 4f db 65 ff 00 d0 6a 00 b9 6b ef f7 60 fe 55 5e e2 c5 ae ae e1 54 70 a0 5f 4a c4 9f 4d b5 e5 e2 a5 46 72 51 94 ad 6f 2b fd e7 2a 9a 69 29 3e af f4 28 5d c1 3a ea 76 92 4b 26 f5 f2 18 2e 3b 7c df e3 49 6a 33 e1 e4 ff 00 af 16 ff 00 d0 cd 5b bf 70 b3 59 45 d4 98 09 cf d1 8f f8 d5 4d 33 cc 3a 1f ef 31 8f b1 9d 98 f4 dd 5e 96 16 b4 a7 86 e6 6b 66 d1 d3 35 cf 06 bd 4b 28 89 35 d4 91 37 21 a6 81 48 f6 2b 4f fb 22 ac f2 b2 1b 48 91 64 68 c0 91 9c 13 8f a1 a7 2c 6a 35 32 c0 73 e7 db ff 00 e8 35 63 11 f9 ee 5d f6 e2 ea 63 d7 d8 53 af 67 d2 f7 4b f2 47 9f 27 55 4a 14 9b 69 2b bd 3c 8a 17 66 5b 7c 63 Data Ascii: v5!)A/m1%h;jOejk`U^Tp_JMFrQo+*i)>(]:vK&.;\|Ij3[pYEM3:1^kf5K(57!H+O"Hdh,j52s5c]cSgKG'UJi+<f[\|c
2024-10-10 03:10:17 UTC	1369	IN	Data Raw: 41 2b 3d 3a ec 8f 53 17 8a b4 34 ba 6d 98 f1 c5 34 ef 13 88 16 28 a1 49 33 89 83 f2 cb 51 ce 41 b5 90 91 ff 00 2e 89 ff 00 a1 0a d4 b2 b8 86 de 2b 88 bc cb 23 b4 f3 fb 86 e9 8a c7 9a e2 09 2d 2e 1b ed 31 3b 34 62 35 58 e3 65 1c 30 3d eb 96 be 2d d6 8d 48 c5 d9 27 14 9a f3 d4 e5 c7 d6 f6 94 f9 62 de eb 5f 50 d5 ec 04 97 3b cb 95 02 ed 58 71 d7 09 ff 00 d6 ab 56 ec 12 f6 50 c7 1f e9 89 d7 fd d1 59 ba ad c4 82 65 fd e9 19 bd 41 ff 00 8e f4 ab 30 23 c9 78 ed b8 14 37 69 ff 00 a0 d7 a3 53 0d 5a 69 2a 92 bf bb 6f cc e9 c1 d5 74 df b3 a8 ef 74 85 df e6 d8 da a2 f2 44 57 1d 3e b4 72 b3 85 09 1c a8 d0 22 1c ce 10 82 b9 a6 5a 4f 0c 11 db 95 b8 8d 5e 3f 30 32 cb 1b 30 21 8f b5 39 2e ed 5a 76 26 4b 12 79 e0 db bd 71 43 09 52 34 92 5b 25 f3 df ee 3d 38 d7 a7 18 b8 a7 Data Ascii: A+=:S4m4(I3QA.+#-.1;4b5Xe0=-H'b_P;XqVPYeA0#x7iSZi*ottDW>r"ZO^?020!9.Zv&KyqCR4[%=8
2024-10-10 03:10:17 UTC	1369	IN	Data Raw: 11 d7 81 a5 04 de 22 5a 38 dd 27 d3 52 f4 73 6f 42 8f 6a ad 83 90 3e d8 3f ad 2f 9e 5a eb 7c a1 11 e5 b9 8b 08 b2 07 c6 06 3b 56 7c 97 36 e5 40 f3 ac 94 b0 c8 3f 67 7a 48 ae a3 b7 b8 0c 6e 2c 49 53 90 45 bb f5 ad 28 51 53 8b 4e 4a e8 ea 9c 22 ab f3 45 36 a5 af 95 f6 66 91 e2 f6 cf fe ba 5c ff 00 5a a7 7a e0 b6 57 3f f2 0f 15 24 57 90 4d 7b 66 89 30 91 c1 99 9c 85 20 0d c3 3d ea 3b 98 bf 76 1f 76 73 60 06 31 59 e2 dc 61 4a 5c db b7 a0 51 51 a5 6f 69 a3 ba 32 e4 80 c9 a4 17 ce 31 6b 09 e7 fd ea da 9a 05 f3 58 95 24 8b b4 27 1f ee 0a c8 75 91 b4 26 c4 aa 80 5b 45 f2 16 c6 70 c3 fc fe 15 ab fd a7 07 9b 23 c3 73 01 59 18 30 12 c4 e7 07 00 7b 7a 56 58 34 dd 09 c5 c7 5d 37 ea 7a 2e b4 79 9c a9 3b b5 fe 44 96 11 c8 d0 88 be cc 84 46 cc 43 ad ca af 53 9a 7c c1 cb Data Ascii: "Z8'RsoBj>?/Z\|;V\|6@?gzHn,ISE(QSNJ"E6f\ZzW?$WM{f0 =;vvs`1YaJ\QQoi21kX$'u&[Ep#sY0{zVX4]7z.y;DFCS\|
2024-10-10 03:10:17 UTC	1369	IN	Data Raw: 8c 6a 28 5b a9 07 2c 9a 87 1e 91 25 53 df 7a 98 c5 cd e7 fe 03 2d 59 46 bd 6c 62 e2 ec 93 ff 00 4e cb 5e 7d 5c 15 47 39 4d 4a ca 5b e8 8f 37 d9 54 9c e4 f6 bf a0 e7 bc 66 3c c5 a9 7e 11 2d 44 59 4b 40 ab 6f 76 ab f6 81 23 bc c9 81 e9 d6 9b 10 bf 96 f0 c5 f6 eb c4 e4 ff 00 cb 05 e2 9d a9 b5 cc 0b 6a 3e db 24 8a f3 88 dd 1a 35 5e d9 ed 59 46 b5 1a 4f d9 75 b7 de 76 3c b7 96 a4 69 e9 79 2f c0 85 89 82 59 94 db de 9f f4 97 95 5e 14 04 73 c7 7a b8 6e f7 c1 b1 a2 d4 b0 47 4f 29 6a bd a5 c5 eb ac d2 3d ec a0 79 ed 1c 71 a4 4a dc 0f ff 00 5d 40 97 37 4d 73 2c df 69 bc 20 0e a2 05 e0 51 5a ba a7 46 d0 5f 23 96 38 37 09 4d 51 6b dd ed dc 96 de 76 86 56 2e ba 86 f6 ce d5 11 2f 0b 9a 87 57 be 78 a3 89 e3 87 51 20 93 bb f7 4b d6 ad 42 d7 13 31 99 27 b9 2d f7 4b 0b 55 Data Ascii: j([,%Sz-YFlbN^}\G9MJ[7Tf<~-DYK@ov#j>$5^YFOuv<iy/Y^sznGO)j=yqJ]@7Ms,i QZF_#87MQkvV./WxQ KB1'-KU
2024-10-10 03:10:17 UTC	1369	IN	Data Raw: 17 1c 46 b5 bc ef 7b 0c 20 89 ee 8f 6f f8 f6 1f e3 59 77 f7 5a 84 91 32 bb 5d 05 ec de 40 af 07 0f 8c c5 57 aa 9b 57 4b d0 eb a2 eb d4 ae a5 3d 52 f2 48 ca fb 73 ff 00 cf 1d 4f fe fc af f8 54 72 5e 19 10 a3 43 a9 95 23 04 79 4b fe 15 72 ce de fa ee 71 18 ba bb 03 b9 fb 32 f0 2a fd cb c3 60 0a 48 f7 0e 54 7c c5 ad 97 8f af 35 e9 56 c5 3a 73 f6 6a 37 97 64 7b 1c ee 2f 95 2d 7e 47 21 a8 db 5c 5d dc 89 22 b4 b8 08 10 28 de 9c f1 45 6a 6a ba 9a c1 76 16 1b 97 08 50 37 fa b0 3a fe 14 52 55 dd be 17 f7 14 aa 3e c5 30 db 35 0c 81 92 2c 97 03 fe 05 45 c8 8f fb 4a 76 68 9e 66 69 92 35 51 29 40 32 b9 ed 4c b9 8a 58 ef 18 af fc f9 29 04 76 f9 aa 46 47 1a 8b b3 7f cf e4 5f fa 0d 7d 2c 61 17 ca df f5 a1 e3 d0 6f 4b c5 a7 b7 dc 6c d8 5a 5b 9b 66 91 ed 57 7a b1 1f f1 fe Data Ascii: F{ oYwZ2]@WWK=RHsOTr^C#yKrq2*`HT\|5V:sj7d{/-~G!\]"(EjjvP7:RU>05,EJvhfi5Q)@2LX)vFG_},aoKlZ[fWz
2024-10-10 03:10:17 UTC	1369	IN	Data Raw: b5 c5 d4 92 83 6c 89 12 c6 4b b4 39 24 91 ed 5a 6c c7 61 c4 96 20 e3 fe 78 35 6f 42 bd 3a 74 ff 00 79 64 ba 5d db f5 31 cc a1 1a 95 54 e9 a6 dd 95 ec b6 67 9c e9 da f8 b3 d5 2f 4c f1 c6 f0 ac fb 4f fa 69 ca 03 91 5d 70 bd b5 ba 9a 11 1c 2d 13 a4 d1 83 fb e2 f9 04 d7 99 5f d8 35 be af aa 48 eb 12 a8 85 dc 04 40 37 fc d9 f5 e9 8e 7b 57 6f e1 6d 36 4b 34 fb 55 d2 fe fa 6b 88 59 01 fe 15 23 8e b5 e4 4f 1f 56 8c 9c e3 66 bb 6b df a1 e8 3c 0d 2a d4 ee ee a5 dc e9 25 85 bf b4 ec ce e0 3f 7f 26 01 fa 8f ca 88 6d e2 f9 83 42 a7 74 d7 18 c7 6e 2a 9e ad ac c7 0e a3 69 6e 06 37 4f 2f 20 7b d5 6d 33 57 10 3b 5b e4 bf ef 27 24 9f 7c d7 9f 3c d6 af d6 25 35 a5 ff 00 4b 9d 11 ca 97 b3 4a ef 4b f5 ee 89 5d 22 d3 da de 75 88 b1 78 84 8c 24 b8 2b b7 3c 77 ae 77 c4 de 24 8a Data Ascii: lK9$Zla x5oB:tyd]1Tg/LOi]p-_5H@7{Wom6K4UkY#OVfk<%?&mBtnin7O/ {m3W;['$\|<%5KJK]"ux$+<ww$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49737	104.19.229.21	443	6848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 03:10:17 UTC	721	OUT	GET /tip/91570bad4bdd3913b054530049a4ef53d5363ed83f13aa0680890621968d0bb1/eb37d571818b4aebfc876b4f402d188934de1dcf2d867a29e51601aab7e9b8b9.jpeg HTTP/1.1 Host: imgs3.hcaptcha.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://newassets.hcaptcha.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 03:10:17 UTC	492	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 03:10:17 GMT Content-Type: image/jpeg Content-Length: 4981 Connection: close Alt-Svc: h3=":443"; ma=86400 Cache-Control: public, max-age=86400 Cf-Bgj: h2pri Vary: Origin CF-Cache-Status: HIT Expires: Fri, 11 Oct 2024 03:10:17 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 8d036a9fdd7e43b0-EWR
2024-10-10 03:10:17 UTC	877	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 80 00 be 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222"}!1AQa"q2
2024-10-10 03:10:17 UTC	1369	IN	Data Raw: 38 ef f4 f6 af 39 d5 64 dd ac e3 27 0a 30 7b e3 ff 00 ad 5e 81 aa 37 ca de a4 7e 7f fd 6a f3 8b 86 f3 35 99 0f 4c 1e df d3 da b9 e4 f4 3b a9 ee 69 dd 12 b6 4b d8 0f d3 ff 00 ad 58 f3 cf 75 bc 45 6e e5 78 cb 73 c7 ff 00 aa bb dd 33 c0 fa ae b5 69 1c 88 12 d6 df a8 92 5f 4f 55 1d c5 6e d8 fc 32 d2 ac 30 d7 d7 32 de 4c df 30 8d 3e 45 c7 f8 55 52 a2 de e7 36 2e a3 7e ec 0f 2f 68 26 9b 49 8e 56 8c 49 71 07 cc ac 4f 25 6b d3 be 11 6b a7 58 fe d3 47 88 a4 90 ac 7b b3 df ef 7f 85 6e c3 a6 69 b6 eb b6 de c2 00 17 8d a8 81 b1 fe f3 b7 5f a0 ad 5d 02 da d6 19 ee 9e 0b 6b 78 9d 82 ef 31 ae 0b 75 fb c7 15 d3 4e 8b 8b bd ce 77 2e 88 dd c7 e5 45 1d 7f 9d 15 d0 20 22 90 8f 41 9f a1 a5 fe 54 7e 00 8f 4a 00 3f 5f eb 47 af 7f eb 45 14 00 7e b4 75 14 51 d7 ff 00 af 40 1c 3c Data Ascii: 89d'0{^7~j5L;iKXuEnxs3i_OUn202L0>EUR6.~/h&IVIqO%kkXG{ni_]kx1uNw.E "AT~J?_GE~uQ@<
2024-10-10 03:10:17 UTC	1369	IN	Data Raw: fd 68 fd 68 ff 00 27 34 75 e6 80 3c c3 59 03 fb 6e f8 90 3f d7 30 cf e3 de a8 96 c7 7c 0e 9c 8f e7 57 35 a6 1f db 77 de d3 30 39 1e fd ea 86 71 ea 31 c1 f5 15 20 3b 3f 37 e3 9e 7f 99 a9 6e 1b 6c 67 d7 19 39 fe 67 fc 2a b8 6c 1f 40 0f e5 ff 00 d7 a5 bb 70 b0 b7 6c 75 f6 ff 00 eb d6 72 45 23 0a 26 dd 75 20 ef 9c 9c ff 00 5a dc 88 7c 9d 72 5b f5 ff 00 03 5c fd 91 2d a9 48 0f 41 cf 3f d6 ba 38 06 ec b7 e1 cf 7f ad 63 23 5b 9e 61 e3 dd 3c c7 e2 07 75 19 17 11 ab 9f a8 e3 f3 e2 b5 7e 12 59 f9 da d5 fd fb f4 b7 88 46 a4 8f e2 6f eb c5 76 37 7e 1c b6 d4 2e 26 d5 35 79 7e cd 61 14 5e 52 1c 65 e5 3d c0 1f d6 b1 fc 23 36 95 a6 eb d7 70 69 f2 cb 0d bd df ca 20 9c fc ea cb d3 9e f9 15 d5 28 c7 91 5b 73 86 9c 67 ce db 5a 1d ec d2 f5 03 82 3d 7b 7f f5 e9 96 ef 2f 93 78 Data Ascii: hh'4u<Yn?0\|W5w09q1 ;?7nlg9g*l@plurE#&u Z\|r[\-HA?8c#[a<u~YFov7~.&5y~a^Re=#6pi ([sgZ={/x
