Edit tour

Windows Analysis Report
Alliance Bank Central Texas Open Benefits Enrollment.eml

Overview

General Information

Sample name:	Alliance Bank Central Texas Open Benefits Enrollment.eml
Analysis ID:	1549662
MD5:	ae18a37725df1a69da4b9fc93136465a
SHA1:	0efef2c8152dfa9c9e1e6695c595328281ae95ab
SHA256:	03d5ff3d1c214266f45d3fc2c6fbb3eaea50600d1f343511925b2ac223dd683d
Infos:

Detection

HTMLPhisher

Score:	84
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus detection for URL or domain

Yara detected HtmlPhish54

AI detected potential phishing Email

Performs DNS queries with encoded ASCII data (may be used to data exfiltration)

Phishing site detected (based on favicon image match)

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

Detected hidden input values containing email addresses (often used in phishing pages)

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML title does not match URL

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Queries the volume information (name, serial number etc) of a device

Sigma detected: Office Autorun Keys Modification

Sigma detected: Outlook Security Settings Updated - Registry

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64_ra

OUTLOOK.EXE (PID: 6848 cmdline: "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" /eml "C:\Users\user\Desktop\Alliance Bank Central Texas Open Benefits Enrollment.eml" MD5: 91A5292942864110ED734005B7E005C0)

ai.exe (PID: 7036 cmdline: "C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "F592870C-2BBB-4F71-A566-7B6E6FD595EF" "9DD1B28C-6468-440C-8076-5403197F9CC1" "6848" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx" MD5: EC652BEDD90E089D9406AFED89A8A8BD)

chrome.exe (PID: 1460 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\AAEDGQMI\Alliance Bank Central Texas Eligible Finance Insurance Benefits Open Enrollment Plan.shtml MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1776 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=1960,i,6219065820707316075,16662043819558454010,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
1.14.id.script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
1.19.id.script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
4.7.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
5.8.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
5.10.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
5.12.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
Click to see the 1 entries

Sigma Signatures

Sigma detected: Office Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 , EventID: 13, EventType: SetValue, Image: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE, ProcessId: 6848, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Addins\OneNote.OutlookAddin\1

Sigma detected: Outlook Security Settings Updated - Registry

Source: Registry Key set

Author: frack113: Data: Details: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\AAEDGQMI\, EventID: 13, EventType: SetValue, Image: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE, ProcessId: 6848, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Security\OutlookSecureTempFolder

Suricata Signatures

ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-05T21:16:59.847876+0100	2022930	1	A Network Trojan was detected	20.12.23.50	443	192.168.2.16	49711	TCP
2024-11-05T21:17:37.934513+0100	2022930	1	A Network Trojan was detected	20.12.23.50	443	192.168.2.16	49713	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://login.nuriapsicologia.com/

SlashNext: Label: Credential Stealing type: Phishing & Social Engineering

Phishing

AI detected phishing page

Source: https://login.nuriapsicologia.com/	LLM: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL 'login.nuriapsicologia.com' does not match the legitimate domain for Microsoft., The domain 'nuriapsicologia.com' does not have any known association with Microsoft., The URL does not contain any elements that suggest it is related to Microsoft, such as 'microsoft' in the domain name., The presence of a login page on a domain unrelated to Microsoft is suspicious and indicative of a potential phishing attempt. DOM: 3.4.pages.csv
Source: https://login.nuriapsicologia.com/	LLM: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The provided URL 'login.nuriapsicologia.com' does not match the legitimate domain for Microsoft., The domain 'nuriapsicologia.com' does not appear to have any association with Microsoft., The URL does not contain any elements that suggest it is related to Microsoft, such as 'microsoft' in the domain name., The presence of a login page on a domain unrelated to Microsoft is suspicious and indicative of a potential phishing attempt. DOM: 3.6.pages.csv
Source: https://login.nuriapsicologia.com/?login_hint=rpetrini@alliancebanktexas.com&sso_reload=true	LLM: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL 'login.nuriapsicologia.com' does not match the legitimate domain for Microsoft., The domain 'nuriapsicologia.com' does not appear to be related to Microsoft., The presence of a login page with a password field on a domain not associated with Microsoft is suspicious., There are no indicators that 'nuriapsicologia.com' is a trusted service provider for Microsoft. DOM: 5.12.pages.csv

Yara detected HtmlPhish54

Source: Yara match	File source: 1.14.id.script.csv, type: HTML
Source: Yara match	File source: 1.19.id.script.csv, type: HTML
Source: Yara match	File source: 4.7.pages.csv, type: HTML
Source: Yara match	File source: 5.8.pages.csv, type: HTML
Source: Yara match	File source: 5.10.pages.csv, type: HTML
Source: Yara match	File source: 5.12.pages.csv, type: HTML

Phishing site detected (based on favicon image match)

Source: https://nuriapsicologia.com	Matcher: Template: microsoft matched with high similarity
Source: https://login.nuriapsicologia.com/?login_hint=rpetrini@alliancebanktexas.com&sso_reload=true	Matcher: Template: microsoft matched with high similarity

Phishing site detected (based on image similarity)

Source: https://login.nuriapsicologia.com/?login_hint=rpetrini@alliancebanktexas.com&sso_reload=true

Matcher: Found strong image similarity, brand: MICROSOFT

Phishing site detected (based on logo match)

Source: https://login.nuriapsicologia.com/	Matcher: Template: microsoft matched
Source: https://login.nuriapsicologia.com/?login_hint=rpetrini@alliancebanktexas.com&sso_reload=true	Matcher: Template: microsoft matched
Source: https://login.nuriapsicologia.com/?login_hint=rpetrini@alliancebanktexas.com&sso_reload=true	Matcher: Template: microsoft matched
Source: https://login.nuriapsicologia.com/?login_hint=rpetrini@alliancebanktexas.com&sso_reload=true	Matcher: Template: microsoft matched

Source: https://login.nuriapsicologia.com/?login_hint=rpetrini@alliancebanktexas.com&sso_reload=true

HTTP Parser: rpetrini@alliancebanktexas.com

Source: https://login.nuriapsicologia.com/?login_hint=rpetrini@alliancebanktexas.com	HTTP Parser: Number of links: 0
Source: https://login.nuriapsicologia.com/?login_hint=rpetrini@alliancebanktexas.com&sso_reload=true	HTTP Parser: Number of links: 0

Source: https://login.nuriapsicologia.com/?login_hint=rpetrini@alliancebanktexas.com	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.nuriapsicologia.com/?login_hint=rpetrini@alliancebanktexas.com&sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL

Source: https://login.nuriapsicologia.com/?login_hint=rpetrini@alliancebanktexas.com&sso_reload=true	HTTP Parser: Iframe src: https://706f7274616c2e6d6963726f736f66746f6e6c696e652e636f6d.nuriapsicologia.com/Prefetch/Prefetch.aspx
Source: https://login.nuriapsicologia.com/?login_hint=rpetrini@alliancebanktexas.com&sso_reload=true	HTTP Parser: Iframe src: https://706f7274616c2e6d6963726f736f66746f6e6c696e652e636f6d.nuriapsicologia.com/Prefetch/Prefetch.aspx
Source: https://login.nuriapsicologia.com/?login_hint=rpetrini@alliancebanktexas.com&sso_reload=true	HTTP Parser: Iframe src: https://706f7274616c2e6d6963726f736f66746f6e6c696e652e636f6d.nuriapsicologia.com/Prefetch/Prefetch.aspx

Source: https://login.nuriapsicologia.com/?login_hint=rpetrini@alliancebanktexas.com&sso_reload=true

HTTP Parser: <input type="password" .../> found

Source: file:///C:/Users/user/AppData/Local/Microsoft/Windows/INetCache/Content.Outlook/AAEDGQMI/Alliance%20Bank%20Central%20Texas%20Eligible%20Finance%20Insurance%20Benefits%20Open%20Enrollment%20Plan.shtml	HTTP Parser: No favicon
Source: https://login.nuriapsicologia.com/	HTTP Parser: No favicon
Source: https://login.nuriapsicologia.com/	HTTP Parser: No favicon
Source: https://login.nuriapsicologia.com/	HTTP Parser: No favicon
Source: https://login.nuriapsicologia.com/	HTTP Parser: No favicon
Source: https://login.nuriapsicologia.com/?login_hint=rpetrini@alliancebanktexas.com	HTTP Parser: No favicon
Source: https://login.nuriapsicologia.com/?login_hint=rpetrini@alliancebanktexas.com&sso_reload=true	HTTP Parser: No favicon
Source: https://login.nuriapsicologia.com/?login_hint=rpetrini@alliancebanktexas.com&sso_reload=true	HTTP Parser: No favicon

Source: https://login.nuriapsicologia.com/?login_hint=rpetrini@alliancebanktexas.com	HTTP Parser: No <meta name="author".. found
Source: https://login.nuriapsicologia.com/?login_hint=rpetrini@alliancebanktexas.com&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.nuriapsicologia.com/?login_hint=rpetrini@alliancebanktexas.com&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.nuriapsicologia.com/?login_hint=rpetrini@alliancebanktexas.com&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://login.nuriapsicologia.com/?login_hint=rpetrini@alliancebanktexas.com	HTTP Parser: No <meta name="copyright".. found
Source: https://login.nuriapsicologia.com/?login_hint=rpetrini@alliancebanktexas.com&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.nuriapsicologia.com/?login_hint=rpetrini@alliancebanktexas.com&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.nuriapsicologia.com/?login_hint=rpetrini@alliancebanktexas.com&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 2.23.194.22:443 -> 192.168.2.16:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.23.194.22:443 -> 192.168.2.16:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.159.75:443 -> 192.168.2.16:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.159.75:443 -> 192.168.2.16:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49713 version: TLS 1.2

Networking

Performs DNS queries with encoded ASCII data (may be used to data exfiltration)

Source: unknown	DNS traffic detected with encoded ASCII: query: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com; decoded parts: aadcdn.msftauth.net
Source: unknown	DNS traffic detected with encoded ASCII: query: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com; decoded parts: aadcdn.msftauth.net
Source: unknown	DNS traffic detected with encoded ASCII: query: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com; decoded parts: aadcdn.msftauth.net
Source: unknown	DNS traffic detected with encoded ASCII: query: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com; decoded parts: aadcdn.msftauth.net
Source: unknown	DNS traffic detected with encoded ASCII: query: 706f7274616c2e6d6963726f736f66746f6e6c696e652e636f6d.nuriapsicologia.com; decoded parts: portal.microsoftonline.com
Source: unknown	DNS traffic detected with encoded ASCII: query: 706f7274616c2e6d6963726f736f66746f6e6c696e652e636f6d.nuriapsicologia.com; decoded parts: portal.microsoftonline.com

Source: global traffic

TCP traffic: 192.168.2.16:49730 -> 1.1.1.1:53

Source: Joe Sandbox View	IP Address: 104.17.248.203 104.17.248.203
Source: Joe Sandbox View	IP Address: 104.17.246.203 104.17.246.203
Source: Joe Sandbox View	IP Address: 104.18.95.41 104.18.95.41
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250

Source: Joe Sandbox View

ASN Name: AMAZON-02US AMAZON-02US

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: Network traffic	Suricata IDS: 2022930 - Severity 1 - ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow : 20.12.23.50:443 -> 192.168.2.16:49711
Source: Network traffic	Suricata IDS: 2022930 - Severity 1 - ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow : 20.12.23.50:443 -> 192.168.2.16:49713

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.194.22
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.194.22
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.194.22
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.194.22
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.194.22
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.194.22
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.194.22
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.194.22
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.194.22
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.194.22
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.194.22
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.194.22
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.194.22
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.194.22
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.194.22
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.194.22
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.194.22
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.194.22
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=pVUlNGnV+b1mfpf&MD=c9yZPbEh HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=pVUlNGnV+b1mfpf&MD=c9yZPbEh HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: login.nuriapsicologia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.nuriapsicologia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bowser@2.7.0/es5.js HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.nuriapsicologia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?render=6LejiXUqAAAAAFaG20PrbDcf0UifxwSgI18CUBuN HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.nuriapsicologia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vmiddle9999 HTTP/1.1Host: login.nuriapsicologia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.nuriapsicologia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/22755d9a86c9/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.nuriapsicologia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bowser@2.7.0/es5.js HTTP/1.1Host: unpkg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?render=6LejiXUqAAAAAFaG20PrbDcf0UifxwSgI18CUBuN HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vmiddle9999 HTTP/1.1Host: login.nuriapsicologia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/22755d9a86c9/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/5cjyd/0x4AAAAAAAzPhqrNyZFP3elb/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://login.nuriapsicologia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ddf87ad58f36c25&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/5cjyd/0x4AAAAAAAzPhqrNyZFP3elb/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/5cjyd/0x4AAAAAAAzPhqrNyZFP3elb/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LejiXUqAAAAAFaG20PrbDcf0UifxwSgI18CUBuN&co=aHR0cHM6Ly9sb2dpbi5udXJpYXBzaWNvbG9naWEuY29tOjQ0Mw..&hl=en&v=-ZG7BC9TxCVEbzIO2m429usb&size=invisible&cb=zfh74mtnhpaf HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://login.nuriapsicologia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ddf87ad58f36c25&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/327534660:1730834845:xB-X5yMQwnEzWyfOsx7a_gc-vUOi2RR5kk_BobmozzY/8ddf87ad58f36c25/.T7TKrt9wrxElaOPQwbGCCRFdzx7EdER96MDTZyI7OE-1730837874-1.1.1.1-w1VUtYFQyOaPeGAutG8NnTuZyILjccRMIz3R2IKDpfCOHSVV7p1SBpaHe7mt.dJk HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8ddf87ad58f36c25/1730837877154/HKWyE_ZfKu9md8g HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/5cjyd/0x4AAAAAAAzPhqrNyZFP3elb/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=-ZG7BC9TxCVEbzIO2m429usb HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LejiXUqAAAAAFaG20PrbDcf0UifxwSgI18CUBuN&co=aHR0cHM6Ly9sb2dpbi5udXJpYXBzaWNvbG9naWEuY29tOjQ0Mw..&hl=en&v=-ZG7BC9TxCVEbzIO2m429usb&size=invisible&cb=zfh74mtnhpafAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/cqfQemrLspdjtnXuw8mwA1tdif22jf6i2OdjlhRc508.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LejiXUqAAAAAFaG20PrbDcf0UifxwSgI18CUBuN&co=aHR0cHM6Ly9sb2dpbi5udXJpYXBzaWNvbG9naWEuY29tOjQ0Mw..&hl=en&v=-ZG7BC9TxCVEbzIO2m429usb&size=invisible&cb=zfh74mtnhpafAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8ddf87ad58f36c25/1730837877154/HKWyE_ZfKu9md8g HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/8ddf87ad58f36c25/1730837877159/686a63288e80937efcc7ab73aa81a04a52a55e0263dfebe58234a39e066f115a/m1eskK5g1IF4Lja HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/5cjyd/0x4AAAAAAAzPhqrNyZFP3elb/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: login.nuriapsicologia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.nuriapsicologia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=-ZG7BC9TxCVEbzIO2m429usb HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/cqfQemrLspdjtnXuw8mwA1tdif22jf6i2OdjlhRc508.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: login.nuriapsicologia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/327534660:1730834845:xB-X5yMQwnEzWyfOsx7a_gc-vUOi2RR5kk_BobmozzY/8ddf87ad58f36c25/.T7TKrt9wrxElaOPQwbGCCRFdzx7EdER96MDTZyI7OE-1730837874-1.1.1.1-w1VUtYFQyOaPeGAutG8NnTuZyILjccRMIz3R2IKDpfCOHSVV7p1SBpaHe7mt.dJk HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/reload?k=6LejiXUqAAAAAFaG20PrbDcf0UifxwSgI18CUBuN HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ANOXeZxRYKRc1aa2_w0wE-Yy9K2C-RUruROR0Jvg39A0_jLe3gEEf8THt-zb2QpVM8lG9F5qjYpjQJvbWwYOkvw
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/clr?k=6LejiXUqAAAAAFaG20PrbDcf0UifxwSgI18CUBuN HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ANOXeZxRYKRc1aa2_w0wE-Yy9K2C-RUruROR0Jvg39A0_jLe3gEEf8THt-zb2QpVM8lG9F5qjYpjQJvbWwYOkvw
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bcn?k=6LejiXUqAAAAAFaG20PrbDcf0UifxwSgI18CUBuN HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ANOXeZxRYKRc1aa2_w0wE-Yy9K2C-RUruROR0Jvg39A0_jLe3gEEf8THt-zb2QpVM8lG9F5qjYpjQJvbWwYOkvw
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/327534660:1730834845:xB-X5yMQwnEzWyfOsx7a_gc-vUOi2RR5kk_BobmozzY/8ddf87ad58f36c25/.T7TKrt9wrxElaOPQwbGCCRFdzx7EdER96MDTZyI7OE-1730837874-1.1.1.1-w1VUtYFQyOaPeGAutG8NnTuZyILjccRMIz3R2IKDpfCOHSVV7p1SBpaHe7mt.dJk HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?login_hint=rpetrini@alliancebanktexas.com HTTP/1.1Host: login.nuriapsicologia.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://login.nuriapsicologia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vfff9080=3137332e3235342e3235302e3736
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.nuriapsicologia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
Source: global traffic	HTTP traffic detected: GET /?login_hint=rpetrini@alliancebanktexas.com&sso_reload=true HTTP/1.1Host: login.nuriapsicologia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://login.nuriapsicologia.com/?login_hint=rpetrini@alliancebanktexas.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vfff9080=3137332e3235342e3235302e3736; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFerIU6xy-AGQXzi4Jfj11wrHhLxvb3bmkmIjt-b7b3M1Ukdlwv-nEm6BQiHOp20Mp3i5-LIstAKH_OgpHLmtqJOB_rgBVhBcaExYBE43EdRnv5h4TGoe1YqjR0Rf_thFGNrmINI51ABr9Q07-C8rgwsD0HX1JYOWRhc1XLT4_JFnUgAA; esctx-UjXf3avDMXI=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeRDL25y76xPm56I_NETtCDfvssYkDfWdsvPku9YGf0xxRvn_MRmRTvk0KpnJwK2EfY1c4WDOsVEQAkTtwWw67T-m8_eZm8QIuyGnsEogSw---rLC7SWWUDMLofslWbKtzjOVO29zJM0LJoXzZQzF8dSAA; fpc=Ap6Hglam49RKrH-hsTA8Uos; stsservicecookie=estsfd; x-ms-gateway-slice=estsfd; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: login.nuriapsicologia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.nuriapsicologia.com/?login_hint=rpetrini@alliancebanktexas.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vfff9080=3137332e3235342e3235302e3736; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFerIU6xy-AGQXzi4Jfj11wrHhLxvb3bmkmIjt-b7b3M1Ukdlwv-nEm6BQiHOp20Mp3i5-LIstAKH_OgpHLmtqJOB_rgBVhBcaExYBE43EdRnv5h4TGoe1YqjR0Rf_thFGNrmINI51ABr9Q07-C8rgwsD0HX1JYOWRhc1XLT4_JFnUgAA; esctx-UjXf3avDMXI=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeRDL25y76xPm56I_NETtCDfvssYkDfWdsvPku9YGf0xxRvn_MRmRTvk0KpnJwK2EfY1c4WDOsVEQAkTtwWw67T-m8_eZm8QIuyGnsEogSw---rLC7SWWUDMLofslWbKtzjOVO29zJM0LJoXzZQzF8dSAA; fpc=Ap6Hglam49RKrH-hsTA8Uos; stsservicecookie=estsfd; x-ms-gateway-slice=estsfd; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css HTTP/1.1Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://login.nuriapsicologia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_IzDt-l0Cuie0gYRUoEk15w2.js HTTP/1.1Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.nuriapsicologia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.nuriapsicologia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
Source: global traffic	HTTP traffic detected: GET /Me.htm?v=3 HTTP/1.1Host: 6c6f67696e2e6c6976652e636f6d.nuriapsicologia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://login.nuriapsicologia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_IzDt-l0Cuie0gYRUoEk15w2.js HTTP/1.1Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.nuriapsicologia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.nuriapsicologia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
Source: global traffic	HTTP traffic detected: GET /Prefetch/Prefetch.aspx HTTP/1.1Host: 706f7274616c2e6d6963726f736f66746f6e6c696e652e636f6d.nuriapsicologia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://login.nuriapsicologia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pidpdisambiguation_8e15caf4c90cec4857ee.js HTTP/1.1Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.nuriapsicologia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.nuriapsicologia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.nuriapsicologia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.nuriapsicologia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.nuriapsicologia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pidpdisambiguation_8e15caf4c90cec4857ee.js HTTP/1.1Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.nuriapsicologia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.nuriapsicologia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.nuriapsicologia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_ppassword_89db715e3340a2e8ecd8.js HTTP/1.1Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.nuriapsicologia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_ppassword_89db715e3340a2e8ecd8.js HTTP/1.1Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/arrow_left_43280e0ba671a1d8b5e34f1931c4fe4b.svg HTTP/1.1Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.nuriapsicologia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/arrow_left_43280e0ba671a1d8b5e34f1931c4fe4b.svg HTTP/1.1Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I

Source: global traffic	DNS traffic detected: DNS query: login.nuriapsicologia.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: unpkg.com
Source: global traffic	DNS traffic detected: DNS query: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com
Source: global traffic	DNS traffic detected: DNS query: identity.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: 6c6f67696e2e6c6976652e636f6d.nuriapsicologia.com
Source: global traffic	DNS traffic detected: DNS query: 706f7274616c2e6d6963726f736f66746f6e6c696e652e636f6d.nuriapsicologia.com

Source: unknown

HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 3592Host: login.live.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 05 Nov 2024 20:17:58 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: D80QrrbUUfByjKde4b1rs939HERg8HmM3tg=$aSRLdXVqOVej9ZtRServer: cloudflareCF-RAY: 8ddf87c38a61e97a-DFWalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 05 Nov 2024 20:18:01 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: NsYGxLEaWNdRYDtHzBGhN8n3MWQYU6ME4NI=$q9cvmwKmnX8ituxtcache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8ddf87d97f2b315f-DFWalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 05 Nov 2024 20:18:31 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: MOhLqx4YiRMD+un5zXKy4744SO7ifn6OmDs=$QuZUh4Zc0UyEr3Brcache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8ddf88914cbd4774-DFWalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 NOT FOUNDServer: nginx/1.18.0 (Ubuntu)Date: Tue, 05 Nov 2024 20:18:39 GMTContent-Type: text/htmlContent-Length: 0Connection: closeCache-Control: privateP3P: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 490ba5ed-e060-410c-8237-df80099c6a00x-ms-ests-server: 2.1.19343.4 - SCUS ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+san"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.PReferrer-Policy: strict-origin-when-cross-originAccess-Control-Allow-Origin: Access-Control-Allow-Credentials: trueAccess-Control-Allow-Headers: Set-Cookie: x-ms-gateway-slice=estsfd; Secure; Path=/Vary: CookieSet-Cookie: session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I; Domain=nuriapsicologia.com; HttpOnly; Path=/
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 NOT FOUNDServer: nginx/1.18.0 (Ubuntu)Date: Tue, 05 Nov 2024 20:18:45 GMTContent-Type: text/htmlContent-Length: 4017Connection: closeCache-Control: no-store, no-cachex-ms-correlation-id: 4bd604ab-d34b-4558-8ae8-301f6a3af01aX-UA-Compatible: IE=EdgeX-Cache: CONFIG_NOCACHEX-MSEdge-Ref: Ref A: 8CF7515CF9214B128F793D1409B812A3 Ref B: CH1AA2020618049 Ref C: 2024-11-05T20:18:44ZAccess-Control-Allow-Origin: Access-Control-Allow-Credentials: trueAccess-Control-Allow-Headers: Set-Cookie: s.SessID=bf196d2f-a402-4c3c-9b0f-2952300b9be4; Secure; Path=/Set-Cookie: x-portal-routekey=cus; Secure; Path=/Vary: CookieSet-Cookie: session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I; Domain=nuriapsicologia.com; HttpOnly; Path=/

Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: http://b.c2r.ts.cdn.office.net/pr
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: http://f.c2r.ts.cdn.office.net/pr
Source: chromecache_130.11.dr, chromecache_142.11.dr	String found in binary or memory: http://feross.org
Source: chromecache_101.11.dr, chromecache_106.11.dr, chromecache_107.11.dr, chromecache_144.11.dr	String found in binary or memory: http://knockoutjs.com/
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: http://olkflt.edog.officeapps.live.com/olkflt/outlookflighting.svc/api/glides
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: http://weather.service.msn.com/data.aspx
Source: chromecache_101.11.dr, chromecache_106.11.dr, chromecache_107.11.dr, chromecache_144.11.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: Alliance Bank Central Texas Open Benefits Enrollment.eml, ~WRS{1DA6EB74-6406-407F-B35D-B0B0B6990502}.tmp.0.dr	String found in binary or memory: http://www.zixcorp.com/
Source: Alliance Bank Central Texas Open Benefits Enrollment.eml, ~WRS{1DA6EB74-6406-407F-B35D-B0B0B6990502}.tmp.0.dr	String found in binary or memory: http://www.zixcorp.com/get-started/
Source: chromecache_111.11.dr	String found in binary or memory: https://6c6f67696e2d75732e6d6963726f736f66746f6e6c696e652e636f6d.nuriapsicologia.com
Source: chromecache_111.11.dr	String found in binary or memory: https://6c6f67696e2e6368696e61636c6f75646170692e636e.nuriapsicologia.com
Source: chromecache_111.11.dr	String found in binary or memory: https://6c6f67696e2e6d6963726f736f66742e636f6d.nuriapsicologia.com
Source: chromecache_111.11.dr	String found in binary or memory: https://6c6f67696e2e6d6963726f736f66746f6e6c696e652e6465.nuriapsicologia.com
Source: chromecache_111.11.dr	String found in binary or memory: https://6c6f67696e2e6d6963726f736f66746f6e6c696e652e7573.nuriapsicologia.com
Source: chromecache_111.11.dr	String found in binary or memory: https://6c6f67696e2e706172746e65722e6d6963726f736f66746f6e6c696e652e636e.nuriapsicologia.com
Source: chromecache_111.11.dr	String found in binary or memory: https://6c6f67696e2e77696e646f77732d7070652e6e6574.nuriapsicologia.com
Source: chromecache_111.11.dr	String found in binary or memory: https://6c6f67696e2e77696e646f77732e6e6574.nuriapsicologia.com
Source: chromecache_111.11.dr	String found in binary or memory: https://6c6f67696e636572742e6d6963726f736f66746f6e6c696e652e636f6d.nuriapsicologia.com
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/app/acquisitionlogging
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/app/download
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/authenticated
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/preinstalled
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/unauthenticated
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/orgid/appinstall/authenticated
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/apps/remove
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/commerce/query
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/entitlement/query
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/orgid/apps/remove
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/orgid/entitlement/query
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://analysis.windows.net/powerbi/api
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://api.aadrm.com
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://api.aadrm.com/
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://api.addins.omex.office.net/api/addins/search
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://api.addins.omex.office.net/appinfo/query
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://api.addins.omex.office.net/appstate/query
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://api.addins.store.office.com/addinstemplate
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://api.addins.store.office.com/app/query
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://api.addins.store.officeppe.com/addinstemplate
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://api.cortana.ai
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://api.diagnostics.office.com
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://api.diagnosticssdf.office.com
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://api.diagnosticssdf.office.com/v2/feedback
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://api.diagnosticssdf.office.com/v2/file
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://api.microsoftstream.com
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://api.microsoftstream.com/api/
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://api.office.net
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://api.officescripts.microsoftusercontent.com/api
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://api.onedrive.com
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://api.powerbi.com/v1.0/myorg/datasets
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://api.powerbi.com/v1.0/myorg/groups
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://api.powerbi.com/v1.0/myorg/imports
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://api.scheduler.
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://apis.live.net/v5.0/
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://apis.mobile.m365.svc.cloud.microsoft
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://app.powerbi.com
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://arc.msn.com/v4/api/selection
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://asgsmsproxyapi.azurewebsites.net/
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://augloop.office.com
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://augloop.office.com/v2
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://augloop.office.com;https://augloop-int.officeppe.com;https://augloop-dogfood.officeppe.com;h
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://autodiscover-s.outlook.com/
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://canary.designerapp.
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designer-mobile
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/fonts
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/mobile-assets
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/mobile-dynamic-strings
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/mobile-home-screen
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/mobile-toolbar
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://cdn.entity.
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://cdn.hubblecontent.osi.office.net/
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://cdn.int.designerapp.osi.office.net/fonts
Source: chromecache_109.11.dr	String found in binary or memory: https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://client-office365-tas.msedge.net/ab
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://clients.config.office.net
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://clients.config.office.net/
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://clients.config.office.net/c2r/v1.0/DeltaAdvisory
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://clients.config.office.net/c2r/v1.0/InteractiveInstallation
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/android/policies
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/ios
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/mac
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/tenantassociationkey
Source: chromecache_129.11.dr, chromecache_105.11.dr, chromecache_127.11.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_129.11.dr, chromecache_105.11.dr, chromecache_127.11.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://cloudfiles.onenote.com/upload.aspx
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://config.edge.skype.com/config/v1/Office
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://config.edge.skype.com/config/v2/Office
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://consent.config.office.com/consentcheckin/v1.0/consents
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://consent.config.office.com/consentweb/v1.0/consents
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://cortana.ai
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://cortana.ai/api
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://cr.office.com
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://d.docs.live.net
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://dataservice.o365filtering.com
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://dataservice.o365filtering.com/
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://designerapp.azurewebsites.net
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://designerappservice.officeapps.live.com
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://dev.cortana.ai
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://dev0-api.acompli.net/autodetect
Source: chromecache_129.11.dr, chromecache_105.11.dr, chromecache_127.11.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_129.11.dr, chromecache_105.11.dr, chromecache_127.11.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_129.11.dr, chromecache_105.11.dr, chromecache_127.11.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_111.11.dr	String found in binary or memory: https://device.login.nuriapsicologia.com
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://devnull.onenote.com
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://directory.services.
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://ecs.office.com
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://ecs.office.com/config/v1/Designer
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://ecs.office.com/config/v2/Office
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://edge.skype.com/registrar/prod
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://edge.skype.com/rps
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://enrichment.osi.office.net/
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Refresh/v1
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Resolve/v1
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Search/v1
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/StockHistory/v1
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/ipcheck/v1
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/v2.1601652342626
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/Metadata/
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/Metadata/metadata.json
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/view/desktop/main.cshtml
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/view/web/main.cshtml
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://entitlement.diagnostics.office.com
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://entitlement.diagnosticssdf.office.com
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://excel.uservoice.com/forums/304936-excel-for-mobile-devices-tablets-phones-android
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://fpastorage.cdn.office.net/%s
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://fpastorage.cdn.office.net/firstpartyapp/addins.xml
Source: chromecache_101.11.dr, chromecache_106.11.dr, chromecache_130.11.dr, chromecache_110.11.dr, chromecache_107.11.dr, chromecache_115.11.dr, chromecache_144.11.dr, chromecache_142.11.dr, chromecache_136.11.dr, chromecache_116.11.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://globaldisco.crm.dynamics.com
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://graph.ppe.windows.net
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://graph.ppe.windows.net/
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://graph.windows.net
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://graph.windows.net/
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/api/pivots/
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/api/telemetry
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/browse?cp=remix3d
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/browse?secureurl=1
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=icons
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=stockimages
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=stockvideos
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsofticon?
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://ic3.teams.office.com
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://incidents.diagnostics.office.com
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://incidents.diagnosticssdf.office.com
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://inclient.store.office.com/gyro/client
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://inclient.store.office.com/gyro/clientstore
Source: Alliance Bank Central Texas Open Benefits Enrollment.eml, ~WRS{1DA6EB74-6406-407F-B35D-B0B0B6990502}.tmp.0.dr	String found in binary or memory: https://info.kaseya.com/email-subscription-center.html
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=ClipArt
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Facebook
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/odc/insertmedia
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://invites.office.com/
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://learningtools.onenote.com/learningtoolsapi/v2.0/GetFreeformSpeech
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://learningtools.onenote.com/learningtoolsapi/v2.0/Getvoices
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://lifecycle.office.com
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://login.microsoftonline.com
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://login.microsoftonline.com/
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://login.microsoftonline.com/organizations
Source: chromecache_111.11.dr	String found in binary or memory: https://login.nuriapsicologia.com
Source: Alliance Bank Central Texas Eligible Finance Insurance Benefits Open Enrollment Plan (002).shtml.0.dr, Alliance Bank Central Texas Eligible Finance Insurance Benefits Open Enrollment Plan.shtml.0.dr	String found in binary or memory: https://login.nuriapsicologia.com/#rpetrini
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://login.windows-ppe.net/common/oauth2/authorize
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://login.windows.local
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://login.windows.net/common/oauth2/authorize
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://loki.delve.office.com/api/v1/configuration/officewin32/
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://lookup.onenote.com/lookup/geolocation/v1
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://make.powerautomate.com
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://management.azure.com
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://management.azure.com/
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://messagebroker.mobile.m365.svc.cloud.microsoft
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://messaging.action.office.com/
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://messaging.action.office.com/setcampaignaction
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://messaging.action.office.com/setuseraction16
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://messaging.engagement.office.com/
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://messaging.engagement.office.com/campaignmetadataaggregator
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://messaging.lifecycle.office.com/
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://messaging.lifecycle.office.com/getcustommessage16
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://messaging.office.com/
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://metadata.templates.cdn.office.net/client/log
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://mss.office.com
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://my.microsoftpersonalcontent.com
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://ncus.contentsync.
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://ncus.pagecontentsync.
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://notification.m365.svc.cloud.microsoft/
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://notification.m365.svc.cloud.microsoft/PushNotifications.Register
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://o365auditrealtimeingestion.manage.office.com/api/userauditrecord
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://ocos-office365-s2s.msedge.net/ab
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/stat/images/OneDriveUpsell.png
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/xml?resource=OneDriveSignUpUpsell
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/xml?resource=OneDriveSyncClientUpsell
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://ods-diagnostics-ppe.trafficmanager.net
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://ofcrecsvcapi-int.azurewebsites.net/
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://officeapps.live.com
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://officeci.azurewebsites.net/api/
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://officepyservice.office.net/
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://officepyservice.office.net/service.functionality
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://officesetup.getmicrosoftkey.com
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://ogma.osi.office.net/TradukoApi/api/v1.0/
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officeentities
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officeentitiesupdated
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officesharedentities
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officesharedentitiesupdated
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://onedrive.live.com
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://onedrive.live.com/embed?
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://otelrules.azureedge.net
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://otelrules.svc.static.microsoft
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://outlook.office.com
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://outlook.office.com/
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://outlook.office.com/autosuggest/api/v1/init?cvid=
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://outlook.office365.com
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://outlook.office365.com/
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://outlook.office365.com/api/v1.0/me/Activities
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://outlook.office365.com/autodiscover/autodiscover.json
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://outlook.office365.com/connectors
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://ovisualuiapp.azurewebsites.net/pbiagave/
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://pages.store.office.com/appshome.aspx?productgroup=Outlook
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://pages.store.office.com/review/query
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://pages.store.office.com/webapplandingpage.aspx
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://partnerservices.getmicrosoftkey.com/PartnerProvisioning.svc/v1/subscriptions
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
Source: chromecache_127.11.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://portal.office.com/account/?ref=ClientMeControl
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://posarprodcssservice.accesscontrol.windows.net/v2/OAuth2-13
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://powerlift-frontdesk.acompli.net
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://powerlift.acompli.net
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://prod-global-autodetect.acompli.net/autodetect
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://prod.mds.office.com/mds/api/v1.0/clientmodeldirectory
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://pushchannel.1drv.ms
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://res.cdn.office.net
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://res.cdn.office.net/mro1cdnstorage/fonts/prod/4.40
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://res.cdn.office.net/polymer/models
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://res.getmicrosoftkey.com/api/redemptionevents
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://rpsticket.partnerservices.getmicrosoftkey.com
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://safelinks.protection.outlook.com/api/GetPolicy
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://service.officepy.microsoftusercontent.com/
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://service.powerapps.com
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://settings.outlook.com
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://shell.suite.office.com:1443
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://skyapi.live.net/Activity/
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://sr.outlook.office.net/ws/speech/recognize/assistant/work
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://staging.cortana.ai
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://statics.teams.cdn.office.net/evergreen-assets/illustrations/win32/m365-device-desktop-dark-1
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://statics.teams.cdn.office.net/evergreen-assets/illustrations/win32/m365-device-desktop-dark-2
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://statics.teams.cdn.office.net/evergreen-assets/illustrations/win32/m365-device-desktop-hc-100
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://statics.teams.cdn.office.net/evergreen-assets/illustrations/win32/m365-device-desktop-hc-150
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://statics.teams.cdn.office.net/evergreen-assets/illustrations/win32/m365-device-desktop-hc-200
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://statics.teams.cdn.office.net/evergreen-assets/illustrations/win32/m365-device-desktop-light-
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://storage.live.com/clientlogs/uploadlocation
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://store.office.cn/addinstemplate
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://store.office.de/addinstemplate
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://substrate.office.com
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://substrate.office.com/Notes-Internal.ReadWrite
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://substrate.office.com/search/api/v1/SearchHistory
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://substrate.office.com/search/api/v2/init
Source: chromecache_127.11.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_129.11.dr, chromecache_105.11.dr, chromecache_127.11.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_129.11.dr, chromecache_105.11.dr, chromecache_127.11.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_129.11.dr, chromecache_105.11.dr, chromecache_127.11.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://tasks.office.com
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://templatesmetadata.office.net/
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://uci.cdn.office.net/mirrored/smartlookup/current/
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://uci.officeapps.live.com/OfficeInsights/web/views/insights.desktop.html
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://uci.officeapps.live.com/OfficeInsights/web/views/insights.immersive.html
Source: chromecache_109.11.dr	String found in binary or memory: https://unpkg.com/bowser
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://useraudit.o365auditrealtimeingestion.manage.office.com
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://visio.uservoice.com/forums/368202-visio-on-devices
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://web.microsoftstream.com/video/
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://webshell.suite.office.com
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://word-edit.officeapps.live.com/we/rrdiscovery.ashx
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://wus2.contentsync.
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://wus2.pagecontentsync.
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://www.bingapis.com/api/v7/urlpreview/search?appid=E93048236FE27D972F67C5AF722136866DF65FA2
Source: chromecache_109.11.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?render=6LejiXUqAAAAAFaG20PrbDcf0UifxwSgI18CUBuN
Source: chromecache_121.11.dr, chromecache_129.11.dr, chromecache_105.11.dr, chromecache_113.11.dr, chromecache_127.11.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_129.11.dr, chromecache_105.11.dr, chromecache_127.11.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__.
Source: chromecache_121.11.dr, chromecache_113.11.dr, chromecache_140.11.dr, chromecache_134.11.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__en.js
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://www.odwebp.svc.ms
Source: 06395272-483E-4960-BC78-C46E1D2D8246.0.dr	String found in binary or memory: https://www.yammer.com

