Edit tour

Windows Analysis Report
http://www.wagtg.com

Overview

General Information

Sample URL:	http://www.wagtg.com
Analysis ID:	1538686
Infos:

Detection

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Suricata IDS alerts for network traffic

Phishing site detected (based on shot match)

Detected non-DNS traffic on DNS port

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 5888 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 428 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1928,i,2373029909531975188,16909724742691249416,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5892 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.wagtg.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Suricata Signatures

ETPRO PHISHING BULLSreCaptcha Credential Phish Landing Page M1 2024-10-17

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-21T16:59:44.331341+0200	2858711	1	Successful Credential Theft Detected	45.152.115.161	80	192.168.2.16	49700	TCP

ETPRO PHISHING Suspected BULLSreCaptcha Credential Phish Landing Page M2 2024-10-17

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-21T16:59:44.331341+0200	2858712	1	Successful Credential Theft Detected	45.152.115.161	80	192.168.2.16	49700	TCP

HTTP traffic detected: HTTP/1.1 200 OKset-cookie: PHPSESSID=laqgctho1ugnqql20lria3sg3v; path=/expires: Thu, 19 Nov 1981 08:52:00 GMTcache-control: no-store, no-cache, must-revalidatepragma: no-cachecontent-type: text/html; charset=UTF-8content-encoding: gzipvary: Accept-Encodingcontent-length: 591date: Mon, 21 Oct 2024 14:59:39 GMTserver: LiteSpeedconnection: Keep-AliveData Raw: 1f 8b 08 00 00 00 00 00 00 03 75 52 4d 6f db 30 0c 3d a7 40 ff 83 0e 1b 94 02 b5 9d 34 6b 8b 39 71 81 61 2b ba 01 3b 0c 5b 07 ec 36 a8 32 63 2b 95 25 55 a2 e3 04 45 fe fb 24 db 69 3e d6 ea 60 50 e4 e3 f3 e3 a3 66 15 20 23 8a 55 90 d1 a5 80 c6 68 8b 94 70 ad 10 14 66 b4 11 39 96 59 0e 4b c1 21 6a 2f e7 44 28 81 82 c9 c8 71 26 21 1b 53 92 dc 9c 9e cc 1c b7 c2 20 71 96 67 b4 44 34 2e 4d 92 a6 69 e2 42 eb 42 42 cc 75 95 58 e0 cc 20 2f 59 c2 8c 88 17 8e de cc 92 ae 2d 10 cc b5 ad 88 57 53 ea 3c a3 46 3b 2f a3 93 55 ad 43 89 7a 0c f1 67 96 8b 65 17 85 e3 70 ed 35 04 b8 d7 a4 55 4a d8 83 d3 b2 46 98 12 d4 26 25 97 a3 f7 53 22 61 8e 7d 58 31 5b 08 15 b5 b5 68 72 6d 56 2f a9 0e 14 8d 2f 47 21 d9 8e 9a 92 c9 a8 bd 95 20 8a d2 57 af 3f f8 1b dd fd 9d 4b e6 5c 46 8b e8 65 b2 bd a2 c8 df aa e4 0c 59 e4 05 c3 23 ac 33 7a f5 7d fe 8d 55 bf 9f 3e b5 e7 af 59 fc 90 77 91 bd fd 7a ff 71 64 2e fe 5c dc e3 a4 19 df 5e 7d 69 8e 09 bc fb f2 81 f1 c7 8c 6a f5 13 b0 b6 ea 73 9f 39 46 62 09 c1 47 19 86 e8 6b de 79 ef 63 b0 3d 09 e6 fa e0 8d 15 b2 05 5b f5 3b f4 4b 73 ed 1e 43 2e 91 e2 c1 25 8b a7 1a ec 3a 19 c7 e3 71 3c e9 6f 71 25 d4 7f cb ed a9 71 6d bc 10 84 15 26 0b b6 64 5d 76 bb d9 25 b3 e4 78 14 92 91 79 ad 78 d8 2d 19 5a 70 46 2b 07 67 e4 79 37 61 e8 aa ad f4 40 ba 64 52 e4 60 63 53 1a 3a dd 21 de c5 41 f0 70 af 27 1c df 93 86 cf f9 e9 c9 60 30 08 c2 52 d2 3d bb f3 43 60 b0 f0 be 2b 2f 9c 56 af 95 53 f2 4c b6 e2 d2 97 88 6c 8e a0 ae e6 1c 9c 4b f7 46 0a dd 07 e3 ec 8f e5 89 fc 58 01 12 f7 ad 31 ea 5f 68 85 2a 86 67 d3 56 f7 a0 c3 e5 5b 9c 0f 85 7f 72 78 08 3c 26 17 f3 d6 4c 92 79 d3 d0 d6 40 5b 09 81 6e d0 08 95 eb 26 96 9a b3 a0 d0 13 4a cd f2 57 59 36 20 1d bc dd 67 24 e3 e0 7f 93 6f a5 6e 0e 29 f6 dd d9 6c f9 37 d3 f0 24 fb 77 f3 0f ab 3c 1f 8b 9c 04 00 00 Data Ascii: uRMo0=@4k9qa+;[62c+%UE$i>`Pf #Uhpf9YK!j/D(q&!S qgD4.MiBBBuX /Y-WS<F;/UCzgep5UJF&%S"a}X1[hrmV//G! W?K\FeY#3z}U>Ywzqd.\^}ijs9FbGkyc=[;KsC.%:q<oq%qm&d]v%xyx-ZpF+gy7a@dR`cS:!Ap'`0R=C`+/VSLlKFX1_h*gV[rx<&Ly@[n&JWY6 g$on)l7$w<

Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://www.wagtg.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw&co=aHR0cDovL3d3dy53YWd0Zy5jb206ODA.&hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&theme=light&size=normal&cb=6gmpjol1d1ei HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.wagtg.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw&co=aHR0cDovL3d3dy53YWd0Zy5jb206ODA.&hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&theme=light&size=normal&cb=6gmpjol1d1eiAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/xrnLfCEjSrpGR1AYVMyryvUXM8OUMO4sC9T9G27F3zE.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw&co=aHR0cDovL3d3dy53YWd0Zy5jb206ODA.&hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&theme=light&size=normal&cb=6gmpjol1d1eiAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/xrnLfCEjSrpGR1AYVMyryvUXM8OUMO4sC9T9G27F3zE.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.wagtg.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=cn9awwAY6dvnTnp&MD=7FnKcvs7 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=cn9awwAY6dvnTnp&MD=7FnKcvs7 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/reload?k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AGteOyplBlu-d31c8ryyFQqBMugLC65zP4RLzU7YQEiLMuOpkxA4oocUetsTn6RIV4SXhJxCf9C0xnZHdmIibHo
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA4kcX4S1aZg9h6KNEb8JDKbYLF941-bjPHL-_TWiZsN0zMcW81JAQGA4e5fmKTA5BjedcXBgYbBEiFEHlwiF6EdOOsq5Mm2H8ulkjqUqU7SgZiHG_n0dWBHcPPQndVSLOApvudkwVYr0IPpenq-mntuur39CV5nqE4Ym8kGo4nTzjh3PlFiN_9_0zakHbd_IvjiRi8TpL1X-Nt0Nc6xLpnnU4e-Bw&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6DwAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AGteOyplBlu-d31c8ryyFQqBMugLC65zP4RLzU7YQEiLMuOpkxA4oocUetsTn6RIV4SXhJxCf9C0xnZHdmIibHo
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA4kcX4S1aZg9h6KNEb8JDKbYLF941-bjPHL-_TWiZsN0zMcW81JAQGA4e5fmKTA5BjedcXBgYbBEiFEHlwiF6EdOOsq5Mm2H8ulkjqUqU7SgZiHG_n0dWBHcPPQndVSLOApvudkwVYr0IPpenq-mntuur39CV5nqE4Ym8kGo4nTzjh3PlFiN_9_0zakHbd_IvjiRi8TpL1X-Nt0Nc6xLpnnU4e-Bw&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AGteOyplBlu-d31c8ryyFQqBMugLC65zP4RLzU7YQEiLMuOpkxA4oocUetsTn6RIV4SXhJxCf9C0xnZHdmIibHo
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/replaceimage?k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AGteOyplBlu-d31c8ryyFQqBMugLC65zP4RLzU7YQEiLMuOpkxA4oocUetsTn6RIV4SXhJxCf9C0xnZHdmIibHo
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA5FIWWiN_LfxIUMWCOlSSDqtWfOogEyeV-6OUHNRvODBJTb48-Y9UlUVyjqabT1_MtRGGOxCeOvMtIn4h4wxv6sECZqQ_DnqyrIIlqEsG8u-h_U4Ec_-Hb1GlV4PmVWALQecIUgZEwccipuLAkRRRaPr4zkrCyY47KHDlog7boCmdIPz2imVHep9fVDaNadQ0uCyROTMWsOKs_GjvhTcex8v_c-pw&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw&id=8ecf7397c4057079 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6DwAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AGteOyplBlu-d31c8ryyFQqBMugLC65zP4RLzU7YQEiLMuOpkxA4oocUetsTn6RIV4SXhJxCf9C0xnZHdmIibHo
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA5FIWWiN_LfxIUMWCOlSSDqtWfOogEyeV-6OUHNRvODBJTb48-Y9UlUVyjqabT1_MtRGGOxCeOvMtIn4h4wxv6sECZqQ_DnqyrIIlqEsG8u-h_U4Ec_-Hb1GlV4PmVWALQecIUgZEwccipuLAkRRRaPr4zkrCyY47KHDlog7boCmdIPz2imVHep9fVDaNadQ0uCyROTMWsOKs_GjvhTcex8v_c-pw&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw&id=8ecf7397c4057079 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AGteOyplBlu-d31c8ryyFQqBMugLC65zP4RLzU7YQEiLMuOpkxA4oocUetsTn6RIV4SXhJxCf9C0xnZHdmIibHo
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/replaceimage?k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AGteOyplBlu-d31c8ryyFQqBMugLC65zP4RLzU7YQEiLMuOpkxA4oocUetsTn6RIV4SXhJxCf9C0xnZHdmIibHo
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA5IwZZgluG9qztb_r9IGqvYvWE-t80qjOoUoIBsHoOVFAEVHFS7SJDSsAikaxdvlfzSXAR1IrKISUB6xatpiwL9tc46HM80TXUuomBCHkMuly5kApiCiyj-vgNwciuI3TX3A3NILzVT1gfMvg00E5Dbk7Ly-tWbc1cl4SmrunF_JDBzOJCzC29IxcImtocybocYm1oEvOhfSq_djC7swniQVSKWEQ&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw&id=ca2d9c6f02cbfd66 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6DwAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AGteOyplBlu-d31c8ryyFQqBMugLC65zP4RLzU7YQEiLMuOpkxA4oocUetsTn6RIV4SXhJxCf9C0xnZHdmIibHo
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA5IwZZgluG9qztb_r9IGqvYvWE-t80qjOoUoIBsHoOVFAEVHFS7SJDSsAikaxdvlfzSXAR1IrKISUB6xatpiwL9tc46HM80TXUuomBCHkMuly5kApiCiyj-vgNwciuI3TX3A3NILzVT1gfMvg00E5Dbk7Ly-tWbc1cl4SmrunF_JDBzOJCzC29IxcImtocybocYm1oEvOhfSq_djC7swniQVSKWEQ&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw&id=ca2d9c6f02cbfd66 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AGteOyplBlu-d31c8ryyFQqBMugLC65zP4RLzU7YQEiLMuOpkxA4oocUetsTn6RIV4SXhJxCf9C0xnZHdmIibHo
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/replaceimage?k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AGteOyplBlu-d31c8ryyFQqBMugLC65zP4RLzU7YQEiLMuOpkxA4oocUetsTn6RIV4SXhJxCf9C0xnZHdmIibHo
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA4Iyw15QstXNW8NaPul_cPVDXle9WrluH86zD8dfwUsPrBioB_oY4kSWpVVcigNspMBEVq5zh3YFkF1Pr-GQgaN--C8MtkyYa-cwUPB5-6u0l9v4hI5bC35bp9qqvXXR_t5ZgNzYCwX8xAkjwwrBTMSIU6Wx2B8Zs_6KraHwHggwxEkcXUv0_uUT_5460Nz2HTCPfQM0-9z69srQHAMrwdduz3yfA&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw&id=78cde3367d919541 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6DwAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AGteOyplBlu-d31c8ryyFQqBMugLC65zP4RLzU7YQEiLMuOpkxA4oocUetsTn6RIV4SXhJxCf9C0xnZHdmIibHo
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA4Iyw15QstXNW8NaPul_cPVDXle9WrluH86zD8dfwUsPrBioB_oY4kSWpVVcigNspMBEVq5zh3YFkF1Pr-GQgaN--C8MtkyYa-cwUPB5-6u0l9v4hI5bC35bp9qqvXXR_t5ZgNzYCwX8xAkjwwrBTMSIU6Wx2B8Zs_6KraHwHggwxEkcXUv0_uUT_5460Nz2HTCPfQM0-9z69srQHAMrwdduz3yfA&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw&id=78cde3367d919541 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AGteOyplBlu-d31c8ryyFQqBMugLC65zP4RLzU7YQEiLMuOpkxA4oocUetsTn6RIV4SXhJxCf9C0xnZHdmIibHo
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/replaceimage?k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AGteOyplBlu-d31c8ryyFQqBMugLC65zP4RLzU7YQEiLMuOpkxA4oocUetsTn6RIV4SXhJxCf9C0xnZHdmIibHo
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA5f4RM6blzgH7v5F3Ss63hX01BnhyU4X8Qtb_nSN41mwutiLYQjp5t2wE-oxu0IlwdzjlDKYjlEMsTd8JQVOB09Wj__TPZYbC56oShllJM9EGUVkhC4wpDs_ob_qhD7M5yfGsbYbDSpOcC6hhTJ6VyWaG-Iw8x1LkE_BOn-q_42ic59be8PE3GNeSnadLQInEIkafDSPo-cxVmf3I8dq_OLBr8f9w&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw&id=dbbab680d999830e HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6DwAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AGteOyplBlu-d31c8ryyFQqBMugLC65zP4RLzU7YQEiLMuOpkxA4oocUetsTn6RIV4SXhJxCf9C0xnZHdmIibHo
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA5f4RM6blzgH7v5F3Ss63hX01BnhyU4X8Qtb_nSN41mwutiLYQjp5t2wE-oxu0IlwdzjlDKYjlEMsTd8JQVOB09Wj__TPZYbC56oShllJM9EGUVkhC4wpDs_ob_qhD7M5yfGsbYbDSpOcC6hhTJ6VyWaG-Iw8x1LkE_BOn-q_42ic59be8PE3GNeSnadLQInEIkafDSPo-cxVmf3I8dq_OLBr8f9w&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw&id=dbbab680d999830e HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AGteOyplBlu-d31c8ryyFQqBMugLC65zP4RLzU7YQEiLMuOpkxA4oocUetsTn6RIV4SXhJxCf9C0xnZHdmIibHo
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/replaceimage?k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AGteOyplBlu-d31c8ryyFQqBMugLC65zP4RLzU7YQEiLMuOpkxA4oocUetsTn6RIV4SXhJxCf9C0xnZHdmIibHo
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA4UiNT0SlXG4gBbP0KobItkmgpsadCrp4V9rK6nWhJvWEcCvNpLB4tOV0QZ64H9kEAr6scNDhu3_ALp_JtUyla81ESXxNzdoDtEfFzEkgQuG7XNCDc-2fOL8_QsALdktHAqaoc4OJonRRUu0wybkKXzzERW7oPAG_e7PVyxJEcuDZmqmcIE85TJ8NUMUBur2EdSPdSEk-N02j_uszHXMOhp_lZ2DA&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw&id=3befc781412ea0a1 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6DwAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AGteOyplBlu-d31c8ryyFQqBMugLC65zP4RLzU7YQEiLMuOpkxA4oocUetsTn6RIV4SXhJxCf9C0xnZHdmIibHo
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA4UiNT0SlXG4gBbP0KobItkmgpsadCrp4V9rK6nWhJvWEcCvNpLB4tOV0QZ64H9kEAr6scNDhu3_ALp_JtUyla81ESXxNzdoDtEfFzEkgQuG7XNCDc-2fOL8_QsALdktHAqaoc4OJonRRUu0wybkKXzzERW7oPAG_e7PVyxJEcuDZmqmcIE85TJ8NUMUBur2EdSPdSEk-N02j_uszHXMOhp_lZ2DA&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw&id=3befc781412ea0a1 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AGteOyplBlu-d31c8ryyFQqBMugLC65zP4RLzU7YQEiLMuOpkxA4oocUetsTn6RIV4SXhJxCf9C0xnZHdmIibHo
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.wagtg.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.wagtg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.wagtg.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=laqgctho1ugnqql20lria3sg3v

Source: global traffic	DNS traffic detected: DNS query: www.wagtg.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown

HTTP traffic detected: POST /recaptcha/api2/reload?k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw HTTP/1.1Host: www.google.comConnection: keep-aliveContent-Length: 7624sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-protobufferAccept: */*Origin: https://www.google.comX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6DwAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not Foundcontent-type: text/htmlcache-control: private, no-cache, max-age=0pragma: no-cachedate: Mon, 21 Oct 2024 14:59:45 GMTserver: LiteSpeedcontent-encoding: gzipvary: Accept-Encodingtransfer-encoding: chunkedconnection: Keep-AliveData Raw: 61 0d 0a 1f 8b 08 00 00 00 00 00 00 03 0d 0a Data Ascii: a

Source: chromecache_73.1.dr, chromecache_108.1.dr, chromecache_91.1.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_73.1.dr, chromecache_108.1.dr, chromecache_91.1.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_73.1.dr, chromecache_108.1.dr, chromecache_91.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_73.1.dr, chromecache_108.1.dr, chromecache_91.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_73.1.dr, chromecache_108.1.dr, chromecache_91.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_91.1.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_91.1.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_91.1.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_73.1.dr, chromecache_108.1.dr, chromecache_91.1.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_73.1.dr, chromecache_108.1.dr, chromecache_91.1.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_73.1.dr, chromecache_108.1.dr, chromecache_91.1.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_73.1.dr, chromecache_76.1.dr, chromecache_108.1.dr, chromecache_95.1.dr, chromecache_91.1.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_73.1.dr, chromecache_108.1.dr, chromecache_91.1.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/lqsTZ5beIbCkK4uGEGv9JmUR/recaptcha__.
Source: chromecache_89.1.dr, chromecache_76.1.dr, chromecache_101.1.dr, chromecache_95.1.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/lqsTZ5beIbCkK4uGEGv9JmUR/recaptcha__en.js

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49736 version: TLS 1.2

Source: classification engine

Classification label: mal60.phis.win@18/68@12/8

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1928,i,2373029909531975188,16909724742691249416,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.wagtg.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1928,i,2373029909531975188,16909724742691249416,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	5 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	6 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://developers.google.com/recaptcha/docs/faq#localhost_support	0%	URL Reputation	safe
https://support.google.com/recaptcha#6262736	0%	URL Reputation	safe
https://cloud.google.com/recaptcha-enterprise/billing-information	0%	URL Reputation	safe
https://recaptcha.net	0%	URL Reputation	safe
https://support.google.com/recaptcha/?hl=en#6223828	0%	URL Reputation	safe
https://cloud.google.com/contact	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
www.wagtg.com	45.152.115.161	true	true		unknown
www.google.com	142.250.186.100	true	false		unknown

Contacted URLs

Name	Malicious	Reputation
http://www.wagtg.com/	true	unknown
https://www.google.com/recaptcha/api2/payload?p=06AFcWeA4kcX4S1aZg9h6KNEb8JDKbYLF941-bjPHL-_TWiZsN0zMcW81JAQGA4e5fmKTA5BjedcXBgYbBEiFEHlwiF6EdOOsq5Mm2H8ulkjqUqU7SgZiHG_n0dWBHcPPQndVSLOApvudkwVYr0IPpenq-mntuur39CV5nqE4Ym8kGo4nTzjh3PlFiN_9_0zakHbd_IvjiRi8TpL1X-Nt0Nc6xLpnnU4e-Bw&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw	false	unknown
https://www.google.com/recaptcha/api2/payload?p=06AFcWeA5FIWWiN_LfxIUMWCOlSSDqtWfOogEyeV-6OUHNRvODBJTb48-Y9UlUVyjqabT1_MtRGGOxCeOvMtIn4h4wxv6sECZqQ_DnqyrIIlqEsG8u-h_U4Ec_-Hb1GlV4PmVWALQecIUgZEwccipuLAkRRRaPr4zkrCyY47KHDlog7boCmdIPz2imVHep9fVDaNadQ0uCyROTMWsOKs_GjvhTcex8v_c-pw&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw&id=8ecf7397c4057079	false	unknown
http://www.wagtg.com/favicon.ico	true	unknown
https://www.google.com/recaptcha/api2/bframe?hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw	false	unknown
https://www.google.com/recaptcha/api2/payload?p=06AFcWeA4Iyw15QstXNW8NaPul_cPVDXle9WrluH86zD8dfwUsPrBioB_oY4kSWpVVcigNspMBEVq5zh3YFkF1Pr-GQgaN--C8MtkyYa-cwUPB5-6u0l9v4hI5bC35bp9qqvXXR_t5ZgNzYCwX8xAkjwwrBTMSIU6Wx2B8Zs_6KraHwHggwxEkcXUv0_uUT_5460Nz2HTCPfQM0-9z69srQHAMrwdduz3yfA&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw&id=78cde3367d919541	false	unknown
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR	false	unknown
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw&co=aHR0cDovL3d3dy53YWd0Zy5jb206ODA.&hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&theme=light&size=normal&cb=6gmpjol1d1ei	false	unknown
https://www.google.com/recaptcha/api2/payload?p=06AFcWeA5IwZZgluG9qztb_r9IGqvYvWE-t80qjOoUoIBsHoOVFAEVHFS7SJDSsAikaxdvlfzSXAR1IrKISUB6xatpiwL9tc46HM80TXUuomBCHkMuly5kApiCiyj-vgNwciuI3TX3A3NILzVT1gfMvg00E5Dbk7Ly-tWbc1cl4SmrunF_JDBzOJCzC29IxcImtocybocYm1oEvOhfSq_djC7swniQVSKWEQ&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw&id=ca2d9c6f02cbfd66	false	unknown
https://www.google.com/recaptcha/api2/payload?p=06AFcWeA5f4RM6blzgH7v5F3Ss63hX01BnhyU4X8Qtb_nSN41mwutiLYQjp5t2wE-oxu0IlwdzjlDKYjlEMsTd8JQVOB09Wj__TPZYbC56oShllJM9EGUVkhC4wpDs_ob_qhD7M5yfGsbYbDSpOcC6hhTJ6VyWaG-Iw8x1LkE_BOn-q_42ic59be8PE3GNeSnadLQInEIkafDSPo-cxVmf3I8dq_OLBr8f9w&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw&id=dbbab680d999830e	false	unknown
https://www.google.com/recaptcha/api2/replaceimage?k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw	false	unknown
https://www.google.com/recaptcha/api.js	false	unknown
https://www.google.com/recaptcha/api2/reload?k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw	false	unknown
https://www.google.com/recaptcha/api2/payload?p=06AFcWeA4UiNT0SlXG4gBbP0KobItkmgpsadCrp4V9rK6nWhJvWEcCvNpLB4tOV0QZ64H9kEAr6scNDhu3_ALp_JtUyla81ESXxNzdoDtEfFzEkgQuG7XNCDc-2fOL8_QsALdktHAqaoc4OJonRRUu0wybkKXzzERW7oPAG_e7PVyxJEcuDZmqmcIE85TJ8NUMUBur2EdSPdSEk-N02j_uszHXMOhp_lZ2DA&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw&id=3befc781412ea0a1	false	unknown
https://www.google.com/js/bg/xrnLfCEjSrpGR1AYVMyryvUXM8OUMO4sC9T9G27F3zE.js	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_73.1.dr, chromecache_108.1.dr, chromecache_91.1.dr	false	URL Reputation: safe	unknown
https://support.google.com/recaptcha#6262736	chromecache_73.1.dr, chromecache_108.1.dr, chromecache_91.1.dr	false	URL Reputation: safe	unknown
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_73.1.dr, chromecache_108.1.dr, chromecache_91.1.dr	false	URL Reputation: safe	unknown
https://recaptcha.net	chromecache_91.1.dr	false	URL Reputation: safe	unknown
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_73.1.dr, chromecache_108.1.dr, chromecache_91.1.dr	false	URL Reputation: safe	unknown
https://cloud.google.com/contact	chromecache_73.1.dr, chromecache_108.1.dr, chromecache_91.1.dr	false	URL Reputation: safe	unknown
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_73.1.dr, chromecache_108.1.dr, chromecache_91.1.dr	false	URL Reputation: safe	unknown
https://play.google.com/log?format=json&hasfast=true	chromecache_91.1.dr	false		unknown
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_73.1.dr, chromecache_108.1.dr, chromecache_91.1.dr	false	URL Reputation: safe	unknown
https://support.google.com/recaptcha/#6175971	chromecache_73.1.dr, chromecache_108.1.dr, chromecache_91.1.dr	false	URL Reputation: safe	unknown
https://www.gstatic.c..?/recaptcha/releases/lqsTZ5beIbCkK4uGEGv9JmUR/recaptcha__.	chromecache_73.1.dr, chromecache_108.1.dr, chromecache_91.1.dr	false		unknown
https://www.google.com/recaptcha/api2/	chromecache_73.1.dr, chromecache_76.1.dr, chromecache_108.1.dr, chromecache_95.1.dr, chromecache_91.1.dr	false		unknown
https://support.google.com/recaptcha	chromecache_91.1.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
216.58.206.36	unknown	United States	15169	GOOGLEUS	false
45.152.115.161	www.wagtg.com	Russian Federation	138576	CODECCLOUD-AS-APCodecCloudHKLimitedHK	true
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.181.228	unknown	United States	15169	GOOGLEUS	false
142.251.40.196	unknown	United States	15169	GOOGLEUS	false
142.250.186.100	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.16
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1538686
Start date and time:	2024-10-21 16:59:08 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 39s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	http://www.wagtg.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.phis.win@18/68@12/8
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.99, 142.250.185.174, 64.233.184.84, 34.104.35.123, 142.250.186.138, 142.250.186.131, 142.250.186.170, 142.250.184.227, 172.217.16.202, 142.250.184.202, 216.58.206.42, 172.217.18.10, 142.250.185.106, 172.217.18.106, 142.250.185.74, 142.250.185.138, 216.58.206.74, 216.58.212.138, 142.250.185.202, 142.250.186.42, 172.217.23.106, 142.250.186.106, 93.184.221.240, 142.250.185.227, 172.217.18.3, 142.250.186.142, 142.250.186.35
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ajax.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, update.googleapis.com, clients.l.google.com, www.gstatic.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://www.wagtg.com

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 21 13:59:39 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9820132165574056
Encrypted:	false
SSDEEP:	48:81dscTMAf9WHdWidAKZdA1FehwiZUklqeh7y+3:8rH91cy
MD5:	23F70EE906BF5594CAA25F7FC761ECBE
SHA1:	B122C48A2FE0775C09F8C65DAEFD0D981B4C8AF6
SHA-256:	1DFC89385C732CCA2B30024640E78CD8DF9952F5D9E3E69417C9C349CFC57FEA
SHA-512:	4959E2B383ADCB75A8AC94553DAECA0353CA59D98081BE62E8FA4E8DC1787A150B38FA6F3C5FECF99DB158B00212C30C2D3254D224531A446315D5B318CBE227
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......8..#..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IUYkw....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VUYsw....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VUYsw....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VUYsw..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VUYtw...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........j.q.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 21 13:59:39 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.996431932171824
Encrypted:	false
SSDEEP:	48:8rdscTMAf9WHdWidAKZdA1seh/iZUkAQkqehMy+2:8RH9r9Q9y
MD5:	4210CD1FF0A44FB9B05F497666F15192
SHA1:	71962ED3ADA40E5D1CA6330BE52D797B6B716119
SHA-256:	00FA4FA4A5852C13FD920EEBD58D3913E9F4E5987260FBD17C328D2ED80DFBE5
SHA-512:	7C885B92E5CAC2EC68EF2A54986B0A22F0343204C27B10E1FCBD5FFAAE91E10657FC89CF00BECF9671BAEC99FDE31A23442178F7539B5BC81783B63363512CF4
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....Ts+..#..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IUYkw....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VUYsw....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VUYsw....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VUYsw..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VUYtw...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........j.q.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.00506340815646
Encrypted:	false
SSDEEP:	48:84dscTMAfAHdWidAKZdA14meh7sFiZUkmgqeh7suy+BX:80HtnAy
MD5:	4446F453DCCFC8625846E82041943D68
SHA1:	8151964A00B544AE7C6BC16459F15AB32E00933E
SHA-256:	4932B3D6F3CFE9EEC0B0A767EE26849BE7732DB2061332A711FAA5ECF1981B86
SHA-512:	32AD18E4EBE53DAD869BDA77D3A0EB8BE7EAB666981FF15FF8F753C03CB8D45556CCDE198B48DE31A456696D47F0950C8CBA5D6C3DD9E91CAE0CD851D0571820
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IUYkw....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VUYsw....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VUYsw....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VUYsw..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........j.q.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 21 13:59:39 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.994777486460888
Encrypted:	false
SSDEEP:	48:87dscTMAf9WHdWidAKZdA1TehDiZUkwqehYy+R:8hH94my
MD5:	19FE8593C13022F97FD73205799882C9
SHA1:	18ACA345CC207BA5370CBBC0D9F7D8311007F02A
SHA-256:	D6F085CFDEDBC1C213F6E8694FC89F217E2A29EFA72505F1CB9A3ED2B22C4699
SHA-512:	768EB39570B31D89525D4AF56908927757613F00C54EACC90B7A58942ED8AB03CE004E1F09B4AF87931D9966E33101FD0B1EE189B50CC3CE520048D50BD1F346
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....KG$..#..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IUYkw....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VUYsw....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VUYsw....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VUYsw..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VUYtw...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........j.q.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 21 13:59:39 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.984273288423685
Encrypted:	false
SSDEEP:	48:8xdscTMAf9WHdWidAKZdA1dehBiZUk1W1qehyy+C:8nH9I9Sy
MD5:	D29BA3D80D1536A8785BC3BAC89F6664
SHA1:	CB29E023CEDA566C6C8B0150227491E28B298FB5
SHA-256:	98EB304E5D60E334477145CD0052C2F2C601B2FF6B65F656AA51095B221833BF
SHA-512:	3378B74A777B557425010B0FE2C34B2650BBE691A7F52ECC4C3A439F53DB2494D4120EEE37DD2A114F7021144260449658D3E60593D205B2B02B6293B4F1BFDF
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....y.2..#..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IUYkw....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VUYsw....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VUYsw....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VUYsw..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VUYtw...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........j.q.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 21 13:59:39 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9947674253642407
Encrypted:	false
SSDEEP:	48:8fdscTMAf9WHdWidAKZdA1duTeehOuTbbiZUk5OjqehOuTbAy+yT+:81H96TfTbxWOvTbAy7T
MD5:	9B2BA6AFDA8084D4470177C566B266E3
SHA1:	06D8980324E72A65C60549DDE9BFA7ACD2CD4E30
SHA-256:	0BD0E23276E843CF494545FF74BA82B676994CDD9E9E1910CE18F5932D152220
SHA-512:	0D8305EEE9C3875C2DD20DDCCD77FEF4D6216F7684A152C2A7820C8C1EF2FFEB545EA03A9B6BDBEB66BDE56F9DD4F9A8737BB1A7044C50640F4E77E649A0882A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....v....#..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IUYkw....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VUYsw....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VUYsw....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VUYsw..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VUYtw...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........j.q.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	33712
Entropy (8bit):	7.963979656355859
Encrypted:	false
SSDEEP:	768:a8gdPFPojwQoeOsaFqKNckj8G6J81rI81QQcL24O0F:afddAMQ0F/wJ8NeQcqSF
MD5:	2D19800DC6947344A449756445D0638A
SHA1:	893B87BEF9E6666766D80682ACC9BE8FCBF0CAB4
SHA-256:	997AF0A230AB907E1462572AEFE8BE92EFC3C98F11864BB8596EDECE9801AE65
SHA-512:	B521ECDA1E901C47D061BFEF1EE6CE2C69BA84AD0AB24C28E0D3D48E769A1671B2262982F079C64919306D47D286D981ED12175168EA2043021F95CB28322569
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/payload?p=06AFcWeA4kcX4S1aZg9h6KNEb8JDKbYLF941-bjPHL-_TWiZsN0zMcW81JAQGA4e5fmKTA5BjedcXBgYbBEiFEHlwiF6EdOOsq5Mm2H8ulkjqUqU7SgZiHG_n0dWBHcPPQndVSLOApvudkwVYr0IPpenq-mntuur39CV5nqE4Ym8kGo4nTzjh3PlFiN_9_0zakHbd_IvjiRi8TpL1X-Nt0Nc6xLpnnU4e-Bw&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................,.,.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..........5rk.........inn."^..<.....YG.^..7..q..\.IMt)X...Q.P{.C,/....U[[..\|...N.n..X.>..nLj.,....(;T..q.G.....[;Nk..x$>_...`r..w.T. ...RI.j.z....N.J.36s.W.4..FM.\|.3Y.E.........)6..R....F.V.E.Q.5..$k.....y#V#..{}..X.88.W9..R........WE$1......O...C.C....,..E%...}.$Q..M...52.Q...J.C]L.."._.x.Y..h.l4.d....#g8..k.2J..G.F....-....A....kX.qDJ......~xe.g..D

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.976663363230767
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKYQCpM0Waee:PLKdXNQKQ7L
MD5:	899F3616D1031A5633D9A0F4CA491B2D
SHA1:	129580E3399BE36658BB5164AD4C187E97EE12B3
SHA-256:	D4FE562B542385ED27C0A5B044F51B790B51CF0A57A265BD63BF51D94B570197
SHA-512:	3B5819AA67ABD91C54E395407E9FF01FBFC95490E86EB1AC9A5F22F30C7C6FCC359B6550450AAEDBCAF2D23037DDBAB09ADA5BE3FD227188FF828E5EC40F41DA
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/lqsTZ5beIbCkK4uGEGv9JmUR/recaptcha__en.js');

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 98 x 90, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	11174
Entropy (8bit):	7.97758318268209
Encrypted:	false
SSDEEP:	192:b4JEM/GnDNmhq6mokMiqF/RhAUYaYL39w/RA1A4m63ux+9Tyv7RyRJgBHWHOYa7z:b4b4ghdiqFJyVpr9A63p9TG0RCZWH/K
MD5:	A4741C6089E163F0E5C0CDB2C698A03E
SHA1:	03B190C8D9350802CBABBCCD2757CFF1FB7115F0
SHA-256:	C9685B413894B0647B42EDF9CAC1FC0B2ED044C1FE238D843B9CA3D29DB1B805
SHA-512:	8F16410EDBC8893D9982CCAA1F2BA73BB1E7189B8101CE8EF3167D4663E5580A0BD2462295052A5DD86FA83AB3A0C4ED889204052951F8C6FA71E564D3EDCAFB
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/canonical_car.png
Preview:	.PNG........IHDR...b...Z...........+mIDATx..O.a.A.3.....@....YY.5`......#B...\|...)F3S..8..H._.......N......v..i..k{D..r..wKhO...V$..XD..(...4]8......t...Q..f!C.{...o.:.sNJ!.~R.....GFG.$.o.a..m...S.a...("..uu1....h......V...).....V...+....@rd9b.. ........5..7.]...........,CD./.......K.; ......v......H..`..$.p.E.I/.{....5....`..........O_...H.c.."G.Jp}LB.....OU.$..%....=..+..P` .....vR..^.._...a. ..vX.LIH..-..F..x.?......bRr..@.1....b...`#.L".........\|....M.8$....IV.9s...;.WL....Q......8..h.....HIje.....a{.......:\...U.."...AYs.f.:.?RU.C5.,......Q.j..y...Nx.J....1.>.>-R.L.>.q?.H;.Z`.o...}...sN....k.........P.&>w.0".u.$.l.W2.q.=I.H......2.......I.H.x..> [.,.t7..$$....W.`..D..#).......sfv..A_.....{....cy-..H.x.U5...Ew`....JxB..\.o..\|........)..?~..D.A/...y0.%.D.;...0.K..d.v......;..x6B...Hg^E.6..~....g...'-.5.].c.[C2.$A.......!..b.d..U..$w:/.$B. )..P....Hq..3.!.l}]y.....`..s>.7.t.P.s.%d..E{M.m.....$.%...v..W..T:-........... 0....D4a".K...

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 98 x 90, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	11174
Entropy (8bit):	7.97758318268209
Encrypted:	false
SSDEEP:	192:b4JEM/GnDNmhq6mokMiqF/RhAUYaYL39w/RA1A4m63ux+9Tyv7RyRJgBHWHOYa7z:b4b4ghdiqFJyVpr9A63p9TG0RCZWH/K
MD5:	A4741C6089E163F0E5C0CDB2C698A03E
SHA1:	03B190C8D9350802CBABBCCD2757CFF1FB7115F0
SHA-256:	C9685B413894B0647B42EDF9CAC1FC0B2ED044C1FE238D843B9CA3D29DB1B805
SHA-512:	8F16410EDBC8893D9982CCAA1F2BA73BB1E7189B8101CE8EF3167D4663E5580A0BD2462295052A5DD86FA83AB3A0C4ED889204052951F8C6FA71E564D3EDCAFB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...b...Z...........+mIDATx..O.a.A.3.....@....YY.5`......#B...\|...)F3S..8..H._.......N......v..i..k{D..r..wKhO...V$..XD..(...4]8......t...Q..f!C.{...o.:.sNJ!.~R.....GFG.$.o.a..m...S.a...("..uu1....h......V...).....V...+....@rd9b.. ........5..7.]...........,CD./.......K.; ......v......H..`..$.p.E.I/.{....5....`..........O_...H.c.."G.Jp}LB.....OU.$..%....=..+..P` .....vR..^.._...a. ..vX.LIH..-..F..x.?......bRr..@.1....b...`#.L".........\|....M.8$....IV.9s...;.WL....Q......8..h.....HIje.....a{.......:\...U.."...AYs.f.:.?RU.C5.,......Q.j..y...Nx.J....1.>.>-R.L.>.q?.H;.Z`.o...}...sN....k.........P.&>w.0".u.$.l.W2.q.=I.H......2.......I.H.x..> [.,.t7..$$....W.`..D..#).......sfv..A_.....{....cy-..H.x.U5...Ew`....JxB..\.o..\|........)..?~..D.A/...y0.%.D.;...0.K..d.v......;..x6B...Hg^E.6..~....g...'-.5.].c.[C2.$A.......!..b.d..U..$w:/.$B. )..P....Hq..3.!.l}]y.....`..s>.7.t.P.s.%d..E{M.m.....$.%...v..W..T:-........... 0....D4a".K...

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18050)
Category:	dropped
Size (bytes):	18670
Entropy (8bit):	5.65098474031577
Encrypted:	false
SSDEEP:	384:KmZugm8YvH/gvUb5YxczZflxXESc7hbnaeJIyjPQWr:egm8YvH/gJx0ZflF7AaeJTTr
MD5:	0E0CFEAFAAC28AE24B801A4D3EA67C72
SHA1:	43D22F7513A529D17D9C75EE7B9B58E9BA8643D5
SHA-256:	C6B9CB7C21234ABA4647501854CCABCAF51733C39430EE2C0BD4FD1B6EC5DF31
SHA-512:	9FAA65A0821F7F3B39D6A91CA66E489DB053762F7994B156D99C61901019D81A1227BC4A14B15E0C42648A60B7EB1105B28731CA8988FDD9F9182BA557464047
Malicious:	false
Reputation:	low
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var F=function(H,a){if(!(a=(H=null,d).trustedTypes,a)\|\|!a.createPolicy)return H;try{H=a.createPolicy("bg",{createHTML:y,createScript:y,createScriptURL:y})}catch(u){d.console&&d.console.error(u.message)}return H},y=function(H){return H},d=this\|\|self;(0,eval)(function(H,a){return(a=F())&&H.eval(a.createScript("1"))===1?function(u){return a.createScript(u)}:function(u){return""+u}}(d)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var od=function(H,a,d,F,A,y){function B(){if(F.B==F){if(F.v){var J=[l,a,d,void 0,A,y,arguments];if(H==2)var u=W(F,(q(J,F),false),false);else if(H==1){var P=!F.V.length;(q(J,F),P)&&W(F,false,false)}else u=Hc(F,J);return u}A&&y&&A.removeEventListener(y,B,c)}}return B},h=function(H,a,d,F,A,y,B,J){if(H.B=(B=(J=(A=(d\|\|H.P++,H.I>0)&&H.W&&H.b7&&H.s<=1&&!H.j&&!H.S&&(!d\|\|H.i7-a>1)&&doc

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3
Category:	downloaded
Size (bytes):	6195
Entropy (8bit):	7.911209141840548
Encrypted:	false
SSDEEP:	96:yEkrpJXwPO2W420TlQWPd5NyMlsywwWNaSYPoNtpSaPj:yf3+9TlQY5NyMlxwwngHgaL
MD5:	40B838EC23EB5DA38AC98023497E692A
SHA1:	A468DC6C505AEFB62EFE404E33B8B0C8B18D68A6
SHA-256:	8914113F610F890CD0AD90D809B4515B8D40A7E0DB65A951C38B1AEBA6405066
SHA-512:	161276FBB3FA48B543C53182A55EED75972BEB51D086EBD8743BEA0E4A1C642982F420C59222F5AA186BFB5A9ADD067360978C569029208BA5231F3610B83E60
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/payload?p=06AFcWeA4Iyw15QstXNW8NaPul_cPVDXle9WrluH86zD8dfwUsPrBioB_oY4kSWpVVcigNspMBEVq5zh3YFkF1Pr-GQgaN--C8MtkyYa-cwUPB5-6u0l9v4hI5bC35bp9qqvXXR_t5ZgNzYCwX8xAkjwwrBTMSIU6Wx2B8Zs_6KraHwHggwxEkcXUv0_uUT_5460Nz2HTCPfQM0-9z69srQHAMrwdduz3yfA&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw&id=78cde3367d919541
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................d.d.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...5.o'$..v!...`v=.w....dm..Q#<..pA'..@..52]=....!7'299].I.....f.7i...d 8..I$........'...._.....6n......,X.c.G..J.+;.S..s...W.>...V.i#Y..`.m.<..B.}......K....`......r...q......f.1.0......d....9....K.R.M....=IR..oO..T......[.Z..K.S.*6.#...6._By.A..!..$..T,.....60....b.E,.....B...eA...9..I......[p...$...9.q.1.<{...s?/?.O....O._......Q..D..RX.cx.........a

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18050)
Category:	downloaded
Size (bytes):	18670
Entropy (8bit):	5.65098474031577
Encrypted:	false
SSDEEP:	384:KmZugm8YvH/gvUb5YxczZflxXESc7hbnaeJIyjPQWr:egm8YvH/gJx0ZflF7AaeJTTr
MD5:	0E0CFEAFAAC28AE24B801A4D3EA67C72
SHA1:	43D22F7513A529D17D9C75EE7B9B58E9BA8643D5
SHA-256:	C6B9CB7C21234ABA4647501854CCABCAF51733C39430EE2C0BD4FD1B6EC5DF31
SHA-512:	9FAA65A0821F7F3B39D6A91CA66E489DB053762F7994B156D99C61901019D81A1227BC4A14B15E0C42648A60B7EB1105B28731CA8988FDD9F9182BA557464047
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/xrnLfCEjSrpGR1AYVMyryvUXM8OUMO4sC9T9G27F3zE.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var F=function(H,a){if(!(a=(H=null,d).trustedTypes,a)\|\|!a.createPolicy)return H;try{H=a.createPolicy("bg",{createHTML:y,createScript:y,createScriptURL:y})}catch(u){d.console&&d.console.error(u.message)}return H},y=function(H){return H},d=this\|\|self;(0,eval)(function(H,a){return(a=F())&&H.eval(a.createScript("1"))===1?function(u){return a.createScript(u)}:function(u){return""+u}}(d)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var od=function(H,a,d,F,A,y){function B(){if(F.B==F){if(F.v){var J=[l,a,d,void 0,A,y,arguments];if(H==2)var u=W(F,(q(J,F),false),false);else if(H==1){var P=!F.V.length;(q(J,F),P)&&W(F,false,false)}else u=Hc(F,J);return u}A&&y&&A.removeEventListener(y,B,c)}}return B},h=function(H,a,d,F,A,y,B,J){if(H.B=(B=(J=(A=(d\|\|H.P++,H.I>0)&&H.W&&H.b7&&H.s<=1&&!H.j&&!H.S&&(!d\|\|H.i7-a>1)&&doc

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3
Category:	downloaded
Size (bytes):	5292
Entropy (8bit):	7.899989225612017
Encrypted:	false
SSDEEP:	96:yE81So0yeNSs87W68c0k3ZjXGFM3N4poX6Ro0Vn+FrQWrfv0Gdvsx:y4Lgl7T8c0k3t4WepAADi0sH0Gdvsx
MD5:	944719DFAFABEF294B5E1401AA0FB2CA
SHA1:	6D1AF550DFD03A4DC43AC3DD652B282C8663E297
SHA-256:	E529E169451CDEED7BAD3C543EF11C267D3A7B3B06FC029AAD169E7DBDF4717D
SHA-512:	E8BF287C26048321A1F0616DF72F521E520AFFD702F4674E8C222CF0855537370B855BAB51349E5120302EE9F840810F08DB65C15AF1D0A72229E2A724626503
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/payload?p=06AFcWeA5FIWWiN_LfxIUMWCOlSSDqtWfOogEyeV-6OUHNRvODBJTb48-Y9UlUVyjqabT1_MtRGGOxCeOvMtIn4h4wxv6sECZqQ_DnqyrIIlqEsG8u-h_U4Ec_-Hb1GlV4PmVWALQecIUgZEwccipuLAkRRRaPr4zkrCyY47KHDlog7boCmdIPz2imVHep9fVDaNadQ0uCyROTMWsOKs_GjvhTcex8v_c-pw&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw&id=8ecf7397c4057079
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................d.d.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...V.i..2.....z.9...O....T.......'..G.>.e?yv.w.e...`..F1..'.J..V.....i..T.....Kz...$...z.%....X..*.rW'r..>.<.`.T..d.Uw.;.[....=.......Q.j:....KK[ex.9,..,A....W....Zm:.'..v.W.fG.........$..c..)>..\.0@..\.qOs...G..s.=9.>.{V>..{.3Y..n.J2....!,.jI........9.'.#O.H.5.<..t........@...... s\..k.ys.Mny/..[.[.<.........6...=.:..]-.&..........;.)mss...3G..a\|..N1.>..;.&..k.

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (715)
Category:	downloaded
Size (bytes):	557225
Entropy (8bit):	5.682542013673887
Encrypted:	false
SSDEEP:	6144:OgpQyxlMBfak0xzcDYXR1iFPlXmN8gQxDtX5ZidRuUWWIlRoPlh5ZVgJP/pFUvR:Ogiy/MyxzPv+PlJ8dYUWllRqa0
MD5:	1D3C12EF7348978206413B2C985D0E37
SHA1:	4C8BF7428BA9FF2C3F9E54C05065604D5C4D6A4C
SHA-256:	5AB8F962752071D61B4C1613F2126EAD5A5969B0157509532CB1CC43D1C0486D
SHA-512:	0B544007426B2F5A7D5EA806CF2DC94E1D7C79DDD67D14E5D0D527CC367DD42BE0300D9AF32592D9BF59683183E7085C502C49D233ACB10F8AFB07A2B5463266
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/lqsTZ5beIbCkK4uGEGv9JmUR/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2018 Google Inc. SPDX-License-Identifier: Apache-2.0./.var S=function(){return[function(I,w,X,a,c,C,V){if(I>>(((C=[44,"K",27],I)&C[0])==I&&b.call(this,w),1)>=11&&(I^78)<C[2])if(typeof X.dispose=="function")X.dispose();else for(a in X)X[a]=w;return((I^50)>>3==3&&(X[C[1]]=c?U[18](18,w,a,!0):a,X[C[1]]&&(X[C[1]]=X[C[1]].replace(/:$/,"")),V=X),I\|24)==I&&(V=X.firstElementChild!==void 0?X.firstElementChild:k[26](19,1,w,X.firstChild)),V},function(I,w,X,a,c,C,V,z,g,l,d,R,F,Y){return((((I-9&7)>=(Y=["S",4,70],Y[1])&&I-8<20&&!w.K&&(w.K=new Map,w[Y[0]]=0,w.H&&f[49](12,.1,null,0,"&",function(N,Z){w.add(decodeURI

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	530
Entropy (8bit):	7.2576396280117494
Encrypted:	false
SSDEEP:	12:6v/7OEUhUxzPKmghSn8nazyk+k8/OzxQcxNMvVb:bhUxzlvWkT8FcxK1
MD5:	88E0F42C9FA4F94AA8BCD54D1685C180
SHA1:	5AD9D47A49B82718BAA3BE88550A0B3350270C42
SHA-256:	89C62095126FCA89EA1511CF35B49B8306162946B0C26D6F60C5506C51D85992
SHA-512:	FAFF842E9FF4CC838EC3C724E95EEE6D36B2F8C768DC23E48669E28FC5C19AA24B1B34CF1DBCBE877B3537D6A325B4C35AF440C2B6D58F6A77A04A208D9296F8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX...JBA.....E-R... (#..-*$.}.%.Kt.A..Dx.I...AF.Q.4.......-.6..?.m:.,.......Q..D.L..e4..2.D..8)j4:......&>.s......p?......9.o5>.][H.}...&L.%.xh{~K.J\|.b..N..HMp....f.}dd..S..4%...$dK..!..Z..NNs.W&g..Fn....p...w..Ut...E\.e.......6......M.F...X.L......em.....R#'..%....j$/..-......@.l."..M.\|....OtW.H.,.-.~W`Z.s8..W...B...C-.8"H....6......9...A..aO.1`.M..A..eA.{...-...U.,.W........IEND.B`.

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3
Category:	downloaded
Size (bytes):	3858
Entropy (8bit):	7.879208268098396
Encrypted:	false
SSDEEP:	96:yEgEP7lSLXWEjWTA+GpFMWFiAOjfj1Jfabh4lGl:yvEzAaQt+3WozfSbheU
MD5:	4C098D1EC92C4A842E893E415B4FF8BC
SHA1:	A239C622A19CDAFCBF545F2D8CEBB7FEE41FE894
SHA-256:	5979B941FF49939013CDE9C581EBBCF9A84D91CF930E5E43E7F3B03238505AF1
SHA-512:	84F3196A21D59FE24F92A837CBCB2BE3DAF635912EADB88A8C04EFD0B76A9639CA8640A98658E074480B4F0088BA6327E70C875B24CC4D8813A359A5E6CDB637
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/payload?p=06AFcWeA4UiNT0SlXG4gBbP0KobItkmgpsadCrp4V9rK6nWhJvWEcCvNpLB4tOV0QZ64H9kEAr6scNDhu3_ALp_JtUyla81ESXxNzdoDtEfFzEkgQuG7XNCDc-2fOL8_QsALdktHAqaoc4OJonRRUu0wybkKXzzERW7oPAG_e7PVyxJEcuDZmqmcIE85TJ8NUMUBur2EdSPdSEk-N02j_uszHXMOhp_lZ2DA&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw&id=3befc781412ea0a1
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................d.d.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..l.-Au....xW..dM(1:p.T.Yv......?.~'.....Mi.p...@.}.............G..t]oZ..A..,..Y[..`).1..y......_..e..f.}.7..w.,...}..[..Pq.H..q....=.K...K.....9...[.?4.]^..o.j..f....p....s.W.Z......Sxj..J...&.kh..5 .H..^..........Z..._..8yb.ut..]T....I....^4$s.a.....G.K.k?.z.v.Y-...6#..#'.k........_'...\.uh.w.x.B.s.Z.K.....).k.O.:..?k....Gl.....1.P1.....J...mA.6..\|..