2024-10-10 03:10:17 UTC	1366	IN	Data Raw: cc 60 8c 8d 93 d3 1d 69 29 9d 2e 29 ea 67 5a 44 e2 e1 36 67 ae 07 f8 7b d7 a4 b4 b2 fd 84 4d e6 15 f2 93 0d fc b1 ef 5c fe 99 a4 91 32 c8 e8 54 21 e0 01 fa 0f f1 ad f6 01 6d a4 46 fb ac a5 70 3e 9d 07 bd 0f df 8b 8b 31 72 e5 9a 92 2b 69 fe 22 9a d1 da de e5 f3 1b 0e 1f 3d 3d 05 74 37 77 30 6a 9a 1b 5e 33 66 6b 7c a9 2b d4 8f 4a f2 af b4 48 c0 ee 1c 2f 4c 76 fa 7b d6 de 89 ab bc 6c 63 76 3b 64 18 3b 8f 5f 63 59 a8 fb 8e 3d 4d 67 6e 75 34 5c 1a ec ff 00 2a a2 c8 c3 a6 e7 18 3f 4f 6a bf 16 b0 ef 85 71 c9 eb fe 1e d5 42 59 e3 b8 62 e2 3d 88 38 3b ff 00 91 ff 00 1a cf bd 9b ca 64 10 ee f9 c6 0f af d2 8a 72 7b 31 57 82 dd 23 a6 3a 9a 85 70 8d bc e3 1f fd 6a ee 7e 15 c8 5e e3 55 62 72 76 c7 c9 fa b7 15 e3 32 df cb 65 64 1e 18 f7 bb 36 31 8e bf 4a f4 ff 00 82 1a Data Ascii: `i).)gZD6g{M\2T!mFp>1r+i"==t7w0j^3fk\|+JH/Lv{lcv;d;_cY=Mgnu4\*?OjqBYb=8;dr{1W#:pj~^Ubrv2ed61J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49735	104.19.229.21	443	6848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 03:10:17 UTC	721	OUT	GET /tip/c5b4ce35c8332f3678faa22f494866b39406cf4ca5014903b63ae0f7d772e527/4290b4bf8b6b0cbadf947d4cb518093954dcf276c6a59f2e3e91f97f01a2ec59.jpeg HTTP/1.1 Host: imgs3.hcaptcha.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://newassets.hcaptcha.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 03:10:17 UTC	492	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 03:10:17 GMT Content-Type: image/jpeg Content-Length: 4804 Connection: close Alt-Svc: h3=":443"; ma=86400 Cache-Control: public, max-age=86400 Cf-Bgj: h2pri Vary: Origin CF-Cache-Status: HIT Expires: Fri, 11 Oct 2024 03:10:17 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 8d036a9fc83e238e-EWR
2024-10-10 03:10:17 UTC	877	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 80 00 be 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222"}!1AQa"q2
2024-10-10 03:10:17 UTC	1369	IN	Data Raw: 39 3f eb 9b d3 8f e4 2a 5c ea 77 1f 25 2f e5 2c ff 00 67 a0 ff 00 96 98 fc 00 a5 16 11 63 97 2d f8 03 55 40 94 0f f5 cc 3d c7 1f ad 35 e2 77 1f 34 ce 47 a9 6f f0 a3 9e a7 74 1c 94 d7 d9 2f 1b 7b 58 97 2e 57 1f ed 37 1f fd 6a 86 5d 56 c6 d0 1c 36 e3 d3 08 32 4f d6 a9 1b 35 27 96 63 d8 ee 39 fc e9 9f d9 f1 72 01 c0 c7 e9 dc 55 24 df c4 c1 cf 97 e0 8d 87 2f 89 15 e6 c7 97 b2 3e cc 7a 9f a5 69 e9 fa 82 5f 09 02 15 3b 40 e9 d2 b1 5a c2 2c f6 1c 74 fe 42 b4 b4 7b 75 81 a6 2a 72 18 01 91 df af e9 4e 51 8a 5a 13 4a a4 dc d2 6c d6 e8 39 e3 f0 a3 82 3d 7f 0a 3a 0f f0 a2 b3 3b 43 b5 27 bf 34 b4 7d 0d 00 03 a0 fa 0a 28 f6 fc 28 c7 b7 d2 80 0e 3f 2a 5c e6 92 8e d4 01 cd dd dd 4e b7 b2 aa d8 cc ea 24 e0 81 c1 06 a0 37 97 1e 5f fc 78 4f 9c 7a 7a 1a e9 1a 55 0e 47 53 9e Data Ascii: 9?\w%/,gc-U@=5w4Got/{X.W7j]V62O5'c9rU$/>zi_;@Z,tB{urNQZJl9=:;C'4}((?*\N$7_xOzzUGS
2024-10-10 03:10:17 UTC	1369	IN	Data Raw: ef 64 90 b7 96 1f 18 46 03 ef 57 8a c5 e3 ad 62 da e5 5e c9 e3 b4 50 c1 95 63 5f eb 5c 58 3c 1d 0c 2c e4 e3 7b b3 7a 91 ad 5a 11 ec 8f a8 8f 7e e7 f9 ff 00 f5 ab 3a fe d2 fe e2 50 6d ef bc 85 c7 65 e6 aa 78 67 c4 30 78 87 42 b7 bf 8f ab 2e c9 50 7f 0b 0f bc 2b 5c 4a 4f f0 9c f0 7a 77 3d 2b ba e6 0d 34 ec c5 81 24 8e dd 16 59 77 b0 18 2f 8d b9 ae 47 5e d5 6f e4 b8 78 61 8e 61 6c a7 05 b6 f0 7f 1a eb 84 b8 c9 e7 18 eb de a2 b8 58 6e 61 31 ca bb 90 f2 79 e7 eb 45 c2 2e da 9e 61 75 11 0c 1a 59 30 dd 80 3c 8f f1 ad ed 2e 1b 8d 5e c9 11 67 02 48 06 d0 8e a7 18 ed cd 6d 7f c2 35 a6 09 8c ac 1d 9b 24 80 4f 00 8a d5 b7 8a de d1 36 db a8 03 ee f4 ec 69 dd 35 a8 dc f5 d0 e3 6f fc 37 35 b4 4d 3d e5 fc 2a be fd ea ff 00 81 44 62 7b ff 00 2d cb 7c a9 c9 18 3f c5 5d 2c Data Ascii: dFWb^Pc_\X<,{zZ~:Pmexg0xB.P+\JOzw=+4$Yw/G^oxaalXna1yE.auY0<.^gHm5$O6i5o75M=*Db{-\|?],
2024-10-10 03:10:17 UTC	1189	IN	Data Raw: 19 bf 9f d6 b6 8d 3b 44 c6 75 7d e3 b1 89 4a c6 aa c4 92 aa 01 27 bf 1d fd ea 54 ee 7b fd 39 a8 f3 8f 60 3f 4f fe bd 3e 2e fd a9 c7 72 5a 24 fa 90 28 fa 60 fd 39 a3 a7 6f e9 47 5e d5 b1 21 9a 3b f6 fc 68 f7 a2 80 0a 28 18 fe 54 76 a0 03 de 8e b4 7a d1 db 9a 00 a7 70 66 f2 e4 30 85 32 f2 10 1e 9f 43 5e 67 a8 c5 e6 78 ae df fb 72 ee f2 79 61 70 ca a2 dc ad b2 a9 f4 63 f7 8d 7a 7b 7f ac 3c ff 00 10 aa d7 36 b0 5e 5a 98 ae 62 57 8c af 46 19 ef 5c ed ee 5f 2d de a7 09 a9 f8 81 4c 8c 90 af 3d f0 3b f6 ae 5a e2 79 26 72 59 be 99 fe 75 df 5f f8 2a 37 98 bd a5 c0 03 23 e4 93 9f d6 b9 cb bf 09 ea 76 e9 91 6d e6 28 51 93 19 dd df 9a ca ed 23 64 94 8e 65 f8 c9 e7 38 e4 e7 f9 9a 66 33 cf 51 ea 7f c6 ac 6a 9a 25 fc f6 52 c7 f6 5b 85 71 96 ff 00 56 6b 32 cc 4a b6 68 51 Data Ascii: ;Du}J'T{9`?O>.rZ$(`9oG^!;h(Tvzpf02C^gxryapcz{<6^ZbWF\_-L=;Zy&rYu_*7#vm(Q#de8f3Qj%R[qVk2JhQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49736	104.19.229.21	443	6848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 03:10:17 UTC	721	OUT	GET /tip/62de709702ece426880b4ae75ea1f5b330a40ae8a2f00e177885143e9b0083e7/dc0f9d7dba9d640f0a04d356079b7f10b58f25cfd3410a845b1db0886b07b365.jpeg HTTP/1.1 Host: imgs3.hcaptcha.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://newassets.hcaptcha.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 03:10:17 UTC	492	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 03:10:17 GMT Content-Type: image/jpeg Content-Length: 4649 Connection: close Alt-Svc: h3=":443"; ma=86400 Cache-Control: public, max-age=86400 Cf-Bgj: h2pri Vary: Origin CF-Cache-Status: HIT Expires: Fri, 11 Oct 2024 03:10:17 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 8d036a9fdc0c4315-EWR
2024-10-10 03:10:17 UTC	877	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 80 00 be 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222"}!1AQa"q2
2024-10-10 03:10:17 UTC	1369	IN	Data Raw: fd 56 a3 85 be 5e b9 1b 80 ed 55 0c 8d 8c 02 7b 8c 67 da 88 e4 2b 0a fd 56 a6 51 2a 32 46 9f 98 39 e7 1c 9e c2 a5 b5 70 cc e3 7e 71 8f 4a c9 79 be 46 ff 00 81 55 ed 2d b7 34 a7 27 1c 52 70 b2 b9 51 9a 66 8f 1e a3 f4 a3 8f 51 fa 51 91 ea 3f 3a 5c fb fe b5 06 82 71 ea 3f 4a 0f 02 83 d0 fd 28 7f bb f8 d0 02 8f e8 29 07 43 fe 7b d2 8f e8 29 07 43 fe 7b d0 1d 43 d7 ea 68 ce 45 19 a3 9a 00 c0 b9 52 b7 52 39 e9 bc 55 56 7f dd 1f a7 f5 ad 6d 4d 40 84 e3 fb c3 35 8d 12 b4 cb b4 7a 60 fe 75 74 aa 73 5e e6 55 61 b5 8b f6 50 b4 d7 24 f6 0d cf e5 52 ea 84 25 ba 20 e9 b5 6b 42 da 05 84 10 3a 92 3f 95 64 ea 92 6e 90 0e ca a3 35 94 a6 e5 23 5a 71 b2 32 ed e6 28 08 c9 c6 4f 00 fb d5 c1 3e 50 f3 c7 23 ad 72 7a fe bb fd 8d 09 78 f6 19 06 4f 24 f1 5c 86 99 f1 03 54 fe d0 88 Data Ascii: V^U{g+VQ*2F9p~qJyFU-4'RpQfQQ?:\q?J()C{)C{ChERR9UVmM@5z`uts^UaP$R% kB:?dn5#Zq2(O>P#rzxO$\T
2024-10-10 03:10:17 UTC	1369	IN	Data Raw: c3 8f c2 b6 af ee 6d 19 11 e3 20 30 0b fc ea 67 0b d4 b2 26 2d 46 1a 9b b3 ce 82 37 6c 83 8c ff 00 2a c0 bb d1 a1 bb d3 cc e7 72 48 c3 76 41 aa 50 6a 0d 77 78 b6 81 fe fc 9b 7f 0c 57 53 70 aa b6 fb 07 dd 00 2f e9 59 57 a6 a2 b5 2e 94 f5 5c a7 8c e8 11 5b 7f c2 c8 75 bd 51 27 91 11 78 11 88 c1 7f 5a f4 b7 d5 bc d6 c6 f6 c7 a6 e1 5e 3d e3 2b 86 b1 f1 34 77 36 92 18 e6 87 92 e0 f4 39 af 47 d1 1d 35 8d 2a 0d 52 27 3b a4 4c ba 83 9c 30 ea 2b 5a 31 8b d5 0f 11 cc b5 66 fd ad d2 87 05 9d b0 41 ef 50 6a 93 ac a5 4a 72 32 b5 46 69 84 52 15 3e ad fc aa 36 b9 43 1a 8e ff 00 2e 2b 7f 60 af 73 99 d5 d2 c2 49 26 c5 63 91 9f 9a b7 bc 39 23 3f 9e 19 98 80 17 04 9f ad 72 77 4a 67 cf cf 8e 5a bb 4d 01 22 48 18 23 6e 6c 0d c7 f0 a5 3b 45 d8 a8 5d a3 5b f1 3f 9d 1f 89 fc e8 Data Ascii: m 0g&-F7lrHvAPjwxWSp/YW.\[uQ'xZ^=+4w69G5R';L0+Z1fAPjJr2FiR>6C.+`sI&c9#?rwJgZM"H#nl;E][?