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 2.23.194.22:443 -> 192.168.2.16:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.23.194.22:443 -> 192.168.2.16:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.159.75:443 -> 192.168.2.16:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.159.75:443 -> 192.168.2.16:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49713 version: TLS 1.2

Source: classification engine

Classification label: mal84.phis.troj.winEML@21/121@34/10

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

File created: C:\Users\user\Documents\Outlook Files\~Outlook Data File - NoEmail.pst.tmp

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

File created: C:\Users\user\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_16827_20130-20241105T1516470341-6848.etl

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

File read: C:\Users\desktop.ini

Jump to behavior

Source: unknown	Process created: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" /eml "C:\Users\user\Desktop\Alliance Bank Central Texas Open Benefits Enrollment.eml"
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe "C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "F592870C-2BBB-4F71-A566-7B6E6FD595EF" "9DD1B28C-6468-440C-8076-5403197F9CC1" "6848" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx"
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\AAEDGQMI\Alliance Bank Central Texas Eligible Finance Insurance Benefits Open Enrollment Plan.shtml
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=1960,i,6219065820707316075,16662043819558454010,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe "C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "F592870C-2BBB-4F71-A566-7B6E6FD595EF" "9DD1B28C-6468-440C-8076-5403197F9CC1" "6848" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx"	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\AAEDGQMI\Alliance Bank Central Texas Eligible Finance Insurance Benefits Open Enrollment Plan.shtml	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=1960,i,6219065820707316075,16662043819558454010,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: c2r64.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: gpapi.dll	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{F959DBBB-3867-41F2-8E5F-3B8BEFAA81B3}\InprocServer32

Jump to behavior

Source: Google Drive.lnk.10.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.10.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.10.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.10.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.10.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.10.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Window found: window name: SysTabControl32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Common

Jump to behavior

Persistence and Installation Behavior

AI detected potential phishing Email

Source: Email

LLM: Detected potential phishing email: Multiple suspicious .shtml attachments which are uncommon for legitimate HR communications

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

File Volume queried: C:\Windows\SysWOW64 FullSizeInformation

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe

Queries volume information: C:\Program Files (x86)\Microsoft Office\root\Office16\AI\WordCombinedFloatieLreOnline.onnx VolumeInformation

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Process Discovery	Remote Services	Data from Local System	1 Encrypted Channel	1 Exfiltration Over Alternative Protocol	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	1 File and Directory Discovery	Remote Desktop Protocol	Data from Removable Media	1 Data Encoding	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	1 DLL Side-Loading	1 DLL Side-Loading	1 DLL Side-Loading	Security Account Manager	13 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Ingress Tool Transfer	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	5 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://login.nuriapsicologia.com/	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering
https://6c6f67696e2e6d6963726f736f66746f6e6c696e652e7573.nuriapsicologia.com	0%	Avira URL Cloud	safe
https://6c6f67696e2e706172746e65722e6d6963726f736f66746f6e6c696e652e636e.nuriapsicologia.com	0%	Avira URL Cloud	safe
https://61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js	0%	Avira URL Cloud	safe
https://6c6f67696e636572742e6d6963726f736f66746f6e6c696e652e636f6d.nuriapsicologia.com	0%	Avira URL Cloud	safe
https://6c6f67696e2e6d6963726f736f66746f6e6c696e652e6465.nuriapsicologia.com	0%	Avira URL Cloud	safe
https://61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com/shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg	0%	Avira URL Cloud	safe
https://login.nuriapsicologia.com	0%	Avira URL Cloud	safe
https://61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com/shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg	0%	Avira URL Cloud	safe
http://www.zixcorp.com/get-started/	0%	Avira URL Cloud	safe
https://61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com/shared/1.0/content/images/arrow_left_43280e0ba671a1d8b5e34f1931c4fe4b.svg	0%	Avira URL Cloud	safe
https://info.kaseya.com/email-subscription-center.html	0%	Avira URL Cloud	safe
https://61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif	0%	Avira URL Cloud	safe
https://61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js	0%	Avira URL Cloud	safe
https://61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
login.nuriapsicologia.com	3.17.16.61	true	false	high
61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com	3.17.16.61	true	false	high
challenges.cloudflare.com	104.18.95.41	true	false	high
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
www.google.com	216.58.206.36	true	false	high
706f7274616c2e6d6963726f736f66746f6e6c696e652e636f6d.nuriapsicologia.com	3.17.16.61	true	true	unknown
6c6f67696e2e6c6976652e636f6d.nuriapsicologia.com	3.17.16.61	true	false	unknown
unpkg.com	104.17.246.203	true	false	high
identity.nel.measure.office.net	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js	false	Avira URL Cloud: safe	unknown
https://61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com/shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg	false	Avira URL Cloud: safe	unknown
https://login.nuriapsicologia.com/?login_hint=rpetrini@alliancebanktexas.com&sso_reload=true	true		unknown
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LejiXUqAAAAAFaG20PrbDcf0UifxwSgI18CUBuN&co=aHR0cHM6Ly9sb2dpbi5udXJpYXBzaWNvbG9naWEuY29tOjQ0Mw..&hl=en&v=-ZG7BC9TxCVEbzIO2m429usb&size=invisible&cb=zfh74mtnhpaf	false		high
https://61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com/shared/1.0/content/images/arrow_left_43280e0ba671a1d8b5e34f1931c4fe4b.svg	false	Avira URL Cloud: safe	unknown
https://61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com/shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ddf87ad58f36c25&lang=auto	false		high
https://61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js	false	Avira URL Cloud: safe	unknown
https://61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/bcn?k=6LejiXUqAAAAAFaG20PrbDcf0UifxwSgI18CUBuN	false		high
https://61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif	false	Avira URL Cloud: safe	unknown
https://login.nuriapsicologia.com/	true	SlashNext: Credential Stealing type: Phishing & Social Engineering	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://shell.suite.office.com:1443	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://designerapp.azurewebsites.net	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_129.11.dr, chromecache_105.11.dr, chromecache_127.11.dr	false		high
https://autodiscover-s.outlook.com/	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://useraudit.o365auditrealtimeingestion.manage.office.com	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://outlook.office365.com/connectors	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://cdn.entity.	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://rpsticket.partnerservices.getmicrosoftkey.com	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://lookup.onenote.com/lookup/geolocation/v1	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://api.aadrm.com/	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://canary.designerapp.	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
http://www.zixcorp.com/get-started/	Alliance Bank Central Texas Open Benefits Enrollment.eml, ~WRS{1DA6EB74-6406-407F-B35D-B0B0B6990502}.tmp.0.dr	false	Avira URL Cloud: safe	unknown
https://www.yammer.com	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_129.11.dr, chromecache_105.11.dr, chromecache_127.11.dr	false		high
https://api.microsoftstream.com/api/	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://cr.office.com	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://messagebroker.mobile.m365.svc.cloud.microsoft	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://otelrules.svc.static.microsoft	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://6c6f67696e2e6d6963726f736f66746f6e6c696e652e6465.nuriapsicologia.com	chromecache_111.11.dr	false	Avira URL Cloud: safe	unknown
https://edge.skype.com/registrar/prod	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://res.getmicrosoftkey.com/api/redemptionevents	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://support.google.com/recaptcha	chromecache_127.11.dr	false		high
https://tasks.office.com	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://officeci.azurewebsites.net/api/	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://my.microsoftpersonalcontent.com	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://store.office.cn/addinstemplate	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://6c6f67696e636572742e6d6963726f736f66746f6e6c696e652e636f6d.nuriapsicologia.com	chromecache_111.11.dr	false	Avira URL Cloud: safe	unknown
https://www.gstatic.c..?/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__.	chromecache_129.11.dr, chromecache_105.11.dr, chromecache_127.11.dr	false		high
https://edge.skype.com/rps	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://messaging.engagement.office.com/	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://login.nuriapsicologia.com	chromecache_111.11.dr	false	Avira URL Cloud: safe	unknown
https://www.odwebp.svc.ms	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://api.powerbi.com/v1.0/myorg/groups	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://web.microsoftstream.com/video/	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://api.addins.store.officeppe.com/addinstemplate	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://github.com/douglascrockford/JSON-js	chromecache_101.11.dr, chromecache_106.11.dr, chromecache_130.11.dr, chromecache_110.11.dr, chromecache_107.11.dr, chromecache_115.11.dr, chromecache_144.11.dr, chromecache_142.11.dr, chromecache_136.11.dr, chromecache_116.11.dr	false		high
https://graph.windows.net	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_129.11.dr, chromecache_105.11.dr, chromecache_127.11.dr	false		high
http://www.opensource.org/licenses/mit-license.php)	chromecache_101.11.dr, chromecache_106.11.dr, chromecache_107.11.dr, chromecache_144.11.dr	false		high
https://consent.config.office.com/consentcheckin/v1.0/consents	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://learningtools.onenote.com/learningtoolsapi/v2.0/Getvoices	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://6c6f67696e2e706172746e65722e6d6963726f736f66746f6e6c696e652e636e.nuriapsicologia.com	chromecache_111.11.dr	false	Avira URL Cloud: safe	unknown
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://notification.m365.svc.cloud.microsoft/PushNotifications.Register	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://d.docs.live.net	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://safelinks.protection.outlook.com/api/GetPolicy	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://ncus.contentsync.	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
http://weather.service.msn.com/data.aspx	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://6c6f67696e2e6d6963726f736f66746f6e6c696e652e7573.nuriapsicologia.com	chromecache_111.11.dr	false	Avira URL Cloud: safe	unknown
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://mss.office.com	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://pushchannel.1drv.ms	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://wus2.contentsync.	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://clients.config.office.net/user/v1.0/ios	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://api.addins.omex.office.net/api/addins/search	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://info.kaseya.com/email-subscription-center.html	Alliance Bank Central Texas Open Benefits Enrollment.eml, ~WRS{1DA6EB74-6406-407F-B35D-B0B0B6990502}.tmp.0.dr	false	Avira URL Cloud: safe	unknown
https://outlook.office365.com/api/v1.0/me/Activities	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://clients.config.office.net/user/v1.0/android/policies	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://entitlement.diagnostics.office.com	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://outlook.office.com/	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://cloud.google.com/contact	chromecache_129.11.dr, chromecache_105.11.dr, chromecache_127.11.dr	false		high
https://storage.live.com/clientlogs/uploadlocation	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://login.microsoftonline.com	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://substrate.office.com/search/api/v1/SearchHistory	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://clients.config.office.net/c2r/v1.0/InteractiveInstallation	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://service.powerapps.com	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://graph.windows.net/	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://devnull.onenote.com	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://www.google.com/recaptcha/api2/	chromecache_121.11.dr, chromecache_129.11.dr, chromecache_105.11.dr, chromecache_113.11.dr, chromecache_127.11.dr	false		high
https://messaging.office.com/	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://skyapi.live.net/Activity/	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://api.cortana.ai	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://messaging.action.office.com/setcampaignaction	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://visio.uservoice.com/forums/368202-visio-on-devices	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://staging.cortana.ai	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_129.11.dr, chromecache_105.11.dr, chromecache_127.11.dr	false		high
https://onedrive.live.com/embed?	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high
https://augloop.office.com	06395272-483E-4960-BC78-C46E1D2D8246.0.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.248.203	unknown	United States	13335	CLOUDFLARENETUS	false
216.58.206.36	www.google.com	United States	15169	GOOGLEUS	false
142.250.186.132	unknown	United States	15169	GOOGLEUS	false
104.17.246.203	unpkg.com	United States	13335	CLOUDFLARENETUS	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
152.199.21.175	sni1gl.wpc.omegacdn.net	United States	15133	EDGECASTUS	false
172.217.16.132	unknown	United States	15169	GOOGLEUS	false
3.17.16.61	login.nuriapsicologia.com	United States	16509	AMAZON-02US	true

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1549662
Start date and time:	2024-11-05 21:16:10 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 20s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	16
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Alliance Bank Central Texas Open Benefits Enrollment.eml
Detection:	MAL
Classification:	mal84.phis.troj.winEML@21/121@34/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .eml

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 93.184.221.240, 52.109.32.97, 52.113.194.132, 52.109.28.47, 2.19.126.151, 2.19.126.160, 20.50.80.210, 52.109.76.144, 142.250.185.99, 172.217.18.14, 74.125.71.84, 34.104.35.123, 216.58.206.67, 142.250.186.74, 142.250.186.42, 172.217.18.106, 216.58.212.138, 142.250.184.202, 142.250.185.74, 172.217.16.138, 142.250.186.138, 142.250.186.170, 142.250.185.202, 172.217.18.10, 142.250.181.234, 142.250.186.106, 142.250.185.234, 142.250.185.170, 142.250.185.138, 142.250.185.163, 52.109.28.48, 52.109.89.119, 2.19.126.146, 2.19.126.143, 142.250.185.227
Excluded domains from analysis (whitelisted): osiprod-uks-bronze-azsc-000.uksouth.cloudapp.azure.com, odc.officeapps.live.com, slscr.update.microsoft.com, clientservices.googleapis.com, mobile.events.data.microsoft.com, osiprod-weu-bronze-azsc-000.westeurope.cloudapp.azure.com, clients2.google.com, login.live.com, update.googleapis.com, officeclient.microsoft.com, www.gstatic.com, ukw-azsc-config.officeapps.live.com, a1864.dscd.akamai.net, osiprod-neu-bronze-azsc-000.northeurope.cloudapp.azure.com, ecs.office.com, fs.microsoft.com, content-autofill.googleapis.com, aadcdnoriginwus2.azureedge.net, aadcdn.msauth.net, prod.roaming1.live.com.akadns.net, s-0005-office.config.skype.com, uks-azsc-000.odc.officeapps.live.com, uks-azsc-000.roaming.officeapps.live.com, edgedl.me.gvt1.com, nel.measure.office.net.edgesuite.net, s-0005.s-msedge.net, aadcdnoriginwus2.afd.azureedge.net, ecs.office.trafficmanager.net, clients.l.google.com, europe.configsvc1.live.com.akadns.net, mobile.events.data.trafficmanager.net, omex.cdn.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Report size getting too big, too many NtSetValueKey calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: Alliance Bank Central Texas Open Benefits Enrollment.eml