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (715)
Category:	downloaded
Size (bytes):	557225
Entropy (8bit):	5.682542013673887
Encrypted:	false
SSDEEP:	6144:OgpQyxlMBfak0xzcDYXR1iFPlXmN8gQxDtX5ZidRuUWWIlRoPlh5ZVgJP/pFUvR:Ogiy/MyxzPv+PlJ8dYUWllRqa0
MD5:	1D3C12EF7348978206413B2C985D0E37
SHA1:	4C8BF7428BA9FF2C3F9E54C05065604D5C4D6A4C
SHA-256:	5AB8F962752071D61B4C1613F2126EAD5A5969B0157509532CB1CC43D1C0486D
SHA-512:	0B544007426B2F5A7D5EA806CF2DC94E1D7C79DDD67D14E5D0D527CC367DD42BE0300D9AF32592D9BF59683183E7085C502C49D233ACB10F8AFB07A2B5463266
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/lqsTZ5beIbCkK4uGEGv9JmUR/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2018 Google Inc. SPDX-License-Identifier: Apache-2.0./.var S=function(){return[function(I,w,X,a,c,C,V){if(I>>(((C=[44,"K",27],I)&C[0])==I&&b.call(this,w),1)>=11&&(I^78)<C[2])if(typeof X.dispose=="function")X.dispose();else for(a in X)X[a]=w;return((I^50)>>3==3&&(X[C[1]]=c?U[18](18,w,a,!0):a,X[C[1]]&&(X[C[1]]=X[C[1]].replace(/:$/,"")),V=X),I\|24)==I&&(V=X.firstElementChild!==void 0?X.firstElementChild:k[26](19,1,w,X.firstChild)),V},function(I,w,X,a,c,C,V,z,g,l,d,R,F,Y){return((((I-9&7)>=(Y=["S",4,70],Y[1])&&I-8<20&&!w.K&&(w.K=new Map,w[Y[0]]=0,w.H&&f[49](12,.1,null,0,"&",function(N,Z){w.add(decodeURI

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	79242
Entropy (8bit):	6.019706801697464
Encrypted:	false
SSDEEP:	1536:OfGNbFoZJSUYOOaLnAW8+IcTOI3buhXwW4nxM:mGRFauOxLA/+IcTOZX/
MD5:	68DF4E65BB75C72BB2DE801EEBEEC9C9
SHA1:	76462F14972C57A6DDD6EB1FE624EF226A7DBC37
SHA-256:	AF772A1084C1E08E7A7B0A650DE797CB14337EA9BA8FEE556BD44DB8E0DBE1DE
SHA-512:	3482D7A1803045B83001BB180548E8E125D8F48386DE46804CB4BCE6B842C545282966A7E6F0F137C2661328C4D0D99A6301A302312591F03728135FADDE211C
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/lqsTZ5beIbCkK4uGEGv9JmUR/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAAIGNIUk0AAHomAACAhAAA+gAAAIDoAAB1MAAA6mAAADqYAAAXcJy6UTwAAAAGYktHRAD/AP8A/6C9p5MAAHq9SURBVHja7Z15fFTl9f/fd9ZM9n1PgCyEXSSRNYKCgAuiIipuVSuudavV1tq6W/WrtnWrrZbWDZUqUqUoCoIEQhBI2JesELKvM9mTWe7c3x83d5xAlkky8fv92ft5vfKC19znOWfuZ571POc5B1SoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKHifwGCRqsTNFrdj6VPq9XqtNofT9+wvutQyEyad8t9IaPPntFUd

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3
Category:	dropped
Size (bytes):	5469
Entropy (8bit):	7.908651186428224
Encrypted:	false
SSDEEP:	96:yE825aKN9BodEsUj1yJV9vDZ9o1JqcP+chlJsphA57is54qKmPa4Qhj2csm:y8aKzKXYyfxFi1JqHcKhA+Ky4QXsm
MD5:	FD417BD6A5D96FFA736A809A73450020
SHA1:	E863165C2337387A813033DF2F4D8DCABE7E9C5D
SHA-256:	BC33D8AE896144E1A749A5F8BF291CCA5FC429AFFE478561B75A889BC2A524B4
SHA-512:	CF3AFEF53D747F509207F76B4A87FF487A6EFD330F1C71AE3F3764068DFCD32387CDC1657AA11E146E981015537BDFFA7705FBF3D35149132257A4CC9B0170A3
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................d.d.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...T.. .5h..1.y.'..^O'..e......z.R3.zc....$.>&...c.1./.#!...lS.j.m.1.....z)....^..m..U..R..9W.i.o=..>...o........)..w.Q..O..2.=.sl.o..DD..6........r0+;\h!.R..$.#8~C.'y..;1....j......-.SGh.\.<HK.v.....}G.uc.i.GO).]...n.N.....<.S...Lq."q..q..:.'.hH..;...2......#...v.ua5......rJ.%....<.#>..o4C1..,Hy..2?.9>..VDJ..+....=@...;.rq...."G..[hv+...7N..:..

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1434), with no line terminators
Category:	downloaded
Size (bytes):	1434
Entropy (8bit):	5.771021255027039
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtQ1vS1Z/asLc:VKEctKo7LmvtUjPKtX7+1vQZ/rLrwUnG
MD5:	CC0A3CCF131962702BF792417A598C1D
SHA1:	CFC0E8F62F3C6E62A37AE1B6CCE6B9CEE56CE375
SHA-256:	667C83B6A02C499E26B4B94D89295391F7EB3CAC903554B02EC343D9A89F2BA4
SHA-512:	47B8ACA327E1EEE625E57FF0394B28689FE169D58EE76D7845248EAA5CCE6618DF8A177AAC6DEB32BACE4991B57E2DF665583B77A10202C88C54EF4867F2D0B8
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepend(m)

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3
Category:	downloaded
Size (bytes):	5469
Entropy (8bit):	7.908651186428224
Encrypted:	false
SSDEEP:	96:yE825aKN9BodEsUj1yJV9vDZ9o1JqcP+chlJsphA57is54qKmPa4Qhj2csm:y8aKzKXYyfxFi1JqHcKhA+Ky4QXsm
MD5:	FD417BD6A5D96FFA736A809A73450020
SHA1:	E863165C2337387A813033DF2F4D8DCABE7E9C5D
SHA-256:	BC33D8AE896144E1A749A5F8BF291CCA5FC429AFFE478561B75A889BC2A524B4
SHA-512:	CF3AFEF53D747F509207F76B4A87FF487A6EFD330F1C71AE3F3764068DFCD32387CDC1657AA11E146E981015537BDFFA7705FBF3D35149132257A4CC9B0170A3
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/payload?p=06AFcWeA5f4RM6blzgH7v5F3Ss63hX01BnhyU4X8Qtb_nSN41mwutiLYQjp5t2wE-oxu0IlwdzjlDKYjlEMsTd8JQVOB09Wj__TPZYbC56oShllJM9EGUVkhC4wpDs_ob_qhD7M5yfGsbYbDSpOcC6hhTJ6VyWaG-Iw8x1LkE_BOn-q_42ic59be8PE3GNeSnadLQInEIkafDSPo-cxVmf3I8dq_OLBr8f9w&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw&id=dbbab680d999830e
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................d.d.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...T.. .5h..1.y.'..^O'..e......z.R3.zc....$.>&...c.1./.#!...lS.j.m.1.....z)....^..m..U..R..9W.i.o=..>...o........)..w.Q..O..2.=.sl.o..DD..6........r0+;\h!.R..$.#8~C.'y..;1....j......-.SGh.\.<HK.v.....}G.uc.i.GO).]...n.N.....<.S...Lq."q..q..:.'.hH..;...2......#...v.ua5......rJ.%....<.#>..o4C1..,Hy..2?.9>..VDJ..+....=@...;.rq...."G..[hv+...7N..:..

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15340, version 1.0
Category:	downloaded
Size (bytes):	15340
Entropy (8bit):	7.983406336508752
Encrypted:	false
SSDEEP:	384:F2gPJde0V2iGrQyD8b3k/tigCdeNqOUd47SH0tsGm:4gPVV2NQE8b3ldeNWH0Wb
MD5:	19B7A0ADFDD4F808B53AF7E2CE2AD4E5
SHA1:	81D5D4C7B5035AD10CCE63CF7100295E0C51FDDA
SHA-256:	C912A9CE0C3122D4B2B29AD26BFE06B0390D1A5BDAA5D6128692C0BEFD1DFBBD
SHA-512:	49DA16000687AC81FC4CA9E9112BDCA850BB9F32E0AF2FE751ABC57A8E9C3382451B50998CEB9DE56FC4196F1DC7EF46BBA47933FC47EB4538124870B7630036
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
Preview:	wOF2......;........d..;..........................d..z..J.`..L.Z..<.....\..`..^...x.6.$..6. ..\|. ..8..z%......Q.{..q...FF.kd .8.(..d..).!C...Y.JA...r. ..GH8F......nW...".2&....2<..+C...p...b..SC.......J......z.-..Q..#6&1zUe../\...l.....<.....9s...E~.]B-..B.wY..o......Q..A.F..1j.......-.`P% .. ,..@1.0..~.....WWW.d.u<c{..^.R.+..w....&.........A......+C....(.N.....0.~..0.J.;.Nu..7....]..m.H.....[h.GL3....?)....c.H...2.3.}y........SXI\|..iVN'%E.D.W....r..<`....i....6;E$.....U.$j.@...._.......R2....WS...k.vz.R.'a9!^...N....h.._.....c.%."..S.2.16B...o.2}.pmU[.\|.LI....2.....OWQLO1-....s..8.(...".\|6...6R.. ..M-.zO.}w)..v..mXxX...c..3#.+.v....F`.Z;.zQ.......r,....Yo.....g.h....+.....O.3Y..)Y.8.!....elX......._.3.}k~u.{ C..H.z..FP........@...d..)T.R...L.H.J.j.@..............$...E......y...3.b...I.h u.+%.HA.\..9..8..X.!....gx...].:..V..C...._..X..!....6..)...GM:E.....O.Z.}k.;.T.k..D.k.O..D5.r..."......?..T.Q.A...CF...3g.5.Dn<.QPy..G..1.9..Q..0..

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	530
Entropy (8bit):	7.2576396280117494
Encrypted:	false
SSDEEP:	12:6v/7OEUhUxzPKmghSn8nazyk+k8/OzxQcxNMvVb:bhUxzlvWkT8FcxK1
MD5:	88E0F42C9FA4F94AA8BCD54D1685C180
SHA1:	5AD9D47A49B82718BAA3BE88550A0B3350270C42
SHA-256:	89C62095126FCA89EA1511CF35B49B8306162946B0C26D6F60C5506C51D85992
SHA-512:	FAFF842E9FF4CC838EC3C724E95EEE6D36B2F8C768DC23E48669E28FC5C19AA24B1B34CF1DBCBE877B3537D6A325B4C35AF440C2B6D58F6A77A04A208D9296F8
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/audio_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX...JBA.....E-R... (#..-*$.}.%.Kt.A..Dx.I...AF.Q.4.......-.6..?.m:.,.......Q..D.L..e4..2.D..8)j4:......&>.s......p?......9.o5>.][H.}...&L.%.xh{~K.J\|.b..N..HMp....f.}dd..S..4%...$dK..!..Z..NNs.W&g..Fn....p...w..Ut...E\.e.......6......M.F...X.L......em.....R#'..%....j$/..-......@.l."..M.\|....OtW.H.,.-.~W`Z.s8..W...B...C-.8"H....6......9...A..aO.1`.M..A..eA.{...-...U.,.W........IEND.B`.

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 1249
Category:	downloaded
Size (bytes):	711
Entropy (8bit):	7.6978975119068265
Encrypted:	false
SSDEEP:	12:XqFm2VObdRrSuTN2jgXnZo/sR7hc/HX5cSYDJO9VUAoKy6QASz1ozTNRYHJu:X+m2VC5ScA8JIsR2X55NVUAoKQAlzTGw
MD5:	046AC5043B606BEA91F54ABE92149E3B
SHA1:	FBAA978DB1DD8012698F71ABAD4FF9A2CA71BADD
SHA-256:	26416C685F276E880BC924272D2C97A72499E28B7ADCFD0C477F933FCFA0614F
SHA-512:	67BB43EE494E57A883F79906980CDDAB844EAE8CA1B30921E87EBA611BDD1C8CA79C061C4D3BFC2FFC050C7BC40C747626332402CCEA04F2F2FDE5B0348AE035
Malicious:	false
Reputation:	low
URL:	http://www.wagtg.com/favicon.ico
Preview:	..........eTkk.0..^...M...'v.a;fc.6.[.....u...')....].I....\|ut.9W.?..t.........p~.p1.(..gI...._.8}Z..4k)`-q...GP..Q..h#....kYc... ......`.18a..........t/....8....W....Y1..R..E..\v......2.p...qf...w....6@.!.E....d.....t.,....C....H.4....Y.7.b...)H.n;....>ZJm..P...QvL...M.'.....\4M...\.P.......a.J.....[.1%.:..L@.C.\|.>&..."..%...dg..bt.g..c..t.\.]..9....B$....@.%r..f..UR..0..l...(N..2)....=.... l..M.h<.........Y.:t...y.T.+..,....Z.F....9.F{^L;......}".h.8.gY..>...q..2...h........k.k...^.O.....$Nh.u...B.+c9.>.(..:...+v...6I.W....`.l2...x....cxz..+:..}_..-ohW.vT...$d.....m.4.......7.../.k....D.a-4._Jt.].. ..%.6.$...Y.vL.i>.F..j.3.....b..C{....~......p..../...+.a....

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	600
Entropy (8bit):	7.391634169810707
Encrypted:	false
SSDEEP:	12:6v/7OEUT9vceKKNtY3kM8O+mucROzZbJOAjPBE2Iq8AnxT9:bTdcVIM8tfHzzjy2IdKT9
MD5:	0F2A4639B8A4CB30C76E8333C00D30A6
SHA1:	57E273A270BB864970D747C74B3F0A7C8E515B13
SHA-256:	44B988703019CD6BFA86C91840FECF2A42B611B364E3EEA2F4EB63BF62714E98
SHA-512:	3EA72C7E8702D2E9D94B0FAA6FA095A33AB8BC6EC2891F8B3165CE29A9CCF2114FAEF424FA03FD4B9D06785326284C1BB2087CE05E249CCAC65418361BFA7C51
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..M+.Q.....&/....&......6...\|.I..).o.I.X..#.@.bb.D.'5....m...=..y........{....<.P..;.H......f...3l...M.I...j2.....3..1x..S......9..<m...E.'F'.. ...M.j...C..c.5.-..F..3H./F!.."V.e.i.}.Y....../.rw...@...].rp...`CQo(.....J...u.".!E...$.^$...k....b....@.^.;.u5........H/Q{..$..'..........w...r.+xS.uR..J.......GD.O./.. G7..l...J.t.3.S...N.7...e..s.-Jlj)..5E....E.;8w4.k..=.li.G...1.c....p,T6;....1.oW.%.2,..Z..a...*m.s}T1F....Hr.1......<x0.....-.i......IEND.B`.

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	665
Entropy (8bit):	7.42832670119013
Encrypted:	false
SSDEEP:	12:6v/7OEUelyuRs56fyKgIEInu5VLJBZInmJhd/3VqQXD8GBm1:belFRs56fuIEIu5VNBZInMTICfBO
MD5:	07BF314AAB04047B9E9A959EE6F63DA3
SHA1:	17BEF6602672E2FD9956381E01356245144003E5
SHA-256:	55EAF62CB05DA20088DC12B39D7D254D046CB1FD61DDF3AE641F1439EFD0A5EE
SHA-512:	2A1D4EBC7FBA6951881FD1DDA745480B504E14E3ADAC3B27EC5CF4045DE14FF030D45DDA99DC056285C7980446BA0FC37F489B7534BE46107B21BD43CEE87BA0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/info_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..W..DA.=.6O...H.,E.............b.....C.1...1..EbLPI.W......H..s.z5.:..._.d.0.u.......j.x.R..._.v..R...1..ir..`.yn..R..j.h./y..l......(`..5....l.E..0......B^......F.....F....Y\|p..._,p.............(3^.r.P.O......;<....z.,..yF....N..x.MS...Q.C%......D8G.+......oOk...)T..}\|..e...G.....'.R..G.Z.T}7(...&..@...G....$PGYv...A.c.]d....N..'.4b...R.%..)2Yd..b.M..^@.M....^.:h.N(dP*t..RQ%.o...{.vGH..S._".@./...g.....]...?..h..E.,r.m.%."."W.6G..t...->....q\.Kc.t"^......Kj~{l..C..).y..><@\|yB....=c.............!...<....IEND.B`.

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	33712
Entropy (8bit):	7.963979656355859
Encrypted:	false
SSDEEP:	768:a8gdPFPojwQoeOsaFqKNckj8G6J81rI81QQcL24O0F:afddAMQ0F/wJ8NeQcqSF
MD5:	2D19800DC6947344A449756445D0638A
SHA1:	893B87BEF9E6666766D80682ACC9BE8FCBF0CAB4
SHA-256:	997AF0A230AB907E1462572AEFE8BE92EFC3C98F11864BB8596EDECE9801AE65
SHA-512:	B521ECDA1E901C47D061BFEF1EE6CE2C69BA84AD0AB24C28E0D3D48E769A1671B2262982F079C64919306D47D286D981ED12175168EA2043021F95CB28322569
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................,.,.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..........5rk.........inn."^..<.....YG.^..7..q..\.IMt)X...Q.P{.C,/....U[[..\|...N.n..X.>..nLj.,....(;T..q.G.....[;Nk..x$>_...`r..w.T. ...RI.j.z....N.J.36s.W.4..FM.\|.3Y.E.........)6..R....F.V.E.Q.5..$k.....y#V#..{}..X.88.W9..R........WE$1......O...C.C....,..E%...}.$Q..M...52.Q...J.C]L.."._.x.Y..h.l4.d....#g8..k.2J..G.F....-....A....kX.qDJ......~xe.g..D

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3
Category:	dropped
Size (bytes):	6195
Entropy (8bit):	7.911209141840548
Encrypted:	false
SSDEEP:	96:yEkrpJXwPO2W420TlQWPd5NyMlsywwWNaSYPoNtpSaPj:yf3+9TlQY5NyMlxwwngHgaL
MD5:	40B838EC23EB5DA38AC98023497E692A
SHA1:	A468DC6C505AEFB62EFE404E33B8B0C8B18D68A6
SHA-256:	8914113F610F890CD0AD90D809B4515B8D40A7E0DB65A951C38B1AEBA6405066
SHA-512:	161276FBB3FA48B543C53182A55EED75972BEB51D086EBD8743BEA0E4A1C642982F420C59222F5AA186BFB5A9ADD067360978C569029208BA5231F3610B83E60
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................d.d.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...5.o'$..v!...`v=.w....dm..Q#<..pA'..@..52]=....!7'299].I.....f.7i...d 8..I$........'...._.....6n......,X.c.G..J.+;.S..s...W.>...V.i#Y..`.m.<..B.}......K....`......r...q......f.1.0......d....9....K.R.M....=IR..oO..T......[.Z..K.S.*6.#...6._By.A..!..$..T,.....60....b.E,.....B...eA...9..I......[p...$...9.q.1.<{...s?/?.O....O._......Q..D..RX.cx.........a

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	600
Entropy (8bit):	7.391634169810707
Encrypted:	false
SSDEEP:	12:6v/7OEUT9vceKKNtY3kM8O+mucROzZbJOAjPBE2Iq8AnxT9:bTdcVIM8tfHzzjy2IdKT9
MD5:	0F2A4639B8A4CB30C76E8333C00D30A6
SHA1:	57E273A270BB864970D747C74B3F0A7C8E515B13
SHA-256:	44B988703019CD6BFA86C91840FECF2A42B611B364E3EEA2F4EB63BF62714E98
SHA-512:	3EA72C7E8702D2E9D94B0FAA6FA095A33AB8BC6EC2891F8B3165CE29A9CCF2114FAEF424FA03FD4B9D06785326284C1BB2087CE05E249CCAC65418361BFA7C51
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/refresh_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..M+.Q.....&/....&......6...\|.I..).o.I.X..#.@.bb.D.'5....m...=..y........{....<.P..;.H......f...3l...M.I...j2.....3..1x..S......9..<m...E.'F'.. ...M.j...C..c.5.-..F..3H./F!.."V.e.i.}.Y....../.rw...@...].rp...`CQo(.....J...u.".!E...$.^$...k....b....@.^.;.u5........H/Q{..$..'..........w...r.+xS.uR..J.......GD.O./.. G7..l...J.t.3.S...N.7...e..s.-Jlj)..5E....E.;8w4.k..=.li.G...1.c....p,T6;....1.oW.%.2,..Z..a...*m.s}T1F....Hr.1......<x0.....-.i......IEND.B`.

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	665
Entropy (8bit):	7.42832670119013
Encrypted:	false
SSDEEP:	12:6v/7OEUelyuRs56fyKgIEInu5VLJBZInmJhd/3VqQXD8GBm1:belFRs56fuIEIu5VNBZInMTICfBO
MD5:	07BF314AAB04047B9E9A959EE6F63DA3
SHA1:	17BEF6602672E2FD9956381E01356245144003E5
SHA-256:	55EAF62CB05DA20088DC12B39D7D254D046CB1FD61DDF3AE641F1439EFD0A5EE
SHA-512:	2A1D4EBC7FBA6951881FD1DDA745480B504E14E3ADAC3B27EC5CF4045DE14FF030D45DDA99DC056285C7980446BA0FC37F489B7534BE46107B21BD43CEE87BA0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..W..DA.=.6O...H.,E.............b.....C.1...1..EbLPI.W......H..s.z5.:..._.d.0.u.......j.x.R..._.v..R...1..ir..`.yn..R..j.h./y..l......(`..5....l.E..0......B^......F.....F....Y\|p..._,p.............(3^.r.P.O......;<....z.,..yF....N..x.MS...Q.C%......D8G.+......oOk...)T..}\|..e...G.....'.R..G.Z.T}7(...&..@...G....$PGYv...A.c.]d....N..'.4b...R.%..)2Yd..b.M..^@.M....^.:h.N(dP*t..RQ%.o...{.vGH..S._".@./...g.....]...?..h..E.,r.m.%."."W.6G..t...->....q\.Kc.t"^......Kj~{l..C..).y..><@\|yB....=c.............!...<....IEND.B`.

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	102
Entropy (8bit):	4.976663363230767
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKYQCpM0Waee:PLKdXNQKQ7L
MD5:	899F3616D1031A5633D9A0F4CA491B2D
SHA1:	129580E3399BE36658BB5164AD4C187E97EE12B3
SHA-256:	D4FE562B542385ED27C0A5B044F51B790B51CF0A57A265BD63BF51D94B570197
SHA-512:	3B5819AA67ABD91C54E395407E9FF01FBFC95490E86EB1AC9A5F22F30C7C6FCC359B6550450AAEDBCAF2D23037DDBAB09ADA5BE3FD227188FF828E5EC40F41DA
Malicious:	false
Reputation:	low
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/lqsTZ5beIbCkK4uGEGv9JmUR/recaptcha__en.js');

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3
Category:	downloaded
Size (bytes):	3930
Entropy (8bit):	7.891045821545388
Encrypted:	false
SSDEEP:	96:yEG/bRwjmTmLn88MN9/iSrEHRNz/o7122Gx2/Yl/fFyQUVh:yaLsdEHPk12px2gGbVh
MD5:	EA17F2EA9E66620577DC69F5F16C791E
SHA1:	37343CF804FAEDE04E906F2135E9EE3CF394766F
SHA-256:	C4D1C8F6E4C6FFA491C225FE8399E3AA75EDBEF110248155F8B76A1B86952C8D
SHA-512:	5B564D337FE6E1F74CB9B7368125D37B35E12A7DD4B08A8A6266221BD74421C2D7D0F16B7459595E88A81A57706F40BA9BA88DFAA6A4F24A96DBC834A034811C
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/payload?p=06AFcWeA5IwZZgluG9qztb_r9IGqvYvWE-t80qjOoUoIBsHoOVFAEVHFS7SJDSsAikaxdvlfzSXAR1IrKISUB6xatpiwL9tc46HM80TXUuomBCHkMuly5kApiCiyj-vgNwciuI3TX3A3NILzVT1gfMvg00E5Dbk7Ly-tWbc1cl4SmrunF_JDBzOJCzC29IxcImtocybocYm1oEvOhfSq_djC7swniQVSKWEQ&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw&id=ca2d9c6f02cbfd66
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................d.d.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..3e&.u.......F&._c.W#85)J.b...56.6.;....mLW.H...(...6..G...(...M...?.i.........y.=.F.......i...6........9.{B....A.0N23<...cH..+V.{..S..U..o....(Yr...M...,;.W.....jz..}.......VOjVX......6.`}+...............4]f8...%l.\|..v.l....I.W.s.M.N.l....I.....m..k....B.r>.k:r..V:..&..[...Q!wc.(.&.......k....A..@......V.U....x.+..h.Y......).......P...U...zX3.k;R.7...O.:E.:

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (715)
Category:	dropped
Size (bytes):	557225
Entropy (8bit):	5.682542013673887
Encrypted:	false
SSDEEP:	6144:OgpQyxlMBfak0xzcDYXR1iFPlXmN8gQxDtX5ZidRuUWWIlRoPlh5ZVgJP/pFUvR:Ogiy/MyxzPv+PlJ8dYUWllRqa0
MD5:	1D3C12EF7348978206413B2C985D0E37
SHA1:	4C8BF7428BA9FF2C3F9E54C05065604D5C4D6A4C
SHA-256:	5AB8F962752071D61B4C1613F2126EAD5A5969B0157509532CB1CC43D1C0486D
SHA-512:	0B544007426B2F5A7D5EA806CF2DC94E1D7C79DDD67D14E5D0D527CC367DD42BE0300D9AF32592D9BF59683183E7085C502C49D233ACB10F8AFB07A2B5463266
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2018 Google Inc. SPDX-License-Identifier: Apache-2.0./.var S=function(){return[function(I,w,X,a,c,C,V){if(I>>(((C=[44,"K",27],I)&C[0])==I&&b.call(this,w),1)>=11&&(I^78)<C[2])if(typeof X.dispose=="function")X.dispose();else for(a in X)X[a]=w;return((I^50)>>3==3&&(X[C[1]]=c?U[18](18,w,a,!0):a,X[C[1]]&&(X[C[1]]=X[C[1]].replace(/:$/,"")),V=X),I\|24)==I&&(V=X.firstElementChild!==void 0?X.firstElementChild:k[26](19,1,w,X.firstChild)),V},function(I,w,X,a,c,C,V,z,g,l,d,R,F,Y){return((((I-9&7)>=(Y=["S",4,70],Y[1])&&I-8<20&&!w.K&&(w.K=new Map,w[Y[0]]=0,w.H&&f[49](12,.1,null,0,"&",function(N,Z){w.add(decodeURI

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3
Category:	dropped
Size (bytes):	5292
Entropy (8bit):	7.899989225612017
Encrypted:	false
SSDEEP:	96:yE81So0yeNSs87W68c0k3ZjXGFM3N4poX6Ro0Vn+FrQWrfv0Gdvsx:y4Lgl7T8c0k3t4WepAADi0sH0Gdvsx
MD5:	944719DFAFABEF294B5E1401AA0FB2CA
SHA1:	6D1AF550DFD03A4DC43AC3DD652B282C8663E297
SHA-256:	E529E169451CDEED7BAD3C543EF11C267D3A7B3B06FC029AAD169E7DBDF4717D
SHA-512:	E8BF287C26048321A1F0616DF72F521E520AFFD702F4674E8C222CF0855537370B855BAB51349E5120302EE9F840810F08DB65C15AF1D0A72229E2A724626503
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................d.d.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...V.i..2.....z.9...O....T.......'..G.>.e?yv.w.e...`..F1..'.J..V.....i..T.....Kz...$...z.%....X..*.rW'r..>.<.`.T..d.Uw.;.[....=.......Q.j:....KK[ex.9,..,A....W....Zm:.'..v.W.fG.........$..c..)>..\.0@..\.qOs...G..s.=9.>.{V>..{.3Y..n.J2....!,.jI........9.'.#O.H.5.<..t........@...... s\..k.ys.Mny/..[.[.<.........6...=.:..]-.&..........;.)mss...3G..a\|..N1.>..;.&..k.

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnfqW7GyJYsXRIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3
Category:	dropped
Size (bytes):	3858
Entropy (8bit):	7.879208268098396
Encrypted:	false
SSDEEP:	96:yEgEP7lSLXWEjWTA+GpFMWFiAOjfj1Jfabh4lGl:yvEzAaQt+3WozfSbheU
MD5:	4C098D1EC92C4A842E893E415B4FF8BC
SHA1:	A239C622A19CDAFCBF545F2D8CEBB7FEE41FE894
SHA-256:	5979B941FF49939013CDE9C581EBBCF9A84D91CF930E5E43E7F3B03238505AF1
SHA-512:	84F3196A21D59FE24F92A837CBCB2BE3DAF635912EADB88A8C04EFD0B76A9639CA8640A98658E074480B4F0088BA6327E70C875B24CC4D8813A359A5E6CDB637
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................d.d.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..l.-Au....xW..dM(1:p.T.Yv......?.~'.....Mi.p...@.}.............G..t]oZ..A..,..Y[..`).1..y......_..e..f.}.7..w.,...}..[..Pq.H..q....=.K...K.....9...[.?4.]^..o.j..f....p....s.W.Z......Sxj..J...&.kh..5 .H..^..........Z..._..8yb.ut..]T....I....^4$s.a.....G.K.k?.z.v.Y-...6#..#'.k........_'...\.uh.w.x.B.s.Z.K.....).k.O.:..?k....Gl.....1.P1.....J...mA.6..\|..

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1434), with no line terminators
Category:	dropped
Size (bytes):	1434
Entropy (8bit):	5.771021255027039
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtQ1vS1Z/asLc:VKEctKo7LmvtUjPKtX7+1vQZ/rLrwUnG
MD5:	CC0A3CCF131962702BF792417A598C1D
SHA1:	CFC0E8F62F3C6E62A37AE1B6CCE6B9CEE56CE375
SHA-256:	667C83B6A02C499E26B4B94D89295391F7EB3CAC903554B02EC343D9A89F2BA4
SHA-512:	47B8ACA327E1EEE625E57FF0394B28689FE169D58EE76D7845248EAA5CCE6618DF8A177AAC6DEB32BACE4991B57E2DF665583B77A10202C88C54EF4867F2D0B8
Malicious:	false
Reputation:	low
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepend(m)

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3
Category:	dropped
Size (bytes):	3930
Entropy (8bit):	7.891045821545388
Encrypted:	false
SSDEEP:	96:yEG/bRwjmTmLn88MN9/iSrEHRNz/o7122Gx2/Yl/fFyQUVh:yaLsdEHPk12px2gGbVh
MD5:	EA17F2EA9E66620577DC69F5F16C791E
SHA1:	37343CF804FAEDE04E906F2135E9EE3CF394766F
SHA-256:	C4D1C8F6E4C6FFA491C225FE8399E3AA75EDBEF110248155F8B76A1B86952C8D
SHA-512:	5B564D337FE6E1F74CB9B7368125D37B35E12A7DD4B08A8A6266221BD74421C2D7D0F16B7459595E88A81A57706F40BA9BA88DFAA6A4F24A96DBC834A034811C
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................d.d.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..3e&.u.......F&._c.W#85)J.b...56.6.;....mLW.H...(...6..G...(...M...?.i.........y.=.F.......i...6........9.{B....A.0N23<...cH..+V.{..S..U..o....(Yr...M...,;.W.....jz..}.......VOjVX......6.`}+...............4]f8...%l.\|..v.l....I.W.s.M.N.l....I.....m..k....B.r>.k:r..V:..&..[...Q!wc.(.&.......k....A..@......V.U....x.+..h.Y......).......P...U...zX3.k;R.7...O.:E.:

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32038)
Category:	downloaded
Size (bytes):	95992
Entropy (8bit):	5.391333957965341
Encrypted:	false
SSDEEP:	1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmm:R+41ZqLTW8xRrqSb8qGH77da98Hr3
MD5:	F03E5A3BF534F4A738BC350631FD05BD
SHA1:	37B1DB88B57438F1072A8EBC7559C909C9D3A682
SHA-256:	AEC3D419D50F05781A96F223E18289AEB52598B5DB39BE82A7B71DC67D6A7947
SHA-512:	8EEEAEFB86CF5F9D09426814F7B60E1805E644CAC3F5AB382C4D393DD0B7AB272C1909A31A57E6D38D5ACF207555F097A64A6DD62F60A97093E97BB184126D2A
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js
Preview:	/! jQuery v1.11.3 \| (c) 2005, 2015 jQuery Foundation, Inc. \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l="1.11.3",m=function(a,b){return new m.fn.init(a,b)},n=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,o=/^-ms-/,p=/-([\da-z])/gi,q=function(a,b){return b.toUpperCase()};m.fn=m.prototype={jquery:l,constructor:m,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=m.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return m.each(this,a,b)},map:function(a){return this.pushStack(m.map(this,function(b,c){ret

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32038)
Category:	dropped
Size (bytes):	95992
Entropy (8bit):	5.391333957965341
Encrypted:	false
SSDEEP:	1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmm:R+41ZqLTW8xRrqSb8qGH77da98Hr3
MD5:	F03E5A3BF534F4A738BC350631FD05BD
SHA1:	37B1DB88B57438F1072A8EBC7559C909C9D3A682
SHA-256:	AEC3D419D50F05781A96F223E18289AEB52598B5DB39BE82A7B71DC67D6A7947
SHA-512:	8EEEAEFB86CF5F9D09426814F7B60E1805E644CAC3F5AB382C4D393DD0B7AB272C1909A31A57E6D38D5ACF207555F097A64A6DD62F60A97093E97BB184126D2A
Malicious:	false
Reputation:	low
Preview:	/! jQuery v1.11.3 \| (c) 2005, 2015 jQuery Foundation, Inc. \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l="1.11.3",m=function(a,b){return new m.fn.init(a,b)},n=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,o=/^-ms-/,p=/-([\da-z])/gi,q=function(a,b){return b.toUpperCase()};m.fn=m.prototype={jquery:l,constructor:m,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=m.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return m.each(this,a,b)},map:function(a){return this.pushStack(m.map(this,function(b,c){ret