2024-10-10 03:10:17 UTC	1034	IN	Data Raw: f3 a4 cf d3 f3 a3 3f 4f ce ba 8e 61 7f e0 4b f9 d2 1e 47 55 fc e8 27 8c f1 f9 d2 49 f7 7f 1a 00 70 fe 82 90 74 3f e7 bd 28 fe 82 90 74 3f e7 bd 00 19 23 ff 00 d7 46 4f f9 34 76 3f 53 47 ad 00 60 5c ff 00 c7 dc bc e7 e7 a8 18 66 3f c3 fa d5 8b 83 fe 99 20 3f df 15 11 da 61 fc 3f ad 70 4a 56 67 74 56 82 00 7c d6 ff 00 7b fa 53 e0 99 a1 18 04 e1 95 73 59 fa 8d ce a1 0c a7 ec 76 c9 2a 83 f3 12 dd 38 ae 5e eb c4 3e 20 91 44 56 da 73 86 c2 8d fe 49 e3 f3 ae 69 62 17 c2 d3 fb 8e 9a 58 49 55 b5 9a fb ce 86 ef 57 31 4c f0 34 80 b2 13 95 2f 82 cb 5c f5 e5 c6 59 99 5b 2b d7 ef 56 69 5d 4e 3b cb 5b 9f b1 cf 25 ca ee 12 79 91 e0 32 9e b9 34 9a a3 61 1b cd 8d a1 94 83 f2 47 96 2b f5 ae 58 56 6e 3c cf 4d 4e f5 86 8c 64 a2 b5 f4 2a df 6a 31 c2 32 5b 38 39 fd 2b 90 6d 5a Data Ascii: ?OaKGU'Ipt?(t?#FO4v?SG`\f? ?a?pJVgtV\|{SsYv8^> DVsIibXIUW1L4/\Y[+Vi]N;[%y24aG+XVn<MNdj12[89+mZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49739	104.19.229.21	443	6848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 03:10:18 UTC	480	OUT	GET /tip/c5b4ce35c8332f3678faa22f494866b39406cf4ca5014903b63ae0f7d772e527/4290b4bf8b6b0cbadf947d4cb518093954dcf276c6a59f2e3e91f97f01a2ec59.jpeg HTTP/1.1 Host: imgs3.hcaptcha.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 03:10:18 UTC	492	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 03:10:18 GMT Content-Type: image/jpeg Content-Length: 4804 Connection: close Alt-Svc: h3=":443"; ma=86400 Cache-Control: public, max-age=86400 Cf-Bgj: h2pri Vary: Origin CF-Cache-Status: HIT Expires: Fri, 11 Oct 2024 03:10:18 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 8d036aa39b634258-EWR
2024-10-10 03:10:18 UTC	877	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 80 00 be 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222"}!1AQa"q2
2024-10-10 03:10:18 UTC	1369	IN	Data Raw: 39 3f eb 9b d3 8f e4 2a 5c ea 77 1f 25 2f e5 2c ff 00 67 a0 ff 00 96 98 fc 00 a5 16 11 63 97 2d f8 03 55 40 94 0f f5 cc 3d c7 1f ad 35 e2 77 1f 34 ce 47 a9 6f f0 a3 9e a7 74 1c 94 d7 d9 2f 1b 7b 58 97 2e 57 1f ed 37 1f fd 6a 86 5d 56 c6 d0 1c 36 e3 d3 08 32 4f d6 a9 1b 35 27 96 63 d8 ee 39 fc e9 9f d9 f1 72 01 c0 c7 e9 dc 55 24 df c4 c1 cf 97 e0 8d 87 2f 89 15 e6 c7 97 b2 3e cc 7a 9f a5 69 e9 fa 82 5f 09 02 15 3b 40 e9 d2 b1 5a c2 2c f6 1c 74 fe 42 b4 b4 7b 75 81 a6 2a 72 18 01 91 df af e9 4e 51 8a 5a 13 4a a4 dc d2 6c d6 e8 39 e3 f0 a3 82 3d 7f 0a 3a 0f f0 a2 b3 3b 43 b5 27 bf 34 b4 7d 0d 00 03 a0 fa 0a 28 f6 fc 28 c7 b7 d2 80 0e 3f 2a 5c e6 92 8e d4 01 cd dd dd 4e b7 b2 aa d8 cc ea 24 e0 81 c1 06 a0 37 97 1e 5f fc 78 4f 9c 7a 7a 1a e9 1a 55 0e 47 53 9e Data Ascii: 9?\w%/,gc-U@=5w4Got/{X.W7j]V62O5'c9rU$/>zi_;@Z,tB{urNQZJl9=:;C'4}((?*\N$7_xOzzUGS
2024-10-10 03:10:18 UTC	1369	IN	Data Raw: ef 64 90 b7 96 1f 18 46 03 ef 57 8a c5 e3 ad 62 da e5 5e c9 e3 b4 50 c1 95 63 5f eb 5c 58 3c 1d 0c 2c e4 e3 7b b3 7a 91 ad 5a 11 ec 8f a8 8f 7e e7 f9 ff 00 f5 ab 3a fe d2 fe e2 50 6d ef bc 85 c7 65 e6 aa 78 67 c4 30 78 87 42 b7 bf 8f ab 2e c9 50 7f 0b 0f bc 2b 5c 4a 4f f0 9c f0 7a 77 3d 2b ba e6 0d 34 ec c5 81 24 8e dd 16 59 77 b0 18 2f 8d b9 ae 47 5e d5 6f e4 b8 78 61 8e 61 6c a7 05 b6 f0 7f 1a eb 84 b8 c9 e7 18 eb de a2 b8 58 6e 61 31 ca bb 90 f2 79 e7 eb 45 c2 2e da 9e 61 75 11 0c 1a 59 30 dd 80 3c 8f f1 ad ed 2e 1b 8d 5e c9 11 67 02 48 06 d0 8e a7 18 ed cd 6d 7f c2 35 a6 09 8c ac 1d 9b 24 80 4f 00 8a d5 b7 8a de d1 36 db a8 03 ee f4 ec 69 dd 35 a8 dc f5 d0 e3 6f fc 37 35 b4 4d 3d e5 fc 2a be fd ea ff 00 81 44 62 7b ff 00 2d cb 7c a9 c9 18 3f c5 5d 2c Data Ascii: dFWb^Pc_\X<,{zZ~:Pmexg0xB.P+\JOzw=+4$Yw/G^oxaalXna1yE.auY0<.^gHm5$O6i5o75M=*Db{-\|?],
2024-10-10 03:10:18 UTC	1189	IN	Data Raw: 19 bf 9f d6 b6 8d 3b 44 c6 75 7d e3 b1 89 4a c6 aa c4 92 aa 01 27 bf 1d fd ea 54 ee 7b fd 39 a8 f3 8f 60 3f 4f fe bd 3e 2e fd a9 c7 72 5a 24 fa 90 28 fa 60 fd 39 a3 a7 6f e9 47 5e d5 b1 21 9a 3b f6 fc 68 f7 a2 80 0a 28 18 fe 54 76 a0 03 de 8e b4 7a d1 db 9a 00 a7 70 66 f2 e4 30 85 32 f2 10 1e 9f 43 5e 67 a8 c5 e6 78 ae df fb 72 ee f2 79 61 70 ca a2 dc ad b2 a9 f4 63 f7 8d 7a 7b 7f ac 3c ff 00 10 aa d7 36 b0 5e 5a 98 ae 62 57 8c af 46 19 ef 5c ed ee 5f 2d de a7 09 a9 f8 81 4c 8c 90 af 3d f0 3b f6 ae 5a e2 79 26 72 59 be 99 fe 75 df 5f f8 2a 37 98 bd a5 c0 03 23 e4 93 9f d6 b9 cb bf 09 ea 76 e9 91 6d e6 28 51 93 19 dd df 9a ca ed 23 64 94 8e 65 f8 c9 e7 38 e4 e7 f9 9a 66 33 cf 51 ea 7f c6 ac 6a 9a 25 fc f6 52 c7 f6 5b 85 71 96 ff 00 56 6b 32 cc 4a b6 68 51 Data Ascii: ;Du}J'T{9`?O>.rZ$(`9oG^!;h(Tvzpf02C^gxryapcz{<6^ZbWF\_-L=;Zy&rYu_*7#vm(Q#de8f3Qj%R[qVk2JhQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49740	104.19.229.21	443	6848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 03:10:18 UTC	480	OUT	GET /tip/91570bad4bdd3913b054530049a4ef53d5363ed83f13aa0680890621968d0bb1/eb37d571818b4aebfc876b4f402d188934de1dcf2d867a29e51601aab7e9b8b9.jpeg HTTP/1.1 Host: imgs3.hcaptcha.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 03:10:18 UTC	492	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 03:10:18 GMT Content-Type: image/jpeg Content-Length: 4981 Connection: close Alt-Svc: h3=":443"; ma=86400 Cache-Control: public, max-age=86400 Cf-Bgj: h2pri Vary: Origin CF-Cache-Status: HIT Expires: Fri, 11 Oct 2024 03:10:18 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 8d036aa3abbf43b6-EWR
2024-10-10 03:10:18 UTC	877	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 80 00 be 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222"}!1AQa"q2
2024-10-10 03:10:18 UTC	1369	IN	Data Raw: 38 ef f4 f6 af 39 d5 64 dd ac e3 27 0a 30 7b e3 ff 00 ad 5e 81 aa 37 ca de a4 7e 7f fd 6a f3 8b 86 f3 35 99 0f 4c 1e df d3 da b9 e4 f4 3b a9 ee 69 dd 12 b6 4b d8 0f d3 ff 00 ad 58 f3 cf 75 bc 45 6e e5 78 cb 73 c7 ff 00 aa bb dd 33 c0 fa ae b5 69 1c 88 12 d6 df a8 92 5f 4f 55 1d c5 6e d8 fc 32 d2 ac 30 d7 d7 32 de 4c df 30 8d 3e 45 c7 f8 55 52 a2 de e7 36 2e a3 7e ec 0f 2f 68 26 9b 49 8e 56 8c 49 71 07 cc ac 4f 25 6b d3 be 11 6b a7 58 fe d3 47 88 a4 90 ac 7b b3 df ef 7f 85 6e c3 a6 69 b6 eb b6 de c2 00 17 8d a8 81 b1 fe f3 b7 5f a0 ad 5d 02 da d6 19 ee 9e 0b 6b 78 9d 82 ef 31 ae 0b 75 fb c7 15 d3 4e 8b 8b bd ce 77 2e 88 dd c7 e5 45 1d 7f 9d 15 d0 20 22 90 8f 41 9f a1 a5 fe 54 7e 00 8f 4a 00 3f 5f eb 47 af 7f eb 45 14 00 7e b4 75 14 51 d7 ff 00 af 40 1c 3c Data Ascii: 89d'0{^7~j5L;iKXuEnxs3i_OUn202L0>EUR6.~/h&IVIqO%kkXG{ni_]kx1uNw.E "AT~J?_GE~uQ@<
2024-10-10 03:10:18 UTC	1369	IN	Data Raw: fd 68 fd 68 ff 00 27 34 75 e6 80 3c c3 59 03 fb 6e f8 90 3f d7 30 cf e3 de a8 96 c7 7c 0e 9c 8f e7 57 35 a6 1f db 77 de d3 30 39 1e fd ea 86 71 ea 31 c1 f5 15 20 3b 3f 37 e3 9e 7f 99 a9 6e 1b 6c 67 d7 19 39 fe 67 fc 2a b8 6c 1f 40 0f e5 ff 00 d7 a5 bb 70 b0 b7 6c 75 f6 ff 00 eb d6 72 45 23 0a 26 dd 75 20 ef 9c 9c ff 00 5a dc 88 7c 9d 72 5b f5 ff 00 03 5c fd 91 2d a9 48 0f 41 cf 3f d6 ba 38 06 ec b7 e1 cf 7f ad 63 23 5b 9e 61 e3 dd 3c c7 e2 07 75 19 17 11 ab 9f a8 e3 f3 e2 b5 7e 12 59 f9 da d5 fd fb f4 b7 88 46 a4 8f e2 6f eb c5 76 37 7e 1c b6 d4 2e 26 d5 35 79 7e cd 61 14 5e 52 1c 65 e5 3d c0 1f d6 b1 fc 23 36 95 a6 eb d7 70 69 f2 cb 0d bd df ca 20 9c fc ea cb d3 9e f9 15 d5 28 c7 91 5b 73 86 9c 67 ce db 5a 1d ec d2 f5 03 82 3d 7b 7f f5 e9 96 ef 2f 93 78 Data Ascii: hh'4u<Yn?0\|W5w09q1 ;?7nlg9g*l@plurE#&u Z\|r[\-HA?8c#[a<u~YFov7~.&5y~a^Re=#6pi ([sgZ={/x
2024-10-10 03:10:18 UTC	1366	IN	Data Raw: cc 60 8c 8d 93 d3 1d 69 29 9d 2e 29 ea 67 5a 44 e2 e1 36 67 ae 07 f8 7b d7 a4 b4 b2 fd 84 4d e6 15 f2 93 0d fc b1 ef 5c fe 99 a4 91 32 c8 e8 54 21 e0 01 fa 0f f1 ad f6 01 6d a4 46 fb ac a5 70 3e 9d 07 bd 0f df 8b 8b 31 72 e5 9a 92 2b 69 fe 22 9a d1 da de e5 f3 1b 0e 1f 3d 3d 05 74 37 77 30 6a 9a 1b 5e 33 66 6b 7c a9 2b d4 8f 4a f2 af b4 48 c0 ee 1c 2f 4c 76 fa 7b d6 de 89 ab bc 6c 63 76 3b 64 18 3b 8f 5f 63 59 a8 fb 8e 3d 4d 67 6e 75 34 5c 1a ec ff 00 2a a2 c8 c3 a6 e7 18 3f 4f 6a bf 16 b0 ef 85 71 c9 eb fe 1e d5 42 59 e3 b8 62 e2 3d 88 38 3b ff 00 91 ff 00 1a cf bd 9b ca 64 10 ee f9 c6 0f af d2 8a 72 7b 31 57 82 dd 23 a6 3a 9a 85 70 8d bc e3 1f fd 6a ee 7e 15 c8 5e e3 55 62 72 76 c7 c9 fa b7 15 e3 32 df cb 65 64 1e 18 f7 bb 36 31 8e bf 4a f4 ff 00 82 1a Data Ascii: `i).)gZD6g{M\2T!mFp>1r+i"==t7w0j^3fk\|+JH/Lv{lcv;d;_cY=Mgnu4\*?OjqBYb=8;dr{1W#:pj~^Ubrv2ed61J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49741	104.19.229.21	443	6848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 03:10:18 UTC	480	OUT	GET /tip/62de709702ece426880b4ae75ea1f5b330a40ae8a2f00e177885143e9b0083e7/dc0f9d7dba9d640f0a04d356079b7f10b58f25cfd3410a845b1db0886b07b365.jpeg HTTP/1.1 Host: imgs3.hcaptcha.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 03:10:18 UTC	492	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 03:10:18 GMT Content-Type: image/jpeg Content-Length: 4649 Connection: close Alt-Svc: h3=":443"; ma=86400 Cache-Control: public, max-age=86400 Cf-Bgj: h2pri Vary: Origin CF-Cache-Status: HIT Expires: Fri, 11 Oct 2024 03:10:18 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 8d036aa3adb46a50-EWR
2024-10-10 03:10:18 UTC	877	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 80 00 be 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222"}!1AQa"q2
2024-10-10 03:10:18 UTC	1369	IN	Data Raw: fd 56 a3 85 be 5e b9 1b 80 ed 55 0c 8d 8c 02 7b 8c 67 da 88 e4 2b 0a fd 56 a6 51 2a 32 46 9f 98 39 e7 1c 9e c2 a5 b5 70 cc e3 7e 71 8f 4a c9 79 be 46 ff 00 81 55 ed 2d b7 34 a7 27 1c 52 70 b2 b9 51 9a 66 8f 1e a3 f4 a3 8f 51 fa 51 91 ea 3f 3a 5c fb fe b5 06 82 71 ea 3f 4a 0f 02 83 d0 fd 28 7f bb f8 d0 02 8f e8 29 07 43 fe 7b d2 8f e8 29 07 43 fe 7b d0 1d 43 d7 ea 68 ce 45 19 a3 9a 00 c0 b9 52 b7 52 39 e9 bc 55 56 7f dd 1f a7 f5 ad 6d 4d 40 84 e3 fb c3 35 8d 12 b4 cb b4 7a 60 fe 75 74 aa 73 5e e6 55 61 b5 8b f6 50 b4 d7 24 f6 0d cf e5 52 ea 84 25 ba 20 e9 b5 6b 42 da 05 84 10 3a 92 3f 95 64 ea 92 6e 90 0e ca a3 35 94 a6 e5 23 5a 71 b2 32 ed e6 28 08 c9 c6 4f 00 fb d5 c1 3e 50 f3 c7 23 ad 72 7a fe bb fd 8d 09 78 f6 19 06 4f 24 f1 5c 86 99 f1 03 54 fe d0 88 Data Ascii: V^U{g+VQ*2F9p~qJyFU-4'RpQfQQ?:\q?J()C{)C{ChERR9UVmM@5z`uts^UaP$R% kB:?dn5#Zq2(O>P#rzxO$\T
2024-10-10 03:10:18 UTC	1369	IN	Data Raw: c3 8f c2 b6 af ee 6d 19 11 e3 20 30 0b fc ea 67 0b d4 b2 26 2d 46 1a 9b b3 ce 82 37 6c 83 8c ff 00 2a c0 bb d1 a1 bb d3 cc e7 72 48 c3 76 41 aa 50 6a 0d 77 78 b6 81 fe fc 9b 7f 0c 57 53 70 aa b6 fb 07 dd 00 2f e9 59 57 a6 a2 b5 2e 94 f5 5c a7 8c e8 11 5b 7f c2 c8 75 bd 51 27 91 11 78 11 88 c1 7f 5a f4 b7 d5 bc d6 c6 f6 c7 a6 e1 5e 3d e3 2b 86 b1 f1 34 77 36 92 18 e6 87 92 e0 f4 39 af 47 d1 1d 35 8d 2a 0d 52 27 3b a4 4c ba 83 9c 30 ea 2b 5a 31 8b d5 0f 11 cc b5 66 fd ad d2 87 05 9d b0 41 ef 50 6a 93 ac a5 4a 72 32 b5 46 69 84 52 15 3e ad fc aa 36 b9 43 1a 8e ff 00 2e 2b 7f 60 af 73 99 d5 d2 c2 49 26 c5 63 91 9f 9a b7 bc 39 23 3f 9e 19 98 80 17 04 9f ad 72 77 4a 67 cf cf 8e 5a bb 4d 01 22 48 18 23 6e 6c 0d c7 f0 a5 3b 45 d8 a8 5d a3 5b f1 3f 9d 1f 89 fc e8 Data Ascii: m 0g&-F7lrHvAPjwxWSp/YW.\[uQ'xZ^=+4w69G5R';L0+Z1fAPjJr2FiR>6C.+`sI&c9#?rwJgZM"H#nl;E][?