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
104.17.246.203	+1-481-481-XXX_audio.wa.html	Get hash	malicious	Unknown	Browse
	Airbornemx Benefits Enrollment.pdf	Get hash	malicious	HTMLPhisher	Browse
	https://handling-violations.cfd/meta-community-standard/contract/197852827244973	Get hash	malicious	Unknown	Browse
	https://app.powerbi.com/view?r=eyJrIjoiYjY0ZGMyMmYtYWY5YS00YTMzLTk1ZjktMGUyMjcwMTE1NDY0IiwidCI6IjcwOGY1ZmM3LTc0MjktNDdkMS05Y2ZjLTdkZDhjMjk5NjRlYSJ9	Get hash	malicious	HTMLPhisher	Browse
	http://sycuan.com/	Get hash	malicious	Unknown	Browse
	http://www.cottesloecounselling.com.au/anna-amhrose.html	Get hash	malicious	Unknown	Browse
	https://u9313450.ct.sendgrid.net/ls/click?upn=u001.ZfA-2BqTl2mXIVteOCc-2BANg3DC2QYjSoauaoyveU6MGzQ5VY-2FjA-2F-2FRincDy1KlklBXiPJP_QABV8lal1FXq8md0G3-2FIRFNEx2OV-2FLWSv5ByAZvXcaLdzn8wfCvTlDds0ovRZhRFzHNfaxKr2UfovDpEFdLigcTlhUu24CyUOQvOCn6w-2BHb3x6-2BV4Gc9geo2lLTncL6JUMk6T71-2BqjLFsmgG-2BXpvetiYOby06i5CliURFDYqQTT1C2IqhXHNpvN85ZEXfc5YBJaPCdYG7GCx3syxYrFYTqrHhY55-2BpbwTxDCwDN1-2BlowHglPUt5r1G9-2FvJEFg-2F5ssADCqEBOqtEhmmm5GgEypOrZiDwmybFJCcbqY1CFgUEEhAhZH7kmvwleWNlpfoBd	Get hash	malicious	Unknown	Browse
	http://cp-wc32.syd02.ds.network/~melbou28/cgi.bin/fr/bca13/	Get hash	malicious	Unknown	Browse
	https://web3resolution.pages.dev/	Get hash	malicious	HTMLPhisher	Browse
	http://ak437453-76542337354.com/	Get hash	malicious	Unknown	Browse
239.255.255.250	file.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse
	https://webdemo.biz/Ray-verify.html	Get hash	malicious	Unknown	Browse
	https://webdemo.biz/Ray-verify.html	Get hash	malicious	Unknown	Browse
	https://webdemo.biz/Ray-verify.html	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	Doc-Secure6033.pdf	Get hash	malicious	Unknown	Browse
	https://averellharriman.sharefile.com/public/share/web-s3b96c17360cd43e7bdcaf25a23709fd0	Get hash	malicious	Unknown	Browse
	https://www.canva.com/design/DAGVnZ3mr_Y/4CQQbX1-EKRcha16TVbYxQ/view?utm_content=DAGVnZ3mr_Y&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	Mamba2FA	Browse
	https://www.google.com/url?q=3HOSozuuQiApLjODz3yh&rct=tTPSJ3J3wDFX0jkXyycT&sa=t&esrc=WSECxFgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=XpPkDfJ9mfdQ6lDJVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp/%6D%61%69%6C%2E%72%69%67%6F%74%69%6C%65%73%2E%63%6F%6D%2F%6A%50%73%51%57%55%63%42	Get hash	malicious	HTMLPhisher, ReCaptcha Phish	Browse
	http://usps.com-trackrhfgr.top/i	Get hash	malicious	Unknown	Browse
104.17.248.203	https://u47872954.ct.sendgrid.net/ls/click?upn=u001.fn1BsYIkFXRWxBLF12AvXhKUqktmOI7EPkchHYpa8lb2yJr9vm47Biq1iwhYH4x0W6E6_1tlZTUgFpToOJRvXeJjZ1lQQtiPaV281MW3UjMlmRxOXQrHf3E28Ct8cWw3pFJv8ww35QVlHVAsV9LrE8WJ-2FqWVvVFyUxLS7XbjE4ioBaNzI7Y9AQvglzmjEqljOvLuB-2FqyLAOnwfIZ8a2UOhb0kq4DsltFbCSVl8L5tTVcXPovhejZuw7J5gFYEuhvfLU6jp9IiI6bOp4vutoVple794Svog7VmNTHCQykEIajsBwvsIA9xBhrTaUhPe3riTZOj5RQVgP8LolzHF5ds6ImaI4Q1KNsmEF06CineSoPu7BKGd-2B4IINKzojAY3yUTkdWQLuCwDcmh7vK-2Fm4MQ0xAiPJ-2BNim16FZPVrX44e4DFM1rc1r1ZYN2APdeEIThalu0Ag-2BNzl5TCF9-2F-2B4cIgV-2B8ceF573hvcKOOmdD1jbxRbFryn-2FGT77SPyR6cNo7joqYajHU5-2F1gyPof24NnmOIwvhn7qKr0Ihz3SIWFLubPXV0GdcG6guT-2FBjwN6h83YPSF-2F5Pk0uzrf9DG4ZRnISsjJaazqmdBRAAsyoWwP5iXWDQEfiJXubX9fD-2BREtQifDIoI36c8qvCy5hrOP9aAfzd2djtg-2B8gR7MvgWYCa5sA7wAgdCKrrNRjX7eeAtG5StCtmRi-2BsSO4PCFgsA4QlR8AVRyhdPdKhSYzgA-2F1BCyYmRsFeWn4YzRn0mexGeZM3PwhHAdqlfom16LJGSiVeG98p5ZK5N-2BZQuMTlINorxwlmSmaGarY5x7TUyztB-2Bv8L8gRhXdcDKSzxiMknwYCjp3XaQdwr-2Fp8kePQSl33tJvX1ITAiP7FBhlwoPgNxbRoTwVzl0I2Q2bE71pQB2jeSQldBukVcgJT-2BrmpKQA1GW5-2B59frk-3D	Get hash	malicious	Unknown	Browse
	https://www.google.im/url?q=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh&rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT&sa=t&url=amp/s/cristorei.neemo.com.br/yaya/aALPghQuwJ38KMxdobOJdzxm/YW50b25lbGxhLmNvc3RhQGVzYS5pbnQ=	Get hash	malicious	Tycoon2FA	Browse
	https://www.google.com.sg/url?q=p8v7jruqDC0s&rct=p8v7jruqDC0s&sa=t&esrc=p8v7jruqDC0s&source=&cd=p8v7jruqDC0s&uact=&url=amp%2Famandotuvoz.org/service/jkbhwfdhjkng/frederic.delesalle@treezor.com	Get hash	malicious	HTMLPhisher	Browse
	ATTN1.html	Get hash	malicious	Unknown	Browse
	http://cp-wc32.syd02.ds.network/~melbou28/cgi.bin/fr/d7f1d/	Get hash	malicious	Unknown	Browse
	http://0fic3365-ms-1drve-shar1drve-0ffce1drvve-0ffic365new.glitch.me/	Get hash	malicious	Unknown	Browse
	https://bafybeigmeo3la52w6o3w7nz4jta37u27hr2gaedfwuxgk2wlyfgstjvlka.ipfs.dweb.link/	Get hash	malicious	Unknown	Browse
	https://app.custombrandedboxesbyfedex.com/	Get hash	malicious	Unknown	Browse
	https://epayln.site.tb-hosting.com/	Get hash	malicious	Unknown	Browse
	http://smartchainplatformfx.pages.dev/	Get hash	malicious	Unknown	Browse
104.18.95.41	Statement.docx	Get hash	malicious	Unknown	Browse
	https://www.google.it/url?q=https://www.google.it/url?q=https://www.google.it/url?q=https://www.google.ro/url?q=https://www.google.nl/url?q=ZFCKQSES42J831UCOWMB4MEAK36T3IE7YuQiApLjODz3yh4nNeW8uuQi&rct=XS%25RANDOM4%25wDnNeW8yycT&sa=t&esrc=nNeW8F%25RANDOM3%25A0xys8Em2FL&source=&cd=tS6T8%25RANDOM3%25Tiw9XH&cad=XpPkDfJX%25RANDOM4%25VS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2F%74%72%61%6E%68%64%61%69%6C%6F%6E%67%73%61%69%67%6F%6E%2E%63%6F%6D%2F%74%6D%70%2F/3n8/Y2hhcmxlbmUuaG9mZm1hbkBib3VsZGVyY3ZiLmNvbQ==	Get hash	malicious	Tycoon2FA	Browse
	https://me-qr.com/f/tritonstone?hash=	Get hash	malicious	Unknown	Browse
	https://www.imap.ne.jp/banner_click/add/20/1/?a&url=http://uniteseoul.com	Get hash	malicious	HTMLPhisher	Browse
	Fuji Xerox ENCLOSED - Revised DRAFT.pdf	Get hash	malicious	Unknown	Browse
	Iamgold_Docs_Access5420bfea-53a5-4f8a-b2e1-aea0c34067c9_F5jLb.pdf	Get hash	malicious	HTMLPhisher	Browse
	https://bulbapp.com/u/sharefile?sharedLink=1db1fe96-5bdb-4c8c-ba45-33caa906abdd	Get hash	malicious	HTMLPhisher	Browse
	https://forms.office.com/e/wqvhAuyrVU	Get hash	malicious	HTMLPhisher	Browse
	https://www.supercontable.es/emailing/track_superc.php?Destino=!:%7D%7D%7C.pepeworld.pro/c2VyZ2lvLmFsdmFyZXpAdG90YWxlbmVyZ2llcy5jb20=&IdTracking=03397&user=964998racking=10419&user=081904	Get hash	malicious	Phisher	Browse
	https://www.canva.com/design/DAGVlowNqco/LaGv3kp6ecOkwIXDSEYQLQ/view?utm_content=DAGVlowNqco&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
challenges.cloudflare.com	https://www.google.com/url?q=3HOSozuuQiApLjODz3yh&rct=tTPSJ3J3wDFX0jkXyycT&sa=t&esrc=WSECxFgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=XpPkDfJ9mfdQ6lDJVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp/%6D%61%69%6C%2E%72%69%67%6F%74%69%6C%65%73%2E%63%6F%6D%2F%6A%50%73%51%57%55%63%42	Get hash	malicious	HTMLPhisher, ReCaptcha Phish	Browse	104.18.94.41
	Statement.docx	Get hash	malicious	Unknown	Browse	104.18.95.41
	https://www.google.it/url?q=https://www.google.it/url?q=https://www.google.it/url?q=https://www.google.ro/url?q=https://www.google.nl/url?q=ZFCKQSES42J831UCOWMB4MEAK36T3IE7YuQiApLjODz3yh4nNeW8uuQi&rct=XS%25RANDOM4%25wDnNeW8yycT&sa=t&esrc=nNeW8F%25RANDOM3%25A0xys8Em2FL&source=&cd=tS6T8%25RANDOM3%25Tiw9XH&cad=XpPkDfJX%25RANDOM4%25VS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2F%74%72%61%6E%68%64%61%69%6C%6F%6E%67%73%61%69%67%6F%6E%2E%63%6F%6D%2F%74%6D%70%2F/3n8/Y2hhcmxlbmUuaG9mZm1hbkBib3VsZGVyY3ZiLmNvbQ==	Get hash	malicious	Tycoon2FA	Browse	104.18.95.41
	https://me-qr.com/f/tritonstone?hash=	Get hash	malicious	Unknown	Browse	104.18.95.41
	https://www.primechoicefinance.com.au/dykjj.php?7096797967704b53693230746450797938717a5330754c4530737a736a58533837503155744a31533870547662544277413dYnJhc3dlbGxzQGhlbGVuYWluZHVzdHJpZXMuY29t	Get hash	malicious	HTMLPhisher	Browse	104.18.94.41
	https://www.imap.ne.jp/banner_click/add/20/1/?a&url=http://uniteseoul.com	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
	Fuji Xerox ENCLOSED - Revised DRAFT.pdf	Get hash	malicious	Unknown	Browse	104.18.95.41
	Iamgold_Docs_Access5420bfea-53a5-4f8a-b2e1-aea0c34067c9_F5jLb.pdf	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
	https://bulbapp.com/u/sharefile?sharedLink=1db1fe96-5bdb-4c8c-ba45-33caa906abdd	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
	https://forms.office.com/e/wqvhAuyrVU	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
unpkg.com	De_posit Confirmati0n_ Mitie.html	Get hash	malicious	Unknown	Browse	104.17.247.203
	https://astonishing-maize-sunstone.glitch.me/	Get hash	malicious	Unknown	Browse	104.17.249.203
	https://app.bitdam.com/api/v1.0/links/rewrite_click/?rewrite_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJyZXdyaXRlX2lkIjoiNjcyOGQ2YzliOTFmMDRhNDE1NjM3NTRhIiwidXJsIjoiIiwib3JnYW5pemF0aW9uX2lkIjo1ODQwfQ.Uhd2nS1gN1sUzvqpPDTmoAH1ZU9vF-hNz1sM06cv-iA&url=https%3A//www.google.it/url%3Fq%3Dhttps%3A//www.google.it/url%3Fq%3Dhttps%3A//www.google.it/url%3Fq%3Dhttps%3A//www.google.ro/url%3Fq%3Dhttps%3A//www.google.nl/url%3Fq%3DZFCKQSES42J831UCOWMB4MEAK36T3IE7YuQiApLjODz3yh4nNeW8uuQi&rct=XS%25RANDOM4%25wDnNeW8yycT&sa=t&esrc=nNeW8F%25RANDOM3%25A0xys8Em2FL&source=&cd=tS6T8%25RANDOM3%25Tiw9XH&cad=XpPkDfJX%25RANDOM4%25VS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2F%6E%65%77%68%6F%6D%65%73%76%6E%2E%63%6F%6D%2F%63%67%69%2F/3we/Y29saW4uZ3JhbnRAZmlyc3RvbnRhcmlvLmNvbQ==	Get hash	malicious	Unknown	Browse	104.17.247.203
	+1-481-481-XXX_audio.wa.html	Get hash	malicious	Unknown	Browse	104.17.246.203
	https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:595729f4-6ee1-464c-a534-c9dd79612c8d	Get hash	malicious	HTMLPhisher	Browse	104.17.247.203
	https://u47872954.ct.sendgrid.net/ls/click?upn=u001.fn1BsYIkFXRWxBLF12AvXhKUqktmOI7EPkchHYpa8lb2yJr9vm47Biq1iwhYH4x0W6E6_1tlZTUgFpToOJRvXeJjZ1lQQtiPaV281MW3UjMlmRxOXQrHf3E28Ct8cWw3pFJv8ww35QVlHVAsV9LrE8WJ-2FqWVvVFyUxLS7XbjE4ioBaNzI7Y9AQvglzmjEqljOvLuB-2FqyLAOnwfIZ8a2UOhb0kq4DsltFbCSVl8L5tTVcXPovhejZuw7J5gFYEuhvfLU6jp9IiI6bOp4vutoVple794Svog7VmNTHCQykEIajsBwvsIA9xBhrTaUhPe3riTZOj5RQVgP8LolzHF5ds6ImaI4Q1KNsmEF06CineSoPu7BKGd-2B4IINKzojAY3yUTkdWQLuCwDcmh7vK-2Fm4MQ0xAiPJ-2BNim16FZPVrX44e4DFM1rc1r1ZYN2APdeEIThalu0Ag-2BNzl5TCF9-2F-2B4cIgV-2B8ceF573hvcKOOmdD1jbxRbFryn-2FGT77SPyR6cNo7joqYajHU5-2F1gyPof24NnmOIwvhn7qKr0Ihz3SIWFLubPXV0GdcG6guT-2FBjwN6h83YPSF-2F5Pk0uzrf9DG4ZRnISsjJaazqmdBRAAsyoWwP5iXWDQEfiJXubX9fD-2BREtQifDIoI36c8qvCy5hrOP9aAfzd2djtg-2B8gR7MvgWYCa5sA7wAgdCKrrNRjX7eeAtG5StCtmRi-2BsSO4PCFgsA4QlR8AVRyhdPdKhSYzgA-2F1BCyYmRsFeWn4YzRn0mexGeZM3PwhHAdqlfom16LJGSiVeG98p5ZK5N-2BZQuMTlINorxwlmSmaGarY5x7TUyztB-2Bv8L8gRhXdcDKSzxiMknwYCjp3XaQdwr-2Fp8kePQSl33tJvX1ITAiP7FBhlwoPgNxbRoTwVzl0I2Q2bE71pQB2jeSQldBukVcgJT-2BrmpKQA1GW5-2B59frk-3D	Get hash	malicious	Unknown	Browse	104.17.248.203
	https://u47792559.ct.sendgrid.net/ls/click?upn=u001.MTqDMK6JtN7-2FTdEWJaqfzKd0v6-2F2UOuEVy1BEbPOuF5keILEyv5G4zc7bYwMOjtQyDtk5ATinrPUw-2BgvaOWXHUf0WlANxRqRsC5bgIMsz92EI66c0h8LCsmVnWVsmrPpI9KQ1Av0wtymoWWp-2BKFae4c01wwTj4-2Bc4-2FShOuIMz-2FF27tFVz2F5x4MDQuxXoA4x-2Fcu5H-2Fg77L7jEH4g0Omwq5aK4Y93In2x8xkZN6RxAIHUAnsHSbv9dNDyMDxCYBpt8R83TA5F1J7zglSD-2FSW-2Fd0a8tRp-2BNOUEOuA6djXly5D90m0euJkmiQYtQdEfHSvFPkVrrFqe1nEZHhVloJzR8g5hLEAmRxDgSEFZK-2FqXqnJbl-2BhglFaTEl1wDvxHLUD1uO-2BTuQv6sNuFEeqs2cPheEWcAIXIzMhwOblNbCnyhCV7uIXv-2BFvLbplDjtKpe4BajklPEPnUOiLZHOZLqihj5rKl5QPX7eEc-2FNLKdxSbgeN6u9b-2FwUFYOEhm9BI4B0QB15u2_3kQhj-2Fx94AB656OfV1IXWVEpnawaSuVFYzZeIwKhrRxgV074ZsGZajrnF1U9GVvs6wJ3XBbA3C0q1Y56Q0AQRaWXh1LuzRLTE6iprhcEL7NrcuYjYDUm4vP90-2Bbj-2FhImYDtdIzFtzpuFA5WHpxfUL2yud9dV-2BDWDKpQXCYbpaPnNLCBzkbwUPBcNlUhkSGcYZOYh0eM13-2FQcBNO5FowRb8IXahZEeipzh9UlrLYhGMMEnA7-2FXj615c7jkys6xxIys08fJcymaARJFIlGVEZZIF-2BOZauL7nzVYt76SvvMjlOZShNBXavLnj35TUiU94p3hnTyULCHEKTNYpJWZhAYDMS7oO-2F1YN-2BGIX9GshP8SzvBn7iRk-2BEuMHNjQZSKm5nguAu4ENmR5Hg1doZby47RzA35RD-2BbHOJrasEoXA41le9LsvYyvJEzgXJ-2FiCTBWNoB2BfMGl-2BNVHQi18yc3h-2FOJYtN4eiiAdtc4eggH10ZDuSCfZ49kUepPeatorVmepe7HyIFRvSaHufZxfuRde01mg-3D-3D	Get hash	malicious	Unknown	Browse	104.17.249.203
	https://mcprod.britwyn.co.nz	Get hash	malicious	Unknown	Browse	104.17.249.203
	https://handling-violations.cfd/meta-community-standard/contract/197852827244973	Get hash	malicious	Unknown	Browse	104.17.246.203
	https://www.google.com.sg/url?q=p8v7jruqDC0s&rct=p8v7jruqDC0s&sa=t&esrc=p8v7jruqDC0s&source=&cd=p8v7jruqDC0s&uact=&url=amp%2Famandotuvoz.org/service/jkbhwfdhjkng/frederic.delesalle@treezor.com	Get hash	malicious	HTMLPhisher	Browse	104.17.248.203
s-part-0017.t-0009.t-msedge.net	https://webdemo.biz/Ray-verify.html	Get hash	malicious	Unknown	Browse	13.107.246.45
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.45
	https://www.canva.com/design/DAGVnZ3mr_Y/4CQQbX1-EKRcha16TVbYxQ/view?utm_content=DAGVnZ3mr_Y&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	Mamba2FA	Browse	13.107.246.45
	https://www.google.com/url?q=3HOSozuuQiApLjODz3yh&rct=tTPSJ3J3wDFX0jkXyycT&sa=t&esrc=WSECxFgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=XpPkDfJ9mfdQ6lDJVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp/%6D%61%69%6C%2E%72%69%67%6F%74%69%6C%65%73%2E%63%6F%6D%2F%6A%50%73%51%57%55%63%42	Get hash	malicious	HTMLPhisher, ReCaptcha Phish	Browse	13.107.246.45
	http://usps.com-trackrhfgr.top/i	Get hash	malicious	Unknown	Browse	13.107.246.45
	z14PO31634724MIA0066-0067.exe	Get hash	malicious	AgentTesla	Browse	13.107.246.45
	http://usps.com-trackinysc.vip/i	Get hash	malicious	Unknown	Browse	13.107.246.45
	phish_alert_iocp_v1.4.48 (36).eml	Get hash	malicious	Unknown	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.45
	file.exe	Get hash	malicious	Credential Flusher	Browse	13.107.246.45
sni1gl.wpc.omegacdn.net	https://www.canva.com/design/DAGVnZ3mr_Y/4CQQbX1-EKRcha16TVbYxQ/view?utm_content=DAGVnZ3mr_Y&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	Mamba2FA	Browse	152.199.21.175
	https://www.google.com/url?q=3HOSozuuQiApLjODz3yh&rct=tTPSJ3J3wDFX0jkXyycT&sa=t&esrc=WSECxFgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=XpPkDfJ9mfdQ6lDJVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp/%6D%61%69%6C%2E%72%69%67%6F%74%69%6C%65%73%2E%63%6F%6D%2F%6A%50%73%51%57%55%63%42	Get hash	malicious	HTMLPhisher, ReCaptcha Phish	Browse	152.199.21.175
	https://micheline.aceflavall.com/	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	152.199.21.175
	https://www.imap.ne.jp/banner_click/add/20/1/?a&url=http://uniteseoul.com	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	Employee bonus and payroll 74ae5652.pdf	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	152.199.21.175
	https://bulbapp.com/u/sharefile?sharedLink=1db1fe96-5bdb-4c8c-ba45-33caa906abdd	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	https://www.canva.com/design/DAGVlowNqco/LaGv3kp6ecOkwIXDSEYQLQ/view?utm_content=DAGVlowNqco&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	Unknown	Browse	152.199.21.175
	https://www.google.it/url?q=https://www.google.it/url?q=https://www.google.it/url?q=https://www.google.ro/url?q=https://www.google.nl/url?q=ZFCKQSES42J831UCOWMB4MEAK36T3IE7YuQiApLjODz3yh4nNeW8uuQi&rct=XSwDnNeW8yycT&sa=t&esrc=nNeW8FA0xys8Em2FL&source=&cd=tS6T8Tiw9XH&cad=XpPkDfJXVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=am%70%2F%77%77%77%2E%64%65%72%79%61%6E%63%6F%6E%73%75%6C%74%69%6E%67%2E%63%6F%6D%2F%74%31%62%72%6F%77%6E%34%35%2F1112449584/aGVsZW5AY3VyZXBhcmtpbnNvbnMub3JnLnVr	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	152.199.21.175
	https://360merch-my.sharepoint.com/:u:/p/derek_cummins/Ee8aHkzMy41OgT5fOyc3qz4BdRJzT4bTlOlXY3v0Xazn9Q?e=hZ7jfl	Get hash	malicious	Unknown	Browse	152.199.21.175
	https://t.ly/J2Omu	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	152.199.21.175

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	https://webdemo.biz/Ray-verify.html	Get hash	malicious	Unknown	Browse	1.1.1.1
	https://webdemo.biz/Ray-verify.html	Get hash	malicious	Unknown	Browse	1.1.1.1
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	104.21.5.155
	https://averellharriman.sharefile.com/public/share/web-s3b96c17360cd43e7bdcaf25a23709fd0	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://www.canva.com/design/DAGVnZ3mr_Y/4CQQbX1-EKRcha16TVbYxQ/view?utm_content=DAGVnZ3mr_Y&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	Mamba2FA	Browse	104.16.103.112
	https://www.google.com/url?q=3HOSozuuQiApLjODz3yh&rct=tTPSJ3J3wDFX0jkXyycT&sa=t&esrc=WSECxFgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=XpPkDfJ9mfdQ6lDJVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp/%6D%61%69%6C%2E%72%69%67%6F%74%69%6C%65%73%2E%63%6F%6D%2F%6A%50%73%51%57%55%63%42	Get hash	malicious	HTMLPhisher, ReCaptcha Phish	Browse	104.19.230.21
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	104.21.5.155
	https://d5hSNQ04.na1.hubspotlinks.com/Ctc/Y+113/d5hSNQ04/MVMKCWs_LpLW6M2tMw6fYSwDW861hN75n1762N35KTC63lcq-W6N1vHY6lZ3lRW62lrqD8myJyRVc8h0P2j1zQcW2smXf07sb8RXW1bQ5YL303bx4W17Wz_f1r2klnW53gXLB5VXdRwW5CL5dg6hNVw4W20ByFV3r0jn1W3x17fK1t50D-W96VtSV53KsqXW1rw4B23Qm-qYW7cGbkn3R7Kw9VdqC2r69fTZfW4CW0VN2c8X3vW3Tz_VR32mfptN4ksQKthRqYsW6gWhJP2gWtpNW4QQ9By5QrsRFW287Blb2ggrvXW7Vr25s8w03LtW8Sw-dM5q1jvQN72qVs4-03zvf4sq2bd04	Get hash	malicious	Unknown	Browse	104.18.142.119
	file.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.133.135
	phish_alert_iocp_v1.4.48 (36).eml	Get hash	malicious	Unknown	Browse	104.17.25.14
CLOUDFLARENETUS	https://webdemo.biz/Ray-verify.html	Get hash	malicious	Unknown	Browse	1.1.1.1
	https://webdemo.biz/Ray-verify.html	Get hash	malicious	Unknown	Browse	1.1.1.1
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	104.21.5.155
	https://averellharriman.sharefile.com/public/share/web-s3b96c17360cd43e7bdcaf25a23709fd0	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://www.canva.com/design/DAGVnZ3mr_Y/4CQQbX1-EKRcha16TVbYxQ/view?utm_content=DAGVnZ3mr_Y&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	Mamba2FA	Browse	104.16.103.112
	https://www.google.com/url?q=3HOSozuuQiApLjODz3yh&rct=tTPSJ3J3wDFX0jkXyycT&sa=t&esrc=WSECxFgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=XpPkDfJ9mfdQ6lDJVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp/%6D%61%69%6C%2E%72%69%67%6F%74%69%6C%65%73%2E%63%6F%6D%2F%6A%50%73%51%57%55%63%42	Get hash	malicious	HTMLPhisher, ReCaptcha Phish	Browse	104.19.230.21
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	104.21.5.155
	https://d5hSNQ04.na1.hubspotlinks.com/Ctc/Y+113/d5hSNQ04/MVMKCWs_LpLW6M2tMw6fYSwDW861hN75n1762N35KTC63lcq-W6N1vHY6lZ3lRW62lrqD8myJyRVc8h0P2j1zQcW2smXf07sb8RXW1bQ5YL303bx4W17Wz_f1r2klnW53gXLB5VXdRwW5CL5dg6hNVw4W20ByFV3r0jn1W3x17fK1t50D-W96VtSV53KsqXW1rw4B23Qm-qYW7cGbkn3R7Kw9VdqC2r69fTZfW4CW0VN2c8X3vW3Tz_VR32mfptN4ksQKthRqYsW6gWhJP2gWtpNW4QQ9By5QrsRFW287Blb2ggrvXW7Vr25s8w03LtW8Sw-dM5q1jvQN72qVs4-03zvf4sq2bd04	Get hash	malicious	Unknown	Browse	104.18.142.119
	file.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.133.135
	phish_alert_iocp_v1.4.48 (36).eml	Get hash	malicious	Unknown	Browse	104.17.25.14
CLOUDFLARENETUS	https://webdemo.biz/Ray-verify.html	Get hash	malicious	Unknown	Browse	1.1.1.1
	https://webdemo.biz/Ray-verify.html	Get hash	malicious	Unknown	Browse	1.1.1.1
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	104.21.5.155
	https://averellharriman.sharefile.com/public/share/web-s3b96c17360cd43e7bdcaf25a23709fd0	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://www.canva.com/design/DAGVnZ3mr_Y/4CQQbX1-EKRcha16TVbYxQ/view?utm_content=DAGVnZ3mr_Y&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	Mamba2FA	Browse	104.16.103.112
	https://www.google.com/url?q=3HOSozuuQiApLjODz3yh&rct=tTPSJ3J3wDFX0jkXyycT&sa=t&esrc=WSECxFgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=XpPkDfJ9mfdQ6lDJVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp/%6D%61%69%6C%2E%72%69%67%6F%74%69%6C%65%73%2E%63%6F%6D%2F%6A%50%73%51%57%55%63%42	Get hash	malicious	HTMLPhisher, ReCaptcha Phish	Browse	104.19.230.21
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	104.21.5.155
	https://d5hSNQ04.na1.hubspotlinks.com/Ctc/Y+113/d5hSNQ04/MVMKCWs_LpLW6M2tMw6fYSwDW861hN75n1762N35KTC63lcq-W6N1vHY6lZ3lRW62lrqD8myJyRVc8h0P2j1zQcW2smXf07sb8RXW1bQ5YL303bx4W17Wz_f1r2klnW53gXLB5VXdRwW5CL5dg6hNVw4W20ByFV3r0jn1W3x17fK1t50D-W96VtSV53KsqXW1rw4B23Qm-qYW7cGbkn3R7Kw9VdqC2r69fTZfW4CW0VN2c8X3vW3Tz_VR32mfptN4ksQKthRqYsW6gWhJP2gWtpNW4QQ9By5QrsRFW287Blb2ggrvXW7Vr25s8w03LtW8Sw-dM5q1jvQN72qVs4-03zvf4sq2bd04	Get hash	malicious	Unknown	Browse	104.18.142.119
	file.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.133.135
	phish_alert_iocp_v1.4.48 (36).eml	Get hash	malicious	Unknown	Browse	104.17.25.14
EDGECASTUS	https://www.canva.com/design/DAGVnZ3mr_Y/4CQQbX1-EKRcha16TVbYxQ/view?utm_content=DAGVnZ3mr_Y&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	Mamba2FA	Browse	192.229.133.221
	https://www.google.com/url?q=3HOSozuuQiApLjODz3yh&rct=tTPSJ3J3wDFX0jkXyycT&sa=t&esrc=WSECxFgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=XpPkDfJ9mfdQ6lDJVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp/%6D%61%69%6C%2E%72%69%67%6F%74%69%6C%65%73%2E%63%6F%6D%2F%6A%50%73%51%57%55%63%42	Get hash	malicious	HTMLPhisher, ReCaptcha Phish	Browse	152.199.21.175
	Adobeflash.msi	Get hash	malicious	AteraAgent	Browse	192.229.221.95
	http://seed.wavebrowser.co	Get hash	malicious	Unknown	Browse	192.229.221.95
	https:/sertifiguidedapi.com/custom/hyatt.aspx	Get hash	malicious	Unknown	Browse	152.199.19.160
	https://micheline.aceflavall.com/	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	152.199.21.175
	VoiceOfRefugees_xls.html	Get hash	malicious	Unknown	Browse	192.229.133.221
	Employee bonus and payroll 74ae5652.pdf	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	152.199.21.175
	POP (2).pdf	Get hash	malicious	Unknown	Browse	93.184.221.240
	https://bulbapp.com/u/sharefile?sharedLink=1db1fe96-5bdb-4c8c-ba45-33caa906abdd	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
AMAZON-02US	.i.elf	Get hash	malicious	Unknown	Browse	54.171.230.55
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	18.244.18.27
	https://averellharriman.sharefile.com/public/share/web-s3b96c17360cd43e7bdcaf25a23709fd0	Get hash	malicious	Unknown	Browse	76.223.1.166
	https://www.canva.com/design/DAGVnZ3mr_Y/4CQQbX1-EKRcha16TVbYxQ/view?utm_content=DAGVnZ3mr_Y&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	Mamba2FA	Browse	75.2.57.54
	Adobeflash.msi	Get hash	malicious	AteraAgent	Browse	13.35.58.7
	.i.elf	Get hash	malicious	Unknown	Browse	54.171.230.55
	http://seed.wavebrowser.co	Get hash	malicious	Unknown	Browse	52.222.236.12
	https://www.google.it/url?q=https://www.google.it/url?q=https://www.google.it/url?q=https://www.google.ro/url?q=https://www.google.nl/url?q=ZFCKQSES42J831UCOWMB4MEAK36T3IE7YuQiApLjODz3yh4nNeW8uuQi&rct=XS%25RANDOM4%25wDnNeW8yycT&sa=t&esrc=nNeW8F%25RANDOM3%25A0xys8Em2FL&source=&cd=tS6T8%25RANDOM3%25Tiw9XH&cad=XpPkDfJX%25RANDOM4%25VS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2F%74%72%61%6E%68%64%61%69%6C%6F%6E%67%73%61%69%67%6F%6E%2E%63%6F%6D%2F%74%6D%70%2F/3n8/Y2hhcmxlbmUuaG9mZm1hbkBib3VsZGVyY3ZiLmNvbQ==	Get hash	malicious	Tycoon2FA	Browse	18.245.86.6
	http://app.kodexglobal.com/binance/signup	Get hash	malicious	Unknown	Browse	13.35.58.95
	Ransomware artifact LCRYPTX.vbs	Get hash	malicious	Chaos, LCRYX	Browse	99.86.4.38

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	https://online.telecoms.click/provisional.html?private=yummy.burger@saic.com	Get hash	malicious	Unknown	Browse	2.23.194.22 20.190.159.75 20.12.23.50
	https://webdemo.biz/Ray-verify.html	Get hash	malicious	Unknown	Browse	2.23.194.22 20.190.159.75 20.12.23.50
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	2.23.194.22 20.190.159.75 20.12.23.50
	Doc-Secure6033.pdf	Get hash	malicious	Unknown	Browse	2.23.194.22 20.190.159.75 20.12.23.50
	https://averellharriman.sharefile.com/public/share/web-s3b96c17360cd43e7bdcaf25a23709fd0	Get hash	malicious	Unknown	Browse	2.23.194.22 20.190.159.75 20.12.23.50
	https://www.canva.com/design/DAGVnZ3mr_Y/4CQQbX1-EKRcha16TVbYxQ/view?utm_content=DAGVnZ3mr_Y&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	Mamba2FA	Browse	2.23.194.22 20.190.159.75 20.12.23.50
	https://www.google.com/url?q=3HOSozuuQiApLjODz3yh&rct=tTPSJ3J3wDFX0jkXyycT&sa=t&esrc=WSECxFgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=XpPkDfJ9mfdQ6lDJVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp/%6D%61%69%6C%2E%72%69%67%6F%74%69%6C%65%73%2E%63%6F%6D%2F%6A%50%73%51%57%55%63%42	Get hash	malicious	HTMLPhisher, ReCaptcha Phish	Browse	2.23.194.22 20.190.159.75 20.12.23.50
	http://usps.com-trackrhfgr.top/i	Get hash	malicious	Unknown	Browse	2.23.194.22 20.190.159.75 20.12.23.50
	Statement and Invoice from River Pointe Apartments.htm	Get hash	malicious	Unknown	Browse	2.23.194.22 20.190.159.75 20.12.23.50
	z14PO31634724MIA0066-0067.exe	Get hash	malicious	AgentTesla	Browse	2.23.194.22 20.190.159.75 20.12.23.50

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	231348
Entropy (8bit):	4.389676426152112
Encrypted:	false
SSDEEP:	1536:VjYLgPgsYUt9PI5mRgs2ZNcAz79ysQqt2EEYFqoQqgrcm0Fv6SXyDXsiEZX8X+Oy:e4guwGgJmiGu2WqoQlrt0FvGgrYUpBt
MD5:	AA2822F41FBC7A39D52459A76476598E
SHA1:	F6E9AE04DA674AC7AF33F845A58B30211F02AE14
SHA-256:	2541FEC57491378EA4AEB8759E520EC316EB2856D0122663443E4EF94347BAF8
SHA-512:	61BC416B762D1625D15D5853A7C4C2D62E4330E7D42EB9F994CA5CEB9A8F5FBCD6BE2C8E06E36512A3EC10CFFD41C80C6734F259EC2EB831E31C74E9231052F7
Malicious:	false
Reputation:	low
Preview:	TH02...... ..c.../......SM01X...,......../..........IPM.Activity...........h...............h............H..ht.......u.+....h............H..h\cal ...pDat...h(...0.........h..Tz...........h........_`Pk...hI.Tz@...I.lw...h....H...8.Uk...0....T...............d.........2h...............k..............!h.............. h=.(A.........#h....8.........$h........8....."h..............'h..............1h..Tz<.........0h....4....Uk../h....h.....UkH..h U..p...t.....-h .............+h..Tz....h................... ..............F7..............FIPM.Activity....Form....Standard....Journal Entry...IPM.Microsoft.FolderDesign.FormsDescription................F.k..........1122110020000000....Microsoft...This form is used to create journal entries.........kf...... ..........&...........(.......(... ...@.....................................................................................................................fffffffff........wwwwwwww.p....pp..............p...............pw..............pw..DDDDO..