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-21T16:59:44.331341+0200	2858711	ETPRO PHISHING BULLSreCaptcha Credential Phish Landing Page M1 2024-10-17	1	45.152.115.161	80	192.168.2.16	49700	TCP
2024-10-21T16:59:44.331341+0200	2858712	ETPRO PHISHING Suspected BULLSreCaptcha Credential Phish Landing Page M2 2024-10-17	1	45.152.115.161	80	192.168.2.16	49700	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 21, 2024 16:59:38.649507046 CEST	49700	80	192.168.2.16	45.152.115.161
Oct 21, 2024 16:59:38.649842024 CEST	49701	80	192.168.2.16	45.152.115.161
Oct 21, 2024 16:59:38.654948950 CEST	80	49700	45.152.115.161	192.168.2.16
Oct 21, 2024 16:59:38.655046940 CEST	49700	80	192.168.2.16	45.152.115.161
Oct 21, 2024 16:59:38.655205011 CEST	49700	80	192.168.2.16	45.152.115.161
Oct 21, 2024 16:59:38.656008005 CEST	80	49701	45.152.115.161	192.168.2.16
Oct 21, 2024 16:59:38.656161070 CEST	49701	80	192.168.2.16	45.152.115.161
Oct 21, 2024 16:59:38.660892010 CEST	80	49700	45.152.115.161	192.168.2.16
Oct 21, 2024 16:59:39.300597906 CEST	80	49700	45.152.115.161	192.168.2.16
Oct 21, 2024 16:59:39.343101978 CEST	49700	80	192.168.2.16	45.152.115.161
Oct 21, 2024 16:59:39.350394011 CEST	49703	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:39.350404024 CEST	443	49703	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:39.350466013 CEST	49703	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:39.350619078 CEST	49703	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:39.350636005 CEST	443	49703	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:39.946557999 CEST	443	49703	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:39.946774960 CEST	49703	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:39.946782112 CEST	443	49703	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:39.947832108 CEST	443	49703	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:39.947915077 CEST	49703	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:39.948887110 CEST	49703	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:39.948946953 CEST	443	49703	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:39.949525118 CEST	49703	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:39.949529886 CEST	443	49703	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:39.995698929 CEST	49703	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:40.130954027 CEST	443	49703	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:40.130996943 CEST	443	49703	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:40.131050110 CEST	49703	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:40.131057024 CEST	443	49703	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:40.131879091 CEST	49703	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:40.131917000 CEST	443	49703	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:40.131970882 CEST	49703	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:40.147659063 CEST	49705	53	192.168.2.16	1.1.1.1
Oct 21, 2024 16:59:40.153990030 CEST	53	49705	1.1.1.1	192.168.2.16
Oct 21, 2024 16:59:40.154063940 CEST	49705	53	192.168.2.16	1.1.1.1
Oct 21, 2024 16:59:40.154126883 CEST	49705	53	192.168.2.16	1.1.1.1
Oct 21, 2024 16:59:40.154216051 CEST	49705	53	192.168.2.16	1.1.1.1
Oct 21, 2024 16:59:40.161437035 CEST	53	49705	1.1.1.1	192.168.2.16
Oct 21, 2024 16:59:40.161468983 CEST	53	49705	1.1.1.1	192.168.2.16
Oct 21, 2024 16:59:40.575674057 CEST	53	49705	1.1.1.1	192.168.2.16
Oct 21, 2024 16:59:40.576210976 CEST	49708	443	192.168.2.16	142.251.40.196
Oct 21, 2024 16:59:40.576251984 CEST	443	49708	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:40.576266050 CEST	49705	53	192.168.2.16	1.1.1.1
Oct 21, 2024 16:59:40.576335907 CEST	49708	443	192.168.2.16	142.251.40.196
Oct 21, 2024 16:59:40.576564074 CEST	49708	443	192.168.2.16	142.251.40.196
Oct 21, 2024 16:59:40.576574087 CEST	443	49708	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:40.582410097 CEST	53	49705	1.1.1.1	192.168.2.16
Oct 21, 2024 16:59:40.582493067 CEST	49705	53	192.168.2.16	1.1.1.1
Oct 21, 2024 16:59:41.010570049 CEST	443	49708	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:41.010900021 CEST	49708	443	192.168.2.16	142.251.40.196
Oct 21, 2024 16:59:41.010912895 CEST	443	49708	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:41.011784077 CEST	443	49708	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:41.011847019 CEST	49708	443	192.168.2.16	142.251.40.196
Oct 21, 2024 16:59:41.012134075 CEST	49708	443	192.168.2.16	142.251.40.196
Oct 21, 2024 16:59:41.012175083 CEST	443	49708	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:41.012243032 CEST	49708	443	192.168.2.16	142.251.40.196
Oct 21, 2024 16:59:41.012248039 CEST	443	49708	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:41.061723948 CEST	49708	443	192.168.2.16	142.251.40.196
Oct 21, 2024 16:59:41.283380985 CEST	443	49708	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:41.283421040 CEST	443	49708	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:41.283535957 CEST	443	49708	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:41.283552885 CEST	49708	443	192.168.2.16	142.251.40.196
Oct 21, 2024 16:59:41.283588886 CEST	49708	443	192.168.2.16	142.251.40.196
Oct 21, 2024 16:59:41.284997940 CEST	49708	443	192.168.2.16	142.251.40.196
Oct 21, 2024 16:59:41.285012007 CEST	443	49708	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:41.588228941 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 21, 2024 16:59:41.890737057 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 21, 2024 16:59:41.950246096 CEST	49710	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:41.950292110 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:41.951342106 CEST	49710	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:41.951342106 CEST	49710	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:41.951375008 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.378236055 CEST	49712	443	192.168.2.16	142.250.181.228
Oct 21, 2024 16:59:42.378267050 CEST	443	49712	142.250.181.228	192.168.2.16
Oct 21, 2024 16:59:42.378344059 CEST	49712	443	192.168.2.16	142.250.181.228
Oct 21, 2024 16:59:42.378540993 CEST	49712	443	192.168.2.16	142.250.181.228
Oct 21, 2024 16:59:42.378546953 CEST	443	49712	142.250.181.228	192.168.2.16
Oct 21, 2024 16:59:42.495749950 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 21, 2024 16:59:42.544553041 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.544852972 CEST	49710	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:42.544864893 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.545892954 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.546156883 CEST	49710	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:42.546451092 CEST	49710	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:42.546451092 CEST	49710	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:42.546469927 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.546539068 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.591754913 CEST	49710	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:42.591767073 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.639734983 CEST	49710	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:42.746197939 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.746252060 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.746288061 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.746319056 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.746346951 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.746372938 CEST	49710	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:42.746372938 CEST	49710	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:42.746392965 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.746972084 CEST	49710	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:42.746980906 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.752054930 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.752830982 CEST	49710	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:42.752840996 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.801721096 CEST	49710	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:42.801734924 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.827651978 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.827780008 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.827864885 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.827907085 CEST	49710	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:42.827907085 CEST	49710	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:42.827924967 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.829317093 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.829386950 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.829509974 CEST	49710	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:42.829519987 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.829634905 CEST	49710	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:42.835123062 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.841165066 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.841244936 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.841309071 CEST	49710	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:42.841320038 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.841450930 CEST	49710	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:42.847174883 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.853058100 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.853095055 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.853730917 CEST	49710	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:42.853799105 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.854439020 CEST	49710	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:42.858515978 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.858572006 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.858650923 CEST	49710	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:42.858663082 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.884840012 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.884881973 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.884921074 CEST	49710	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:42.884932041 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.884989023 CEST	49710	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:42.912317038 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.912511110 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.912955999 CEST	49710	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:42.912971973 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.914302111 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.914391041 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.914434910 CEST	49710	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:42.914443970 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.914525986 CEST	49710	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:42.914532900 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.914608955 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.915004015 CEST	49710	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:42.915014982 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.915184975 CEST	49710	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:42.915257931 CEST	443	49710	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:42.915332079 CEST	49710	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:43.702810049 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 21, 2024 16:59:44.001607895 CEST	443	49712	142.250.181.228	192.168.2.16
Oct 21, 2024 16:59:44.001929045 CEST	49712	443	192.168.2.16	142.250.181.228
Oct 21, 2024 16:59:44.001943111 CEST	443	49712	142.250.181.228	192.168.2.16
Oct 21, 2024 16:59:44.003017902 CEST	443	49712	142.250.181.228	192.168.2.16
Oct 21, 2024 16:59:44.003334999 CEST	49712	443	192.168.2.16	142.250.181.228
Oct 21, 2024 16:59:44.003487110 CEST	49712	443	192.168.2.16	142.250.181.228
Oct 21, 2024 16:59:44.003551006 CEST	443	49712	142.250.181.228	192.168.2.16
Oct 21, 2024 16:59:44.052742958 CEST	49712	443	192.168.2.16	142.250.181.228
Oct 21, 2024 16:59:44.052766085 CEST	443	49712	142.250.181.228	192.168.2.16
Oct 21, 2024 16:59:44.057287931 CEST	49689	80	192.168.2.16	192.229.211.108
Oct 21, 2024 16:59:44.099822044 CEST	49712	443	192.168.2.16	142.250.181.228
Oct 21, 2024 16:59:44.310142040 CEST	49721	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:44.310185909 CEST	443	49721	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:44.310262918 CEST	49721	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:44.310486078 CEST	49721	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:44.310497046 CEST	443	49721	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:44.331341028 CEST	80	49700	45.152.115.161	192.168.2.16
Oct 21, 2024 16:59:44.331424952 CEST	49700	80	192.168.2.16	45.152.115.161
Oct 21, 2024 16:59:44.335958958 CEST	49700	80	192.168.2.16	45.152.115.161
Oct 21, 2024 16:59:44.339303017 CEST	49722	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:44.339344978 CEST	443	49722	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:44.339416027 CEST	49722	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:44.339660883 CEST	49722	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:44.339673042 CEST	443	49722	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:44.341506958 CEST	80	49700	45.152.115.161	192.168.2.16
Oct 21, 2024 16:59:44.903139114 CEST	443	49721	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:44.903693914 CEST	49721	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:44.903723955 CEST	443	49721	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:44.905395985 CEST	443	49721	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:44.905508995 CEST	49721	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:44.906047106 CEST	49721	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:44.906121016 CEST	443	49721	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:44.906511068 CEST	49721	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:44.906521082 CEST	443	49721	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:44.943299055 CEST	443	49722	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:44.943638086 CEST	49722	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:44.943666935 CEST	443	49722	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:44.944047928 CEST	443	49722	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:44.944632053 CEST	49722	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:44.944711924 CEST	443	49722	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:44.946418047 CEST	49722	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:44.961730003 CEST	49721	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:44.987354040 CEST	443	49722	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:44.992822886 CEST	49722	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:45.119477034 CEST	443	49721	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:45.124208927 CEST	443	49722	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:45.124253035 CEST	443	49722	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:45.124278069 CEST	443	49722	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:45.124300003 CEST	443	49722	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:45.124326944 CEST	443	49722	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:45.124334097 CEST	49722	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:45.124355078 CEST	443	49722	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:45.124378920 CEST	49722	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:45.124399900 CEST	49722	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:45.129093885 CEST	443	49722	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:45.130454063 CEST	443	49722	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:45.130520105 CEST	49722	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:45.130527020 CEST	443	49722	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:45.167758942 CEST	49721	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:45.167788982 CEST	443	49721	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:45.169214010 CEST	49721	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:45.169297934 CEST	443	49721	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:45.169488907 CEST	443	49721	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:45.169558048 CEST	49721	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:45.169575930 CEST	49721	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:45.172729969 CEST	49725	443	192.168.2.16	142.251.40.196
Oct 21, 2024 16:59:45.172759056 CEST	443	49725	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:45.172883987 CEST	49725	443	192.168.2.16	142.251.40.196
Oct 21, 2024 16:59:45.173158884 CEST	49725	443	192.168.2.16	142.251.40.196
Oct 21, 2024 16:59:45.173172951 CEST	443	49725	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:45.183727980 CEST	49722	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:45.183758020 CEST	443	49722	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:45.205154896 CEST	443	49722	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:45.205200911 CEST	443	49722	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:45.205214024 CEST	49722	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:45.205221891 CEST	443	49722	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:45.205276012 CEST	49722	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:45.205293894 CEST	443	49722	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:45.206995010 CEST	443	49722	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:45.207072020 CEST	49722	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:45.207077026 CEST	443	49722	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:45.207307100 CEST	49722	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:45.207353115 CEST	443	49722	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:45.207397938 CEST	49722	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:45.258066893 CEST	49701	80	192.168.2.16	45.152.115.161
Oct 21, 2024 16:59:45.263660908 CEST	80	49701	45.152.115.161	192.168.2.16
Oct 21, 2024 16:59:45.270551920 CEST	49726	443	192.168.2.16	142.251.40.196
Oct 21, 2024 16:59:45.270608902 CEST	443	49726	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:45.270719051 CEST	49726	443	192.168.2.16	142.251.40.196
Oct 21, 2024 16:59:45.270977974 CEST	49726	443	192.168.2.16	142.251.40.196
Oct 21, 2024 16:59:45.270992041 CEST	443	49726	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:45.412854910 CEST	49727	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:45.412934065 CEST	443	49727	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:45.413125992 CEST	49727	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:45.413428068 CEST	49727	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:45.413446903 CEST	443	49727	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:45.422889948 CEST	80	49701	45.152.115.161	192.168.2.16
Oct 21, 2024 16:59:45.423553944 CEST	80	49701	45.152.115.161	192.168.2.16
Oct 21, 2024 16:59:45.424007893 CEST	49701	80	192.168.2.16	45.152.115.161
Oct 21, 2024 16:59:45.606678009 CEST	443	49725	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:45.607089996 CEST	49725	443	192.168.2.16	142.251.40.196
Oct 21, 2024 16:59:45.607136011 CEST	443	49725	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:45.607510090 CEST	443	49725	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:45.607831955 CEST	49725	443	192.168.2.16	142.251.40.196
Oct 21, 2024 16:59:45.607903004 CEST	443	49725	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:45.607990026 CEST	49725	443	192.168.2.16	142.251.40.196
Oct 21, 2024 16:59:45.651336908 CEST	443	49725	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:45.703883886 CEST	443	49726	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:45.704113960 CEST	49726	443	192.168.2.16	142.251.40.196
Oct 21, 2024 16:59:45.704143047 CEST	443	49726	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:45.704498053 CEST	443	49726	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:45.704777956 CEST	49726	443	192.168.2.16	142.251.40.196
Oct 21, 2024 16:59:45.704854012 CEST	443	49726	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:45.704879999 CEST	49726	443	192.168.2.16	142.251.40.196
Oct 21, 2024 16:59:45.722804070 CEST	443	49725	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:45.723603964 CEST	443	49725	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:45.726165056 CEST	49725	443	192.168.2.16	142.251.40.196
Oct 21, 2024 16:59:45.727124929 CEST	49725	443	192.168.2.16	142.251.40.196
Oct 21, 2024 16:59:45.727144957 CEST	443	49725	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:45.747340918 CEST	443	49726	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:45.752732038 CEST	49726	443	192.168.2.16	142.251.40.196
Oct 21, 2024 16:59:45.800416946 CEST	443	49726	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:45.800471067 CEST	443	49726	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:45.800503969 CEST	443	49726	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:45.800533056 CEST	443	49726	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:45.800560951 CEST	443	49726	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:45.800590038 CEST	49726	443	192.168.2.16	142.251.40.196
Oct 21, 2024 16:59:45.800595045 CEST	443	49726	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:45.800606966 CEST	443	49726	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:45.800636053 CEST	49726	443	192.168.2.16	142.251.40.196
Oct 21, 2024 16:59:45.800818920 CEST	443	49726	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:45.800864935 CEST	49726	443	192.168.2.16	142.251.40.196
Oct 21, 2024 16:59:45.800874949 CEST	443	49726	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:45.847774029 CEST	49726	443	192.168.2.16	142.251.40.196
Oct 21, 2024 16:59:45.847804070 CEST	443	49726	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:45.881771088 CEST	443	49726	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:45.881814957 CEST	443	49726	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:45.881841898 CEST	443	49726	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:45.881870031 CEST	443	49726	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:45.881875992 CEST	49726	443	192.168.2.16	142.251.40.196
Oct 21, 2024 16:59:45.881907940 CEST	443	49726	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:45.881922960 CEST	49726	443	192.168.2.16	142.251.40.196
Oct 21, 2024 16:59:45.882038116 CEST	49726	443	192.168.2.16	142.251.40.196
Oct 21, 2024 16:59:45.882071972 CEST	443	49726	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:45.882152081 CEST	443	49726	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:45.882461071 CEST	49726	443	192.168.2.16	142.251.40.196
Oct 21, 2024 16:59:45.882471085 CEST	443	49726	142.251.40.196	192.168.2.16
Oct 21, 2024 16:59:45.882488012 CEST	49726	443	192.168.2.16	142.251.40.196
Oct 21, 2024 16:59:45.882515907 CEST	49726	443	192.168.2.16	142.251.40.196
Oct 21, 2024 16:59:46.036197901 CEST	443	49727	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:46.039715052 CEST	49727	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:46.039742947 CEST	443	49727	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:46.040785074 CEST	443	49727	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:46.040879011 CEST	49727	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:46.041415930 CEST	49727	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:46.041462898 CEST	443	49727	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:46.041785955 CEST	49727	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:46.041793108 CEST	443	49727	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:46.086798906 CEST	49727	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:46.102761030 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 21, 2024 16:59:46.235544920 CEST	443	49727	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:46.235588074 CEST	443	49727	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:46.235619068 CEST	443	49727	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:46.235650063 CEST	443	49727	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:46.235663891 CEST	49727	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:46.235673904 CEST	443	49727	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:46.235683918 CEST	443	49727	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:46.235724926 CEST	443	49727	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:46.235729933 CEST	49727	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:46.235744953 CEST	443	49727	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:46.235790014 CEST	49727	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:46.235795021 CEST	443	49727	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:46.236926079 CEST	49727	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:46.236968994 CEST	443	49727	142.250.186.100	192.168.2.16
Oct 21, 2024 16:59:46.237060070 CEST	49727	443	192.168.2.16	142.250.186.100
Oct 21, 2024 16:59:47.851166010 CEST	49733	443	192.168.2.16	184.28.90.27
Oct 21, 2024 16:59:47.851217031 CEST	443	49733	184.28.90.27	192.168.2.16
Oct 21, 2024 16:59:47.851296902 CEST	49733	443	192.168.2.16	184.28.90.27
Oct 21, 2024 16:59:47.853336096 CEST	49733	443	192.168.2.16	184.28.90.27
Oct 21, 2024 16:59:47.853358984 CEST	443	49733	184.28.90.27	192.168.2.16
Oct 21, 2024 16:59:47.926788092 CEST	49734	443	192.168.2.16	172.202.163.200
Oct 21, 2024 16:59:47.926839113 CEST	443	49734	172.202.163.200	192.168.2.16
Oct 21, 2024 16:59:47.926975965 CEST	49734	443	192.168.2.16	172.202.163.200
Oct 21, 2024 16:59:47.928107977 CEST	49734	443	192.168.2.16	172.202.163.200
Oct 21, 2024 16:59:47.928119898 CEST	443	49734	172.202.163.200	192.168.2.16
Oct 21, 2024 16:59:48.444715977 CEST	443	49733	184.28.90.27	192.168.2.16
Oct 21, 2024 16:59:48.444864035 CEST	49733	443	192.168.2.16	184.28.90.27
Oct 21, 2024 16:59:48.449124098 CEST	49733	443	192.168.2.16	184.28.90.27
Oct 21, 2024 16:59:48.449146032 CEST	443	49733	184.28.90.27	192.168.2.16
Oct 21, 2024 16:59:48.449693918 CEST	443	49733	184.28.90.27	192.168.2.16
Oct 21, 2024 16:59:48.490655899 CEST	49733	443	192.168.2.16	184.28.90.27
Oct 21, 2024 16:59:48.531344891 CEST	443	49733	184.28.90.27	192.168.2.16
Oct 21, 2024 16:59:48.580924034 CEST	443	49734	172.202.163.200	192.168.2.16
Oct 21, 2024 16:59:48.581058979 CEST	49734	443	192.168.2.16	172.202.163.200
Oct 21, 2024 16:59:48.583926916 CEST	49734	443	192.168.2.16	172.202.163.200
Oct 21, 2024 16:59:48.583945990 CEST	443	49734	172.202.163.200	192.168.2.16
Oct 21, 2024 16:59:48.584391117 CEST	443	49734	172.202.163.200	192.168.2.16
Oct 21, 2024 16:59:48.623750925 CEST	49734	443	192.168.2.16	172.202.163.200
Oct 21, 2024 16:59:48.648454905 CEST	49734	443	192.168.2.16	172.202.163.200
Oct 21, 2024 16:59:48.659795046 CEST	443	49733	184.28.90.27	192.168.2.16
Oct 21, 2024 16:59:48.659868956 CEST	443	49733	184.28.90.27	192.168.2.16
Oct 21, 2024 16:59:48.659950972 CEST	49733	443	192.168.2.16	184.28.90.27
Oct 21, 2024 16:59:48.660070896 CEST	49733	443	192.168.2.16	184.28.90.27
Oct 21, 2024 16:59:48.660095930 CEST	443	49733	184.28.90.27	192.168.2.16
Oct 21, 2024 16:59:48.660105944 CEST	49733	443	192.168.2.16	184.28.90.27
Oct 21, 2024 16:59:48.660111904 CEST	443	49733	184.28.90.27	192.168.2.16
Oct 21, 2024 16:59:48.691344976 CEST	443	49734	172.202.163.200	192.168.2.16
Oct 21, 2024 16:59:48.691744089 CEST	49735	443	192.168.2.16	184.28.90.27
Oct 21, 2024 16:59:48.691796064 CEST	443	49735	184.28.90.27	192.168.2.16
Oct 21, 2024 16:59:48.691946983 CEST	49735	443	192.168.2.16	184.28.90.27
Oct 21, 2024 16:59:48.692246914 CEST	49735	443	192.168.2.16	184.28.90.27
Oct 21, 2024 16:59:48.692259073 CEST	443	49735	184.28.90.27	192.168.2.16
Oct 21, 2024 16:59:48.863864899 CEST	443	49734	172.202.163.200	192.168.2.16
Oct 21, 2024 16:59:48.863890886 CEST	443	49734	172.202.163.200	192.168.2.16
Oct 21, 2024 16:59:48.863898039 CEST	443	49734	172.202.163.200	192.168.2.16
Oct 21, 2024 16:59:48.863971949 CEST	443	49734	172.202.163.200	192.168.2.16
Oct 21, 2024 16:59:48.864027977 CEST	443	49734	172.202.163.200	192.168.2.16
Oct 21, 2024 16:59:48.864042044 CEST	49734	443	192.168.2.16	172.202.163.200
Oct 21, 2024 16:59:48.864068031 CEST	443	49734	172.202.163.200	192.168.2.16
Oct 21, 2024 16:59:48.864115000 CEST	49734	443	192.168.2.16	172.202.163.200
Oct 21, 2024 16:59:48.864135981 CEST	49734	443	192.168.2.16	172.202.163.200
Oct 21, 2024 16:59:48.865026951 CEST	443	49734	172.202.163.200	192.168.2.16
Oct 21, 2024 16:59:48.865119934 CEST	443	49734	172.202.163.200	192.168.2.16
Oct 21, 2024 16:59:48.865128040 CEST	49734	443	192.168.2.16	172.202.163.200
Oct 21, 2024 16:59:48.865165949 CEST	49734	443	192.168.2.16	172.202.163.200
Oct 21, 2024 16:59:48.875338078 CEST	49734	443	192.168.2.16	172.202.163.200
Oct 21, 2024 16:59:48.875375032 CEST	443	49734	172.202.163.200	192.168.2.16
Oct 21, 2024 16:59:48.875391960 CEST	49734	443	192.168.2.16	172.202.163.200
Oct 21, 2024 16:59:48.875399113 CEST	443	49734	172.202.163.200	192.168.2.16
Oct 21, 2024 16:59:49.284307003 CEST	443	49735	184.28.90.27	192.168.2.16
Oct 21, 2024 16:59:49.284427881 CEST	49735	443	192.168.2.16	184.28.90.27
Oct 21, 2024 16:59:49.285753012 CEST	49735	443	192.168.2.16	184.28.90.27
Oct 21, 2024 16:59:49.285765886 CEST	443	49735	184.28.90.27	192.168.2.16
Oct 21, 2024 16:59:49.285995007 CEST	443	49735	184.28.90.27	192.168.2.16
Oct 21, 2024 16:59:49.287271976 CEST	49735	443	192.168.2.16	184.28.90.27
Oct 21, 2024 16:59:49.327332973 CEST	443	49735	184.28.90.27	192.168.2.16
Oct 21, 2024 16:59:49.683511972 CEST	443	49735	184.28.90.27	192.168.2.16
Oct 21, 2024 16:59:49.683604956 CEST	443	49735	184.28.90.27	192.168.2.16
Oct 21, 2024 16:59:49.683681965 CEST	49735	443	192.168.2.16	184.28.90.27
Oct 21, 2024 16:59:49.684535027 CEST	49735	443	192.168.2.16	184.28.90.27
Oct 21, 2024 16:59:49.684555054 CEST	443	49735	184.28.90.27	192.168.2.16
Oct 21, 2024 16:59:49.684565067 CEST	49735	443	192.168.2.16	184.28.90.27
Oct 21, 2024 16:59:49.684571981 CEST	443	49735	184.28.90.27	192.168.2.16
Oct 21, 2024 16:59:49.770121098 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 21, 2024 16:59:50.070758104 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 21, 2024 16:59:50.516957998 CEST	80	49701	45.152.115.161	192.168.2.16
Oct 21, 2024 16:59:50.517040968 CEST	49701	80	192.168.2.16	45.152.115.161
Oct 21, 2024 16:59:50.676750898 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 21, 2024 16:59:50.915750027 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 21, 2024 16:59:51.765299082 CEST	49701	80	192.168.2.16	45.152.115.161
Oct 21, 2024 16:59:51.770824909 CEST	80	49701	45.152.115.161	192.168.2.16
Oct 21, 2024 16:59:51.891735077 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 21, 2024 16:59:54.007450104 CEST	443	49712	142.250.181.228	192.168.2.16
Oct 21, 2024 16:59:54.007607937 CEST	443	49712	142.250.181.228	192.168.2.16
Oct 21, 2024 16:59:54.007669926 CEST	49712	443	192.168.2.16	142.250.181.228
Oct 21, 2024 16:59:54.225930929 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 21, 2024 16:59:54.305752039 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 21, 2024 16:59:54.533735991 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 21, 2024 16:59:55.136781931 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 21, 2024 16:59:55.663573027 CEST	49712	443	192.168.2.16	142.250.181.228
Oct 21, 2024 16:59:55.663609982 CEST	443	49712	142.250.181.228	192.168.2.16
Oct 21, 2024 16:59:56.347803116 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 21, 2024 16:59:58.761872053 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 21, 2024 16:59:59.113805056 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 21, 2024 17:00:00.530889034 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 21, 2024 17:00:03.563860893 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 21, 2024 17:00:08.724847078 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 21, 2024 17:00:13.163963079 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 21, 2024 17:00:25.183651924 CEST	49736	443	192.168.2.16	172.202.163.200
Oct 21, 2024 17:00:25.183703899 CEST	443	49736	172.202.163.200	192.168.2.16
Oct 21, 2024 17:00:25.183825970 CEST	49736	443	192.168.2.16	172.202.163.200
Oct 21, 2024 17:00:25.184211016 CEST	49736	443	192.168.2.16	172.202.163.200
Oct 21, 2024 17:00:25.184222937 CEST	443	49736	172.202.163.200	192.168.2.16
Oct 21, 2024 17:00:26.462515116 CEST	443	49736	172.202.163.200	192.168.2.16
Oct 21, 2024 17:00:26.462806940 CEST	49736	443	192.168.2.16	172.202.163.200
Oct 21, 2024 17:00:26.464199066 CEST	49736	443	192.168.2.16	172.202.163.200
Oct 21, 2024 17:00:26.464210033 CEST	443	49736	172.202.163.200	192.168.2.16
Oct 21, 2024 17:00:26.464440107 CEST	443	49736	172.202.163.200	192.168.2.16
Oct 21, 2024 17:00:26.466185093 CEST	49736	443	192.168.2.16	172.202.163.200
Oct 21, 2024 17:00:26.507337093 CEST	443	49736	172.202.163.200	192.168.2.16
Oct 21, 2024 17:00:26.681164980 CEST	443	49736	172.202.163.200	192.168.2.16
Oct 21, 2024 17:00:26.681193113 CEST	443	49736	172.202.163.200	192.168.2.16
Oct 21, 2024 17:00:26.681209087 CEST	443	49736	172.202.163.200	192.168.2.16
Oct 21, 2024 17:00:26.681303024 CEST	49736	443	192.168.2.16	172.202.163.200
Oct 21, 2024 17:00:26.681329012 CEST	443	49736	172.202.163.200	192.168.2.16
Oct 21, 2024 17:00:26.681376934 CEST	49736	443	192.168.2.16	172.202.163.200
Oct 21, 2024 17:00:26.682513952 CEST	443	49736	172.202.163.200	192.168.2.16
Oct 21, 2024 17:00:26.682554007 CEST	443	49736	172.202.163.200	192.168.2.16
Oct 21, 2024 17:00:26.682571888 CEST	49736	443	192.168.2.16	172.202.163.200
Oct 21, 2024 17:00:26.682578087 CEST	443	49736	172.202.163.200	192.168.2.16
Oct 21, 2024 17:00:26.682606936 CEST	49736	443	192.168.2.16	172.202.163.200
Oct 21, 2024 17:00:26.684211969 CEST	49736	443	192.168.2.16	172.202.163.200
Oct 21, 2024 17:00:26.684218884 CEST	443	49736	172.202.163.200	192.168.2.16
Oct 21, 2024 17:00:26.684245110 CEST	49736	443	192.168.2.16	172.202.163.200
Oct 21, 2024 17:00:26.684407949 CEST	443	49736	172.202.163.200	192.168.2.16
Oct 21, 2024 17:00:26.684444904 CEST	443	49736	172.202.163.200	192.168.2.16
Oct 21, 2024 17:00:26.684488058 CEST	49736	443	192.168.2.16	172.202.163.200
Oct 21, 2024 17:00:42.431031942 CEST	49738	443	192.168.2.16	142.250.181.228
Oct 21, 2024 17:00:42.431066990 CEST	443	49738	142.250.181.228	192.168.2.16
Oct 21, 2024 17:00:42.431149960 CEST	49738	443	192.168.2.16	142.250.181.228
Oct 21, 2024 17:00:42.431390047 CEST	49738	443	192.168.2.16	142.250.181.228
Oct 21, 2024 17:00:42.431401968 CEST	443	49738	142.250.181.228	192.168.2.16
Oct 21, 2024 17:00:43.838253021 CEST	443	49738	142.250.181.228	192.168.2.16
Oct 21, 2024 17:00:43.838618040 CEST	49738	443	192.168.2.16	142.250.181.228
Oct 21, 2024 17:00:43.838637114 CEST	443	49738	142.250.181.228	192.168.2.16
Oct 21, 2024 17:00:43.838962078 CEST	443	49738	142.250.181.228	192.168.2.16
Oct 21, 2024 17:00:43.839274883 CEST	49738	443	192.168.2.16	142.250.181.228
Oct 21, 2024 17:00:43.839344978 CEST	443	49738	142.250.181.228	192.168.2.16
Oct 21, 2024 17:00:43.883037090 CEST	49738	443	192.168.2.16	142.250.181.228
Oct 21, 2024 17:00:53.041968107 CEST	443	49738	142.250.181.228	192.168.2.16
Oct 21, 2024 17:00:53.042040110 CEST	443	49738	142.250.181.228	192.168.2.16
Oct 21, 2024 17:00:53.042411089 CEST	49738	443	192.168.2.16	142.250.181.228
Oct 21, 2024 17:00:53.764564991 CEST	49738	443	192.168.2.16	142.250.181.228
Oct 21, 2024 17:00:53.764595985 CEST	443	49738	142.250.181.228	192.168.2.16
Oct 21, 2024 17:01:16.947482109 CEST	49740	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:16.947530031 CEST	443	49740	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:16.947607040 CEST	49740	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:16.947902918 CEST	49740	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:16.947920084 CEST	443	49740	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:17.541469097 CEST	443	49740	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:17.542260885 CEST	49740	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:17.542304039 CEST	443	49740	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:17.543206930 CEST	443	49740	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:17.543330908 CEST	49740	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:17.543859005 CEST	49740	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:17.543916941 CEST	443	49740	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:17.544100046 CEST	49740	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:17.544109106 CEST	443	49740	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:17.544178963 CEST	49740	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:17.544218063 CEST	443	49740	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:17.594134092 CEST	49740	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:17.823220015 CEST	443	49740	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:17.823282003 CEST	443	49740	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:17.823359013 CEST	443	49740	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:17.823394060 CEST	49740	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:17.823410988 CEST	443	49740	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:17.823468924 CEST	443	49740	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:17.823508978 CEST	49740	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:17.823533058 CEST	443	49740	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:17.823580980 CEST	49740	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:17.823591948 CEST	443	49740	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:17.828861952 CEST	443	49740	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:17.828952074 CEST	49740	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:17.828960896 CEST	443	49740	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:17.880213022 CEST	49740	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:17.880243063 CEST	443	49740	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:17.904803991 CEST	443	49740	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:17.904840946 CEST	443	49740	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:17.904870033 CEST	443	49740	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:17.904948950 CEST	49740	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:17.904994011 CEST	443	49740	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:17.905057907 CEST	49740	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:17.905642033 CEST	443	49740	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:17.905720949 CEST	49740	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:17.905735970 CEST	443	49740	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:17.960175037 CEST	49740	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:17.960201979 CEST	443	49740	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:17.960764885 CEST	49740	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:17.960890055 CEST	443	49740	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:17.960969925 CEST	49740	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:17.964670897 CEST	49741	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:17.964720964 CEST	443	49741	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:17.964792013 CEST	49741	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:17.965070009 CEST	49741	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:17.965085983 CEST	443	49741	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:17.990127087 CEST	49746	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:17.990174055 CEST	443	49746	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:17.990253925 CEST	49746	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:17.990577936 CEST	49746	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:17.990597010 CEST	443	49746	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:18.405752897 CEST	443	49741	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:18.406172991 CEST	49741	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:18.406193972 CEST	443	49741	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:18.407124996 CEST	443	49741	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:18.407618999 CEST	49741	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:18.407728910 CEST	443	49741	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:18.407799006 CEST	49741	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:18.455339909 CEST	443	49741	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:18.521642923 CEST	443	49741	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:18.521810055 CEST	443	49741	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:18.521888018 CEST	49741	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:18.521918058 CEST	443	49741	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:18.522710085 CEST	443	49741	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:18.522849083 CEST	49741	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:18.523062944 CEST	49741	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:18.523082972 CEST	443	49741	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:18.586802959 CEST	443	49746	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:18.587078094 CEST	49746	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:18.587095022 CEST	443	49746	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:18.588124037 CEST	443	49746	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:18.588182926 CEST	49746	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:18.588460922 CEST	49746	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:18.588531017 CEST	443	49746	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:18.588571072 CEST	49746	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:18.631082058 CEST	49746	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:18.631103039 CEST	443	49746	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:18.679091930 CEST	49746	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:18.800491095 CEST	443	49746	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:18.800533056 CEST	443	49746	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:18.800559998 CEST	443	49746	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:18.800584078 CEST	443	49746	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:18.800599098 CEST	49746	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:18.800614119 CEST	443	49746	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:18.800633907 CEST	443	49746	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:18.800633907 CEST	49746	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:18.800682068 CEST	49746	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:18.800688982 CEST	443	49746	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:18.806332111 CEST	443	49746	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:18.806391954 CEST	49746	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:18.806401968 CEST	443	49746	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:18.854047060 CEST	49746	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:18.854068041 CEST	443	49746	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:18.882399082 CEST	443	49746	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:18.882440090 CEST	443	49746	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:18.882462978 CEST	443	49746	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:18.882497072 CEST	49746	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:18.882514954 CEST	443	49746	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:18.882531881 CEST	49746	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:18.883771896 CEST	443	49746	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:18.883799076 CEST	443	49746	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:18.883825064 CEST	49746	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:18.883832932 CEST	443	49746	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:18.883874893 CEST	49746	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:18.888839006 CEST	443	49746	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:18.934081078 CEST	49746	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:18.934103966 CEST	443	49746	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:18.982059956 CEST	49746	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:19.139600992 CEST	443	49746	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:19.139661074 CEST	443	49746	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:19.139688015 CEST	443	49746	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:19.139717102 CEST	443	49746	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:19.139741898 CEST	443	49746	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:19.139763117 CEST	443	49746	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:19.139760971 CEST	49746	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:19.139790058 CEST	443	49746	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:19.139806032 CEST	49746	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:19.139806032 CEST	49746	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:19.139935017 CEST	443	49746	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:19.140043974 CEST	49746	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:19.140345097 CEST	49746	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:19.140357971 CEST	443	49746	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:19.144247055 CEST	49752	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:19.144272089 CEST	443	49752	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:19.144335032 CEST	49752	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:19.144946098 CEST	49752	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:19.144953012 CEST	443	49752	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:19.574795961 CEST	443	49752	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:19.605627060 CEST	49752	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:19.605660915 CEST	443	49752	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:19.606157064 CEST	443	49752	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:19.611974955 CEST	49752	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:19.612061977 CEST	443	49752	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:19.619621038 CEST	49752	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:19.663332939 CEST	443	49752	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:19.756875038 CEST	443	49752	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:19.756921053 CEST	443	49752	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:19.756949902 CEST	443	49752	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:19.756959915 CEST	49752	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:19.756966114 CEST	443	49752	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:19.756999969 CEST	49752	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:19.757003069 CEST	443	49752	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:19.757060051 CEST	443	49752	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:19.757098913 CEST	49752	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:19.757102013 CEST	443	49752	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:19.757472038 CEST	443	49752	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:19.757499933 CEST	443	49752	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:19.757509947 CEST	49752	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:19.757514000 CEST	443	49752	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:19.757551908 CEST	49752	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:19.838006020 CEST	443	49752	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:19.838088989 CEST	443	49752	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:19.838120937 CEST	443	49752	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:19.838176012 CEST	49752	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:19.838185072 CEST	443	49752	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:19.838223934 CEST	49752	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:19.838228941 CEST	443	49752	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:19.838922977 CEST	443	49752	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:19.838954926 CEST	443	49752	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:19.838970900 CEST	49752	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:19.838974953 CEST	443	49752	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:19.839031935 CEST	49752	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:19.839035988 CEST	443	49752	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:19.839510918 CEST	443	49752	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:19.839559078 CEST	49752	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:19.839562893 CEST	443	49752	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:19.891300917 CEST	49752	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:19.919637918 CEST	443	49752	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:19.919723988 CEST	443	49752	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:19.919754028 CEST	443	49752	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:19.919783115 CEST	443	49752	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:19.919800043 CEST	49752	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:19.919814110 CEST	443	49752	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:19.919836044 CEST	49752	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:19.920288086 CEST	443	49752	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:19.920341015 CEST	49752	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:19.920648098 CEST	49752	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:19.920665979 CEST	443	49752	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:21.394243002 CEST	49754	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:21.394283056 CEST	443	49754	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:21.394385099 CEST	49754	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:21.394630909 CEST	49754	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:21.394645929 CEST	443	49754	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:21.987399101 CEST	443	49754	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:21.987868071 CEST	49754	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:21.987905979 CEST	443	49754	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:21.988220930 CEST	443	49754	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:21.988615990 CEST	49754	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:21.988667965 CEST	443	49754	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:21.988770962 CEST	49754	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:21.988826036 CEST	49754	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:21.988840103 CEST	443	49754	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:22.189493895 CEST	443	49754	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:22.189552069 CEST	443	49754	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:22.189569950 CEST	443	49754	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:22.189600945 CEST	443	49754	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:22.189625025 CEST	443	49754	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:22.189671993 CEST	49754	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:22.189703941 CEST	443	49754	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:22.189714909 CEST	49754	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:22.189747095 CEST	49754	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:22.190561056 CEST	443	49754	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:22.190695047 CEST	49754	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:22.190726995 CEST	443	49754	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:22.190782070 CEST	49754	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:22.193299055 CEST	49755	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:22.193352938 CEST	443	49755	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:22.193440914 CEST	49755	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:22.193856001 CEST	49755	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:22.193870068 CEST	443	49755	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:22.194236994 CEST	49756	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:22.194284916 CEST	443	49756	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:22.194336891 CEST	49756	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:22.194561005 CEST	49756	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:22.194571972 CEST	443	49756	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:22.627212048 CEST	443	49755	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:22.627615929 CEST	49755	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:22.627643108 CEST	443	49755	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:22.627963066 CEST	443	49755	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:22.628355026 CEST	49755	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:22.628410101 CEST	443	49755	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:22.628540993 CEST	49755	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:22.671336889 CEST	443	49755	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:22.745675087 CEST	443	49755	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:22.745805025 CEST	443	49755	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:22.745862007 CEST	49755	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:22.745899916 CEST	443	49755	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:22.746222973 CEST	443	49755	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:22.746284962 CEST	49755	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:22.747186899 CEST	49755	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:22.747205019 CEST	443	49755	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:22.786663055 CEST	443	49756	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:22.787033081 CEST	49756	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:22.787049055 CEST	443	49756	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:22.787962914 CEST	443	49756	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:22.788041115 CEST	49756	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:22.788415909 CEST	49756	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:22.788477898 CEST	443	49756	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:22.788585901 CEST	49756	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:22.788595915 CEST	443	49756	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:22.841104031 CEST	49756	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:22.974366903 CEST	443	49756	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:22.974420071 CEST	443	49756	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:22.974447966 CEST	443	49756	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:22.974471092 CEST	443	49756	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:22.974502087 CEST	49756	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:22.974523067 CEST	443	49756	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:22.974534988 CEST	49756	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:22.975416899 CEST	49756	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:22.975477934 CEST	443	49756	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:22.975548983 CEST	49756	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:22.978424072 CEST	49757	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:22.978535891 CEST	443	49757	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:22.978686094 CEST	49757	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:22.979034901 CEST	49757	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:22.979049921 CEST	443	49757	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:23.147665024 CEST	49758	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:23.147703886 CEST	443	49758	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:23.147780895 CEST	49758	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:23.147990942 CEST	49758	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:23.148000002 CEST	443	49758	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:23.727896929 CEST	443	49757	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:23.728332043 CEST	49757	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:23.728403091 CEST	443	49757	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:23.728769064 CEST	443	49757	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:23.729096889 CEST	49757	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:23.729175091 CEST	443	49757	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:23.729237080 CEST	49757	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:23.743942022 CEST	443	49758	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:23.744250059 CEST	49758	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:23.744273901 CEST	443	49758	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:23.745277882 CEST	443	49758	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:23.745373011 CEST	49758	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:23.745650053 CEST	49758	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:23.745711088 CEST	443	49758	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:23.745851994 CEST	49758	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:23.745863914 CEST	443	49758	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:23.745915890 CEST	49758	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:23.745937109 CEST	443	49758	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:23.771337986 CEST	443	49757	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:23.798135042 CEST	49758	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:23.846985102 CEST	443	49757	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:23.847048998 CEST	443	49757	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:23.847084999 CEST	443	49757	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:23.847165108 CEST	49757	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:23.847193956 CEST	443	49757	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:23.847232103 CEST	49757	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:23.847564936 CEST	443	49757	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:23.849009037 CEST	443	49757	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:23.849075079 CEST	49757	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:23.849275112 CEST	49757	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:23.849289894 CEST	443	49757	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:23.943564892 CEST	443	49758	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:23.943618059 CEST	443	49758	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:23.943660021 CEST	443	49758	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:23.943698883 CEST	443	49758	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:23.943716049 CEST	49758	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:23.943747044 CEST	443	49758	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:23.943758965 CEST	49758	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:23.989110947 CEST	49758	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:23.989128113 CEST	443	49758	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:23.989367962 CEST	49758	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:23.989507914 CEST	443	49758	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:23.989576101 CEST	49758	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:23.992002964 CEST	49759	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:23.992060900 CEST	443	49759	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:23.992141962 CEST	49759	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:23.992281914 CEST	49760	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:23.992321968 CEST	443	49760	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:23.992379904 CEST	49760	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:23.992506027 CEST	49759	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:23.992526054 CEST	443	49759	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:23.992662907 CEST	49760	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:23.992675066 CEST	443	49760	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:24.428785086 CEST	443	49759	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:24.429241896 CEST	49759	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:24.429311991 CEST	443	49759	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:24.429676056 CEST	443	49759	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:24.429965973 CEST	49759	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:24.430039883 CEST	443	49759	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:24.430130959 CEST	49759	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:24.471337080 CEST	443	49759	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:24.545994997 CEST	443	49759	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:24.546164036 CEST	443	49759	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:24.546251059 CEST	49759	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:24.546288967 CEST	443	49759	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:24.546597958 CEST	443	49759	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:24.546652079 CEST	49759	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:24.548553944 CEST	49759	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:24.548568010 CEST	443	49759	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:24.899595022 CEST	443	49760	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:24.899955988 CEST	49760	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:24.899977922 CEST	443	49760	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:24.900867939 CEST	443	49760	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:24.900939941 CEST	49760	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:24.901309013 CEST	49760	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:24.901370049 CEST	443	49760	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:24.901468992 CEST	49760	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:24.901478052 CEST	443	49760	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:24.946115971 CEST	49760	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:25.087945938 CEST	443	49760	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:25.088079929 CEST	443	49760	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:25.088143110 CEST	49760	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:25.088160038 CEST	443	49760	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:25.088242054 CEST	443	49760	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:25.088294029 CEST	49760	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:25.088303089 CEST	443	49760	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:25.138112068 CEST	49760	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:25.138138056 CEST	443	49760	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:25.138323069 CEST	49760	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:25.138412952 CEST	443	49760	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:25.138474941 CEST	49760	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:25.141434908 CEST	49761	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:25.141478062 CEST	443	49761	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:25.141550064 CEST	49761	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:25.141801119 CEST	49761	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:25.141820908 CEST	443	49761	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:25.577924967 CEST	443	49761	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:25.578295946 CEST	49761	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:25.578311920 CEST	443	49761	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:25.578648090 CEST	443	49761	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:25.578944921 CEST	49761	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:25.579006910 CEST	443	49761	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:25.579073906 CEST	49761	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:25.619417906 CEST	443	49761	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:25.667108059 CEST	49762	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:25.667175055 CEST	443	49762	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:25.667273998 CEST	49762	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:25.667500019 CEST	49762	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:25.667517900 CEST	443	49762	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:25.698998928 CEST	443	49761	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:25.699038029 CEST	443	49761	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:25.699078083 CEST	443	49761	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:25.699115992 CEST	49761	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:25.699136019 CEST	443	49761	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:25.699182987 CEST	49761	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:25.699837923 CEST	443	49761	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:25.699878931 CEST	49761	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:25.699901104 CEST	49761	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:26.267822027 CEST	443	49762	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:26.268172979 CEST	49762	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:26.268188953 CEST	443	49762	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:26.269068003 CEST	443	49762	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:26.269150972 CEST	49762	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:26.269419909 CEST	49762	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:26.269475937 CEST	443	49762	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:26.269573927 CEST	49762	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:26.269582033 CEST	443	49762	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:26.269618988 CEST	49762	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:26.269655943 CEST	443	49762	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:26.319103003 CEST	49762	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:26.457793951 CEST	443	49762	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:26.457938910 CEST	443	49762	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:26.458031893 CEST	443	49762	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:26.458039045 CEST	49762	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:26.458070040 CEST	443	49762	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:26.458117962 CEST	49762	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:26.458137035 CEST	443	49762	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:26.511172056 CEST	49762	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:26.511209011 CEST	443	49762	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:26.511646986 CEST	49762	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:26.511859894 CEST	443	49762	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:26.511959076 CEST	49762	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:26.514353991 CEST	49763	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:26.514393091 CEST	443	49763	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:26.514503956 CEST	49763	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:26.514674902 CEST	49764	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:26.514710903 CEST	443	49764	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:26.514811039 CEST	49764	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:26.514955044 CEST	49763	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:26.514972925 CEST	443	49763	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:26.515137911 CEST	49764	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:26.515151978 CEST	443	49764	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:26.953952074 CEST	443	49763	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:26.955966949 CEST	49763	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:26.955986023 CEST	443	49763	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:26.956701994 CEST	443	49763	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:26.960793972 CEST	49763	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:26.960871935 CEST	443	49763	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:26.960891008 CEST	49763	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:27.003345966 CEST	443	49763	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:27.007642984 CEST	49763	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:27.074229956 CEST	443	49763	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:27.074281931 CEST	443	49763	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:27.074335098 CEST	49763	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:27.074347973 CEST	443	49763	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:27.075272083 CEST	49763	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:27.075386047 CEST	443	49763	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:27.075448036 CEST	49763	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:27.123454094 CEST	443	49764	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:27.124675035 CEST	49764	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:27.124697924 CEST	443	49764	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:27.126204967 CEST	443	49764	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:27.126297951 CEST	49764	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:27.126719952 CEST	49764	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:27.126719952 CEST	49764	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:27.126732111 CEST	443	49764	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:27.126800060 CEST	443	49764	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:27.167335987 CEST	49764	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:27.167359114 CEST	443	49764	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:27.214083910 CEST	49764	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:27.309345007 CEST	443	49764	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:27.309454918 CEST	443	49764	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:27.309531927 CEST	443	49764	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:27.309608936 CEST	443	49764	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:27.309668064 CEST	49764	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:27.309668064 CEST	49764	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:27.309680939 CEST	443	49764	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:27.309710026 CEST	443	49764	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:27.310345888 CEST	49764	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:27.310359955 CEST	443	49764	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:27.315395117 CEST	49764	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:27.315506935 CEST	443	49764	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:27.315608025 CEST	49764	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:27.318572998 CEST	49765	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:27.318639040 CEST	443	49765	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:27.318759918 CEST	49765	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:27.319031954 CEST	49765	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:27.319050074 CEST	443	49765	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:27.762347937 CEST	443	49765	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:27.762727022 CEST	49765	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:27.762790918 CEST	443	49765	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:27.766398907 CEST	443	49765	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:27.766531944 CEST	49765	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:27.766822100 CEST	49765	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:27.766915083 CEST	443	49765	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:27.766930103 CEST	49765	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:27.807368040 CEST	443	49765	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:27.818094969 CEST	49765	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:27.818109035 CEST	443	49765	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:27.866208076 CEST	49765	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:27.881218910 CEST	443	49765	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:27.881373882 CEST	443	49765	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:27.881445885 CEST	49765	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:27.881481886 CEST	443	49765	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:27.881591082 CEST	443	49765	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:27.881644011 CEST	49765	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:27.881654024 CEST	443	49765	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:27.881990910 CEST	443	49765	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:27.882082939 CEST	49765	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:27.882302046 CEST	49765	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:27.882320881 CEST	443	49765	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:35.482789993 CEST	49766	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:35.482836008 CEST	443	49766	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:35.482914925 CEST	49766	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:35.483129025 CEST	49766	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:35.483139992 CEST	443	49766	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:36.083195925 CEST	443	49766	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:36.083560944 CEST	49766	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:36.083589077 CEST	443	49766	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:36.084613085 CEST	443	49766	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:36.084692955 CEST	49766	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:36.084979057 CEST	49766	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:36.085032940 CEST	443	49766	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:36.085123062 CEST	49766	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:36.085129023 CEST	443	49766	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:36.085263014 CEST	49766	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:36.085280895 CEST	443	49766	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:36.270040989 CEST	443	49766	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:36.270081043 CEST	443	49766	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:36.270112038 CEST	443	49766	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:36.270139933 CEST	443	49766	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:36.270140886 CEST	49766	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:36.270168066 CEST	443	49766	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:36.270184040 CEST	49766	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:36.325128078 CEST	49766	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:36.325158119 CEST	443	49766	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:36.325790882 CEST	49766	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:36.325850964 CEST	443	49766	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:36.325907946 CEST	49766	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:36.328573942 CEST	49767	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:36.328618050 CEST	443	49767	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:36.328691959 CEST	49767	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:36.328861952 CEST	49768	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:36.328893900 CEST	443	49768	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:36.328938961 CEST	49768	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:36.329102993 CEST	49767	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:36.329113960 CEST	443	49767	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:36.329260111 CEST	49768	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:36.329269886 CEST	443	49768	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:36.768083096 CEST	443	49768	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:36.769041061 CEST	49768	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:36.769057035 CEST	443	49768	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:36.769391060 CEST	443	49768	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:36.771277905 CEST	49768	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:36.771351099 CEST	443	49768	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:36.773134947 CEST	49768	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:36.819322109 CEST	443	49768	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:36.887687922 CEST	443	49768	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:36.887820959 CEST	443	49768	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:36.887881994 CEST	49768	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:36.887901068 CEST	443	49768	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:36.888477087 CEST	443	49768	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:36.888531923 CEST	49768	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:36.888792992 CEST	49768	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:36.888808012 CEST	443	49768	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:36.919653893 CEST	443	49767	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:36.919969082 CEST	49767	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:36.919991016 CEST	443	49767	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:36.921020985 CEST	443	49767	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:36.921116114 CEST	49767	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:36.921384096 CEST	49767	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:36.921431065 CEST	443	49767	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:36.921514988 CEST	49767	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:36.921519995 CEST	443	49767	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:36.964150906 CEST	49767	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:37.120170116 CEST	443	49767	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:37.120218992 CEST	443	49767	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:37.120248079 CEST	443	49767	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:37.120276928 CEST	443	49767	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:37.120317936 CEST	49767	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:37.120342016 CEST	443	49767	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:37.120352030 CEST	49767	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:37.121099949 CEST	49767	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:37.121145010 CEST	443	49767	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:37.121308088 CEST	443	49767	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:37.121313095 CEST	49767	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:37.121352911 CEST	49767	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:37.124109983 CEST	49769	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:37.124150991 CEST	443	49769	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:37.124226093 CEST	49769	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:37.124439955 CEST	49769	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:37.124453068 CEST	443	49769	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:37.557230949 CEST	443	49769	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:37.557609081 CEST	49769	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:37.557645082 CEST	443	49769	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:37.558006048 CEST	443	49769	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:37.558319092 CEST	49769	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:37.558386087 CEST	443	49769	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:37.558440924 CEST	49769	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:37.584052086 CEST	49770	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:37.584095001 CEST	443	49770	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:37.584181070 CEST	49770	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:37.584395885 CEST	49770	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:37.584403038 CEST	443	49770	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:37.599384069 CEST	443	49769	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:37.676707029 CEST	443	49769	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:37.676822901 CEST	443	49769	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:37.676907063 CEST	49769	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:37.676920891 CEST	443	49769	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:37.676954031 CEST	443	49769	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:37.676997900 CEST	49769	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:37.677028894 CEST	443	49769	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:37.677349091 CEST	443	49769	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:37.677401066 CEST	49769	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:37.677844048 CEST	49769	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:37.677865028 CEST	443	49769	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:38.180516005 CEST	443	49770	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:38.180846930 CEST	49770	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:38.180881977 CEST	443	49770	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:38.181854010 CEST	443	49770	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:38.182061911 CEST	49770	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:38.182245970 CEST	49770	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:38.182305098 CEST	443	49770	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:38.182384014 CEST	49770	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:38.182393074 CEST	443	49770	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:38.182413101 CEST	49770	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:38.182466030 CEST	443	49770	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:38.222174883 CEST	49770	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:38.541496992 CEST	443	49770	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:38.541630030 CEST	443	49770	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:38.541696072 CEST	49770	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:38.541727066 CEST	443	49770	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:38.541802883 CEST	443	49770	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:38.541848898 CEST	49770	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:38.541855097 CEST	443	49770	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:38.542134047 CEST	443	49770	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:38.542187929 CEST	49770	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:38.542606115 CEST	49770	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:38.542627096 CEST	443	49770	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:38.545098066 CEST	49771	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:38.545151949 CEST	443	49771	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:38.545231104 CEST	49771	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:38.545355082 CEST	49772	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:38.545391083 CEST	443	49772	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:38.545442104 CEST	49772	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:38.545583963 CEST	49771	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:38.545597076 CEST	443	49771	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:38.545731068 CEST	49772	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:38.545742035 CEST	443	49772	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:38.983504057 CEST	443	49771	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:38.983886003 CEST	49771	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:38.983956099 CEST	443	49771	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:38.984384060 CEST	443	49771	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:38.984703064 CEST	49771	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:38.984792948 CEST	443	49771	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:38.984833956 CEST	49771	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:39.027342081 CEST	443	49771	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:39.037255049 CEST	49771	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:39.100907087 CEST	443	49771	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:39.100951910 CEST	443	49771	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:39.101109028 CEST	49771	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:39.101178885 CEST	443	49771	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:39.101212978 CEST	443	49771	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:39.101284027 CEST	49771	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:39.102195978 CEST	49771	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:39.102229118 CEST	443	49771	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:39.144047022 CEST	443	49772	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:39.144380093 CEST	49772	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:39.144403934 CEST	443	49772	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:39.145498037 CEST	443	49772	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:39.145893097 CEST	49772	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:39.146033049 CEST	49772	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:39.146040916 CEST	443	49772	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:39.146099091 CEST	443	49772	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:39.195180893 CEST	49772	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:39.352946043 CEST	443	49772	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:39.353082895 CEST	443	49772	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:39.353152990 CEST	49772	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:39.353169918 CEST	443	49772	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:39.353247881 CEST	443	49772	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:39.353296995 CEST	49772	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:39.353302956 CEST	443	49772	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:39.403160095 CEST	49772	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:39.403172016 CEST	443	49772	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:39.405493975 CEST	49772	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:39.405823946 CEST	443	49772	216.58.206.36	192.168.2.16
Oct 21, 2024 17:01:39.405913115 CEST	49772	443	192.168.2.16	216.58.206.36
Oct 21, 2024 17:01:39.409352064 CEST	49773	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:39.409434080 CEST	443	49773	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:39.409526110 CEST	49773	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:39.409739017 CEST	49773	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:39.409773111 CEST	443	49773	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:39.848720074 CEST	443	49773	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:39.849081039 CEST	49773	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:39.849109888 CEST	443	49773	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:39.849466085 CEST	443	49773	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:39.849953890 CEST	49773	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:39.850024939 CEST	443	49773	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:39.850115061 CEST	49773	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:39.895338058 CEST	443	49773	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:39.975263119 CEST	443	49773	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:39.975368977 CEST	443	49773	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:39.975425959 CEST	443	49773	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:39.975450039 CEST	49773	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:39.975474119 CEST	443	49773	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:39.975517988 CEST	49773	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:39.975523949 CEST	443	49773	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:39.976174116 CEST	49773	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:39.976233959 CEST	443	49773	142.251.40.196	192.168.2.16
Oct 21, 2024 17:01:39.976293087 CEST	49773	443	192.168.2.16	142.251.40.196
Oct 21, 2024 17:01:42.501147985 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 21, 2024 17:01:42.501207113 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 21, 2024 17:01:42.501554966 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 21, 2024 17:01:42.501554966 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 21, 2024 17:01:42.501600981 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 21, 2024 17:01:43.398699999 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 21, 2024 17:01:43.440133095 CEST	49774	443	192.168.2.16	142.250.181.228

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 21, 2024 16:59:37.591902018 CEST	53	56356	1.1.1.1	192.168.2.16
Oct 21, 2024 16:59:37.660913944 CEST	53	52995	1.1.1.1	192.168.2.16
Oct 21, 2024 16:59:38.524641037 CEST	60387	53	192.168.2.16	1.1.1.1
Oct 21, 2024 16:59:38.524787903 CEST	59197	53	192.168.2.16	1.1.1.1
Oct 21, 2024 16:59:38.634445906 CEST	53	60387	1.1.1.1	192.168.2.16
Oct 21, 2024 16:59:38.649028063 CEST	53	59197	1.1.1.1	192.168.2.16
Oct 21, 2024 16:59:38.693420887 CEST	53	52085	1.1.1.1	192.168.2.16
Oct 21, 2024 16:59:39.340071917 CEST	65479	53	192.168.2.16	1.1.1.1
Oct 21, 2024 16:59:39.340217113 CEST	52853	53	192.168.2.16	1.1.1.1
Oct 21, 2024 16:59:39.348679066 CEST	53	53063	1.1.1.1	192.168.2.16
Oct 21, 2024 16:59:39.348726988 CEST	53	65479	1.1.1.1	192.168.2.16
Oct 21, 2024 16:59:39.350048065 CEST	53	52853	1.1.1.1	192.168.2.16
Oct 21, 2024 16:59:40.137517929 CEST	62105	53	192.168.2.16	1.1.1.1
Oct 21, 2024 16:59:40.137703896 CEST	61592	53	192.168.2.16	1.1.1.1
Oct 21, 2024 16:59:40.147296906 CEST	53	62105	1.1.1.1	192.168.2.16
Oct 21, 2024 16:59:40.147990942 CEST	53	61592	1.1.1.1	192.168.2.16
Oct 21, 2024 16:59:40.372226954 CEST	53	58437	1.1.1.1	192.168.2.16
Oct 21, 2024 16:59:41.939337969 CEST	58223	53	192.168.2.16	1.1.1.1
Oct 21, 2024 16:59:41.939486980 CEST	64306	53	192.168.2.16	1.1.1.1
Oct 21, 2024 16:59:41.947756052 CEST	53	58223	1.1.1.1	192.168.2.16
Oct 21, 2024 16:59:41.947771072 CEST	53	64306	1.1.1.1	192.168.2.16
Oct 21, 2024 16:59:42.047674894 CEST	53	59758	1.1.1.1	192.168.2.16
Oct 21, 2024 16:59:42.368628979 CEST	61728	53	192.168.2.16	1.1.1.1
Oct 21, 2024 16:59:42.368772030 CEST	51016	53	192.168.2.16	1.1.1.1
Oct 21, 2024 16:59:42.376286030 CEST	53	51016	1.1.1.1	192.168.2.16
Oct 21, 2024 16:59:42.377619982 CEST	53	61728	1.1.1.1	192.168.2.16
Oct 21, 2024 16:59:55.672092915 CEST	53	52447	1.1.1.1	192.168.2.16
Oct 21, 2024 17:00:15.569840908 CEST	53	56557	1.1.1.1	192.168.2.16
Oct 21, 2024 17:00:37.506135941 CEST	53	65308	1.1.1.1	192.168.2.16
Oct 21, 2024 17:00:37.650296926 CEST	53	54346	1.1.1.1	192.168.2.16
Oct 21, 2024 17:00:45.934448004 CEST	138	138	192.168.2.16	192.168.2.255
Oct 21, 2024 17:01:06.322350025 CEST	53	52336	1.1.1.1	192.168.2.16
Oct 21, 2024 17:01:16.938554049 CEST	64418	53	192.168.2.16	1.1.1.1
Oct 21, 2024 17:01:16.938682079 CEST	56754	53	192.168.2.16	1.1.1.1
Oct 21, 2024 17:01:16.946283102 CEST	53	56754	1.1.1.1	192.168.2.16
Oct 21, 2024 17:01:16.946903944 CEST	53	64418	1.1.1.1	192.168.2.16

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 21, 2024 16:59:38.524641037 CEST	192.168.2.16	1.1.1.1	0xac45	Standard query (0)	www.wagtg.com	A (IP address)	IN (0x0001)	false
Oct 21, 2024 16:59:38.524787903 CEST	192.168.2.16	1.1.1.1	0x65d0	Standard query (0)	www.wagtg.com	65	IN (0x0001)	false
Oct 21, 2024 16:59:39.340071917 CEST	192.168.2.16	1.1.1.1	0xede7	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 21, 2024 16:59:39.340217113 CEST	192.168.2.16	1.1.1.1	0x3eba	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 21, 2024 16:59:40.137517929 CEST	192.168.2.16	1.1.1.1	0xf079	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 21, 2024 16:59:40.137703896 CEST	192.168.2.16	1.1.1.1	0x8431	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 21, 2024 16:59:41.939337969 CEST	192.168.2.16	1.1.1.1	0xbc7	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 21, 2024 16:59:41.939486980 CEST	192.168.2.16	1.1.1.1	0x71a0	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 21, 2024 16:59:42.368628979 CEST	192.168.2.16	1.1.1.1	0x4bd1	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 21, 2024 16:59:42.368772030 CEST	192.168.2.16	1.1.1.1	0xe6f5	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 21, 2024 17:01:16.938554049 CEST	192.168.2.16	1.1.1.1	0x774a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 21, 2024 17:01:16.938682079 CEST	192.168.2.16	1.1.1.1	0x5bca	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Oct 21, 2024 16:59:38.634445906 CEST	1.1.1.1	192.168.2.16	0xac45	No error (0)	www.wagtg.com	45.152.115.161	A (IP address)	IN (0x0001)	false
Oct 21, 2024 16:59:39.348726988 CEST	1.1.1.1	192.168.2.16	0xede7	No error (0)	www.google.com	142.250.186.100	A (IP address)	IN (0x0001)	false
Oct 21, 2024 16:59:39.350048065 CEST	1.1.1.1	192.168.2.16	0x3eba	No error (0)	www.google.com		65	IN (0x0001)	false
Oct 21, 2024 16:59:40.147990942 CEST	1.1.1.1	192.168.2.16	0x8431	No error (0)	www.google.com		65	IN (0x0001)	false
Oct 21, 2024 16:59:40.575674057 CEST	1.1.1.1	192.168.2.16	0xbd84	No error (0)	www.google.com	142.251.40.196	A (IP address)	IN (0x0001)	false
Oct 21, 2024 16:59:41.947756052 CEST	1.1.1.1	192.168.2.16	0xbc7	No error (0)	www.google.com	142.250.186.100	A (IP address)	IN (0x0001)	false
Oct 21, 2024 16:59:41.947771072 CEST	1.1.1.1	192.168.2.16	0x71a0	No error (0)	www.google.com		65	IN (0x0001)	false
Oct 21, 2024 16:59:42.376286030 CEST	1.1.1.1	192.168.2.16	0xe6f5	No error (0)	www.google.com		65	IN (0x0001)	false
Oct 21, 2024 16:59:42.377619982 CEST	1.1.1.1	192.168.2.16	0x4bd1	No error (0)	www.google.com	142.250.181.228	A (IP address)	IN (0x0001)	false
Oct 21, 2024 17:01:16.946283102 CEST	1.1.1.1	192.168.2.16	0x5bca	No error (0)	www.google.com		65	IN (0x0001)	false
Oct 21, 2024 17:01:16.946903944 CEST	1.1.1.1	192.168.2.16	0x774a	No error (0)	www.google.com	216.58.206.36	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.wagtg.com

www.google.com

https:

slscr.update.microsoft.com

fs.microsoft.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49700	45.152.115.161	80	428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 21, 2024 16:59:38.655205011 CEST	428	OUT	GET / HTTP/1.1 Host: www.wagtg.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 21, 2024 16:59:39.300597906 CEST	966	IN	HTTP/1.1 200 OK set-cookie: PHPSESSID=laqgctho1ugnqql20lria3sg3v; path=/ expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache content-type: text/html; charset=UTF-8 content-encoding: gzip vary: Accept-Encoding content-length: 591 date: Mon, 21 Oct 2024 14:59:39 GMT server: LiteSpeed connection: Keep-Alive Data Raw: 1f 8b 08 00 00 00 00 00 00 03 75 52 4d 6f db 30 0c 3d a7 40 ff 83 0e 1b 94 02 b5 9d 34 6b 8b 39 71 81 61 2b ba 01 3b 0c 5b 07 ec 36 a8 32 63 2b 95 25 55 a2 e3 04 45 fe fb 24 db 69 3e d6 ea 60 50 e4 e3 f3 e3 a3 66 15 20 23 8a 55 90 d1 a5 80 c6 68 8b 94 70 ad 10 14 66 b4 11 39 96 59 0e 4b c1 21 6a 2f e7 44 28 81 82 c9 c8 71 26 21 1b 53 92 dc 9c 9e cc 1c b7 c2 20 71 96 67 b4 44 34 2e 4d 92 a6 69 e2 42 eb 42 42 cc 75 95 58 e0 cc 20 2f 59 c2 8c 88 17 8e de cc 92 ae 2d 10 cc b5 ad 88 57 53 ea 3c a3 46 3b 2f a3 93 55 ad 43 89 7a 0c f1 67 96 8b 65 17 85 e3 70 ed 35 04 b8 d7 a4 55 4a d8 83 d3 b2 46 98 12 d4 26 25 97 a3 f7 53 22 61 8e 7d 58 31 5b 08 15 b5 b5 68 72 6d 56 2f a9 0e 14 8d 2f 47 21 d9 8e 9a 92 c9 a8 bd 95 20 8a d2 57 af 3f f8 1b dd fd 9d 4b e6 5c 46 8b e8 65 b2 bd a2 c8 df aa e4 0c 59 e4 05 c3 23 ac 33 7a f5 7d fe 8d 55 bf 9f 3e b5 e7 af 59 fc 90 77 91 bd fd 7a ff 71 64 2e fe 5c dc e3 a4 19 df 5e 7d 69 8e 09 bc fb f2 81 f1 c7 8c 6a f5 13 b0 b6 ea 73 9f 39 46 62 09 c1 47 19 86 e8 6b de 79 ef 63 b0 [TRUNCATED] Data Ascii: uRMo0=@4k9qa+;[62c+%UE$i>`Pf #Uhpf9YK!j/D(q&!S qgD4.MiBBBuX /Y-WS<F;/UCzgep5UJF&%S"a}X1[hrmV//G! W?K\FeY#3z}U>Ywzqd.\^}ijs9FbGkyc=[;KsC.%:q<oq%qm&d]v%xyx-ZpF+gy7a@dR`cS:!Ap'`0R=C`+/VSLlKFX1_h*gV[rx<&Ly@[n&JWY6 g$on)l7$w<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49701	45.152.115.161	80	428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 21, 2024 16:59:45.258066893 CEST	416	OUT	GET /favicon.ico HTTP/1.1 Host: www.wagtg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.wagtg.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=laqgctho1ugnqql20lria3sg3v
Oct 21, 2024 16:59:45.422889948 CEST	284	IN	HTTP/1.1 404 Not Found content-type: text/html cache-control: private, no-cache, max-age=0 pragma: no-cache date: Mon, 21 Oct 2024 14:59:45 GMT server: LiteSpeed content-encoding: gzip vary: Accept-Encoding transfer-encoding: chunked connection: Keep-Alive Data Raw: 61 0d 0a 1f 8b 08 00 00 00 00 00 00 03 0d 0a Data Ascii: a
Oct 21, 2024 16:59:45.423553944 CEST	713	IN	Data Raw: 32 62 64 0d 0a 65 54 6b 6b db 30 14 fd 5e d8 7f b8 4d 19 b4 10 27 76 ea b0 61 3b 66 63 0f 36 18 5b a1 85 b1 8f b2 75 1d 89 ca 92 27 29 af 95 fe f7 5d d9 49 9a b6 16 d8 92 7c 75 74 ee 39 57 2a ce 3f ff fa 74 f7 e7 e6 0b 08 df aa f2 ac 08 1f 70 7e Data Ascii: 2bdeTkk0^M'va;fc6[u')]I\|ut9W?tp~p1(gI_8}Z4k)`-qGPQh#kYc `18at/8WY1RE.\v.2pqfw6@!Edt,CH4