2024-10-10 03:10:18 UTC	1034	IN	Data Raw: f3 a4 cf d3 f3 a3 3f 4f ce ba 8e 61 7f e0 4b f9 d2 1e 47 55 fc e8 27 8c f1 f9 d2 49 f7 7f 1a 00 70 fe 82 90 74 3f e7 bd 28 fe 82 90 74 3f e7 bd 00 19 23 ff 00 d7 46 4f f9 34 76 3f 53 47 ad 00 60 5c ff 00 c7 dc bc e7 e7 a8 18 66 3f c3 fa d5 8b 83 fe 99 20 3f df 15 11 da 61 fc 3f ad 70 4a 56 67 74 56 82 00 7c d6 ff 00 7b fa 53 e0 99 a1 18 04 e1 95 73 59 fa 8d ce a1 0c a7 ec 76 c9 2a 83 f3 12 dd 38 ae 5e eb c4 3e 20 91 44 56 da 73 86 c2 8d fe 49 e3 f3 ae 69 62 17 c2 d3 fb 8e 9a 58 49 55 b5 9a fb ce 86 ef 57 31 4c f0 34 80 b2 13 95 2f 82 cb 5c f5 e5 c6 59 99 5b 2b d7 ef 56 69 5d 4e 3b cb 5b 9f b1 cf 25 ca ee 12 79 91 e0 32 9e b9 34 9a a3 61 1b cd 8d a1 94 83 f2 47 96 2b f5 ae 58 56 6e 3c cf 4d 4e f5 86 8c 64 a2 b5 f4 2a df 6a 31 c2 32 5b 38 39 fd 2b 90 6d 5a Data Ascii: ?OaKGU'Ipt?(t?#FO4v?SG`\f? ?a?pJVgtV\|{SsYv8^> DVsIibXIUW1L4/\Y[+Vi]N;[%y24aG+XVn<MNdj12[89+mZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49742	104.19.229.21	443	6848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 03:10:18 UTC	480	OUT	GET /tip/39a767c376904cc26ef5b4e59936075f893457cdd7d6cdc9a7fbfc3678ef1df5/8c90fadbde7152b959d45c77248ff00a8620bcd84edd7c79accbdb75ba983a8b.jpeg HTTP/1.1 Host: imgs3.hcaptcha.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 03:10:18 UTC	536	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 03:10:18 GMT Content-Type: image/jpeg Content-Length: 52812 Connection: close Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 Cache-Control: public, max-age=86400 Alt-Svc: h3=":443"; ma=86400 CF-Cache-Status: MISS Expires: Fri, 11 Oct 2024 03:10:18 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 8d036aa53d4f8c27-EWR
2024-10-10 03:10:18 UTC	833	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 01 4d 01 f4 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222M"}!1AQa"q2
2024-10-10 03:10:18 UTC	1369	IN	Data Raw: 75 26 e0 30 38 19 ed 5c c9 53 a7 38 aa 6a e9 da fa ad 19 ad 1a 14 e8 63 bd 85 2f 86 51 77 57 2c 5c 6a 4c 96 d2 c8 1c 39 8f 19 53 6e 10 e0 9c 75 22 9b 34 92 99 9d 56 e5 61 8e 28 e3 e3 c9 0f 9c d3 5d 85 c6 83 26 f6 2d 27 91 11 6c 9e 4f 2b fe 15 2d bc 7b ef 2e dc f4 11 45 f9 e6 b7 4a 85 37 29 72 d9 c7 4e fe 9f 79 78 7a 94 30 b4 ea 28 c6 dc ba 5a ed fa 6f dc 9a 74 b8 1b 48 bd 61 9f 4b 3c d2 46 25 97 2a b7 85 5d 7a 9f b1 63 35 1d f6 f9 23 99 de 7b c2 c6 f1 a2 44 8e 5d a0 00 33 de ac d9 69 72 c5 10 9c 8b f6 76 1c 66 e9 7a 57 2d 2c 1d 39 52 75 65 a5 fa 5c f3 96 2e 30 cb e3 52 52 6a 49 bb 7f 5d 8a 66 3b a5 b8 21 af 98 30 1c 1f b1 f6 ac eb f8 2f da 42 cb 7f 21 53 8c a8 b2 35 af 78 51 99 e2 78 6f 7c ed bc 32 dc 8c 8f 4a cd 30 4e 0e 09 d4 33 ff 00 5f 2b 5e 96 16 94 Data Ascii: u&08\S8jc/QwW,\jL9Snu"4Va(]&-'lO+-{.EJ7)rNyxz0(ZotHaK<F%*]zc5#{D]3irvfzW-,9Rue\.0RRjI]f;!0/B!S5xQxo\|2J0N3_+^
2024-10-10 03:10:18 UTC	1369	IN	Data Raw: 48 d4 0b c6 c6 3a fd 90 55 7b 95 99 de de 3f b4 2c cb 21 24 7e e8 27 4f a5 32 7d 45 6d f5 1b 5b 40 f7 82 66 9c 46 ea f2 ee 50 31 9f 41 9a 65 bc 2f 6f 3d a3 3c 8d 26 e6 90 80 3b 7d 2b a6 58 9a c9 73 b5 6b ec 9f 55 dc f9 99 51 58 79 29 c6 77 92 6b 4e e5 0d 2a ee e5 bc b6 9a f5 47 9c 58 2a 8b 70 d8 c3 63 ad 5a 43 71 fd b2 a3 ed a7 66 e1 ff 00 2e 9c 74 fc ab 32 dd 65 92 c5 e5 8c 30 2b 15 c3 06 5e 30 77 64 63 df 8a 9a d3 cd b8 be b7 90 4b 7c f2 34 48 ef b6 e0 28 04 af bf d0 d7 a9 45 7b 75 29 69 b3 4d 69 f7 dc fa 7a d4 61 19 ca b2 dd c5 df d7 a1 d0 6a 6e e9 6c 4a 5e 10 e7 85 02 cc 1a cf b7 b5 b9 93 4f 95 05 e9 57 97 03 71 b2 ce 17 e9 ef 50 5c c1 71 77 7a b0 83 a8 65 4e de 2e 97 1e f5 a0 2c ee 55 42 81 a8 00 06 00 17 4b 4e 9e 0e 34 28 aa 7b eb 7d 5a 3c ba d5 fd Data Ascii: H:U{?,!$~'O2}Em[@fFP1Ae/o=<&;}+XskUQXy)wkNGXpcZCqf.t2e0+^0wdcK\|4H(E{u)iMizajnlJ^OWqP\qwzeN.,UBKN4({}Z<
2024-10-10 03:10:18 UTC	1369	IN	Data Raw: 94 21 31 b2 10 41 f5 e7 15 5c a9 5d 46 dc 1f f9 fa 93 ff 00 41 af 46 ac 2d 34 d5 ac fb 6c 7d 26 16 78 85 4e 4a ab b3 5b 59 bb 58 d6 d3 14 2e 9e ec 79 26 d2 53 ff 00 8f 1a a3 a8 cb 2c 90 49 f3 1f 95 a1 c6 2a e6 9b 28 16 8f 1b 1e 4d ac bb 47 fc 0a a5 9e d2 31 69 23 30 dd 96 89 b3 f5 19 c5 73 bc 45 3c 2e 2e ac f1 0a ed a5 6f 4f 23 e7 6a 56 86 17 1b 5e 55 d5 ee f4 f4 b9 4d e3 37 1a 8d ca 48 ec 76 cb 06 09 3e d4 db 6d 20 99 56 51 b8 c6 2e a7 19 e3 d3 fc 4d 5e 6b 63 06 a7 76 dd 41 96 0e 7d 28 b5 b0 73 3a 5c 02 08 fb 44 ed 8d dd 38 f4 fc 69 57 cc 17 37 ee 27 68 d9 db 4d 36 d4 f4 95 4a 13 84 6a 52 b5 9b f4 fe 99 53 46 b4 88 4e 6d 5a c6 d2 6f f4 6f 3f 7c c0 e7 ae 3b 1a ad f6 07 8e e7 7a 7f 66 aa e7 a7 98 fc 56 de 9a 6d ad b7 cf 24 a0 39 b2 03 07 a8 1b 87 4f 5a a9 Data Ascii: !1A\]FAF-4l}&xNJ[YX.y&S,I*(MG1i#0sE<..oO#jV^UM7Hv>m VQ.M^kcvA}(s:\D8iW7'hM6JjRSFNmZoo?\|;zfVm$9OZ
2024-10-10 03:10:18 UTC	1369	IN	Data Raw: 76 b2 35 c0 90 21 85 f2 1a 10 a0 1e dc d6 f1 a7 29 41 cd ec 8f 2f 17 84 ab 85 e4 f6 93 6d bf 31 cb 12 e2 e5 25 86 10 f0 98 c8 68 99 88 3b 8f b9 f4 ab 6a c3 ed b1 8d e1 4f db 65 ff 00 d0 6a 00 b9 6b ef f7 60 fe 55 5e e2 c5 ae ae e1 54 70 a0 5f 4a c4 9f 4d b5 e5 e2 a5 46 72 51 94 ad 6f 2b fd e7 2a 9a 69 29 3e af f4 28 5d c1 3a ea 76 92 4b 26 f5 f2 18 2e 3b 7c df e3 49 6a 33 e1 e4 ff 00 af 16 ff 00 d0 cd 5b bf 70 b3 59 45 d4 98 09 cf d1 8f f8 d5 4d 33 cc 3a 1f ef 31 8f b1 9d 98 f4 dd 5e 96 16 b4 a7 86 e6 6b 66 d1 d3 35 cf 06 bd 4b 28 89 35 d4 91 37 21 a6 81 48 f6 2b 4f fb 22 ac f2 b2 1b 48 91 64 68 c0 91 9c 13 8f a1 a7 2c 6a 35 32 c0 73 e7 db ff 00 e8 35 63 11 f9 ee 5d f6 e2 ea 63 d7 d8 53 af 67 d2 f7 4b f2 47 9f 27 55 4a 14 9b 69 2b bd 3c 8a 17 66 5b 7c 63 Data Ascii: v5!)A/m1%h;jOejk`U^Tp_JMFrQo+*i)>(]:vK&.;\|Ij3[pYEM3:1^kf5K(57!H+O"Hdh,j52s5c]cSgKG'UJi+<f[\|c
2024-10-10 03:10:18 UTC	1369	IN	Data Raw: 41 2b 3d 3a ec 8f 53 17 8a b4 34 ba 6d 98 f1 c5 34 ef 13 88 16 28 a1 49 33 89 83 f2 cb 51 ce 41 b5 90 91 ff 00 2e 89 ff 00 a1 0a d4 b2 b8 86 de 2b 88 bc cb 23 b4 f3 fb 86 e9 8a c7 9a e2 09 2d 2e 1b ed 31 3b 34 62 35 58 e3 65 1c 30 3d eb 96 be 2d d6 8d 48 c5 d9 27 14 9a f3 d4 e5 c7 d6 f6 94 f9 62 de eb 5f 50 d5 ec 04 97 3b cb 95 02 ed 58 71 d7 09 ff 00 d6 ab 56 ec 12 f6 50 c7 1f e9 89 d7 fd d1 59 ba ad c4 82 65 fd e9 19 bd 41 ff 00 8e f4 ab 30 23 c9 78 ed b8 14 37 69 ff 00 a0 d7 a3 53 0d 5a 69 2a 92 bf bb 6f cc e9 c1 d5 74 df b3 a8 ef 74 85 df e6 d8 da a2 f2 44 57 1d 3e b4 72 b3 85 09 1c a8 d0 22 1c ce 10 82 b9 a6 5a 4f 0c 11 db 95 b8 8d 5e 3f 30 32 cb 1b 30 21 8f b5 39 2e ed 5a 76 26 4b 12 79 e0 db bd 71 43 09 52 34 92 5b 25 f3 df ee 3d 38 d7 a7 18 b8 a7 Data Ascii: A+=:S4m4(I3QA.+#-.1;4b5Xe0=-H'b_P;XqVPYeA0#x7iSZi*ottDW>r"ZO^?020!9.Zv&KyqCR4[%=8
2024-10-10 03:10:18 UTC	1369	IN	Data Raw: 11 d7 81 a5 04 de 22 5a 38 dd 27 d3 52 f4 73 6f 42 8f 6a ad 83 90 3e d8 3f ad 2f 9e 5a eb 7c a1 11 e5 b9 8b 08 b2 07 c6 06 3b 56 7c 97 36 e5 40 f3 ac 94 b0 c8 3f 67 7a 48 ae a3 b7 b8 0c 6e 2c 49 53 90 45 bb f5 ad 28 51 53 8b 4e 4a e8 ea 9c 22 ab f3 45 36 a5 af 95 f6 66 91 e2 f6 cf fe ba 5c ff 00 5a a7 7a e0 b6 57 3f f2 0f 15 24 57 90 4d 7b 66 89 30 91 c1 99 9c 85 20 0d c3 3d ea 3b 98 bf 76 1f 76 73 60 06 31 59 e2 dc 61 4a 5c db b7 a0 51 51 a5 6f 69 a3 ba 32 e4 80 c9 a4 17 ce 31 6b 09 e7 fd ea da 9a 05 f3 58 95 24 8b b4 27 1f ee 0a c8 75 91 b4 26 c4 aa 80 5b 45 f2 16 c6 70 c3 fc fe 15 ab fd a7 07 9b 23 c3 73 01 59 18 30 12 c4 e7 07 00 7b 7a 56 58 34 dd 09 c5 c7 5d 37 ea 7a 2e b4 79 9c a9 3b b5 fe 44 96 11 c8 d0 88 be cc 84 46 cc 43 ad ca af 53 9a 7c c1 cb Data Ascii: "Z8'RsoBj>?/Z\|;V\|6@?gzHn,ISE(QSNJ"E6f\ZzW?$WM{f0 =;vvs`1YaJ\QQoi21kX$'u&[Ep#sY0{zVX4]7z.y;DFCS\|
2024-10-10 03:10:18 UTC	1369	IN	Data Raw: 8c 6a 28 5b a9 07 2c 9a 87 1e 91 25 53 df 7a 98 c5 cd e7 fe 03 2d 59 46 bd 6c 62 e2 ec 93 ff 00 4e cb 5e 7d 5c 15 47 39 4d 4a ca 5b e8 8f 37 d9 54 9c e4 f6 bf a0 e7 bc 66 3c c5 a9 7e 11 2d 44 59 4b 40 ab 6f 76 ab f6 81 23 bc c9 81 e9 d6 9b 10 bf 96 f0 c5 f6 eb c4 e4 ff 00 cb 05 e2 9d a9 b5 cc 0b 6a 3e db 24 8a f3 88 dd 1a 35 5e d9 ed 59 46 b5 1a 4f d9 75 b7 de 76 3c b7 96 a4 69 e9 79 2f c0 85 89 82 59 94 db de 9f f4 97 95 5e 14 04 73 c7 7a b8 6e f7 c1 b1 a2 d4 b0 47 4f 29 6a bd a5 c5 eb ac d2 3d ec a0 79 ed 1c 71 a4 4a dc 0f ff 00 5d 40 97 37 4d 73 2c df 69 bc 20 0e a2 05 e0 51 5a ba a7 46 d0 5f 23 96 38 37 09 4d 51 6b dd ed dc 96 de 76 86 56 2e ba 86 f6 ce d5 11 2f 0b 9a 87 57 be 78 a3 89 e3 87 51 20 93 bb f7 4b d6 ad 42 d7 13 31 99 27 b9 2d f7 4b 0b 55 Data Ascii: j([,%Sz-YFlbN^}\G9MJ[7Tf<~-DYK@ov#j>$5^YFOuv<iy/Y^sznGO)j=yqJ]@7Ms,i QZF_#87MQkvV./WxQ KB1'-KU