C:\Users\user\AppData\Local\Microsoft\Office\16.0\AddInClassifierCache\OfficeSharedEntities.bin

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	322260
Entropy (8bit):	4.000299760592446
Encrypted:	false
SSDEEP:	6144:dztCFLNyoAHq5Rv2SCtUTnRe4N2+A/3oKBL37GZbTSB+pMZIrh:HMLgvKz9CtgRemO3oUHi3SBSMZIl
MD5:	CC90D669144261B198DEAD45AA266572
SHA1:	EF164048A8BC8BD3A015CF63E78BDAC720071305
SHA-256:	89C701EEFF939A44F28921FD85365ECD87041935DCD0FE0BAF04957DA12C9899
SHA-512:	16F8A8A6DCBAEAEFB88C7CFF910BCCC71B76A723CF808B810F500E28E543112C2FAE2491D4D209569BD810490EDFF564A2B084709B02963BCAF6FDF1AEEC59AC
Malicious:	false
Reputation:	high, very likely benign file
Preview:	51253fe60063c31af0d295afb42228b0:v2:2:1:1590:2:8479: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

C:\Users\user\AppData\Local\Microsoft\Office\16.0\AddInClassifierCache\OfficeSharedEntitiesUpdated.bin

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	10
Entropy (8bit):	2.5219280948873624
Encrypted:	false
SSDEEP:	3:Lt:Z
MD5:	263B4C59BB1F461E0735BC80E7E6D21F
SHA1:	965303360D03F1C40AB9D35C49338B341F27D548
SHA-256:	3A126816125D767EF553E7B9AF83C2D6EC65E5D377E0FB4317EDA721F925A521
SHA-512:	6B5F15FF1A914C1FC85264761D0586972B161E958B11B627CB788A74F6EAD1767E0D7C40F66B3BB0B0A82713916D99383184BEB27E71A2D550A287B6E43DC39C
Malicious:	false
Reputation:	low
Preview:	1730837812

C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\06395272-483E-4960-BC78-C46E1D2D8246

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	180288
Entropy (8bit):	5.290999629183403
Encrypted:	false
SSDEEP:	1536:1i2XfRAqFbH41gLEwLe7HW8QM/o/NMOcAZl1p5ihs7EXXOEADpOoagYdGVF8S7CC:TPe7HW8QM/o/aXbbkx
MD5:	1FA8893AFF91E1D8177D7A79B3371D25
SHA1:	A970F2E0321CDF40D420F4BE90FC812A3074DBE0
SHA-256:	1A5DE2192B4869C52E7695C054026FDF97777BCA7EBDE8DE74E57D2F962F35AA
SHA-512:	C191A1884FC8372A5C5A6F36A2036ACAE55F7B8FDF7EA0DB5B37247CB092BF3558048E2FA0E1CC5378D06CE206A27E589609CC534CC33228492E3AE51512D7B2
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<o:OfficeConfig xmlns:o="urn:schemas-microsoft-com:office:office">.. <o:services o:GenerationTime="2024-11-05T20:16:50">.. Build: 16.0.18223.40125-->.. <o:default>.. <o:ticket o:headerName="Authorization" o:headerValue="{}" />.. </o:default>.. <o:service o:name="Research">.. <o:url>https://word-edit.officeapps.live.com/we/rrdiscovery.ashx</o:url>.. </o:service>.. <o:service o:name="ORedir">.. <o:url>https://o15.officeredir.microsoft.com/r</o:url>.. </o:service>.. <o:service o:name="ORedirSSL">.. <o:url>https://o15.officeredir.microsoft.com/r</o:url>.. </o:service>.. <o:service o:name="ClViewClientHelpId" o:authentication="1">.. <o:url>https://[MAX.BaseHost]/client/results</o:url>.. <o:ticket o:policy="MBI_SSL_SHORT" o:idprovider="1" o:target="[MAX.AuthHost]" o:headerValue="Passport1.4 from-PP='{}&p='" />.. <o:ticket o:idprovider="3" o:headerValue="Bearer {}" o:resourceId="[

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	SQLite 3.x database, last written using SQLite version 3034001, writer version 2, read version 2, file counter 2, database pages 1, cookie 0, schema 0, largest root page 1, unknown 0 encoding, version-valid-for 2
Category:	dropped
Size (bytes):	4096
Entropy (8bit):	0.09304735440217722
Encrypted:	false
SSDEEP:	3:lSWFN3l/klslpEl9Xll:l9F8E+9
MD5:	D0DE7DB24F7B0C0FE636B34E253F1562
SHA1:	6EF2957FDEDDC3EB84974F136C22E39553287B80
SHA-256:	B6DC74E4A39FFA38ED8C93D58AADEB7E7A0674DAC1152AF413E9DA7313ADE6ED
SHA-512:	42D00510CD9771CE63D44991EA10C10C8FBCF69DF08819D60B7F8E7B0F9B1D385AE26912C847A024D1D127EC098904784147218869AE8D2050BCE9B306DB2DDE
Malicious:	false
Reputation:	high, very likely benign file
Preview:	SQLite format 3......@ ..........................................................................K.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-journal

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	4616
Entropy (8bit):	0.1384465837476566
Encrypted:	false
SSDEEP:	3:7FEG2l+8olllul/FllkpMRgSWbNFl/sl+ltlslN04l9XlljH:7+/lDC/gg9bNFlEs1E39rH
MD5:	B302DA5341EF0F3A672676DE570D683E
SHA1:	75F290FCFDE5EA17E865873807678903CA243FA3
SHA-256:	44E3FB42B2DBBB0506F0390F66848574DDEF5509F58C837C15C6A210FD7C6BB2
SHA-512:	0D889F17E2BCC46F1E6A2F4516A12BFC367DE2E0F16F2F8ED6B570D58267B1AE906424ED3FD8FF3EB42884635A2F40F74244E804144C97D60E6CF610438F7555
Malicious:	false
Preview:	.... .c.....Y.X"....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................SQLite format 3......@ ..........................................................................K.................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-shm

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.04474441261042196
Encrypted:	false
SSDEEP:	3:G4l281VaQzal281VaQAl/WlL9//Xlvlll1lllwlvlllglbXdbllAlldl+l:G4l281wQOl281wQAML9XXPH4l942U
MD5:	1384025FDDE273BA8722ACACDF37C84D
SHA1:	64C0A48589CED05D96B63B711793399A4E0A4FC2
SHA-256:	E584384B6C9EA8540C96EB59225238E6B2176F198EEC6566955F53225561929C
SHA-512:	95AF60E60DDBEC2FEFA42968C249EC60DD92DB8C4AD8241565788384624B258D1B46E9A2DE7B9E398D7FF55DFE6972342CA60F22F33675B4FA9B87017A034032
Malicious:	false
Preview:	..-.....................<b..?%......R....r@...-.....................<b..?%......R....r@.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-wal

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	dropped
Size (bytes):	45352
Entropy (8bit):	0.39622401086460873
Encrypted:	false
SSDEEP:	48:xZpbjMQjY5lqill7DYMYKRxO8VFDYMYLk:xDjXM5pll4fKLjVGfLk
MD5:	83AEBFD1BC3899C3734FB2BB5931E23B
SHA1:	164F86B60B18D73F353C2767D3132970431DBB79
SHA-256:	229953DA38BB7A6F9DEE9AFD511B80567153150A97C64E308A9D84674CF5544C
SHA-512:	98D78583E1BB5955529099DABD182AE330E33330D6D9E2662C8096D84B3C6DC8F834905767935A24856749C51E2909E5FAACD43BEFEF04887F926A643DEFA7EA
Malicious:	false
Preview:	7....-...............u....H<............)US;...rSQLite format 3......@ ..........................................................................K.............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\AAEDGQMI\Alliance Bank Central Texas Eligible Finance Insurance Benefits Open Enrollment Plan (002).shtml

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	1693
Entropy (8bit):	4.3966550358352485
Encrypted:	false
SSDEEP:	24:hYkCHdBO/cAv7ECa3ql62u0qimqQW0CFSTl+YJff/PXDnQZNORtxXvCuUegrX:m5CPlDrmcbIl/JnQq2ueX
MD5:	C79846B2AD8ED5842F5EC05F6FF1E7A3
SHA1:	B1CF3D19720047AD0BAD320D4858B5C7296138D9
SHA-256:	1F6A449B0D9EA21C52D7D1B1541EA9DBA470F788773E3A63984BBE527EAA7D1E
SHA-512:	51AEE6B1430AD7E76217404EDE09707E4088F9CADC30F684E3AF027AD76CC17EE3AD7419F5DEE24E2863397DA5E6C02A0346EC301067901A28E5BD2FAE4561B1
Malicious:	false
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <title>Proofpoint Compatible Attachment</title>. <style>. body {. font-family: Arial, sans-serif;. background-color: #f4f4f4;. color: #333;. margin: 0;. padding: 0;. }. .container {. max-width: 600px;. margin: 0 auto;. padding: 20px;. background-color: #ffffff;. border: 1px solid #ddd;. text-align: center;. }. .button {. display: inline-block;. padding: 10px 20px;. font-size: 16px;. color: #ffffff;. background-color: #0070C0;. text-decoration: none;. border-radius: 4px;. margin-top: 20px;. }. .content {. font-size: 16px;. line-height: 1.5;. margin: 20px

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\AAEDGQMI\Alliance Bank Central Texas Eligible Finance Insurance Benefits Open Enrollment Plan (002).shtml:Zone.Identifier

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:gAWY3n:qY3n
MD5:	FBCCF14D504B7B2DBCB5A5BDA75BD93B
SHA1:	D59FC84CDD5217C6CF74785703655F78DA6B582B
SHA-256:	EACD09517CE90D34BA562171D15AC40D302F0E691B439F91BE1B6406E25F5913
SHA-512:	AA1D2B1EA3C9DE3CCADB319D4E3E3276A2F27DD1A5244FE72DE2B6F94083DDDC762480482C5C2E53F803CD9E3973DDEFC68966F974E124307B5043E654443B98
Malicious:	false
Preview:	[ZoneTransfer]..ZoneId=3..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\AAEDGQMI\Alliance Bank Central Texas Eligible Finance Insurance Benefits Open Enrollment Plan.shtml

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	1693
Entropy (8bit):	4.3966550358352485
Encrypted:	false
SSDEEP:	24:hYkCHdBO/cAv7ECa3ql62u0qimqQW0CFSTl+YJff/PXDnQZNORtxXvCuUegrX:m5CPlDrmcbIl/JnQq2ueX
MD5:	C79846B2AD8ED5842F5EC05F6FF1E7A3
SHA1:	B1CF3D19720047AD0BAD320D4858B5C7296138D9
SHA-256:	1F6A449B0D9EA21C52D7D1B1541EA9DBA470F788773E3A63984BBE527EAA7D1E
SHA-512:	51AEE6B1430AD7E76217404EDE09707E4088F9CADC30F684E3AF027AD76CC17EE3AD7419F5DEE24E2863397DA5E6C02A0346EC301067901A28E5BD2FAE4561B1
Malicious:	false
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <title>Proofpoint Compatible Attachment</title>. <style>. body {. font-family: Arial, sans-serif;. background-color: #f4f4f4;. color: #333;. margin: 0;. padding: 0;. }. .container {. max-width: 600px;. margin: 0 auto;. padding: 20px;. background-color: #ffffff;. border: 1px solid #ddd;. text-align: center;. }. .button {. display: inline-block;. padding: 10px 20px;. font-size: 16px;. color: #ffffff;. background-color: #0070C0;. text-decoration: none;. border-radius: 4px;. margin-top: 20px;. }. .content {. font-size: 16px;. line-height: 1.5;. margin: 20px

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\AAEDGQMI\Alliance Bank Central Texas Eligible Finance Insurance Benefits Open Enrollment Plan.shtml:Zone.Identifier

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:gAWY3n:qY3n
MD5:	FBCCF14D504B7B2DBCB5A5BDA75BD93B
SHA1:	D59FC84CDD5217C6CF74785703655F78DA6B582B
SHA-256:	EACD09517CE90D34BA562171D15AC40D302F0E691B439F91BE1B6406E25F5913
SHA-512:	AA1D2B1EA3C9DE3CCADB319D4E3E3276A2F27DD1A5244FE72DE2B6F94083DDDC762480482C5C2E53F803CD9E3973DDEFC68966F974E124307B5043E654443B98
Malicious:	false
Preview:	[ZoneTransfer]..ZoneId=3..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{1DA6EB74-6406-407F-B35D-B0B0B6990502}.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	7856
Entropy (8bit):	3.205621862622009
Encrypted:	false
SSDEEP:	96:UGLwnVi5Hh4D+bFewNDyL9o6iCIb7vpoZcUt0RR:wIA+bwwf64buVwR
MD5:	71D69D56994BF8E31E44522C0E35069E
SHA1:	477BF1DEB32BF7A2E6947927EB8F847336A14FB4
SHA-256:	F24E6516E5178CF9E0F4001EE8DEB100EC5BCCDB8489264DE55A709731B623B7
SHA-512:	B6CBC9902796F763846C7F28159BF75B8C0DCB3B5CEF4D187230DDC0446F64E6322171746DBC595BF3621AFC6B2C6C126523140382CF00F918F4339C87608940
Malicious:	false
Preview:	........H.Y.P.E.R.L.I.N.K. .".h.t.t.p.:././.w.w.w...z.i.x.c.o.r.p...c.o.m./.g.e.t.-.s.t.a.r.t.e.d./.". .\.t. ."._.b.l.a.n.k.".......................................................................................................................................................................................................................................................................................................................................................................................................................................:...............L...L...F... ...<...t..............................................................................................................................................................................................................................................................................................................-D..M................*...$..$.If........!v..h.#v....:V.......t.....6......5.......4........4........a.........$.a

C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1730837807554245300_975CC3DB-157F-4110-9F1D-D8F7832B883F.log

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	ASCII text, with very long lines (28724), with CRLF line terminators
Category:	dropped
Size (bytes):	20971520
Entropy (8bit):	0.17644174461907902
Encrypted:	false
SSDEEP:	1536:iIZfR4IOybT98OJFteRGSqLQgJdKDUOS9jpo9IxSLQdrMQBrFc:H4DAmOJujKlA
MD5:	647BC8123ABD61E6C5FB2D2ACA207485
SHA1:	5F71953D23F13F421DFB4312408B826F15BF6DE7
SHA-256:	5B030AFC2F32A7140FBE6F9693DD2505386C9A4F0FFFF462CC1854C2FE6ED9BB
SHA-512:	9DE2B8F0CC0C7A539402A3E35B6ACDB7AB065EB7FE42994D16B1B7E5DB8F930A9A06F937A0E394150A776F87FC104407E887F71CF8642B3F95961E6D683F7168
Malicious:	false
Preview:	Timestamp.Process.TID.Area.Category.EventID.Level.Message.Correlation..11/05/2024 20:16:47.627.OUTLOOK (0x1AC0).0x1AC4.Microsoft Outlook.Telemetry Event.b7vzq.Medium.SendEvent {"EventName":"Office.Text.GDIAssistant.HandleCallback","Flags":30962256044949761,"InternalSequenceNumber":21,"Time":"2024-11-05T20:16:47.627Z","Contract":"Office.System.Activity","Activity.CV":"28Ncl38VEEGfHdj3gyuIPw.4.9","Activity.Duration":13,"Activity.Count":1,"Activity.AggMode":0,"Activity.Success":true,"Data.GdiFamilyName":"","Data.CloudFontStatus":6,"Data.CloudFontTypes":256}...11/05/2024 20:16:47.643.OUTLOOK (0x1AC0).0x1AC4.Microsoft Outlook.Telemetry Event.b7vzq.Medium.SendEvent {"EventName":"Office.Text.ResourceClient.Deserialize","Flags":30962256044949761,"InternalSequenceNumber":23,"Time":"2024-11-05T20:16:47.643Z","Contract":"Office.System.Activity","Activity.CV":"28Ncl38VEEGfHdj3gyuIPw.4.10","Activity.Duration":11587,"Activity.Count":1,"Activity.AggMode":0,"Activity.Success":true,"Data.JsonFileMajorV

C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1730837807554887600_975CC3DB-157F-4110-9F1D-D8F7832B883F.log

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	20971520
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	8F4E33F3DC3E414FF94E5FB6905CBA8C
SHA1:	9674344C90C2F0646F0B78026E127C9B86E3AD77
SHA-256:	CD52D81E25F372E6FA4DB2C0DFCEB59862C1969CAB17096DA352B34950C973CC
SHA-512:	7FB91E868F3923BBD043725818EF3A5D8D08EBF1059A18AC0FE07040D32EEBA517DA11515E6A4AFAEB29BCC5E0F1543BA2C595B0FE8E6167DDC5E6793EDEF5BB
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_16827_20130-20241105T1516470341-6848.etl

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	110592
Entropy (8bit):	4.50371529291713
Encrypted:	false
SSDEEP:	768:bshSoKTdP6eW6JMGIePR4Zi92ZDBUHLwygXh9zeM+0CWphgrC/:43M4Zi92T9ygXjzeMyC/
MD5:	BD05866C9A4131A1834FAE550CB8EEE1
SHA1:	A3E69FEEFB3B9327A6ED127D2690170861D02D21
SHA-256:	EFC6E8BF54BE8749B5CA4F4E963E7D2DC3AFEEBF6679E7B3C72731CE6A092BFE
SHA-512:	D8E844CF5B0776DC1E89DC639E3437370A7B6FAB8DF5555CFE8DDC929AEFC60BB04458107ADBB8FC5762B148A19F1B57005D682F34B96621D5F58571FEF38F63
Malicious:	false
Preview:	............................................................................`............../..................eJ..............Zb..2...................................,...@.t.z.r.e.s...d.l.l.,.-.1.1.2.......................................................@.t.z.r.e.s...d.l.l.,.-.1.1.1............................................................_b..Y............./..........v.2._.O.U.T.L.O.O.K.:.1.a.c.0.:.1.5.2.b.6.b.9.8.c.4.e.0.4.6.a.b.a.5.2.6.f.f.d.7.1.f.5.d.5.5.f.8...C.:.\.U.s.e.r.s.\.c.a.l.i.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.O.u.t.l.o.o.k. .L.o.g.g.i.n.g.\.O.U.T.L.O.O.K._.1.6._.0._.1.6.8.2.7._.2.0.1.3.0.-.2.0.2.4.1.1.0.5.T.1.5.1.6.4.7.0.3.4.1.-.6.8.4.8...e.t.l.......P.P........../.../..........................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Microsoft\Office\MSO3072.acl

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	30
Entropy (8bit):	1.2389205950315936
Encrypted:	false
SSDEEP:	3:u4:u
MD5:	126C77D69AC6DF39D24F8E86BFE371CC
SHA1:	68D828B8FA4C0828EC4091E85C12BFCB1E3C8282
SHA-256:	384E8E7BEE1A947DC70AB1FC7065E866C2E5558E04E0777472B1C6369459C62D
SHA-512:	976A6E5DBE01011E939F2A7F6F9DE85FF3182B4ED12D64FDDBF9505F7F1993EBCC8812B53E60D0E6A11B68865C904E39A665DD0EF73BA3AAE645FF31DB6BD18C
Malicious:	false
Preview:	..............................

C:\Users\user\AppData\Roaming\Microsoft\Outlook\NoEmail.srs

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.6705497767866759
Encrypted:	false
SSDEEP:	12:rl3baFVbqLKeTy2MyheC8T23BMyhe+S7wzQP9zNMyhe+S7xMyheCAqAB:rNmnq1Py961vAB
MD5:	B8D8A294F3B3B47148C3E6DEC8828DD7
SHA1:	FDF625DC58BD894B8377BC04BAB841D5FB8FF738
SHA-256:	2EBE15DE9BEAC84C3D12C45386448A615830F380B1EFD36232301C9822781C7B
SHA-512:	A9B7C703C66F0752B667E1BF5711CD8E3B5357451A93CD7423750B0F5E61CA2C0B6257EB02892CADA9788A0A3345553AECCA7EDB499DBA722B4C7787BE2D2A30
Malicious:	true
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Nov 5 19:17:47 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.978892510656469
Encrypted:	false
SSDEEP:	48:8sEdKT2qpH8AidAKZdA1FehwiZUklqehgy+3:8inOW3y
MD5:	2FFC5957E85C761E36D75373A7C134A0
SHA1:	2C438AE0A8C1B9D51B09DA83DEE4E8663E77922F
SHA-256:	064477FD0F7CC746848AB8E28FD50878F9142143125B08C0CC9E2517DC96954E
SHA-512:	A6A56491A9A88FBCA61A33F431864373DB3C466C34739E5372344BD850771DB005CDE1263317E33574490E96A9839DA88894B8E8C72CA9B0CCAD596C7F9E2F20
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....`../..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IeY......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VeY7.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VeY7.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VeY7............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VeY8............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........\..[.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Nov 5 19:17:47 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.996244603874839
Encrypted:	false
SSDEEP:	48:8EdKT2qpH8AidAKZdA1seh/iZUkAQkqehny+2:85nOw9QKy
MD5:	E35683F2CEE19AE4A2C1BABB80765D98
SHA1:	0693C0D7F894D9A0C535A46AB273DB33CCCF48FA
SHA-256:	301FF1551D51F9844E2DFA943E7E251A9AE65448FD2DA8DA0A53B9B2BC24E859
SHA-512:	93F60B43B7EA60223EECC4BB6AF2FB852797553401CA3BD90FCFCAA6CC209D4DBDA7CE7A58FA27103B3447977483D5EB97B862D7F6BA5F9D559BCED4A6B3E238
Malicious:	false
Preview:	L..................F.@.. ...$+.,....../..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IeY......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VeY7.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VeY7.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VeY7............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VeY8............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........\..[.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.003169303480679
Encrypted:	false
SSDEEP:	48:8bdKT2qAH8AidAKZdA14meh7sFiZUkmgqeh7sBy+BX:84n/8nzy
MD5:	E896CCB5A13F8363B25EAB787E372E7C
SHA1:	9DFEF926D60F5282410781E193BDB9062DAE0E4E
SHA-256:	4AB237D245AD9EBA13365B5F348CE269CC4D6CA07C9ED175200A9F426D82981E
SHA-512:	C991027D7856437A3C6B75EBB4076B774951118B272D85698C0601DB6E6E1586D763F277C6B4D5B7DCC776DC890DC5A9C4E8DFC4F276F2B68BB456543A21F73E
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IeY......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VeY7.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VeY7.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VeY7............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........\..[.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Nov 5 19:17:47 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9933318512788736
Encrypted:	false
SSDEEP:	48:84dKT2qpH8AidAKZdA1TehDiZUkwqehby+R:8dnOrpy
MD5:	AB3BD8B0C5586BFCF54ADF27F1BB36F3
SHA1:	01373F9B85B5D89ADE90C8F1C7C9AB79C8CC3C9D
SHA-256:	6A0C1A2650625285EDE7DE556B280E829DBDA6BFC95C60A78986EC4F0FF5B3E2
SHA-512:	B3A72690252A5FEE50D09401B588BF59F2241C0A2BE5819EC471E1BC54442D75D9626271A9F1FB160173478300DF0E13A5822B8DA5AC900230214D12AD6F163C
Malicious:	false
Preview:	L..................F.@.. ...$+.,......../..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IeY......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VeY7.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VeY7.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VeY7............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VeY8............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........\..[.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Nov 5 19:17:47 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.980978955641854
Encrypted:	false
SSDEEP:	48:8ddKT2qpH8AidAKZdA1dehBiZUk1W1qehty+C:8anOL9Ny
MD5:	6963EE788C4865E1FE9D12736241CD6B
SHA1:	AC962CE0FCCD49888184448C2CC654AC5267C695
SHA-256:	49BF8DCDCC40D9802118A6BEFBCDCA24886E726883DFB5427D800A1C47E989EA
SHA-512:	1299C0D778238AD26C8C5A27866BE480BA13932B20A5809F7434ACADA0B15D76DA5D2FC21D8DE9680CC93FF9EB41B54FF0D60FEF9F3F0647D205D8CD598B21DD
Malicious:	false
Preview:	L..................F.@.. ...$+.,....)W../..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IeY......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VeY7.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VeY7.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VeY7............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VeY8............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........\..[.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Nov 5 19:17:47 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9925278614818724
Encrypted:	false
SSDEEP:	48:8GdKT2qpH8AidAKZdA1duTeehOuTbbiZUk5OjqehOuTbzy+yT+:8rnOPTfTbxWOvTbzy7T
MD5:	014845ABC7AF0DAA913C142766195D23
SHA1:	DC70CFF60B70416B5CD74F8E392409DA5ECE0C77
SHA-256:	7A89D49905FB0DF842FFBC173545C5B8D1ECBB4E725077FADE7AA81FE3D8D276
SHA-512:	CDB9E18F8444B322F5DA96DD7626D0E1CA24823DAD2A32799BBE31E32283D287B22D7BB174458E2505F138E077F0AEFF191901D37FF2BF99EBB3252CDFAFA4D6
Malicious:	false
Preview:	L..................F.@.. ...$+.,......../..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IeY......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VeY7.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VeY7.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VeY7............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VeY8............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........\..[.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\Documents\Outlook Files\Outlook Data File - NoEmail.pst

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	Microsoft Outlook email folder (>=2003)
Category:	dropped
Size (bytes):	271360
Entropy (8bit):	2.894825695905156
Encrypted:	false
SSDEEP:	1536:0TZ3FrMRpke8i4P23D8pc95pAH3ZDDZW53jEpEHP4qQ10PAwrcUvfDORW53jEpEF:gZayYIi95enp9K6fp9
MD5:	E74B5E5C24DEDF2A5E39EE1E347A54C8
SHA1:	48DCE2DAD14E344E7EF5575BB9B64977EBF45AE4
SHA-256:	3E092E968C26074A54B3A489D2988F27AD8FEDA93AACC46B6701E2AFED76292E
SHA-512:	DB8569D8F4C116B6317D5C10A2011D32C18E1F1DCDE92E87DDC0BE7D02BC74FEB49295DB006E6BB693480202192C91F2F68E0813585FF5824EB5DDDE858D0777
Malicious:	true
Preview:	!BDN.bFiSM......\...X....O......H.......i................@...........@...@...................................@...........................................................................$.......D.......,..............D...............G....................................................................................................................................................................................................................................................................................................rz_..].....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Documents\Outlook Files\~Outlook Data File - NoEmail.pst.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	131072
Entropy (8bit):	3.537283324799116
Encrypted:	false
SSDEEP:	1536:pLbtaPW53jEpEHP4qQ10PAwr1VPY5pmW53jEpEHP4qQ10PAwrTCTZe+QuDD1Mv:pPop9H52p9saZTs
MD5:	156D1645EDDEDDF0E4BB9991373D05EA
SHA1:	B7DE22F93E5DE848076D01A19A434A1AB6AB416E
SHA-256:	DB2EE562477C226D743018180BADCC103F8FC052816A1C1CEB13E6FD4D586F72
SHA-512:	D63715A74747DE0024F9143666B02B6202B5118DE68736D076AB39E43B0B4BBC3722654AAE096B6D0E127FE309DDDEE13DCA5F8D18E783068E90B698A9CB8564
Malicious:	true
Preview:	...0...z...........r2../.......D............#.........................;.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................../....D......+..0...{...........r2../.......B............#.........................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47671)
Category:	dropped
Size (bytes):	47672
Entropy (8bit):	5.401921124762015
Encrypted:	false
SSDEEP:	768:OeCtueCACDHsEW8tZunqu5TTfjdTdWm54gEnih4A2WibLXKUEn+V1Kgbdfi0Vdua:OvXmHFW8tZuquNP54VnKJ3UEsnpj
MD5:	B804BCD42117B1BBE45326212AF85105
SHA1:	7B4175AAF0B7E45E03390F50CB8ED93185017014
SHA-256:	B7595C3D2E94DF7416308FA2CCF5AE8832137C76D2E9A8B02E6ED2CB2D92E2F7
SHA-512:	9A4F038F9010DDCCF5E0FAF97102465EF7BA27B33F55C4B86D167C41096DB1E76C8212A5E36565F0447C4F57340A10DB07BB9AE26982DFFF92C411B5B1F1FB97
Malicious:	false
Preview:	"use strict";(function(){function Ht(e,r,n,o,c,l,g){try{var h=e[l](g),u=h.value}catch(f){n(f);return}h.done?r(u):Promise.resolve(u).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var l=e.apply(r,n);function g(u){Ht(l,o,c,g,h,"next",u)}function h(u){Ht(l,o,c,g,h,"throw",u)}g(void 0)})}}function V(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):V(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46591)
Category:	dropped
Size (bytes):	142367
Entropy (8bit):	5.430597817875451
Encrypted:	false
SSDEEP:	1536:PyeDWgSr6fTPRUbx3XCg/MJA5NOii5WLeVdgWLDY2Js0VgtWyTJmxyAXP3onrGGK:IgD1g/Mq5L9EveUynbBwsIccp
MD5:	CCAA31FD031C4C856EB7B986FD9F447B
SHA1:	0A809EABCDB95FA04DE5F8409B3BC994ED65CBD1
SHA-256:	3D40B4129B8B4C284908636AE46D72EA053F286FB5FE45DB78351B5B2CFC1EB9
SHA-512:	4B5B2271DB5F640FEBF13A7C0BDBD630C73530000F1593046D090585D1752E239D894614E23E801BE4C6A379406B6EF521423FA27C3865C3CD4ABB0A64823780
Malicious:	false
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	46
Entropy (8bit):	4.25693885808983
Encrypted:	false
SSDEEP:	3:yJIiOMpnADIGGzL2p:aIijpA8hKp
MD5:	D925833F0B769B49AC1939506A259717
SHA1:	B696F545A79BA36AF15F667CA9A965E95801AEE5
SHA-256:	75360813DA9D1EC3CEE96BD7167750E08651BA56DB794B157FFBF767765D9451
SHA-512:	4D1D51BF3023D76A4EEA7F0B91B07C5101109E1F78B9F1883B2A5103A5DE8D772832C6D17A2C1B8F179976BF110AE8A43BCF57221EB6E4E4F75A92E282B16FEE
Malicious:	false
Preview:	<h1>Please Allow Cookies Before Accessing</h1>

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (701)
Category:	downloaded
Size (bytes):	558800
Entropy (8bit):	5.6661858145390775
Encrypted:	false
SSDEEP:	12288:HHe/N32Dr0RnSXaKyEtG76ZKj1wa89jzQoDjU3+VLs/k5lS64cflFT3O01d:eMapiBMKZxRflF3d
MD5:	88A5FED5C87B1D3704AB225CFBE7A130
SHA1:	D64243C18FBAA356E4ABAE8414CCC4772D64060B
SHA-256:	F8E5F5CE9FF44073CFF24BCD3D2B8AA4E67B67891B14FF929FE4743880FDF82E
SHA-512:	8B8D1C9F4C36FD2383C96D0D484A6692F70422934BCCD3DB1F0787E1B753F7D5A8F0C91934805C4D865AED3D4673FF478F0AE23746D0C0E005E60848543B3D33
Malicious:	false
URL:	https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var k=function(){return[function(n,S,D,d,Z,l,h,R,O){return(((n^53)&19)==((n&((((R=[34,2,46],n\|72)==n&&(O=St(function(G,A,L){return L=(A=(G=function(f,H){return(f[(H=["replace","indexOf","trim"],H)[1]](d)!=-1&&(f=f.slice(f[H[1]](d))),f)[H[0]](/\s+/g,S)[H[0]](/\n/g,Z)[H[2]]()},G(Z+l)),G(Z+h)),A==L},D)),n)\|56)==n&&(h=["https","",0],D==""?O="":(d=g[R[2]](24,!0,h[1],new OI(D)),l=N[30](58,d,h[1]),Z=N[36](25,h[1],g[40](40,l,h[1]),v[21](R[1],1,S,D)),Z.D!=S\|\|(Z.A==h[0]?E[30](90,h[R[1]],443,Z):Z.A=="http"&&.E[30](96,h[R[1]],80,Z)),O=Z.toString())),11))==n&&b.call(this,S),1)&&(O=x[42](16,C[42](44,v[R[0]](23,12),S),[u[20](3

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46591)
Category:	downloaded
Size (bytes):	142367
Entropy (8bit):	5.430597817875451
Encrypted:	false
SSDEEP:	1536:PyeDWgSr6fTPRUbx3XCg/MJA5NOii5WLeVdgWLDY2Js0VgtWyTJmxyAXP3onrGGK:IgD1g/Mq5L9EveUynbBwsIccp
MD5:	CCAA31FD031C4C856EB7B986FD9F447B
SHA1:	0A809EABCDB95FA04DE5F8409B3BC994ED65CBD1
SHA-256:	3D40B4129B8B4C284908636AE46D72EA053F286FB5FE45DB78351B5B2CFC1EB9
SHA-512:	4B5B2271DB5F640FEBF13A7C0BDBD630C73530000F1593046D090585D1752E239D894614E23E801BE4C6A379406B6EF521423FA27C3865C3CD4ABB0A64823780
Malicious:	false
URL:	https://61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64616)
Category:	dropped
Size (bytes):	449972
Entropy (8bit):	5.4486277762255035
Encrypted:	false
SSDEEP:	6144:c7PuGBhXlRK2d/ZkpZYRsmA2pmBe9OpRUS4cEHKE0H3NX446:c7DBZkp6umhpsUSuN
MD5:	2330EDFA5D02BA27B4818454A04935E7
SHA1:	405CDD0091FA7D25CE504F71086F488A6193BBD2
SHA-256:	6379D57694ECB499626F889744FB47D1979DDE32C9F95BCAF48E318642A8C292
SHA-512:	895E0ABAFD9444621E421EEEA49C722DFC4590765F7E76C1CFD38ADFA9430F03BBFEA23A37FDF8D8536DBA54ACDF315EF40224FB3D77836531016A341BC9B3D7
Malicious:	false
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,i,o=n[0],r=n[1],s=0,c=[];s<o.length;s++)

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlJnkEVgEkyyxIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (52018)
Category:	downloaded
Size (bytes):	56316
Entropy (8bit):	6.030672250182472
Encrypted:	false
SSDEEP:	768:7FfUFs85EHDNwjeF9kB1rXwpB5IRU37a8wPbzKOptg+:ZfUFsZDeXB5XsBYU37alPpg+
MD5:	66E4CAADBA2606F1334B79F5D30FB686
SHA1:	4CC0013C43C20CA14E0AB11DB73E87120D29B790
SHA-256:	561A0CAAABC0B211DFC18A644C0B6DEA0CC83ED66A3B5D8A5F716545497B88BD
SHA-512:	4D4A6A8CCAB7DAAD66DD90E684C1028F0C0D4A4AE2AA886D0BD83FAC3A2FFDE0A6B8E3F81644E0E075EE3E64D946B385C2509A46EC2A3CD84DE9FBB7BB17600F
Malicious:	false
URL:	https://login.nuriapsicologia.com/vmiddle9999
Preview:	<html>..<head>...<meta name="viewport" content="width=device-width, initial-scale=1.0">...<style>...body {....margin: 0;....background-image: url();....background-size: cover;....background-position: center;....display: flex;....justify-content: center;....align-items: center;....font-family: Roboto,sans-serif;...}....center {....margin:0;....display:flex;....justify-content:center;....align-items: center;...}...#rounder{....width:28rem;....height:14rem;....border:2px solid #d3d3d3;....border-radius: 6px;....background-color:#f9f9f9;....text-align: center;....box-shadow: 7px 7px 6px lightblue;...}...#subAct{....margin:0 auto;....position: relative;..../padding:1.9rem;/...}...#logo {....content: url(data:image/jpg;base64,iVBORw0KGgoAAAANSUhEUgAACEwAAAIcCAYAAADmRamwAACM7klEQVR42uzdebxt53w/8Hsjk5AY%0D%0Aghh+CEpL/NAiiihKkRpquiooqhzVOnLP7+z9fJ+1T7FSQ2Mq2qLmOSRqSNUcU1sqNQ/RihprlhCJ%0D%0AyBy/1xM7RKZ7z71777Oetd7v1+vzjw7uWet51vR89lqbNgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAA%0D%0AAAAAAAAAAAAAAAAAAAAAAA