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49703	142.250.186.100	443	428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 14:59:39 UTC	619	OUT	GET /recaptcha/api.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.wagtg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 14:59:40 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Mon, 21 Oct 2024 14:59:40 GMT Date: Mon, 21 Oct 2024 14:59:40 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-21 14:59:40 UTC	629	IN	Data Raw: 35 39 61 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 59a/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-10-21 14:59:40 UTC	812	IN	Data Raw: 4c 52 69 76 44 37 67 6c 63 41 55 41 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 64 57 56 39 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 29 7b 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 Data Ascii: LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDepre
2024-10-21 14:59:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49708	142.251.40.196	443	428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 14:59:41 UTC	447	OUT	GET /recaptcha/api.js HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 14:59:41 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Mon, 21 Oct 2024 14:59:41 GMT Date: Mon, 21 Oct 2024 14:59:41 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-21 14:59:41 UTC	629	IN	Data Raw: 35 39 61 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 59a/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-10-21 14:59:41 UTC	812	IN	Data Raw: 4c 52 69 76 44 37 67 6c 63 41 55 41 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 64 57 56 39 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 29 7b 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 Data Ascii: LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDepre
2024-10-21 14:59:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49710	142.250.186.100	443	428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 14:59:42 UTC	944	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw&co=aHR0cDovL3d3dy53YWd0Zy5jb206ODA.&hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&theme=light&size=normal&cb=6gmpjol1d1ei HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://www.wagtg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 14:59:42 UTC	1161	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 21 Oct 2024 14:59:42 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-o0srvyrvc9C5Y_X9Yr81iQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-21 14:59:42 UTC	217	IN	Data Raw: 35 37 65 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 Data Ascii: 57ef<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text
2024-10-21 14:59:42 UTC	1378	IN	Data Raw: 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 41 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 Data Ascii: /css">/* cyrillic-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0
2024-10-21 14:59:42 UTC	1378	IN	Data Raw: 55 2b 30 33 32 39 2c 20 55 2b 31 45 41 30 2d 31 45 46 39 2c 20 55 2b 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 42 41 2c 20 55 2b 30 32 42 44 Data Ascii: U+0329, U+1EA0-1EF9, U+20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02BA, U+02BD
2024-10-21 14:59:42 UTC	1378	IN	Data Raw: 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 Data Ascii: t-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto';
2024-10-21 14:59:42 UTC	1378	IN	Data Raw: 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a Data Ascii: m/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}
2024-10-21 14:59:42 UTC	1378	IN	Data Raw: 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d 30 31 36 39 2c 20 55 2b 30 31 41 30 2d 30 31 41 31 2c 20 55 2b 30 31 41 46 2d 30 31 42 30 2c 20 55 2b 30 33 30 30 2d 30 33 30 31 2c 20 55 2b 30 33 30 33 2d 30 33 30 34 2c 20 55 2b 30 33 30 38 2d 30 Data Ascii: : normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0
2024-10-21 14:59:42 UTC	1378	IN	Data Raw: 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 6c 71 73 54 5a 35 62 65 49 62 43 6b 4b 34 75 47 45 47 76 39 4a 6d 55 52 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 6f 30 73 72 76 79 72 76 63 39 43 35 59 5f 58 39 59 72 38 31 69 51 22 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 72 63 2d 61 6e 63 68 6f 72 2d 61 6c 65 72 74 22 20 63 6c 61 73 73 3d 22 72 63 2d 61 6e 63 68 6f 72 2d 61 6c 65 72 74 22 3e 3c 2f 64 69 76 3e 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d Data Ascii: text/javascript" src="https://www.gstatic.com/recaptcha/releases/lqsTZ5beIbCkK4uGEGv9JmUR/recaptcha__en.js" nonce="o0srvyrvc9C5Y_X9Yr81iQ"> </script></head><body><div id="rc-anchor-alert" class="rc-anchor-alert"></div><input type="hidden" id=
2024-10-21 14:59:42 UTC	1378	IN	Data Raw: 51 54 79 63 6d 76 43 36 76 48 37 4f 75 66 49 59 6b 65 68 47 4e 5a 49 69 51 76 6f 71 31 35 5f 6e 62 71 42 35 44 4b 67 5f 69 6c 71 6c 5f 48 47 53 63 4c 2d 45 4b 62 4a 56 4d 4d 67 56 4c 2d 61 78 43 75 4b 50 5a 5a 41 34 35 5f 66 52 6a 72 72 4e 56 49 32 66 41 78 78 4f 73 4c 67 31 51 79 37 72 38 6e 48 78 45 30 69 75 41 42 67 4d 66 47 42 48 64 68 75 56 67 35 6f 68 37 76 48 36 54 37 71 58 63 35 52 51 62 70 57 32 39 54 76 79 39 69 2d 52 59 59 56 30 79 39 32 52 49 75 56 59 47 32 64 61 4f 54 6a 44 6c 70 53 79 31 53 52 66 69 4e 47 74 49 47 66 55 44 68 32 4f 7a 72 56 47 6d 42 52 39 32 35 49 2d 33 35 65 57 7a 6b 66 37 78 66 71 4f 31 6f 69 47 42 5a 77 51 5f 66 2d 67 53 55 79 41 6d 4f 52 37 55 71 5a 71 4d 57 71 41 30 5a 79 43 4c 63 67 4d 32 6c 69 50 48 75 72 71 44 2d 42 Data Ascii: QTycmvC6vH7OufIYkehGNZIiQvoq15_nbqB5DKg_ilql_HGScL-EKbJVMMgVL-axCuKPZZA45_fRjrrNVI2fAxxOsLg1Qy7r8nHxE0iuABgMfGBHdhuVg5oh7vH6T7qXc5RQbpW29Tvy9i-RYYV0y92RIuVYG2daOTjDlpSy1SRfiNGtIGfUDh2OzrVGmBR925I-35eWzkf7xfqO1oiGBZwQ_f-gSUyAmOR7UqZqMWqA0ZyCLcgM2liPHurqD-B
2024-10-21 14:59:42 UTC	1378	IN	Data Raw: 6a 5a 74 51 31 46 5a 53 6a 5a 6d 61 30 46 71 65 58 4d 32 61 55 6f 7a 52 31 56 74 55 6a 5a 43 52 57 4e 59 4f 44 4e 31 63 31 63 32 57 58 6c 77 4d 33 42 6c 54 6b 78 74 5a 56 4a 50 4d 33 6c 46 63 57 5a 43 56 32 78 74 53 30 6c 5a 62 6b 70 35 64 6b 4e 55 54 45 31 44 54 58 68 57 4e 56 46 7a 4e 6d 6c 76 4d 32 52 72 56 57 74 6b 4d 6a 51 79 65 45 70 74 61 57 52 6d 54 33 42 53 4d 55 46 42 64 45 6c 76 54 30 6c 4a 54 54 56 32 63 57 31 77 62 45 49 34 63 54 4e 58 52 45 73 78 56 57 31 6c 54 46 63 77 65 6e 6c 73 54 47 34 32 53 56 46 6e 55 47 4a 61 65 48 52 47 52 53 39 49 54 48 56 4a 56 32 45 72 4e 58 55 79 4e 45 64 68 4d 6b 4e 35 65 44 52 35 4f 46 41 78 4b 30 56 59 61 57 6f 76 4e 32 74 31 5a 6b 68 73 53 7a 4a 58 53 44 4d 31 61 57 68 6f 53 6a 6c 46 64 57 78 6b 53 47 6f 31 Data Ascii: jZtQ1FZSjZma0FqeXM2aUozR1VtUjZCRWNYODN1c1c2WXlwM3BlTkxtZVJPM3lFcWZCV2xtS0lZbkp5dkNUTE1DTXhWNVFzNmlvM2RrVWtkMjQyeEptaWRmT3BSMUFBdElvT0lJTTV2cW1wbEI4cTNXREsxVW1lTFcwenlsTG42SVFnUGJaeHRGRS9ITHVJV2ErNXUyNEdhMkN5eDR5OFAxK0VYaWovN2t1ZkhsSzJXSDM1aWhoSjlFdWxkSGo1
2024-10-21 14:59:42 UTC	1378	IN	Data Raw: 7a 4e 32 38 34 51 6d 52 43 65 58 46 68 5a 30 4e 30 53 33 5a 68 56 46 46 45 4d 47 31 74 56 6d 39 4f 5a 6e 55 30 63 55 52 34 53 30 4a 59 61 79 39 6a 65 47 35 6c 64 6e 68 36 56 58 52 44 56 6e 64 77 62 30 4a 30 5a 48 64 31 5a 32 35 30 63 57 64 54 51 57 64 6f 54 31 52 6f 54 57 5a 58 64 57 34 32 64 6a 6c 44 63 55 6b 78 63 58 4d 76 5a 55 6c 6c 4d 7a 52 4c 61 58 4e 6a 57 44 52 43 61 30 31 6e 57 45 5a 58 62 47 6c 4b 56 6d 6b 76 5a 55 45 30 52 32 6c 47 65 45 64 4d 4e 31 4a 69 52 31 70 6f 4e 46 42 33 62 7a 6c 42 52 79 39 49 5a 6e 5a 4d 52 44 6c 73 4d 47 56 53 4f 47 64 6a 4e 31 63 30 63 46 4a 74 5a 55 56 6f 4b 33 68 6f 62 30 70 7a 59 6b 70 33 4d 57 4a 4c 5a 6a 64 43 62 6d 56 6f 4d 57 46 72 5a 56 52 45 59 33 68 55 55 6c 68 6e 4b 33 45 78 56 57 39 6f 51 30 39 74 5a 48 Data Ascii: zN284QmRCeXFhZ0N0S3ZhVFFEMG1tVm9OZnU0cUR4S0JYay9jeG5ldnh6VXRDVndwb0J0ZHd1Z250cWdTQWdoT1RoTWZXdW42djlDcUkxcXMvZUllMzRLaXNjWDRCa01nWEZXbGlKVmkvZUE0R2lGeEdMN1JiR1poNFB3bzlBRy9IZnZMRDlsMGVSOGdjN1c0cFJtZUVoK3hob0pzYkp3MWJLZjdCbmVoMWFrZVREY3hUUlhnK3ExVW9oQ09tZH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49721	142.250.186.100	443	428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 14:59:44 UTC	848	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw&co=aHR0cDovL3d3dy53YWd0Zy5jb206ODA.&hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&theme=light&size=normal&cb=6gmpjol1d1ei Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 14:59:45 UTC	917	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Expires: Mon, 21 Oct 2024 14:59:44 GMT Date: Mon, 21 Oct 2024 14:59:44 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-21 14:59:45 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 6c 71 73 54 5a 35 62 65 49 62 43 6b 4b 34 75 47 45 47 76 39 4a 6d 55 52 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/lqsTZ5beIbCkK4uGEGv9JmUR/recaptcha__en.js');
2024-10-21 14:59:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49722	142.250.186.100	443	428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 14:59:44 UTC	836	OUT	GET /js/bg/xrnLfCEjSrpGR1AYVMyryvUXM8OUMO4sC9T9G27F3zE.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw&co=aHR0cDovL3d3dy53YWd0Zy5jb206ODA.&hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&theme=light&size=normal&cb=6gmpjol1d1ei Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 14:59:45 UTC	812	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18670 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sun, 20 Oct 2024 07:03:10 GMT Expires: Mon, 20 Oct 2025 07:03:10 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 07 Oct 2024 09:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 114995 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-21 14:59:45 UTC	566	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 46 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 61 29 7b 69 66 28 21 28 61 3d 28 48 3d 6e 75 6c 6c 2c 64 29 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 61 29 7c 7c 21 61 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 48 3b 74 72 79 7b 48 3d 61 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 79 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 79 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 79 7d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var F=function(H,a){if(!(a=(H=null,d).trustedTypes,a)\|\|!a.createPolicy)return H;try{H=a.createPolicy("bg",{createHTML:y,createScript:y,createScriptURL:y}
2024-10-21 14:59:45 UTC	1378	IN	Data Raw: 65 20 4c 4c 43 27 2c 0a 27 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 6f 64 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 61 2c 64 2c 46 2c 41 2c 79 29 7b 66 75 6e 63 74 69 6f 6e 20 42 28 29 7b 69 66 28 46 2e 42 3d 3d 46 29 7b 69 66 28 46 2e 76 29 7b 76 61 72 20 4a 3d 5b 6c 2c 61 2c 64 2c 76 6f 69 64 20 30 2c 41 2c 79 2c 61 72 67 75 6d 65 6e 74 73 5d 3b 69 66 28 48 3d 3d 32 29 76 61 72 20 75 3d 57 28 46 2c 28 71 28 4a 2c 46 29 2c 66 61 6c 73 65 29 2c 66 61 6c 73 65 29 3b 65 6c 73 65 20 69 66 28 48 3d 3d 31 29 7b 76 61 72 20 50 3d 21 46 2e 56 2e 6c 65 6e 67 74 68 3b 28 71 28 4a 2c 46 29 2c 50 29 26 26 57 28 46 2c 66 61 6c 73 65 2c 66 61 6c 73 65 29 7d 65 6c 73 Data Ascii: e LLC',' SPDX-License-Identifier: Apache-2.0','*/','var od=function(H,a,d,F,A,y){function B(){if(F.B==F){if(F.v){var J=[l,a,d,void 0,A,y,arguments];if(H==2)var u=W(F,(q(J,F),false),false);else if(H==1){var P=!F.V.length;(q(J,F),P)&&W(F,false,false)}els
2024-10-21 14:59:45 UTC	1378	IN	Data Raw: 69 73 2e 6e 29 2c 41 3c 35 30 26 26 28 74 68 69 73 2e 5a 5b 41 5d 3d 46 29 29 7d 2c 64 29 2e 70 72 6f 74 6f 74 79 70 65 2e 4a 4a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 6e 3d 3d 3d 30 29 72 65 74 75 72 6e 5b 30 2c 30 5d 3b 72 65 74 75 72 6e 5b 28 74 68 69 73 2e 5a 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 46 2c 41 29 7b 72 65 74 75 72 6e 20 46 2d 41 7d 29 2c 74 68 69 73 2e 6e 29 2c 74 68 69 73 2e 5a 5b 74 68 69 73 2e 5a 2e 6c 65 6e 67 74 68 3e 3e 31 5d 5d 7d 2c 64 29 2c 48 3d 6e 65 77 20 64 2c 66 75 6e 63 74 69 6f 6e 28 46 29 7b 61 2e 6e 63 28 46 29 2c 48 2e 6e 63 28 46 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 46 29 7b 72 65 74 75 72 6e 20 46 3d 61 2e 4a 4a 28 29 2e 63 6f 6e 63 61 74 28 48 2e 4a 4a 28 29 29 2c 48 3d 6e 65 77 20 64 2c Data Ascii: is.n),A<50&&(this.Z[A]=F))},d).prototype.JJ=function(){if(this.n===0)return[0,0];return[(this.Z.sort(function(F,A){return F-A}),this.n),this.Z[this.Z.length>>1]]},d),H=new d,function(F){a.nc(F),H.nc(F)}),function(F){return F=a.JJ().concat(H.JJ()),H=new d,
2024-10-21 14:59:45 UTC	1378	IN	Data Raw: 5a 28 75 29 2c 78 3d 5a 28 75 29 2c 66 28 75 2c 78 2c 66 75 6e 63 74 69 6f 6e 28 58 29 7b 72 65 74 75 72 6e 20 65 76 61 6c 28 58 29 7d 28 58 65 28 47 28 50 2c 75 2e 42 29 29 29 29 29 7d 2c 79 2c 28 70 28 66 75 6e 63 74 69 6f 6e 28 75 2c 50 29 7b 50 3d 5a 28 75 29 2c 75 3d 47 28 50 2c 75 2e 42 29 2c 75 5b 30 5d 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 75 5b 31 5d 2c 75 5b 32 5d 2c 63 29 7d 2c 79 2c 28 70 28 66 75 6e 63 74 69 6f 6e 28 75 2c 50 2c 78 2c 58 29 7b 66 28 75 2c 28 58 3d 28 78 3d 5a 28 75 29 2c 50 3d 5a 28 75 29 2c 5a 28 75 29 29 2c 58 29 2c 47 28 78 2c 75 29 7c 7c 47 28 50 2c 75 29 29 7d 2c 79 2c 28 66 28 28 70 28 66 75 6e 63 74 69 6f 6e 28 75 2c 50 2c 78 2c 58 29 7b 66 28 75 2c 28 50 3d 28 78 3d 28 58 3d 5a 28 28 78 3d 28 Data Ascii: Z(u),x=Z(u),f(u,x,function(X){return eval(X)}(Xe(G(P,u.B)))))},y,(p(function(u,P){P=Z(u),u=G(P,u.B),u[0].removeEventListener(u[1],u[2],c)},y,(p(function(u,P,x,X){f(u,(X=(x=Z(u),P=Z(u),Z(u)),X),G(x,u)\|\|G(P,u))},y,(f((p(function(u,P,x,X){f(u,(P=(x=(X=Z((x=(
2024-10-21 14:59:45 UTC	1378	IN	Data Raw: 28 70 28 28 66 28 79 2c 28 66 28 79 2c 34 33 30 2c 28 28 79 2e 4a 3d 30 2c 79 2e 4e 3d 30 2c 79 2e 6f 51 3d 28 42 3d 28 79 2e 44 3d 5b 5d 2c 79 2e 57 3d 66 61 6c 73 65 2c 28 28 79 2e 53 3d 6e 75 6c 6c 2c 79 2e 50 3d 76 6f 69 64 20 30 2c 79 29 2e 79 68 3d 28 79 2e 73 3d 30 2c 79 2e 71 5f 3d 28 79 2e 72 24 3d 28 79 2e 56 68 3d 61 2c 79 2e 42 3d 79 2c 32 35 29 2c 30 29 2c 79 2e 48 3d 66 61 6c 73 65 2c 79 2e 4d 5f 3d 28 79 2e 75 37 3d 66 61 6c 73 65 2c 79 2e 46 3d 30 2c 5b 5d 29 2c 79 2e 75 3d 30 2c 79 2e 62 37 3d 28 79 2e 4c 3d 76 6f 69 64 20 30 2c 79 2e 59 3d 66 61 6c 73 65 2c 79 2e 76 3d 5b 5d 2c 79 2e 69 37 3d 38 30 30 31 2c 66 61 6c 73 65 29 2c 66 75 6e 63 74 69 6f 6e 28 75 29 7b 74 68 69 73 2e 42 3d 75 7d 29 2c 79 2e 68 3d 28 79 2e 6a 48 3d 76 6f 69 64 Data Ascii: (p((f(y,(f(y,430,((y.J=0,y.N=0,y.oQ=(B=(y.D=[],y.W=false,((y.S=null,y.P=void 0,y).yh=(y.s=0,y.q_=(y.r$=(y.Vh=a,y.B=y,25),0),y.H=false,y.M_=(y.u7=false,y.F=0,[]),y.u=0,y.b7=(y.L=void 0,y.Y=false,y.v=[],y.i7=8001,false),function(u){this.B=u}),y.h=(y.jH=void
2024-10-21 14:59:45 UTC	1378	IN	Data Raw: 6f 6e 28 75 2c 50 2c 78 2c 58 2c 72 2c 4e 2c 65 29 7b 69 66 28 21 68 28 75 2c 50 2c 74 72 75 65 2c 74 72 75 65 29 29 7b 69 66 28 50 3d 28 50 3d 5a 28 28 65 3d 28 78 3d 5a 28 75 29 2c 5a 29 28 75 29 2c 75 29 29 2c 72 3d 5a 28 75 29 2c 47 28 50 2c 75 29 29 2c 78 3d 47 28 78 2c 75 29 2c 72 3d 47 28 72 2c 75 29 2c 65 3d 47 28 65 2c 75 29 2c 72 67 28 78 29 3d 3d 22 6f 62 6a 65 63 74 22 29 7b 66 6f 72 28 58 20 69 6e 20 4e 3d 5b 5d 2c 78 29 4e 2e 70 75 73 68 28 58 29 3b 78 3d 4e 7d 69 66 28 75 2e 42 3d 3d 75 29 66 6f 72 28 75 3d 78 2e 6c 65 6e 67 74 68 2c 50 3d 50 3e 30 3f 50 3a 31 2c 58 3d 30 3b 58 3c 75 3b 58 2b 3d 50 29 65 28 78 2e 73 6c 69 63 65 28 58 2c 28 58 7c 30 29 2b 28 50 7c 30 29 29 2c 72 29 7d 7d 29 2c 79 2c 34 35 36 29 2c 7a 28 34 29 29 29 2c 71 28 Data Ascii: on(u,P,x,X,r,N,e){if(!h(u,P,true,true)){if(P=(P=Z((e=(x=Z(u),Z)(u),u)),r=Z(u),G(P,u)),x=G(x,u),r=G(r,u),e=G(e,u),rg(x)=="object"){for(X in N=[],x)N.push(X);x=N}if(u.B==u)for(u=x.length,P=P>0?P:1,X=0;X<u;X+=P)e(x.slice(X,(X\|0)+(P\|0)),r)}}),y,456),z(4))),q(
2024-10-21 14:59:45 UTC	1378	IN	Data Raw: 2c 41 3d 42 3e 3e 33 2c 4a 3d 64 2e 44 5b 41 5d 2c 61 26 26 28 46 3d 42 2c 79 3d 64 2c 79 2e 69 21 3d 46 3e 3e 36 26 26 28 79 2e 69 3d 46 3e 3e 36 2c 46 3d 47 28 34 38 38 2c 79 29 2c 79 2e 6a 48 3d 64 67 28 79 2e 67 2c 79 2e 69 2c 5b 30 2c 30 2c 46 5b 31 5d 2c 46 5b 32 5d 5d 29 29 2c 4a 5e 3d 64 2e 6a 48 5b 41 26 4e 5d 29 2c 42 2b 3d 72 2c 78 7c 3d 28 4a 3e 3e 38 2d 28 50 7c 30 29 2d 28 72 7c 30 29 26 28 31 3c 3c 72 29 2d 31 29 3c 3c 28 58 7c 30 29 2d 28 72 7c 30 29 2c 58 2d 3d 72 3b 72 65 74 75 72 6e 20 66 28 64 2c 34 33 30 2c 28 75 7c 30 29 2b 28 61 3d 78 2c 48 7c 30 29 29 2c 61 7d 2c 5a 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 61 29 7b 69 66 28 48 2e 6a 29 72 65 74 75 72 6e 20 50 63 28 48 2e 4c 2c 48 29 3b 72 65 74 75 72 6e 28 61 3d 52 28 38 2c 74 72 75 65 Data Ascii: ,A=B>>3,J=d.D[A],a&&(F=B,y=d,y.i!=F>>6&&(y.i=F>>6,F=G(488,y),y.jH=dg(y.g,y.i,[0,0,F[1],F[2]])),J^=d.jH[A&N]),B+=r,x\|=(J>>8-(P\|0)-(r\|0)&(1<<r)-1)<<(X\|0)-(r\|0),X-=r;return f(d,430,(u\|0)+(a=x,H\|0)),a},Z=function(H,a){if(H.j)return Pc(H.L,H);return(a=R(8,true
2024-10-21 14:59:45 UTC	1378	IN	Data Raw: 3a 74 72 75 65 2c 63 61 70 74 75 72 65 3a 74 72 75 65 7d 2c 71 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 61 29 7b 61 2e 56 2e 73 70 6c 69 63 65 28 30 2c 30 2c 48 29 7d 2c 49 64 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 61 2c 64 2c 46 2c 41 2c 79 2c 42 29 7b 72 65 74 75 72 6e 28 42 3d 53 5b 48 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 33 29 2b 22 5f 22 5d 29 3f 42 28 48 2e 73 75 62 73 74 72 69 6e 67 28 33 29 2c 61 2c 64 2c 46 2c 41 2c 79 29 3a 77 67 28 48 2c 61 29 7d 2c 62 2c 4d 53 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 61 2c 64 2c 46 2c 41 2c 79 2c 42 2c 4a 29 7b 72 65 74 75 72 6e 28 46 3d 5b 36 37 2c 2d 37 37 2c 2d 33 35 2c 35 37 2c 32 32 2c 28 79 3d 61 26 37 2c 4a 3d 6d 69 2c 34 38 29 2c 46 2c 2d 38 39 2c 34 36 2c 33 39 5d 2c 41 3d 55 5b 64 2e 43 5d 28 64 2e 70 63 29 2c Data Ascii: :true,capture:true},q=function(H,a){a.V.splice(0,0,H)},Id=function(H,a,d,F,A,y,B){return(B=S[H.substring(0,3)+"_"])?B(H.substring(3),a,d,F,A,y):wg(H,a)},b,MS=function(H,a,d,F,A,y,B,J){return(F=[67,-77,-35,57,22,(y=a&7,J=mi,48),F,-89,46,39],A=U[d.C](d.pc),
2024-10-21 14:59:45 UTC	1378	IN	Data Raw: 3d 46 2b 31 35 37 33 2c 48 5e 3d 61 2c 64 5e 3d 41 3b 72 65 74 75 72 6e 5b 48 3e 3e 3e 32 34 26 32 35 35 2c 48 3e 3e 3e 31 36 26 32 35 35 2c 48 3e 3e 3e 38 26 32 35 35 2c 48 3e 3e 3e 30 26 32 35 35 2c 61 3e 3e 3e 32 34 26 32 35 35 2c 61 3e 3e 3e 31 36 26 32 35 35 2c 61 3e 3e 3e 38 26 32 35 35 2c 61 3e 3e 3e 30 26 32 35 35 5d 7d 2c 57 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 61 2c 64 2c 46 2c 41 2c 79 29 7b 69 66 28 48 2e 56 2e 6c 65 6e 67 74 68 29 7b 48 2e 57 3d 28 28 48 2e 57 26 26 22 3a 54 51 52 3a 54 51 52 3a 22 28 29 2c 48 29 2e 62 37 3d 64 2c 74 72 75 65 29 3b 74 72 79 7b 79 3d 48 2e 55 28 29 2c 48 2e 50 3d 30 2c 48 2e 46 3d 79 2c 48 2e 54 3d 79 2c 48 2e 4e 3d 30 2c 41 3d 59 52 28 64 2c 48 29 2c 61 3d 61 3f 30 3a 31 30 2c 46 3d 48 2e 55 28 29 2d 48 2e 46 Data Ascii: =F+1573,H^=a,d^=A;return[H>>>24&255,H>>>16&255,H>>>8&255,H>>>0&255,a>>>24&255,a>>>16&255,a>>>8&255,a>>>0&255]},W=function(H,a,d,F,A,y){if(H.V.length){H.W=((H.W&&":TQR:TQR:"(),H).b7=d,true);try{y=H.U(),H.P=0,H.F=y,H.T=y,H.N=0,A=YR(d,H),a=a?0:10,F=H.U()-H.F
2024-10-21 14:59:45 UTC	1378	IN	Data Raw: 75 24 3d 56 2e 72 65 71 75 65 73 74 49 64 6c 65 43 61 6c 6c 62 61 63 6b 3f 66 75 6e 63 74 69 6f 6e 28 48 29 7b 72 65 71 75 65 73 74 49 64 6c 65 43 61 6c 6c 62 61 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 48 28 29 7d 2c 7b 74 69 6d 65 6f 75 74 3a 34 7d 29 7d 3a 56 2e 73 65 74 49 6d 6d 65 64 69 61 74 65 3f 66 75 6e 63 74 69 6f 6e 28 48 29 7b 73 65 74 49 6d 6d 65 64 69 61 74 65 28 48 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 48 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 48 2c 30 29 7d 2c 53 44 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 61 29 7b 72 65 74 75 72 6e 20 61 3d 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 3c 48 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 66 61 6c 73 65 2c 76 61 6c 75 65 3a 48 5b 61 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 74 72 75 65 7d 7d Data Ascii: u$=V.requestIdleCallback?function(H){requestIdleCallback(function(){H()},{timeout:4})}:V.setImmediate?function(H){setImmediate(H)}:function(H){setTimeout(H,0)},SD=function(H,a){return a=0,function(){return a<H.length?{done:false,value:H[a++]}:{done:true}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49725	142.251.40.196	443	428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 14:59:45 UTC	491	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 14:59:45 UTC	917	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Expires: Mon, 21 Oct 2024 14:59:45 GMT Date: Mon, 21 Oct 2024 14:59:45 GMT Cache-Control: private, max-age=300 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Cross-Origin-Resource-Policy: same-site Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-21 14:59:45 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 6c 71 73 54 5a 35 62 65 49 62 43 6b 4b 34 75 47 45 47 76 39 4a 6d 55 52 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/lqsTZ5beIbCkK4uGEGv9JmUR/recaptcha__en.js');
2024-10-21 14:59:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49726	142.251.40.196	443	428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 14:59:45 UTC	483	OUT	GET /js/bg/xrnLfCEjSrpGR1AYVMyryvUXM8OUMO4sC9T9G27F3zE.js HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 14:59:45 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18670 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 21 Oct 2024 04:45:25 GMT Expires: Tue, 21 Oct 2025 04:45:25 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 07 Oct 2024 09:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 36860 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-21 14:59:45 UTC	567	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 46 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 61 29 7b 69 66 28 21 28 61 3d 28 48 3d 6e 75 6c 6c 2c 64 29 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 61 29 7c 7c 21 61 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 48 3b 74 72 79 7b 48 3d 61 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 79 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 79 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 79 7d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var F=function(H,a){if(!(a=(H=null,d).trustedTypes,a)\|\|!a.createPolicy)return H;try{H=a.createPolicy("bg",{createHTML:y,createScript:y,createScriptURL:y}
2024-10-21 14:59:45 UTC	1378	IN	Data Raw: 20 4c 4c 43 27 2c 0a 27 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 6f 64 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 61 2c 64 2c 46 2c 41 2c 79 29 7b 66 75 6e 63 74 69 6f 6e 20 42 28 29 7b 69 66 28 46 2e 42 3d 3d 46 29 7b 69 66 28 46 2e 76 29 7b 76 61 72 20 4a 3d 5b 6c 2c 61 2c 64 2c 76 6f 69 64 20 30 2c 41 2c 79 2c 61 72 67 75 6d 65 6e 74 73 5d 3b 69 66 28 48 3d 3d 32 29 76 61 72 20 75 3d 57 28 46 2c 28 71 28 4a 2c 46 29 2c 66 61 6c 73 65 29 2c 66 61 6c 73 65 29 3b 65 6c 73 65 20 69 66 28 48 3d 3d 31 29 7b 76 61 72 20 50 3d 21 46 2e 56 2e 6c 65 6e 67 74 68 3b 28 71 28 4a 2c 46 29 2c 50 29 26 26 57 28 46 2c 66 61 6c 73 65 2c 66 61 6c 73 65 29 7d 65 6c 73 65 Data Ascii: LLC',' SPDX-License-Identifier: Apache-2.0','*/','var od=function(H,a,d,F,A,y){function B(){if(F.B==F){if(F.v){var J=[l,a,d,void 0,A,y,arguments];if(H==2)var u=W(F,(q(J,F),false),false);else if(H==1){var P=!F.V.length;(q(J,F),P)&&W(F,false,false)}else
2024-10-21 14:59:45 UTC	1378	IN	Data Raw: 73 2e 6e 29 2c 41 3c 35 30 26 26 28 74 68 69 73 2e 5a 5b 41 5d 3d 46 29 29 7d 2c 64 29 2e 70 72 6f 74 6f 74 79 70 65 2e 4a 4a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 6e 3d 3d 3d 30 29 72 65 74 75 72 6e 5b 30 2c 30 5d 3b 72 65 74 75 72 6e 5b 28 74 68 69 73 2e 5a 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 46 2c 41 29 7b 72 65 74 75 72 6e 20 46 2d 41 7d 29 2c 74 68 69 73 2e 6e 29 2c 74 68 69 73 2e 5a 5b 74 68 69 73 2e 5a 2e 6c 65 6e 67 74 68 3e 3e 31 5d 5d 7d 2c 64 29 2c 48 3d 6e 65 77 20 64 2c 66 75 6e 63 74 69 6f 6e 28 46 29 7b 61 2e 6e 63 28 46 29 2c 48 2e 6e 63 28 46 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 46 29 7b 72 65 74 75 72 6e 20 46 3d 61 2e 4a 4a 28 29 2e 63 6f 6e 63 61 74 28 48 2e 4a 4a 28 29 29 2c 48 3d 6e 65 77 20 64 2c 46 Data Ascii: s.n),A<50&&(this.Z[A]=F))},d).prototype.JJ=function(){if(this.n===0)return[0,0];return[(this.Z.sort(function(F,A){return F-A}),this.n),this.Z[this.Z.length>>1]]},d),H=new d,function(F){a.nc(F),H.nc(F)}),function(F){return F=a.JJ().concat(H.JJ()),H=new d,F
2024-10-21 14:59:45 UTC	1378	IN	Data Raw: 28 75 29 2c 78 3d 5a 28 75 29 2c 66 28 75 2c 78 2c 66 75 6e 63 74 69 6f 6e 28 58 29 7b 72 65 74 75 72 6e 20 65 76 61 6c 28 58 29 7d 28 58 65 28 47 28 50 2c 75 2e 42 29 29 29 29 29 7d 2c 79 2c 28 70 28 66 75 6e 63 74 69 6f 6e 28 75 2c 50 29 7b 50 3d 5a 28 75 29 2c 75 3d 47 28 50 2c 75 2e 42 29 2c 75 5b 30 5d 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 75 5b 31 5d 2c 75 5b 32 5d 2c 63 29 7d 2c 79 2c 28 70 28 66 75 6e 63 74 69 6f 6e 28 75 2c 50 2c 78 2c 58 29 7b 66 28 75 2c 28 58 3d 28 78 3d 5a 28 75 29 2c 50 3d 5a 28 75 29 2c 5a 28 75 29 29 2c 58 29 2c 47 28 78 2c 75 29 7c 7c 47 28 50 2c 75 29 29 7d 2c 79 2c 28 66 28 28 70 28 66 75 6e 63 74 69 6f 6e 28 75 2c 50 2c 78 2c 58 29 7b 66 28 75 2c 28 50 3d 28 78 3d 28 58 3d 5a 28 28 78 3d 28 50 Data Ascii: (u),x=Z(u),f(u,x,function(X){return eval(X)}(Xe(G(P,u.B)))))},y,(p(function(u,P){P=Z(u),u=G(P,u.B),u[0].removeEventListener(u[1],u[2],c)},y,(p(function(u,P,x,X){f(u,(X=(x=Z(u),P=Z(u),Z(u)),X),G(x,u)\|\|G(P,u))},y,(f((p(function(u,P,x,X){f(u,(P=(x=(X=Z((x=(P
2024-10-21 14:59:45 UTC	1378	IN	Data Raw: 70 28 28 66 28 79 2c 28 66 28 79 2c 34 33 30 2c 28 28 79 2e 4a 3d 30 2c 79 2e 4e 3d 30 2c 79 2e 6f 51 3d 28 42 3d 28 79 2e 44 3d 5b 5d 2c 79 2e 57 3d 66 61 6c 73 65 2c 28 28 79 2e 53 3d 6e 75 6c 6c 2c 79 2e 50 3d 76 6f 69 64 20 30 2c 79 29 2e 79 68 3d 28 79 2e 73 3d 30 2c 79 2e 71 5f 3d 28 79 2e 72 24 3d 28 79 2e 56 68 3d 61 2c 79 2e 42 3d 79 2c 32 35 29 2c 30 29 2c 79 2e 48 3d 66 61 6c 73 65 2c 79 2e 4d 5f 3d 28 79 2e 75 37 3d 66 61 6c 73 65 2c 79 2e 46 3d 30 2c 5b 5d 29 2c 79 2e 75 3d 30 2c 79 2e 62 37 3d 28 79 2e 4c 3d 76 6f 69 64 20 30 2c 79 2e 59 3d 66 61 6c 73 65 2c 79 2e 76 3d 5b 5d 2c 79 2e 69 37 3d 38 30 30 31 2c 66 61 6c 73 65 29 2c 66 75 6e 63 74 69 6f 6e 28 75 29 7b 74 68 69 73 2e 42 3d 75 7d 29 2c 79 2e 68 3d 28 79 2e 6a 48 3d 76 6f 69 64 20 Data Ascii: p((f(y,(f(y,430,((y.J=0,y.N=0,y.oQ=(B=(y.D=[],y.W=false,((y.S=null,y.P=void 0,y).yh=(y.s=0,y.q_=(y.r$=(y.Vh=a,y.B=y,25),0),y.H=false,y.M_=(y.u7=false,y.F=0,[]),y.u=0,y.b7=(y.L=void 0,y.Y=false,y.v=[],y.i7=8001,false),function(u){this.B=u}),y.h=(y.jH=void
2024-10-21 14:59:45 UTC	1378	IN	Data Raw: 6e 28 75 2c 50 2c 78 2c 58 2c 72 2c 4e 2c 65 29 7b 69 66 28 21 68 28 75 2c 50 2c 74 72 75 65 2c 74 72 75 65 29 29 7b 69 66 28 50 3d 28 50 3d 5a 28 28 65 3d 28 78 3d 5a 28 75 29 2c 5a 29 28 75 29 2c 75 29 29 2c 72 3d 5a 28 75 29 2c 47 28 50 2c 75 29 29 2c 78 3d 47 28 78 2c 75 29 2c 72 3d 47 28 72 2c 75 29 2c 65 3d 47 28 65 2c 75 29 2c 72 67 28 78 29 3d 3d 22 6f 62 6a 65 63 74 22 29 7b 66 6f 72 28 58 20 69 6e 20 4e 3d 5b 5d 2c 78 29 4e 2e 70 75 73 68 28 58 29 3b 78 3d 4e 7d 69 66 28 75 2e 42 3d 3d 75 29 66 6f 72 28 75 3d 78 2e 6c 65 6e 67 74 68 2c 50 3d 50 3e 30 3f 50 3a 31 2c 58 3d 30 3b 58 3c 75 3b 58 2b 3d 50 29 65 28 78 2e 73 6c 69 63 65 28 58 2c 28 58 7c 30 29 2b 28 50 7c 30 29 29 2c 72 29 7d 7d 29 2c 79 2c 34 35 36 29 2c 7a 28 34 29 29 29 2c 71 28 5b Data Ascii: n(u,P,x,X,r,N,e){if(!h(u,P,true,true)){if(P=(P=Z((e=(x=Z(u),Z)(u),u)),r=Z(u),G(P,u)),x=G(x,u),r=G(r,u),e=G(e,u),rg(x)=="object"){for(X in N=[],x)N.push(X);x=N}if(u.B==u)for(u=x.length,P=P>0?P:1,X=0;X<u;X+=P)e(x.slice(X,(X\|0)+(P\|0)),r)}}),y,456),z(4))),q([
2024-10-21 14:59:45 UTC	1378	IN	Data Raw: 41 3d 42 3e 3e 33 2c 4a 3d 64 2e 44 5b 41 5d 2c 61 26 26 28 46 3d 42 2c 79 3d 64 2c 79 2e 69 21 3d 46 3e 3e 36 26 26 28 79 2e 69 3d 46 3e 3e 36 2c 46 3d 47 28 34 38 38 2c 79 29 2c 79 2e 6a 48 3d 64 67 28 79 2e 67 2c 79 2e 69 2c 5b 30 2c 30 2c 46 5b 31 5d 2c 46 5b 32 5d 5d 29 29 2c 4a 5e 3d 64 2e 6a 48 5b 41 26 4e 5d 29 2c 42 2b 3d 72 2c 78 7c 3d 28 4a 3e 3e 38 2d 28 50 7c 30 29 2d 28 72 7c 30 29 26 28 31 3c 3c 72 29 2d 31 29 3c 3c 28 58 7c 30 29 2d 28 72 7c 30 29 2c 58 2d 3d 72 3b 72 65 74 75 72 6e 20 66 28 64 2c 34 33 30 2c 28 75 7c 30 29 2b 28 61 3d 78 2c 48 7c 30 29 29 2c 61 7d 2c 5a 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 61 29 7b 69 66 28 48 2e 6a 29 72 65 74 75 72 6e 20 50 63 28 48 2e 4c 2c 48 29 3b 72 65 74 75 72 6e 28 61 3d 52 28 38 2c 74 72 75 65 2c Data Ascii: A=B>>3,J=d.D[A],a&&(F=B,y=d,y.i!=F>>6&&(y.i=F>>6,F=G(488,y),y.jH=dg(y.g,y.i,[0,0,F[1],F[2]])),J^=d.jH[A&N]),B+=r,x\|=(J>>8-(P\|0)-(r\|0)&(1<<r)-1)<<(X\|0)-(r\|0),X-=r;return f(d,430,(u\|0)+(a=x,H\|0)),a},Z=function(H,a){if(H.j)return Pc(H.L,H);return(a=R(8,true,
2024-10-21 14:59:45 UTC	1378	IN	Data Raw: 74 72 75 65 2c 63 61 70 74 75 72 65 3a 74 72 75 65 7d 2c 71 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 61 29 7b 61 2e 56 2e 73 70 6c 69 63 65 28 30 2c 30 2c 48 29 7d 2c 49 64 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 61 2c 64 2c 46 2c 41 2c 79 2c 42 29 7b 72 65 74 75 72 6e 28 42 3d 53 5b 48 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 33 29 2b 22 5f 22 5d 29 3f 42 28 48 2e 73 75 62 73 74 72 69 6e 67 28 33 29 2c 61 2c 64 2c 46 2c 41 2c 79 29 3a 77 67 28 48 2c 61 29 7d 2c 62 2c 4d 53 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 61 2c 64 2c 46 2c 41 2c 79 2c 42 2c 4a 29 7b 72 65 74 75 72 6e 28 46 3d 5b 36 37 2c 2d 37 37 2c 2d 33 35 2c 35 37 2c 32 32 2c 28 79 3d 61 26 37 2c 4a 3d 6d 69 2c 34 38 29 2c 46 2c 2d 38 39 2c 34 36 2c 33 39 5d 2c 41 3d 55 5b 64 2e 43 5d 28 64 2e 70 63 29 2c 41 Data Ascii: true,capture:true},q=function(H,a){a.V.splice(0,0,H)},Id=function(H,a,d,F,A,y,B){return(B=S[H.substring(0,3)+"_"])?B(H.substring(3),a,d,F,A,y):wg(H,a)},b,MS=function(H,a,d,F,A,y,B,J){return(F=[67,-77,-35,57,22,(y=a&7,J=mi,48),F,-89,46,39],A=U[d.C](d.pc),A
2024-10-21 14:59:45 UTC	1378	IN	Data Raw: 46 2b 31 35 37 33 2c 48 5e 3d 61 2c 64 5e 3d 41 3b 72 65 74 75 72 6e 5b 48 3e 3e 3e 32 34 26 32 35 35 2c 48 3e 3e 3e 31 36 26 32 35 35 2c 48 3e 3e 3e 38 26 32 35 35 2c 48 3e 3e 3e 30 26 32 35 35 2c 61 3e 3e 3e 32 34 26 32 35 35 2c 61 3e 3e 3e 31 36 26 32 35 35 2c 61 3e 3e 3e 38 26 32 35 35 2c 61 3e 3e 3e 30 26 32 35 35 5d 7d 2c 57 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 61 2c 64 2c 46 2c 41 2c 79 29 7b 69 66 28 48 2e 56 2e 6c 65 6e 67 74 68 29 7b 48 2e 57 3d 28 28 48 2e 57 26 26 22 3a 54 51 52 3a 54 51 52 3a 22 28 29 2c 48 29 2e 62 37 3d 64 2c 74 72 75 65 29 3b 74 72 79 7b 79 3d 48 2e 55 28 29 2c 48 2e 50 3d 30 2c 48 2e 46 3d 79 2c 48 2e 54 3d 79 2c 48 2e 4e 3d 30 2c 41 3d 59 52 28 64 2c 48 29 2c 61 3d 61 3f 30 3a 31 30 2c 46 3d 48 2e 55 28 29 2d 48 2e 46 2c Data Ascii: F+1573,H^=a,d^=A;return[H>>>24&255,H>>>16&255,H>>>8&255,H>>>0&255,a>>>24&255,a>>>16&255,a>>>8&255,a>>>0&255]},W=function(H,a,d,F,A,y){if(H.V.length){H.W=((H.W&&":TQR:TQR:"(),H).b7=d,true);try{y=H.U(),H.P=0,H.F=y,H.T=y,H.N=0,A=YR(d,H),a=a?0:10,F=H.U()-H.F,