2024-10-10 03:10:18 UTC	1369	IN	Data Raw: 17 1c 46 b5 bc ef 7b 0c 20 89 ee 8f 6f f8 f6 1f e3 59 77 f7 5a 84 91 32 bb 5d 05 ec de 40 af 07 0f 8c c5 57 aa 9b 57 4b d0 eb a2 eb d4 ae a5 3d 52 f2 48 ca fb 73 ff 00 cf 1d 4f fe fc af f8 54 72 5e 19 10 a3 43 a9 95 23 04 79 4b fe 15 72 ce de fa ee 71 18 ba bb 03 b9 fb 32 f0 2a fd cb c3 60 0a 48 f7 0e 54 7c c5 ad 97 8f af 35 e9 56 c5 3a 73 f6 6a 37 97 64 7b 1c ee 2f 95 2d 7e 47 21 a8 db 5c 5d dc 89 22 b4 b8 08 10 28 de 9c f1 45 6a 6a ba 9a c1 76 16 1b 97 08 50 37 fa b0 3a fe 14 52 55 dd be 17 f7 14 aa 3e c5 30 db 35 0c 81 92 2c 97 03 fe 05 45 c8 8f fb 4a 76 68 9e 66 69 92 35 51 29 40 32 b9 ed 4c b9 8a 58 ef 18 af fc f9 29 04 76 f9 aa 46 47 1a 8b b3 7f cf e4 5f fa 0d 7d 2c 61 17 ca df f5 a1 e3 d0 6f 4b c5 a7 b7 dc 6c d8 5a 5b 9b 66 91 ed 57 7a b1 1f f1 fe Data Ascii: F{ oYwZ2]@WWK=RHsOTr^C#yKrq2*`HT\|5V:sj7d{/-~G!\]"(EjjvP7:RU>05,EJvhfi5Q)@2LX)vFG_},aoKlZ[fWz
2024-10-10 03:10:18 UTC	1369	IN	Data Raw: b5 c5 d4 92 83 6c 89 12 c6 4b b4 39 24 91 ed 5a 6c c7 61 c4 96 20 e3 fe 78 35 6f 42 bd 3a 74 ff 00 79 64 ba 5d db f5 31 cc a1 1a 95 54 e9 a6 dd 95 ec b6 67 9c e9 da f8 b3 d5 2f 4c f1 c6 f0 ac fb 4f fa 69 ca 03 91 5d 70 bd b5 ba 9a 11 1c 2d 13 a4 d1 83 fb e2 f9 04 d7 99 5f d8 35 be af aa 48 eb 12 a8 85 dc 04 40 37 fc d9 f5 e9 8e 7b 57 6f e1 6d 36 4b 34 fb 55 d2 fe fa 6b 88 59 01 fe 15 23 8e b5 e4 4f 1f 56 8c 9c e3 66 bb 6b df a1 e8 3c 0d 2a d4 ee ee a5 dc e9 25 85 bf b4 ec ce e0 3f 7f 26 01 fa 8f ca 88 6d e2 f9 83 42 a7 74 d7 18 c7 6e 2a 9e ad ac c7 0e a3 69 6e 06 37 4f 2f 20 7b d5 6d 33 57 10 3b 5b e4 bf ef 27 24 9f 7c d7 9f 3c d6 af d6 25 35 a5 ff 00 4b 9d 11 ca 97 b3 4a ef 4b f5 ee 89 5d 22 d3 da de 75 88 b1 78 84 8c 24 b8 2b b7 3c 77 ae 77 c4 de 24 8a Data Ascii: lK9$Zla x5oB:tyd]1Tg/LOi]p-_5H@7{Wom6K4UkY#OVfk<%?&mBtnin7O/ {m3W;['$\|<%5KJK]"ux$+<ww$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49743	104.19.229.21	443	6848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 03:10:27 UTC	758	OUT	GET /tip/3c39997cca2c97a840fe4728737ded0bf6e68424c69bf9d31875f2a7b0e12c0f/6ede35228d52f7eb95707fd17afc3fc3086d91d214bf2c231d1d439abe6f72d1.jpeg HTTP/1.1 Host: imgs3.hcaptcha.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://newassets.hcaptcha.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: image Referer: https://newassets.hcaptcha.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 03:10:27 UTC	536	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 03:10:27 GMT Content-Type: image/jpeg Content-Length: 48583 Connection: close Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 Cache-Control: public, max-age=86400 Alt-Svc: h3=":443"; ma=86400 CF-Cache-Status: MISS Expires: Fri, 11 Oct 2024 03:10:27 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 8d036adbbf2dc359-EWR
2024-10-10 03:10:27 UTC	833	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 01 4d 01 f4 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222M"}!1AQa"q2
2024-10-10 03:10:27 UTC	1369	IN	Data Raw: 38 bc 12 34 78 ca 1b 60 bd 4e 3b d5 c8 92 e5 ae 98 f9 e9 0d bc 48 99 cc 41 b3 9f f2 2a 8d dc d2 1d 1d d8 b9 2c d0 42 49 3d f9 a9 d9 da 49 2e 95 98 90 12 1c 0c fb d7 47 22 94 94 62 4d 39 a7 35 15 72 ec 91 dd 2c bb 96 f0 6d 27 ee fd 8b 34 f6 dc 57 0d 72 ca de a2 cf ff 00 ad 58 d1 c9 2b 34 cc d7 17 84 fd a5 a2 44 8a 6d a0 71 9e f5 61 a3 b8 63 bb 3a 89 3e d7 4a 2b 48 52 56 4f f5 b1 d7 47 17 4a 50 bb 76 7e a5 b4 82 7c 02 6f 49 ff 00 b7 1f fe b5 55 9a ca 75 8f 70 d4 1b 3e bf 62 eb fa 54 a9 05 c8 8c 31 3a 86 3d ee 96 91 ed df c8 5d c3 50 2b 9e 07 da 56 ba 2a 52 8c a3 d3 ef 47 4a 95 39 c6 c5 58 be d5 1b ae eb e6 28 18 12 3e c2 39 fc 71 46 a5 76 5d 03 a5 ce 51 18 2c 91 9b 70 a4 ee 35 05 d4 60 09 55 65 d4 22 91 21 69 46 eb 8d c0 e3 e9 55 ee c9 36 92 92 49 24 c0 49 Data Ascii: 84x`N;HA,BI=I.G"bM95r,m'4WrX+4Dmqac:>J+HRVOGJPv~\|oIUup>bT1:=]P+VRGJ9X(>9qFv]Q,p5`Ue"!iFU6I$I
2024-10-10 03:10:27 UTC	1369	IN	Data Raw: 00 5a 83 15 d7 fc ff 00 bf fe 01 7f f5 a8 8f 4f bd 95 b6 a2 ea 44 fa 0b a5 a6 35 9d da 92 08 d4 72 3b 7d a9 6b b5 42 37 b6 9f 7a 3c f9 49 5b a9 22 c5 74 0f 17 ef ff 00 80 5f fd 6a d5 b7 32 cb 7d 6e 45 d9 da 01 04 1b 2c 67 8f a5 63 0b 4b af fa 88 ff 00 e0 52 d6 96 91 75 14 53 db 28 17 2d 37 9e f1 37 9b 2e ee 42 e7 ff 00 ad 5c f8 ba 31 e5 e6 b5 ed e6 ba 9a e1 eb 5a f1 be 8f f4 f9 16 6f e2 71 ac 5b 06 99 26 85 e2 2e 00 88 2e 08 e2 a8 d9 5e 5d 3d a4 24 dd 46 19 d4 9d a2 d4 31 c6 48 ed 57 ae 52 46 d4 6c a5 6c 80 2d d8 6d f4 3b 8d 51 d3 ad c9 d2 84 9b 99 5b ec ac 54 a9 c1 fb f5 c7 1a 50 74 f9 67 ad 8e c6 e7 1a ef 93 43 42 56 b9 50 9b 6e f3 91 ce 6c aa fc 30 5c ad af 98 6e 49 7c 67 1f 62 ff 00 eb 56 69 b3 69 6e 9a 04 93 51 94 c2 aa 59 85 c2 81 c8 cf 71 5a 3b a7 Data Ascii: ZOD5r;}kB7z<I["t_j2}nE,gcKRuS(-77.B\1Zoq[&..^]=$F1HWRFll-m;Q[TPtgCBVPnl0\nI\|gbViinQYqZ;
2024-10-10 03:10:27 UTC	1369	IN	Data Raw: e3 e6 f2 ee 0f eb 57 3c 93 85 fd cd aa a8 85 1d 9e 47 7e 49 fa 52 5a da 1b 4d 32 08 c3 02 c6 29 c8 6c 54 30 c7 3a 89 bc dc e0 da c3 8c 9c ff 00 15 44 96 8b d3 f5 2e 32 be b1 7b b2 13 09 b9 6d c2 3b 02 14 f1 87 73 9f d6 86 89 a3 91 e4 b9 b7 b7 e6 17 68 8c 4c c4 e4 7d 4d 6b 47 25 c1 be 91 15 65 11 89 b6 b7 ee 86 dd be bb aa 98 58 ae 04 2a 58 ef 5b 79 88 f6 f9 ab b1 d3 e5 8a be ec c6 75 6d ad dd ae ba 8c 66 54 d3 2e 11 f1 e6 18 60 2c 33 d7 9a b5 2c 68 5a 26 0b b7 17 bd 3d 38 aa 37 96 ec f1 5c 48 0f 0b 0d b8 23 f1 a7 ea 57 38 78 e2 4e f7 d8 63 f8 52 a9 14 93 6b 7d 3f 22 13 e7 8c 93 d9 ff 00 99 7e c5 49 bf 9d bf 84 dd b8 1f 91 ac bb 68 64 b7 b0 79 31 b9 9a d6 5c 11 fc 3f 3f ff 00 5a 97 46 df 2d c4 aa 58 f9 69 7d 21 23 3f ec d5 bd 39 9f ec 0a ce 30 c6 d2 42 17 Data Ascii: W<G~IRZM2)lT0:D.2{m;shL}MkG%eX*X[yumfT.`,3,hZ&=87\H#W8xNcRk}?"~Ihdy1\??ZF-Xi}!#?90B
2024-10-10 03:10:27 UTC	1369	IN	Data Raw: e4 1b 17 fd 72 9b f9 d7 3c 63 ec e7 28 f6 6b f5 2e 32 72 e5 6f cc c7 d5 9b 37 a0 9f f9 e6 9f fa 08 a2 99 aa ff 00 c7 da ff 00 d7 24 ff 00 d0 45 15 ee 43 01 87 ab 15 51 c7 57 a9 cf 29 c9 49 a2 db 7f ad 4f fb 07 2f fe 84 2b 4a 17 2d 7b 3a 93 9d b7 31 e3 fe f9 aa b2 49 11 8d 14 63 77 f6 7a 76 ff 00 68 54 52 de 43 6d a9 5c ef 9c 46 c2 64 70 19 49 0c 02 fb 57 93 4e d4 dc 75 fe ac 6b 26 95 9f af e8 5d 92 e8 89 ed 42 2c 72 04 2e ae 0c a1 48 cf 4e b5 05 eb 98 8a 18 ed c6 08 e8 2f 40 c5 38 6a 9a 6b 38 72 f6 81 fd 4c 0d fe 14 3d ed 85 c3 a8 f3 ac c9 e8 07 90 ff 00 e1 5b 53 a0 e5 d5 0a a3 52 4e cd ea 50 de f2 3c 2a 61 8e 24 59 84 ac c6 e5 5f 34 c7 e6 ca 2f fa e1 3d 5e 9e 5b 08 57 e6 92 cc 36 32 01 81 bf c2 b3 a5 bc 82 54 61 f6 88 7e 58 9d 11 23 89 97 24 8f 7a ec a7 Data Ascii: r<c(k.2ro7$ECQW)IO/+J-{:1IcwzvhTRCm\FdpIWNuk&]B,r.HN/@8jk8rL=[SRNP<*a$Y_4/=^[W62Ta~X#$z
2024-10-10 03:10:27 UTC	1369	IN	Data Raw: d7 f4 af 9d a7 9c b6 ad 6a db 49 4f 35 ce dc 6e cf 3e 9d eb d9 fe 10 0f f8 a6 35 43 b0 a2 b5 dd c6 01 18 ff 00 96 7e 95 15 1d e4 d3 2b e1 77 3b 69 35 8b 4b eb 45 39 32 2b 59 46 4e 3f df 14 c9 51 ee 35 2b a3 69 6c 93 c5 23 ab a1 17 01 36 e1 40 ae 22 d7 50 82 3f 21 e3 ba 89 59 6d d2 27 49 22 66 e4 73 da ba 5b 3f 15 c7 65 6e d1 b4 96 27 d1 85 b3 82 0f bf ad 5c a4 f9 52 85 af a2 33 71 5d 6f a7 63 7e f1 67 fe cb 43 2d a6 1d 0e 18 1b e1 8c 7f 9c 55 6d 34 f9 d2 dc 19 11 22 5f b3 a4 6a ab 30 72 70 d9 ed f5 ad 0b 0d 46 2d 46 c2 45 96 5b 39 0f 2a 4f d9 d8 76 aa 36 57 56 f6 93 b4 92 3d 9e d0 a4 71 6e c0 ff 00 5a c1 39 3a 75 29 b6 b9 90 3b 73 42 6a ff 00 f0 c2 5e dd ba dc ed 65 56 5f ed 04 18 23 fd 91 44 33 2b de 69 ca e1 04 60 cb 90 7b f3 59 b2 de c3 71 3c 21 67 59 Data Ascii: jIO5n>5C~+w;i5KE92+YFN?Q5+il#6@"P?!Ym'I"fs[?en'\R3q]oc~gC-Um4"_j0rpF-FE[9*Ov6WV=qnZ9:u);sBj^eV_#D3+i`{Yq<!gY
2024-10-10 03:10:27 UTC	1369	IN	Data Raw: 7f 42 c2 6b 57 24 85 4b 7d 47 3f f5 c5 79 ab 37 f7 e4 5b ae 63 d4 4b 67 a0 89 7f c2 aa d9 c9 7e a5 8a c9 74 e7 1d ed d4 62 ab dc 4d 7e f2 92 d7 17 79 cf 4f b3 29 c5 67 25 51 9e 84 27 3f 67 79 6a d8 c6 d4 1c f5 8b 53 ff 00 bf 2b fe 15 04 d7 3b a1 91 56 d6 f7 2e ca cc f2 c7 81 c7 d2 a4 2f 7d ff 00 3f 17 7f f8 0a b5 5e e6 7b a1 6b 21 fb 64 a4 ab 2a 32 3c 2a bc 35 64 dc e3 a9 b5 3e 64 5c 96 e5 a5 d4 2e 92 48 2e 1a 37 68 d9 24 b7 4c f4 5f 7a 64 b7 7b 38 58 f5 42 7f eb 8a ff 00 85 39 66 b9 3a 95 d2 25 cb c7 1c 3b 02 aa 46 ad f7 87 bd 47 33 de f9 ad fe 91 79 d7 fe 7d 56 a6 cf d9 e8 77 d3 e7 93 1d 6f 7f 27 9a 31 1e a8 b9 1d 7c 95 ff 00 0a dc b6 d4 1a e6 d8 61 6f 95 d7 86 dd 12 e4 d6 1d a9 bd 33 0f f4 8b be 07 fc fb 2d 5e 91 75 1f 2f 64 33 dd 28 3d fe ce a2 ae 9d Data Ascii: BkW$K}G?y7[cKg~tbM~yO)g%Q'?gyjS+;V./}?^{k!d2<5d>d\.H.7h$L_zd{8XB9f:%;FG3y}Vwo'1\|ao3-^u/d3(=
2024-10-10 03:10:27 UTC	1369	IN	Data Raw: 93 ef c7 aa 1f fb 62 b4 df b7 31 18 f2 75 4f c2 15 ff 00 0a 8c 3d ef fc fc 5d ff 00 e0 2a d3 c3 de 8f f9 78 bb ff 00 c0 55 a4 e3 25 b2 17 be f5 7f a0 db 53 ff 00 13 6b 76 10 4f 14 4b 11 40 66 5d b9 3c 9a 97 4a 9f ec cb 00 92 da fd 1d 14 a1 64 88 63 19 cf 7a 4b 69 a6 7d 52 da 37 b8 69 a3 68 cc 83 72 05 c1 e4 76 a6 db dc dd cb 6f 0b 1b c9 8b ba 96 da 90 2b 60 64 8a e4 a9 17 2b c4 d6 94 a5 19 f3 2d cd b6 96 53 37 9b 18 d4 30 7a e6 25 ff 00 0a 98 df 36 0e d8 f5 02 41 e7 f7 4b 59 cb 73 78 b6 de 52 cf 79 b8 9e 4f d9 96 a5 b3 37 80 b3 19 ee c9 e8 3f d1 96 bc ba d4 2a 46 37 6f 6f 24 7b 74 6b 27 35 18 47 7d 5e bb 17 4e a5 2c 25 59 20 d4 5f 9e 47 94 bd 2a 7f ed 51 b3 cd 36 ba 88 38 e8 61 5c d6 7c 77 37 a6 62 a6 7b b2 09 ff 00 9f 65 e2 92 e2 4b ed c0 0b 8b b0 be 9f Data Ascii: b1uO=]xU%SkvOK@f]<JdczKi}R7ihrvo+`d+-S70z%6AKYsxRyO7?F7oo${tk'5G}^N,%Y _G*Q68a\\|w7b{eK