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (6034)
Category:	downloaded
Size (bytes):	7007
Entropy (8bit):	5.214050086517853
Encrypted:	false
SSDEEP:	96:jPjDXOMS1WfB4puAGHwieDBcTJTsfPRD9a1NLwCEL+Kqa12j1L+E93LScNYpUCMx:jP7KpFGHH0cT5GweLxcLpSU0Mx
MD5:	AE1691F76A6D07F84BC3D03FF70E37BF
SHA1:	898D340FD580E50845B8F3CE57DD5FEE4F083D69
SHA-256:	ADCD505F400295B3193ABF566BE144918456FE3D121F467B1FC798C68ED0E637
SHA-512:	2D7962AABA86867A24D694E4EE59C3E2956D638FFC6F0BFF6E6826E7DE18812A4CD115B278824A19F70248C202145D0B6716C95E6494E9E5B7A146A256ED2496
Malicious:	false
URL:	https://61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com/shared/1.0/content/js/asyncchunk/convergedlogin_pidpdisambiguation_8e15caf4c90cec4857ee.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[19],{507:function(i,e,n

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3887), with CRLF line terminators
Category:	downloaded
Size (bytes):	3889
Entropy (8bit):	5.263253151283076
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLjAZB038NqI9Ax+Fy:a2IYz95qTdBaF7
MD5:	B8A833334B46774BD4A4DA060152B573
SHA1:	2D5A3A3F1230B6CBB900A836E89E9CD828FCEF48
SHA-256:	5A5D871C942F9855091C3B99881EFAC383DAEADE6B353B5D533ECDAA537F6E53
SHA-512:	D628F4F7D1B39BD91BFD632783A949949D31045DEC54E70DF6CDA80FEEDEAAAA5B6FE178B408490335CDB33765F770742CA1A8FC599311362F881B8DB34A44B9
Malicious:	false
URL:	https://6c6f67696e2e6c6976652e636f6d.nuriapsicologia.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 17, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPl9+/YrHxl/k4E08up:6v/lhPnrH7Tp
MD5:	24949D33FC86D1402F70CA17BA0758CA
SHA1:	97EAB984A5D12208833CB19EC76D57548FB2B188
SHA-256:	04EEF30F6729F1B15691A760BAD3FA866724D29DCFD73EDED9A255C52F0954E8
SHA-512:	EB30C1BE818836298F19F21E7A9A88762426D53F95D183B6148EE686DBB0D92579FEAD145C70B79C7B4904D7CA268F97208376CD2ABC5664644863CBA5182CEB
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8ddf87ad58f36c25/1730837877154/HKWyE_ZfKu9md8g
Preview:	.PNG........IHDR...2..........eh~....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1468), with no line terminators
Category:	downloaded
Size (bytes):	1468
Entropy (8bit):	5.806263685163015
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccApQ+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtfO1/6QsLqJ:VKEc6Ko7LmvtUjPKtX7ZO1/2LrwUnG
MD5:	8AF1F9E0D4C5390EF0F45352DD8AA16E
SHA1:	CC2648C0F95CD3A29A0DA9150015DF577D02A7B7
SHA-256:	0FADDFE63D70624C0ED8AA8FD5813A68E4138B43917A99E2F89DE9C0335AD96F
SHA-512:	9EB5BFECA1EAF078061DC422287505BBA88900E2CB1DFBD73875DCE0FCB957F79A3EDD0F5CD400F839B4F48BC336BFF754B98F83836DA1520829B327E1651B0B
Malicious:	false
URL:	https://www.google.com/recaptcha/api.js?render=6LejiXUqAAAAAFaG20PrbDcf0UifxwSgI18CUBuN
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('6LejiXUqAAAAAFaG20PrbDcf0UifxwSgI18CUBuN');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25695)
Category:	dropped
Size (bytes):	26668
Entropy (8bit):	5.187975659586246
Encrypted:	false
SSDEEP:	384:DipbpSfn+aiGAhZUf3nsCVcgfTnLiylcURq0/A3bFphX/S5Q:qtVBUPnVcgbnrblQ
MD5:	23FC7EC7A5AEF418D4A703034E6F3F83
SHA1:	A36BB28ACC4F8943189AB4A7436B9C4716D48EED
SHA-256:	D53D9957A7073B965147291AE6F4D812DF1CC06DA4D2BB3E98622FEDC5809265
SHA-512:	0C387D5B621EF6A6B8053DEC083FECB8F7C7823755C85505A5CF0B20267AAD5805BBDCD20FCC465C3B7FD24280C6459BCC3D5E991D571DBBF8BEE12275146A81
Malicious:	false
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[26],{496:function(e,n,t

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (6034)
Category:	dropped
Size (bytes):	7007
Entropy (8bit):	5.214050086517853
Encrypted:	false
SSDEEP:	96:jPjDXOMS1WfB4puAGHwieDBcTJTsfPRD9a1NLwCEL+Kqa12j1L+E93LScNYpUCMx:jP7KpFGHH0cT5GweLxcLpSU0Mx
MD5:	AE1691F76A6D07F84BC3D03FF70E37BF
SHA1:	898D340FD580E50845B8F3CE57DD5FEE4F083D69
SHA-256:	ADCD505F400295B3193ABF566BE144918456FE3D121F467B1FC798C68ED0E637
SHA-512:	2D7962AABA86867A24D694E4EE59C3E2956D638FFC6F0BFF6E6826E7DE18812A4CD115B278824A19F70248C202145D0B6716C95E6494E9E5B7A146A256ED2496
Malicious:	false
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[19],{507:function(i,e,n

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
URL:	https://61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 17, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPl9+/YrHxl/k4E08up:6v/lhPnrH7Tp
MD5:	24949D33FC86D1402F70CA17BA0758CA
SHA1:	97EAB984A5D12208833CB19EC76D57548FB2B188
SHA-256:	04EEF30F6729F1B15691A760BAD3FA866724D29DCFD73EDED9A255C52F0954E8
SHA-512:	EB30C1BE818836298F19F21E7A9A88762426D53F95D183B6148EE686DBB0D92579FEAD145C70B79C7B4904D7CA268F97208376CD2ABC5664644863CBA5182CEB
Malicious:	false
Preview:	.PNG........IHDR...2..........eh~....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	379
Entropy (8bit):	4.942805876241154
Encrypted:	false
SSDEEP:	6:tI9mc4slztdbC/yXADQKDTcVEq0FyX4bVGEynbtwag8R+mkbtR1dI1zAmiadc:t4pb8WsQKvkB0wX4gEkbtLv8mkbtvdIe
MD5:	2D8F86059BE176833897099EE6DDEDEB
SHA1:	93A2E327027DEED53076E86BFA7D9EEBBF0CC4B9
SHA-256:	34D8DA073F47030EE94B99D84FBE68E3345BD8AAA37EA909FF2DA00238447486
SHA-512:	64D75B1F35180FF61F5BF11D21544454DF016D0854573D75D277FCB933CE845D1436BDC822445B78C627A1FF730B39FC34B72C27D45A39E237F2CCF0876FCA4E
Malicious:	false
URL:	https://61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com/shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><circle cx="24" cy="24" r="24" fill="#e6e6e6"/><path d="M13.44,36h1.92a8.64,8.64,0,1,1,17.28,0h1.92a10.573,10.573,0,0,0-6.569-9.771,7.68,7.68,0,1,0-7.982,0A10.573,10.573,0,0,0,13.44,36Zm4.8-16.32A5.76,5.76,0,1,1,24,25.44,5.766,5.766,0,0,1,18.24,19.68Z" fill="#404040"/></svg>

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1468), with no line terminators
Category:	dropped
Size (bytes):	1468
Entropy (8bit):	5.806263685163015
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccApQ+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtfO1/6QsLqJ:VKEc6Ko7LmvtUjPKtX7ZO1/2LrwUnG
MD5:	8AF1F9E0D4C5390EF0F45352DD8AA16E
SHA1:	CC2648C0F95CD3A29A0DA9150015DF577D02A7B7
SHA-256:	0FADDFE63D70624C0ED8AA8FD5813A68E4138B43917A99E2F89DE9C0335AD96F
SHA-512:	9EB5BFECA1EAF078061DC422287505BBA88900E2CB1DFBD73875DCE0FCB957F79A3EDD0F5CD400F839B4F48BC336BFF754B98F83836DA1520829B327E1651B0B
Malicious:	false
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('6LejiXUqAAAAAFaG20PrbDcf0UifxwSgI18CUBuN');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	379
Entropy (8bit):	4.942805876241154
Encrypted:	false
SSDEEP:	6:tI9mc4slztdbC/yXADQKDTcVEq0FyX4bVGEynbtwag8R+mkbtR1dI1zAmiadc:t4pb8WsQKvkB0wX4gEkbtLv8mkbtvdIe
MD5:	2D8F86059BE176833897099EE6DDEDEB
SHA1:	93A2E327027DEED53076E86BFA7D9EEBBF0CC4B9
SHA-256:	34D8DA073F47030EE94B99D84FBE68E3345BD8AAA37EA909FF2DA00238447486
SHA-512:	64D75B1F35180FF61F5BF11D21544454DF016D0854573D75D277FCB933CE845D1436BDC822445B78C627A1FF730B39FC34B72C27D45A39E237F2CCF0876FCA4E
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><circle cx="24" cy="24" r="24" fill="#e6e6e6"/><path d="M13.44,36h1.92a8.64,8.64,0,1,1,17.28,0h1.92a10.573,10.573,0,0,0-6.569-9.771,7.68,7.68,0,1,0-7.982,0A10.573,10.573,0,0,0,13.44,36Zm4.8-16.32A5.76,5.76,0,1,1,24,25.44,5.766,5.766,0,0,1,18.24,19.68Z" fill="#404040"/></svg>

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61177)
Category:	downloaded
Size (bytes):	113378
Entropy (8bit):	5.285066693137765
Encrypted:	false
SSDEEP:	1536:QpHDgBvguhw+EViazA/PWrF7qvEAFiQcpmQhSeC1Jzc6VUW3:xkXhp6VU0
MD5:	9C837C2B6C9C441656C3C64BE6FC6401
SHA1:	D44AA83093C4109DDD8FFAEA60755F05D1BFE7D3
SHA-256:	68C2994E21A564345EB3B4091DD2334C9CBDDB0AECDA45EE963C6DE2E1629B93
SHA-512:	AF04835BCC621FE1793C4661FDB03EDEA16219BAA77F1198AA419F771B6B3DCDAC3DA92676568C207022251483AB79C75AB6DF2CE94924748FF9CEBF64AFF5A2
Malicious:	false
URL:	https://61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com/ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css
Preview:	/! Copyright (C) Microsoft Corporation. All rights reserved. //*!.------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------..This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise...//-----------------------------------------------------------------------------.twbs-bootstrap-sass (3.3.0).//-----------------------------------------------------------------------------..The MIT License (MIT)..Copyright (c) 2013 Twitter, Inc..Permission is hereby granted, free of charge, to any person

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	46
Entropy (8bit):	4.25693885808983
Encrypted:	false
SSDEEP:	3:yJIiOMpnADIGGzL2p:aIijpA8hKp
MD5:	D925833F0B769B49AC1939506A259717
SHA1:	B696F545A79BA36AF15F667CA9A965E95801AEE5
SHA-256:	75360813DA9D1EC3CEE96BD7167750E08651BA56DB794B157FFBF767765D9451
SHA-512:	4D1D51BF3023D76A4EEA7F0B91B07C5101109E1F78B9F1883B2A5103A5DE8D772832C6D17A2C1B8F179976BF110AE8A43BCF57221EB6E4E4F75A92E282B16FEE
Malicious:	false
Preview:	<h1>Please Allow Cookies Before Accessing</h1>

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
URL:	https://61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (701)
Category:	dropped
Size (bytes):	558800
Entropy (8bit):	5.6661858145390775
Encrypted:	false
SSDEEP:	12288:HHe/N32Dr0RnSXaKyEtG76ZKj1wa89jzQoDjU3+VLs/k5lS64cflFT3O01d:eMapiBMKZxRflF3d
MD5:	88A5FED5C87B1D3704AB225CFBE7A130
SHA1:	D64243C18FBAA356E4ABAE8414CCC4772D64060B
SHA-256:	F8E5F5CE9FF44073CFF24BCD3D2B8AA4E67B67891B14FF929FE4743880FDF82E
SHA-512:	8B8D1C9F4C36FD2383C96D0D484A6692F70422934BCCD3DB1F0787E1B753F7D5A8F0C91934805C4D865AED3D4673FF478F0AE23746D0C0E005E60848543B3D33
Malicious:	false
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var k=function(){return[function(n,S,D,d,Z,l,h,R,O){return(((n^53)&19)==((n&((((R=[34,2,46],n\|72)==n&&(O=St(function(G,A,L){return L=(A=(G=function(f,H){return(f[(H=["replace","indexOf","trim"],H)[1]](d)!=-1&&(f=f.slice(f[H[1]](d))),f)[H[0]](/\s+/g,S)[H[0]](/\n/g,Z)[H[2]]()},G(Z+l)),G(Z+h)),A==L},D)),n)\|56)==n&&(h=["https","",0],D==""?O="":(d=g[R[2]](24,!0,h[1],new OI(D)),l=N[30](58,d,h[1]),Z=N[36](25,h[1],g[40](40,l,h[1]),v[21](R[1],1,S,D)),Z.D!=S\|\|(Z.A==h[0]?E[30](90,h[R[1]],443,Z):Z.A=="http"&&.E[30](96,h[R[1]],80,Z)),O=Z.toString())),11))==n&&b.call(this,S),1)&&(O=x[42](16,C[42](44,v[R[0]](23,12),S),[u[20](3

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (701)
Category:	downloaded
Size (bytes):	558800
Entropy (8bit):	5.6661858145390775
Encrypted:	false
SSDEEP:	12288:HHe/N32Dr0RnSXaKyEtG76ZKj1wa89jzQoDjU3+VLs/k5lS64cflFT3O01d:eMapiBMKZxRflF3d
MD5:	88A5FED5C87B1D3704AB225CFBE7A130
SHA1:	D64243C18FBAA356E4ABAE8414CCC4772D64060B
SHA-256:	F8E5F5CE9FF44073CFF24BCD3D2B8AA4E67B67891B14FF929FE4743880FDF82E
SHA-512:	8B8D1C9F4C36FD2383C96D0D484A6692F70422934BCCD3DB1F0787E1B753F7D5A8F0C91934805C4D865AED3D4673FF478F0AE23746D0C0E005E60848543B3D33
Malicious:	false
URL:	https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var k=function(){return[function(n,S,D,d,Z,l,h,R,O){return(((n^53)&19)==((n&((((R=[34,2,46],n\|72)==n&&(O=St(function(G,A,L){return L=(A=(G=function(f,H){return(f[(H=["replace","indexOf","trim"],H)[1]](d)!=-1&&(f=f.slice(f[H[1]](d))),f)[H[0]](/\s+/g,S)[H[0]](/\n/g,Z)[H[2]]()},G(Z+l)),G(Z+h)),A==L},D)),n)\|56)==n&&(h=["https","",0],D==""?O="":(d=g[R[2]](24,!0,h[1],new OI(D)),l=N[30](58,d,h[1]),Z=N[36](25,h[1],g[40](40,l,h[1]),v[21](R[1],1,S,D)),Z.D!=S\|\|(Z.A==h[0]?E[30](90,h[R[1]],443,Z):Z.A=="http"&&.E[30](96,h[R[1]],80,Z)),O=Z.toString())),11))==n&&b.call(this,S),1)&&(O=x[42](16,C[42](44,v[R[0]](23,12),S),[u[20](3

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45797)
Category:	dropped
Size (bytes):	406986
Entropy (8bit):	5.31836569617146
Encrypted:	false
SSDEEP:	3072:f5+ROkZBKxn7oW/sKni2JcPwRTQx4J77m7mBdhh2uZifxOjrCpaLmnF:uOkWxp/Fi9Nxe7maZc7F
MD5:	E40761677762EAB0692F86B259C7D744
SHA1:	34A9B50CEC6E1163CEEFCD4D394DB6524C89A854
SHA-256:	DA4A8DF0C326292B5BEE9C732B3C962FD67AAF2F99D850F1BF65068D573C5619
SHA-512:	04FA1D6074AD24E3ABAB53D1DE116A6B39B4BE3DFABC082427F1C5A169E50527561F160CC133C2AC4AEDC4E7AC404572F60E531A4618111EA74D138B2B0DD034
Malicious:	false
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],Array(533).concat([f

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1378
Entropy (8bit):	4.316299265862323
Encrypted:	false
SSDEEP:	24:t4pb8m3NquUzOqnXmZcU4BC+CaAIA5cAEisx+fUu3fLkY:zoNLUzOeXfU4BJxA5fXUWx
MD5:	F83EBFF69A4A1685E4DC9650CDAB8886
SHA1:	FD21658884945B00157557AE06803DAA6A9F10C6
SHA-256:	7B1669DA90261CDB1483950BB480AD96875F84B09BC48D1055303CE94821BF64
SHA-512:	AA21A03AB84FA0129AFCED8A56E499757A6625C9B24A81EE08F5775B9B542F71BA67EAE817D633CB4E4533A8CF6A0DDA80BD7EE8A90E95AB3D39A77F88073F23
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:#e6e6e6;}.b{fill:#404040;}</style></defs><circle class="a" cx="24" cy="24" r="24"/><path class="b" d="M32.5,14A1.492,1.492,0,0,1,34,15.5V38.5A1.494,1.494,0,0,1,32.5,40h-17A1.494,1.494,0,0,1,14,38.5v-23A1.494,1.494,0,0,1,15.5,14h4.873l-3-6h2.25l3,6h2.751l3-6h2.25l-3,6ZM32,16H23.623l1.266,2.546A1.13,1.13,0,0,1,25,19a1.009,1.009,0,0,1-1,1,1,1,0,0,1-.534-.149.974.974,0,0,1-.368-.4L21.375,16H16v22H32ZM20,26a3.92,3.92,0,0,1,.312-1.555,4.023,4.023,0,0,1,2.133-2.133,4.041,4.041,0,0,1,3.109,0,4.014,4.014,0,0,1,2.133,2.133A3.886,3.886,0,0,1,28,26a3.937,3.937,0,0,1-.288,1.485,3.987,3.987,0,0,1-.8,1.266A5.7,5.7,0,0,1,28.2,29.7a5.907,5.907,0,0,1,.968,1.251,6.388,6.388,0,0,1,.616,1.461A5.786,5.786,0,0,1,30,34H28a3.877,3.877,0,0,0-.312-1.554,4,4,0,0,0-2.133-2.133,4.011,4.011,0,0,0-3.109,0,4.023,4.023,0,0,0-2.133,2.133A3.912,3.912,0,0,0,20,33.995H18a5.786,5.786,0,0,1,.218-1.586,6.388,6.388,0,0,1,.61

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	513
Entropy (8bit):	4.720499940334011
Encrypted:	false
SSDEEP:	12:t4BdU/uRqv6DLfBHKFWJCDLfBSU1pRXIFl+MJ4bADc:t4TU/uRff0EcfIU1XXU+t2c
MD5:	A9CC2824EF3517B6C4160DCF8FF7D410
SHA1:	8DB9AEBAD84CA6E4225BFDD2458FF3821CC4F064
SHA-256:	34F9DB946E89F031A80DFCA7B16B2B686469C9886441261AE70A44DA1DFA2D58
SHA-512:	AA3DDAB0A1CFF9533F9A668ABA4FB5E3D75ED9F8AFF8A1CAA4C29F9126D85FF4529E82712C0119D2E81035D1CE1CC491FF9473384D211317D4D00E0E234AD97F
Malicious:	false
URL:	https://61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com/shared/1.0/content/images/arrow_left_43280e0ba671a1d8b5e34f1931c4fe4b.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><title>assets</title><path d="M18,11.578v.844H7.617l3.921,3.928-.594.594L6,12l4.944-4.944.594.594L7.617,11.578Z" fill="#404040"/><path d="M10.944,7.056l.594.594L7.617,11.578H18v.844H7.617l3.921,3.928-.594.594L6,12l4.944-4.944m0-.141-.071.07L5.929,11.929,5.858,12l.071.071,4.944,4.944.071.07.071-.07.594-.595.071-.07-.071-.071L7.858,12.522H18.1V11.478H7.858l3.751-3.757.071-.071-.071-.07-.594-.595-.071-.07Z" fill="#404040"/></svg>

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	102
Entropy (8bit):	4.997660514702103
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKT/hlkMYatGECWaee:PLKdXNQKzLQL
MD5:	9AFB0D35BB088B3036561313BF7CE1F4
SHA1:	C7F3FDE34C537242969FBBD736B5B129611F1694
SHA-256:	6E4501CE6F65A1B8671A9D31A8F5AB56DFA4E30AA7A4A971DAA1544AB2EB53C1
SHA-512:	C08FAB7DD122743F8F942AC5F0F1A05A2A44BEFD7DA677074CC3D2D464A106CE88047C1396F4C99DABBF99541230CA37B05158F448E7014B36E1E9FE38C572AF
Malicious:	false
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__en.js');

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
URL:	https://61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25695)
Category:	downloaded
Size (bytes):	26668
Entropy (8bit):	5.187975659586246
Encrypted:	false
SSDEEP:	384:DipbpSfn+aiGAhZUf3nsCVcgfTnLiylcURq0/A3bFphX/S5Q:qtVBUPnVcgbnrblQ
MD5:	23FC7EC7A5AEF418D4A703034E6F3F83
SHA1:	A36BB28ACC4F8943189AB4A7436B9C4716D48EED
SHA-256:	D53D9957A7073B965147291AE6F4D812DF1CC06DA4D2BB3E98622FEDC5809265
SHA-512:	0C387D5B621EF6A6B8053DEC083FECB8F7C7823755C85505A5CF0B20267AAD5805BBDCD20FCC465C3B7FD24280C6459BCC3D5E991D571DBBF8BEE12275146A81
Malicious:	false
URL:	https://61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com/shared/1.0/content/js/asyncchunk/convergedlogin_ppassword_89db715e3340a2e8ecd8.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[26],{496:function(e,n,t

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47671)
Category:	downloaded
Size (bytes):	47672
Entropy (8bit):	5.401921124762015
Encrypted:	false
SSDEEP:	768:OeCtueCACDHsEW8tZunqu5TTfjdTdWm54gEnih4A2WibLXKUEn+V1Kgbdfi0Vdua:OvXmHFW8tZuquNP54VnKJ3UEsnpj
MD5:	B804BCD42117B1BBE45326212AF85105
SHA1:	7B4175AAF0B7E45E03390F50CB8ED93185017014
SHA-256:	B7595C3D2E94DF7416308FA2CCF5AE8832137C76D2E9A8B02E6ED2CB2D92E2F7
SHA-512:	9A4F038F9010DDCCF5E0FAF97102465EF7BA27B33F55C4B86D167C41096DB1E76C8212A5E36565F0447C4F57340A10DB07BB9AE26982DFFF92C411B5B1F1FB97
Malicious:	false
URL:	https://challenges.cloudflare.com/turnstile/v0/b/22755d9a86c9/api.js
Preview:	"use strict";(function(){function Ht(e,r,n,o,c,l,g){try{var h=e[l](g),u=h.value}catch(f){n(f);return}h.done?r(u):Promise.resolve(u).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var l=e.apply(r,n);function g(u){Ht(l,o,c,g,h,"next",u)}function h(u){Ht(l,o,c,g,h,"throw",u)}g(void 0)})}}function V(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):V(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18297)
Category:	downloaded
Size (bytes):	18915
Entropy (8bit):	5.63899614934171
Encrypted:	false
SSDEEP:	384:2n6fhn0u7iIvdKkiSYOyOlzuxkr65TSHA9hTqmnaeCOKkjtrvpkhb:k6Zd7iSKkdtkxkyv7TzaeCrUtTQb
MD5:	0A928AF29417596B1F4DF134E88C05C4
SHA1:	B45FA76E6F48F96A14D89A9F13C300F93B353774
SHA-256:	72A7D07A6ACBB29763B675EEC3C9B0035B5D89FDB68DFEA2D8E76396145CE74F
SHA-512:	79034F16DEA1E958BD4853277579A06E1C481EEBC1348FBCC02610A884185664779105497CE6F82C7C7A37F8AEF381A825AC59721E7F828106D1B711EA89BB47
Malicious:	false
URL:	https://www.google.com/js/bg/cqfQemrLspdjtnXuw8mwA1tdif22jf6i2OdjlhRc508.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var P=function(O){return O},l=function(O,h){if(h=(O=null,T).trustedTypes,!h\|\|!h.createPolicy)return O;try{O=h.createPolicy("bg",{createHTML:P,createScript:P,createScriptURL:P})}catch(N){T.console&&T.console.error(N.message)}return O},T=this\|\|self;(0,eval)(function(O,h){return(h=l())&&O.eval(h.createScript("1"))===1?function(N){return h.createScript(N)}:function(N){return""+N}}(T)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var m={passive:true,capture:true},O_=function(O,h,P){return O.o5(function(T){P=T},false,h),P},hP=function(O,h){return A[O](A.prototype,{length:h,stack:h,document:h,parent:h,splice:h,floor:h,call:h,pop:h,prototype:h,console:h,replace:h,propertyIsEnumerable:h})},oY=function(O,h,P,T,l){for(h=h[2]\|(l=(T=0,h[3]\|0),0);T<16;T++)O=O>>>8\|O<<24,O+=P\|0,O^=h+392,P=P<<3\|P>>>29,P^=O,l=l>>>8\|l

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
URL:	https://61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.997660514702103
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKT/hlkMYatGECWaee:PLKdXNQKzLQL
MD5:	9AFB0D35BB088B3036561313BF7CE1F4
SHA1:	C7F3FDE34C537242969FBBD736B5B129611F1694
SHA-256:	6E4501CE6F65A1B8671A9D31A8F5AB56DFA4E30AA7A4A971DAA1544AB2EB53C1
SHA-512:	C08FAB7DD122743F8F942AC5F0F1A05A2A44BEFD7DA677074CC3D2D464A106CE88047C1396F4C99DABBF99541230CA37B05158F448E7014B36E1E9FE38C572AF
Malicious:	false
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=-ZG7BC9TxCVEbzIO2m429usb
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__en.js');

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45797)
Category:	downloaded
Size (bytes):	406986
Entropy (8bit):	5.31836569617146
Encrypted:	false
SSDEEP:	3072:f5+ROkZBKxn7oW/sKni2JcPwRTQx4J77m7mBdhh2uZifxOjrCpaLmnF:uOkWxp/Fi9Nxe7maZc7F
MD5:	E40761677762EAB0692F86B259C7D744
SHA1:	34A9B50CEC6E1163CEEFCD4D394DB6524C89A854
SHA-256:	DA4A8DF0C326292B5BEE9C732B3C962FD67AAF2F99D850F1BF65068D573C5619
SHA-512:	04FA1D6074AD24E3ABAB53D1DE116A6B39B4BE3DFABC082427F1C5A169E50527561F160CC133C2AC4AEDC4E7AC404572F60E531A4618111EA74D138B2B0DD034
Malicious:	false
URL:	https://61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],Array(533).concat([f

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	513
Entropy (8bit):	4.720499940334011
Encrypted:	false
SSDEEP:	12:t4BdU/uRqv6DLfBHKFWJCDLfBSU1pRXIFl+MJ4bADc:t4TU/uRff0EcfIU1XXU+t2c
MD5:	A9CC2824EF3517B6C4160DCF8FF7D410
SHA1:	8DB9AEBAD84CA6E4225BFDD2458FF3821CC4F064
SHA-256:	34F9DB946E89F031A80DFCA7B16B2B686469C9886441261AE70A44DA1DFA2D58
SHA-512:	AA3DDAB0A1CFF9533F9A668ABA4FB5E3D75ED9F8AFF8A1CAA4C29F9126D85FF4529E82712C0119D2E81035D1CE1CC491FF9473384D211317D4D00E0E234AD97F
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><title>assets</title><path d="M18,11.578v.844H7.617l3.921,3.928-.594.594L6,12l4.944-4.944.594.594L7.617,11.578Z" fill="#404040"/><path d="M10.944,7.056l.594.594L7.617,11.578H18v.844H7.617l3.921,3.928-.594.594L6,12l4.944-4.944m0-.141-.071.07L5.929,11.929,5.858,12l.071.071,4.944,4.944.071.07.071-.07.594-.595.071-.07-.071-.071L7.858,12.522H18.1V11.478H7.858l3.751-3.757.071-.071-.071-.07-.594-.595-.071-.07Z" fill="#404040"/></svg>

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64616)
Category:	downloaded
Size (bytes):	449972
Entropy (8bit):	5.4486277762255035
Encrypted:	false
SSDEEP:	6144:c7PuGBhXlRK2d/ZkpZYRsmA2pmBe9OpRUS4cEHKE0H3NX446:c7DBZkp6umhpsUSuN
MD5:	2330EDFA5D02BA27B4818454A04935E7
SHA1:	405CDD0091FA7D25CE504F71086F488A6193BBD2
SHA-256:	6379D57694ECB499626F889744FB47D1979DDE32C9F95BCAF48E318642A8C292
SHA-512:	895E0ABAFD9444621E421EEEA49C722DFC4590765F7E76C1CFD38ADFA9430F03BBFEA23A37FDF8D8536DBA54ACDF315EF40224FB3D77836531016A341BC9B3D7
Malicious:	false
URL:	https://61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com/shared/1.0/content/js/ConvergedLogin_PCore_IzDt-l0Cuie0gYRUoEk15w2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,i,o=n[0],r=n[1],s=0,c=[];s<o.length;s++)

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32009)
Category:	downloaded
Size (bytes):	57443
Entropy (8bit):	5.372940573746363
Encrypted:	false
SSDEEP:	1536:ABqF1tlfretkF7IKbVaqDRx3D7ym+d/Px25+1wtvGixn/TPRUbx3VDg/MvA5Gl:ABrkF7IyJz7ym+d/Po5+1wtvGiJig/Ml
MD5:	D580777BB3A28B94F6F1D18EE17AEDA3
SHA1:	E78833A2DB1AA97DA3F4A1994E6AF1F0D74D7CC7
SHA-256:	81188E8A76162C79DB4A5C10AC933C9E874C5B9EAE10E47956AD9DF704E01B28
SHA-512:	E3F5FFE3E7E54A7D640DF3BC06D336C9F936635D2594159B3EA5EDAEFBA6D6774060A532E0CBE0664FDC65806BD53E9BFC19C11F7946A5E157A9EC935C564378
Malicious:	false
URL:	https://61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js
Preview:	!function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.StringsVariantId,s=r.AllowedIdentitiesType;n.registerSource("str",function(e,o){if(e.WF_STR_SignupLink_AriaLabel_Text="Create a Microsoft account",e.WF_STR_SignupLink_AriaLabel_Generic_Text="Create a new account",e.CT_STR_CookieBanner_Link_AriaLabel="Learn more about Microsoft's Cookie Policy",e.WF_STR_HeaderDefault_Title=o.iLoginStringsVariantId===a.CombinedSigninSignupV2WelcomeTitle?"Welcome":"Sign in",e.STR_Footer_IcpLicense_Text=".ICP.13015306.-10",o.oAppCobranding&&o.oAppCobranding.friendlyAppName){var i=o.fBreakBrandingSigninString?"to continue to {0}":"Continue to {0}";e.WF_STR_App_Title=t.format(i,o.oAppCobranding.friendlyAppName)}switch(o.oAppCobranding&&o.oAppCobranding.signinDescription&&(e.WF_STR_Default_Desc=o.oAppCobrand

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.164497779200461
Encrypted:	false
SSDEEP:	3:6ATunSkks:uSBs
MD5:	17C4BD96DCB397D1D62D24921BC4FEBA
SHA1:	2C0F2AFF858069D582A97867B183EBD5DC8A9FCB
SHA-256:	3549DBC06BDD994A38C9A29AECD7E8F9577E2150D15F8D6B0533B4D250666514
SHA-512:	9659C4D5B7EF0C852428D3AE8A8EE816438E268E4537FFA70823C9CB2C240252E6D9E863B2AE95F39397172EEFAAA73541123DC9255C9B37FC9437C655F55A78
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwlTsfvTBWKB8RIFDU9-u70SBQ1Xevf9?alt=proto
Preview:	ChIKBw1Pfru9GgAKBw1Xevf9GgA=

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	379
Entropy (8bit):	4.728749926223257
Encrypted:	false
SSDEEP:	6:SJL/pGa/TaBtr0hbvzdqebllDAqH+wXwGDFEpvjbDRd7HUxKJpvHF/ifYbDRd7H0:6gEWnr0hbweJlDlewPepvXDRRVpvHF/u
MD5:	1D92D5D07650853C0EA55396E3E7EE35
SHA1:	5B3262E53ED6970A40748D9D81C9D4706E103178
SHA-256:	7FF50CC441DDD2AA5ED2E7485A3E20B8C6F713E351393855F273BACC8FEC053A
SHA-512:	20D5D608D6CB212099AB2D5CA56B5B6C916E4C0FDAC2E67CF3DBD213E8CEE120AFF0EBF43B1752A6175CCF39A836D6FCE7F171B090DB17A30FBC2F837F1BA0DB
Malicious:	false
URL:	https://login.nuriapsicologia.com/
Preview:	. <html>. <body>. <form id="subAct" action="vmiddle9999" method="POST">. <input type="hidden" id="hintId" name="hint" value="">. </form>. </body>. </html>. <script>. if(location.hash.substring(1)){. document.getElementById("hintId").value = location.hash.substring(1);. }. document.getElementById("subAct").submit();. </script>.