2024-10-21 14:59:45 UTC	1378	IN	Data Raw: 24 3d 56 2e 72 65 71 75 65 73 74 49 64 6c 65 43 61 6c 6c 62 61 63 6b 3f 66 75 6e 63 74 69 6f 6e 28 48 29 7b 72 65 71 75 65 73 74 49 64 6c 65 43 61 6c 6c 62 61 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 48 28 29 7d 2c 7b 74 69 6d 65 6f 75 74 3a 34 7d 29 7d 3a 56 2e 73 65 74 49 6d 6d 65 64 69 61 74 65 3f 66 75 6e 63 74 69 6f 6e 28 48 29 7b 73 65 74 49 6d 6d 65 64 69 61 74 65 28 48 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 48 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 48 2c 30 29 7d 2c 53 44 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 61 29 7b 72 65 74 75 72 6e 20 61 3d 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 3c 48 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 66 61 6c 73 65 2c 76 61 6c 75 65 3a 48 5b 61 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 74 72 75 65 7d 7d 7d Data Ascii: $=V.requestIdleCallback?function(H){requestIdleCallback(function(){H()},{timeout:4})}:V.setImmediate?function(H){setImmediate(H)}:function(H){setTimeout(H,0)},SD=function(H,a){return a=0,function(){return a<H.length?{done:false,value:H[a++]}:{done:true}}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49727	142.250.186.100	443	428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 14:59:46 UTC	863	OUT	GET /recaptcha/api2/bframe?hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://www.wagtg.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 14:59:46 UTC	1161	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 21 Oct 2024 14:59:46 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-7-_ClCrh5s9_tN-rz2t1jw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-21 14:59:46 UTC	217	IN	Data Raw: 31 65 31 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 Data Ascii: 1e14<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="tex
2024-10-21 14:59:46 UTC	1378	IN	Data Raw: 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 41 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 Data Ascii: t/css">/* cyrillic-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE
2024-10-21 14:59:46 UTC	1378	IN	Data Raw: 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 41 30 2d 31 45 46 39 2c 20 55 2b 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 42 41 2c 20 55 2b 30 32 42 Data Ascii: U+0329, U+1EA0-1EF9, U+20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02BA, U+02B
2024-10-21 14:59:46 UTC	1378	IN	Data Raw: 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a Data Ascii: nt-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto';
2024-10-21 14:59:46 UTC	1378	IN	Data Raw: 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d Data Ascii: om/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}
2024-10-21 14:59:46 UTC	1378	IN	Data Raw: 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d 30 31 36 39 2c 20 55 2b 30 31 41 30 2d 30 31 41 31 2c 20 55 2b 30 31 41 46 2d 30 31 42 30 2c 20 55 2b 30 33 30 30 2d 30 33 30 31 2c 20 55 2b 30 33 30 33 2d 30 33 30 34 2c 20 55 2b 30 33 30 38 2d Data Ascii: e: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-
2024-10-21 14:59:46 UTC	601	IN	Data Raw: 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 6c 71 73 54 5a 35 62 65 49 62 43 6b 4b 34 75 47 45 47 76 39 4a 6d 55 52 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 37 2d 5f 43 6c 43 72 68 35 73 39 5f 74 4e 2d 72 7a 32 74 31 6a 77 22 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 2d 74 6f 6b 65 6e 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d Data Ascii: "text/javascript" src="https://www.gstatic.com/recaptcha/releases/lqsTZ5beIbCkK4uGEGv9JmUR/recaptcha__en.js" nonce="7-_ClCrh5s9_tN-rz2t1jw"> </script></head><body><input type="hidden" id="recaptcha-token"><script type="text/javascript" nonce=
2024-10-21 14:59:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49733	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 14:59:48 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-21 14:59:48 UTC	494	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=25939 Date: Mon, 21 Oct 2024 14:59:48 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49734	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 14:59:48 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=cn9awwAY6dvnTnp&MD=7FnKcvs7 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-21 14:59:48 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 73fffef2-1f6f-4d9f-8411-07006c90f999 MS-RequestId: a2a68fc6-d584-4bd1-865b-00d9f5de0c47 MS-CV: Q1314JD9Z0Ca32Av.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 21 Oct 2024 14:59:47 GMT Connection: close Content-Length: 24490
2024-10-21 14:59:48 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-21 14:59:48 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49735	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 14:59:49 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-21 14:59:49 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=25961 Date: Mon, 21 Oct 2024 14:59:49 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-21 14:59:49 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49736	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 15:00:26 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=cn9awwAY6dvnTnp&MD=7FnKcvs7 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-21 15:00:26 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: f111d2a8-823d-45c8-861c-d4fb7e7efa27 MS-RequestId: 26f98434-6a4e-4f29-8c0b-2d33e05dfa6f MS-CV: qddPWg8kukarNTTc.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 21 Oct 2024 15:00:26 GMT Connection: close Content-Length: 30005
2024-10-21 15:00:26 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-21 15:00:26 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49740	216.58.206.36	443	428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 15:01:17 UTC	859	OUT	POST /recaptcha/api2/reload?k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 7624 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-protobuffer Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 15:01:17 UTC	7624	OUT	Data Raw: 0a 18 6c 71 73 54 5a 35 62 65 49 62 43 6b 4b 34 75 47 45 47 76 39 4a 6d 55 52 12 b9 0f 30 33 41 46 63 57 65 41 35 36 49 7a 4d 4c 37 33 70 42 61 52 66 62 2d 51 33 63 4d 6f 36 65 55 65 70 63 34 31 4c 49 39 4c 44 74 67 73 61 63 33 44 65 4c 5a 69 30 55 4a 72 33 52 61 71 53 50 4f 59 64 70 4c 37 4e 4e 4e 6d 34 70 35 4f 46 52 59 39 4c 72 2d 42 41 4c 45 4b 4a 59 6d 6f 38 6b 64 32 48 34 4e 4e 46 6a 4e 65 70 62 7a 76 53 43 6b 57 6e 68 46 6c 33 39 54 35 58 66 49 4e 34 56 73 75 72 34 38 58 77 6a 74 6d 49 48 65 77 42 73 79 61 51 6d 49 57 58 6d 77 41 44 61 54 76 73 74 46 39 38 7a 30 47 46 33 46 55 58 49 79 32 71 63 50 41 47 31 7a 35 78 4f 2d 4f 4c 43 6d 34 75 7a 46 38 64 74 45 45 66 56 75 74 52 65 62 4b 68 63 77 58 5f 6a 65 69 2d 63 46 45 79 56 2d 72 64 2d 63 53 54 44 Data Ascii: lqsTZ5beIbCkK4uGEGv9JmUR03AFcWeA56IzML73pBaRfb-Q3cMo6eUepc41LI9LDtgsac3DeLZi0UJr3RaqSPOYdpL7NNNm4p5OFRY9Lr-BALEKJYmo8kd2H4NNFjNepbzvSCkWnhFl39T5XfIN4Vsur48XwjtmIHewBsyaQmIWXmwADaTvstF98z0GF3FUXIy2qcPAG1z5xO-OLCm4uzF8dtEEfVutRebKhcwX_jei-cFEyV-rd-cSTD
2024-10-21 15:01:17 UTC	1000	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Date: Mon, 21 Oct 2024 15:01:17 GMT Server: ESF Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: _GRECAPTCHA=09AGteOyplBlu-d31c8ryyFQqBMugLC65zP4RLzU7YQEiLMuOpkxA4oocUetsTn6RIV4SXhJxCf9C0xnZHdmIibHo; Expires=Sat, 19-Apr-2025 15:01:17 GMT; Path=/recaptcha; Secure; HttpOnly; Priority=HIGH; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Expires: Mon, 21 Oct 2024 15:01:17 GMT Connection: close Transfer-Encoding: chunked
2024-10-21 15:01:17 UTC	378	IN	Data Raw: 34 30 35 66 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 34 76 71 41 46 64 31 42 64 61 53 76 43 6b 59 4c 6e 53 4e 4b 30 56 59 6f 6f 69 74 54 50 44 66 4d 4a 34 2d 6a 73 36 42 69 4c 52 66 2d 61 52 6b 51 39 6e 49 76 51 7a 31 4e 45 78 4c 58 6f 47 44 31 78 4e 37 4b 52 4d 32 4d 5f 31 74 45 70 66 67 4b 49 5f 57 45 6f 42 67 59 77 6f 59 36 35 5a 77 4c 6f 69 48 4d 66 34 68 63 53 66 63 4a 65 46 62 4e 67 48 4f 36 62 36 50 55 59 48 2d 57 75 76 7a 41 71 67 4e 51 6d 61 6b 6b 46 4c 70 56 7a 4a 4e 45 52 34 65 55 53 46 6e 6b 31 39 6e 66 4d 6d 56 71 31 50 63 5f 79 71 7a 5a 74 36 42 79 53 4f 78 66 46 4e 74 36 66 72 63 6a 62 52 6e 4b 58 4f 54 4a 56 6a 53 30 73 76 6c 55 34 30 31 48 31 4d 30 68 30 2d 47 32 4a 39 47 73 42 38 49 71 4c 75 50 4b 4b 6d Data Ascii: 405f)]}'["rresp","03AFcWeA4vqAFd1BdaSvCkYLnSNK0VYooitTPDfMJ4-js6BiLRf-aRkQ9nIvQz1NExLXoGD1xN7KRM2M_1tEpfgKI_WEoBgYwoY65ZwLoiHMf4hcSfcJeFbNgHO6b6PUYH-WuvzAqgNQmakkFLpVzJNER4eUSFnk19nfMmVq1Pc_yqzZt6BySOxfFNt6frcjbRnKXOTJVjS0svlU401H1M0h0-G2J9GsB8IqLuPKKm
2024-10-21 15:01:17 UTC	1378	IN	Data Raw: 46 39 4b 4a 2d 4d 2d 64 55 6b 77 4d 69 31 6c 54 35 56 4e 64 41 35 4d 46 37 46 78 4a 56 33 74 72 46 43 64 4f 55 77 61 46 38 61 74 53 4c 43 4f 53 73 48 67 54 4b 30 45 59 6d 71 4f 4c 44 79 4d 4b 43 34 47 66 44 79 6c 65 44 59 43 78 4f 50 33 31 72 6e 35 57 68 35 69 4e 33 4b 75 70 55 63 62 45 79 62 50 4d 6c 76 7a 67 66 62 77 41 50 73 46 34 62 4c 48 6e 6b 58 77 50 5f 32 58 58 52 34 33 50 49 68 49 74 38 79 37 46 64 58 55 54 38 66 6f 46 65 4f 48 51 49 5f 72 53 53 61 68 7a 74 4a 6c 68 41 58 35 53 59 76 59 6a 33 62 48 6e 6f 75 74 39 42 4c 61 5a 56 7a 39 70 6c 33 39 45 64 56 71 73 73 30 43 4d 72 4f 67 77 6d 41 52 64 72 57 47 45 59 4f 2d 38 4f 32 53 4b 59 32 6a 49 58 52 37 35 61 39 72 68 6c 55 30 73 75 59 71 34 72 41 66 30 4e 68 64 67 77 59 59 41 73 37 6f 7a 76 54 7a Data Ascii: F9KJ-M-dUkwMi1lT5VNdA5MF7FxJV3trFCdOUwaF8atSLCOSsHgTK0EYmqOLDyMKC4GfDyleDYCxOP31rn5Wh5iN3KupUcbEybPMlvzgfbwAPsF4bLHnkXwP_2XXR43PIhIt8y7FdXUT8foFeOHQI_rSSahztJlhAX5SYvYj3bHnout9BLaZVz9pl39EdVqss0CMrOgwmARdrWGEYO-8O2SKY2jIXR75a9rhlU0suYq4rAf0NhdgwYYAs7ozvTz
2024-10-21 15:01:17 UTC	1378	IN	Data Raw: 39 32 33 6a 69 55 51 72 54 75 51 31 42 73 57 4d 30 69 54 57 59 54 34 57 30 47 77 4b 34 37 32 46 38 37 35 48 63 67 57 2d 67 4f 65 48 77 48 31 67 72 38 76 7a 47 39 6b 68 79 67 62 69 45 2d 6c 68 6e 62 46 51 79 46 5a 6b 4f 73 38 45 63 78 6b 45 35 4c 6f 2d 59 47 38 45 32 39 4d 6e 6c 70 35 32 4d 6f 4a 6f 70 45 37 56 51 4e 58 48 6d 37 54 6b 36 62 72 56 79 68 4d 61 54 73 53 42 49 32 45 54 56 4b 51 43 4a 44 78 6b 2d 72 35 70 6e 68 53 66 4a 6e 55 6c 53 55 70 79 43 53 54 2d 79 42 4d 79 55 50 30 73 69 76 39 45 77 6c 71 4b 5f 5a 75 57 54 55 31 50 50 46 6d 71 45 4b 34 48 35 6e 48 4b 38 61 58 6e 54 30 54 6b 58 5f 78 43 73 70 6b 7a 37 6a 4e 4c 35 33 67 37 45 79 79 79 47 7a 36 6e 52 47 47 47 5a 42 76 6b 34 2d 2d 70 74 4c 52 52 65 53 4c 5a 78 6b 57 44 2d 37 47 4f 38 5a 77 Data Ascii: 923jiUQrTuQ1BsWM0iTWYT4W0GwK472F875HcgW-gOeHwH1gr8vzG9khygbiE-lhnbFQyFZkOs8EcxkE5Lo-YG8E29Mnlp52MoJopE7VQNXHm7Tk6brVyhMaTsSBI2ETVKQCJDxk-r5pnhSfJnUlSUpyCST-yBMyUP0siv9EwlqK_ZuWTU1PPFmqEK4H5nHK8aXnT0TkX_xCspkz7jNL53g7EyyyGz6nRGGGZBvk4--ptLRReSLZxkWD-7GO8Zw
2024-10-21 15:01:17 UTC	1378	IN	Data Raw: 39 7a 51 6b 72 45 78 37 6a 70 71 64 32 4f 70 36 5f 51 4e 44 68 75 35 77 67 6f 36 74 4e 68 49 66 4c 63 74 7a 49 67 33 77 37 42 54 55 70 4b 58 6a 72 74 62 63 79 46 79 56 41 70 51 65 58 5a 4f 6b 31 54 70 77 65 75 4c 38 34 37 49 54 6a 61 6d 33 4e 73 35 6d 31 75 79 63 65 30 75 38 74 57 6d 49 5f 34 61 47 65 63 49 70 4b 74 56 72 55 76 31 54 30 58 70 56 51 64 41 41 68 31 72 54 66 4c 50 64 56 49 4b 4f 6f 43 50 48 33 63 53 64 51 71 67 38 49 50 44 47 69 57 32 54 48 72 44 62 6a 38 2d 34 69 33 31 34 2d 32 75 65 68 35 36 39 38 35 51 67 4e 54 5f 47 43 76 46 71 53 62 33 39 63 56 36 69 38 4c 72 70 65 45 69 77 77 41 6c 6f 78 52 33 67 7a 73 7a 66 2d 4f 74 2d 32 53 6d 35 4e 6e 6e 5a 6f 4b 79 31 4b 38 55 55 36 58 78 67 51 53 79 66 44 6b 5a 61 66 75 64 77 57 35 64 70 63 57 6b Data Ascii: 9zQkrEx7jpqd2Op6_QNDhu5wgo6tNhIfLctzIg3w7BTUpKXjrtbcyFyVApQeXZOk1TpweuL847ITjam3Ns5m1uyce0u8tWmI_4aGecIpKtVrUv1T0XpVQdAAh1rTfLPdVIKOoCPH3cSdQqg8IPDGiW2THrDbj8-4i314-2ueh56985QgNT_GCvFqSb39cV6i8LrpeEiwwAloxR3gzszf-Ot-2Sm5NnnZoKy1K8UU6XxgQSyfDkZafudwW5dpcWk
2024-10-21 15:01:17 UTC	1378	IN	Data Raw: 6c 4f 6b 76 72 69 5a 49 66 2d 4d 37 66 53 6b 74 32 33 6e 37 6c 58 47 64 51 31 52 44 6a 63 6f 74 5a 55 2d 34 45 30 4e 57 41 68 54 54 58 5f 53 42 58 5f 50 4c 4a 63 58 6d 45 5a 5f 51 54 67 6e 62 43 77 66 53 61 58 43 6f 39 54 41 6b 47 77 64 78 51 47 4d 73 63 36 43 66 61 63 64 37 6d 71 6e 5f 6c 30 4a 31 45 52 46 66 2d 39 66 69 38 46 41 48 31 61 68 70 38 37 2d 62 4a 68 5f 4e 50 57 45 41 2d 6a 41 31 49 52 53 78 6e 6e 35 65 63 2d 55 77 61 6d 76 62 57 63 78 6b 4f 77 75 54 61 78 49 41 31 5a 57 64 37 68 66 51 6b 36 65 33 70 35 43 5a 55 47 64 4e 33 76 7a 5f 76 73 77 6b 72 31 49 4d 70 66 31 5f 43 4a 30 65 7a 59 78 63 55 6b 34 54 33 46 77 4b 7a 67 37 56 6a 71 6c 58 4b 78 76 36 74 4d 4b 33 39 39 4c 43 6c 53 39 79 66 59 67 5f 45 62 46 78 70 36 43 42 4d 6b 5a 2d 6b 30 53 Data Ascii: lOkvriZIf-M7fSkt23n7lXGdQ1RDjcotZU-4E0NWAhTTX_SBX_PLJcXmEZ_QTgnbCwfSaXCo9TAkGwdxQGMsc6Cfacd7mqn_l0J1ERFf-9fi8FAH1ahp87-bJh_NPWEA-jA1IRSxnn5ec-UwamvbWcxkOwuTaxIA1ZWd7hfQk6e3p5CZUGdN3vz_vswkr1IMpf1_CJ0ezYxcUk4T3FwKzg7VjqlXKxv6tMK399LClS9yfYg_EbFxp6CBMkZ-k0S
2024-10-21 15:01:17 UTC	1378	IN	Data Raw: 56 65 6c 42 49 56 32 31 79 63 30 5a 4f 56 30 74 6a 51 6a 6c 42 5a 56 42 4d 55 6b 39 36 53 58 56 48 61 6b 68 53 61 48 70 61 4b 32 56 42 56 7a 42 4c 62 55 39 6e 65 44 5a 4f 64 45 68 45 5a 6e 5a 52 57 57 78 55 61 6a 5a 75 4e 48 64 50 57 54 4a 57 4e 6a 68 33 63 6c 5a 4c 53 6e 4d 7a 56 32 31 74 51 31 4a 79 52 6a 6c 5a 52 6c 4d 34 52 44 52 48 55 33 52 7a 4f 45 4e 4e 4e 55 70 6c 4e 33 5a 31 55 6d 56 30 55 48 46 54 4e 6e 68 7a 57 6d 64 69 4d 32 64 73 55 31 6c 75 54 7a 68 51 53 31 5a 4f 65 6c 42 5a 64 32 74 4d 62 56 46 73 63 45 52 6a 64 44 52 55 63 44 52 75 65 6e 68 30 61 32 4a 6b 53 6e 4e 6c 57 6a 64 32 63 56 4a 6c 52 30 56 59 57 6d 35 54 4c 32 78 57 56 31 55 77 56 57 64 44 51 6d 4a 53 51 6e 52 44 57 6e 70 33 52 47 56 34 55 6d 56 46 61 32 70 42 53 32 74 4c 52 6d Data Ascii: VelBIV21yc0ZOV0tjQjlBZVBMUk96SXVHakhSaHpaK2VBVzBLbU9neDZOdEhEZnZRWWxUajZuNHdPWTJWNjh3clZLSnMzV21tQ1JyRjlZRlM4RDRHU3RzOENNNUplN3Z1UmV0UHFTNnhzWmdiM2dsU1luTzhQS1ZOelBZd2tMbVFscERjdDRUcDRuenh0a2JkSnNlWjd2cVJlR0VYWm5TL2xWV1UwVWdDQmJSQnRDWnp3RGV4UmVFa2pBS2tLRm
2024-10-21 15:01:17 UTC	1378	IN	Data Raw: 6b 35 52 56 30 38 31 62 46 70 78 51 6b 74 52 57 58 5a 74 56 56 4e 4a 65 6e 41 34 4f 58 41 78 54 6d 35 4a 63 56 68 32 54 69 74 72 62 58 5a 61 51 6a 55 35 61 47 45 31 57 56 46 4c 57 46 64 56 56 6c 6c 50 64 30 64 31 59 6d 73 7a 4d 57 56 36 61 43 39 45 64 56 52 72 63 45 52 34 4d 7a 42 73 63 30 35 31 5a 7a 6c 78 52 6b 64 6e 53 57 46 6b 4d 6d 6b 72 54 58 46 56 56 48 5a 4f 62 45 49 32 55 45 31 6e 4d 33 42 42 56 44 42 78 55 56 6c 36 54 30 52 4c 51 6d 5a 61 61 7a 49 77 55 7a 68 33 61 6b 67 34 61 6b 56 48 56 55 46 6e 62 45 68 31 62 55 38 7a 4d 45 68 7a 5a 58 70 54 4c 79 39 34 4b 30 31 51 53 6d 68 4a 64 30 5a 73 53 31 64 72 4d 55 46 4b 54 33 4a 57 55 31 68 43 54 47 68 77 63 6d 4a 6a 61 6e 6c 31 51 6a 42 33 52 6d 4a 31 56 6b 78 68 54 56 64 49 4b 30 31 4e 54 31 56 76 Data Ascii: k5RV081bFpxQktRWXZtVVNJenA4OXAxTm5JcVh2TitrbXZaQjU5aGE1WVFLWFdVVllPd0d1YmszMWV6aC9EdVRrcER4MzBsc051ZzlxRkdnSWFkMmkrTXFVVHZObEI2UE1nM3BBVDBxUVl6T0RLQmZaazIwUzh3akg4akVHVUFnbEh1bU8zMEhzZXpTLy94K01QSmhJd0ZsS1drMUFKT3JWU1hCTGhwcmJjanl1QjB3RmJ1VkxhTVdIK01NT1Vv
2024-10-21 15:01:17 UTC	1378	IN	Data Raw: 35 52 57 46 45 61 6a 68 6e 62 6a 4e 75 5a 6b 70 59 61 44 46 30 61 31 4a 42 56 56 70 36 4e 30 6f 79 54 45 77 78 4f 56 52 44 4c 33 52 4d 53 6b 78 6f 56 32 5a 33 56 46 4a 5a 5a 32 39 46 57 6a 59 79 5a 30 55 34 61 45 68 6e 51 31 64 46 4d 33 52 6e 65 6a 5a 70 4d 55 70 78 56 6c 49 76 5a 6a 42 79 55 46 52 45 55 6b 63 32 62 44 42 34 55 30 78 61 55 57 55 79 54 58 59 30 63 55 4e 45 62 6a 6b 7a 59 7a 52 6c 4d 57 35 35 4f 57 64 76 56 57 31 6e 54 55 68 55 52 6a 6c 50 52 6d 30 31 64 57 45 7a 53 30 64 69 59 57 56 33 65 69 39 31 59 31 52 46 53 6c 4d 34 4d 31 68 48 4b 7a 64 71 53 6b 31 33 56 6b 4a 50 61 30 39 6b 4e 56 46 76 64 47 4e 58 4d 44 5a 5a 63 46 70 45 62 6d 74 79 5a 6c 4e 52 4e 6c 70 59 62 7a 4e 79 4e 47 68 7a 52 30 77 77 57 6c 68 45 4f 56 56 73 63 55 31 43 57 45 Data Ascii: 5RWFEajhnbjNuZkpYaDF0a1JBVVp6N0oyTEwxOVRDL3RMSkxoV2Z3VFJZZ29FWjYyZ0U4aEhnQ1dFM3RnejZpMUpxVlIvZjByUFREUkc2bDB4U0xaUWUyTXY0cUNEbjkzYzRlMW55OWdvVW1nTUhURjlPRm01dWEzS0diYWV3ei91Y1RFSlM4M1hHKzdqSk13VkJPa09kNVFvdGNXMDZZcFpEbmtyZlNRNlpYbzNyNGhzR0wwWlhEOVVscU1CWE
2024-10-21 15:01:17 UTC	1378	IN	Data Raw: 6b 6c 46 57 53 38 79 65 47 5a 44 64 48 46 6e 4d 58 64 6d 54 43 73 33 4b 32 35 46 62 7a 4a 4b 54 6b 39 49 56 6a 5a 74 4f 47 78 69 57 45 73 31 4d 33 4e 70 4e 7a 64 6b 57 45 6c 4e 4c 31 52 36 53 54 52 32 4f 45 49 31 53 58 70 59 54 30 31 69 4e 47 4e 6a 54 56 64 49 55 45 31 32 62 46 4a 55 52 6b 77 79 61 54 49 79 5a 55 4a 4e 63 46 49 35 4d 57 6c 32 59 55 6c 54 62 32 5a 55 63 6c 4a 4a 63 6e 68 4d 53 47 46 46 5a 6d 68 75 57 6b 56 42 54 6b 4a 58 4f 45 74 43 52 6d 64 42 53 6a 5a 31 52 6a 4e 54 5a 7a 41 33 4d 48 70 4e 56 30 4e 6e 5a 57 4a 68 4f 56 64 6d 55 54 4e 4c 65 54 5a 55 4d 6d 56 6a 54 33 59 77 55 45 56 57 52 33 52 49 55 58 52 68 61 56 4a 59 64 6a 4a 68 52 69 39 59 61 32 68 61 55 44 55 30 55 46 42 46 56 45 64 55 4e 7a 5a 48 61 45 46 6b 56 33 52 45 63 46 6b 7a Data Ascii: klFWS8yeGZDdHFnMXdmTCs3K25FbzJKTk9IVjZtOGxiWEs1M3NpNzdkWElNL1R6STR2OEI1SXpYT01iNGNjTVdIUE12bFJURkwyaTIyZUJNcFI5MWl2YUlTb2ZUclJJcnhMSGFFZmhuWkVBTkJXOEtCRmdBSjZ1RjNTZzA3MHpNV0NnZWJhOVdmUTNLeTZUMmVjT3YwUEVWR3RIUXRhaVJYdjJhRi9Ya2haUDU0UFBFVEdUNzZHaEFkV3REcFkz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49741	142.251.40.196	443	428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 15:01:18 UTC	606	OUT	GET /recaptcha/api2/reload?k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AGteOyplBlu-d31c8ryyFQqBMugLC65zP4RLzU7YQEiLMuOpkxA4oocUetsTn6RIV4SXhJxCf9C0xnZHdmIibHo
2024-10-21 15:01:18 UTC	743	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 21 Oct 2024 15:01:18 GMT Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Allow: POST Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-21 15:01:18 UTC	635	IN	Data Raw: 36 38 30 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f Data Ascii: 680<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 405 (Bad Request)!!1</title><style>*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{backgro
2024-10-21 15:01:18 UTC	1036	IN	Data Raw: 69 64 74 68 3a 37 37 32 70 78 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 Data Ascii: idth:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#log
2024-10-21 15:01:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49746	216.58.206.36	443	428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 15:01:18 UTC	1170	OUT	GET /recaptcha/api2/payload?p=06AFcWeA4kcX4S1aZg9h6KNEb8JDKbYLF941-bjPHL-_TWiZsN0zMcW81JAQGA4e5fmKTA5BjedcXBgYbBEiFEHlwiF6EdOOsq5Mm2H8ulkjqUqU7SgZiHG_n0dWBHcPPQndVSLOApvudkwVYr0IPpenq-mntuur39CV5nqE4Ym8kGo4nTzjh3PlFiN_9_0zakHbd_IvjiRi8TpL1X-Nt0Nc6xLpnnU4e-Bw&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AGteOyplBlu-d31c8ryyFQqBMugLC65zP4RLzU7YQEiLMuOpkxA4oocUetsTn6RIV4SXhJxCf9C0xnZHdmIibHo
2024-10-21 15:01:18 UTC	681	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Mon, 21 Oct 2024 15:01:18 GMT Date: Mon, 21 Oct 2024 15:01:18 GMT Cache-Control: private, max-age=30 Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Transfer-Encoding: chunked Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-21 15:01:18 UTC	697	IN	Data Raw: 38 33 62 30 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 2c 01 2c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 83b0JFIFC!"$"$C,,"}!1AQa"q
2024-10-21 15:01:18 UTC	1378	IN	Data Raw: 2f e4 00 d8 e0 55 5b 5b a8 d8 7c f8 07 eb 4e fb 6e d7 d8 58 15 3e b5 13 6e 4c 6a c8 a9 2c 93 c0 f9 18 28 3b 54 d6 f7 71 dc 47 c1 e7 de a0 bf 99 5b 3b 4e 6b 11 a5 78 24 3e 5f 03 d2 85 0e 60 72 b1 b7 77 1e 54 b0 20 8a e7 b5 04 52 49 1d 6a d4 7a 81 c6 19 8f 4e 95 4a e9 b7 33 36 73 e9 57 08 34 c9 94 d3 46 4d dc 7c 1e 33 59 f2 45 8e a2 b5 a6 f9 aa bb c5 9a f4 29 36 91 c5 52 cd 99 8d 17 b5 46 d1 56 9b 45 ed 51 b4 35 d0 99 cf 24 6b f8 02 18 81 bd 79 23 56 23 cb c6 7b 7d ea eb a3 58 8f 38 38 fa 57 39 e0 8b 52 c2 f0 e7 18 d9 ff 00 b3 57 45 24 31 88 ca b4 87 7f d6 bc dc 4f f1 19 dd 43 e0 43 a4 9e cd 08 2c ab c7 b5 45 25 dd 91 04 0b 7d df 85 24 51 c6 83 e6 4d d9 ee c7 35 32 04 51 81 08 c7 bf 4a c7 43 5d 4c bb f8 22 ba 5f f4 78 e4 59 07 03 68 e2 b0 6c 34 cd 64 d8 ac Data Ascii: /U[[\|NnX>nLj,(;TqG[;Nkx$>_`rwT RIjzNJ36sW4FM\|3YE)6RFVEQ5$ky#V#{}X88W9RWE$1OCC,E%}$QM52QJC]L"_xYhl4d
2024-10-21 15:01:18 UTC	1378	IN	Data Raw: b5 71 27 ef 7c b9 96 68 cb e3 04 2b 80 33 8d a0 1e 3f c6 ba 58 d4 c7 22 b8 1f 74 83 59 9a 4e 8b 0e 9b 3d dc 90 cd 2c a2 ea 56 94 89 30 4a 92 49 c6 ec 64 8e 7b e6 b9 aa 7b 57 5e 0e 3f 0f 53 aa 9c a8 ac 3c e3 25 ef 3b 59 99 1e 25 d5 5f 44 f2 08 b3 9a f7 ce 0e 38 fe 02 00 c1 38 1e a7 f4 a8 ad f5 97 96 3b 76 30 59 29 99 43 10 f7 9b 4a 67 b3 65 78 35 d6 04 23 a5 1b 0d 76 7b d7 d1 9e 4c a9 d4 72 6f 9b 4e d6 29 f8 0b 57 fb 64 17 72 18 04 03 e4 c0 59 d5 c9 fb dd 40 e5 7f 1e bf 85 74 3e 6a c8 dc 3e 07 a0 aa b6 16 c2 62 fb b3 c6 3b 66 ae 7d 85 31 b4 03 f5 26 b1 9d b9 b5 dc ea a3 19 46 09 37 72 5f ed 18 a2 f9 52 2d e7 d4 0f eb 53 c1 79 e6 1c 98 31 fa d7 33 ad bb cb a3 6a 0d a3 5c 41 73 24 11 c9 14 d0 e7 0c 58 a9 18 56 cf 0c 0f 6c 73 8c 71 d6 b1 fe 17 5f eb d7 1f be Data Ascii: q'\|h+3?X"tYN=,V0JId{{W^?S<%;Y%_D88;v0Y)CJgex5#v{LroN)WdrY@t>j>b;f}1&F7r_R-Sy13j\As$XVlsq_
2024-10-21 15:01:18 UTC	1378	IN	Data Raw: b7 87 34 79 35 1b b7 dd 83 b6 38 c9 00 c8 de 82 87 34 95 d8 b9 46 eb b6 73 df 68 77 f6 56 d8 49 ee 2d a4 8a 37 66 31 80 cc a4 02 59 72 40 f7 02 a8 78 32 d2 6b 1f 0d 5b d9 5c 85 f3 a1 79 55 b0 c1 86 7c c6 ef 81 fc aa a7 85 3c 7b a5 f8 93 54 4d 36 c6 da e8 5c 79 7b e5 2e a0 2a 60 64 8c e4 e7 9e 2b a0 d3 43 9b 67 c0 1f f1 f1 3f 7f fa 6a f5 09 46 53 55 13 e9 63 4e 66 a9 f2 79 dc 83 52 46 1a 7d cb 6c 1c 44 c7 8c fa 7b 54 c2 36 20 74 1f ad 43 ab cd 6e 8f 1e 9b 34 a9 1d cd e4 52 18 50 f5 60 a3 9e d8 f5 c6 7a e0 fa 54 d6 65 9e ca de 4e 9b a2 53 ed c8 15 aa 99 9b 88 bb 39 c1 20 7b e2 9a c0 6e db bd 73 f4 a9 70 c4 f3 cf bd 41 65 96 84 92 3a 48 fd bd 18 8a a5 2d 49 71 d0 53 1b 0e e3 f2 a5 58 f3 fc 5f a5 48 92 06 50 7a 64 90 29 e3 07 b5 5a 99 9b 81 63 4a 86 72 d2 2c Data Ascii: 4y584FshwVI-7f1Yr@x2k[\yU\|<{TM6\y{.*`d+Cg?jFSUcNfyRF}lD{T6 tCn4RP`zTeNS9 {nspAe:H-IqSX_HPzd)ZcJr,
2024-10-21 15:01:18 UTC	1378	IN	Data Raw: 3c 3f ae de e8 fa c5 8c b1 89 41 8e 19 89 db 1f 99 8f 97 07 1d 0b 03 c7 b7 e3 59 71 68 f7 c9 3b db 5a c2 37 9c 29 58 c8 c6 ee 17 03 a9 27 2c bc 7b fb 56 dc da f2 b1 5d 75 7f a7 f5 62 5d 13 4d b5 d5 ae 2e 02 cd 12 34 6c 8c 25 90 60 90 48 19 6c 12 46 0e 3a 55 8d 4e c8 c1 ab 4b 6e e5 23 58 1f 6a a4 6a 4e 15 79 0c 4b 71 dc 1c e4 f0 3b 54 9a 8f 87 b5 bd 00 fd be 68 91 76 8f 2c 2c b2 ed 95 55 98 2a 9c 63 8f 5e 01 e3 39 3e b5 34 e9 60 9b 6c 92 4e 93 b6 d0 00 1c 17 20 2e 10 75 e8 5b b7 51 eb d6 b1 ab 09 45 da 5f f0 7f cb fa d0 8a 9f 0d a3 ad f6 d3 fa fc 97 aa 48 65 ed bc 33 a4 16 0b 0b b6 d8 dd 13 74 4d fb bf 7c 63 39 eb c8 e3 f5 ad 1f 0c 78 3e e3 52 b1 96 e2 4d 57 4c 84 ac c5 14 5d 87 67 65 00 61 b8 56 c0 f6 cf 1c d2 aa 5b 5b 5e 46 bb 72 f3 bb 3c e3 72 ee 53 83 Data Ascii: <?AYqh;Z7)X',{V]ub]M.4l%`HlF:UNKn#XjjNyKq;Thv,,U*c^9>4`lN .u[QE_He3tM\|c9x>RMWL]geaV[[^Fr<rS
2024-10-21 15:01:18 UTC	1378	IN	Data Raw: e2 96 9f 2b e9 56 f3 29 8d 26 2b 77 1e f0 80 92 86 ca e1 8a f3 d0 1d b8 cf 6a 8e ff 00 e2 f7 87 e2 b6 bc 78 6d ee 0b 46 c5 60 66 c0 59 57 07 0e 0f a1 3d bd 3f 2a a2 3c 41 26 b9 f0 de c7 5a d5 af 60 2c f7 77 48 db 23 d8 23 cd 8d c2 85 f7 39 61 cf b8 aa 8d 44 dd 91 3c a6 ff 00 80 21 69 3e 1f f8 7d c7 08 74 f8 71 9f f7 05 6a b5 b9 1e 95 e2 7e 1b f8 99 7b a0 cd e0 fd 2d e0 b9 96 ce 2b 06 8e f2 02 a1 f7 af c8 55 90 00 b8 20 1c 72 4e 3d f3 5e 9b ff 00 0b 3b 40 76 d9 16 9b 74 64 65 dc 81 82 f2 3d 7a f4 e4 66 b5 4d db 43 35 15 64 6f 08 0f b5 70 91 d9 2d ec cb 6e e7 6f cf 8b 58 9b 25 40 27 20 1e 71 e8 33 d7 3e d8 ad 13 f1 2a 03 31 85 74 c8 19 c1 23 0b 21 3c 8e a3 a5 43 73 32 58 ea d6 76 b0 98 f0 fb a5 79 99 94 00 a5 70 83 68 c8 1d 08 f7 af 37 1e f9 dc 75 ef fa 1a Data Ascii: +V)&+wjxmF`fYW=?<A&Z`,wH##9aD<!i>}tqj~{-+U rN=^;@vtde=zfMC5dop-noX%@' q3>1t#!<Cs2Xvyph7u
2024-10-21 15:01:18 UTC	1378	IN	Data Raw: b7 8b ed 92 a0 76 07 6c 28 46 77 3f a9 f6 19 1f a0 f5 ac f8 30 a7 0f 6e a8 7d 0e e0 7f 9d 6e e9 51 b4 99 9c 21 02 10 15 32 78 dc 7a 71 8f 7f d6 94 a5 64 34 ae cc 99 f5 09 ac 2f 54 3c 71 4f 3d dd c2 f9 6a d9 2e 71 b7 38 fc 49 cd 71 fe 24 bf d3 7c 27 e2 43 36 a7 21 b9 b9 93 e7 58 9d 43 f5 cf de c1 f4 22 ba 1f 8c da 66 a9 6b ae e8 77 36 05 da 09 99 9b 6c 21 9a 48 d0 6d 5c c8 40 c0 c9 07 bf 35 e6 fe 30 f0 d6 b3 7f ad 33 da e9 d7 97 64 a4 72 31 44 2d b7 31 20 3f aa 9f d6 b1 a5 2d 5f 31 b3 a3 3f 67 ed 22 fa db f0 3d 1b 45 8f 4e 83 c3 22 ea da e2 27 9a 5b b8 32 8d 28 04 04 95 7e 5c 7b 73 eb 5b 57 1e 23 be b7 d3 0f d9 63 30 e6 60 06 2e 42 61 8a 2b f1 c0 ec 47 3f e1 5e 75 1e 9f 77 6d 6b 6f e7 ac 50 b5 d4 e6 68 01 60 a1 d5 e4 dc 31 ff 00 7d 7e 15 d4 b4 3a 8d d3 89 Data Ascii: vl(Fw?0n}nQ!2xzqd4/T<qO=j.q8Iq$\|'C6!XC"fkw6l!Hm\@503dr1D-1 ?-_1?g"=EN"'[2(~\{s[W#c0`.Ba+G?^uwmkoPh`1}~:
2024-10-21 15:01:18 UTC	1378	IN	Data Raw: 3e 14 d1 35 58 61 65 f3 b7 22 c3 20 27 ab 80 3a 8e 0f cd c7 dd ad 1b 89 3c 0d 7b 2b 5f 4d e1 cd 77 44 0b 32 ab c9 6e fb d1 64 3c af 5f f7 47 1d 0e 41 e0 f5 e2 be 1a df 68 5a 74 5a 82 c9 a8 cb 04 ff 00 6c f3 21 46 03 0d 81 b7 90 b8 39 39 23 8c 1c e3 b0 e7 b4 8b 53 63 6c 6d ee 63 bc 96 18 f6 46 5d 73 14 60 ae 09 1f 36 06 e0 3a 75 fb bd eb 49 e3 2a c6 6d 47 a7 af f4 ff 00 ad 19 9b a6 a4 b9 ad fd 7c ff 00 cf a9 97 0f 82 bc 2b aa 01 6f a3 f8 ca df ee 95 36 d7 71 b5 b9 c3 75 20 f2 3d 3f 23 83 d3 17 2d fe 16 78 8e 33 28 85 ac e7 88 be 52 68 99 65 59 06 06 08 3d bd 31 ed 56 b4 ed 28 df 5a 01 74 74 e0 e1 94 9c a1 95 f3 21 24 31 2a 06 3e ef 73 d3 3d eb 33 4a f0 c2 3d 8c 52 ac 97 f2 34 88 ae ec 26 64 05 8a 8e 40 12 28 f4 ed f8 9a d3 fb 4e 2e 2f 9f 6f 2d 4c 9e 1e 32 Data Ascii: >5Xae" ':<{+_MwD2nd<_GAhZtZl!F99#SclmcF]s`6:uImG\|+o6qu =?#-x3(RheY=1V(Ztt!$1>s=3J=R4&d@(N./o-L2
2024-10-21 15:01:18 UTC	1378	IN	Data Raw: 20 80 48 f4 c8 15 6e 42 11 e4 12 c7 36 62 c1 79 65 04 36 0e 58 01 cf 4c 8c 0c 67 8e 78 26 a3 31 2a 5c 30 95 65 8a 4f 31 87 99 b4 85 2a 7a 9e 99 c6 17 8e 71 c1 35 0d b8 de df a6 dd bf a5 d7 6e f2 da db b7 6b 6b a7 dd f9 f9 a3 25 7c 3b a7 4d 34 d1 97 36 b0 3c 6f 85 72 18 16 da 4f de cf dd 39 18 e3 f8 4f 27 bc 1f f0 8f df 80 d7 1a 74 96 42 38 d1 c9 55 5c 34 84 60 ec c0 cf 6c 1f ae ea de 8e 16 8a 79 4b bc a8 4a 2f 9b 28 56 24 28 27 71 23 77 42 dc 83 fc 38 fa 1a 62 40 cd 0b bc 72 84 0e c0 61 c6 d6 04 00 58 70 a0 03 ce 0f 27 a1 f7 14 4a 2a 51 d5 6f 6e fd 77 fe bc 89 e5 72 8d 9b be 8b 73 8f d4 f4 5f 16 0d 56 08 a4 b6 96 69 d9 9a 39 5e 09 88 d8 17 b6 18 60 9d a3 a1 e1 7a f3 9e 6a ea 76 fa 64 16 9e 55 ee 96 6e 62 89 c2 09 19 42 6e 94 90 4a 83 db 39 6e 7a 74 fa d7 Data Ascii: HnB6bye6XLgx&1\0eO1zq5nkk%\|;M46<orO9O'tB8U\4`lyKJ/(V$('q#wB8b@raXp'J*Qonwrs_Vi9^`zjvdUnbBnJ9nzt
2024-10-21 15:01:18 UTC	1378	IN	Data Raw: 00 d7 cb f1 36 df 5e b2 01 42 69 f6 ce 72 7e 51 1a 67 20 72 07 1c ff 00 2a af 79 af b2 c5 98 6c 2d 50 67 05 9b 1b 7a 0f 4c 1e b9 1f 85 73 ac 92 20 5d e9 2c 61 98 72 57 bf ae 08 cf 20 63 be 38 35 35 bd e7 96 04 3b d8 85 00 0e 17 e5 c7 62 78 18 19 1e 9d 68 bc 93 d3 5f b8 52 92 4e cb 53 a0 b7 d4 e1 66 03 fb 39 47 07 27 76 30 7d c0 1d c7 39 aa 77 77 e6 68 5c b2 ba c5 83 ba 38 9d 40 3c 74 dc 13 39 e7 d6 ab 06 91 d5 8c 85 d9 5d 01 42 31 9c 0e 3a 77 1f 77 1f 85 40 d3 2b ee 63 17 97 8e 18 2b 76 f4 27 1d 72 4f 6f 5f 5c 54 aa b3 e8 0a 49 d8 d6 b6 7d 32 c1 82 ae 94 81 c2 ee c9 6d cf 9f 4e 99 eb de ad c3 ae 80 bb 93 4e 44 ce 31 f3 8c b7 d3 8e 7a 1f 7e 2b 12 27 06 64 8e 60 de 5b 4a 37 05 c8 0c 33 96 c9 e3 8e 99 e3 d2 a2 96 6b 64 9b f7 d2 a4 4e 54 9f 31 08 0d 8c 71 81 Data Ascii: 6^Bir~Qg r*yl-PgzLs ],arW c855;bxh_RNSf9G'v0}9wwh\8@<t9]B1:ww@+c+v'rOo_\TI}2mNND1z~+'d`[J73kdNT1q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49752	142.251.40.196	443	428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 15:01:19 UTC	838	OUT	GET /recaptcha/api2/payload?p=06AFcWeA4kcX4S1aZg9h6KNEb8JDKbYLF941-bjPHL-_TWiZsN0zMcW81JAQGA4e5fmKTA5BjedcXBgYbBEiFEHlwiF6EdOOsq5Mm2H8ulkjqUqU7SgZiHG_n0dWBHcPPQndVSLOApvudkwVYr0IPpenq-mntuur39CV5nqE4Ym8kGo4nTzjh3PlFiN_9_0zakHbd_IvjiRi8TpL1X-Nt0Nc6xLpnnU4e-Bw&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AGteOyplBlu-d31c8ryyFQqBMugLC65zP4RLzU7YQEiLMuOpkxA4oocUetsTn6RIV4SXhJxCf9C0xnZHdmIibHo
2024-10-21 15:01:19 UTC	681	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Mon, 21 Oct 2024 15:01:19 GMT Date: Mon, 21 Oct 2024 15:01:19 GMT Cache-Control: private, max-age=30 Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Cross-Origin-Resource-Policy: same-site Transfer-Encoding: chunked Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-21 15:01:19 UTC	697	IN	Data Raw: 38 33 62 30 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 2c 01 2c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 83b0JFIFC!"$"$C,,"}!1AQa"q
2024-10-21 15:01:19 UTC	1378	IN	Data Raw: 2f e4 00 d8 e0 55 5b 5b a8 d8 7c f8 07 eb 4e fb 6e d7 d8 58 15 3e b5 13 6e 4c 6a c8 a9 2c 93 c0 f9 18 28 3b 54 d6 f7 71 dc 47 c1 e7 de a0 bf 99 5b 3b 4e 6b 11 a5 78 24 3e 5f 03 d2 85 0e 60 72 b1 b7 77 1e 54 b0 20 8a e7 b5 04 52 49 1d 6a d4 7a 81 c6 19 8f 4e 95 4a e9 b7 33 36 73 e9 57 08 34 c9 94 d3 46 4d dc 7c 1e 33 59 f2 45 8e a2 b5 a6 f9 aa bb c5 9a f4 29 36 91 c5 52 cd 99 8d 17 b5 46 d1 56 9b 45 ed 51 b4 35 d0 99 cf 24 6b f8 02 18 81 bd 79 23 56 23 cb c6 7b 7d ea eb a3 58 8f 38 38 fa 57 39 e0 8b 52 c2 f0 e7 18 d9 ff 00 b3 57 45 24 31 88 ca b4 87 7f d6 bc dc 4f f1 19 dd 43 e0 43 a4 9e cd 08 2c ab c7 b5 45 25 dd 91 04 0b 7d df 85 24 51 c6 83 e6 4d d9 ee c7 35 32 04 51 81 08 c7 bf 4a c7 43 5d 4c bb f8 22 ba 5f f4 78 e4 59 07 03 68 e2 b0 6c 34 cd 64 d8 ac Data Ascii: /U[[\|NnX>nLj,(;TqG[;Nkx$>_`rwT RIjzNJ36sW4FM\|3YE)6RFVEQ5$ky#V#{}X88W9RWE$1OCC,E%}$QM52QJC]L"_xYhl4d
2024-10-21 15:01:19 UTC	1378	IN	Data Raw: b5 71 27 ef 7c b9 96 68 cb e3 04 2b 80 33 8d a0 1e 3f c6 ba 58 d4 c7 22 b8 1f 74 83 59 9a 4e 8b 0e 9b 3d dc 90 cd 2c a2 ea 56 94 89 30 4a 92 49 c6 ec 64 8e 7b e6 b9 aa 7b 57 5e 0e 3f 0f 53 aa 9c a8 ac 3c e3 25 ef 3b 59 99 1e 25 d5 5f 44 f2 08 b3 9a f7 ce 0e 38 fe 02 00 c1 38 1e a7 f4 a8 ad f5 97 96 3b 76 30 59 29 99 43 10 f7 9b 4a 67 b3 65 78 35 d6 04 23 a5 1b 0d 76 7b d7 d1 9e 4c a9 d4 72 6f 9b 4e d6 29 f8 0b 57 fb 64 17 72 18 04 03 e4 c0 59 d5 c9 fb dd 40 e5 7f 1e bf 85 74 3e 6a c8 dc 3e 07 a0 aa b6 16 c2 62 fb b3 c6 3b 66 ae 7d 85 31 b4 03 f5 26 b1 9d b9 b5 dc ea a3 19 46 09 37 72 5f ed 18 a2 f9 52 2d e7 d4 0f eb 53 c1 79 e6 1c 98 31 fa d7 33 ad bb cb a3 6a 0d a3 5c 41 73 24 11 c9 14 d0 e7 0c 58 a9 18 56 cf 0c 0f 6c 73 8c 71 d6 b1 fe 17 5f eb d7 1f be Data Ascii: q'\|h+3?X"tYN=,V0JId{{W^?S<%;Y%_D88;v0Y)CJgex5#v{LroN)WdrY@t>j>b;f}1&F7r_R-Sy13j\As$XVlsq_
2024-10-21 15:01:19 UTC	1378	IN	Data Raw: b7 87 34 79 35 1b b7 dd 83 b6 38 c9 00 c8 de 82 87 34 95 d8 b9 46 eb b6 73 df 68 77 f6 56 d8 49 ee 2d a4 8a 37 66 31 80 cc a4 02 59 72 40 f7 02 a8 78 32 d2 6b 1f 0d 5b d9 5c 85 f3 a1 79 55 b0 c1 86 7c c6 ef 81 fc aa a7 85 3c 7b a5 f8 93 54 4d 36 c6 da e8 5c 79 7b e5 2e a0 2a 60 64 8c e4 e7 9e 2b a0 d3 43 9b 67 c0 1f f1 f1 3f 7f fa 6a f5 09 46 53 55 13 e9 63 4e 66 a9 f2 79 dc 83 52 46 1a 7d cb 6c 1c 44 c7 8c fa 7b 54 c2 36 20 74 1f ad 43 ab cd 6e 8f 1e 9b 34 a9 1d cd e4 52 18 50 f5 60 a3 9e d8 f5 c6 7a e0 fa 54 d6 65 9e ca de 4e 9b a2 53 ed c8 15 aa 99 9b 88 bb 39 c1 20 7b e2 9a c0 6e db bd 73 f4 a9 70 c4 f3 cf bd 41 65 96 84 92 3a 48 fd bd 18 8a a5 2d 49 71 d0 53 1b 0e e3 f2 a5 58 f3 fc 5f a5 48 92 06 50 7a 64 90 29 e3 07 b5 5a 99 9b 81 63 4a 86 72 d2 2c Data Ascii: 4y584FshwVI-7f1Yr@x2k[\yU\|<{TM6\y{.*`d+Cg?jFSUcNfyRF}lD{T6 tCn4RP`zTeNS9 {nspAe:H-IqSX_HPzd)ZcJr,