2024-10-10 03:10:27 UTC	1369	IN	Data Raw: da 26 57 a6 ed 80 f4 f4 c9 af 2e bc b7 78 76 3b 2a 79 9f 6c 8d 54 01 c0 ca f5 35 e9 be 11 83 ec c5 89 fb c6 ee 3f fd 03 ff 00 ad 5c f3 49 4d 38 9b 45 2d bf ad 8e 8a 28 9e f6 de de 46 b6 69 e5 90 48 4b 19 8c 60 05 27 9f 4e 95 2d bc d0 42 b8 fb 2c 67 27 fe 7f fb 52 47 75 b7 4f b4 8d 5b 6f ee 6e 08 c7 bd 3a 3b cb 4f dd c2 d6 f6 91 a2 c2 8c 5e 48 b7 64 9f 71 cd 74 53 9c 55 b6 bd b7 77 39 2b 45 38 7b d1 6d 5e d6 45 e8 24 b5 9f 70 4b 54 24 75 ff 00 4d a9 4c 70 ac 32 7f a3 20 3c e3 fd 38 fa 53 12 48 61 c0 8c d8 7c de 96 ed 55 2e ee 26 12 b2 16 b6 68 a4 b7 76 53 1c 5b 48 23 8e f5 dd 1a b1 51 bd 93 f4 bf f9 9c 54 28 a8 d5 7e ec 92 7b 5c b8 2d 23 b8 b1 33 34 4f 03 c7 b1 94 a5 c3 30 6c 9a 9e fd 4c 37 10 e4 f0 f7 f8 51 ef 8c 9a 82 d6 ea 39 34 f3 6d 2a 61 d2 18 19 0f Data Ascii: &W.xv;ylT5?\IM8E-(FiHK`'N-B,g'RGuO[on:;O^HdqtSUw9+E8{m^E$pKT$uMLp2 <8SHa\|U.&hvS[H#QT(~{\-#34O0lL7Q94ma
2024-10-10 03:10:27 UTC	1369	IN	Data Raw: 7f e0 55 1c b0 42 93 48 ab 68 59 11 82 ef 7b b2 b9 38 cf 73 46 a9 20 93 4d 90 8e 86 da 2c 7f df 55 3c a8 1e 56 0c 01 53 78 80 83 df e5 15 cd 34 9d dd af 64 74 ce 6a 73 8c 7a 15 c4 70 7f cf ac 7f f8 1d 52 47 14 0c e0 1b 64 00 f7 fb 77 ff 00 5e 9a ac e6 15 95 be c5 1a b9 60 a0 c0 49 e0 e3 b5 39 5c 13 8f 32 c8 13 ff 00 4e cd 5c 6d 27 2e 5b 2b fa bf f3 1d 34 9a 52 4a 56 f4 2d 2d ad 9b 30 54 89 59 8f 40 2f 0e 7f 9d 35 e1 8a 33 1c 90 ab a0 92 09 77 02 e5 ba 63 d6 9d 0a ef da 5e 38 44 91 5d 88 f3 1a 6d 18 1c d4 10 b3 bc 16 f9 24 fe e6 7e a7 de ba 65 82 7c ae e9 26 9a fc 7e f3 49 54 8c 79 5a 5b 99 ba 9f fc 7d 8f fa e6 9f fa 08 a2 8d 4c 11 76 3f eb 9a 7f e8 22 8a f2 2a 53 4a 6d 5c ae 6b f4 36 a7 f9 ad d5 bb fd 89 7f 98 a8 6f 19 65 d4 15 01 0a 16 ea 2c e7 b7 ca 4d Data Ascii: UBHhY{8sF M,U<VSx4dtjszpRGdw^`I9\2N\m'.[+4RJV--0TY@/53wc^8D]m$~e\|&~ITyZ[}Lv?"*SJm\k6oe,M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49744	104.19.229.21	443	6848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 03:10:27 UTC	480	OUT	GET /tip/3c39997cca2c97a840fe4728737ded0bf6e68424c69bf9d31875f2a7b0e12c0f/6ede35228d52f7eb95707fd17afc3fc3086d91d214bf2c231d1d439abe6f72d1.jpeg HTTP/1.1 Host: imgs3.hcaptcha.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 03:10:28 UTC	536	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 03:10:28 GMT Content-Type: image/jpeg Content-Length: 48583 Connection: close Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 Cache-Control: public, max-age=86400 Alt-Svc: h3=":443"; ma=86400 CF-Cache-Status: MISS Expires: Fri, 11 Oct 2024 03:10:28 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 8d036ae0ebd00cc1-EWR
2024-10-10 03:10:28 UTC	833	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 01 4d 01 f4 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222M"}!1AQa"q2
2024-10-10 03:10:28 UTC	1369	IN	Data Raw: 38 bc 12 34 78 ca 1b 60 bd 4e 3b d5 c8 92 e5 ae 98 f9 e9 0d bc 48 99 cc 41 b3 9f f2 2a 8d dc d2 1d 1d d8 b9 2c d0 42 49 3d f9 a9 d9 da 49 2e 95 98 90 12 1c 0c fb d7 47 22 94 94 62 4d 39 a7 35 15 72 ec 91 dd 2c bb 96 f0 6d 27 ee fd 8b 34 f6 dc 57 0d 72 ca de a2 cf ff 00 ad 58 d1 c9 2b 34 cc d7 17 84 fd a5 a2 44 8a 6d a0 71 9e f5 61 a3 b8 63 bb 3a 89 3e d7 4a 2b 48 52 56 4f f5 b1 d7 47 17 4a 50 bb 76 7e a5 b4 82 7c 02 6f 49 ff 00 b7 1f fe b5 55 9a ca 75 8f 70 d4 1b 3e bf 62 eb fa 54 a9 05 c8 8c 31 3a 86 3d ee 96 91 ed df c8 5d c3 50 2b 9e 07 da 56 ba 2a 52 8c a3 d3 ef 47 4a 95 39 c6 c5 58 be d5 1b ae eb e6 28 18 12 3e c2 39 fc 71 46 a5 76 5d 03 a5 ce 51 18 2c 91 9b 70 a4 ee 35 05 d4 60 09 55 65 d4 22 91 21 69 46 eb 8d c0 e3 e9 55 ee c9 36 92 92 49 24 c0 49 Data Ascii: 84x`N;HA,BI=I.G"bM95r,m'4WrX+4Dmqac:>J+HRVOGJPv~\|oIUup>bT1:=]P+VRGJ9X(>9qFv]Q,p5`Ue"!iFU6I$I
2024-10-10 03:10:28 UTC	1369	IN	Data Raw: 00 5a 83 15 d7 fc ff 00 bf fe 01 7f f5 a8 8f 4f bd 95 b6 a2 ea 44 fa 0b a5 a6 35 9d da 92 08 d4 72 3b 7d a9 6b b5 42 37 b6 9f 7a 3c f9 49 5b a9 22 c5 74 0f 17 ef ff 00 80 5f fd 6a d5 b7 32 cb 7d 6e 45 d9 da 01 04 1b 2c 67 8f a5 63 0b 4b af fa 88 ff 00 e0 52 d6 96 91 75 14 53 db 28 17 2d 37 9e f1 37 9b 2e ee 42 e7 ff 00 ad 5c f8 ba 31 e5 e6 b5 ed e6 ba 9a e1 eb 5a f1 be 8f f4 f9 16 6f e2 71 ac 5b 06 99 26 85 e2 2e 00 88 2e 08 e2 a8 d9 5e 5d 3d a4 24 dd 46 19 d4 9d a2 d4 31 c6 48 ed 57 ae 52 46 d4 6c a5 6c 80 2d d8 6d f4 3b 8d 51 d3 ad c9 d2 84 9b 99 5b ec ac 54 a9 c1 fb f5 c7 1a 50 74 f9 67 ad 8e c6 e7 1a ef 93 43 42 56 b9 50 9b 6e f3 91 ce 6c aa fc 30 5c ad af 98 6e 49 7c 67 1f 62 ff 00 eb 56 69 b3 69 6e 9a 04 93 51 94 c2 aa 59 85 c2 81 c8 cf 71 5a 3b a7 Data Ascii: ZOD5r;}kB7z<I["t_j2}nE,gcKRuS(-77.B\1Zoq[&..^]=$F1HWRFll-m;Q[TPtgCBVPnl0\nI\|gbViinQYqZ;
2024-10-10 03:10:28 UTC	1369	IN	Data Raw: e3 e6 f2 ee 0f eb 57 3c 93 85 fd cd aa a8 85 1d 9e 47 7e 49 fa 52 5a da 1b 4d 32 08 c3 02 c6 29 c8 6c 54 30 c7 3a 89 bc dc e0 da c3 8c 9c ff 00 15 44 96 8b d3 f5 2e 32 be b1 7b b2 13 09 b9 6d c2 3b 02 14 f1 87 73 9f d6 86 89 a3 91 e4 b9 b7 b7 e6 17 68 8c 4c c4 e4 7d 4d 6b 47 25 c1 be 91 15 65 11 89 b6 b7 ee 86 dd be bb aa 98 58 ae 04 2a 58 ef 5b 79 88 f6 f9 ab b1 d3 e5 8a be ec c6 75 6d ad dd ae ba 8c 66 54 d3 2e 11 f1 e6 18 60 2c 33 d7 9a b5 2c 68 5a 26 0b b7 17 bd 3d 38 aa 37 96 ec f1 5c 48 0f 0b 0d b8 23 f1 a7 ea 57 38 78 e2 4e f7 d8 63 f8 52 a9 14 93 6b 7d 3f 22 13 e7 8c 93 d9 ff 00 99 7e c5 49 bf 9d bf 84 dd b8 1f 91 ac bb 68 64 b7 b0 79 31 b9 9a d6 5c 11 fc 3f 3f ff 00 5a 97 46 df 2d c4 aa 58 f9 69 7d 21 23 3f ec d5 bd 39 9f ec 0a ce 30 c6 d2 42 17 Data Ascii: W<G~IRZM2)lT0:D.2{m;shL}MkG%eX*X[yumfT.`,3,hZ&=87\H#W8xNcRk}?"~Ihdy1\??ZF-Xi}!#?90B
2024-10-10 03:10:28 UTC	1369	IN	Data Raw: e4 1b 17 fd 72 9b f9 d7 3c 63 ec e7 28 f6 6b f5 2e 32 72 e5 6f cc c7 d5 9b 37 a0 9f f9 e6 9f fa 08 a2 99 aa ff 00 c7 da ff 00 d7 24 ff 00 d0 45 15 ee 43 01 87 ab 15 51 c7 57 a9 cf 29 c9 49 a2 db 7f ad 4f fb 07 2f fe 84 2b 4a 17 2d 7b 3a 93 9d b7 31 e3 fe f9 aa b2 49 11 8d 14 63 77 f6 7a 76 ff 00 68 54 52 de 43 6d a9 5c ef 9c 46 c2 64 70 19 49 0c 02 fb 57 93 4e d4 dc 75 fe ac 6b 26 95 9f af e8 5d 92 e8 89 ed 42 2c 72 04 2e ae 0c a1 48 cf 4e b5 05 eb 98 8a 18 ed c6 08 e8 2f 40 c5 38 6a 9a 6b 38 72 f6 81 fd 4c 0d fe 14 3d ed 85 c3 a8 f3 ac c9 e8 07 90 ff 00 e1 5b 53 a0 e5 d5 0a a3 52 4e cd ea 50 de f2 3c 2a 61 8e 24 59 84 ac c6 e5 5f 34 c7 e6 ca 2f fa e1 3d 5e 9e 5b 08 57 e6 92 cc 36 32 01 81 bf c2 b3 a5 bc 82 54 61 f6 88 7e 58 9d 11 23 89 97 24 8f 7a ec a7 Data Ascii: r<c(k.2ro7$ECQW)IO/+J-{:1IcwzvhTRCm\FdpIWNuk&]B,r.HN/@8jk8rL=[SRNP<*a$Y_4/=^[W62Ta~X#$z
2024-10-10 03:10:28 UTC	1369	IN	Data Raw: d7 f4 af 9d a7 9c b6 ad 6a db 49 4f 35 ce dc 6e cf 3e 9d eb d9 fe 10 0f f8 a6 35 43 b0 a2 b5 dd c6 01 18 ff 00 96 7e 95 15 1d e4 d3 2b e1 77 3b 69 35 8b 4b eb 45 39 32 2b 59 46 4e 3f df 14 c9 51 ee 35 2b a3 69 6c 93 c5 23 ab a1 17 01 36 e1 40 ae 22 d7 50 82 3f 21 e3 ba 89 59 6d d2 27 49 22 66 e4 73 da ba 5b 3f 15 c7 65 6e d1 b4 96 27 d1 85 b3 82 0f bf ad 5c a4 f9 52 85 af a2 33 71 5d 6f a7 63 7e f1 67 fe cb 43 2d a6 1d 0e 18 1b e1 8c 7f 9c 55 6d 34 f9 d2 dc 19 11 22 5f b3 a4 6a ab 30 72 70 d9 ed f5 ad 0b 0d 46 2d 46 c2 45 96 5b 39 0f 2a 4f d9 d8 76 aa 36 57 56 f6 93 b4 92 3d 9e d0 a4 71 6e c0 ff 00 5a c1 39 3a 75 29 b6 b9 90 3b 73 42 6a ff 00 f0 c2 5e dd ba dc ed 65 56 5f ed 04 18 23 fd 91 44 33 2b de 69 ca e1 04 60 cb 90 7b f3 59 b2 de c3 71 3c 21 67 59 Data Ascii: jIO5n>5C~+w;i5KE92+YFN?Q5+il#6@"P?!Ym'I"fs[?en'\R3q]oc~gC-Um4"_j0rpF-FE[9*Ov6WV=qnZ9:u);sBj^eV_#D3+i`{Yq<!gY
2024-10-10 03:10:28 UTC	1369	IN	Data Raw: 7f 42 c2 6b 57 24 85 4b 7d 47 3f f5 c5 79 ab 37 f7 e4 5b ae 63 d4 4b 67 a0 89 7f c2 aa d9 c9 7e a5 8a c9 74 e7 1d ed d4 62 ab dc 4d 7e f2 92 d7 17 79 cf 4f b3 29 c5 67 25 51 9e 84 27 3f 67 79 6a d8 c6 d4 1c f5 8b 53 ff 00 bf 2b fe 15 04 d7 3b a1 91 56 d6 f7 2e ca cc f2 c7 81 c7 d2 a4 2f 7d ff 00 3f 17 7f f8 0a b5 5e e6 7b a1 6b 21 fb 64 a4 ab 2a 32 3c 2a bc 35 64 dc e3 a9 b5 3e 64 5c 96 e5 a5 d4 2e 92 48 2e 1a 37 68 d9 24 b7 4c f4 5f 7a 64 b7 7b 38 58 f5 42 7f eb 8a ff 00 85 39 66 b9 3a 95 d2 25 cb c7 1c 3b 02 aa 46 ad f7 87 bd 47 33 de f9 ad fe 91 79 d7 fe 7d 56 a6 cf d9 e8 77 d3 e7 93 1d 6f 7f 27 9a 31 1e a8 b9 1d 7c 95 ff 00 0a dc b6 d4 1a e6 d8 61 6f 95 d7 86 dd 12 e4 d6 1d a9 bd 33 0f f4 8b be 07 fc fb 2d 5e 91 75 1f 2f 64 33 dd 28 3d fe ce a2 ae 9d Data Ascii: BkW$K}G?y7[cKg~tbM~yO)g%Q'?gyjS+;V./}?^{k!d2<5d>d\.H.7h$L_zd{8XB9f:%;FG3y}Vwo'1\|ao3-^u/d3(=