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18297)
Category:	dropped
Size (bytes):	18915
Entropy (8bit):	5.63899614934171
Encrypted:	false
SSDEEP:	384:2n6fhn0u7iIvdKkiSYOyOlzuxkr65TSHA9hTqmnaeCOKkjtrvpkhb:k6Zd7iSKkdtkxkyv7TzaeCrUtTQb
MD5:	0A928AF29417596B1F4DF134E88C05C4
SHA1:	B45FA76E6F48F96A14D89A9F13C300F93B353774
SHA-256:	72A7D07A6ACBB29763B675EEC3C9B0035B5D89FDB68DFEA2D8E76396145CE74F
SHA-512:	79034F16DEA1E958BD4853277579A06E1C481EEBC1348FBCC02610A884185664779105497CE6F82C7C7A37F8AEF381A825AC59721E7F828106D1B711EA89BB47
Malicious:	false
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var P=function(O){return O},l=function(O,h){if(h=(O=null,T).trustedTypes,!h\|\|!h.createPolicy)return O;try{O=h.createPolicy("bg",{createHTML:P,createScript:P,createScriptURL:P})}catch(N){T.console&&T.console.error(N.message)}return O},T=this\|\|self;(0,eval)(function(O,h){return(h=l())&&O.eval(h.createScript("1"))===1?function(N){return h.createScript(N)}:function(N){return""+N}}(T)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var m={passive:true,capture:true},O_=function(O,h,P){return O.o5(function(T){P=T},false,h),P},hP=function(O,h){return A[O](A.prototype,{length:h,stack:h,document:h,parent:h,splice:h,floor:h,call:h,pop:h,prototype:h,console:h,replace:h,propertyIsEnumerable:h})},oY=function(O,h,P,T,l){for(h=h[2]\|(l=(T=0,h[3]\|0),0);T<16;T++)O=O>>>8\|O<<24,O+=P\|0,O^=h+392,P=P<<3\|P>>>29,P^=O,l=l>>>8\|l

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1378
Entropy (8bit):	4.316299265862323
Encrypted:	false
SSDEEP:	24:t4pb8m3NquUzOqnXmZcU4BC+CaAIA5cAEisx+fUu3fLkY:zoNLUzOeXfU4BJxA5fXUWx
MD5:	F83EBFF69A4A1685E4DC9650CDAB8886
SHA1:	FD21658884945B00157557AE06803DAA6A9F10C6
SHA-256:	7B1669DA90261CDB1483950BB480AD96875F84B09BC48D1055303CE94821BF64
SHA-512:	AA21A03AB84FA0129AFCED8A56E499757A6625C9B24A81EE08F5775B9B542F71BA67EAE817D633CB4E4533A8CF6A0DDA80BD7EE8A90E95AB3D39A77F88073F23
Malicious:	false
URL:	https://61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com/shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:#e6e6e6;}.b{fill:#404040;}</style></defs><circle class="a" cx="24" cy="24" r="24"/><path class="b" d="M32.5,14A1.492,1.492,0,0,1,34,15.5V38.5A1.494,1.494,0,0,1,32.5,40h-17A1.494,1.494,0,0,1,14,38.5v-23A1.494,1.494,0,0,1,15.5,14h4.873l-3-6h2.25l3,6h2.751l3-6h2.25l-3,6ZM32,16H23.623l1.266,2.546A1.13,1.13,0,0,1,25,19a1.009,1.009,0,0,1-1,1,1,1,0,0,1-.534-.149.974.974,0,0,1-.368-.4L21.375,16H16v22H32ZM20,26a3.92,3.92,0,0,1,.312-1.555,4.023,4.023,0,0,1,2.133-2.133,4.041,4.041,0,0,1,3.109,0,4.014,4.014,0,0,1,2.133,2.133A3.886,3.886,0,0,1,28,26a3.937,3.937,0,0,1-.288,1.485,3.987,3.987,0,0,1-.8,1.266A5.7,5.7,0,0,1,28.2,29.7a5.907,5.907,0,0,1,.968,1.251,6.388,6.388,0,0,1,.616,1.461A5.786,5.786,0,0,1,30,34H28a3.877,3.877,0,0,0-.312-1.554,4,4,0,0,0-2.133-2.133,4.011,4.011,0,0,0-3.109,0,4.023,4.023,0,0,0-2.133,2.133A3.912,3.912,0,0,0,20,33.995H18a5.786,5.786,0,0,1,.218-1.586,6.388,6.388,0,0,1,.61

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	78685
Entropy (8bit):	6.020288496082252
Encrypted:	false
SSDEEP:	1536:OfGNbFoZJSUYOOaLnAW8+IcTOIobkhXwW5vxM:mGRFauOxLA/+IcTOuXK
MD5:	47BEA70318B724B1A99A1D571FF58807
SHA1:	B66FFE704AD2FE84DA8211D6351727568FD68B78
SHA-256:	11A188A204934185AB5649A1F838FE771C3D84C928BC8286EF999FB5B8DEDA69
SHA-512:	7995460AB00A68E3433EA72F19FCB1BCD8485BF4CAF978FF5C47193F110899AA824AC4A697285E908A5F66C693604A0227E60B3D3D948115C4C3490022B82E3D
Malicious:	false
URL:	https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAAIGNIUk0AAHomAACAhAAA+gAAAIDoAAB1MAAA6mAAADqYAAAXcJy6UTwAAAAGYktHRAD/AP8A/6C9p5MAAHq9SURBVHja7Z15fFTl9f/fd9ZM9n1PgCyEXSSRNYKCgAuiIipuVSuudavV1tq6W/WrtnWrrZbWDZUqUqUoCoIEQhBI2JesELKvM9mTWe7c3x83d5xAlkky8fv92ft5vfKC19znOWfuZ571POc5B1SoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKHifwGCRqsTNFrdj6VPq9XqtNofT9+wvutQyEyad8t9IaPPntFUd

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	46
Entropy (8bit):	4.25693885808983
Encrypted:	false
SSDEEP:	3:yJIiOMpnADIGGzL2p:aIijpA8hKp
MD5:	D925833F0B769B49AC1939506A259717
SHA1:	B696F545A79BA36AF15F667CA9A965E95801AEE5
SHA-256:	75360813DA9D1EC3CEE96BD7167750E08651BA56DB794B157FFBF767765D9451
SHA-512:	4D1D51BF3023D76A4EEA7F0B91B07C5101109E1F78B9F1883B2A5103A5DE8D772832C6D17A2C1B8F179976BF110AE8A43BCF57221EB6E4E4F75A92E282B16FEE
Malicious:	false
URL:	https://login.nuriapsicologia.com/vmiddle9999
Preview:	<h1>Please Allow Cookies Before Accessing</h1>

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32009)
Category:	dropped
Size (bytes):	57443
Entropy (8bit):	5.372940573746363
Encrypted:	false
SSDEEP:	1536:ABqF1tlfretkF7IKbVaqDRx3D7ym+d/Px25+1wtvGixn/TPRUbx3VDg/MvA5Gl:ABrkF7IyJz7ym+d/Po5+1wtvGiJig/Ml
MD5:	D580777BB3A28B94F6F1D18EE17AEDA3
SHA1:	E78833A2DB1AA97DA3F4A1994E6AF1F0D74D7CC7
SHA-256:	81188E8A76162C79DB4A5C10AC933C9E874C5B9EAE10E47956AD9DF704E01B28
SHA-512:	E3F5FFE3E7E54A7D640DF3BC06D336C9F936635D2594159B3EA5EDAEFBA6D6774060A532E0CBE0664FDC65806BD53E9BFC19C11F7946A5E157A9EC935C564378
Malicious:	false
Preview:	!function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.StringsVariantId,s=r.AllowedIdentitiesType;n.registerSource("str",function(e,o){if(e.WF_STR_SignupLink_AriaLabel_Text="Create a Microsoft account",e.WF_STR_SignupLink_AriaLabel_Generic_Text="Create a new account",e.CT_STR_CookieBanner_Link_AriaLabel="Learn more about Microsoft's Cookie Policy",e.WF_STR_HeaderDefault_Title=o.iLoginStringsVariantId===a.CombinedSigninSignupV2WelcomeTitle?"Welcome":"Sign in",e.STR_Footer_IcpLicense_Text=".ICP.13015306.-10",o.oAppCobranding&&o.oAppCobranding.friendlyAppName){var i=o.fBreakBrandingSigninString?"to continue to {0}":"Continue to {0}";e.WF_STR_App_Title=t.format(i,o.oAppCobranding.friendlyAppName)}switch(o.oAppCobranding&&o.oAppCobranding.signinDescription&&(e.WF_STR_Default_Desc=o.oAppCobrand

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24569), with no line terminators
Category:	dropped
Size (bytes):	24569
Entropy (8bit):	5.347406300276719
Encrypted:	false
SSDEEP:	384:3p6NKzratyoo3UoMpsZD7Ttsj/uGGcD2i:xznH6x
MD5:	9EC8D02E755832BF3C0A13CED466C23B
SHA1:	A887B14C75FD0F0061F5DA4E7D7ADBA1EFF46AA2
SHA-256:	3165360876DFC227720DD6B835AFCBBE7713DC7359C96EEDDBDD7B79935BD053
SHA-512:	811EC59F126246CA994E96F52D641BE5857F0A12F8A12C31BF0D0E9E348411B1C3E05793839A3905B660B766F677F76A14D3AB7B805A8AE78098AA5B92C4A45B
Malicious:	false
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.bowser=t():e.bowser=t()}(this,(function(){return function(e){var t={};function r(i){if(t[i])return t[i].exports;var n=t[i]={i:i,l:!1,exports:{}};return e[i].call(n.exports,n,n.exports,r),n.l=!0,n.exports}return r.m=e,r.c=t,r.d=function(e,t,i){r.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:i})},r.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},r.t=function(e,t){if(1&t&&(e=r(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var i=Object.create(null);if(r.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var n in e)r.d(i,n,function(t){return e[t]}.bind(null,n));return i},r.n=function(e){var t=e&&e.__esModule?function(){return e.defa

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	130102
Entropy (8bit):	5.338803784057064
Encrypted:	false
SSDEEP:	3072:0+mTq9mTuZEOHEXp6WXWkYVlMBMwMlJNbdV:STekBWkYVdLlJNbP
MD5:	5B858E3632B034B284650EF309396484
SHA1:	B16E03F395AB497C80CAFC50B40FB0FD6B6A9A07
SHA-256:	8116AF893DAF6F0D729A589A49DFE48F72DCD0B0B765B20E3668C06926C4E487
SHA-512:	DE5D1040EA5194E643E34FF793E1352AD941B155CAF08B0AFC679A7E0230E12FF61D491803409BD42C132FAF916057CADD75BED6249B7FED544AAF181BC86F73
Malicious:	false
URL:	https://61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js
Preview:	(window.telemetry_webpackJsonp=window.telemetry_webpackJsonp\|\|[]).push([[2],[,,,function(e,t,n){"use strict";n.r(t),n.d(t,"ValueKind",(function(){return r.e})),n.d(t,"EventLatency",(function(){return r.a})),n.d(t,"EventPersistence",(function(){return r.b})),n.d(t,"TraceLevel",(function(){return r.d})),n.d(t,"AppInsightsCore",(function(){return i.a})),n.d(t,"BaseCore",(function(){return d})),n.d(t,"_ExtendedInternalMessageId",(function(){return r.f})),n.d(t,"EventPropertyType",(function(){return r.c})),n.d(t,"ESPromise",(function(){return g})),n.d(t,"ESPromiseScheduler",(function(){return C})),n.d(t,"ValueSanitizer",(function(){return I})),n.d(t,"NotificationManager",(function(){return E.a})),n.d(t,"BaseTelemetryPlugin",(function(){return S.a})),n.d(t,"ProcessTelemetryContext",(function(){return N.a})),n.d(t,"MinChannelPriorty",(function(){return w.a})),n.d(t,"EventsDiscardedReason",(function(){return P.a})),n.d(t,"DiagnosticLogger",(function(){return c.a})),n.d(t,"LoggingSeverity",(fun

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24569), with no line terminators
Category:	downloaded
Size (bytes):	24569
Entropy (8bit):	5.347406300276719
Encrypted:	false
SSDEEP:	384:3p6NKzratyoo3UoMpsZD7Ttsj/uGGcD2i:xznH6x
MD5:	9EC8D02E755832BF3C0A13CED466C23B
SHA1:	A887B14C75FD0F0061F5DA4E7D7ADBA1EFF46AA2
SHA-256:	3165360876DFC227720DD6B835AFCBBE7713DC7359C96EEDDBDD7B79935BD053
SHA-512:	811EC59F126246CA994E96F52D641BE5857F0A12F8A12C31BF0D0E9E348411B1C3E05793839A3905B660B766F677F76A14D3AB7B805A8AE78098AA5B92C4A45B
Malicious:	false
URL:	https://unpkg.com/bowser@2.7.0/es5.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.bowser=t():e.bowser=t()}(this,(function(){return function(e){var t={};function r(i){if(t[i])return t[i].exports;var n=t[i]={i:i,l:!1,exports:{}};return e[i].call(n.exports,n,n.exports,r),n.l=!0,n.exports}return r.m=e,r.c=t,r.d=function(e,t,i){r.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:i})},r.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},r.t=function(e,t){if(1&t&&(e=r(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var i=Object.create(null);if(r.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var n in e)r.d(i,n,function(t){return e[t]}.bind(null,n));return i},r.n=function(e){var t=e&&e.__esModule?function(){return e.defa

Static File Info

General

File type:	RFC 822 mail, ASCII text, with very long lines (2260)
Entropy (8bit):	5.966165721354969
TrID:	E-Mail message (Var. 5) (54515/1) 100.00%
File name:	Alliance Bank Central Texas Open Benefits Enrollment.eml
File size:	25'766 bytes
MD5:	ae18a37725df1a69da4b9fc93136465a
SHA1:	0efef2c8152dfa9c9e1e6695c595328281ae95ab
SHA256:	03d5ff3d1c214266f45d3fc2c6fbb3eaea50600d1f343511925b2ac223dd683d
SHA512:	94b707f5961cfe451083c5132cea553ff4688c2821d30270e3574d9fc20874a7ba0dfae1f0e32e70fc5f776eff8e7bad26ef730b7d3721b7a520058623cf4da1
SSDEEP:	384:36azHi1hVyJFduxTwuCTXize2xUwmcq0XkBofmcq0Xe05pmcq0XaE1pmcq0Xl:OrEuxMXize2NLXNLXTLXTLXl
TLSH:	C0C2F823DF1F1E104F92899978CDBEDB5E2C1789EAC351B5112DF658825F0A2E2D32D8
File Content Preview:	Received: from CY8PR14MB6924.namprd14.prod.outlook.com (2603:10b6:930:7f::15). by PH8PR14MB7059.namprd14.prod.outlook.com with HTTPS; Monday/November/2024 20:18 PM. 17:57:46 +0000.Received: from CH0PR03CA0074.namprd03.prod.outlook.com (2603:10b6:610:cc::1

Static Mail

General

Subject:	Open Benefits Enrollment Eligible for rpetrini
From:	Alliance Bank Central Texas <HR-Benefits##@alliancebanktexas.com>
To:	rpetrini@alliancebanktexas.com
Cc:
BCC:
Date:	Monday-November-2024 20:18 PM
Communications:	[cid:image001.png@01D9AD87.FE3310D0] IT Operations Manager
Attachments:	Alliance Bank Central Texas Eligible Finance Insurance Benefits Open Enrollment Plan.shtml Alliance Bank Central Texas Health Insurance Benefits Open Enrollment Plan.shtml Alliance Bank Central Texas Life Insurance Benefits Open Enrollment Plan.shtml

Headers

Key	Value
Received	from d218-3.smtp-out.eu-west-2.amazonses.com (23.249.218.3) by CH2PEPF0000013D.mail.protection.outlook.com (10.167.244.69) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.7784.11 via Frontend Transport; Monday/November/2024 20:18 PM 17:55:16 +0000
Authentication-Results	spf=pass (sender IP is 23.249.218.3) smtp.mailfrom=eu-west-2.amazonses.com; dkim=pass (signature was verified) header.d=victorianvillagelies.com;dmarc=bestguesspass action=none header.from=victorianvillagelies.com;compauth=pass reason=109
Received-SPF	Pass (protection.outlook.com: domain of eu-west-2.amazonses.com designates 23.249.218.3 as permitted sender) receiver=protection.outlook.com; client-ip=23.249.218.3; helo=d218-3.smtp-out.eu-west-2.amazonses.com; pr=C
DKIM-Signature	v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=pgxy5mtxzx6eoyytua4nvvg26jbuf6lj; d=amazonses.com; t=1721238915; h=From:Subject:To:Content-Type:MIME-Version:Date:Message-Id:Feedback-ID; bh=R2OKRECKJLQzuZ4HM8MfNeonxyHTYFh5CFXDSi1KLAo=; b=M/jp28uce8YV8Hy8+u2yKeN1SCTEU636npPO7F4H8LQ8V+P2uuOY+bFqNhXRkyRP RR9mCglBASBmhaPhys7KfKLCYeBDm+aig0PO0i8yWJVAs31wrBWyz85CKbtU21z4dYu e7d6iQoxbA/GisOBsRkccrsEVfJ4JqV/+iqK3ozo=
From	Alliance Bank Central Texas <HR-Benefits##@alliancebanktexas.com>
Subject	Open Benefits Enrollment Eligible for rpetrini
To	rpetrini@alliancebanktexas.com
Content-Language	en-US
X-MS-Has-Attach	yes
X-MS-Exchange-Organization-SCL	1
X-MS-TNEF-Correlator
X-MS-Exchange-Organization-RecordReviewCfmType	0
Content-Type	multipart/mixed; boundary="_006_DM4PR16MB507115B45028E447E419310BA429ADM4PR16MB5071namp_"
Date	Monday-November-2024 20:18 PM
Message-ID	<010b0190c1d5882a-e7c982f4-43a6-4765-b6d0-5f2257217ddd-000000@eu-west-2.amazonses.com>
Feedback-ID	::1.eu-west-2.uQHn1aDxFPJetz452TvKPhpeW9UF0L3iW3vcPpMjX3k=:AmazonSES
X-SES-Outgoing	2024.07.17-23.249.218.3
Return-Path	010b0190c1d5882a-e7c982f4-43a6-4765-b6d0-5f2257217ddd-000000@eu-west-2.amazonses.com
X-MS-Exchange-Organization-ExpirationStartTime	(UTC)
X-MS-Exchange-Organization-ExpirationStartTimeReason	OriginalSubmit
X-MS-Exchange-Organization-ExpirationInterval	1:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason	OriginalSubmit
X-MS-Exchange-Organization-Network-Message-Id	a19fa367-e956-4079-164e-08dca6899de3
X-EOPAttributedMessage	0
X-EOPTenantAttributedMessage	57d83755-4267-426c-83d0-dda81f4d4391:0
X-MS-Exchange-Organization-MessageDirectionality	Incoming
X-MS-PublicTrafficType	Email
X-MS-TrafficTypeDiagnostic	CH2PEPF0000013D:EE_\|CY8PR14MB6924:EE_\|PH8PR14MB7059:EE_
X-MS-Exchange-Organization-AuthSource	CH2PEPF0000013D.namprd02.prod.outlook.com
X-MS-Exchange-Organization-AuthAs	Anonymous
X-MS-Office365-Filtering-Correlation-Id	a19fa367-e956-4079-164e-08dca6899de3
X-MS-Exchange-AtpMessageProperties	SA\|SL
X-Microsoft-Antispam	BCL:0;ARA:13230040\|1032899013\|32142699015\|4123199012\|5073199012\|5063199012\|4073199012\|69100299015;
X-Forefront-Antispam-Report	CIP:23.249.218.3;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:d218-3.smtp-out.eu-west-2.amazonses.com;PTR:d218-3.smtp-out.eu-west-2.amazonses.com;CAT:NONE;SFS:(13230040)(1032899013)(32142699015)(4123199012)(5073199012)(5063199012)(4073199012)(69100299015);DIR:INB;
X-MS-Exchange-CrossTenant-OriginalArrivalTime	17 Jul 2024 17:55:16.2840 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id	a19fa367-e956-4079-164e-08dca6899de3
X-MS-Exchange-CrossTenant-Id	57d83755-4267-426c-83d0-dda81f4d4391
X-MS-Exchange-CrossTenant-AuthSource	CH2PEPF0000013D.namprd02.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs	Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader	Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped	CY8PR14MB6924
X-MS-Exchange-Transport-EndToEndLatency	00:02:29.8357502
X-MS-Exchange-Processed-By-BccFoldering	15.20.7762.024
X-Microsoft-Antispam-Mailbox-Delivery	ucf:0;jmr:0;auth:0;dest:I;ENG:(910001)(944506478)(944626604)(920097)(930097)(140003)(1420198);
X-Microsoft-Antispam-Message-Info	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
MIME-Version	1.0