2024-10-21 15:01:19 UTC	1378	IN	Data Raw: 3c 3f ae de e8 fa c5 8c b1 89 41 8e 19 89 db 1f 99 8f 97 07 1d 0b 03 c7 b7 e3 59 71 68 f7 c9 3b db 5a c2 37 9c 29 58 c8 c6 ee 17 03 a9 27 2c bc 7b fb 56 dc da f2 b1 5d 75 7f a7 f5 62 5d 13 4d b5 d5 ae 2e 02 cd 12 34 6c 8c 25 90 60 90 48 19 6c 12 46 0e 3a 55 8d 4e c8 c1 ab 4b 6e e5 23 58 1f 6a a4 6a 4e 15 79 0c 4b 71 dc 1c e4 f0 3b 54 9a 8f 87 b5 bd 00 fd be 68 91 76 8f 2c 2c b2 ed 95 55 98 2a 9c 63 8f 5e 01 e3 39 3e b5 34 e9 60 9b 6c 92 4e 93 b6 d0 00 1c 17 20 2e 10 75 e8 5b b7 51 eb d6 b1 ab 09 45 da 5f f0 7f cb fa d0 8a 9f 0d a3 ad f6 d3 fa fc 97 aa 48 65 ed bc 33 a4 16 0b 0b b6 d8 dd 13 74 4d fb bf 7c 63 39 eb c8 e3 f5 ad 1f 0c 78 3e e3 52 b1 96 e2 4d 57 4c 84 ac c5 14 5d 87 67 65 00 61 b8 56 c0 f6 cf 1c d2 aa 5b 5b 5e 46 bb 72 f3 bb 3c e3 72 ee 53 83 Data Ascii: <?AYqh;Z7)X',{V]ub]M.4l%`HlF:UNKn#XjjNyKq;Thv,,U*c^9>4`lN .u[QE_He3tM\|c9x>RMWL]geaV[[^Fr<rS
2024-10-21 15:01:19 UTC	1378	IN	Data Raw: e2 96 9f 2b e9 56 f3 29 8d 26 2b 77 1e f0 80 92 86 ca e1 8a f3 d0 1d b8 cf 6a 8e ff 00 e2 f7 87 e2 b6 bc 78 6d ee 0b 46 c5 60 66 c0 59 57 07 0e 0f a1 3d bd 3f 2a a2 3c 41 26 b9 f0 de c7 5a d5 af 60 2c f7 77 48 db 23 d8 23 cd 8d c2 85 f7 39 61 cf b8 aa 8d 44 dd 91 3c a6 ff 00 80 21 69 3e 1f f8 7d c7 08 74 f8 71 9f f7 05 6a b5 b9 1e 95 e2 7e 1b f8 99 7b a0 cd e0 fd 2d e0 b9 96 ce 2b 06 8e f2 02 a1 f7 af c8 55 90 00 b8 20 1c 72 4e 3d f3 5e 9b ff 00 0b 3b 40 76 d9 16 9b 74 64 65 dc 81 82 f2 3d 7a f4 e4 66 b5 4d db 43 35 15 64 6f 08 0f b5 70 91 d9 2d ec cb 6e e7 6f cf 8b 58 9b 25 40 27 20 1e 71 e8 33 d7 3e d8 ad 13 f1 2a 03 31 85 74 c8 19 c1 23 0b 21 3c 8e a3 a5 43 73 32 58 ea d6 76 b0 98 f0 fb a5 79 99 94 00 a5 70 83 68 c8 1d 08 f7 af 37 1e f9 dc 75 ef fa 1a Data Ascii: +V)&+wjxmF`fYW=?<A&Z`,wH##9aD<!i>}tqj~{-+U rN=^;@vtde=zfMC5dop-noX%@' q3>1t#!<Cs2Xvyph7u
2024-10-21 15:01:19 UTC	1378	IN	Data Raw: b7 8b ed 92 a0 76 07 6c 28 46 77 3f a9 f6 19 1f a0 f5 ac f8 30 a7 0f 6e a8 7d 0e e0 7f 9d 6e e9 51 b4 99 9c 21 02 10 15 32 78 dc 7a 71 8f 7f d6 94 a5 64 34 ae cc 99 f5 09 ac 2f 54 3c 71 4f 3d dd c2 f9 6a d9 2e 71 b7 38 fc 49 cd 71 fe 24 bf d3 7c 27 e2 43 36 a7 21 b9 b9 93 e7 58 9d 43 f5 cf de c1 f4 22 ba 1f 8c da 66 a9 6b ae e8 77 36 05 da 09 99 9b 6c 21 9a 48 d0 6d 5c c8 40 c0 c9 07 bf 35 e6 fe 30 f0 d6 b3 7f ad 33 da e9 d7 97 64 a4 72 31 44 2d b7 31 20 3f aa 9f d6 b1 a5 2d 5f 31 b3 a3 3f 67 ed 22 fa db f0 3d 1b 45 8f 4e 83 c3 22 ea da e2 27 9a 5b b8 32 8d 28 04 04 95 7e 5c 7b 73 eb 5b 57 1e 23 be b7 d3 0f d9 63 30 e6 60 06 2e 42 61 8a 2b f1 c0 ec 47 3f e1 5e 75 1e 9f 77 6d 6b 6f e7 ac 50 b5 d4 e6 68 01 60 a1 d5 e4 dc 31 ff 00 7d 7e 15 d4 b4 3a 8d d3 89 Data Ascii: vl(Fw?0n}nQ!2xzqd4/T<qO=j.q8Iq$\|'C6!XC"fkw6l!Hm\@503dr1D-1 ?-_1?g"=EN"'[2(~\{s[W#c0`.Ba+G?^uwmkoPh`1}~:
2024-10-21 15:01:19 UTC	1378	IN	Data Raw: 3e 14 d1 35 58 61 65 f3 b7 22 c3 20 27 ab 80 3a 8e 0f cd c7 dd ad 1b 89 3c 0d 7b 2b 5f 4d e1 cd 77 44 0b 32 ab c9 6e fb d1 64 3c af 5f f7 47 1d 0e 41 e0 f5 e2 be 1a df 68 5a 74 5a 82 c9 a8 cb 04 ff 00 6c f3 21 46 03 0d 81 b7 90 b8 39 39 23 8c 1c e3 b0 e7 b4 8b 53 63 6c 6d ee 63 bc 96 18 f6 46 5d 73 14 60 ae 09 1f 36 06 e0 3a 75 fb bd eb 49 e3 2a c6 6d 47 a7 af f4 ff 00 ad 19 9b a6 a4 b9 ad fd 7c ff 00 cf a9 97 0f 82 bc 2b aa 01 6f a3 f8 ca df ee 95 36 d7 71 b5 b9 c3 75 20 f2 3d 3f 23 83 d3 17 2d fe 16 78 8e 33 28 85 ac e7 88 be 52 68 99 65 59 06 06 08 3d bd 31 ed 56 b4 ed 28 df 5a 01 74 74 e0 e1 94 9c a1 95 f3 21 24 31 2a 06 3e ef 73 d3 3d eb 33 4a f0 c2 3d 8c 52 ac 97 f2 34 88 ae ec 26 64 05 8a 8e 40 12 28 f4 ed f8 9a d3 fb 4e 2e 2f 9f 6f 2d 4c 9e 1e 32 Data Ascii: >5Xae" ':<{+_MwD2nd<_GAhZtZl!F99#SclmcF]s`6:uImG\|+o6qu =?#-x3(RheY=1V(Ztt!$1>s=3J=R4&d@(N./o-L2
2024-10-21 15:01:19 UTC	1378	IN	Data Raw: 20 80 48 f4 c8 15 6e 42 11 e4 12 c7 36 62 c1 79 65 04 36 0e 58 01 cf 4c 8c 0c 67 8e 78 26 a3 31 2a 5c 30 95 65 8a 4f 31 87 99 b4 85 2a 7a 9e 99 c6 17 8e 71 c1 35 0d b8 de df a6 dd bf a5 d7 6e f2 da db b7 6b 6b a7 dd f9 f9 a3 25 7c 3b a7 4d 34 d1 97 36 b0 3c 6f 85 72 18 16 da 4f de cf dd 39 18 e3 f8 4f 27 bc 1f f0 8f df 80 d7 1a 74 96 42 38 d1 c9 55 5c 34 84 60 ec c0 cf 6c 1f ae ea de 8e 16 8a 79 4b bc a8 4a 2f 9b 28 56 24 28 27 71 23 77 42 dc 83 fc 38 fa 1a 62 40 cd 0b bc 72 84 0e c0 61 c6 d6 04 00 58 70 a0 03 ce 0f 27 a1 f7 14 4a 2a 51 d5 6f 6e fd 77 fe bc 89 e5 72 8d 9b be 8b 73 8f d4 f4 5f 16 0d 56 08 a4 b6 96 69 d9 9a 39 5e 09 88 d8 17 b6 18 60 9d a3 a1 e1 7a f3 9e 6a ea 76 fa 64 16 9e 55 ee 96 6e 62 89 c2 09 19 42 6e 94 90 4a 83 db 39 6e 7a 74 fa d7 Data Ascii: HnB6bye6XLgx&1\0eO1zq5nkk%\|;M46<orO9O'tB8U\4`lyKJ/(V$('q#wB8b@raXp'J*Qonwrs_Vi9^`zjvdUnbBnJ9nzt
2024-10-21 15:01:19 UTC	1378	IN	Data Raw: 00 d7 cb f1 36 df 5e b2 01 42 69 f6 ce 72 7e 51 1a 67 20 72 07 1c ff 00 2a af 79 af b2 c5 98 6c 2d 50 67 05 9b 1b 7a 0f 4c 1e b9 1f 85 73 ac 92 20 5d e9 2c 61 98 72 57 bf ae 08 cf 20 63 be 38 35 35 bd e7 96 04 3b d8 85 00 0e 17 e5 c7 62 78 18 19 1e 9d 68 bc 93 d3 5f b8 52 92 4e cb 53 a0 b7 d4 e1 66 03 fb 39 47 07 27 76 30 7d c0 1d c7 39 aa 77 77 e6 68 5c b2 ba c5 83 ba 38 9d 40 3c 74 dc 13 39 e7 d6 ab 06 91 d5 8c 85 d9 5d 01 42 31 9c 0e 3a 77 1f 77 1f 85 40 d3 2b ee 63 17 97 8e 18 2b 76 f4 27 1d 72 4f 6f 5f 5c 54 aa b3 e8 0a 49 d8 d6 b6 7d 32 c1 82 ae 94 81 c2 ee c9 6d cf 9f 4e 99 eb de ad c3 ae 80 bb 93 4e 44 ce 31 f3 8c b7 d3 8e 7a 1f 7e 2b 12 27 06 64 8e 60 de 5b 4a 37 05 c8 0c 33 96 c9 e3 8e 99 e3 d2 a2 96 6b 64 9b f7 d2 a4 4e 54 9f 31 08 0d 8c 71 81 Data Ascii: 6^Bir~Qg r*yl-PgzLs ],arW c855;bxh_RNSf9G'v0}9wwh\8@<t9]B1:ww@+c+v'rOo_\TI}2mNND1z~+'d`[J73kdNT1q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49754	216.58.206.36	443	428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 15:01:21 UTC	998	OUT	POST /recaptcha/api2/replaceimage?k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 5558 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AGteOyplBlu-d31c8ryyFQqBMugLC65zP4RLzU7YQEiLMuOpkxA4oocUetsTn6RIV4SXhJxCf9C0xnZHdmIibHo
2024-10-21 15:01:21 UTC	5558	OUT	Data Raw: 76 3d 6c 71 73 54 5a 35 62 65 49 62 43 6b 4b 34 75 47 45 47 76 39 4a 6d 55 52 26 63 3d 30 33 41 46 63 57 65 41 34 76 71 41 46 64 31 42 64 61 53 76 43 6b 59 4c 6e 53 4e 4b 30 56 59 6f 6f 69 74 54 50 44 66 4d 4a 34 2d 6a 73 36 42 69 4c 52 66 2d 61 52 6b 51 39 6e 49 76 51 7a 31 4e 45 78 4c 58 6f 47 44 31 78 4e 37 4b 52 4d 32 4d 5f 31 74 45 70 66 67 4b 49 5f 57 45 6f 42 67 59 77 6f 59 36 35 5a 77 4c 6f 69 48 4d 66 34 68 63 53 66 63 4a 65 46 62 4e 67 48 4f 36 62 36 50 55 59 48 2d 57 75 76 7a 41 71 67 4e 51 6d 61 6b 6b 46 4c 70 56 7a 4a 4e 45 52 34 65 55 53 46 6e 6b 31 39 6e 66 4d 6d 56 71 31 50 63 5f 79 71 7a 5a 74 36 42 79 53 4f 78 66 46 4e 74 36 66 72 63 6a 62 52 6e 4b 58 4f 54 4a 56 6a 53 30 73 76 6c 55 34 30 31 48 31 4d 30 68 30 2d 47 32 4a 39 47 73 42 38 Data Ascii: v=lqsTZ5beIbCkK4uGEGv9JmUR&c=03AFcWeA4vqAFd1BdaSvCkYLnSNK0VYooitTPDfMJ4-js6BiLRf-aRkQ9nIvQz1NExLXoGD1xN7KRM2M_1tEpfgKI_WEoBgYwoY65ZwLoiHMf4hcSfcJeFbNgHO6b6PUYH-WuvzAqgNQmakkFLpVzJNER4eUSFnk19nfMmVq1Pc_yqzZt6BySOxfFNt6frcjbRnKXOTJVjS0svlU401H1M0h0-G2J9GsB8
2024-10-21 15:01:22 UTC	694	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Date: Mon, 21 Oct 2024 15:01:22 GMT Server: ESF Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-21 15:01:22 UTC	684	IN	Data Raw: 31 36 62 62 0d 0a 29 5d 7d 27 0a 5b 22 64 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 37 34 79 35 52 6a 4b 4d 48 36 68 7a 55 35 6f 75 62 2d 6a 76 5f 4c 66 67 47 58 31 47 36 48 67 6f 65 4f 57 64 52 43 54 71 5f 63 71 2d 4b 2d 36 54 2d 70 4a 75 79 68 49 4c 68 70 45 72 63 6c 55 57 44 76 4f 64 38 75 49 34 30 6c 44 49 33 57 6a 56 4f 6e 46 72 64 46 7a 6e 48 57 38 63 7a 56 44 78 35 39 59 57 31 51 6d 45 6a 59 5a 6e 4d 6c 49 73 67 54 46 66 6b 65 77 58 72 71 71 4f 4e 5a 69 6f 77 44 52 53 47 6d 63 49 38 72 32 77 67 56 31 64 33 5a 59 6d 66 59 49 6e 70 6c 76 54 4a 72 65 4a 64 6f 5a 49 35 43 4c 69 4a 5f 61 4b 67 75 54 65 5a 4c 49 78 64 30 65 6c 56 6c 7a 56 79 49 77 74 33 49 38 58 48 68 73 55 36 5a 78 32 4c 72 61 70 41 57 34 79 4d 4c 65 6e 64 4f 4c 34 78 53 6d 53 41 54 Data Ascii: 16bb)]}'["dresp","03AFcWeA74y5RjKMH6hzU5oub-jv_LfgGX1G6HgoeOWdRCTq_cq-K-6T-pJuyhILhpErclUWDvOd8uI40lDI3WjVOnFrdFznHW8czVDx59YW1QmEjYZnMlIsgTFfkewXrqqONZiowDRSGmcI8r2wgV1d3ZYmfYInplvTJreJdoZI5CLiJ_aKguTeZLIxd0elVlzVyIwt3I8XHhsU6Zx2LrapAW4yMLendOL4xSmSAT
2024-10-21 15:01:22 UTC	1378	IN	Data Raw: 55 69 32 44 5f 4a 52 72 4a 77 50 79 44 45 7a 4a 49 6a 44 5a 4c 36 4d 37 37 46 49 6c 44 48 31 30 4d 49 4d 30 68 46 5a 62 4e 5f 4f 77 4d 74 59 45 4f 73 52 6e 7a 4b 76 47 71 4c 38 44 36 78 74 49 70 5a 7a 6c 44 47 34 2d 61 64 74 4b 4f 6a 4a 4d 64 30 61 78 41 4a 5a 6e 4a 4c 39 4f 66 69 6f 38 50 75 32 74 33 31 76 5f 67 79 31 57 6b 50 31 50 6e 32 34 65 63 5f 38 55 6e 36 55 66 57 54 72 75 51 2d 38 64 34 34 5a 6a 69 6c 4b 6c 4e 66 4c 47 43 33 78 50 47 53 70 4e 6d 76 74 2d 4e 48 62 6a 4f 6e 4e 50 6f 4a 6e 4b 79 4a 45 6a 69 32 30 43 31 44 4a 55 36 6c 43 6c 55 75 77 48 52 70 51 55 31 79 34 52 36 76 34 67 32 43 49 6a 56 38 6b 41 51 33 45 4c 56 42 54 2d 34 62 55 38 47 78 46 46 6f 42 58 61 6e 68 47 4a 72 33 71 72 79 4c 77 42 52 66 31 44 31 71 62 61 38 61 4a 39 6f 6f 4b Data Ascii: Ui2D_JRrJwPyDEzJIjDZL6M77FIlDH10MIM0hFZbN_OwMtYEOsRnzKvGqL8D6xtIpZzlDG4-adtKOjJMd0axAJZnJL9Ofio8Pu2t31v_gy1WkP1Pn24ec_8Un6UfWTruQ-8d44ZjilKlNfLGC3xPGSpNmvt-NHbjOnNPoJnKyJEji20C1DJU6lClUuwHRpQU1y4R6v4g2CIjV8kAQ3ELVBT-4bU8GxFFoBXanhGJr3qryLwBRf1D1qba8aJ9ooK
2024-10-21 15:01:22 UTC	1378	IN	Data Raw: 62 6d 53 45 61 76 4c 6f 58 79 34 49 74 71 31 34 79 75 67 6d 6a 4c 54 71 68 47 4e 44 61 64 65 31 6e 65 6b 50 46 64 58 75 68 39 71 51 48 73 55 4e 56 6a 35 6d 45 36 74 50 44 41 38 56 7a 36 32 43 71 7a 51 31 63 4f 63 42 74 64 34 70 57 4b 41 42 49 6b 43 58 55 67 51 4b 41 34 72 44 64 55 59 33 74 4c 4c 44 72 46 4e 7a 66 2d 72 58 47 48 59 36 64 45 48 62 6e 33 64 6d 34 6f 69 4b 71 68 6c 37 54 79 42 36 4d 31 30 31 31 37 72 7a 69 4d 72 33 6f 6a 73 5a 58 6c 38 68 4c 67 63 65 44 4f 2d 55 33 5a 46 4e 75 32 79 36 47 44 47 74 75 59 31 39 59 75 58 33 79 4a 69 71 66 42 71 38 62 56 6c 66 74 6a 4b 44 44 41 61 42 48 6a 4a 36 2d 2d 46 68 70 49 65 43 47 4f 48 61 63 41 42 4f 70 65 6f 73 37 38 42 4a 78 51 56 34 63 56 73 73 66 63 4b 35 4b 44 73 68 56 62 6d 50 31 6c 61 5f 74 6e 32 Data Ascii: bmSEavLoXy4Itq14yugmjLTqhGNDade1nekPFdXuh9qQHsUNVj5mE6tPDA8Vz62CqzQ1cOcBtd4pWKABIkCXUgQKA4rDdUY3tLLDrFNzf-rXGHY6dEHbn3dm4oiKqhl7TyB6M10117rziMr3ojsZXl8hLgceDO-U3ZFNu2y6GDGtuY19YuX3yJiqfBq8bVlftjKDDAaBHjJ6--FhpIeCGOHacABOpeos78BJxQV4cVssfcK5KDshVbmP1la_tn2
2024-10-21 15:01:22 UTC	1378	IN	Data Raw: 73 69 49 42 39 49 43 57 30 52 4f 5f 6b 72 54 65 55 67 2d 39 39 6a 58 69 4e 70 42 56 6d 78 72 70 31 49 6e 38 42 74 62 4d 4a 45 6b 73 52 6a 53 61 78 73 4f 65 62 59 4c 58 5a 36 50 69 42 73 72 4b 44 36 70 7a 4e 6a 75 6d 63 62 6b 4c 52 69 39 41 36 35 76 61 4e 44 35 55 4f 45 56 5a 63 36 74 39 66 65 46 4c 39 4a 56 36 38 51 4d 55 6e 37 35 71 52 73 66 54 79 69 4a 74 5f 4e 5a 54 36 32 61 58 36 56 61 68 31 72 5f 42 48 4b 4c 37 69 5f 37 65 62 35 67 74 67 52 34 6f 62 59 67 31 52 47 2d 6a 47 49 65 4a 5a 54 55 31 32 46 59 2d 5a 51 66 65 66 69 6e 46 6d 5a 45 47 49 62 73 4c 6b 4c 4e 6d 74 53 7a 4e 46 39 48 49 32 51 56 61 4e 6c 54 31 50 31 78 4e 6c 37 43 47 30 4f 37 59 53 71 4b 70 50 6e 76 63 74 61 32 70 64 58 74 44 32 6b 31 42 63 79 59 78 4b 4c 30 6d 70 33 71 70 5f 38 72 Data Ascii: siIB9ICW0RO_krTeUg-99jXiNpBVmxrp1In8BtbMJEksRjSaxsOebYLXZ6PiBsrKD6pzNjumcbkLRi9A65vaND5UOEVZc6t9feFL9JV68QMUn75qRsfTyiJt_NZT62aX6Vah1r_BHKL7i_7eb5gtgR4obYg1RG-jGIeJZTU12FY-ZQfefinFmZEGIbsLkLNmtSzNF9HI2QVaNlT1P1xNl7CG0O7YSqKpPnvcta2pdXtD2k1BcyYxKL0mp3qp_8r
2024-10-21 15:01:22 UTC	1009	IN	Data Raw: 66 37 54 58 2d 33 4e 35 42 39 55 4b 54 57 4a 59 41 5a 66 76 64 79 41 4d 46 56 33 33 44 6c 39 53 71 37 30 47 76 79 31 4e 79 30 77 62 45 74 35 75 63 53 6d 36 53 6b 43 35 6b 36 67 65 35 72 2d 50 30 67 68 73 4a 48 42 73 77 4c 79 6e 75 55 67 51 34 30 65 72 78 30 6f 35 55 36 4f 4c 4d 69 73 72 46 6c 76 4e 42 46 71 46 5f 6a 2d 6a 72 37 74 45 69 55 32 63 30 2d 68 6c 47 63 79 61 54 52 61 49 74 71 72 6d 56 74 33 61 37 4d 6e 50 66 51 50 42 31 72 56 31 79 7a 76 59 4b 71 69 67 6a 63 77 51 36 52 5a 37 4d 63 47 78 31 4e 37 34 45 62 69 63 48 34 54 49 34 34 5f 65 50 33 63 35 48 36 68 45 4a 52 51 49 64 73 74 30 51 35 56 56 61 5f 5f 30 74 36 42 49 53 70 37 62 5a 2d 70 2d 70 71 68 6b 64 48 75 5a 57 61 75 41 53 33 6b 36 51 57 42 2d 6b 46 79 5a 34 70 73 2d 64 5f 33 56 37 2d 65 Data Ascii: f7TX-3N5B9UKTWJYAZfvdyAMFV33Dl9Sq70Gvy1Ny0wbEt5ucSm6SkC5k6ge5r-P0ghsJHBswLynuUgQ40erx0o5U6OLMisrFlvNBFqF_j-jr7tEiU2c0-hlGcyaTRaItqrmVt3a7MnPfQPB1rV1yzvYKqigjcwQ6RZ7McGx1N74EbicH4TI44_eP3c5H6hEJRQIdst0Q5VVa__0t6BISp7bZ-p-pqhkdHuZWauAS3k6QWB-kFyZ4ps-d_3V7-e
2024-10-21 15:01:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49755	142.251.40.196	443	428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 15:01:22 UTC	612	OUT	GET /recaptcha/api2/replaceimage?k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AGteOyplBlu-d31c8ryyFQqBMugLC65zP4RLzU7YQEiLMuOpkxA4oocUetsTn6RIV4SXhJxCf9C0xnZHdmIibHo
2024-10-21 15:01:22 UTC	743	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 21 Oct 2024 15:01:22 GMT Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Allow: POST Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-21 15:01:22 UTC	635	IN	Data Raw: 36 38 30 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f Data Ascii: 680<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 405 (Bad Request)!!1</title><style>*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{backgro
2024-10-21 15:01:22 UTC	1036	IN	Data Raw: 69 64 74 68 3a 37 37 32 70 78 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 Data Ascii: idth:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#log
2024-10-21 15:01:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49756	216.58.206.36	443	428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 15:01:22 UTC	1190	OUT	GET /recaptcha/api2/payload?p=06AFcWeA5FIWWiN_LfxIUMWCOlSSDqtWfOogEyeV-6OUHNRvODBJTb48-Y9UlUVyjqabT1_MtRGGOxCeOvMtIn4h4wxv6sECZqQ_DnqyrIIlqEsG8u-h_U4Ec_-Hb1GlV4PmVWALQecIUgZEwccipuLAkRRRaPr4zkrCyY47KHDlog7boCmdIPz2imVHep9fVDaNadQ0uCyROTMWsOKs_GjvhTcex8v_c-pw&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw&id=8ecf7397c4057079 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AGteOyplBlu-d31c8ryyFQqBMugLC65zP4RLzU7YQEiLMuOpkxA4oocUetsTn6RIV4SXhJxCf9C0xnZHdmIibHo
2024-10-21 15:01:22 UTC	681	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Mon, 21 Oct 2024 15:01:22 GMT Date: Mon, 21 Oct 2024 15:01:22 GMT Cache-Control: private, max-age=30 Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Cross-Origin-Resource-Policy: same-site Transfer-Encoding: chunked Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-21 15:01:22 UTC	697	IN	Data Raw: 31 34 61 63 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 64 00 64 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 14acJFIFC!"$"$Cdd"}!1AQa"q
2024-10-21 15:01:22 UTC	1378	IN	Data Raw: ed b1 69 ee ae 83 ec 54 8f e4 0a 01 dc 4b 7a e0 e7 03 24 f4 15 ab 7a 19 25 cb d6 c6 d9 58 d6 d8 2a 86 72 57 27 72 8f 9b 3e 98 3c 1c 60 e0 54 82 14 64 05 55 77 06 3b 99 5b 04 91 91 8e 3d b1 f9 f5 f5 f3 f9 bc 51 a9 6a 3a c1 bf 92 ce 4b 4b 5b 65 78 e3 8f 39 2c d8 18 2c 41 03 b7 b9 eb 57 e3 d6 1e cd 5a 6d 3a e1 27 b8 b8 76 92 57 90 66 47 8d 00 1b 17 8e 1b 04 f1 d3 24 f4 cd 63 ce 9a ba 29 3e 89 1d 5c f7 30 40 f6 d1 5c bc 71 4f 73 2e d8 8c 8a 47 98 e5 73 85 3d 39 19 3e c0 7b 56 3e bb e2 7b 0d 33 59 b7 d2 6e 2e 4a 32 a7 da e6 f3 21 2c 0c 6a 49 0b 8c 8d a5 b1 c7 fb bd 39 ae 27 c5 9e 23 4f f8 48 ed 35 18 3c c2 fa 74 f1 a5 c7 9c c4 0b 8f bd b4 f9 40 83 b8 02 dc e7 18 20 73 5c d6 b5 7f 6b 7f 79 73 e2 4d 6e 79 2f 05 ec b2 5b d9 5b 02 3c c8 d8 13 86 91 10 82 02 02 36 Data Ascii: iTKz$z%X*rW'r><`TdUw;[=Qj:KK[ex9,,AWZm:'vWfG$c)>\0@\qOs.Gs=9>{V>{3Yn.J2!,jI9'#OH5<t@ s\kysMny/[[<6
2024-10-21 15:01:22 UTC	1378	IN	Data Raw: 87 52 63 72 37 5b 63 cb 3b fe 52 79 03 a6 79 00 64 e3 af a7 bd 57 80 24 ad 24 8d 98 92 26 63 b0 93 b0 be 0e 49 39 c7 a0 3c e6 8b b8 31 0e f0 db 88 94 c8 14 92 72 49 3d f1 c8 e0 63 b7 d2 ab 5c 4a d1 db 7d 9f 29 1d b2 49 f7 de 6d 85 8e 70 57 f3 c7 1d 46 6b ca 56 e8 76 c5 69 af f5 73 52 c2 cf 74 3b 65 93 cb dd 08 5c 01 f2 e0 aa 9c 80 3a e0 90 7b 9c 91 4b a7 cf 24 70 db 43 79 22 3f d9 b2 52 44 42 52 47 60 7e 66 19 e7 0a 48 cf bd 73 f0 dd 4e f7 4f 13 44 91 97 1b 5b 6b 01 c0 61 d1 89 c9 e7 18 fa d5 e8 75 79 12 e5 6d 9d 64 32 ee 2a 44 bf 33 29 07 b0 6c 76 ad e2 e4 fd db e8 37 7b eb a1 2d df d9 cd b4 96 d2 f9 90 42 c3 22 48 ee 09 1b 77 29 c3 67 bf 03 93 e9 f9 53 48 a7 9d 4c 3a 5d c4 f2 2b 7e f2 48 d2 21 b5 54 60 0f 9b 23 00 ed c9 e7 ae 0d 69 5c dc d9 42 b7 72 5c Data Ascii: Rcr7[c;RyydW$$&cI9<1rI=c\J})ImpWFkVvisRt;e\:{K$pCy"?RDBRG`~fHsNOD[kauymd2*D3)lv7{-B"Hw)gSHL:]+~H!T`#i\Br\
2024-10-21 15:01:22 UTC	1378	IN	Data Raw: 68 fd 09 1e dd 07 63 4d a6 91 49 37 7b a3 4e da ec 5a 40 90 cd 0c db 80 ff 00 9e 49 d3 f1 e4 7a e3 de 8a e4 35 97 8e e6 f0 fd aa 48 cc 91 83 1e 59 98 67 0c 79 c0 06 8a d6 38 55 25 76 74 42 84 65 14 da 77 3a 37 8a 4d 89 e4 ae 4c 8c 37 ee 62 c0 92 38 c0 c7 23 be 7f 4a bf 0d bc d7 fb 2d e6 6f b3 45 13 6c 2f 1e 14 06 c7 de 3f de 00 0c 73 d8 8f 53 5b 90 6a 5a 1d ce a7 6f e6 68 5f e8 d6 a1 a4 68 a4 bc 24 1d df 2b 29 60 3e 5e 59 7a 64 7c a7 9e 6b 52 df c4 de 14 69 a5 84 f8 3a d9 95 98 14 0d 7a a4 aa aa 00 ea 09 eb c9 ce 71 df bf 15 9f d5 dd d3 ea 54 68 bb de e7 22 04 d1 3c ed 19 82 49 91 d9 76 06 18 23 f8 58 7b 11 9c 1e df 85 73 92 49 91 17 95 0b f9 cb 37 dc 1b 9f 2d 92 31 91 f8 63 18 e7 e9 5e 85 e2 ef 10 78 7b 53 b7 81 f4 af 0f 5b 69 97 c1 57 ca b8 05 1b 7a b2 Data Ascii: hcMI7{NZ@Iz5HYgy8U%vtBew:7ML7b8#J-oEl/?sS[jZoh_h$+)`>^Yzd\|kRi:zqTh"<Iv#X{sI7-1c^x{S[iWz
2024-10-21 15:01:22 UTC	469	IN	Data Raw: 57 d4 b4 fd 4b 64 f6 5a 50 b0 ba 32 12 76 5c c9 2a 67 80 a0 07 dd c8 c7 6e c3 d7 9a a5 77 67 6c 60 7b 47 20 a8 20 85 57 c3 31 07 38 19 e7 83 8e fc 71 de 90 59 5b 43 24 4c 55 59 48 25 b0 d9 07 07 a1 f4 ce 73 ef 53 f5 85 52 dc c2 55 15 ee 8d 23 a6 69 f7 13 cc 2e 0d d6 62 90 c6 a7 ed 71 8d c0 77 fb 9e e7 ad 15 91 35 8a c9 33 ca 7c d6 32 1d c7 ec e9 f2 0f 61 81 c6 28 a9 f6 f0 5a 5d 7d cb fc cd 15 59 5b 7f c5 ff 00 99 d5 3c af 2a a0 73 cc cb 86 61 d4 64 1c e3 d2 96 d8 bc f7 2d e6 c8 ee 42 af cc 4e 48 ce 7f 2e 83 9a 28 ae 3a 9a 52 6d 7f 5b 04 f4 83 b1 cf 36 ab 79 13 c1 1c 6e aa 92 20 76 5c 64 67 76 7f 9f 35 2c 1a b6 a5 6c c1 ad ef 25 8c 14 0c 15 4f 03 25 bb 7f 8f ad 14 57 7f fc bb 3b 2e dd 18 b7 d8 d5 b5 d6 f5 46 8a 26 92 ed e4 25 55 b2 e7 38 e5 47 f5 ad 1b 2b Data Ascii: WKdZP2v\gnwgl`{G W18qY[C$LUYH%sSRU#i.bqw53\|2a(Z]}Y[<sad-BNH.(:Rm[6yn v\dgv5,l%O%W;.F&%U8G+
2024-10-21 15:01:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49757	142.251.40.196	443	428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 15:01:23 UTC	858	OUT	GET /recaptcha/api2/payload?p=06AFcWeA5FIWWiN_LfxIUMWCOlSSDqtWfOogEyeV-6OUHNRvODBJTb48-Y9UlUVyjqabT1_MtRGGOxCeOvMtIn4h4wxv6sECZqQ_DnqyrIIlqEsG8u-h_U4Ec_-Hb1GlV4PmVWALQecIUgZEwccipuLAkRRRaPr4zkrCyY47KHDlog7boCmdIPz2imVHep9fVDaNadQ0uCyROTMWsOKs_GjvhTcex8v_c-pw&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw&id=8ecf7397c4057079 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AGteOyplBlu-d31c8ryyFQqBMugLC65zP4RLzU7YQEiLMuOpkxA4oocUetsTn6RIV4SXhJxCf9C0xnZHdmIibHo
2024-10-21 15:01:23 UTC	681	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Mon, 21 Oct 2024 15:01:23 GMT Date: Mon, 21 Oct 2024 15:01:23 GMT Cache-Control: private, max-age=30 Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Transfer-Encoding: chunked Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-21 15:01:23 UTC	697	IN	Data Raw: 31 34 61 63 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 64 00 64 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 14acJFIFC!"$"$Cdd"}!1AQa"q
2024-10-21 15:01:23 UTC	1378	IN	Data Raw: ed b1 69 ee ae 83 ec 54 8f e4 0a 01 dc 4b 7a e0 e7 03 24 f4 15 ab 7a 19 25 cb d6 c6 d9 58 d6 d8 2a 86 72 57 27 72 8f 9b 3e 98 3c 1c 60 e0 54 82 14 64 05 55 77 06 3b 99 5b 04 91 91 8e 3d b1 f9 f5 f5 f3 f9 bc 51 a9 6a 3a c1 bf 92 ce 4b 4b 5b 65 78 e3 8f 39 2c d8 18 2c 41 03 b7 b9 eb 57 e3 d6 1e cd 5a 6d 3a e1 27 b8 b8 76 92 57 90 66 47 8d 00 1b 17 8e 1b 04 f1 d3 24 f4 cd 63 ce 9a ba 29 3e 89 1d 5c f7 30 40 f6 d1 5c bc 71 4f 73 2e d8 8c 8a 47 98 e5 73 85 3d 39 19 3e c0 7b 56 3e bb e2 7b 0d 33 59 b7 d2 6e 2e 4a 32 a7 da e6 f3 21 2c 0c 6a 49 0b 8c 8d a5 b1 c7 fb bd 39 ae 27 c5 9e 23 4f f8 48 ed 35 18 3c c2 fa 74 f1 a5 c7 9c c4 0b 8f bd b4 f9 40 83 b8 02 dc e7 18 20 73 5c d6 b5 7f 6b 7f 79 73 e2 4d 6e 79 2f 05 ec b2 5b d9 5b 02 3c c8 d8 13 86 91 10 82 02 02 36 Data Ascii: iTKz$z%X*rW'r><`TdUw;[=Qj:KK[ex9,,AWZm:'vWfG$c)>\0@\qOs.Gs=9>{V>{3Yn.J2!,jI9'#OH5<t@ s\kysMny/[[<6
2024-10-21 15:01:23 UTC	1378	IN	Data Raw: 87 52 63 72 37 5b 63 cb 3b fe 52 79 03 a6 79 00 64 e3 af a7 bd 57 80 24 ad 24 8d 98 92 26 63 b0 93 b0 be 0e 49 39 c7 a0 3c e6 8b b8 31 0e f0 db 88 94 c8 14 92 72 49 3d f1 c8 e0 63 b7 d2 ab 5c 4a d1 db 7d 9f 29 1d b2 49 f7 de 6d 85 8e 70 57 f3 c7 1d 46 6b ca 56 e8 76 c5 69 af f5 73 52 c2 cf 74 3b 65 93 cb dd 08 5c 01 f2 e0 aa 9c 80 3a e0 90 7b 9c 91 4b a7 cf 24 70 db 43 79 22 3f d9 b2 52 44 42 52 47 60 7e 66 19 e7 0a 48 cf bd 73 f0 dd 4e f7 4f 13 44 91 97 1b 5b 6b 01 c0 61 d1 89 c9 e7 18 fa d5 e8 75 79 12 e5 6d 9d 64 32 ee 2a 44 bf 33 29 07 b0 6c 76 ad e2 e4 fd db e8 37 7b eb a1 2d df d9 cd b4 96 d2 f9 90 42 c3 22 48 ee 09 1b 77 29 c3 67 bf 03 93 e9 f9 53 48 a7 9d 4c 3a 5d c4 f2 2b 7e f2 48 d2 21 b5 54 60 0f 9b 23 00 ed c9 e7 ae 0d 69 5c dc d9 42 b7 72 5c Data Ascii: Rcr7[c;RyydW$$&cI9<1rI=c\J})ImpWFkVvisRt;e\:{K$pCy"?RDBRG`~fHsNOD[kauymd2*D3)lv7{-B"Hw)gSHL:]+~H!T`#i\Br\
2024-10-21 15:01:23 UTC	1378	IN	Data Raw: 68 fd 09 1e dd 07 63 4d a6 91 49 37 7b a3 4e da ec 5a 40 90 cd 0c db 80 ff 00 9e 49 d3 f1 e4 7a e3 de 8a e4 35 97 8e e6 f0 fd aa 48 cc 91 83 1e 59 98 67 0c 79 c0 06 8a d6 38 55 25 76 74 42 84 65 14 da 77 3a 37 8a 4d 89 e4 ae 4c 8c 37 ee 62 c0 92 38 c0 c7 23 be 7f 4a bf 0d bc d7 fb 2d e6 6f b3 45 13 6c 2f 1e 14 06 c7 de 3f de 00 0c 73 d8 8f 53 5b 90 6a 5a 1d ce a7 6f e6 68 5f e8 d6 a1 a4 68 a4 bc 24 1d df 2b 29 60 3e 5e 59 7a 64 7c a7 9e 6b 52 df c4 de 14 69 a5 84 f8 3a d9 95 98 14 0d 7a a4 aa aa 00 ea 09 eb c9 ce 71 df bf 15 9f d5 dd d3 ea 54 68 bb de e7 22 04 d1 3c ed 19 82 49 91 d9 76 06 18 23 f8 58 7b 11 9c 1e df 85 73 92 49 91 17 95 0b f9 cb 37 dc 1b 9f 2d 92 31 91 f8 63 18 e7 e9 5e 85 e2 ef 10 78 7b 53 b7 81 f4 af 0f 5b 69 97 c1 57 ca b8 05 1b 7a b2 Data Ascii: hcMI7{NZ@Iz5HYgy8U%vtBew:7ML7b8#J-oEl/?sS[jZoh_h$+)`>^Yzd\|kRi:zqTh"<Iv#X{sI7-1c^x{S[iWz
2024-10-21 15:01:23 UTC	469	IN	Data Raw: 57 d4 b4 fd 4b 64 f6 5a 50 b0 ba 32 12 76 5c c9 2a 67 80 a0 07 dd c8 c7 6e c3 d7 9a a5 77 67 6c 60 7b 47 20 a8 20 85 57 c3 31 07 38 19 e7 83 8e fc 71 de 90 59 5b 43 24 4c 55 59 48 25 b0 d9 07 07 a1 f4 ce 73 ef 53 f5 85 52 dc c2 55 15 ee 8d 23 a6 69 f7 13 cc 2e 0d d6 62 90 c6 a7 ed 71 8d c0 77 fb 9e e7 ad 15 91 35 8a c9 33 ca 7c d6 32 1d c7 ec e9 f2 0f 61 81 c6 28 a9 f6 f0 5a 5d 7d cb fc cd 15 59 5b 7f c5 ff 00 99 d5 3c af 2a a0 73 cc cb 86 61 d4 64 1c e3 d2 96 d8 bc f7 2d e6 c8 ee 42 af cc 4e 48 ce 7f 2e 83 9a 28 ae 3a 9a 52 6d 7f 5b 04 f4 83 b1 cf 36 ab 79 13 c1 1c 6e aa 92 20 76 5c 64 67 76 7f 9f 35 2c 1a b6 a5 6c c1 ad ef 25 8c 14 0c 15 4f 03 25 bb 7f 8f ad 14 57 7f fc bb 3b 2e dd 18 b7 d8 d5 b5 d6 f5 46 8a 26 92 ed e4 25 55 b2 e7 38 e5 47 f5 ad 1b 2b Data Ascii: WKdZP2v\gnwgl`{G W18qY[C$LUYH%sSRU#i.bqw53\|2a(Z]}Y[<sad-BNH.(:Rm[6yn v\dgv5,l%O%W;.F&%U8G+
2024-10-21 15:01:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49758	216.58.206.36	443	428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 15:01:23 UTC	998	OUT	POST /recaptcha/api2/replaceimage?k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 5580 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AGteOyplBlu-d31c8ryyFQqBMugLC65zP4RLzU7YQEiLMuOpkxA4oocUetsTn6RIV4SXhJxCf9C0xnZHdmIibHo
2024-10-21 15:01:23 UTC	5580	OUT	Data Raw: 76 3d 6c 71 73 54 5a 35 62 65 49 62 43 6b 4b 34 75 47 45 47 76 39 4a 6d 55 52 26 63 3d 30 33 41 46 63 57 65 41 37 34 79 35 52 6a 4b 4d 48 36 68 7a 55 35 6f 75 62 2d 6a 76 5f 4c 66 67 47 58 31 47 36 48 67 6f 65 4f 57 64 52 43 54 71 5f 63 71 2d 4b 2d 36 54 2d 70 4a 75 79 68 49 4c 68 70 45 72 63 6c 55 57 44 76 4f 64 38 75 49 34 30 6c 44 49 33 57 6a 56 4f 6e 46 72 64 46 7a 6e 48 57 38 63 7a 56 44 78 35 39 59 57 31 51 6d 45 6a 59 5a 6e 4d 6c 49 73 67 54 46 66 6b 65 77 58 72 71 71 4f 4e 5a 69 6f 77 44 52 53 47 6d 63 49 38 72 32 77 67 56 31 64 33 5a 59 6d 66 59 49 6e 70 6c 76 54 4a 72 65 4a 64 6f 5a 49 35 43 4c 69 4a 5f 61 4b 67 75 54 65 5a 4c 49 78 64 30 65 6c 56 6c 7a 56 79 49 77 74 33 49 38 58 48 68 73 55 36 5a 78 32 4c 72 61 70 41 57 34 79 4d 4c 65 6e 64 4f Data Ascii: v=lqsTZ5beIbCkK4uGEGv9JmUR&c=03AFcWeA74y5RjKMH6hzU5oub-jv_LfgGX1G6HgoeOWdRCTq_cq-K-6T-pJuyhILhpErclUWDvOd8uI40lDI3WjVOnFrdFznHW8czVDx59YW1QmEjYZnMlIsgTFfkewXrqqONZiowDRSGmcI8r2wgV1d3ZYmfYInplvTJreJdoZI5CLiJ_aKguTeZLIxd0elVlzVyIwt3I8XHhsU6Zx2LrapAW4yMLendO
2024-10-21 15:01:23 UTC	694	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: same-site Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Date: Mon, 21 Oct 2024 15:01:23 GMT Server: ESF Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-21 15:01:23 UTC	684	IN	Data Raw: 31 36 62 62 0d 0a 29 5d 7d 27 0a 5b 22 64 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 36 68 70 4d 44 61 4e 56 54 41 31 77 36 41 71 41 49 6e 31 63 58 5a 6c 4e 30 7a 59 56 5f 61 36 30 63 57 68 74 5f 55 4d 31 6d 73 35 4a 45 30 77 5a 7a 64 4c 45 4d 4e 45 50 30 61 5a 57 34 75 4a 69 31 63 49 30 75 6c 4c 52 70 62 5a 52 77 77 6a 47 41 42 70 31 4c 42 69 4b 55 47 5f 4d 6e 75 4b 73 67 76 76 63 32 74 70 73 77 4c 32 49 6b 56 38 64 30 57 46 66 2d 42 47 52 69 42 37 72 51 4d 74 41 36 62 52 64 75 38 58 4b 31 59 79 48 72 49 64 47 33 6e 30 39 53 6c 76 44 48 75 44 38 30 32 55 54 30 63 6a 58 58 6a 57 68 70 53 35 65 32 58 69 77 63 4f 30 43 43 34 49 74 66 58 47 4c 57 46 7a 2d 51 79 5f 76 6d 76 70 34 63 6d 51 7a 30 4a 37 42 6c 37 6b 56 4b 4c 39 64 68 4e 6d 5a 72 4f 31 53 38 4a Data Ascii: 16bb)]}'["dresp","03AFcWeA6hpMDaNVTA1w6AqAIn1cXZlN0zYV_a60cWht_UM1ms5JE0wZzdLEMNEP0aZW4uJi1cI0ulLRpbZRwwjGABp1LBiKUG_MnuKsgvvc2tpswL2IkV8d0WFf-BGRiB7rQMtA6bRdu8XK1YyHrIdG3n09SlvDHuD802UT0cjXXjWhpS5e2XiwcO0CC4ItfXGLWFz-Qy_vmvp4cmQz0J7Bl7kVKL9dhNmZrO1S8J
2024-10-21 15:01:23 UTC	1378	IN	Data Raw: 71 6b 49 45 6f 47 56 77 62 59 4e 47 30 54 53 55 6b 74 74 68 64 61 53 73 54 53 6a 73 61 30 48 70 4f 51 6b 43 6d 4e 41 61 43 4e 5a 67 62 4b 58 57 62 42 77 53 46 6b 6b 47 4e 6f 35 53 53 79 4f 56 4c 79 7a 68 71 6b 56 31 35 36 5a 44 68 43 41 52 2d 52 38 57 70 50 33 59 62 62 34 67 47 32 63 31 56 63 4a 42 44 32 6e 66 58 6a 50 58 35 32 36 44 4b 71 73 4c 68 74 46 55 73 6c 69 56 63 76 4e 77 6a 51 62 73 51 79 63 48 61 76 71 51 4d 6f 4a 5f 56 4c 76 76 31 34 6d 77 65 65 6c 45 31 4a 59 32 4d 4e 63 50 4b 47 41 55 6b 74 39 79 6a 74 72 65 53 64 71 58 41 5f 6f 47 50 5f 74 72 4d 6f 44 51 58 38 33 36 71 79 6d 43 69 2d 4b 4b 58 47 6d 48 6e 6f 72 52 53 75 33 46 43 39 4c 55 72 5a 70 6a 4f 64 6f 69 45 38 32 32 30 50 41 30 32 34 2d 79 34 32 65 42 63 33 62 4f 70 32 57 6d 62 62 51 Data Ascii: qkIEoGVwbYNG0TSUktthdaSsTSjsa0HpOQkCmNAaCNZgbKXWbBwSFkkGNo5SSyOVLyzhqkV156ZDhCAR-R8WpP3Ybb4gG2c1VcJBD2nfXjPX526DKqsLhtFUsliVcvNwjQbsQycHavqQMoJ_VLvv14mweelE1JY2MNcPKGAUkt9yjtreSdqXA_oGP_trMoDQX836qymCi-KKXGmHnorRSu3FC9LUrZpjOdoiE8220PA024-y42eBc3bOp2WmbbQ
2024-10-21 15:01:23 UTC	1378	IN	Data Raw: 35 52 4f 67 36 4b 65 65 73 77 6e 63 41 78 37 7a 39 76 6e 77 5a 73 51 54 56 71 65 32 37 37 42 5a 53 79 6e 47 49 68 58 34 4f 4c 41 4f 5f 44 49 44 69 6d 50 70 69 33 42 78 54 52 38 51 61 71 44 32 34 48 44 61 76 77 38 64 73 68 30 6d 70 4f 67 44 34 62 61 64 6f 47 5f 78 75 74 55 6a 6c 4c 36 61 7a 78 36 7a 79 54 65 73 49 78 53 68 4e 55 54 5f 68 62 6f 6d 78 58 4f 6b 76 4e 41 6f 39 67 74 65 6b 4e 38 4f 67 48 52 56 37 4f 7a 6d 74 6b 62 32 51 64 6d 6b 76 51 6a 67 34 65 4c 30 49 4e 47 31 37 72 6f 47 47 4f 61 73 70 46 4c 36 36 33 48 64 5a 74 66 4f 35 67 67 6e 36 55 6b 35 4a 75 78 4d 67 78 6c 37 53 73 5a 6e 47 32 69 33 42 4c 72 66 66 6d 58 6a 4f 63 4b 56 39 61 35 79 61 43 4c 57 65 74 6a 49 74 78 54 4b 55 4e 47 32 54 38 58 73 7a 44 59 51 51 54 35 78 49 75 36 61 44 68 42 Data Ascii: 5ROg6KeeswncAx7z9vnwZsQTVqe277BZSynGIhX4OLAO_DIDimPpi3BxTR8QaqD24HDavw8dsh0mpOgD4badoG_xutUjlL6azx6zyTesIxShNUT_hbomxXOkvNAo9gtekN8OgHRV7Ozmtkb2QdmkvQjg4eL0ING17roGGOaspFL663HdZtfO5ggn6Uk5JuxMgxl7SsZnG2i3BLrffmXjOcKV9a5yaCLWetjItxTKUNG2T8XszDYQQT5xIu6aDhB
2024-10-21 15:01:23 UTC	1378	IN	Data Raw: 62 4e 32 2d 5a 77 41 56 67 58 36 76 78 64 61 46 33 42 6b 5a 59 70 38 7a 37 59 39 58 70 57 38 50 66 49 53 70 77 51 2d 2d 6e 75 56 6c 68 72 74 66 63 57 50 35 73 5f 75 4a 44 30 6d 6e 73 38 48 54 6f 6c 43 76 32 50 6e 5a 43 55 63 46 4c 41 56 66 35 71 76 72 75 59 77 35 66 36 63 33 54 4a 4a 66 31 4b 63 68 78 31 75 73 4b 59 39 79 4b 72 4f 30 71 56 5f 6f 59 48 74 4c 65 30 57 63 4f 47 79 78 78 6f 5a 68 49 75 6a 54 6c 6c 32 6a 6c 68 39 48 51 62 6d 30 54 4b 59 31 6a 4a 53 65 30 46 43 77 68 5f 71 47 47 50 4d 52 4b 72 67 51 71 32 75 7a 6d 61 34 35 51 42 58 37 73 69 73 59 39 56 34 62 66 52 57 47 48 51 51 6f 6e 30 69 37 53 55 49 78 45 6d 71 45 4a 41 51 50 4b 69 4d 73 68 57 44 30 4b 43 6b 54 4e 52 42 58 74 31 37 54 63 70 69 5f 47 77 4b 77 39 39 66 56 41 51 36 43 44 31 51 Data Ascii: bN2-ZwAVgX6vxdaF3BkZYp8z7Y9XpW8PfISpwQ--nuVlhrtfcWP5s_uJD0mns8HTolCv2PnZCUcFLAVf5qvruYw5f6c3TJJf1Kchx1usKY9yKrO0qV_oYHtLe0WcOGyxxoZhIujTll2jlh9HQbm0TKY1jJSe0FCwh_qGGPMRKrgQq2uzma45QBX7sisY9V4bfRWGHQQon0i7SUIxEmqEJAQPKiMshWD0KCkTNRBXt17Tcpi_GwKw99fVAQ6CD1Q
2024-10-21 15:01:23 UTC	1009	IN	Data Raw: 58 53 68 7a 56 78 50 34 6d 6e 4a 35 44 57 79 65 36 65 77 6d 4a 67 6c 37 59 59 36 47 45 2d 4c 41 6e 77 66 4d 57 2d 49 50 34 78 42 67 4c 39 58 5a 6a 6f 74 4e 33 76 63 53 55 55 41 51 48 52 55 65 48 52 31 6f 50 46 65 30 6b 31 2d 34 6a 7a 78 6b 35 4b 61 4f 68 6a 75 63 76 67 2d 59 6d 6a 78 7a 41 73 4e 71 30 5f 4e 72 6e 58 75 35 34 34 78 62 56 79 6f 71 47 48 59 31 64 32 67 37 69 31 55 47 76 2d 74 5a 6f 6f 46 6c 37 69 56 37 55 48 62 34 37 73 49 6e 4e 64 76 4c 57 67 79 30 58 2d 47 53 68 37 4d 50 36 6c 6f 62 69 72 58 69 4a 4c 76 33 4b 43 50 7a 73 34 76 6d 54 43 4f 62 78 30 5a 36 64 75 54 59 69 4a 54 57 36 57 79 4f 6d 7a 70 74 4d 6d 4f 48 4d 59 6d 59 37 37 44 62 59 6b 66 67 32 55 4b 59 77 42 46 5a 42 75 42 54 56 4b 45 54 53 42 77 38 76 50 68 2d 5f 75 55 6f 64 53 54 Data Ascii: XShzVxP4mnJ5DWye6ewmJgl7YY6GE-LAnwfMW-IP4xBgL9XZjotN3vcSUUAQHRUeHR1oPFe0k1-4jzxk5KaOhjucvg-YmjxzAsNq0_NrnXu544xbVyoqGHY1d2g7i1UGv-tZooFl7iV7UHb47sInNdvLWgy0X-GSh7MP6lobirXiJLv3KCPzs4vmTCObx0Z6duTYiJTW6WyOmzptMmOHMYmY77DbYkfg2UKYwBFZBuBTVKETSBw8vPh-_uUodST
2024-10-21 15:01:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49759	142.251.40.196	443	428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 15:01:24 UTC	612	OUT	GET /recaptcha/api2/replaceimage?k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AGteOyplBlu-d31c8ryyFQqBMugLC65zP4RLzU7YQEiLMuOpkxA4oocUetsTn6RIV4SXhJxCf9C0xnZHdmIibHo
2024-10-21 15:01:24 UTC	743	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 21 Oct 2024 15:01:24 GMT Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Allow: POST Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-21 15:01:24 UTC	635	IN	Data Raw: 36 38 30 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f Data Ascii: 680<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 405 (Bad Request)!!1</title><style>*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{backgro