2024-10-10 03:10:28 UTC	1369	IN	Data Raw: 93 ef c7 aa 1f fb 62 b4 df b7 31 18 f2 75 4f c2 15 ff 00 0a 8c 3d ef fc fc 5d ff 00 e0 2a d3 c3 de 8f f9 78 bb ff 00 c0 55 a4 e3 25 b2 17 be f5 7f a0 db 53 ff 00 13 6b 76 10 4f 14 4b 11 40 66 5d b9 3c 9a 97 4a 9f ec cb 00 92 da fd 1d 14 a1 64 88 63 19 cf 7a 4b 69 a6 7d 52 da 37 b8 69 a3 68 cc 83 72 05 c1 e4 76 a6 db dc dd cb 6f 0b 1b c9 8b ba 96 da 90 2b 60 64 8a e4 a9 17 2b c4 d6 94 a5 19 f3 2d cd b6 96 53 37 9b 18 d4 30 7a e6 25 ff 00 0a 98 df 36 0e d8 f5 02 41 e7 f7 4b 59 cb 73 78 b6 de 52 cf 79 b8 9e 4f d9 96 a5 b3 37 80 b3 19 ee c9 e8 3f d1 96 bc ba d4 2a 46 37 6f 6f 24 7b 74 6b 27 35 18 47 7d 5e bb 17 4e a5 2c 25 59 20 d4 5f 9e 47 94 bd 2a 7f ed 51 b3 cd 36 ba 88 38 e8 61 5c d6 7c 77 37 a6 62 a6 7b b2 09 ff 00 9f 65 e2 92 e2 4b ed c0 0b 8b b0 be 9f Data Ascii: b1uO=]xU%SkvOK@f]<JdczKi}R7ihrvo+`d+-S70z%6AKYsxRyO7?F7oo${tk'5G}^N,%Y _G*Q68a\\|w7b{eK
2024-10-10 03:10:28 UTC	1369	IN	Data Raw: da 26 57 a6 ed 80 f4 f4 c9 af 2e bc b7 78 76 3b 2a 79 9f 6c 8d 54 01 c0 ca f5 35 e9 be 11 83 ec c5 89 fb c6 ee 3f fd 03 ff 00 ad 5c f3 49 4d 38 9b 45 2d bf ad 8e 8a 28 9e f6 de de 46 b6 69 e5 90 48 4b 19 8c 60 05 27 9f 4e 95 2d bc d0 42 b8 fb 2c 67 27 fe 7f fb 52 47 75 b7 4f b4 8d 5b 6f ee 6e 08 c7 bd 3a 3b cb 4f dd c2 d6 f6 91 a2 c2 8c 5e 48 b7 64 9f 71 cd 74 53 9c 55 b6 bd b7 77 39 2b 45 38 7b d1 6d 5e d6 45 e8 24 b5 9f 70 4b 54 24 75 ff 00 4d a9 4c 70 ac 32 7f a3 20 3c e3 fd 38 fa 53 12 48 61 c0 8c d8 7c de 96 ed 55 2e ee 26 12 b2 16 b6 68 a4 b7 76 53 1c 5b 48 23 8e f5 dd 1a b1 51 bd 93 f4 bf f9 9c 54 28 a8 d5 7e ec 92 7b 5c b8 2d 23 b8 b1 33 34 4f 03 c7 b1 94 a5 c3 30 6c 9a 9e fd 4c 37 10 e4 f0 f7 f8 51 ef 8c 9a 82 d6 ea 39 34 f3 6d 2a 61 d2 18 19 0f Data Ascii: &W.xv;ylT5?\IM8E-(FiHK`'N-B,g'RGuO[on:;O^HdqtSUw9+E8{m^E$pKT$uMLp2 <8SHa\|U.&hvS[H#QT(~{\-#34O0lL7Q94ma
2024-10-10 03:10:28 UTC	1369	IN	Data Raw: 7f e0 55 1c b0 42 93 48 ab 68 59 11 82 ef 7b b2 b9 38 cf 73 46 a9 20 93 4d 90 8e 86 da 2c 7f df 55 3c a8 1e 56 0c 01 53 78 80 83 df e5 15 cd 34 9d dd af 64 74 ce 6a 73 8c 7a 15 c4 70 7f cf ac 7f f8 1d 52 47 14 0c e0 1b 64 00 f7 fb 77 ff 00 5e 9a ac e6 15 95 be c5 1a b9 60 a0 c0 49 e0 e3 b5 39 5c 13 8f 32 c8 13 ff 00 4e cd 5c 6d 27 2e 5b 2b fa bf f3 1d 34 9a 52 4a 56 f4 2d 2d ad 9b 30 54 89 59 8f 40 2f 0e 7f 9d 35 e1 8a 33 1c 90 ab a0 92 09 77 02 e5 ba 63 d6 9d 0a ef da 5e 38 44 91 5d 88 f3 1a 6d 18 1c d4 10 b3 bc 16 f9 24 fe e6 7e a7 de ba 65 82 7c ae e9 26 9a fc 7e f3 49 54 8c 79 5a 5b 99 ba 9f fc 7d 8f fa e6 9f fa 08 a2 8d 4c 11 76 3f eb 9a 7f e8 22 8a f2 2a 53 4a 6d 5c ae 6b f4 36 a7 f9 ad d5 bb fd 89 7f 98 a8 6f 19 65 d4 15 01 0a 16 ea 2c e7 b7 ca 4d Data Ascii: UBHhY{8sF M,U<VSx4dtjszpRGdw^`I9\2N\m'.[+4RJV--0TY@/53wc^8D]m$~e\|&~ITyZ[}Lv?"*SJm\k6oe,M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49745	104.19.229.21	443	6848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 03:10:34 UTC	1096	OUT	OPTIONS /checkcaptcha/fa9a729a-76ea-4876-8768-9194430429ac/E0_eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiRWhqWnNnMWg5ZVdURnFTMnQwYXJOaXUrbVZFeHlvbURzN1cvS3Rld1lIK0paU0FRQ3ZiTWdMT01NcndXdXdWc0xXc1M4NHcvRU9hVUsvWVE1QmpTK2kxcjg5dnBYbjBscjUxWmtYdENWaUlDQ3pSTENLdlMyZ1h4K3g5aTRlR25NRmZiR3YrcmVzS1BUdzBnZVVOTE1MZnk1ZnJDVE02VlBaSTBISmlpUzdDSkhPL0dVSU9kaVVuMlJpRy8zd24rSDJxTEdHaEVadFV4Zk9DRTJxSU1BN3dBMFphM0pOUkRhYnhnYkhVUk5aYUZjUVQ5R3BFYml6L2JlTU9ZZS9aVVpzZk1BNVZnVVNCalVYM0hBQT09ck5nb3hjZnlIMU80eGxGTSIsImV4cCI6MTcyODUyOTkwNiwia3IiOiIyZmZhMmE3YiJ9.HmN7sJ7dHNkeUX2FY5kyhD_4co0V-fYJAgqv0z7IenQ HTTP/1.1 Host: api.hcaptcha.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://newassets.hcaptcha.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://newassets.hcaptcha.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 03:10:34 UTC	553	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 03:10:34 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://newassets.hcaptcha.com Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Cache-Control, Content-Type, DNT, Referer, User-Agent Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8d036b08ab19420a-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49746	104.19.229.21	443	6848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 03:10:34 UTC	1209	OUT	POST /checkcaptcha/fa9a729a-76ea-4876-8768-9194430429ac/E0_eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiRWhqWnNnMWg5ZVdURnFTMnQwYXJOaXUrbVZFeHlvbURzN1cvS3Rld1lIK0paU0FRQ3ZiTWdMT01NcndXdXdWc0xXc1M4NHcvRU9hVUsvWVE1QmpTK2kxcjg5dnBYbjBscjUxWmtYdENWaUlDQ3pSTENLdlMyZ1h4K3g5aTRlR25NRmZiR3YrcmVzS1BUdzBnZVVOTE1MZnk1ZnJDVE02VlBaSTBISmlpUzdDSkhPL0dVSU9kaVVuMlJpRy8zd24rSDJxTEdHaEVadFV4Zk9DRTJxSU1BN3dBMFphM0pOUkRhYnhnYkhVUk5aYUZjUVQ5R3BFYml6L2JlTU9ZZS9aVVpzZk1BNVZnVVNCalVYM0hBQT09ck5nb3hjZnlIMU80eGxGTSIsImV4cCI6MTcyODUyOTkwNiwia3IiOiIyZmZhMmE3YiJ9.HmN7sJ7dHNkeUX2FY5kyhD_4co0V-fYJAgqv0z7IenQ HTTP/1.1 Host: api.hcaptcha.com Connection: keep-alive Content-Length: 22655 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/json;charset=UTF-8 Accept: / Origin: https://newassets.hcaptcha.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://newassets.hcaptcha.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 03:10:34 UTC	16384	OUT	Data Raw: 7b 22 76 22 3a 22 32 37 36 36 63 34 33 22 2c 22 6a 6f 62 5f 6d 6f 64 65 22 3a 22 69 6d 61 67 65 5f 6c 61 62 65 6c 5f 61 72 65 61 5f 73 65 6c 65 63 74 22 2c 22 61 6e 73 77 65 72 73 22 3a 7b 22 66 63 66 32 37 61 32 64 2d 62 61 62 34 2d 34 66 33 32 2d 61 30 33 32 2d 62 64 33 61 61 64 37 61 31 32 65 34 22 3a 5b 7b 22 65 6e 74 69 74 79 5f 6e 61 6d 65 22 3a 30 2c 22 65 6e 74 69 74 79 5f 74 79 70 65 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 65 6e 74 69 74 79 5f 63 6f 6f 72 64 73 22 3a 5b 34 30 34 2c 37 33 5d 7d 5d 2c 22 35 37 37 64 33 66 33 62 2d 38 64 30 62 2d 34 32 31 35 2d 38 31 34 39 2d 34 31 39 31 36 61 63 61 62 39 35 63 22 3a 5b 7b 22 65 6e 74 69 74 79 5f 6e 61 6d 65 22 3a 30 2c 22 65 6e 74 69 74 79 5f 74 79 70 65 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 65 6e Data Ascii: {"v":"2766c43","job_mode":"image_label_area_select","answers":{"fcf27a2d-bab4-4f32-a032-bd3aad7a12e4":[{"entity_name":0,"entity_type":"default","entity_coords":[404,73]}],"577d3f3b-8d0b-4215-8149-41916acab95c":[{"entity_name":0,"entity_type":"default","en
2024-10-10 03:10:34 UTC	6271	OUT	Data Raw: 75 64 65 42 55 48 50 78 39 65 79 79 4d 6c 54 58 63 49 49 52 4a 4f 77 31 6f 6a 36 76 53 2b 30 70 49 43 32 38 50 64 36 69 32 59 79 51 71 38 47 39 69 4b 4d 35 52 33 42 55 44 59 69 4b 34 42 63 72 7a 53 79 75 50 35 74 79 34 35 4a 75 6e 30 54 73 31 72 65 4d 2f 72 50 65 4b 51 67 6c 37 36 4a 4e 57 53 74 63 48 77 2f 78 44 63 32 35 4a 46 4f 6c 4a 66 58 58 7a 69 6f 2b 4e 46 37 38 67 43 35 7a 46 46 35 43 70 74 56 30 76 4d 47 4a 38 39 55 66 63 39 5a 78 46 69 30 70 79 6f 32 77 7a 51 6a 55 6e 4b 30 66 78 65 45 43 53 77 65 44 76 6d 55 6a 67 39 34 77 73 76 34 38 6a 63 73 65 6f 69 69 4b 71 41 77 69 4b 30 77 56 69 56 48 76 62 49 6e 6b 55 34 7a 72 32 75 6a 49 61 2f 30 41 75 34 6d 30 54 46 48 37 78 54 62 4a 2f 4c 37 53 48 4e 62 70 50 36 54 30 71 56 35 59 7a 39 33 71 69 4c 72 Data Ascii: udeBUHPx9eyyMlTXcIIRJOw1oj6vS+0pIC28Pd6i2YyQq8G9iKM5R3BUDYiK4BcrzSyuP5ty45Jun0Ts1reM/rPeKQgl76JNWStcHw/xDc25JFOlJfXXzio+NF78gC5zFF5CptV0vMGJ89Ufc9ZxFi0pyo2wzQjUnK0fxeECSweDvmUjg94wsv48jcseoiiKqAwiK0wViVHvbInkU4zr2ujIa/0Au4m0TFH7xTbJ/L7SHNbpP6T0qV5Yz93qiLr
2024-10-10 03:10:35 UTC	589	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 03:10:35 GMT Content-Type: application/json Content-Length: 2705 Connection: close CF-Ray: 8d036b0c5b67728d-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://newassets.hcaptcha.com Set-Cookie: __cflb=0H28vk2VKwPbLoawFincekpozDKK5F2cfukYcKoPcry; SameSite=Lax; path=/; expires=Thu, 10-Oct-24 03:40:35 GMT; HttpOnly Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin access-control-allow-credentials: true x-content-type-options: nosniff Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-10-10 03:10:35 UTC	780	IN	Data Raw: 7b 22 70 61 73 73 22 3a 74 72 75 65 2c 22 67 65 6e 65 72 61 74 65 64 5f 70 61 73 73 5f 55 55 49 44 22 3a 22 50 31 5f 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 4c 43 4a 68 62 47 63 69 4f 69 4a 49 55 7a 49 31 4e 69 4a 39 2e 68 61 64 77 59 58 4e 7a 61 32 56 35 78 51 55 74 2d 47 38 45 51 4e 62 57 46 4e 38 56 64 5a 35 72 39 51 6f 54 43 43 59 72 6f 68 62 74 31 6d 4f 62 30 6d 75 75 51 57 34 31 77 53 57 4a 63 77 30 47 6f 55 65 5a 69 42 75 30 2d 73 69 58 55 75 4e 7a 4d 37 41 66 6c 5f 47 6e 65 2d 4d 6e 61 30 34 59 6c 33 5f 50 6c 32 6c 44 50 4f 76 76 6c 62 52 6c 4a 74 65 5a 64 75 63 54 44 67 55 6a 76 5f 4b 59 50 6b 79 6a 5f 41 77 67 38 51 63 75 6f 7a 4a 6d 56 6d 46 79 6f 64 73 6d 44 34 36 47 53 6f 5f 34 6b 67 75 35 4d 6e 2d 71 2d 69 72 57 49 34 5f 45 69 2d 6e Data Ascii: {"pass":true,"generated_pass_UUID":"P1_eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.hadwYXNza2V5xQUt-G8EQNbWFN8VdZ5r9QoTCCYrohbt1mOb0muuQW41wSWJcw0GoUeZiBu0-siXUuNzM7Afl_Gne-Mna04Yl3_Pl2lDPOvvlbRlJteZducTDgUjv_KYPkyj_Awg8QcuozJmVmFyodsmD46GSo_4kgu5Mn-q-irWI4_Ei-n