File Icon


Icon Hash:	46070c0a8e0c67d6

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-05T21:16:59.847876+0100	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	1	20.12.23.50	443	192.168.2.16	49711	TCP
2024-11-05T21:17:37.934513+0100	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	1	20.12.23.50	443	192.168.2.16	49713	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 5, 2024 21:16:44.382325888 CET	49673	443	192.168.2.16	204.79.197.203
Nov 5, 2024 21:16:44.694421053 CET	49673	443	192.168.2.16	204.79.197.203
Nov 5, 2024 21:16:45.295073032 CET	49673	443	192.168.2.16	204.79.197.203
Nov 5, 2024 21:16:46.495063066 CET	49673	443	192.168.2.16	204.79.197.203
Nov 5, 2024 21:16:47.250267029 CET	49689	80	192.168.2.16	192.229.211.108
Nov 5, 2024 21:16:48.908023119 CET	49673	443	192.168.2.16	204.79.197.203
Nov 5, 2024 21:16:50.403605938 CET	49702	443	192.168.2.16	2.23.194.22
Nov 5, 2024 21:16:50.403636932 CET	443	49702	2.23.194.22	192.168.2.16
Nov 5, 2024 21:16:50.403712988 CET	49702	443	192.168.2.16	2.23.194.22
Nov 5, 2024 21:16:50.404532909 CET	49702	443	192.168.2.16	2.23.194.22
Nov 5, 2024 21:16:50.404544115 CET	443	49702	2.23.194.22	192.168.2.16
Nov 5, 2024 21:16:51.251059055 CET	443	49702	2.23.194.22	192.168.2.16
Nov 5, 2024 21:16:51.252810955 CET	49702	443	192.168.2.16	2.23.194.22
Nov 5, 2024 21:16:51.254636049 CET	49702	443	192.168.2.16	2.23.194.22
Nov 5, 2024 21:16:51.254643917 CET	443	49702	2.23.194.22	192.168.2.16
Nov 5, 2024 21:16:51.254959106 CET	443	49702	2.23.194.22	192.168.2.16
Nov 5, 2024 21:16:51.281085968 CET	49702	443	192.168.2.16	2.23.194.22
Nov 5, 2024 21:16:51.327331066 CET	443	49702	2.23.194.22	192.168.2.16
Nov 5, 2024 21:16:51.523422956 CET	443	49702	2.23.194.22	192.168.2.16
Nov 5, 2024 21:16:51.523485899 CET	443	49702	2.23.194.22	192.168.2.16
Nov 5, 2024 21:16:51.523663044 CET	49702	443	192.168.2.16	2.23.194.22
Nov 5, 2024 21:16:51.523663044 CET	49702	443	192.168.2.16	2.23.194.22
Nov 5, 2024 21:16:51.523756027 CET	49702	443	192.168.2.16	2.23.194.22
Nov 5, 2024 21:16:51.523770094 CET	443	49702	2.23.194.22	192.168.2.16
Nov 5, 2024 21:16:51.562110901 CET	49705	443	192.168.2.16	2.23.194.22
Nov 5, 2024 21:16:51.562163115 CET	443	49705	2.23.194.22	192.168.2.16
Nov 5, 2024 21:16:51.562266111 CET	49705	443	192.168.2.16	2.23.194.22
Nov 5, 2024 21:16:51.562618971 CET	49705	443	192.168.2.16	2.23.194.22
Nov 5, 2024 21:16:51.562633991 CET	443	49705	2.23.194.22	192.168.2.16
Nov 5, 2024 21:16:52.403856993 CET	443	49705	2.23.194.22	192.168.2.16
Nov 5, 2024 21:16:52.403953075 CET	49705	443	192.168.2.16	2.23.194.22
Nov 5, 2024 21:16:52.410198927 CET	49705	443	192.168.2.16	2.23.194.22
Nov 5, 2024 21:16:52.410223007 CET	443	49705	2.23.194.22	192.168.2.16
Nov 5, 2024 21:16:52.410495043 CET	443	49705	2.23.194.22	192.168.2.16
Nov 5, 2024 21:16:52.414630890 CET	49705	443	192.168.2.16	2.23.194.22
Nov 5, 2024 21:16:52.455337048 CET	443	49705	2.23.194.22	192.168.2.16
Nov 5, 2024 21:16:52.552937031 CET	49678	443	192.168.2.16	20.189.173.10
Nov 5, 2024 21:16:52.656898975 CET	443	49705	2.23.194.22	192.168.2.16
Nov 5, 2024 21:16:52.656972885 CET	443	49705	2.23.194.22	192.168.2.16
Nov 5, 2024 21:16:52.657026052 CET	49705	443	192.168.2.16	2.23.194.22
Nov 5, 2024 21:16:52.657449007 CET	49705	443	192.168.2.16	2.23.194.22
Nov 5, 2024 21:16:52.657470942 CET	443	49705	2.23.194.22	192.168.2.16
Nov 5, 2024 21:16:52.657488108 CET	49705	443	192.168.2.16	2.23.194.22
Nov 5, 2024 21:16:52.657494068 CET	443	49705	2.23.194.22	192.168.2.16
Nov 5, 2024 21:16:52.868000031 CET	49678	443	192.168.2.16	20.189.173.10
Nov 5, 2024 21:16:53.474014044 CET	49678	443	192.168.2.16	20.189.173.10
Nov 5, 2024 21:16:53.713149071 CET	49673	443	192.168.2.16	204.79.197.203
Nov 5, 2024 21:16:54.012778044 CET	49707	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:16:54.012833118 CET	443	49707	20.190.159.75	192.168.2.16
Nov 5, 2024 21:16:54.013061047 CET	49707	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:16:54.014553070 CET	49707	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:16:54.014569044 CET	443	49707	20.190.159.75	192.168.2.16
Nov 5, 2024 21:16:54.687028885 CET	49678	443	192.168.2.16	20.189.173.10
Nov 5, 2024 21:16:55.098781109 CET	443	49707	20.190.159.75	192.168.2.16
Nov 5, 2024 21:16:55.098877907 CET	49707	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:16:55.169687033 CET	49707	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:16:55.169713974 CET	443	49707	20.190.159.75	192.168.2.16
Nov 5, 2024 21:16:55.170083046 CET	443	49707	20.190.159.75	192.168.2.16
Nov 5, 2024 21:16:55.171417952 CET	49707	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:16:55.171417952 CET	49707	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:16:55.171448946 CET	443	49707	20.190.159.75	192.168.2.16
Nov 5, 2024 21:16:55.601665020 CET	443	49707	20.190.159.75	192.168.2.16
Nov 5, 2024 21:16:55.601697922 CET	443	49707	20.190.159.75	192.168.2.16
Nov 5, 2024 21:16:55.601735115 CET	443	49707	20.190.159.75	192.168.2.16
Nov 5, 2024 21:16:55.601766109 CET	49707	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:16:55.601774931 CET	443	49707	20.190.159.75	192.168.2.16
Nov 5, 2024 21:16:55.601809978 CET	49707	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:16:55.602238894 CET	49707	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:16:55.602267981 CET	49707	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:16:55.602401972 CET	443	49707	20.190.159.75	192.168.2.16
Nov 5, 2024 21:16:55.602437019 CET	443	49707	20.190.159.75	192.168.2.16
Nov 5, 2024 21:16:55.602502108 CET	49707	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:16:55.756736040 CET	49708	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:16:55.756789923 CET	443	49708	20.190.159.75	192.168.2.16
Nov 5, 2024 21:16:55.756876945 CET	49708	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:16:55.757312059 CET	49708	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:16:55.757324934 CET	443	49708	20.190.159.75	192.168.2.16
Nov 5, 2024 21:16:56.845221996 CET	443	49708	20.190.159.75	192.168.2.16
Nov 5, 2024 21:16:56.846366882 CET	49708	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:16:56.846386909 CET	443	49708	20.190.159.75	192.168.2.16
Nov 5, 2024 21:16:56.847157001 CET	49708	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:16:56.847162008 CET	443	49708	20.190.159.75	192.168.2.16
Nov 5, 2024 21:16:56.847189903 CET	49708	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:16:56.847197056 CET	443	49708	20.190.159.75	192.168.2.16
Nov 5, 2024 21:16:57.016239882 CET	49680	80	192.168.2.16	192.229.211.108
Nov 5, 2024 21:16:57.095040083 CET	49678	443	192.168.2.16	20.189.173.10
Nov 5, 2024 21:16:57.207345009 CET	443	49708	20.190.159.75	192.168.2.16
Nov 5, 2024 21:16:57.207381964 CET	443	49708	20.190.159.75	192.168.2.16
Nov 5, 2024 21:16:57.207434893 CET	443	49708	20.190.159.75	192.168.2.16
Nov 5, 2024 21:16:57.207547903 CET	49708	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:16:57.207587004 CET	443	49708	20.190.159.75	192.168.2.16
Nov 5, 2024 21:16:57.207623005 CET	49708	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:16:57.210604906 CET	49708	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:16:57.210629940 CET	443	49708	20.190.159.75	192.168.2.16
Nov 5, 2024 21:16:57.210671902 CET	49708	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:16:57.210777998 CET	443	49708	20.190.159.75	192.168.2.16
Nov 5, 2024 21:16:57.210817099 CET	443	49708	20.190.159.75	192.168.2.16
Nov 5, 2024 21:16:57.210869074 CET	49708	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:16:57.291703939 CET	49709	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:16:57.291749954 CET	443	49709	20.190.159.75	192.168.2.16
Nov 5, 2024 21:16:57.292165041 CET	49709	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:16:57.292418957 CET	49709	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:16:57.292434931 CET	443	49709	20.190.159.75	192.168.2.16
Nov 5, 2024 21:16:57.321006060 CET	49680	80	192.168.2.16	192.229.211.108
Nov 5, 2024 21:16:57.936038017 CET	49680	80	192.168.2.16	192.229.211.108
Nov 5, 2024 21:16:58.373183966 CET	443	49709	20.190.159.75	192.168.2.16
Nov 5, 2024 21:16:58.373266935 CET	49709	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:16:58.375329018 CET	49709	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:16:58.375336885 CET	443	49709	20.190.159.75	192.168.2.16
Nov 5, 2024 21:16:58.375622988 CET	443	49709	20.190.159.75	192.168.2.16
Nov 5, 2024 21:16:58.376087904 CET	49709	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:16:58.376115084 CET	49709	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:16:58.376161098 CET	443	49709	20.190.159.75	192.168.2.16
Nov 5, 2024 21:16:58.638557911 CET	49711	443	192.168.2.16	20.12.23.50
Nov 5, 2024 21:16:58.638598919 CET	443	49711	20.12.23.50	192.168.2.16
Nov 5, 2024 21:16:58.638694048 CET	49711	443	192.168.2.16	20.12.23.50
Nov 5, 2024 21:16:58.639714003 CET	49711	443	192.168.2.16	20.12.23.50
Nov 5, 2024 21:16:58.639727116 CET	443	49711	20.12.23.50	192.168.2.16
Nov 5, 2024 21:16:58.770699978 CET	443	49709	20.190.159.75	192.168.2.16
Nov 5, 2024 21:16:58.770730019 CET	443	49709	20.190.159.75	192.168.2.16
Nov 5, 2024 21:16:58.770767927 CET	443	49709	20.190.159.75	192.168.2.16
Nov 5, 2024 21:16:58.770800114 CET	49709	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:16:58.770812035 CET	443	49709	20.190.159.75	192.168.2.16
Nov 5, 2024 21:16:58.770833969 CET	49709	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:16:58.771262884 CET	49709	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:16:58.771281958 CET	49709	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:16:58.771440029 CET	443	49709	20.190.159.75	192.168.2.16
Nov 5, 2024 21:16:58.771469116 CET	443	49709	20.190.159.75	192.168.2.16
Nov 5, 2024 21:16:58.771513939 CET	49709	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:16:58.832452059 CET	49712	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:16:58.832496881 CET	443	49712	20.190.159.75	192.168.2.16
Nov 5, 2024 21:16:58.832597971 CET	49712	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:16:58.832765102 CET	49712	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:16:58.832789898 CET	443	49712	20.190.159.75	192.168.2.16
Nov 5, 2024 21:16:59.146146059 CET	49680	80	192.168.2.16	192.229.211.108
Nov 5, 2024 21:16:59.494765997 CET	443	49711	20.12.23.50	192.168.2.16
Nov 5, 2024 21:16:59.494838953 CET	49711	443	192.168.2.16	20.12.23.50
Nov 5, 2024 21:16:59.496824026 CET	49711	443	192.168.2.16	20.12.23.50
Nov 5, 2024 21:16:59.496845961 CET	443	49711	20.12.23.50	192.168.2.16
Nov 5, 2024 21:16:59.497176886 CET	443	49711	20.12.23.50	192.168.2.16
Nov 5, 2024 21:16:59.537724018 CET	49711	443	192.168.2.16	20.12.23.50
Nov 5, 2024 21:16:59.564980030 CET	49711	443	192.168.2.16	20.12.23.50
Nov 5, 2024 21:16:59.611332893 CET	443	49711	20.12.23.50	192.168.2.16
Nov 5, 2024 21:16:59.847218037 CET	443	49711	20.12.23.50	192.168.2.16
Nov 5, 2024 21:16:59.847263098 CET	443	49711	20.12.23.50	192.168.2.16
Nov 5, 2024 21:16:59.847271919 CET	443	49711	20.12.23.50	192.168.2.16
Nov 5, 2024 21:16:59.847294092 CET	443	49711	20.12.23.50	192.168.2.16
Nov 5, 2024 21:16:59.847332954 CET	443	49711	20.12.23.50	192.168.2.16
Nov 5, 2024 21:16:59.847349882 CET	49711	443	192.168.2.16	20.12.23.50
Nov 5, 2024 21:16:59.847390890 CET	443	49711	20.12.23.50	192.168.2.16
Nov 5, 2024 21:16:59.847415924 CET	49711	443	192.168.2.16	20.12.23.50
Nov 5, 2024 21:16:59.847444057 CET	49711	443	192.168.2.16	20.12.23.50
Nov 5, 2024 21:16:59.847623110 CET	443	49711	20.12.23.50	192.168.2.16
Nov 5, 2024 21:16:59.847681999 CET	49711	443	192.168.2.16	20.12.23.50
Nov 5, 2024 21:16:59.847691059 CET	443	49711	20.12.23.50	192.168.2.16
Nov 5, 2024 21:16:59.847737074 CET	443	49711	20.12.23.50	192.168.2.16
Nov 5, 2024 21:16:59.847785950 CET	49711	443	192.168.2.16	20.12.23.50
Nov 5, 2024 21:16:59.860177994 CET	49711	443	192.168.2.16	20.12.23.50
Nov 5, 2024 21:16:59.860200882 CET	443	49711	20.12.23.50	192.168.2.16
Nov 5, 2024 21:16:59.860223055 CET	49711	443	192.168.2.16	20.12.23.50
Nov 5, 2024 21:16:59.860229015 CET	443	49711	20.12.23.50	192.168.2.16
Nov 5, 2024 21:16:59.909702063 CET	443	49712	20.190.159.75	192.168.2.16
Nov 5, 2024 21:16:59.910298109 CET	49712	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:16:59.910327911 CET	443	49712	20.190.159.75	192.168.2.16
Nov 5, 2024 21:16:59.911108971 CET	49712	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:16:59.911113977 CET	443	49712	20.190.159.75	192.168.2.16
Nov 5, 2024 21:16:59.911178112 CET	49712	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:16:59.911187887 CET	443	49712	20.190.159.75	192.168.2.16
Nov 5, 2024 21:17:00.292309999 CET	443	49712	20.190.159.75	192.168.2.16
Nov 5, 2024 21:17:00.292334080 CET	443	49712	20.190.159.75	192.168.2.16
Nov 5, 2024 21:17:00.292382002 CET	443	49712	20.190.159.75	192.168.2.16
Nov 5, 2024 21:17:00.292435884 CET	49712	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:17:00.292447090 CET	443	49712	20.190.159.75	192.168.2.16
Nov 5, 2024 21:17:00.292469025 CET	49712	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:17:00.292830944 CET	49712	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:17:00.292838097 CET	443	49712	20.190.159.75	192.168.2.16
Nov 5, 2024 21:17:00.292860031 CET	49712	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:17:00.292995930 CET	443	49712	20.190.159.75	192.168.2.16
Nov 5, 2024 21:17:00.293031931 CET	443	49712	20.190.159.75	192.168.2.16
Nov 5, 2024 21:17:00.293078899 CET	49712	443	192.168.2.16	20.190.159.75
Nov 5, 2024 21:17:01.548003912 CET	49680	80	192.168.2.16	192.229.211.108
Nov 5, 2024 21:17:01.897018909 CET	49678	443	192.168.2.16	20.189.173.10
Nov 5, 2024 21:17:03.315001965 CET	49673	443	192.168.2.16	204.79.197.203
Nov 5, 2024 21:17:06.355155945 CET	49680	80	192.168.2.16	192.229.211.108
Nov 5, 2024 21:17:11.507960081 CET	49678	443	192.168.2.16	20.189.173.10
Nov 5, 2024 21:17:15.957000017 CET	49680	80	192.168.2.16	192.229.211.108
Nov 5, 2024 21:17:36.411197901 CET	49713	443	192.168.2.16	20.12.23.50
Nov 5, 2024 21:17:36.411252975 CET	443	49713	20.12.23.50	192.168.2.16
Nov 5, 2024 21:17:36.411351919 CET	49713	443	192.168.2.16	20.12.23.50
Nov 5, 2024 21:17:36.413707972 CET	49713	443	192.168.2.16	20.12.23.50
Nov 5, 2024 21:17:36.413723946 CET	443	49713	20.12.23.50	192.168.2.16
Nov 5, 2024 21:17:37.631594896 CET	443	49713	20.12.23.50	192.168.2.16
Nov 5, 2024 21:17:37.631695986 CET	49713	443	192.168.2.16	20.12.23.50
Nov 5, 2024 21:17:37.633208990 CET	49713	443	192.168.2.16	20.12.23.50
Nov 5, 2024 21:17:37.633229017 CET	443	49713	20.12.23.50	192.168.2.16
Nov 5, 2024 21:17:37.633472919 CET	443	49713	20.12.23.50	192.168.2.16
Nov 5, 2024 21:17:37.635096073 CET	49713	443	192.168.2.16	20.12.23.50
Nov 5, 2024 21:17:37.675328016 CET	443	49713	20.12.23.50	192.168.2.16
Nov 5, 2024 21:17:37.932565928 CET	443	49713	20.12.23.50	192.168.2.16
Nov 5, 2024 21:17:37.932593107 CET	443	49713	20.12.23.50	192.168.2.16
Nov 5, 2024 21:17:37.932607889 CET	443	49713	20.12.23.50	192.168.2.16
Nov 5, 2024 21:17:37.932712078 CET	49713	443	192.168.2.16	20.12.23.50
Nov 5, 2024 21:17:37.932743073 CET	443	49713	20.12.23.50	192.168.2.16
Nov 5, 2024 21:17:37.932791948 CET	49713	443	192.168.2.16	20.12.23.50
Nov 5, 2024 21:17:37.934313059 CET	443	49713	20.12.23.50	192.168.2.16
Nov 5, 2024 21:17:37.934351921 CET	443	49713	20.12.23.50	192.168.2.16
Nov 5, 2024 21:17:37.934376001 CET	49713	443	192.168.2.16	20.12.23.50
Nov 5, 2024 21:17:37.934391975 CET	443	49713	20.12.23.50	192.168.2.16
Nov 5, 2024 21:17:37.934410095 CET	49713	443	192.168.2.16	20.12.23.50
Nov 5, 2024 21:17:37.934411049 CET	443	49713	20.12.23.50	192.168.2.16
Nov 5, 2024 21:17:37.934451103 CET	49713	443	192.168.2.16	20.12.23.50
Nov 5, 2024 21:17:37.935328960 CET	49713	443	192.168.2.16	20.12.23.50
Nov 5, 2024 21:17:37.935349941 CET	443	49713	20.12.23.50	192.168.2.16
Nov 5, 2024 21:17:37.935363054 CET	49713	443	192.168.2.16	20.12.23.50
Nov 5, 2024 21:17:37.935372114 CET	443	49713	20.12.23.50	192.168.2.16
Nov 5, 2024 21:17:50.137191057 CET	49719	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:50.137243032 CET	443	49719	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:50.137325048 CET	49719	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:50.137569904 CET	49719	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:50.137583971 CET	443	49719	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:50.138015985 CET	49720	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:50.138055086 CET	443	49720	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:50.138109922 CET	49720	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:50.138269901 CET	49720	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:50.138283968 CET	443	49720	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:50.801271915 CET	443	49719	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:50.801587105 CET	49719	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:50.801606894 CET	443	49719	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:50.802684069 CET	443	49719	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:50.802751064 CET	49719	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:50.803761005 CET	49719	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:50.803847075 CET	443	49719	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:50.803935051 CET	49719	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:50.803942919 CET	443	49719	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:50.804091930 CET	443	49720	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:50.804274082 CET	49720	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:50.804289103 CET	443	49720	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:50.805320978 CET	443	49720	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:50.805386066 CET	49720	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:50.806196928 CET	49720	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:50.806257963 CET	443	49720	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:50.854878902 CET	49720	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:50.854878902 CET	49719	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:50.854909897 CET	443	49720	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:50.902832031 CET	49720	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:50.955564976 CET	443	49719	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:50.956213951 CET	443	49719	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:50.956274033 CET	49719	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:50.956720114 CET	49719	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:50.956736088 CET	443	49719	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:50.989870071 CET	49721	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:50.989923954 CET	443	49721	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:50.989996910 CET	49721	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:50.990107059 CET	49720	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:50.990325928 CET	49721	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:50.990344048 CET	443	49721	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:51.011806965 CET	49722	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:17:51.011843920 CET	443	49722	216.58.206.36	192.168.2.16
Nov 5, 2024 21:17:51.011920929 CET	49722	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:17:51.012109995 CET	49722	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:17:51.012121916 CET	443	49722	216.58.206.36	192.168.2.16
Nov 5, 2024 21:17:51.035336018 CET	443	49720	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:52.241996050 CET	443	49721	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:52.242284060 CET	49721	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:52.242301941 CET	443	49721	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:52.242675066 CET	443	49721	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:52.242970943 CET	49721	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:52.243033886 CET	443	49721	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:52.246328115 CET	443	49720	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:52.246356964 CET	443	49720	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:52.246365070 CET	443	49720	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:52.246387959 CET	443	49720	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:52.246397972 CET	443	49720	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:52.246407032 CET	443	49720	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:52.246419907 CET	49720	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:52.246434927 CET	443	49720	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:52.246440887 CET	443	49720	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:52.246483088 CET	49720	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:52.246507883 CET	49720	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:52.247911930 CET	443	49722	216.58.206.36	192.168.2.16
Nov 5, 2024 21:17:52.248094082 CET	49722	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:17:52.248109102 CET	443	49722	216.58.206.36	192.168.2.16
Nov 5, 2024 21:17:52.249277115 CET	443	49722	216.58.206.36	192.168.2.16
Nov 5, 2024 21:17:52.249377966 CET	49722	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:17:52.250128031 CET	443	49720	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:52.250137091 CET	443	49720	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:52.250169992 CET	443	49720	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:52.250189066 CET	49720	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:52.250195980 CET	443	49720	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:52.250221014 CET	49720	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:52.251049042 CET	49722	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:17:52.251115084 CET	443	49722	216.58.206.36	192.168.2.16
Nov 5, 2024 21:17:52.252480030 CET	443	49720	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:52.252505064 CET	443	49720	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:52.252566099 CET	49720	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:52.252573967 CET	443	49720	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:52.252625942 CET	49720	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:52.254749060 CET	443	49720	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:52.254817009 CET	49720	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:52.254820108 CET	443	49720	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:52.254863024 CET	49720	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:52.255124092 CET	49720	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:52.255135059 CET	443	49720	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:52.270968914 CET	49723	443	192.168.2.16	172.217.16.132
Nov 5, 2024 21:17:52.270992041 CET	443	49723	172.217.16.132	192.168.2.16
Nov 5, 2024 21:17:52.271056890 CET	49723	443	192.168.2.16	172.217.16.132
Nov 5, 2024 21:17:52.271245003 CET	49723	443	192.168.2.16	172.217.16.132
Nov 5, 2024 21:17:52.271265030 CET	443	49723	172.217.16.132	192.168.2.16
Nov 5, 2024 21:17:52.271898031 CET	49724	443	192.168.2.16	104.17.246.203
Nov 5, 2024 21:17:52.271928072 CET	443	49724	104.17.246.203	192.168.2.16
Nov 5, 2024 21:17:52.271996021 CET	49724	443	192.168.2.16	104.17.246.203
Nov 5, 2024 21:17:52.272156000 CET	49725	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:52.272186041 CET	443	49725	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:52.272315025 CET	49724	443	192.168.2.16	104.17.246.203
Nov 5, 2024 21:17:52.272317886 CET	49725	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:52.272329092 CET	443	49724	104.17.246.203	192.168.2.16
Nov 5, 2024 21:17:52.272458076 CET	49725	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:52.272465944 CET	443	49725	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:52.288813114 CET	49721	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:52.303848982 CET	49722	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:17:52.303860903 CET	443	49722	216.58.206.36	192.168.2.16
Nov 5, 2024 21:17:52.350822926 CET	49722	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:17:52.880439043 CET	443	49725	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:52.880718946 CET	49725	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:52.880736113 CET	443	49725	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:52.881902933 CET	443	49725	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:52.882010937 CET	49725	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:52.882929087 CET	49725	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:52.882998943 CET	443	49725	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:52.883063078 CET	49725	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:52.884860039 CET	443	49724	104.17.246.203	192.168.2.16
Nov 5, 2024 21:17:52.885044098 CET	49724	443	192.168.2.16	104.17.246.203
Nov 5, 2024 21:17:52.885061026 CET	443	49724	104.17.246.203	192.168.2.16
Nov 5, 2024 21:17:52.886260033 CET	443	49724	104.17.246.203	192.168.2.16
Nov 5, 2024 21:17:52.886365891 CET	49724	443	192.168.2.16	104.17.246.203
Nov 5, 2024 21:17:52.887268066 CET	49724	443	192.168.2.16	104.17.246.203
Nov 5, 2024 21:17:52.887348890 CET	443	49724	104.17.246.203	192.168.2.16
Nov 5, 2024 21:17:52.887408018 CET	49724	443	192.168.2.16	104.17.246.203
Nov 5, 2024 21:17:52.927325010 CET	443	49725	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:52.929802895 CET	49724	443	192.168.2.16	104.17.246.203
Nov 5, 2024 21:17:52.929802895 CET	49725	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:52.929812908 CET	443	49725	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:52.929814100 CET	443	49724	104.17.246.203	192.168.2.16
Nov 5, 2024 21:17:52.970840931 CET	49725	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:52.970927000 CET	49724	443	192.168.2.16	104.17.246.203
Nov 5, 2024 21:17:53.024424076 CET	443	49725	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:53.024482965 CET	443	49725	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:53.024542093 CET	49725	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:53.025057077 CET	49725	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:53.025072098 CET	443	49725	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:53.026659012 CET	49726	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:53.026707888 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:53.026884079 CET	49726	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:53.027076006 CET	49726	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:53.027092934 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:53.057352066 CET	443	49724	104.17.246.203	192.168.2.16
Nov 5, 2024 21:17:53.057395935 CET	443	49724	104.17.246.203	192.168.2.16
Nov 5, 2024 21:17:53.057436943 CET	443	49724	104.17.246.203	192.168.2.16
Nov 5, 2024 21:17:53.057466030 CET	49724	443	192.168.2.16	104.17.246.203
Nov 5, 2024 21:17:53.057486057 CET	443	49724	104.17.246.203	192.168.2.16
Nov 5, 2024 21:17:53.057523966 CET	443	49724	104.17.246.203	192.168.2.16
Nov 5, 2024 21:17:53.057547092 CET	49724	443	192.168.2.16	104.17.246.203
Nov 5, 2024 21:17:53.057554007 CET	443	49724	104.17.246.203	192.168.2.16
Nov 5, 2024 21:17:53.057595968 CET	443	49724	104.17.246.203	192.168.2.16
Nov 5, 2024 21:17:53.057601929 CET	49724	443	192.168.2.16	104.17.246.203
Nov 5, 2024 21:17:53.057607889 CET	443	49724	104.17.246.203	192.168.2.16
Nov 5, 2024 21:17:53.057657957 CET	49724	443	192.168.2.16	104.17.246.203
Nov 5, 2024 21:17:53.057663918 CET	443	49724	104.17.246.203	192.168.2.16
Nov 5, 2024 21:17:53.058190107 CET	443	49724	104.17.246.203	192.168.2.16
Nov 5, 2024 21:17:53.058239937 CET	49724	443	192.168.2.16	104.17.246.203
Nov 5, 2024 21:17:53.058248043 CET	443	49724	104.17.246.203	192.168.2.16
Nov 5, 2024 21:17:53.112833023 CET	49724	443	192.168.2.16	104.17.246.203
Nov 5, 2024 21:17:53.143882990 CET	443	49723	172.217.16.132	192.168.2.16
Nov 5, 2024 21:17:53.144416094 CET	49723	443	192.168.2.16	172.217.16.132
Nov 5, 2024 21:17:53.144437075 CET	443	49723	172.217.16.132	192.168.2.16
Nov 5, 2024 21:17:53.145430088 CET	443	49723	172.217.16.132	192.168.2.16
Nov 5, 2024 21:17:53.145518064 CET	49723	443	192.168.2.16	172.217.16.132
Nov 5, 2024 21:17:53.147128105 CET	49723	443	192.168.2.16	172.217.16.132
Nov 5, 2024 21:17:53.147192001 CET	443	49723	172.217.16.132	192.168.2.16
Nov 5, 2024 21:17:53.147269011 CET	49723	443	192.168.2.16	172.217.16.132
Nov 5, 2024 21:17:53.147277117 CET	443	49723	172.217.16.132	192.168.2.16
Nov 5, 2024 21:17:53.176201105 CET	443	49724	104.17.246.203	192.168.2.16
Nov 5, 2024 21:17:53.176279068 CET	443	49724	104.17.246.203	192.168.2.16
Nov 5, 2024 21:17:53.176342010 CET	49724	443	192.168.2.16	104.17.246.203
Nov 5, 2024 21:17:53.176342964 CET	443	49724	104.17.246.203	192.168.2.16
Nov 5, 2024 21:17:53.176353931 CET	443	49724	104.17.246.203	192.168.2.16
Nov 5, 2024 21:17:53.176424980 CET	49724	443	192.168.2.16	104.17.246.203
Nov 5, 2024 21:17:53.176445961 CET	443	49724	104.17.246.203	192.168.2.16
Nov 5, 2024 21:17:53.176539898 CET	443	49724	104.17.246.203	192.168.2.16
Nov 5, 2024 21:17:53.176573038 CET	443	49724	104.17.246.203	192.168.2.16
Nov 5, 2024 21:17:53.176595926 CET	49724	443	192.168.2.16	104.17.246.203
Nov 5, 2024 21:17:53.176598072 CET	443	49724	104.17.246.203	192.168.2.16
Nov 5, 2024 21:17:53.176606894 CET	443	49724	104.17.246.203	192.168.2.16
Nov 5, 2024 21:17:53.176664114 CET	49724	443	192.168.2.16	104.17.246.203
Nov 5, 2024 21:17:53.176672935 CET	443	49724	104.17.246.203	192.168.2.16
Nov 5, 2024 21:17:53.176712990 CET	443	49724	104.17.246.203	192.168.2.16
Nov 5, 2024 21:17:53.176737070 CET	49724	443	192.168.2.16	104.17.246.203
Nov 5, 2024 21:17:53.176764965 CET	49724	443	192.168.2.16	104.17.246.203
Nov 5, 2024 21:17:53.178667068 CET	49724	443	192.168.2.16	104.17.246.203
Nov 5, 2024 21:17:53.178683043 CET	443	49724	104.17.246.203	192.168.2.16
Nov 5, 2024 21:17:53.191979885 CET	49727	443	192.168.2.16	104.17.248.203
Nov 5, 2024 21:17:53.192039967 CET	443	49727	104.17.248.203	192.168.2.16
Nov 5, 2024 21:17:53.192131996 CET	49727	443	192.168.2.16	104.17.248.203
Nov 5, 2024 21:17:53.192400932 CET	49727	443	192.168.2.16	104.17.248.203
Nov 5, 2024 21:17:53.192425013 CET	443	49727	104.17.248.203	192.168.2.16
Nov 5, 2024 21:17:53.192819118 CET	49723	443	192.168.2.16	172.217.16.132
Nov 5, 2024 21:17:53.406265974 CET	443	49723	172.217.16.132	192.168.2.16
Nov 5, 2024 21:17:53.406306982 CET	443	49723	172.217.16.132	192.168.2.16
Nov 5, 2024 21:17:53.406375885 CET	49723	443	192.168.2.16	172.217.16.132
Nov 5, 2024 21:17:53.406404018 CET	443	49723	172.217.16.132	192.168.2.16
Nov 5, 2024 21:17:53.407690048 CET	49723	443	192.168.2.16	172.217.16.132
Nov 5, 2024 21:17:53.407741070 CET	443	49723	172.217.16.132	192.168.2.16
Nov 5, 2024 21:17:53.407798052 CET	49723	443	192.168.2.16	172.217.16.132
Nov 5, 2024 21:17:53.420049906 CET	49721	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:53.427119017 CET	49729	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:17:53.427150965 CET	443	49729	216.58.206.36	192.168.2.16
Nov 5, 2024 21:17:53.427273035 CET	49729	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:17:53.427458048 CET	49729	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:17:53.427474976 CET	443	49729	216.58.206.36	192.168.2.16
Nov 5, 2024 21:17:53.467340946 CET	443	49721	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:53.574107885 CET	443	49721	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:53.574202061 CET	443	49721	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:53.574323893 CET	49721	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:53.574939013 CET	49721	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:53.574973106 CET	443	49721	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:53.589119911 CET	49730	53	192.168.2.16	1.1.1.1
Nov 5, 2024 21:17:53.594090939 CET	53	49730	1.1.1.1	192.168.2.16
Nov 5, 2024 21:17:53.594177008 CET	49730	53	192.168.2.16	1.1.1.1
Nov 5, 2024 21:17:53.594258070 CET	49730	53	192.168.2.16	1.1.1.1
Nov 5, 2024 21:17:53.594268084 CET	49730	53	192.168.2.16	1.1.1.1
Nov 5, 2024 21:17:53.599586010 CET	53	49730	1.1.1.1	192.168.2.16
Nov 5, 2024 21:17:53.599713087 CET	53	49730	1.1.1.1	192.168.2.16
Nov 5, 2024 21:17:53.659780979 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:53.660079002 CET	49726	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:53.660094976 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:53.660439968 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:53.661010027 CET	49726	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:53.661010027 CET	49726	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:53.661026001 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:53.661076069 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:53.702816010 CET	49726	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:53.812614918 CET	443	49727	104.17.248.203	192.168.2.16
Nov 5, 2024 21:17:53.812853098 CET	49727	443	192.168.2.16	104.17.248.203
Nov 5, 2024 21:17:53.812885046 CET	443	49727	104.17.248.203	192.168.2.16
Nov 5, 2024 21:17:53.813924074 CET	443	49727	104.17.248.203	192.168.2.16
Nov 5, 2024 21:17:53.813992977 CET	49727	443	192.168.2.16	104.17.248.203
Nov 5, 2024 21:17:53.814265013 CET	49727	443	192.168.2.16	104.17.248.203
Nov 5, 2024 21:17:53.814325094 CET	443	49727	104.17.248.203	192.168.2.16
Nov 5, 2024 21:17:53.814392090 CET	49727	443	192.168.2.16	104.17.248.203
Nov 5, 2024 21:17:53.814399958 CET	443	49727	104.17.248.203	192.168.2.16
Nov 5, 2024 21:17:53.834887981 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:53.834947109 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:53.834980011 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:53.835010052 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:53.835042000 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:53.835052967 CET	49726	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:53.835063934 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:53.835088015 CET	49726	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:53.835108995 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:53.835125923 CET	49726	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:53.835133076 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:53.835176945 CET	49726	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:53.835182905 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:53.835632086 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:53.835732937 CET	49726	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:53.835751057 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:53.862813950 CET	49727	443	192.168.2.16	104.17.248.203
Nov 5, 2024 21:17:53.862845898 CET	49730	53	192.168.2.16	1.1.1.1
Nov 5, 2024 21:17:53.863214970 CET	49731	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:53.863260984 CET	443	49731	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:53.863513947 CET	49731	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:53.863719940 CET	49731	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:53.863732100 CET	443	49731	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:53.878839016 CET	49726	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:53.915489912 CET	53	49730	1.1.1.1	192.168.2.16
Nov 5, 2024 21:17:53.959690094 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:53.959767103 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:53.959793091 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:53.959831953 CET	49726	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:53.959850073 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:53.960020065 CET	49726	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:53.960031033 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:53.960243940 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:53.960329056 CET	49726	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:53.960336924 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:53.960410118 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:53.960499048 CET	49726	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:53.960505962 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:53.961102962 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:53.961132050 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:53.961165905 CET	49726	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:53.961174011 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:53.961257935 CET	49726	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:53.961749077 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:53.961801052 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:53.961828947 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:53.961850882 CET	49726	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:53.961860895 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:53.962188959 CET	49726	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:53.962196112 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:53.962455988 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:53.962490082 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:53.962517023 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:53.962519884 CET	49726	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:53.962528944 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:53.962553978 CET	49726	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:53.978471994 CET	443	49727	104.17.248.203	192.168.2.16
Nov 5, 2024 21:17:53.978519917 CET	443	49727	104.17.248.203	192.168.2.16
Nov 5, 2024 21:17:53.978560925 CET	443	49727	104.17.248.203	192.168.2.16
Nov 5, 2024 21:17:53.978578091 CET	49727	443	192.168.2.16	104.17.248.203
Nov 5, 2024 21:17:53.978607893 CET	443	49727	104.17.248.203	192.168.2.16
Nov 5, 2024 21:17:53.978656054 CET	49727	443	192.168.2.16	104.17.248.203
Nov 5, 2024 21:17:53.978663921 CET	443	49727	104.17.248.203	192.168.2.16
Nov 5, 2024 21:17:53.978816986 CET	443	49727	104.17.248.203	192.168.2.16
Nov 5, 2024 21:17:53.978849888 CET	443	49727	104.17.248.203	192.168.2.16
Nov 5, 2024 21:17:53.978908062 CET	49727	443	192.168.2.16	104.17.248.203
Nov 5, 2024 21:17:53.978918076 CET	443	49727	104.17.248.203	192.168.2.16
Nov 5, 2024 21:17:53.978961945 CET	49727	443	192.168.2.16	104.17.248.203
Nov 5, 2024 21:17:53.978967905 CET	443	49727	104.17.248.203	192.168.2.16
Nov 5, 2024 21:17:54.005827904 CET	49726	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.021836042 CET	49727	443	192.168.2.16	104.17.248.203
Nov 5, 2024 21:17:54.021863937 CET	443	49727	104.17.248.203	192.168.2.16
Nov 5, 2024 21:17:54.068819046 CET	49727	443	192.168.2.16	104.17.248.203
Nov 5, 2024 21:17:54.075556040 CET	53	49730	1.1.1.1	192.168.2.16
Nov 5, 2024 21:17:54.075623035 CET	49730	53	192.168.2.16	1.1.1.1
Nov 5, 2024 21:17:54.079607964 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.079673052 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.079699993 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.079772949 CET	49726	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.079791069 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.079853058 CET	49726	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.079864979 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.079875946 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.079925060 CET	49726	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.080140114 CET	49726	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.080152988 CET	443	49726	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.093255043 CET	49732	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.093288898 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.093472958 CET	49732	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.093908072 CET	49732	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.093921900 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.095078945 CET	443	49727	104.17.248.203	192.168.2.16
Nov 5, 2024 21:17:54.095155954 CET	443	49727	104.17.248.203	192.168.2.16
Nov 5, 2024 21:17:54.095201969 CET	443	49727	104.17.248.203	192.168.2.16
Nov 5, 2024 21:17:54.095227003 CET	49727	443	192.168.2.16	104.17.248.203
Nov 5, 2024 21:17:54.095277071 CET	443	49727	104.17.248.203	192.168.2.16
Nov 5, 2024 21:17:54.095443964 CET	443	49727	104.17.248.203	192.168.2.16
Nov 5, 2024 21:17:54.095488071 CET	443	49727	104.17.248.203	192.168.2.16
Nov 5, 2024 21:17:54.095500946 CET	49727	443	192.168.2.16	104.17.248.203
Nov 5, 2024 21:17:54.095515966 CET	443	49727	104.17.248.203	192.168.2.16
Nov 5, 2024 21:17:54.095529079 CET	49727	443	192.168.2.16	104.17.248.203
Nov 5, 2024 21:17:54.096249104 CET	443	49727	104.17.248.203	192.168.2.16
Nov 5, 2024 21:17:54.096287012 CET	443	49727	104.17.248.203	192.168.2.16
Nov 5, 2024 21:17:54.096343040 CET	49727	443	192.168.2.16	104.17.248.203
Nov 5, 2024 21:17:54.096360922 CET	443	49727	104.17.248.203	192.168.2.16
Nov 5, 2024 21:17:54.096394062 CET	443	49727	104.17.248.203	192.168.2.16
Nov 5, 2024 21:17:54.096401930 CET	49727	443	192.168.2.16	104.17.248.203
Nov 5, 2024 21:17:54.096432924 CET	49727	443	192.168.2.16	104.17.248.203
Nov 5, 2024 21:17:54.096584082 CET	49727	443	192.168.2.16	104.17.248.203
Nov 5, 2024 21:17:54.096606016 CET	443	49727	104.17.248.203	192.168.2.16
Nov 5, 2024 21:17:54.102236032 CET	49733	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.102261066 CET	443	49733	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.102408886 CET	49733	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.102613926 CET	49733	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.102626085 CET	443	49733	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.281795025 CET	443	49729	216.58.206.36	192.168.2.16
Nov 5, 2024 21:17:54.281991005 CET	49729	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:17:54.282000065 CET	443	49729	216.58.206.36	192.168.2.16
Nov 5, 2024 21:17:54.283026934 CET	443	49729	216.58.206.36	192.168.2.16
Nov 5, 2024 21:17:54.283098936 CET	49729	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:17:54.283339024 CET	49729	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:17:54.283396959 CET	443	49729	216.58.206.36	192.168.2.16
Nov 5, 2024 21:17:54.283448935 CET	49729	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:17:54.323801994 CET	49729	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:17:54.323811054 CET	443	49729	216.58.206.36	192.168.2.16
Nov 5, 2024 21:17:54.368803978 CET	49729	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:17:54.546118021 CET	443	49729	216.58.206.36	192.168.2.16
Nov 5, 2024 21:17:54.546250105 CET	443	49729	216.58.206.36	192.168.2.16
Nov 5, 2024 21:17:54.546590090 CET	49729	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:17:54.546618938 CET	443	49729	216.58.206.36	192.168.2.16
Nov 5, 2024 21:17:54.546962976 CET	49729	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:17:54.547000885 CET	443	49729	216.58.206.36	192.168.2.16
Nov 5, 2024 21:17:54.547055006 CET	49729	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:17:54.555166006 CET	443	49731	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:54.555392027 CET	49731	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:54.555407047 CET	443	49731	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:54.556418896 CET	443	49731	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:54.556505919 CET	49731	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:54.556767941 CET	49731	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:54.556817055 CET	443	49731	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:54.556880951 CET	49731	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:54.599335909 CET	443	49731	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:54.607795954 CET	49731	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:54.607815027 CET	443	49731	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:54.655790091 CET	49731	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:54.699160099 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.699383974 CET	49732	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.699392080 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.700453043 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.700522900 CET	49732	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.700798988 CET	49732	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.700860023 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.700922966 CET	49732	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.700928926 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.709511042 CET	443	49733	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.709702015 CET	49733	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.709721088 CET	443	49733	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.710726023 CET	443	49733	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.710808039 CET	49733	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.711045027 CET	49733	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.711102962 CET	443	49733	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.711137056 CET	49733	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.714086056 CET	443	49731	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:54.714160919 CET	443	49731	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:54.714493990 CET	49731	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:54.714689016 CET	49731	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:54.714704037 CET	443	49731	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:54.751813889 CET	49733	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.751816034 CET	49732	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.751823902 CET	443	49733	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.799808979 CET	49733	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.851397991 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.851447105 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.851480961 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.851512909 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.851536036 CET	49732	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.851542950 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.851553917 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.851562977 CET	49732	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.851596117 CET	49732	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.851603031 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.852673054 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.852727890 CET	49732	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.852732897 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.852909088 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.852958918 CET	49732	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.852966070 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.853400946 CET	443	49733	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.853507996 CET	443	49733	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.853547096 CET	443	49733	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.853571892 CET	49733	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.853584051 CET	443	49733	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.853626013 CET	49733	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.853630066 CET	443	49733	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.853737116 CET	443	49733	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.853775978 CET	443	49733	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.853820086 CET	49733	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.853826046 CET	443	49733	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.854490995 CET	49733	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.854496002 CET	443	49733	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.871949911 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.871978998 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.872040987 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.872312069 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.872323990 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.895800114 CET	49732	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.911814928 CET	49733	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.968590975 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.968630075 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.968662977 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.968693972 CET	49732	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.968703985 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.968761921 CET	49732	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.968764067 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.968774080 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.968820095 CET	49732	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.968823910 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.969610929 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.969643116 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.969679117 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.969707012 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.969715118 CET	49732	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.969719887 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.969733000 CET	49732	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.969769001 CET	49732	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.970258951 CET	443	49733	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.970326900 CET	443	49733	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.970391989 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.970444918 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.970443964 CET	49733	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.970458031 CET	443	49733	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.970504045 CET	49732	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.970509052 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.970554113 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.970578909 CET	443	49733	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.970612049 CET	443	49733	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.970624924 CET	49732	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.970628977 CET	49733	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.970629930 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.970633984 CET	443	49733	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.970670938 CET	49733	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.970674992 CET	443	49733	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.971234083 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.971362114 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.971369028 CET	49732	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.971374989 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.971425056 CET	49732	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.971430063 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.971450090 CET	443	49733	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.971483946 CET	443	49733	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.971503973 CET	49733	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.971510887 CET	443	49733	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.971934080 CET	443	49733	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.971986055 CET	49733	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.971990108 CET	443	49733	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.972008944 CET	443	49733	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.972026110 CET	49733	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.972052097 CET	49733	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.972132921 CET	49733	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.972146988 CET	443	49733	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.976236105 CET	49735	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.976258993 CET	443	49735	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:54.976466894 CET	49735	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.976799011 CET	49735	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:54.976813078 CET	443	49735	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:55.023797035 CET	49732	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:55.086100101 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:55.086174011 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:55.086206913 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:55.086246967 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:55.086257935 CET	49732	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:55.086266041 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:55.086286068 CET	49732	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:55.086309910 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:55.086435080 CET	49732	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:55.086442947 CET	443	49732	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:55.086462021 CET	49732	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:55.202060938 CET	49737	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:55.202102900 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:55.202177048 CET	49737	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:55.202369928 CET	49737	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:55.202384949 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:55.804852962 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:55.805140972 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:55.805167913 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:55.805511951 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:55.805809021 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:55.805876017 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:55.805877924 CET	443	49735	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:55.805948019 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:55.806056976 CET	49735	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:55.806082010 CET	443	49735	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:55.806400061 CET	443	49735	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:55.806665897 CET	49735	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:55.806725025 CET	443	49735	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:55.806749105 CET	49735	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:55.847333908 CET	443	49735	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:55.851336002 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:55.854794025 CET	49735	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:55.943717003 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:55.943763018 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:55.943820953 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:55.943835020 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:55.943846941 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:55.943892956 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:55.943901062 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:55.943907976 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:55.943955898 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:55.944281101 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:55.944349051 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:55.944394112 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:55.944401026 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:55.948534012 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:55.948605061 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:55.948611975 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:55.951617956 CET	443	49735	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:55.951682091 CET	443	49735	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:55.951735973 CET	49735	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:55.952313900 CET	49735	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:55.952327967 CET	443	49735	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:55.954649925 CET	49739	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:55.954679966 CET	443	49739	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:55.954782009 CET	49739	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:55.954988003 CET	49739	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:55.955001116 CET	443	49739	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:55.997813940 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.061063051 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.061134100 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.061167955 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.061187983 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.061206102 