2024-10-21 15:01:24 UTC	1036	IN	Data Raw: 69 64 74 68 3a 37 37 32 70 78 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 Data Ascii: idth:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#log
2024-10-21 15:01:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49760	216.58.206.36	443	428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 15:01:24 UTC	1190	OUT	GET /recaptcha/api2/payload?p=06AFcWeA5IwZZgluG9qztb_r9IGqvYvWE-t80qjOoUoIBsHoOVFAEVHFS7SJDSsAikaxdvlfzSXAR1IrKISUB6xatpiwL9tc46HM80TXUuomBCHkMuly5kApiCiyj-vgNwciuI3TX3A3NILzVT1gfMvg00E5Dbk7Ly-tWbc1cl4SmrunF_JDBzOJCzC29IxcImtocybocYm1oEvOhfSq_djC7swniQVSKWEQ&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw&id=ca2d9c6f02cbfd66 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AGteOyplBlu-d31c8ryyFQqBMugLC65zP4RLzU7YQEiLMuOpkxA4oocUetsTn6RIV4SXhJxCf9C0xnZHdmIibHo
2024-10-21 15:01:25 UTC	681	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Mon, 21 Oct 2024 15:01:24 GMT Date: Mon, 21 Oct 2024 15:01:24 GMT Cache-Control: private, max-age=30 Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Cross-Origin-Resource-Policy: same-site Transfer-Encoding: chunked Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-21 15:01:25 UTC	697	IN	Data Raw: 66 35 61 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 64 00 64 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 Data Ascii: f5aJFIFC!"$"$Cdd"}!1AQa"q
2024-10-21 15:01:25 UTC	1378	IN	Data Raw: 69 de 16 d1 ff 00 b4 ef f2 f1 79 a2 3d a8 46 ec e0 93 8f a0 19 c7 a6 69 be 12 f1 36 99 e2 ab 15 bd d2 16 e1 e0 39 cb bc 7b 42 f3 8c 13 eb c7 41 9e 30 4e 32 33 3c f1 e6 e5 be a1 63 48 a9 a4 2b 56 0a 7b 1f ca 9a 53 eb f9 55 08 87 6f b5 14 a1 d0 b3 28 59 72 a7 07 f7 4d d7 f2 e6 8a 2c 3b 9c 57 c2 ff 00 16 dd 6a 7a 9c ba 7d f5 ad d5 9d b4 aa bf d9 56 4f 6a 56 58 ed c0 c0 91 d8 12 36 9c 60 7d 2b d2 1a 00 0f 7f cc d7 c8 df 04 b5 0f 11 eb bf 1a 34 5d 66 38 e5 b9 8d 96 18 25 6c 99 7c b8 95 76 ee 6c 9d ca 0e df a6 49 fa 57 d2 73 fc 4d f0 4e 9f 6c ab ae f8 97 49 b6 d4 11 7f d2 6d ad a5 6b 93 13 0e aa 42 02 72 3e 9d 6b 3a 72 ba 1b 56 3a 0b af 26 da da 5b 89 8a a4 51 21 77 63 d0 28 19 26 a4 10 a9 00 ed 1c d7 9a 6b 1f 1e fe 1e 41 1c 91 40 9a ae a4 18 15 c4 56 81 55 81 Data Ascii: iy=Fi69{BA0N23<cH+V{SUo(YrM,;Wjz}VOjVX6`}+4]f8%l\|vlIWsMNlImkBr>k:rV:&[Q!wc(&kA@VU
2024-10-21 15:01:25 UTC	1378	IN	Data Raw: fd d5 15 e6 35 5e ab fd ec ed e9 73 7e 48 c7 e1 47 9f 4f 7d 71 a8 e9 86 6b 29 6e a3 da bf b8 9a 28 bc c0 a0 f0 7e 5e c4 64 f7 ef 9a e4 2c 2c 3c 41 67 7c 4c b9 be b3 9d b6 ca 56 40 eb 22 1e 0e 41 e9 d4 f5 ef 5f 44 db e8 1e 10 58 56 2b 3f 09 cf 2c 69 f7 77 dd 4b 8f fb e5 48 15 24 96 fa 6e 9d 6c cb a7 f8 43 45 86 40 c0 93 78 37 0e a3 83 bc e4 56 70 c3 4b 55 29 5f e5 fa 96 ec 9d d2 3c 12 f3 c2 17 4f a4 2d ae 9d 7e d1 c8 99 51 1d de 22 dc 09 27 8c 13 eb 59 3a 57 81 3c 43 06 a1 0c ac 91 5c 6e 04 6d b5 7f 34 af b9 23 81 f9 d7 d3 b6 ba ec f0 95 4d 33 4f b6 8e 41 c7 fc 4b 74 97 98 e7 fe d9 a3 55 fd 3a e7 c7 1a fd b4 e6 ce d3 c4 2c 8a a5 7f 79 64 6c f3 9e 3e 5f 34 47 9f c2 bb f0 f0 ab 05 67 77 f2 b1 9c a3 07 e4 7c f9 61 f0 df c6 b7 4f 1b 27 86 f5 60 07 f1 35 b3 05 Data Ascii: 5^s~HGO}qk)n(~^d,,<Ag\|LV@"A_DXV+?,iwKH$nlCE@x7VpKU)_<O-~Q"'Y:W<C\nm4#M3OAKtU:,ydl>_4Ggw\|aO'`5
2024-10-21 15:01:25 UTC	484	IN	Data Raw: 58 6a 09 a8 eb 2e 81 a3 21 a1 b6 46 0c 01 ec 58 8f 4f 41 ff 00 d6 a7 0c 54 af 6b 1d 55 70 54 23 1b f3 df d0 e5 df c1 fe 25 bb ba 96 e2 6b 68 92 49 5c bb 17 99 7a 93 9e d9 ab 70 7c 3e d6 1b 06 5b 9b 28 fe 8c cd ff 00 b2 8a f4 d7 97 27 e5 03 f0 a4 41 23 73 92 2b 55 56 0f 64 70 b8 c9 6e 70 03 e1 f4 fb 40 9f 56 18 e0 61 60 27 19 f7 2d 57 57 e1 fd 80 1f bd d4 6e 5b fd d0 ab fc c1 ae ae eb 79 05 33 83 eb 9a a8 f7 4b b3 3e be b5 32 ae 97 42 95 36 fa 9c f8 f0 46 83 11 cb b5 c4 84 7f 7a 5f f0 c5 4d 17 86 3c 3d 17 dd b3 19 f5 32 39 fe b5 72 7b af 42 2a ab dd f2 72 df ad 47 d6 3b 22 fd 97 76 24 7a 3e 96 8c f9 d2 ed 42 af 2a cc 80 ff 00 53 fc 85 5a b6 d3 2d 41 66 92 0d 3e 31 9e 30 57 3f 96 33 54 a5 bb 1e 5b 7c dd 8d 42 6e 18 9c 80 71 4b db cf a0 fd 94 7a 9a ed 69 63 Data Ascii: Xj.!FXOATkUpT#%khI\zp\|>[('A#s+UVdpnp@Va`'-WWn[y3K>2B6Fz_M<=29r{BrG;"v$z>BSZ-Af>10W?3T[\|BnqKzic
2024-10-21 15:01:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49761	142.251.40.196	443	428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 15:01:25 UTC	858	OUT	GET /recaptcha/api2/payload?p=06AFcWeA5IwZZgluG9qztb_r9IGqvYvWE-t80qjOoUoIBsHoOVFAEVHFS7SJDSsAikaxdvlfzSXAR1IrKISUB6xatpiwL9tc46HM80TXUuomBCHkMuly5kApiCiyj-vgNwciuI3TX3A3NILzVT1gfMvg00E5Dbk7Ly-tWbc1cl4SmrunF_JDBzOJCzC29IxcImtocybocYm1oEvOhfSq_djC7swniQVSKWEQ&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw&id=ca2d9c6f02cbfd66 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AGteOyplBlu-d31c8ryyFQqBMugLC65zP4RLzU7YQEiLMuOpkxA4oocUetsTn6RIV4SXhJxCf9C0xnZHdmIibHo
2024-10-21 15:01:25 UTC	681	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Mon, 21 Oct 2024 15:01:25 GMT Date: Mon, 21 Oct 2024 15:01:25 GMT Cache-Control: private, max-age=30 Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Transfer-Encoding: chunked Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-21 15:01:25 UTC	697	IN	Data Raw: 66 35 61 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 64 00 64 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 Data Ascii: f5aJFIFC!"$"$Cdd"}!1AQa"q
2024-10-21 15:01:25 UTC	1378	IN	Data Raw: 69 de 16 d1 ff 00 b4 ef f2 f1 79 a2 3d a8 46 ec e0 93 8f a0 19 c7 a6 69 be 12 f1 36 99 e2 ab 15 bd d2 16 e1 e0 39 cb bc 7b 42 f3 8c 13 eb c7 41 9e 30 4e 32 33 3c f1 e6 e5 be a1 63 48 a9 a4 2b 56 0a 7b 1f ca 9a 53 eb f9 55 08 87 6f b5 14 a1 d0 b3 28 59 72 a7 07 f7 4d d7 f2 e6 8a 2c 3b 9c 57 c2 ff 00 16 dd 6a 7a 9c ba 7d f5 ad d5 9d b4 aa bf d9 56 4f 6a 56 58 ed c0 c0 91 d8 12 36 9c 60 7d 2b d2 1a 00 0f 7f cc d7 c8 df 04 b5 0f 11 eb bf 1a 34 5d 66 38 e5 b9 8d 96 18 25 6c 99 7c b8 95 76 ee 6c 9d ca 0e df a6 49 fa 57 d2 73 fc 4d f0 4e 9f 6c ab ae f8 97 49 b6 d4 11 7f d2 6d ad a5 6b 93 13 0e aa 42 02 72 3e 9d 6b 3a 72 ba 1b 56 3a 0b af 26 da da 5b 89 8a a4 51 21 77 63 d0 28 19 26 a4 10 a9 00 ed 1c d7 9a 6b 1f 1e fe 1e 41 1c 91 40 9a ae a4 18 15 c4 56 81 55 81 Data Ascii: iy=Fi69{BA0N23<cH+V{SUo(YrM,;Wjz}VOjVX6`}+4]f8%l\|vlIWsMNlImkBr>k:rV:&[Q!wc(&kA@VU
2024-10-21 15:01:25 UTC	1378	IN	Data Raw: fd d5 15 e6 35 5e ab fd ec ed e9 73 7e 48 c7 e1 47 9f 4f 7d 71 a8 e9 86 6b 29 6e a3 da bf b8 9a 28 bc c0 a0 f0 7e 5e c4 64 f7 ef 9a e4 2c 2c 3c 41 67 7c 4c b9 be b3 9d b6 ca 56 40 eb 22 1e 0e 41 e9 d4 f5 ef 5f 44 db e8 1e 10 58 56 2b 3f 09 cf 2c 69 f7 77 dd 4b 8f fb e5 48 15 24 96 fa 6e 9d 6c cb a7 f8 43 45 86 40 c0 93 78 37 0e a3 83 bc e4 56 70 c3 4b 55 29 5f e5 fa 96 ec 9d d2 3c 12 f3 c2 17 4f a4 2d ae 9d 7e d1 c8 99 51 1d de 22 dc 09 27 8c 13 eb 59 3a 57 81 3c 43 06 a1 0c ac 91 5c 6e 04 6d b5 7f 34 af b9 23 81 f9 d7 d3 b6 ba ec f0 95 4d 33 4f b6 8e 41 c7 fc 4b 74 97 98 e7 fe d9 a3 55 fd 3a e7 c7 1a fd b4 e6 ce d3 c4 2c 8a a5 7f 79 64 6c f3 9e 3e 5f 34 47 9f c2 bb f0 f0 ab 05 67 77 f2 b1 9c a3 07 e4 7c f9 61 f0 df c6 b7 4f 1b 27 86 f5 60 07 f1 35 b3 05 Data Ascii: 5^s~HGO}qk)n(~^d,,<Ag\|LV@"A_DXV+?,iwKH$nlCE@x7VpKU)_<O-~Q"'Y:W<C\nm4#M3OAKtU:,ydl>_4Ggw\|aO'`5
2024-10-21 15:01:25 UTC	484	IN	Data Raw: 58 6a 09 a8 eb 2e 81 a3 21 a1 b6 46 0c 01 ec 58 8f 4f 41 ff 00 d6 a7 0c 54 af 6b 1d 55 70 54 23 1b f3 df d0 e5 df c1 fe 25 bb ba 96 e2 6b 68 92 49 5c bb 17 99 7a 93 9e d9 ab 70 7c 3e d6 1b 06 5b 9b 28 fe 8c cd ff 00 b2 8a f4 d7 97 27 e5 03 f0 a4 41 23 73 92 2b 55 56 0f 64 70 b8 c9 6e 70 03 e1 f4 fb 40 9f 56 18 e0 61 60 27 19 f7 2d 57 57 e1 fd 80 1f bd d4 6e 5b fd d0 ab fc c1 ae ae eb 79 05 33 83 eb 9a a8 f7 4b b3 3e be b5 32 ae 97 42 95 36 fa 9c f8 f0 46 83 11 cb b5 c4 84 7f 7a 5f f0 c5 4d 17 86 3c 3d 17 dd b3 19 f5 32 39 fe b5 72 7b af 42 2a ab dd f2 72 df ad 47 d6 3b 22 fd 97 76 24 7a 3e 96 8c f9 d2 ed 42 af 2a cc 80 ff 00 53 fc 85 5a b6 d3 2d 41 66 92 0d 3e 31 9e 30 57 3f 96 33 54 a5 bb 1e 5b 7c dd 8d 42 6e 18 9c 80 71 4b db cf a0 fd 94 7a 9a ed 69 63 Data Ascii: Xj.!FXOATkUpT#%khI\zp\|>[('A#s+UVdpnp@Va`'-WWn[y3K>2B6Fz_M<=29r{BrG;"v$z>BSZ-Af>10W?3T[\|BnqKzic
2024-10-21 15:01:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49762	216.58.206.36	443	428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 15:01:26 UTC	998	OUT	POST /recaptcha/api2/replaceimage?k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 5580 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AGteOyplBlu-d31c8ryyFQqBMugLC65zP4RLzU7YQEiLMuOpkxA4oocUetsTn6RIV4SXhJxCf9C0xnZHdmIibHo
2024-10-21 15:01:26 UTC	5580	OUT	Data Raw: 76 3d 6c 71 73 54 5a 35 62 65 49 62 43 6b 4b 34 75 47 45 47 76 39 4a 6d 55 52 26 63 3d 30 33 41 46 63 57 65 41 36 68 70 4d 44 61 4e 56 54 41 31 77 36 41 71 41 49 6e 31 63 58 5a 6c 4e 30 7a 59 56 5f 61 36 30 63 57 68 74 5f 55 4d 31 6d 73 35 4a 45 30 77 5a 7a 64 4c 45 4d 4e 45 50 30 61 5a 57 34 75 4a 69 31 63 49 30 75 6c 4c 52 70 62 5a 52 77 77 6a 47 41 42 70 31 4c 42 69 4b 55 47 5f 4d 6e 75 4b 73 67 76 76 63 32 74 70 73 77 4c 32 49 6b 56 38 64 30 57 46 66 2d 42 47 52 69 42 37 72 51 4d 74 41 36 62 52 64 75 38 58 4b 31 59 79 48 72 49 64 47 33 6e 30 39 53 6c 76 44 48 75 44 38 30 32 55 54 30 63 6a 58 58 6a 57 68 70 53 35 65 32 58 69 77 63 4f 30 43 43 34 49 74 66 58 47 4c 57 46 7a 2d 51 79 5f 76 6d 76 70 34 63 6d 51 7a 30 4a 37 42 6c 37 6b 56 4b 4c 39 64 68 4e Data Ascii: v=lqsTZ5beIbCkK4uGEGv9JmUR&c=03AFcWeA6hpMDaNVTA1w6AqAIn1cXZlN0zYV_a60cWht_UM1ms5JE0wZzdLEMNEP0aZW4uJi1cI0ulLRpbZRwwjGABp1LBiKUG_MnuKsgvvc2tpswL2IkV8d0WFf-BGRiB7rQMtA6bRdu8XK1YyHrIdG3n09SlvDHuD802UT0cjXXjWhpS5e2XiwcO0CC4ItfXGLWFz-Qy_vmvp4cmQz0J7Bl7kVKL9dhN
2024-10-21 15:01:26 UTC	694	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Date: Mon, 21 Oct 2024 15:01:26 GMT Server: ESF Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-21 15:01:26 UTC	684	IN	Data Raw: 31 36 64 30 0d 0a 29 5d 7d 27 0a 5b 22 64 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 34 68 4f 63 33 5a 66 55 4b 42 41 46 56 39 52 69 55 59 71 6c 79 52 37 51 6c 6a 73 6d 66 63 67 58 4d 79 44 63 31 75 68 53 5f 34 63 79 2d 4b 5a 43 5f 4a 41 56 78 48 4c 31 48 78 59 6f 35 57 31 52 69 4b 55 44 45 36 72 33 7a 65 33 6e 55 2d 34 46 71 53 4c 41 6a 63 4b 50 30 6b 55 6c 6c 55 50 35 4a 51 6f 38 73 41 46 64 5a 69 56 62 30 53 39 52 49 52 42 53 4d 67 7a 4b 41 38 59 51 4d 58 34 78 67 71 7a 74 35 75 33 42 30 38 70 67 6a 42 49 64 47 64 43 35 35 53 33 79 65 63 4c 4b 4c 49 79 44 4d 61 30 41 34 70 47 6e 54 54 46 55 79 42 57 5a 6b 4d 71 7a 61 4a 71 62 47 69 55 33 38 72 32 39 4a 73 7a 68 78 59 79 58 6c 63 48 76 6a 33 73 39 55 65 7a 42 57 74 76 68 36 75 4b 36 66 6c 68 35 63 47 Data Ascii: 16d0)]}'["dresp","03AFcWeA4hOc3ZfUKBAFV9RiUYqlyR7QljsmfcgXMyDc1uhS_4cy-KZC_JAVxHL1HxYo5W1RiKUDE6r3ze3nU-4FqSLAjcKP0kUllUP5JQo8sAFdZiVb0S9RIRBSMgzKA8YQMX4xgqzt5u3B08pgjBIdGdC55S3yecLKLIyDMa0A4pGnTTFUyBWZkMqzaJqbGiU38r29JszhxYyXlcHvj3s9UezBWtvh6uK6flh5cG
2024-10-21 15:01:26 UTC	1378	IN	Data Raw: 45 5a 65 6a 78 5f 64 58 38 64 64 37 59 53 30 5a 73 5f 79 35 30 33 65 4a 67 50 44 4a 32 66 54 63 6e 47 76 6b 55 56 73 72 63 72 44 36 2d 72 44 5a 4f 38 57 48 69 77 57 5a 7a 64 4c 35 4c 43 66 56 5f 42 53 37 49 5a 2d 36 6f 64 74 7a 65 4e 75 2d 5a 61 50 74 32 46 69 30 4f 4d 32 7a 58 6b 33 76 31 66 72 34 33 57 43 6f 71 45 64 6a 46 75 41 33 6e 45 6c 43 6e 72 4e 67 32 64 63 4f 4f 39 73 79 39 58 76 4f 51 32 2d 74 34 59 59 53 75 65 6d 38 66 79 50 34 37 76 32 44 73 78 58 75 72 41 73 69 75 2d 59 66 42 32 30 33 38 64 59 33 33 62 73 7a 72 63 55 63 35 7a 64 63 4c 52 4d 5f 43 58 37 4f 5a 34 31 30 62 5a 46 68 4e 37 53 4f 43 54 57 6d 56 46 44 42 4b 35 6d 77 56 2d 31 6b 57 4c 6c 6b 4e 78 49 38 56 69 79 4f 37 5f 45 6f 78 4f 6c 75 43 39 2d 69 72 46 49 68 54 49 57 30 71 36 35 Data Ascii: EZejx_dX8dd7YS0Zs_y503eJgPDJ2fTcnGvkUVsrcrD6-rDZO8WHiwWZzdL5LCfV_BS7IZ-6odtzeNu-ZaPt2Fi0OM2zXk3v1fr43WCoqEdjFuA3nElCnrNg2dcOO9sy9XvOQ2-t4YYSuem8fyP47v2DsxXurAsiu-YfB2038dY33bszrcUc5zdcLRM_CX7OZ410bZFhN7SOCTWmVFDBK5mwV-1kWLlkNxI8ViyO7_EoxOluC9-irFIhTIW0q65
2024-10-21 15:01:26 UTC	1378	IN	Data Raw: 32 2d 35 4f 78 74 5f 38 6a 5f 78 4d 77 64 57 6e 50 32 39 64 47 62 4f 37 5f 5f 65 2d 73 54 7a 4a 6f 50 64 42 41 31 67 6a 6b 4e 56 50 77 53 68 74 44 73 74 6d 75 76 59 43 7a 48 4b 53 4c 77 33 2d 58 38 34 79 74 61 4a 6b 67 5f 4c 54 59 63 6f 68 31 77 50 48 4c 4c 47 6b 52 37 58 56 71 78 57 65 65 67 74 6e 31 74 56 56 61 61 53 6f 4d 6a 6a 68 31 72 49 58 4e 49 55 31 63 52 6b 68 53 36 32 54 48 31 7a 4c 58 64 6d 76 54 47 58 5f 54 72 38 43 70 75 4e 52 48 6d 58 65 66 71 37 5f 54 7a 69 6f 65 4e 4d 6a 41 4a 4b 4e 53 78 5a 79 45 4b 50 51 79 42 4f 44 73 55 4c 76 33 4b 67 70 68 77 6c 45 55 64 30 62 50 69 79 59 6c 64 68 74 31 6c 75 6d 34 4c 63 77 58 48 75 4a 38 79 50 61 73 72 6d 54 34 44 48 4b 38 69 30 73 48 62 44 52 75 52 47 6e 6d 59 38 56 78 73 74 46 66 48 5a 35 34 6f 47 Data Ascii: 2-5Oxt_8j_xMwdWnP29dGbO7__e-sTzJoPdBA1gjkNVPwShtDstmuvYCzHKSLw3-X84ytaJkg_LTYcoh1wPHLLGkR7XVqxWeegtn1tVVaaSoMjjh1rIXNIU1cRkhS62TH1zLXdmvTGX_Tr8CpuNRHmXefq7_TzioeNMjAJKNSxZyEKPQyBODsULv3KgphwlEUd0bPiyYldht1lum4LcwXHuJ8yPasrmT4DHK8i0sHbDRuRGnmY8VxstFfHZ54oG
2024-10-21 15:01:26 UTC	1378	IN	Data Raw: 35 42 4e 75 2d 76 4f 79 43 78 4c 7a 32 6a 65 4c 4b 39 4f 74 69 4f 6c 6f 54 4a 30 49 72 4a 50 50 33 59 46 50 74 4d 52 38 67 69 43 37 6a 41 70 47 6e 72 61 48 76 51 34 6e 37 44 57 74 63 76 35 6f 6d 55 75 4e 53 4c 4c 42 32 78 49 62 36 50 79 75 78 68 74 47 51 73 47 70 4a 45 44 48 63 74 38 48 49 70 43 4f 5f 6c 66 42 70 4a 69 5a 6d 5a 62 45 73 6f 6d 58 50 51 6f 74 59 50 2d 78 6f 45 39 4b 65 4f 56 63 75 36 33 72 75 6b 55 6f 37 62 78 31 69 5f 6e 31 4e 34 43 49 53 34 64 2d 57 6e 72 31 4d 77 6a 49 6b 6c 69 35 72 34 63 77 61 4d 71 5f 74 4b 51 52 53 4d 6c 37 41 63 74 4a 77 44 58 61 53 7a 44 6a 76 30 38 45 62 44 4f 39 73 6e 46 66 48 5f 53 58 36 59 73 72 66 49 4a 34 6d 45 4e 31 69 59 66 65 41 34 55 73 31 42 49 45 41 37 75 50 37 42 48 45 45 78 73 63 33 76 70 47 53 31 34 Data Ascii: 5BNu-vOyCxLz2jeLK9OtiOloTJ0IrJPP3YFPtMR8giC7jApGnraHvQ4n7DWtcv5omUuNSLLB2xIb6PyuxhtGQsGpJEDHct8HIpCO_lfBpJiZmZbEsomXPQotYP-xoE9KeOVcu63rukUo7bx1i_n1N4CIS4d-Wnr1MwjIkli5r4cwaMq_tKQRSMl7ActJwDXaSzDjv08EbDO9snFfH_SX6YsrfIJ4mEN1iYfeA4Us1BIEA7uP7BHEExsc3vpGS14
2024-10-21 15:01:26 UTC	1030	IN	Data Raw: 44 70 75 76 58 39 45 4a 52 30 54 32 4a 5f 43 75 55 4b 2d 73 50 69 38 61 4f 41 6a 61 46 39 66 6a 7a 57 70 76 56 44 67 37 39 2d 5f 55 4c 75 48 54 46 39 72 58 73 5a 56 33 41 46 6d 5a 6f 4d 6e 46 63 62 56 6d 48 64 73 2d 78 6d 5f 72 6f 39 78 6d 41 53 53 39 75 49 4f 74 61 57 64 37 47 6f 69 6a 72 65 66 6a 74 33 55 66 30 6f 38 38 48 7a 6a 53 73 2d 51 67 6d 38 46 2d 35 66 37 59 57 65 70 31 36 32 7a 34 6a 56 44 34 33 74 55 49 30 50 58 4c 5f 68 52 6e 37 73 41 72 37 65 6b 52 55 61 39 67 5f 78 38 54 6e 4d 56 45 62 35 34 6e 39 7a 4c 46 4f 65 68 34 70 50 59 76 6e 4a 54 44 45 78 70 6c 56 7a 72 6c 55 43 46 4d 48 68 31 34 51 47 45 43 43 47 55 38 36 4b 55 61 4f 37 71 53 69 32 33 5a 52 37 71 73 32 38 4f 70 71 36 37 39 44 39 68 34 58 71 57 35 4d 42 2d 4c 63 63 6e 46 41 4a 71 Data Ascii: DpuvX9EJR0T2J_CuUK-sPi8aOAjaF9fjzWpvVDg79-_ULuHTF9rXsZV3AFmZoMnFcbVmHds-xm_ro9xmASS9uIOtaWd7Goijrefjt3Uf0o88HzjSs-Qgm8F-5f7YWep162z4jVD43tUI0PXL_hRn7sAr7ekRUa9g_x8TnMVEb54n9zLFOeh4pPYvnJTDExplVzrlUCFMHh14QGECCGU86KUaO7qSi23ZR7qs28Opq679D9h4XqW5MB-LccnFAJq
2024-10-21 15:01:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49763	142.251.40.196	443	428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 15:01:26 UTC	612	OUT	GET /recaptcha/api2/replaceimage?k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AGteOyplBlu-d31c8ryyFQqBMugLC65zP4RLzU7YQEiLMuOpkxA4oocUetsTn6RIV4SXhJxCf9C0xnZHdmIibHo
2024-10-21 15:01:27 UTC	743	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 21 Oct 2024 15:01:27 GMT Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Allow: POST Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-21 15:01:27 UTC	635	IN	Data Raw: 36 38 30 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f Data Ascii: 680<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 405 (Bad Request)!!1</title><style>*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{backgro
2024-10-21 15:01:27 UTC	1036	IN	Data Raw: 69 64 74 68 3a 37 37 32 70 78 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 Data Ascii: idth:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#log
2024-10-21 15:01:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49764	216.58.206.36	443	428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 15:01:27 UTC	1190	OUT	GET /recaptcha/api2/payload?p=06AFcWeA4Iyw15QstXNW8NaPul_cPVDXle9WrluH86zD8dfwUsPrBioB_oY4kSWpVVcigNspMBEVq5zh3YFkF1Pr-GQgaN--C8MtkyYa-cwUPB5-6u0l9v4hI5bC35bp9qqvXXR_t5ZgNzYCwX8xAkjwwrBTMSIU6Wx2B8Zs_6KraHwHggwxEkcXUv0_uUT_5460Nz2HTCPfQM0-9z69srQHAMrwdduz3yfA&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw&id=78cde3367d919541 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AGteOyplBlu-d31c8ryyFQqBMugLC65zP4RLzU7YQEiLMuOpkxA4oocUetsTn6RIV4SXhJxCf9C0xnZHdmIibHo
2024-10-21 15:01:27 UTC	681	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Mon, 21 Oct 2024 15:01:27 GMT Date: Mon, 21 Oct 2024 15:01:27 GMT Cache-Control: private, max-age=30 Cross-Origin-Resource-Policy: same-site Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Transfer-Encoding: chunked Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-21 15:01:27 UTC	697	IN	Data Raw: 31 38 33 33 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 64 00 64 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 1833JFIFC!"$"$Cdd"}!1AQa"q
2024-10-21 15:01:27 UTC	1378	IN	Data Raw: f7 14 97 66 e2 37 69 a1 18 99 64 20 38 8f 0c 49 24 ec c0 ce 14 82 b8 c7 19 27 b9 ad d5 ae 92 5f d6 df d3 fe 96 36 6e c9 db fa d3 fa f3 2c 58 c4 63 d5 47 95 02 4a 92 2b 3b a0 53 f7 80 73 c1 db e8 57 80 3e e9 aa d6 d6 be 56 d5 69 23 59 82 b1 60 e4 92 9c 6d c8 3c 0d ac 42 8e 7d b1 9a b3 a7 ea 02 4b fb ab 8f b8 60 81 d8 c7 c2 95 cf 1b 72 07 de c3 71 ff 00 eb a8 1b fd 19 66 ba 31 a0 30 10 bb 04 a1 bc c0 64 dd c9 c7 03 39 e4 f7 03 93 4b 96 52 92 4d 7f 9f a3 fc 3d 49 52 92 9a 6f 4f 9e ef 54 b5 bf a6 cb b1 15 e5 bb 5b a2 5a be d9 4b 06 53 14 2a 36 95 23 04 8e e0 36 07 5f 42 79 a7 41 04 97 21 0f 92 24 08 a2 54 2c e3 ef 13 80 a0 36 30 bc 13 8e a4 62 ac 45 2c b7 97 90 07 86 42 8c 0b ac 65 41 7f 98 86 39 c1 f9 49 19 eb d7 1e e3 15 5b 70 99 ed ad c7 93 24 b0 fd d6 39 Data Ascii: f7id 8I$'_6n,XcGJ+;SsW>Vi#Y`m<B}K`rqf10d9KRM=IRoOT[ZKS*6#6_ByA!$T,60bE,BeA9I[p$9
2024-10-21 15:01:27 UTC	1378	IN	Data Raw: d4 53 84 25 a3 5a 3f f8 6f f3 f3 3e 2b d4 bc 1b e2 3d 3e 57 92 eb 41 d4 a3 b7 55 c0 56 b3 6f 99 41 39 3d 32 bf 80 e3 8c 8e 6a 8b c1 ac 58 c6 b3 dd 59 05 95 25 5d db 86 19 47 18 07 9e 7b 1e bc 0c 76 c0 af b3 3c 51 ac 59 2f 85 b5 19 97 50 22 cd ac 26 df 24 6a 14 ee c0 50 ca c4 1c 9c b0 18 20 e4 91 51 e8 7a b2 6b 9e 1d d1 2f e2 ba 6b a8 2f a4 8d 91 a4 8f 69 1f 23 e4 30 c0 00 82 a7 24 63 db 19 a4 d3 94 79 5e de 7b db f0 b7 9f c8 d5 d3 6e 2b 99 7a dd 3f bb 6d 2f d7 f5 b1 f1 5c 91 47 7b 23 dc 5e 49 70 26 63 f3 60 17 1f 81 e7 03 da 8a fb b7 fb 1a c6 52 4c 7a 7d 86 d5 f9 40 30 a7 1e 9f c2 7b 51 5a 7b 6a 6b 47 26 be 7f f0 05 ed 14 74 e6 5f 36 ef f9 1f 23 d9 f8 25 ac a5 65 4d 5e 2b a6 dc 63 31 a4 a5 c3 ae d2 5b 38 04 1c f4 cf 23 93 de b1 6e bc 3b 7d 16 a0 e7 fb 53 Data Ascii: S%Z?o>+=>WAUVoA9=2jXY%]G{v<QY/P"&$jP Qzk/k/i#0$cy^{n+z?m/\G{#^Ip&c`RLz}@0{QZ{jkG&t_6#%eM^+c1[8#n;}S
2024-10-21 15:01:27 UTC	1378	IN	Data Raw: e9 bf 5f eb ce dd 78 d9 7c 43 ac e9 c4 58 8b eb 8d b2 1d e9 82 46 e6 65 03 18 fe f7 1d f1 b7 03 ad 5b 93 c5 3a e4 b7 0e 06 ab 79 31 52 51 54 ca 01 1b 9c 93 9e 9d 0e 49 39 c7 3d 7a 63 aa 1e 0b d2 05 f9 68 ad 66 91 23 85 ae 2d e3 f3 37 07 24 63 b7 d0 8e a0 e3 1c 52 ff 00 c2 3f a3 c5 6f b4 44 32 02 2c 65 df 0a 71 9e 36 8c 60 81 c7 5c 01 91 da b4 72 84 97 37 4f bb f0 7f e7 dc 4d 49 27 7b fe 5e 5d 1e 9b 7e 8b 63 89 b0 d7 75 28 12 5f 3e ee ef e6 89 77 31 9b 68 dc 8f f2 f1 96 eb c1 ea 47 1d ea 6b cd 77 58 b6 06 76 b9 bd 78 e1 46 99 72 f8 dc a4 0c 8c e4 63 3d 38 07 be 07 35 d1 b6 89 a3 4e d7 11 7f a3 91 2a 31 08 6e 41 f9 49 0c 99 27 00 e4 82 70 47 4c 60 76 a8 9b 4b b5 86 c6 36 96 d1 c8 91 77 3b b9 66 8d 58 96 24 37 7c e0 01 df 90 3a d5 b8 42 ed fd fb fd ff 00 2d Data Ascii: _x\|CXFe[:y1RQTI9=zchf#-7$cR?oD2,eq6`\r7OMI'{^]~cu(_>w1hGkwXvxFrc=85N*1nAI'pGL`vK6w;fX$7\|:B-
2024-10-21 15:01:27 UTC	1372	IN	Data Raw: ce a5 94 57 2e af ef e9 e9 df b3 ff 00 33 cd ef 34 ff 00 1a 78 5f c9 b6 f0 d6 b3 72 9a 7d e4 29 76 11 5b c9 da cc 36 90 54 9e db 3a 8e d8 a2 bb 3f 12 5a 33 ea 46 41 0e 99 7a 1d 73 e6 5f 41 0c d2 f5 38 1b 88 3c 77 e3 8e 78 a2 bb 69 61 af 04 ec df a7 2a 32 78 38 cb 57 51 2f 93 fd 0c ab 74 49 66 0e ec ce aa ea 19 a1 95 b8 0a b8 25 48 e3 03 e9 d3 15 b1 a7 29 7b 3d f1 bc 9e 6b 2b a4 92 42 87 60 24 63 6f 4f 65 fb a3 b9 eb cd 41 63 73 75 02 ca 64 78 e1 0a fe 6b a2 37 0c 01 c7 2d 81 82 3e 51 9c 1e b9 cd 49 3c b0 c5 68 56 42 19 83 ee 75 43 f2 85 05 99 94 1e 99 1c fb 80 41 f5 ae 29 45 dd df 7d 3c f4 eb eb ba ff 00 80 74 ae 76 ef b3 d3 af df db a7 fc 31 6e 49 fc ab 44 8b 64 66 57 50 10 14 26 39 63 e4 e0 05 19 27 20 f0 39 c7 6a a7 a5 5c 5c 36 b7 25 c4 56 f1 dd 95 8c Data Ascii: W.34x_r})v[6T:?Z3FAzs_A8<wxia*2x8WQ/tIf%H){=k+B`$coOeAcsudxk7->QI<hVBuCA)E}<tv1nIDdfWP&9c' 9j\\6%V
2024-10-21 15:01:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49765	142.251.40.196	443	428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 15:01:27 UTC	858	OUT	GET /recaptcha/api2/payload?p=06AFcWeA4Iyw15QstXNW8NaPul_cPVDXle9WrluH86zD8dfwUsPrBioB_oY4kSWpVVcigNspMBEVq5zh3YFkF1Pr-GQgaN--C8MtkyYa-cwUPB5-6u0l9v4hI5bC35bp9qqvXXR_t5ZgNzYCwX8xAkjwwrBTMSIU6Wx2B8Zs_6KraHwHggwxEkcXUv0_uUT_5460Nz2HTCPfQM0-9z69srQHAMrwdduz3yfA&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw&id=78cde3367d919541 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AGteOyplBlu-d31c8ryyFQqBMugLC65zP4RLzU7YQEiLMuOpkxA4oocUetsTn6RIV4SXhJxCf9C0xnZHdmIibHo
2024-10-21 15:01:27 UTC	681	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Mon, 21 Oct 2024 15:01:27 GMT Date: Mon, 21 Oct 2024 15:01:27 GMT Cache-Control: private, max-age=30 Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Cross-Origin-Resource-Policy: same-site Transfer-Encoding: chunked Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-21 15:01:27 UTC	697	IN	Data Raw: 31 38 33 33 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 64 00 64 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 1833JFIFC!"$"$Cdd"}!1AQa"q
2024-10-21 15:01:27 UTC	1378	IN	Data Raw: f7 14 97 66 e2 37 69 a1 18 99 64 20 38 8f 0c 49 24 ec c0 ce 14 82 b8 c7 19 27 b9 ad d5 ae 92 5f d6 df d3 fe 96 36 6e c9 db fa d3 fa f3 2c 58 c4 63 d5 47 95 02 4a 92 2b 3b a0 53 f7 80 73 c1 db e8 57 80 3e e9 aa d6 d6 be 56 d5 69 23 59 82 b1 60 e4 92 9c 6d c8 3c 0d ac 42 8e 7d b1 9a b3 a7 ea 02 4b fb ab 8f b8 60 81 d8 c7 c2 95 cf 1b 72 07 de c3 71 ff 00 eb a8 1b fd 19 66 ba 31 a0 30 10 bb 04 a1 bc c0 64 dd c9 c7 03 39 e4 f7 03 93 4b 96 52 92 4d 7f 9f a3 fc 3d 49 52 92 9a 6f 4f 9e ef 54 b5 bf a6 cb b1 15 e5 bb 5b a2 5a be d9 4b 06 53 14 2a 36 95 23 04 8e e0 36 07 5f 42 79 a7 41 04 97 21 0f 92 24 08 a2 54 2c e3 ef 13 80 a0 36 30 bc 13 8e a4 62 ac 45 2c b7 97 90 07 86 42 8c 0b ac 65 41 7f 98 86 39 c1 f9 49 19 eb d7 1e e3 15 5b 70 99 ed ad c7 93 24 b0 fd d6 39 Data Ascii: f7id 8I$'_6n,XcGJ+;SsW>Vi#Y`m<B}K`rqf10d9KRM=IRoOT[ZKS*6#6_ByA!$T,60bE,BeA9I[p$9
2024-10-21 15:01:27 UTC	1378	IN	Data Raw: d4 53 84 25 a3 5a 3f f8 6f f3 f3 3e 2b d4 bc 1b e2 3d 3e 57 92 eb 41 d4 a3 b7 55 c0 56 b3 6f 99 41 39 3d 32 bf 80 e3 8c 8e 6a 8b c1 ac 58 c6 b3 dd 59 05 95 25 5d db 86 19 47 18 07 9e 7b 1e bc 0c 76 c0 af b3 3c 51 ac 59 2f 85 b5 19 97 50 22 cd ac 26 df 24 6a 14 ee c0 50 ca c4 1c 9c b0 18 20 e4 91 51 e8 7a b2 6b 9e 1d d1 2f e2 ba 6b a8 2f a4 8d 91 a4 8f 69 1f 23 e4 30 c0 00 82 a7 24 63 db 19 a4 d3 94 79 5e de 7b db f0 b7 9f c8 d5 d3 6e 2b 99 7a dd 3f bb 6d 2f d7 f5 b1 f1 5c 91 47 7b 23 dc 5e 49 70 26 63 f3 60 17 1f 81 e7 03 da 8a fb b7 fb 1a c6 52 4c 7a 7d 86 d5 f9 40 30 a7 1e 9f c2 7b 51 5a 7b 6a 6b 47 26 be 7f f0 05 ed 14 74 e6 5f 36 ef f9 1f 23 d9 f8 25 ac a5 65 4d 5e 2b a6 dc 63 31 a4 a5 c3 ae d2 5b 38 04 1c f4 cf 23 93 de b1 6e bc 3b 7d 16 a0 e7 fb 53 Data Ascii: S%Z?o>+=>WAUVoA9=2jXY%]G{v<QY/P"&$jP Qzk/k/i#0$cy^{n+z?m/\G{#^Ip&c`RLz}@0{QZ{jkG&t_6#%eM^+c1[8#n;}S
2024-10-21 15:01:27 UTC	1378	IN	Data Raw: e9 bf 5f eb ce dd 78 d9 7c 43 ac e9 c4 58 8b eb 8d b2 1d e9 82 46 e6 65 03 18 fe f7 1d f1 b7 03 ad 5b 93 c5 3a e4 b7 0e 06 ab 79 31 52 51 54 ca 01 1b 9c 93 9e 9d 0e 49 39 c7 3d 7a 63 aa 1e 0b d2 05 f9 68 ad 66 91 23 85 ae 2d e3 f3 37 07 24 63 b7 d0 8e a0 e3 1c 52 ff 00 c2 3f a3 c5 6f b4 44 32 02 2c 65 df 0a 71 9e 36 8c 60 81 c7 5c 01 91 da b4 72 84 97 37 4f bb f0 7f e7 dc 4d 49 27 7b fe 5e 5d 1e 9b 7e 8b 63 89 b0 d7 75 28 12 5f 3e ee ef e6 89 77 31 9b 68 dc 8f f2 f1 96 eb c1 ea 47 1d ea 6b cd 77 58 b6 06 76 b9 bd 78 e1 46 99 72 f8 dc a4 0c 8c e4 63 3d 38 07 be 07 35 d1 b6 89 a3 4e d7 11 7f a3 91 2a 31 08 6e 41 f9 49 0c 99 27 00 e4 82 70 47 4c 60 76 a8 9b 4b b5 86 c6 36 96 d1 c8 91 77 3b b9 66 8d 58 96 24 37 7c e0 01 df 90 3a d5 b8 42 ed fd fb fd ff 00 2d Data Ascii: _x\|CXFe[:y1RQTI9=zchf#-7$cR?oD2,eq6`\r7OMI'{^]~cu(_>w1hGkwXvxFrc=85N*1nAI'pGL`vK6w;fX$7\|:B-
2024-10-21 15:01:27 UTC	1372	IN	Data Raw: ce a5 94 57 2e af ef e9 e9 df b3 ff 00 33 cd ef 34 ff 00 1a 78 5f c9 b6 f0 d6 b3 72 9a 7d e4 29 76 11 5b c9 da cc 36 90 54 9e db 3a 8e d8 a2 bb 3f 12 5a 33 ea 46 41 0e 99 7a 1d 73 e6 5f 41 0c d2 f5 38 1b 88 3c 77 e3 8e 78 a2 bb 69 61 af 04 ec df a7 2a 32 78 38 cb 57 51 2f 93 fd 0c ab 74 49 66 0e ec ce aa ea 19 a1 95 b8 0a b8 25 48 e3 03 e9 d3 15 b1 a7 29 7b 3d f1 bc 9e 6b 2b a4 92 42 87 60 24 63 6f 4f 65 fb a3 b9 eb cd 41 63 73 75 02 ca 64 78 e1 0a fe 6b a2 37 0c 01 c7 2d 81 82 3e 51 9c 1e b9 cd 49 3c b0 c5 68 56 42 19 83 ee 75 43 f2 85 05 99 94 1e 99 1c fb 80 41 f5 ae 29 45 dd df 7d 3c f4 eb eb ba ff 00 80 74 ae 76 ef b3 d3 af df db a7 fc 31 6e 49 fc ab 44 8b 64 66 57 50 10 14 26 39 63 e4 e0 05 19 27 20 f0 39 c7 6a a7 a5 5c 5c 36 b7 25 c4 56 f1 dd 95 8c Data Ascii: W.34x_r})v[6T:?Z3FAzs_A8<wxia*2x8WQ/tIf%H){=k+B`$coOeAcsudxk7->QI<hVBuCA)E}<tv1nIDdfWP&9c' 9j\\6%V
2024-10-21 15:01:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49766	216.58.206.36	443	428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 15:01:36 UTC	998	OUT	POST /recaptcha/api2/replaceimage?k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 5602 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AGteOyplBlu-d31c8ryyFQqBMugLC65zP4RLzU7YQEiLMuOpkxA4oocUetsTn6RIV4SXhJxCf9C0xnZHdmIibHo
2024-10-21 15:01:36 UTC	5602	OUT	Data Raw: 76 3d 6c 71 73 54 5a 35 62 65 49 62 43 6b 4b 34 75 47 45 47 76 39 4a 6d 55 52 26 63 3d 30 33 41 46 63 57 65 41 34 68 4f 63 33 5a 66 55 4b 42 41 46 56 39 52 69 55 59 71 6c 79 52 37 51 6c 6a 73 6d 66 63 67 58 4d 79 44 63 31 75 68 53 5f 34 63 79 2d 4b 5a 43 5f 4a 41 56 78 48 4c 31 48 78 59 6f 35 57 31 52 69 4b 55 44 45 36 72 33 7a 65 33 6e 55 2d 34 46 71 53 4c 41 6a 63 4b 50 30 6b 55 6c 6c 55 50 35 4a 51 6f 38 73 41 46 64 5a 69 56 62 30 53 39 52 49 52 42 53 4d 67 7a 4b 41 38 59 51 4d 58 34 78 67 71 7a 74 35 75 33 42 30 38 70 67 6a 42 49 64 47 64 43 35 35 53 33 79 65 63 4c 4b 4c 49 79 44 4d 61 30 41 34 70 47 6e 54 54 46 55 79 42 57 5a 6b 4d 71 7a 61 4a 71 62 47 69 55 33 38 72 32 39 4a 73 7a 68 78 59 79 58 6c 63 48 76 6a 33 73 39 55 65 7a 42 57 74 76 68 36 75 Data Ascii: v=lqsTZ5beIbCkK4uGEGv9JmUR&c=03AFcWeA4hOc3ZfUKBAFV9RiUYqlyR7QljsmfcgXMyDc1uhS_4cy-KZC_JAVxHL1HxYo5W1RiKUDE6r3ze3nU-4FqSLAjcKP0kUllUP5JQo8sAFdZiVb0S9RIRBSMgzKA8YQMX4xgqzt5u3B08pgjBIdGdC55S3yecLKLIyDMa0A4pGnTTFUyBWZkMqzaJqbGiU38r29JszhxYyXlcHvj3s9UezBWtvh6u
2024-10-21 15:01:36 UTC	694	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Date: Mon, 21 Oct 2024 15:01:36 GMT Server: ESF Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-21 15:01:36 UTC	684	IN	Data Raw: 31 36 65 35 0d 0a 29 5d 7d 27 0a 5b 22 64 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 35 39 6d 4f 6f 58 5f 6d 6c 50 35 72 42 39 74 69 61 47 32 71 67 79 31 61 62 62 49 4b 44 52 64 69 42 57 37 39 34 36 34 79 76 4a 62 58 74 43 42 79 7a 5f 52 36 70 45 59 75 59 5a 6e 4e 75 4d 59 47 53 4d 47 67 56 54 6a 56 58 53 73 6c 4f 4b 63 73 50 2d 71 61 77 48 35 66 34 54 55 52 48 41 49 38 4f 47 59 68 73 37 7a 56 34 56 73 54 62 52 51 41 4e 68 6f 6f 65 5f 65 38 35 37 49 71 5f 6d 36 66 72 4b 6f 4f 5f 53 78 49 55 50 62 37 36 57 79 35 51 4c 6a 35 6f 79 51 48 68 6d 33 55 69 2d 50 58 62 52 56 44 39 47 36 55 5a 47 51 74 6c 68 35 44 58 53 57 77 72 58 4a 76 63 38 50 44 67 4e 4b 2d 4d 48 6a 6e 48 43 42 72 52 64 47 48 30 38 47 63 45 67 4b 69 53 70 6c 34 57 6c 36 6c 68 67 5a 63 54 46 Data Ascii: 16e5)]}'["dresp","03AFcWeA59mOoX_mlP5rB9tiaG2qgy1abbIKDRdiBW79464yvJbXtCByz_R6pEYuYZnNuMYGSMGgVTjVXSslOKcsP-qawH5f4TURHAI8OGYhs7zV4VsTbRQANhooe_e857Iq_m6frKoO_SxIUPb76Wy5QLj5oyQHhm3Ui-PXbRVD9G6UZGQtlh5DXSWwrXJvc8PDgNK-MHjnHCBrRdGH08GcEgKiSpl4Wl6lhgZcTF
2024-10-21 15:01:36 UTC	1378	IN	Data Raw: 6b 43 54 74 54 52 71 7a 71 50 4f 37 77 47 30 35 6a 50 6c 77 6e 42 45 44 71 41 69 54 31 36 36 70 4b 6b 4b 32 77 74 75 37 38 6e 55 76 6f 57 35 51 71 36 50 4f 76 47 4e 64 6c 70 4c 4d 70 47 70 6b 55 57 46 32 77 68 34 4c 79 67 71 50 4d 38 70 4f 6c 49 7a 4c 53 30 78 69 6a 71 35 72 58 50 78 30 4d 38 76 75 38 7a 46 4a 32 71 38 5a 4e 63 38 79 32 6d 78 70 30 41 77 58 59 73 61 58 56 6c 41 4d 4c 69 46 37 68 63 45 76 49 50 41 63 32 4d 6e 4f 69 61 2d 63 61 71 46 30 55 72 39 72 4d 36 61 71 4e 30 37 54 63 48 5f 76 35 76 6a 65 38 4f 74 51 63 4f 69 31 52 6d 66 72 5f 51 41 56 51 6c 64 56 46 4c 33 63 62 71 2d 30 47 49 47 50 2d 53 55 32 49 78 67 55 65 46 6a 48 67 6e 35 64 34 46 4f 66 30 51 5f 6f 55 32 41 76 4d 38 73 6d 45 53 45 6b 65 68 41 35 71 48 45 76 78 45 51 68 6e 42 57 Data Ascii: kCTtTRqzqPO7wG05jPlwnBEDqAiT166pKkK2wtu78nUvoW5Qq6POvGNdlpLMpGpkUWF2wh4LygqPM8pOlIzLS0xijq5rXPx0M8vu8zFJ2q8ZNc8y2mxp0AwXYsaXVlAMLiF7hcEvIPAc2MnOia-caqF0Ur9rM6aqN07TcH_v5vje8OtQcOi1Rmfr_QAVQldVFL3cbq-0GIGP-SU2IxgUeFjHgn5d4FOf0Q_oU2AvM8smESEkehA5qHEvxEQhnBW
2024-10-21 15:01:36 UTC	1378	IN	Data Raw: 49 36 79 5f 49 51 4b 56 33 78 38 7a 62 59 30 45 75 73 70 55 6c 6f 45 33 76 36 4a 65 6a 35 70 64 77 68 39 47 46 48 64 47 34 39 30 64 64 69 78 6a 6a 4a 4c 46 56 4a 43 73 57 38 68 5a 4c 58 4f 53 62 69 6a 35 46 61 65 4d 53 51 37 56 41 37 62 36 49 6a 70 5a 63 51 41 66 68 6e 79 71 47 33 6b 58 61 4e 36 71 36 41 74 7a 53 67 39 65 33 74 66 44 59 33 79 6a 55 35 45 38 4e 5a 55 65 50 71 77 76 73 47 46 35 5f 46 39 4e 50 6f 70 75 6b 73 4d 33 6f 69 76 49 56 6d 6b 5f 6e 35 6e 49 5a 59 56 33 74 4d 51 77 41 33 6e 30 57 30 5a 6d 53 2d 4d 62 64 41 73 69 79 6c 37 5a 6d 61 71 5a 75 58 67 53 7a 55 41 43 5a 4d 45 58 44 67 66 63 38 37 6b 37 71 79 43 6c 67 79 52 6a 6f 4a 58 51 6e 56 48 6b 79 76 37 78 63 44 65 38 66 4e 42 7a 59 69 72 4e 76 65 64 34 6e 32 31 50 35 66 6c 35 41 35 76 Data Ascii: I6y_IQKV3x8zbY0EuspUloE3v6Jej5pdwh9GFHdG490ddixjjJLFVJCsW8hZLXOSbij5FaeMSQ7VA7b6IjpZcQAfhnyqG3kXaN6q6AtzSg9e3tfDY3yjU5E8NZUePqwvsGF5_F9NPopuksM3oivIVmk_n5nIZYV3tMQwA3n0W0ZmS-MbdAsiyl7ZmaqZuXgSzUACZMEXDgfc87k7qyClgyRjoJXQnVHkyv7xcDe8fNBzYirNved4n21P5fl5A5v