2024-10-10 03:10:35 UTC	1369	IN	Data Raw: 68 41 6c 31 72 6b 6a 58 5f 6e 72 6f 4e 44 65 6a 70 66 75 42 65 63 51 66 69 64 59 54 45 51 66 7a 39 49 43 72 74 34 54 50 4c 52 4d 4d 38 67 38 39 38 4e 55 68 44 35 52 69 75 52 63 54 69 63 34 5a 6e 35 69 63 48 58 61 6b 64 38 59 5a 64 4d 51 4c 4a 4a 6b 37 38 63 6c 6a 50 57 35 55 74 55 35 5f 71 72 33 66 4b 2d 45 2d 6f 6e 66 2d 46 79 69 79 4e 53 64 58 59 33 4d 57 66 73 6b 57 41 68 48 4f 39 63 30 65 6a 53 63 4b 71 5f 43 4c 6f 4d 31 34 4d 74 6b 34 5a 78 61 78 39 57 66 78 36 51 41 6f 53 69 61 4a 50 44 4d 61 6b 6d 56 66 34 4c 77 33 56 76 56 77 68 63 76 55 66 30 67 65 4c 54 79 75 59 72 6e 36 68 5a 39 56 31 38 35 49 62 6f 46 53 68 4e 6e 5a 6e 71 56 63 6b 47 54 73 57 33 58 30 51 72 7a 66 63 53 2d 61 50 48 52 31 37 4f 49 71 47 59 63 69 44 79 78 6f 54 61 66 52 59 74 31 Data Ascii: hAl1rkjX_nroNDejpfuBecQfidYTEQfz9ICrt4TPLRMM8g898NUhD5RiuRcTic4Zn5icHXakd8YZdMQLJJk78cljPW5UtU5_qr3fK-E-onf-FyiyNSdXY3MWfskWAhHO9c0ejScKq_CLoM14Mtk4Zxax9Wfx6QAoSiaJPDMakmVf4Lw3VvVwhcvUf0geLTyuYrn6hZ9V185IboFShNnZnqVckGTsW3X0QrzfcS-aPHR17OIqGYciDyxoTafRYt1
2024-10-10 03:10:35 UTC	556	IN	Data Raw: 57 39 79 4e 44 4a 4d 61 32 74 68 4b 7a 6c 42 4d 6b 46 7a 59 57 31 52 52 47 56 6f 53 6e 42 45 4f 56 59 35 53 6b 70 70 64 31 6c 6b 55 45 52 6c 54 30 52 4a 63 6a 42 31 52 30 56 4f 63 56 64 36 61 32 31 71 4c 30 70 73 62 6d 64 32 62 6a 68 6c 61 47 31 61 56 6a 5a 31 4e 56 46 6e 5a 6a 68 6c 54 31 64 57 52 31 49 78 64 6b 74 35 53 56 63 35 61 57 64 4a 51 7a 59 32 56 6b 52 42 4d 44 4a 73 62 69 39 68 54 30 70 73 4d 46 4a 72 53 6b 4a 4d 52 6b 67 30 61 30 5a 69 63 6c 4d 72 61 6c 42 35 61 43 74 45 4e 6d 56 53 53 6a 68 6f 53 6d 35 58 52 56 4a 46 56 58 63 30 53 7a 4a 42 5a 33 4e 32 59 31 45 31 52 58 4e 74 59 6c 4a 69 56 31 4e 59 5a 46 68 4a 4e 55 4a 6c 52 7a 52 70 61 53 38 32 51 32 39 4b 65 6d 64 6c 57 44 46 35 64 55 49 34 4b 30 49 32 5a 57 74 4c 52 6a 4e 61 62 69 74 31 Data Ascii: W9yNDJMa2thKzlBMkFzYW1RRGVoSnBEOVY5Skppd1lkUERlT0RJcjB1R0VOcVd6a21qL0psbmd2bjhlaG1aVjZ1NVFnZjhlT1dWR1Ixdkt5SVc5aWdJQzY2VkRBMDJsbi9hT0psMFJrSkJMRkg0a0ZiclMralB5aCtENmVSSjhoSm5XRVJFVXc0SzJBZ3N2Y1E1RXNtYlJiV1NYZFhJNUJlRzRpaS82Q29KemdlWDF5dUI4K0I2ZWtLRjNabit1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49747	104.19.230.21	443	6848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 03:10:35 UTC	922	OUT	GET /checkcaptcha/fa9a729a-76ea-4876-8768-9194430429ac/E0_eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiRWhqWnNnMWg5ZVdURnFTMnQwYXJOaXUrbVZFeHlvbURzN1cvS3Rld1lIK0paU0FRQ3ZiTWdMT01NcndXdXdWc0xXc1M4NHcvRU9hVUsvWVE1QmpTK2kxcjg5dnBYbjBscjUxWmtYdENWaUlDQ3pSTENLdlMyZ1h4K3g5aTRlR25NRmZiR3YrcmVzS1BUdzBnZVVOTE1MZnk1ZnJDVE02VlBaSTBISmlpUzdDSkhPL0dVSU9kaVVuMlJpRy8zd24rSDJxTEdHaEVadFV4Zk9DRTJxSU1BN3dBMFphM0pOUkRhYnhnYkhVUk5aYUZjUVQ5R3BFYml6L2JlTU9ZZS9aVVpzZk1BNVZnVVNCalVYM0hBQT09ck5nb3hjZnlIMU80eGxGTSIsImV4cCI6MTcyODUyOTkwNiwia3IiOiIyZmZhMmE3YiJ9.HmN7sJ7dHNkeUX2FY5kyhD_4co0V-fYJAgqv0z7IenQ HTTP/1.1 Host: api.hcaptcha.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 03:10:35 UTC	535	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 10 Oct 2024 03:10:35 GMT Content-Type: text/plain Content-Length: 14 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Cache-Control, Content-Type, DNT, Referer, User-Agent Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8d036b127db77cb2-EWR alt-svc: h3=":443"; ma=86400
2024-10-10 03:10:35 UTC	14	IN	Data Raw: 49 6e 76 61 6c 69 64 20 4d 65 74 68 6f 64 Data Ascii: Invalid Method

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49749	50.6.153.26	443	6848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 03:10:38 UTC	952	OUT	POST /Review/client/index.php?userid=6707458b7abb8 HTTP/1.1 Host: fqx.kqy.mybluehost.me Connection: keep-alive Content-Length: 3879 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://fqx.kqy.mybluehost.me Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://fqx.kqy.mybluehost.me/Review/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ebddcc4a9ecc86c7ab6d075bfd2e6982
2024-10-10 03:10:38 UTC	3879	OUT	Data Raw: 67 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 6f 6e 73 65 3d 50 31 5f 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 4c 43 4a 68 62 47 63 69 4f 69 4a 49 55 7a 49 31 4e 69 4a 39 2e 68 61 64 77 59 58 4e 7a 61 32 56 35 78 51 55 74 2d 47 38 45 51 4e 62 57 46 4e 38 56 64 5a 35 72 39 51 6f 54 43 43 59 72 6f 68 62 74 31 6d 4f 62 30 6d 75 75 51 57 34 31 77 53 57 4a 63 77 30 47 6f 55 65 5a 69 42 75 30 2d 73 69 58 55 75 4e 7a 4d 37 41 66 6c 5f 47 6e 65 2d 4d 6e 61 30 34 59 6c 33 5f 50 6c 32 6c 44 50 4f 76 76 6c 62 52 6c 4a 74 65 5a 64 75 63 54 44 67 55 6a 76 5f 4b 59 50 6b 79 6a 5f 41 77 67 38 51 63 75 6f 7a 4a 6d 56 6d 46 79 6f 64 73 6d 44 34 36 47 53 6f 5f 34 6b 67 75 35 4d 6e 2d 71 2d 69 72 57 49 34 5f 45 69 2d 6e 39 68 6c 53 63 42 45 4c 65 33 44 4c 4c 6c 33 Data Ascii: g-recaptcha-response=P1_eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.hadwYXNza2V5xQUt-G8EQNbWFN8VdZ5r9QoTCCYrohbt1mOb0muuQW41wSWJcw0GoUeZiBu0-siXUuNzM7Afl_Gne-Mna04Yl3_Pl2lDPOvvlbRlJteZducTDgUjv_KYPkyj_Awg8QcuozJmVmFyodsmD46GSo_4kgu5Mn-q-irWI4_Ei-n9hlScBELe3DLLl3
2024-10-10 03:10:40 UTC	387	IN	HTTP/1.1 404 Not Found Date: Thu, 10 Oct 2024 03:10:38 GMT Server: Apache Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Upgrade: h2,h2c Connection: Upgrade Vary: Accept-Encoding host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Newfold-Cache-Level: 2 Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-10-10 03:10:40 UTC	319	IN	Data Raw: 31 33 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 52 65 76 69 65 77 2f 63 6c 69 65 6e 74 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 37 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 Data Ascii: 133<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /Review/client/index.php was not found on this server.</p><hr><address>Apache/2.4.57 (Debian) Server

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49750	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 03:10:45 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=W1cUeKZXXgpOeDt&MD=BTByaGWc HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-10 03:10:45 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 828a684f-699a-4aad-badf-47ae989e3398 MS-RequestId: 8b8a3370-d1b8-422b-8277-f76368a8edba MS-CV: TaUK3n8C80WZzZKM.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 10 Oct 2024 03:10:45 GMT Connection: close Content-Length: 30005
2024-10-10 03:10:45 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-10 03:10:45 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49752	50.6.153.26	443	6848	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 03:10:56 UTC	739	OUT	GET /Review/client/index.php HTTP/1.1 Host: fqx.kqy.mybluehost.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ebddcc4a9ecc86c7ab6d075bfd2e6982
2024-10-10 03:10:59 UTC	355	IN	HTTP/1.1 404 Not Found Date: Thu, 10 Oct 2024 03:10:59 GMT Server: nginx/1.23.4 Content-Type: text/html; charset=UTF-8 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Newfold-Cache-Level: 2 Transfer-Encoding: chunked
2024-10-10 03:10:59 UTC	319	IN	Data Raw: 31 33 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 52 65 76 69 65 77 2f 63 6c 69 65 6e 74 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 37 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 Data Ascii: 133<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /Review/client/index.php was not found on this server.</p><hr><address>Apache/2.4.57 (Debian) Server

Target ID:	0
Start time:	23:09:57
Start date:	09/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	23:09:58
Start date:	09/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=1968,i,15726997978114663938,1510804845738046910,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	23:09:59
Start date:	09/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://7xv6.mjt.lu/lnk/AXMAAFFvlI0AAAAAAAAAA8Ye8moAAABKhgwAAAAAAAq7pgBnByOSeYt8cGpTTPaPBTAKJeV-UQAKnpI/1/EWmySlSHcyP6g54g0SDc-g/aHR0cHM6Ly9zbmlwLmx5L2V6NGxydw"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://7xv6.mjt.lu/lnk/AXMAAFFvlI0AAAAAAAAAA8Ye8moAAABKhgwAAAAAAAq7pgBnByOSeYt8cGpTTPaPBTAKJeV-UQAKnpI/1/EWmySlSHcyP6g54g0SDc-g/aHR0cHM6Ly9zbmlwLmx5L2V6NGxydw

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Windows Analysis Report
http://7xv6.mjt.lu/lnk/AXMAAFFvlI0AAAAAAAAAA8Ye8moAAABKhgwAAAAAAAq7pgBnByOSeYt8cGpTTPaPBTAKJeV-UQAKnpI/1/EWmySlSHcyP6g54g0SDc-g/aHR0cHM6Ly9zbmlwLmx5L2V6NGxydw