2024-10-21 15:01:36 UTC	1378	IN	Data Raw: 41 32 70 6d 36 66 59 43 50 64 32 7a 2d 62 47 2d 53 4f 6b 30 61 4d 5a 53 57 34 4c 74 33 78 79 6b 46 42 31 77 6c 38 6c 66 53 51 59 4a 4c 33 78 68 66 30 4f 74 53 36 41 4c 44 6e 63 4d 49 4c 73 63 6e 54 4a 68 46 45 37 74 75 65 33 73 4a 34 4a 34 5f 41 30 56 53 4a 79 57 58 61 37 77 44 70 4e 39 38 5f 49 31 6f 43 77 6f 67 63 48 79 41 31 74 2d 66 64 51 70 48 34 68 4f 38 5a 6a 50 6d 67 37 35 38 56 67 69 76 4f 58 41 6d 6b 58 4b 77 47 63 33 62 46 69 72 63 4e 6c 64 67 47 33 50 31 68 43 78 30 4b 33 4b 44 30 49 35 6c 36 69 55 6d 51 34 63 39 59 4e 56 39 50 74 36 47 66 49 61 38 67 5f 65 39 49 68 4a 33 77 79 53 78 6f 69 48 34 56 32 71 6e 50 6d 6d 6a 47 6d 7a 70 55 7a 52 59 46 6c 5a 41 54 38 4c 67 6a 48 4a 4a 68 49 57 61 6a 61 5a 5f 65 68 55 45 30 42 57 48 77 41 55 71 49 4c Data Ascii: A2pm6fYCPd2z-bG-SOk0aMZSW4Lt3xykFB1wl8lfSQYJL3xhf0OtS6ALDncMILscnTJhFE7tue3sJ4J4_A0VSJyWXa7wDpN98_I1oCwogcHyA1t-fdQpH4hO8ZjPmg758VgivOXAmkXKwGc3bFircNldgG3P1hCx0K3KD0I5l6iUmQ4c9YNV9Pt6GfIa8g_e9IhJ3wySxoiH4V2qnPmmjGmzpUzRYFlZAT8LgjHJJhIWajaZ_ehUE0BWHwAUqIL
2024-10-21 15:01:36 UTC	1051	IN	Data Raw: 5a 39 4a 62 7a 36 4f 31 53 59 39 46 64 56 36 66 63 64 4d 67 4c 63 69 48 34 6b 62 61 43 54 38 34 4e 57 5f 6f 64 71 70 62 79 66 70 4d 4c 4c 44 78 46 76 50 5f 4b 76 6c 43 61 58 36 4d 72 45 61 5a 6f 66 33 66 30 38 34 35 68 66 6c 75 76 75 4a 56 5f 73 69 36 4b 57 38 2d 42 38 4c 4d 5f 61 4b 76 48 30 41 79 55 36 56 4e 66 4e 79 72 64 4b 63 6c 64 6e 65 69 4b 71 58 53 54 5a 4f 35 53 45 6d 48 4e 5f 36 6d 70 4b 4b 59 70 5a 37 6b 4f 4f 45 75 71 37 65 65 6e 4a 41 64 70 38 34 6b 41 34 58 34 6b 44 52 68 47 78 55 63 33 34 69 35 45 41 77 69 34 37 38 6d 30 69 53 35 7a 2d 73 38 6e 35 62 4f 6c 64 58 56 50 50 79 48 71 43 49 4d 5a 6f 4a 4b 59 37 6f 64 46 66 71 72 6d 4f 33 7a 68 41 61 6c 5a 66 33 59 65 44 72 6d 79 61 67 32 6a 59 66 68 53 4f 2d 4c 6e 70 69 5a 55 48 78 54 4e 79 73 Data Ascii: Z9Jbz6O1SY9FdV6fcdMgLciH4kbaCT84NW_odqpbyfpMLLDxFvP_KvlCaX6MrEaZof3f0845hfluvuJV_si6KW8-B8LM_aKvH0AyU6VNfNyrdKcldneiKqXSTZO5SEmHN_6mpKKYpZ7kOOEuq7eenJAdp84kA4X4kDRhGxUc34i5EAwi478m0iS5z-s8n5bOldXVPPyHqCIMZoJKY7odFfqrmO3zhAalZf3YeDrmyag2jYfhSO-LnpiZUHxTNys
2024-10-21 15:01:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49768	142.251.40.196	443	428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 15:01:36 UTC	612	OUT	GET /recaptcha/api2/replaceimage?k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AGteOyplBlu-d31c8ryyFQqBMugLC65zP4RLzU7YQEiLMuOpkxA4oocUetsTn6RIV4SXhJxCf9C0xnZHdmIibHo
2024-10-21 15:01:36 UTC	743	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 21 Oct 2024 15:01:36 GMT Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Allow: POST Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-21 15:01:36 UTC	635	IN	Data Raw: 36 38 30 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f Data Ascii: 680<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 405 (Bad Request)!!1</title><style>*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{backgro
2024-10-21 15:01:36 UTC	1036	IN	Data Raw: 69 64 74 68 3a 37 37 32 70 78 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 Data Ascii: idth:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#log
2024-10-21 15:01:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49767	216.58.206.36	443	428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 15:01:36 UTC	1190	OUT	GET /recaptcha/api2/payload?p=06AFcWeA5f4RM6blzgH7v5F3Ss63hX01BnhyU4X8Qtb_nSN41mwutiLYQjp5t2wE-oxu0IlwdzjlDKYjlEMsTd8JQVOB09Wj__TPZYbC56oShllJM9EGUVkhC4wpDs_ob_qhD7M5yfGsbYbDSpOcC6hhTJ6VyWaG-Iw8x1LkE_BOn-q_42ic59be8PE3GNeSnadLQInEIkafDSPo-cxVmf3I8dq_OLBr8f9w&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw&id=dbbab680d999830e HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AGteOyplBlu-d31c8ryyFQqBMugLC65zP4RLzU7YQEiLMuOpkxA4oocUetsTn6RIV4SXhJxCf9C0xnZHdmIibHo
2024-10-21 15:01:37 UTC	681	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Mon, 21 Oct 2024 15:01:37 GMT Date: Mon, 21 Oct 2024 15:01:37 GMT Cache-Control: private, max-age=30 Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Transfer-Encoding: chunked Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-21 15:01:37 UTC	697	IN	Data Raw: 31 35 35 64 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 64 00 64 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 155dJFIFC!"$"$Cdd"}!1AQa"q
2024-10-21 15:01:37 UTC	1378	IN	Data Raw: 31 ae d5 cc 8a 84 e4 7a 29 1c 8e c7 a0 eb 5e ab a9 6d fa 1e 55 96 c4 52 00 a6 39 57 03 69 2a a7 6f 3d 0f ca 3e f0 07 8f 6f e7 8c 9b 9f ed 08 af ed 94 cc 1a 29 ee 9c b2 08 77 ed 89 51 b1 c6 4f 00 90 32 0f 3d eb 73 6c a6 6f b4 09 44 44 f0 1a 36 2e ac be a3 a7 cb 8e 83 d8 72 30 2b 3b 5c 68 21 d7 b4 52 91 ca ad 24 d3 23 38 7e 43 14 27 79 e7 07 3b 31 91 9c ee c7 6a 9b bd 96 e0 a2 af e7 ea 2d b4 53 47 68 b2 5c 2a cb 3c 48 4b b6 76 e4 95 e5 82 e7 ae 08 ce 7d 47 e3 75 63 06 69 12 47 4f 29 b9 5d 83 e6 c3 6e c7 4e dc 0c f4 07 7f 3c 01 53 a2 08 c6 4c 71 ca 22 2a 71 f2 ab 0e 71 d7 1d 3a e3 27 a6 68 48 e6 91 9d d8 3b 8d d9 da 32 e4 0c 0c 83 d3 db 23 1d f3 c7 76 a5 75 61 35 a5 fa 14 d0 ba 03 d0 82 72 4a ee 25 c7 de e9 fc 3c e3 23 3e f4 e9 a2 6f 34 43 31 c4 cd 9f 2c 48 Data Ascii: 1z)^mUR9Wio=>o)wQO2=sloDD6.r0+;\h!R$#8~C'y;1j-SGh\<HKv}GuciGO)]nN<SLq"*qq:'hH;2#vua5rJ%<#>o4C1,H
2024-10-21 15:01:37 UTC	1378	IN	Data Raw: 4e 40 e3 9e b8 39 ef 46 b7 e2 cb 3b af 11 68 d7 c7 46 68 24 b3 69 4c e1 9f 70 94 10 02 8e 06 71 92 c7 9f 6f 4c d6 0e 9d af 5e 78 96 de c6 de df 47 6f b4 45 72 25 57 89 88 12 6d 0c cf 90 c3 a9 55 c8 03 fb bd f8 c7 2d a6 6a b1 49 a8 ca 90 c8 3c a8 a7 0b 1e e5 28 19 bc c5 18 60 33 d3 8f 5e f5 af b5 ab 19 68 cc 55 28 4a 56 b7 f5 e7 a9 eb f2 7c 44 b4 f3 16 01 a2 34 67 88 dd 52 70 9c 83 d4 b6 de 41 c9 3d 85 54 b1 f8 83 ff 00 15 14 c1 ad 05 ae 9a 06 61 42 de 61 8c 86 20 b6 78 c8 6e 7d 31 d7 26 b2 21 d3 9f fb 0a 5b db c4 12 c6 db fc 95 46 dc 7e 52 72 15 b6 8f 94 ed 27 1e e7 de b0 9e 0b db 3d 3e 5d 42 04 4b bb 1f b2 97 69 4b 85 62 ae 30 49 1d 71 c8 1c 7b 55 bc 5b 5f 21 3c 2c 23 27 a6 da 1d b1 f8 98 6d 35 67 32 47 6f 2d a0 9c ba a4 61 d2 46 4f e1 c6 01 03 03 1f 99 Data Ascii: N@9F;hFh$iLpqoL^xGoEr%WmU-jI<(`3^hU(JV\|D4gRpA=TaBa xn}1&![F~Rr'=>]BKiKb0Iq{U[_!<,#'m5g2Go-aFO
2024-10-21 15:01:37 UTC	1378	IN	Data Raw: d6 ad 23 f3 ec 23 8e 69 24 52 59 a3 8d 41 09 d7 9d c7 3c 02 7f c6 bd 47 5f f8 7e d2 5b 4a da 75 dd 8d 94 aa ad 13 47 06 9b 1a 7d a0 00 30 24 20 f0 38 eb 8e 0d 71 fe 24 d3 2e f4 6b bb 2f ed 0d 1a d7 4e 94 cc 63 b7 68 e5 52 25 f9 49 c1 1c f7 ee 17 b9 e3 d2 f9 15 44 9c 6d 7f f8 07 34 94 63 17 7d 6f fd 7e a5 4b 4d 66 d6 c2 2f b1 dd dd 43 6f 3c 5c 3a 2c 12 4c 33 80 7a a7 1d f1 8e bc 51 58 9a 9e 8f a0 dd 5c f9 d2 5c 4d 6d 94 50 b1 c7 32 30 0a 06 07 25 07 24 0c d1 5b 41 c1 2b 72 b3 15 4a 52 d5 cd 23 9d b0 bc 9c d8 b4 31 d8 4e df bd cc 99 62 43 12 30 09 1d bb e7 d7 8e 7b 54 d7 3a 8c f7 32 23 5c 2d b9 22 20 91 4b b0 8d 8a 46 49 e0 e7 38 23 3d 73 91 9e b5 f4 2f c3 cf 89 3e 28 4d 2f 57 d1 a1 d3 fc 3f 6c 5b 4f b9 96 d1 ad 74 f1 08 33 47 13 48 32 01 da d9 da 78 23 f3 Data Ascii: ##i$RYA<G_~[JuG}0$ 8q$.k/NchR%IDm4c}o~KMf/Co<\:,L3zQX\\MmP20%$[A+rJR#1NbC0{T:2#\-" KFI8#=s/>(M/W?l[Ot3GH2x#
2024-10-21 15:01:37 UTC	646	IN	Data Raw: 79 e3 38 20 03 92 69 a5 a5 d9 6a cf fa fe bf ae c4 ce ea 92 8f 2c 46 eb 21 0a 24 39 03 19 6c f1 9e 9d 33 90 7e f6 4d 49 00 12 4a 8c 50 cd 33 a0 05 77 67 27 3d 73 d4 01 8e 87 df a7 35 12 24 11 20 8a 2b 51 10 27 90 02 92 a3 69 f9 79 eb c6 08 e4 e3 93 8e b4 44 ab 6a e6 3c 85 60 8e 39 5c 15 e3 20 b0 3c 0e 31 81 e8 0e 7d 8b e8 44 75 5a ef fd 6e 69 4b 34 88 e1 04 72 cb b9 47 98 7e f0 00 64 61 b0 30 71 ce 3e be a6 99 b8 16 68 02 65 53 e6 69 03 06 42 70 d9 00 9c f2 31 9e 4f 1e b5 50 a7 96 62 f3 42 01 26 43 2a b2 aa b2 e3 24 e4 ee c0 23 dc 77 3c f6 9a 56 26 38 61 18 df c0 77 db e5 ac 79 c3 0d de e0 9c 67 3c 1e 71 4a d7 46 97 be 83 e4 bb ba 0d 8b 69 cc 4b 80 4a 98 d1 8e 48 ce 7a f7 ce 68 a8 8c 37 07 e5 86 f2 58 42 92 19 23 8b 80 73 9f 51 cf 3e 94 53 ba 5f 61 3f 97 Data Ascii: y8 ij,F!$9l3~MIJP3wg'=s5$ +Q'iyDj<`9\ <1}DuZniK4rG~da0q>heSiBp1OPbB&C*$#w<V&8awyg<qJFiKJHzh7XB#sQ>S_a?
2024-10-21 15:01:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49769	142.251.40.196	443	428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 15:01:37 UTC	858	OUT	GET /recaptcha/api2/payload?p=06AFcWeA5f4RM6blzgH7v5F3Ss63hX01BnhyU4X8Qtb_nSN41mwutiLYQjp5t2wE-oxu0IlwdzjlDKYjlEMsTd8JQVOB09Wj__TPZYbC56oShllJM9EGUVkhC4wpDs_ob_qhD7M5yfGsbYbDSpOcC6hhTJ6VyWaG-Iw8x1LkE_BOn-q_42ic59be8PE3GNeSnadLQInEIkafDSPo-cxVmf3I8dq_OLBr8f9w&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw&id=dbbab680d999830e HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AGteOyplBlu-d31c8ryyFQqBMugLC65zP4RLzU7YQEiLMuOpkxA4oocUetsTn6RIV4SXhJxCf9C0xnZHdmIibHo
2024-10-21 15:01:37 UTC	681	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Mon, 21 Oct 2024 15:01:37 GMT Date: Mon, 21 Oct 2024 15:01:37 GMT Cache-Control: private, max-age=30 Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Transfer-Encoding: chunked Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-21 15:01:37 UTC	697	IN	Data Raw: 31 35 35 64 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 64 00 64 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 155dJFIFC!"$"$Cdd"}!1AQa"q
2024-10-21 15:01:37 UTC	1378	IN	Data Raw: 31 ae d5 cc 8a 84 e4 7a 29 1c 8e c7 a0 eb 5e ab a9 6d fa 1e 55 96 c4 52 00 a6 39 57 03 69 2a a7 6f 3d 0f ca 3e f0 07 8f 6f e7 8c 9b 9f ed 08 af ed 94 cc 1a 29 ee 9c b2 08 77 ed 89 51 b1 c6 4f 00 90 32 0f 3d eb 73 6c a6 6f b4 09 44 44 f0 1a 36 2e ac be a3 a7 cb 8e 83 d8 72 30 2b 3b 5c 68 21 d7 b4 52 91 ca ad 24 d3 23 38 7e 43 14 27 79 e7 07 3b 31 91 9c ee c7 6a 9b bd 96 e0 a2 af e7 ea 2d b4 53 47 68 b2 5c 2a cb 3c 48 4b b6 76 e4 95 e5 82 e7 ae 08 ce 7d 47 e3 75 63 06 69 12 47 4f 29 b9 5d 83 e6 c3 6e c7 4e dc 0c f4 07 7f 3c 01 53 a2 08 c6 4c 71 ca 22 2a 71 f2 ab 0e 71 d7 1d 3a e3 27 a6 68 48 e6 91 9d d8 3b 8d d9 da 32 e4 0c 0c 83 d3 db 23 1d f3 c7 76 a5 75 61 35 a5 fa 14 d0 ba 03 d0 82 72 4a ee 25 c7 de e9 fc 3c e3 23 3e f4 e9 a2 6f 34 43 31 c4 cd 9f 2c 48 Data Ascii: 1z)^mUR9Wio=>o)wQO2=sloDD6.r0+;\h!R$#8~C'y;1j-SGh\<HKv}GuciGO)]nN<SLq"*qq:'hH;2#vua5rJ%<#>o4C1,H
2024-10-21 15:01:37 UTC	1378	IN	Data Raw: 4e 40 e3 9e b8 39 ef 46 b7 e2 cb 3b af 11 68 d7 c7 46 68 24 b3 69 4c e1 9f 70 94 10 02 8e 06 71 92 c7 9f 6f 4c d6 0e 9d af 5e 78 96 de c6 de df 47 6f b4 45 72 25 57 89 88 12 6d 0c cf 90 c3 a9 55 c8 03 fb bd f8 c7 2d a6 6a b1 49 a8 ca 90 c8 3c a8 a7 0b 1e e5 28 19 bc c5 18 60 33 d3 8f 5e f5 af b5 ab 19 68 cc 55 28 4a 56 b7 f5 e7 a9 eb f2 7c 44 b4 f3 16 01 a2 34 67 88 dd 52 70 9c 83 d4 b6 de 41 c9 3d 85 54 b1 f8 83 ff 00 15 14 c1 ad 05 ae 9a 06 61 42 de 61 8c 86 20 b6 78 c8 6e 7d 31 d7 26 b2 21 d3 9f fb 0a 5b db c4 12 c6 db fc 95 46 dc 7e 52 72 15 b6 8f 94 ed 27 1e e7 de b0 9e 0b db 3d 3e 5d 42 04 4b bb 1f b2 97 69 4b 85 62 ae 30 49 1d 71 c8 1c 7b 55 bc 5b 5f 21 3c 2c 23 27 a6 da 1d b1 f8 98 6d 35 67 32 47 6f 2d a0 9c ba a4 61 d2 46 4f e1 c6 01 03 03 1f 99 Data Ascii: N@9F;hFh$iLpqoL^xGoEr%WmU-jI<(`3^hU(JV\|D4gRpA=TaBa xn}1&![F~Rr'=>]BKiKb0Iq{U[_!<,#'m5g2Go-aFO
2024-10-21 15:01:37 UTC	1378	IN	Data Raw: d6 ad 23 f3 ec 23 8e 69 24 52 59 a3 8d 41 09 d7 9d c7 3c 02 7f c6 bd 47 5f f8 7e d2 5b 4a da 75 dd 8d 94 aa ad 13 47 06 9b 1a 7d a0 00 30 24 20 f0 38 eb 8e 0d 71 fe 24 d3 2e f4 6b bb 2f ed 0d 1a d7 4e 94 cc 63 b7 68 e5 52 25 f9 49 c1 1c f7 ee 17 b9 e3 d2 f9 15 44 9c 6d 7f f8 07 34 94 63 17 7d 6f fd 7e a5 4b 4d 66 d6 c2 2f b1 dd dd 43 6f 3c 5c 3a 2c 12 4c 33 80 7a a7 1d f1 8e bc 51 58 9a 9e 8f a0 dd 5c f9 d2 5c 4d 6d 94 50 b1 c7 32 30 0a 06 07 25 07 24 0c d1 5b 41 c1 2b 72 b3 15 4a 52 d5 cd 23 9d b0 bc 9c d8 b4 31 d8 4e df bd cc 99 62 43 12 30 09 1d bb e7 d7 8e 7b 54 d7 3a 8c f7 32 23 5c 2d b9 22 20 91 4b b0 8d 8a 46 49 e0 e7 38 23 3d 73 91 9e b5 f4 2f c3 cf 89 3e 28 4d 2f 57 d1 a1 d3 fc 3f 6c 5b 4f b9 96 d1 ad 74 f1 08 33 47 13 48 32 01 da d9 da 78 23 f3 Data Ascii: ##i$RYA<G_~[JuG}0$ 8q$.k/NchR%IDm4c}o~KMf/Co<\:,L3zQX\\MmP20%$[A+rJR#1NbC0{T:2#\-" KFI8#=s/>(M/W?l[Ot3GH2x#
2024-10-21 15:01:37 UTC	646	IN	Data Raw: 79 e3 38 20 03 92 69 a5 a5 d9 6a cf fa fe bf ae c4 ce ea 92 8f 2c 46 eb 21 0a 24 39 03 19 6c f1 9e 9d 33 90 7e f6 4d 49 00 12 4a 8c 50 cd 33 a0 05 77 67 27 3d 73 d4 01 8e 87 df a7 35 12 24 11 20 8a 2b 51 10 27 90 02 92 a3 69 f9 79 eb c6 08 e4 e3 93 8e b4 44 ab 6a e6 3c 85 60 8e 39 5c 15 e3 20 b0 3c 0e 31 81 e8 0e 7d 8b e8 44 75 5a ef fd 6e 69 4b 34 88 e1 04 72 cb b9 47 98 7e f0 00 64 61 b0 30 71 ce 3e be a6 99 b8 16 68 02 65 53 e6 69 03 06 42 70 d9 00 9c f2 31 9e 4f 1e b5 50 a7 96 62 f3 42 01 26 43 2a b2 aa b2 e3 24 e4 ee c0 23 dc 77 3c f6 9a 56 26 38 61 18 df c0 77 db e5 ac 79 c3 0d de e0 9c 67 3c 1e 71 4a d7 46 97 be 83 e4 bb ba 0d 8b 69 cc 4b 80 4a 98 d1 8e 48 ce 7a f7 ce 68 a8 8c 37 07 e5 86 f2 58 42 92 19 23 8b 80 73 9f 51 cf 3e 94 53 ba 5f 61 3f 97 Data Ascii: y8 ij,F!$9l3~MIJP3wg'=s5$ +Q'iyDj<`9\ <1}DuZniK4rG~da0q>heSiBp1OPbB&C*$#w<V&8awyg<qJFiKJHzh7XB#sQ>S_a?
2024-10-21 15:01:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49770	216.58.206.36	443	428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 15:01:38 UTC	998	OUT	POST /recaptcha/api2/replaceimage?k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 5623 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AGteOyplBlu-d31c8ryyFQqBMugLC65zP4RLzU7YQEiLMuOpkxA4oocUetsTn6RIV4SXhJxCf9C0xnZHdmIibHo
2024-10-21 15:01:38 UTC	5623	OUT	Data Raw: 76 3d 6c 71 73 54 5a 35 62 65 49 62 43 6b 4b 34 75 47 45 47 76 39 4a 6d 55 52 26 63 3d 30 33 41 46 63 57 65 41 35 39 6d 4f 6f 58 5f 6d 6c 50 35 72 42 39 74 69 61 47 32 71 67 79 31 61 62 62 49 4b 44 52 64 69 42 57 37 39 34 36 34 79 76 4a 62 58 74 43 42 79 7a 5f 52 36 70 45 59 75 59 5a 6e 4e 75 4d 59 47 53 4d 47 67 56 54 6a 56 58 53 73 6c 4f 4b 63 73 50 2d 71 61 77 48 35 66 34 54 55 52 48 41 49 38 4f 47 59 68 73 37 7a 56 34 56 73 54 62 52 51 41 4e 68 6f 6f 65 5f 65 38 35 37 49 71 5f 6d 36 66 72 4b 6f 4f 5f 53 78 49 55 50 62 37 36 57 79 35 51 4c 6a 35 6f 79 51 48 68 6d 33 55 69 2d 50 58 62 52 56 44 39 47 36 55 5a 47 51 74 6c 68 35 44 58 53 57 77 72 58 4a 76 63 38 50 44 67 4e 4b 2d 4d 48 6a 6e 48 43 42 72 52 64 47 48 30 38 47 63 45 67 4b 69 53 70 6c 34 57 6c Data Ascii: v=lqsTZ5beIbCkK4uGEGv9JmUR&c=03AFcWeA59mOoX_mlP5rB9tiaG2qgy1abbIKDRdiBW79464yvJbXtCByz_R6pEYuYZnNuMYGSMGgVTjVXSslOKcsP-qawH5f4TURHAI8OGYhs7zV4VsTbRQANhooe_e857Iq_m6frKoO_SxIUPb76Wy5QLj5oyQHhm3Ui-PXbRVD9G6UZGQtlh5DXSWwrXJvc8PDgNK-MHjnHCBrRdGH08GcEgKiSpl4Wl
2024-10-21 15:01:38 UTC	694	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: same-site Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Date: Mon, 21 Oct 2024 15:01:38 GMT Server: ESF Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-21 15:01:38 UTC	684	IN	Data Raw: 31 36 65 35 0d 0a 29 5d 7d 27 0a 5b 22 64 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 37 51 4b 46 46 58 4b 6c 5a 42 59 36 47 67 4c 6c 79 73 6c 64 6a 4f 75 53 35 33 68 4b 46 62 33 70 5a 61 76 41 39 38 62 33 79 4e 63 6e 4d 66 71 5a 37 48 71 32 4c 43 4e 67 70 44 59 71 56 51 66 43 53 58 77 5a 4a 62 61 34 6d 34 54 71 5f 6f 75 6a 5a 58 4f 79 6f 4b 71 34 32 39 58 30 50 5a 39 65 48 54 4a 6e 34 6d 6d 51 4f 67 54 50 56 61 77 30 4a 7a 66 52 4c 4d 4b 55 49 50 7a 46 63 79 6f 59 30 33 34 6c 72 41 6d 44 47 69 35 53 35 42 45 36 73 72 53 50 4b 72 77 32 68 78 6f 2d 71 46 44 77 66 76 49 7a 5f 51 6a 6a 45 63 78 43 46 71 32 4d 68 41 36 70 71 74 56 52 43 39 42 6d 6f 39 79 63 47 59 41 38 45 61 34 77 31 4d 68 45 6b 6d 35 52 32 73 70 2d 7a 6b 76 65 69 69 31 34 46 69 6e 50 48 72 Data Ascii: 16e5)]}'["dresp","03AFcWeA7QKFFXKlZBY6GgLlysldjOuS53hKFb3pZavA98b3yNcnMfqZ7Hq2LCNgpDYqVQfCSXwZJba4m4Tq_oujZXOyoKq429X0PZ9eHTJn4mmQOgTPVaw0JzfRLMKUIPzFcyoY034lrAmDGi5S5BE6srSPKrw2hxo-qFDwfvIz_QjjEcxCFq2MhA6pqtVRC9Bmo9ycGYA8Ea4w1MhEkm5R2sp-zkveii14FinPHr
2024-10-21 15:01:38 UTC	1378	IN	Data Raw: 4d 35 53 2d 6a 55 58 6a 76 48 45 53 37 4d 74 54 4e 42 43 50 6f 62 7a 79 76 4d 2d 76 39 77 47 59 74 64 52 68 71 4b 72 6b 4b 62 4c 72 63 4e 34 4c 33 52 72 47 79 4a 36 35 38 50 42 6d 30 63 6d 4d 4c 76 72 34 6e 57 61 33 57 68 57 61 5f 37 52 4d 48 32 61 74 63 38 61 35 78 48 6d 63 32 6a 58 4e 61 6b 4e 51 54 77 75 42 68 2d 71 55 44 50 54 62 79 5a 5a 50 58 62 72 69 4a 2d 6f 35 49 7a 77 58 6a 78 2d 6b 49 6c 74 79 62 65 79 59 76 6f 4d 4e 65 30 67 4a 78 41 4a 6e 37 74 56 68 62 32 51 2d 67 33 4e 50 53 51 39 55 77 53 79 7a 67 59 39 33 53 54 62 4e 35 35 4c 33 4d 78 59 71 4f 6a 39 77 75 74 47 45 72 72 61 36 72 45 71 37 33 67 53 76 39 44 6e 31 4c 46 51 76 74 5a 78 35 57 70 34 65 43 61 4f 41 52 62 59 61 71 38 55 4b 76 51 32 4b 42 37 50 37 5f 30 69 32 61 50 77 66 42 6e 30 Data Ascii: M5S-jUXjvHES7MtTNBCPobzyvM-v9wGYtdRhqKrkKbLrcN4L3RrGyJ658PBm0cmMLvr4nWa3WhWa_7RMH2atc8a5xHmc2jXNakNQTwuBh-qUDPTbyZZPXbriJ-o5IzwXjx-kIltybeyYvoMNe0gJxAJn7tVhb2Q-g3NPSQ9UwSyzgY93STbN55L3MxYqOj9wutGErra6rEq73gSv9Dn1LFQvtZx5Wp4eCaOARbYaq8UKvQ2KB7P7_0i2aPwfBn0
2024-10-21 15:01:38 UTC	1378	IN	Data Raw: 39 77 6f 65 32 4c 36 67 76 53 6c 57 65 4b 54 50 42 67 2d 2d 47 49 33 4d 54 51 37 58 6f 59 62 65 44 68 52 77 53 54 4c 62 4b 47 52 48 68 48 4c 46 69 46 30 62 55 75 49 63 64 44 6f 55 77 30 61 34 57 6d 2d 4f 43 59 34 4a 35 63 54 50 6e 6b 38 47 4d 38 37 75 4b 70 73 39 44 6c 79 50 4a 5a 5a 44 74 69 51 34 61 75 69 4c 56 34 5a 55 4b 6e 63 7a 2d 76 56 55 6a 48 41 47 2d 79 76 53 53 52 30 64 31 71 46 42 58 53 6e 45 78 47 31 4a 38 38 4b 43 6b 77 77 4a 5a 43 54 4c 74 6a 54 71 34 31 77 53 67 33 33 42 37 79 76 37 33 64 75 49 54 5a 58 4a 34 41 4d 64 65 6e 35 71 5f 4a 70 47 71 39 4f 4a 56 50 42 35 65 42 37 42 48 68 61 68 37 34 7a 36 7a 6f 62 61 50 49 4f 4c 72 45 77 7a 74 65 44 58 6d 4b 42 77 4f 69 66 64 69 75 53 6c 36 39 79 44 52 76 49 57 6c 6d 4b 76 51 63 65 67 5a 59 4c Data Ascii: 9woe2L6gvSlWeKTPBg--GI3MTQ7XoYbeDhRwSTLbKGRHhHLFiF0bUuIcdDoUw0a4Wm-OCY4J5cTPnk8GM87uKps9DlyPJZZDtiQ4auiLV4ZUKncz-vVUjHAG-yvSSR0d1qFBXSnExG1J88KCkwwJZCTLtjTq41wSg33B7yv73duITZXJ4AMden5q_JpGq9OJVPB5eB7BHhah74z6zobaPIOLrEwzteDXmKBwOifdiuSl69yDRvIWlmKvQcegZYL
2024-10-21 15:01:38 UTC	1378	IN	Data Raw: 6e 56 65 58 48 58 57 38 39 33 34 41 31 71 77 4e 70 6f 79 57 4a 65 38 70 58 78 52 5f 52 72 4b 69 63 6f 38 71 53 57 72 32 54 31 4d 76 52 6c 4d 34 5f 37 4b 71 35 47 7a 70 58 6b 6d 39 67 79 50 62 45 79 6e 6b 59 57 33 62 6e 74 74 5f 66 79 49 5a 74 53 63 48 75 62 6e 44 4f 44 41 57 6b 51 51 73 57 31 70 43 67 6f 63 74 6d 53 68 57 65 5f 6c 43 73 53 79 74 70 41 56 32 31 54 30 51 46 5f 49 41 57 6f 42 6a 58 59 78 52 66 59 4e 43 62 65 34 65 44 49 72 7a 57 36 6f 6e 7a 66 45 6e 69 6f 74 4a 35 44 66 30 6d 34 41 36 54 34 36 6b 4c 74 31 44 35 69 78 44 52 73 50 47 47 72 6e 69 38 54 77 36 67 67 41 7a 4d 6b 63 7a 76 49 34 49 6c 78 4c 49 78 32 34 72 4f 73 74 6b 7a 6b 6a 49 68 54 6d 63 69 56 71 6c 35 73 53 2d 4b 6c 4a 61 50 37 66 30 4b 42 71 61 30 56 47 77 63 44 68 76 4b 38 72 Data Ascii: nVeXHXW8934A1qwNpoyWJe8pXxR_RrKico8qSWr2T1MvRlM4_7Kq5GzpXkm9gyPbEynkYW3bntt_fyIZtScHubnDODAWkQQsW1pCgoctmShWe_lCsSytpAV21T0QF_IAWoBjXYxRfYNCbe4eDIrzW6onzfEniotJ5Df0m4A6T46kLt1D5ixDRsPGGrni8Tw6ggAzMkczvI4IlxLIx24rOstkzkjIhTmciVql5sS-KlJaP7f0KBqa0VGwcDhvK8r
2024-10-21 15:01:38 UTC	1051	IN	Data Raw: 68 45 33 51 74 61 4c 38 78 57 7a 50 71 33 58 6c 2d 65 6c 74 55 6d 41 73 68 5a 75 33 34 75 4a 35 43 77 49 54 54 34 33 65 2d 45 51 6e 36 33 4f 62 61 38 6d 4e 64 5a 4f 70 49 4f 61 76 5a 4b 73 78 4b 38 33 47 51 6c 55 54 58 68 35 36 5a 43 4c 42 55 63 5f 4d 59 48 73 71 4d 55 6c 50 32 71 4d 70 74 50 64 6f 39 35 55 38 36 41 54 4a 32 35 52 30 57 76 69 41 45 6b 70 46 5a 64 67 43 79 54 2d 58 49 59 77 46 4e 6b 54 56 71 6d 30 41 32 46 4d 30 2d 50 37 72 6b 70 46 6e 30 42 4b 5a 59 41 53 4a 61 5a 71 68 45 5a 42 72 4d 2d 72 6e 72 66 75 64 78 4c 72 6c 67 50 4e 66 30 30 67 5a 32 5a 74 68 78 66 61 73 5a 72 35 78 56 58 4e 45 35 6a 72 67 68 76 6d 49 76 6f 6d 4c 44 38 55 33 66 2d 34 37 6d 57 6a 62 4d 38 6f 51 78 4b 58 39 67 72 38 54 74 45 7a 4a 53 5f 77 6d 49 6a 63 63 4e 75 48 Data Ascii: hE3QtaL8xWzPq3Xl-eltUmAshZu34uJ5CwITT43e-EQn63Oba8mNdZOpIOavZKsxK83GQlUTXh56ZCLBUc_MYHsqMUlP2qMptPdo95U86ATJ25R0WviAEkpFZdgCyT-XIYwFNkTVqm0A2FM0-P7rkpFn0BKZYASJaZqhEZBrM-rnrfudxLrlgPNf00gZ2ZthxfasZr5xVXNE5jrghvmIvomLD8U3f-47mWjbM8oQxKX9gr8TtEzJS_wmIjccNuH
2024-10-21 15:01:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49771	142.251.40.196	443	428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 15:01:38 UTC	612	OUT	GET /recaptcha/api2/replaceimage?k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AGteOyplBlu-d31c8ryyFQqBMugLC65zP4RLzU7YQEiLMuOpkxA4oocUetsTn6RIV4SXhJxCf9C0xnZHdmIibHo
2024-10-21 15:01:39 UTC	743	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 21 Oct 2024 15:01:39 GMT Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Allow: POST Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-21 15:01:39 UTC	635	IN	Data Raw: 36 38 30 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f Data Ascii: 680<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 405 (Bad Request)!!1</title><style>*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{backgro
2024-10-21 15:01:39 UTC	1036	IN	Data Raw: 69 64 74 68 3a 37 37 32 70 78 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 Data Ascii: idth:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#log
2024-10-21 15:01:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49772	216.58.206.36	443	428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 15:01:39 UTC	1190	OUT	GET /recaptcha/api2/payload?p=06AFcWeA4UiNT0SlXG4gBbP0KobItkmgpsadCrp4V9rK6nWhJvWEcCvNpLB4tOV0QZ64H9kEAr6scNDhu3_ALp_JtUyla81ESXxNzdoDtEfFzEkgQuG7XNCDc-2fOL8_QsALdktHAqaoc4OJonRRUu0wybkKXzzERW7oPAG_e7PVyxJEcuDZmqmcIE85TJ8NUMUBur2EdSPdSEk-N02j_uszHXMOhp_lZ2DA&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw&id=3befc781412ea0a1 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AGteOyplBlu-d31c8ryyFQqBMugLC65zP4RLzU7YQEiLMuOpkxA4oocUetsTn6RIV4SXhJxCf9C0xnZHdmIibHo
2024-10-21 15:01:39 UTC	681	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Mon, 21 Oct 2024 15:01:39 GMT Date: Mon, 21 Oct 2024 15:01:39 GMT Cache-Control: private, max-age=30 Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Cross-Origin-Resource-Policy: same-site Transfer-Encoding: chunked Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-21 15:01:39 UTC	697	IN	Data Raw: 66 31 32 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 64 00 64 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 Data Ascii: f12JFIFC!"$"$Cdd"}!1AQa"q
2024-10-21 15:01:39 UTC	1378	IN	Data Raw: 74 5d 6f 5a b0 b9 41 b6 de 2c ac a6 59 5b 84 8c 60 29 cb 31 03 ad 79 a5 cf c3 df 12 f8 5f c7 97 ba 65 9e af 66 d7 9a 7d 84 37 97 17 77 10 2c 90 c6 1c 7d d2 1d 5b 9d d8 50 71 82 48 e9 9a ea 71 84 95 d1 9b ba 3d eb 4b f8 cf e0 4b dc 0b 8b 8b ed 39 8f fc fc 5b 12 3f 34 dd 5d 5e 93 e2 6f 0c 6a f8 1a 66 bf a6 dc b1 e8 8b 70 a1 ff 00 ef 92 73 fa 57 cf 5a ce 9b f1 05 ac df c4 53 78 6a ce f7 4a bf b3 8d 26 be 6b 68 95 96 35 20 86 48 d3 1e 5e ed a3 9d bd 0f e7 cf f8 d3 c4 8c f3 f9 5a 97 c2 fb 5f 0f b1 38 79 62 82 75 74 f7 08 5d 54 fd 08 a8 f6 49 ec 1c cd 1f 5e 34 24 73 8a 61 8c 8e d5 f2 bf 84 fc 47 e1 9b 4b 07 6b 3f 8a 7a ee 91 76 a8 59 2d a4 d3 e4 8a 36 23 b7 cb 23 27 e6 6b ae b9 f8 97 e2 cf 0f 1b 5f 27 c5 9e 1d f1 5c 13 75 68 d3 77 96 78 e1 99 42 f2 73 c7 5a 87 Data Ascii: t]oZA,Y[`)1y_ef}7w,}[PqHq=KK9[?4]^ojfpsWZSxjJ&kh5 H^Z_8ybut]TI^4$saGKk?zvY-6##'k_'\uhwxBsZ
2024-10-21 15:01:39 UTC	1378	IN	Data Raw: 3d c9 f4 f5 af 2f f0 cd 96 af a6 7c 35 bc d4 7c 53 73 75 24 f7 ba 6c f0 d8 3b cc 0a 28 e5 8c 64 0e 06 ff 00 be b8 3c ed fc fd 07 5b b9 4f 18 7c 40 b3 d0 13 0d a4 68 bb 6e f5 03 d5 65 9b fe 59 c6 7e 87 92 3d 9a a7 96 c8 a3 cc af f4 bd 5b 4e f1 e7 84 75 2b eb f9 34 bd 47 59 8e ee e2 69 bc 91 2f d9 d4 a8 0a bb 4f 03 0a dc 93 d3 3e d5 e8 5a bf 83 c5 b5 85 c5 fe bd e2 1d 7e f6 28 50 bc 80 de 7d 9e 32 00 fe ec 41 45 5a f1 bb db cb f1 a3 c0 4b 2a a4 88 f0 ea 48 e1 86 41 0d 00 18 23 bd 69 47 2a 5d 78 aa 0f 08 dc 4a 92 5a 58 01 79 b9 9f 2d 32 0c 79 51 37 a9 52 72 7d 42 a1 3d 4d 5b 7a 2b 09 23 94 f8 67 a7 ea b6 de 11 b2 9e 1b 78 0b dd 44 8e 66 9a 53 9d a0 61 00 50 3a 05 03 bf 5c d7 39 06 bd a4 c9 f1 7a 4b 8d 52 43 71 2d 95 b7 ee fe cb 6b 24 bb e4 53 b4 7c ab b8 9c Data Ascii: =/\|5\|Ssu$l;(d<[O\|@hneY~=[Nu+4GYi/O>Z~(P}2AEZKHA#iG]xJZXy-2yQ7Rr}B=M[z+#gxDfSaP:\9zKRCq-k$S\|
2024-10-21 15:01:39 UTC	412	IN	Data Raw: 8a 77 03 2d d7 46 bf 2b fd a5 a7 5a 5d e3 fe 7b c0 b2 63 f3 15 f2 1f 8c f4 6b 3b 2f 15 6a 56 d6 f0 a8 81 6f 66 58 d7 fb aa 18 e0 7e 58 af b6 13 48 b1 76 e1 c8 fc 45 7c 99 f1 3e 08 e2 f1 c6 ab 12 0f f5 77 f3 a0 f7 c3 75 aa 5a 83 22 f0 3e 8f a3 4b a5 4a d7 56 11 4e e2 72 03 32 e7 03 6a f1 45 68 78 35 47 f6 5c 9b 99 54 f9 c7 8c 7b 2d 15 ba 5a 0b 53 db 45 da 8e f4 f4 bd 88 75 19 ac b5 5c f0 49 a7 84 5c 67 75 61 60 35 0d fc 58 c0 5c 54 4f 70 8f fc 55 43 00 52 f1 d0 51 60 2d 17 27 ee bd 34 b4 80 7d ea 85 4e 3a 54 85 9c 8f fe b5 00 38 5c c8 9d 1a 9e 9a 84 e3 f8 f1 55 d8 33 0e 7f 95 30 c6 7d 69 a0 34 96 fa 76 1f eb c8 a9 3e dd 20 5e 64 72 6b 29 14 8e e6 a7 52 01 fe 21 f8 d1 64 06 9d b6 af 24 6c 3e 66 af 9f 3e 23 b7 99 e2 dd 46 7e ef 7b 2b 7e 64 57 ba c6 63 cf 53 Data Ascii: w-F+Z]{ck;/jVofX~XHvE\|>wuZ">KJVNr2jEhx5G\T{-ZSEu\I\gua`5X\TOpUCRQ`-'4}N:T8\U30}i4v> ^drk)R!d$l>f>#F~{+~dWcS
2024-10-21 15:01:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49773	142.251.40.196	443	428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 15:01:39 UTC	858	OUT	GET /recaptcha/api2/payload?p=06AFcWeA4UiNT0SlXG4gBbP0KobItkmgpsadCrp4V9rK6nWhJvWEcCvNpLB4tOV0QZ64H9kEAr6scNDhu3_ALp_JtUyla81ESXxNzdoDtEfFzEkgQuG7XNCDc-2fOL8_QsALdktHAqaoc4OJonRRUu0wybkKXzzERW7oPAG_e7PVyxJEcuDZmqmcIE85TJ8NUMUBur2EdSPdSEk-N02j_uszHXMOhp_lZ2DA&k=6LfIamUqAAAAAA_pjPlG-rEHT90p2X2Tt3w1E6Dw&id=3befc781412ea0a1 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AGteOyplBlu-d31c8ryyFQqBMugLC65zP4RLzU7YQEiLMuOpkxA4oocUetsTn6RIV4SXhJxCf9C0xnZHdmIibHo
2024-10-21 15:01:39 UTC	681	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Mon, 21 Oct 2024 15:01:39 GMT Date: Mon, 21 Oct 2024 15:01:39 GMT Cache-Control: private, max-age=30 Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Cross-Origin-Resource-Policy: same-site Transfer-Encoding: chunked Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-21 15:01:39 UTC	697	IN	Data Raw: 66 31 32 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 64 00 64 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 Data Ascii: f12JFIFC!"$"$Cdd"}!1AQa"q
2024-10-21 15:01:39 UTC	1378	IN	Data Raw: 74 5d 6f 5a b0 b9 41 b6 de 2c ac a6 59 5b 84 8c 60 29 cb 31 03 ad 79 a5 cf c3 df 12 f8 5f c7 97 ba 65 9e af 66 d7 9a 7d 84 37 97 17 77 10 2c 90 c6 1c 7d d2 1d 5b 9d d8 50 71 82 48 e9 9a ea 71 84 95 d1 9b ba 3d eb 4b f8 cf e0 4b dc 0b 8b 8b ed 39 8f fc fc 5b 12 3f 34 dd 5d 5e 93 e2 6f 0c 6a f8 1a 66 bf a6 dc b1 e8 8b 70 a1 ff 00 ef 92 73 fa 57 cf 5a ce 9b f1 05 ac df c4 53 78 6a ce f7 4a bf b3 8d 26 be 6b 68 95 96 35 20 86 48 d3 1e 5e ed a3 9d bd 0f e7 cf f8 d3 c4 8c f3 f9 5a 97 c2 fb 5f 0f b1 38 79 62 82 75 74 f7 08 5d 54 fd 08 a8 f6 49 ec 1c cd 1f 5e 34 24 73 8a 61 8c 8e d5 f2 bf 84 fc 47 e1 9b 4b 07 6b 3f 8a 7a ee 91 76 a8 59 2d a4 d3 e4 8a 36 23 b7 cb 23 27 e6 6b ae b9 f8 97 e2 cf 0f 1b 5f 27 c5 9e 1d f1 5c 13 75 68 d3 77 96 78 e1 99 42 f2 73 c7 5a 87 Data Ascii: t]oZA,Y[`)1y_ef}7w,}[PqHq=KK9[?4]^ojfpsWZSxjJ&kh5 H^Z_8ybut]TI^4$saGKk?zvY-6##'k_'\uhwxBsZ
2024-10-21 15:01:39 UTC	1378	IN	Data Raw: 3d c9 f4 f5 af 2f f0 cd 96 af a6 7c 35 bc d4 7c 53 73 75 24 f7 ba 6c f0 d8 3b cc 0a 28 e5 8c 64 0e 06 ff 00 be b8 3c ed fc fd 07 5b b9 4f 18 7c 40 b3 d0 13 0d a4 68 bb 6e f5 03 d5 65 9b fe 59 c6 7e 87 92 3d 9a a7 96 c8 a3 cc af f4 bd 5b 4e f1 e7 84 75 2b eb f9 34 bd 47 59 8e ee e2 69 bc 91 2f d9 d4 a8 0a bb 4f 03 0a dc 93 d3 3e d5 e8 5a bf 83 c5 b5 85 c5 fe bd e2 1d 7e f6 28 50 bc 80 de 7d 9e 32 00 fe ec 41 45 5a f1 bb db cb f1 a3 c0 4b 2a a4 88 f0 ea 48 e1 86 41 0d 00 18 23 bd 69 47 2a 5d 78 aa 0f 08 dc 4a 92 5a 58 01 79 b9 9f 2d 32 0c 79 51 37 a9 52 72 7d 42 a1 3d 4d 5b 7a 2b 09 23 94 f8 67 a7 ea b6 de 11 b2 9e 1b 78 0b dd 44 8e 66 9a 53 9d a0 61 00 50 3a 05 03 bf 5c d7 39 06 bd a4 c9 f1 7a 4b 8d 52 43 71 2d 95 b7 ee fe cb 6b 24 bb e4 53 b4 7c ab b8 9c Data Ascii: =/\|5\|Ssu$l;(d<[O\|@hneY~=[Nu+4GYi/O>Z~(P}2AEZKHA#iG]xJZXy-2yQ7Rr}B=M[z+#gxDfSaP:\9zKRCq-k$S\|
2024-10-21 15:01:39 UTC	412	IN	Data Raw: 8a 77 03 2d d7 46 bf 2b fd a5 a7 5a 5d e3 fe 7b c0 b2 63 f3 15 f2 1f 8c f4 6b 3b 2f 15 6a 56 d6 f0 a8 81 6f 66 58 d7 fb aa 18 e0 7e 58 af b6 13 48 b1 76 e1 c8 fc 45 7c 99 f1 3e 08 e2 f1 c6 ab 12 0f f5 77 f3 a0 f7 c3 75 aa 5a 83 22 f0 3e 8f a3 4b a5 4a d7 56 11 4e e2 72 03 32 e7 03 6a f1 45 68 78 35 47 f6 5c 9b 99 54 f9 c7 8c 7b 2d 15 ba 5a 0b 53 db 45 da 8e f4 f4 bd 88 75 19 ac b5 5c f0 49 a7 84 5c 67 75 61 60 35 0d fc 58 c0 5c 54 4f 70 8f fc 55 43 00 52 f1 d0 51 60 2d 17 27 ee bd 34 b4 80 7d ea 85 4e 3a 54 85 9c 8f fe b5 00 38 5c c8 9d 1a 9e 9a 84 e3 f8 f1 55 d8 33 0e 7f 95 30 c6 7d 69 a0 34 96 fa 76 1f eb c8 a9 3e dd 20 5e 64 72 6b 29 14 8e e6 a7 52 01 fe 21 f8 d1 64 06 9d b6 af 24 6c 3e 66 af 9f 3e 23 b7 99 e2 dd 46 7e ef 7b 2b 7e 64 57 ba c6 63 cf 53 Data Ascii: w-F+Z]{ck;/jVofX~XHvE\|>wuZ">KJVNr2jEhx5G\T{-ZSEu\I\gua`5X\TOpUCRQ`-'4}N:T8\U30}i4v> ^drk)R!d$l>f>#F~{+~dWcS
2024-10-21 15:01:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	10:59:36
Start date:	21/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	10:59:36
Start date:	21/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1928,i,2373029909531975188,16909724742691249416,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	10:59:37
Start date:	21/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.wagtg.com"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: http://www.wagtg.com/	LLM: Score: 9 Reasons: The brand 'reCAPTCHA' is well-known and typically associated with the domain 'recaptcha.net'., The URL 'www.wagtg.com' does not match the legitimate domain for reCAPTCHA., The URL 'www.wagtg.com' does not contain any recognizable elements related to reCAPTCHA., The input fields 'u, n, k, n, o, w, n' do not provide any context that aligns with reCAPTCHA's typical usage., The domain 'wagtg.com' appears unrelated to the brand and lacks any recognizable association with reCAPTCHA. DOM: 1.2.pages.csv
Source: http://www.wagtg.com/	LLM: Score: 9 Reasons: The brand 'reCAPTCHA' is well-known and typically associated with the domain 'recaptcha.net'., The URL 'www.wagtg.com' does not match the legitimate domain for reCAPTCHA., The URL 'www.wagtg.com' does not contain any recognizable elements related to reCAPTCHA., The input fields 'u, n, k, n, o, w, n' do not provide any context that aligns with reCAPTCHA's typical usage., The domain 'wagtg.com' appears unrelated to the brand and lacks any recognizable association with reCAPTCHA. DOM: 1.3.pages.csv

Source: http://www.wagtg.com/	Matcher: Template: captcha matched
Source: http://www.wagtg.com/	Matcher: Template: captcha matched

Source: http://www.wagtg.com/	HTTP Parser: No favicon
Source: http://www.wagtg.com/	HTTP Parser: No favicon
Source: http://www.wagtg.com/	HTTP Parser: No favicon
Source: http://www.wagtg.com/	HTTP Parser: No favicon

Source: Network traffic	Suricata IDS: 2858711 - Severity 1 - ETPRO PHISHING BULLSreCaptcha Credential Phish Landing Page M1 2024-10-17 : 45.152.115.161:80 -> 192.168.2.16:49700
Source: Network traffic	Suricata IDS: 2858712 - Severity 1 - ETPRO PHISHING Suspected BULLSreCaptcha Credential Phish Landing Page M2 2024-10-17 : 45.152.115.161:80 -> 192.168.2.16:49700

Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://www.wagtg.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Windows Analysis Report
http://www.wagtg.com