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.061252117 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.061259985 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.061491013 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.061522961 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.061542988 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.061549902 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.061589956 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.061599970 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.062310934 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.062342882 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.062370062 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.062380075 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.062413931 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.062419891 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.062427044 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.062467098 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.062473059 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.062482119 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.062527895 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.063244104 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.063303947 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.063338041 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.063353062 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.063359976 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.063409090 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.063417912 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.092374086 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:56.092602015 CET	49737	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:56.092617989 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:56.093673944 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:56.093801975 CET	49737	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:56.094073057 CET	49737	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:56.094141006 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:56.094218016 CET	49737	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:56.094224930 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:56.108802080 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.140810013 CET	49737	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:56.180363894 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.180435896 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.180469036 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.180483103 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.180507898 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.180557013 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.180649996 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.180805922 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.180838108 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.180855036 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.180862904 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.180915117 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.180922031 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.181714058 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.181792974 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.181801081 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.181854963 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.181900024 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.181907892 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.181960106 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.182199955 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.182246923 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.182281017 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.182291031 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.182297945 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.182331085 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.183463097 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.183495045 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.183518887 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.183527946 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.183552027 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.184309959 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.184366941 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.184375048 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.184423923 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.184490919 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.184541941 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.184679985 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.184731007 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.185333014 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.185405970 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.295669079 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.295751095 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.295773029 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.295792103 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.295814991 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.295835018 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.296088934 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.296144962 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.296231031 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.296288013 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.296605110 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.296652079 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.296669960 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.296677113 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.296689034 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.296740055 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.296773911 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.296783924 CET	443	49734	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.296813965 CET	49734	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.299099922 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.299140930 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.299227953 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.299426079 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.299442053 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.383099079 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:56.383157015 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:56.383198023 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:56.383208990 CET	49737	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:56.383235931 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:56.383272886 CET	49737	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:56.383488894 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:56.383564949 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:56.383605957 CET	49737	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:56.383613110 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:56.392669916 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:56.392746925 CET	49737	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:56.392755985 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:56.442806005 CET	49737	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:56.442814112 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:56.448390961 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.448451996 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.448515892 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.448818922 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.448843002 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.488869905 CET	49737	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:56.502285957 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:56.552813053 CET	49737	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:56.562642097 CET	443	49739	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.562902927 CET	49739	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.562917948 CET	443	49739	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.563271046 CET	443	49739	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.563632011 CET	49739	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.563726902 CET	443	49739	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.563771009 CET	49739	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.611351967 CET	443	49739	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.616789103 CET	49739	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.653486967 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:56.653561115 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:56.653592110 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:56.653611898 CET	49737	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:56.653623104 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:56.653635025 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:56.653675079 CET	49737	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:56.654242992 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:56.654278040 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:56.654295921 CET	49737	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:56.654318094 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:56.654354095 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:56.654367924 CET	49737	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:56.654380083 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:56.654419899 CET	49737	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:56.655082941 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:56.655153990 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:56.655186892 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:56.655199051 CET	49737	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:56.655205965 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:56.655244112 CET	49737	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:56.655935049 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:56.656014919 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:56.656049967 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:56.656058073 CET	49737	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:56.656064987 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:56.656101942 CET	49737	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:56.656110048 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:56.656882048 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:56.656938076 CET	49737	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:56.656944036 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:56.708375931 CET	443	49739	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.708461046 CET	443	49739	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.708513021 CET	49739	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.709136009 CET	49739	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.709151030 CET	443	49739	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.711798906 CET	49737	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:56.772494078 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:56.772563934 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:56.772587061 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:56.772612095 CET	49737	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:56.772630930 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:56.772641897 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:56.772686005 CET	49737	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:56.772706985 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:56.772754908 CET	49737	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:56.772862911 CET	49737	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:56.772906065 CET	443	49737	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:56.772958040 CET	49737	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:56.903548002 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.903810978 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.903821945 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.904160976 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.904493093 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.904567957 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:56.904649973 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:56.951328993 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.052921057 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.052983999 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.053015947 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.053044081 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.053046942 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.053069115 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.053091049 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.053116083 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.053147078 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.053158045 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.053167105 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.053208113 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.053421974 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.065088987 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.065416098 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.065445900 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.065912008 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.066215038 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.066313028 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.066346884 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.066385031 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.066421032 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.108803034 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.109527111 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.109564066 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.156812906 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.170000076 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.170073032 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.170105934 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.170120001 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.170156002 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.170195103 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.170217037 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.170284986 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.170322895 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.170332909 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.170398951 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.170435905 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.170444965 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.171221972 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.171268940 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.171277046 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.171286106 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.171325922 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.171334028 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.171394110 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.171432972 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.171441078 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.172159910 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.172197104 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.172219992 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.172228098 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.172265053 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.172271013 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.172280073 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.172321081 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.172794104 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.219788074 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.287062883 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.287122011 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.287168026 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.287205935 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.287236929 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.287283897 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.287290096 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.287306070 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.287353992 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.287362099 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.287425041 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.287463903 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.287467957 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.287480116 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.287494898 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.287518024 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.287528038 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.287570953 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.287602901 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.287625074 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.287638903 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.287657022 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.287691116 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.287728071 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.287771940 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.287782907 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.287934065 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.287970066 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.287977934 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.287986040 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.288027048 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.288036108 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.288613081 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.288666010 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.288675070 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.288686037 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.288717985 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.288743019 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.288752079 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.288793087 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.289526939 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.289585114 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.289588928 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.289598942 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.289644957 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.290501118 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.290555000 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.290569067 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.290606976 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.290618896 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.290626049 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.290641069 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.291472912 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.291510105 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.291527987 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.291537046 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.291572094 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.292361975 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.292417049 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.292426109 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.292476892 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.331808090 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.404565096 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.404616117 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.404680967 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.404710054 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.404726982 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.404773951 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.404824972 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.404880047 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.405061007 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.405101061 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.405116081 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.405122995 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.405147076 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.405484915 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.405509949 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.405544996 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.405553102 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.405571938 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.405602932 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.405623913 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.405652046 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.405689001 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.405694962 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.405719995 CET	49740	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.405723095 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.405735970 CET	443	49740	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.405761957 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.405795097 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.405864954 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.405901909 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.405905962 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.405917883 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.405951023 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.406624079 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.406707048 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.406749010 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.406760931 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.406769037 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.406800985 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.407440901 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.407536030 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.407573938 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.407581091 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.407623053 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.407658100 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.407665014 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.408294916 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.408335924 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.408345938 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.408353090 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.408385038 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.408391953 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.458842039 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.524595976 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.524688005 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.524733067 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.524751902 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.524768114 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.524806023 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.524815083 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.525336027 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.525397062 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.525403976 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.525495052 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.525532007 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.525538921 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.525552988 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.525588036 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.525916100 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.525981903 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.525984049 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.525998116 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.526036978 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.526432991 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.526633978 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.526679993 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.526700974 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.526710033 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.526724100 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.527391911 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.527432919 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.527451038 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.527458906 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.527484894 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.528454065 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.528501987 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.528522968 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.528531075 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.528568029 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.529433012 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.529479980 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.529486895 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.529499054 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.529550076 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.644273043 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.644362926 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.644382000 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.644434929 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.644438028 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.644454002 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.644479990 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.644511938 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.644552946 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.644561052 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.644573927 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.644597054 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.644603968 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.644625902 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.644633055 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.644670010 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.644675970 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.644686937 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.644711018 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.644717932 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.644730091 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.644737005 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.644788980 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.644793987 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.644810915 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.644829988 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.644835949 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.644856930 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.644865036 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.644912004 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.644921064 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.644942999 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.644963026 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.644968987 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.644989014 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.644990921 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.645047903 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.645054102 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.645097971 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.645270109 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.645318985 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.645325899 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.645363092 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.645399094 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.645416021 CET	443	49745	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.645451069 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.645451069 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.645474911 CET	49745	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.648233891 CET	49747	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.648261070 CET	443	49747	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.648328066 CET	49747	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.648535967 CET	49747	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.648550034 CET	443	49747	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.871241093 CET	49748	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.871308088 CET	443	49748	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:57.871409893 CET	49748	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.871638060 CET	49748	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:57.871660948 CET	443	49748	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:58.216008902 CET	49749	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:58.216064930 CET	443	49749	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:58.216155052 CET	49749	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:58.216499090 CET	49749	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:58.216511965 CET	443	49749	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:58.246684074 CET	49751	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:58.246747017 CET	443	49751	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:58.246831894 CET	49751	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:58.247986078 CET	49751	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:58.248008013 CET	443	49751	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:58.260181904 CET	443	49747	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:58.260683060 CET	49747	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:58.260720015 CET	443	49747	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:58.261085987 CET	443	49747	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:58.261466980 CET	49747	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:58.261538029 CET	443	49747	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:58.261625051 CET	49747	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:58.307334900 CET	443	49747	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:58.423283100 CET	443	49747	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:58.423366070 CET	443	49747	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:58.423419952 CET	49747	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:58.423769951 CET	49747	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:58.423790932 CET	443	49747	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:58.488765001 CET	443	49748	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:58.489065886 CET	49748	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:58.489093065 CET	443	49748	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:58.489428997 CET	443	49748	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:58.489734888 CET	49748	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:58.489799976 CET	443	49748	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:58.489867926 CET	49748	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:58.531337023 CET	443	49748	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:58.636006117 CET	443	49748	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:58.636099100 CET	443	49748	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:58.636166096 CET	49748	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:58.636821032 CET	49748	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:58.636838913 CET	443	49748	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:58.639329910 CET	49754	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:58.639370918 CET	443	49754	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:58.639440060 CET	49754	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:58.639674902 CET	49754	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:58.639689922 CET	443	49754	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:59.013787031 CET	49755	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:59.013813019 CET	443	49755	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:59.013907909 CET	49755	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:59.014182091 CET	49755	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:59.014200926 CET	443	49755	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:59.088639021 CET	443	49749	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:59.088859081 CET	49749	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:59.088867903 CET	443	49749	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:59.089946032 CET	443	49749	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:59.090012074 CET	49749	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:59.090354919 CET	49749	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:59.090414047 CET	443	49749	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:59.090650082 CET	49749	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:59.090656042 CET	443	49749	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:59.094989061 CET	443	49751	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:59.095206976 CET	49751	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:59.095221043 CET	443	49751	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:59.096453905 CET	443	49751	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:59.096748114 CET	49751	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:59.096847057 CET	49751	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:59.096851110 CET	443	49751	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:59.096924067 CET	443	49751	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:59.137797117 CET	49749	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:59.138087034 CET	49751	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:59.340204000 CET	443	49751	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:59.340342999 CET	443	49751	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:59.340401888 CET	49751	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:59.340415001 CET	443	49751	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:59.340497017 CET	443	49751	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:59.340549946 CET	49751	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:59.340558052 CET	443	49751	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:59.341599941 CET	443	49751	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:59.341661930 CET	49751	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:59.341670990 CET	443	49751	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:59.350625038 CET	443	49751	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:59.350713015 CET	49751	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:59.350723982 CET	443	49751	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:59.385094881 CET	443	49749	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:59.391828060 CET	49751	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:59.391855001 CET	443	49751	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:59.439826965 CET	49751	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:59.439827919 CET	49749	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:59.439846992 CET	443	49749	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:59.441407919 CET	49749	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:59.441499949 CET	443	49749	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:59.441581964 CET	49749	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:59.444417000 CET	49757	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:17:59.444446087 CET	443	49757	216.58.206.36	192.168.2.16
Nov 5, 2024 21:17:59.444541931 CET	49757	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:17:59.444777966 CET	49757	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:17:59.444792032 CET	443	49757	216.58.206.36	192.168.2.16
Nov 5, 2024 21:17:59.455466032 CET	443	49751	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:59.455518007 CET	443	49751	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:59.455573082 CET	49751	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:59.455585003 CET	443	49751	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:59.460455894 CET	443	49751	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:59.460526943 CET	49751	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:59.460544109 CET	443	49751	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:59.476762056 CET	443	49754	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:59.477056026 CET	49754	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:59.477088928 CET	443	49754	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:59.477435112 CET	443	49754	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:59.477761030 CET	49754	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:59.477824926 CET	443	49754	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:59.477895975 CET	49754	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:59.503818035 CET	49751	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:59.503830910 CET	443	49751	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:59.504148006 CET	49751	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:59.504199028 CET	443	49751	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:59.504247904 CET	49751	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:59.508842945 CET	49758	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:17:59.508882999 CET	443	49758	216.58.206.36	192.168.2.16
Nov 5, 2024 21:17:59.508944988 CET	49758	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:17:59.509193897 CET	49758	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:17:59.509208918 CET	443	49758	216.58.206.36	192.168.2.16
Nov 5, 2024 21:17:59.519346952 CET	443	49754	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:59.522949934 CET	49759	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:59.522985935 CET	443	49759	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:59.523058891 CET	49759	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:59.523278952 CET	49759	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:17:59.523292065 CET	443	49759	3.17.16.61	192.168.2.16
Nov 5, 2024 21:17:59.619721889 CET	443	49754	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:59.619786978 CET	443	49754	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:59.619834900 CET	49754	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:59.620445967 CET	49754	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:59.620471001 CET	443	49754	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:59.627520084 CET	443	49755	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:59.627765894 CET	49755	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:59.627784014 CET	443	49755	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:59.628117085 CET	443	49755	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:59.628416061 CET	49755	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:59.628483057 CET	443	49755	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:59.628537893 CET	49755	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:59.675332069 CET	443	49755	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:59.779211998 CET	443	49755	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:59.779341936 CET	443	49755	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:59.779409885 CET	49755	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:59.779417038 CET	443	49755	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:59.779465914 CET	49755	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:59.780086994 CET	49755	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:17:59.780096054 CET	443	49755	104.18.95.41	192.168.2.16
Nov 5, 2024 21:17:59.783276081 CET	49760	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:59.783334017 CET	443	49760	142.250.186.132	192.168.2.16
Nov 5, 2024 21:17:59.783416986 CET	49760	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:59.783813953 CET	49760	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:17:59.783826113 CET	443	49760	142.250.186.132	192.168.2.16
Nov 5, 2024 21:18:00.084038019 CET	49761	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:00.084096909 CET	443	49761	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:00.084173918 CET	49761	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:00.084497929 CET	49761	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:00.084510088 CET	443	49761	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:00.180612087 CET	443	49759	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:00.180799007 CET	49759	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:00.180818081 CET	443	49759	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:00.181164026 CET	443	49759	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:00.181458950 CET	49759	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:00.181526899 CET	443	49759	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:00.181957006 CET	49759	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:00.223330975 CET	443	49759	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:00.295710087 CET	443	49757	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:00.296133995 CET	49757	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:00.296149969 CET	443	49757	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:00.297204018 CET	443	49757	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:00.297285080 CET	49757	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:00.297602892 CET	49757	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:00.297662973 CET	443	49757	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:00.297741890 CET	49757	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:00.297750950 CET	443	49757	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:00.336848021 CET	443	49759	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:00.336925030 CET	443	49759	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:00.337029934 CET	49759	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:00.338054895 CET	49759	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:00.338079929 CET	443	49759	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:00.340472937 CET	49762	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:00.340523005 CET	443	49762	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:00.340605974 CET	49762	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:00.340825081 CET	49762	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:00.340842009 CET	443	49762	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:00.347805023 CET	49757	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:00.358189106 CET	443	49758	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:00.358506918 CET	49758	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:00.358530045 CET	443	49758	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:00.358860016 CET	443	49758	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:00.359173059 CET	49758	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:00.359236002 CET	443	49758	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:00.359333992 CET	49758	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:00.407330036 CET	443	49758	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:00.557282925 CET	443	49757	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:00.603876114 CET	49757	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:00.603899956 CET	443	49757	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:00.604933023 CET	49757	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:00.605032921 CET	443	49757	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:00.605108023 CET	49757	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:00.610060930 CET	443	49758	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:00.610107899 CET	443	49758	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:00.610135078 CET	443	49758	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:00.610162020 CET	49758	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:00.610193014 CET	443	49758	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:00.610235929 CET	443	49758	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:00.610241890 CET	49758	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:00.610255957 CET	443	49758	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:00.610275030 CET	49758	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:00.618282080 CET	443	49758	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:00.618366003 CET	49758	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:00.618392944 CET	443	49758	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:00.633934021 CET	443	49760	142.250.186.132	192.168.2.16
Nov 5, 2024 21:18:00.634275913 CET	49760	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:18:00.634290934 CET	443	49760	142.250.186.132	192.168.2.16
Nov 5, 2024 21:18:00.635353088 CET	443	49760	142.250.186.132	192.168.2.16
Nov 5, 2024 21:18:00.635421991 CET	49760	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:18:00.635751963 CET	49760	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:18:00.635818005 CET	443	49760	142.250.186.132	192.168.2.16
Nov 5, 2024 21:18:00.636053085 CET	49760	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:18:00.636064053 CET	443	49760	142.250.186.132	192.168.2.16
Nov 5, 2024 21:18:00.636126041 CET	49760	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:18:00.636163950 CET	443	49760	142.250.186.132	192.168.2.16
Nov 5, 2024 21:18:00.666822910 CET	49758	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:00.666841030 CET	443	49758	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:00.682796001 CET	49760	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:18:00.689100981 CET	443	49761	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:00.689409018 CET	49761	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:00.689426899 CET	443	49761	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:00.689773083 CET	443	49761	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:00.690062046 CET	49761	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:00.690128088 CET	443	49761	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:00.690207958 CET	49761	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:00.690359116 CET	49761	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:00.690391064 CET	443	49761	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:00.690483093 CET	49761	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:00.690511942 CET	443	49761	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:00.713804960 CET	49758	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:00.726746082 CET	443	49758	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:00.726807117 CET	443	49758	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:00.726857901 CET	49758	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:00.726875067 CET	443	49758	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:00.728640079 CET	443	49758	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:00.728693962 CET	49758	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:00.728702068 CET	443	49758	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:00.777803898 CET	49758	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:00.777825117 CET	443	49758	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:00.778675079 CET	49758	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:00.778764963 CET	443	49758	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:00.778845072 CET	49758	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:01.032540083 CET	443	49761	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:01.032583952 CET	443	49761	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:01.032617092 CET	443	49761	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:01.032643080 CET	443	49761	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:01.032685995 CET	49761	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:01.032715082 CET	443	49761	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:01.032732964 CET	49761	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:01.033930063 CET	443	49761	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:01.033962011 CET	443	49761	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:01.033988953 CET	49761	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:01.033996105 CET	443	49761	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:01.034048080 CET	49761	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:01.036166906 CET	443	49761	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:01.036216974 CET	49761	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:01.046806097 CET	443	49760	142.250.186.132	192.168.2.16
Nov 5, 2024 21:18:01.046855927 CET	443	49760	142.250.186.132	192.168.2.16
Nov 5, 2024 21:18:01.046900034 CET	49760	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:18:01.046911955 CET	443	49760	142.250.186.132	192.168.2.16
Nov 5, 2024 21:18:01.046921015 CET	443	49760	142.250.186.132	192.168.2.16
Nov 5, 2024 21:18:01.046948910 CET	49760	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:18:01.046962976 CET	443	49760	142.250.186.132	192.168.2.16
Nov 5, 2024 21:18:01.047019958 CET	443	49760	142.250.186.132	192.168.2.16
Nov 5, 2024 21:18:01.047055960 CET	49760	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:18:01.047060966 CET	443	49760	142.250.186.132	192.168.2.16
Nov 5, 2024 21:18:01.055880070 CET	443	49760	142.250.186.132	192.168.2.16
Nov 5, 2024 21:18:01.055928946 CET	49760	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:18:01.055933952 CET	443	49760	142.250.186.132	192.168.2.16
Nov 5, 2024 21:18:01.109797955 CET	49760	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:18:01.109816074 CET	443	49760	142.250.186.132	192.168.2.16
Nov 5, 2024 21:18:01.149619102 CET	443	49761	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:01.149698973 CET	443	49761	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:01.149736881 CET	443	49761	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:01.149804115 CET	49761	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:01.149832010 CET	443	49761	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:01.149877071 CET	49761	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:01.149883032 CET	443	49761	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:01.150253057 CET	443	49761	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:01.150290012 CET	443	49761	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:01.150304079 CET	49761	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:01.150310040 CET	443	49761	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:01.150351048 CET	49761	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:01.150357008 CET	443	49761	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:01.150424957 CET	443	49761	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:01.150485039 CET	49761	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:01.150490046 CET	443	49761	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:01.150515079 CET	443	49761	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:01.150569916 CET	49761	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:01.150655031 CET	49761	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:01.150676012 CET	443	49761	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:01.153276920 CET	49764	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:01.153321981 CET	443	49764	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:01.153409004 CET	49764	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:01.153625011 CET	49764	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:01.153635979 CET	443	49764	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:01.156810999 CET	49760	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:18:01.163661003 CET	443	49760	142.250.186.132	192.168.2.16
Nov 5, 2024 21:18:01.192651987 CET	443	49760	142.250.186.132	192.168.2.16
Nov 5, 2024 21:18:01.192766905 CET	49760	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:18:01.192918062 CET	49760	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:18:01.192931890 CET	443	49760	142.250.186.132	192.168.2.16
Nov 5, 2024 21:18:01.195564032 CET	49765	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:01.195605040 CET	443	49765	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:01.195688963 CET	49765	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:01.195904970 CET	49765	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:01.195918083 CET	443	49765	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:01.197885990 CET	49766	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:18:01.197918892 CET	443	49766	142.250.186.132	192.168.2.16
Nov 5, 2024 21:18:01.197983027 CET	49766	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:18:01.198276043 CET	49766	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:18:01.198292017 CET	443	49766	142.250.186.132	192.168.2.16
Nov 5, 2024 21:18:01.314474106 CET	443	49762	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:01.314795971 CET	49762	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:01.314825058 CET	443	49762	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:01.315176010 CET	443	49762	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:01.315474033 CET	49762	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:01.315542936 CET	443	49762	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:01.315624952 CET	49762	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:01.359333992 CET	443	49762	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:01.469429970 CET	443	49762	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:01.469598055 CET	443	49762	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:01.469676018 CET	49762	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:01.470460892 CET	49762	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:01.470479965 CET	443	49762	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:01.769884109 CET	443	49764	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:01.770396948 CET	49764	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:01.770420074 CET	443	49764	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:01.770792007 CET	443	49764	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:01.771099091 CET	49764	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:01.771167040 CET	443	49764	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:01.771239042 CET	49764	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:01.811337948 CET	443	49764	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:01.867079020 CET	443	49722	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:01.867153883 CET	443	49722	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:01.867209911 CET	49722	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:01.916387081 CET	443	49764	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:01.916476011 CET	443	49764	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:01.916660070 CET	49764	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:01.917033911 CET	49764	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:01.917053938 CET	443	49764	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:02.048284054 CET	443	49766	142.250.186.132	192.168.2.16
Nov 5, 2024 21:18:02.048722029 CET	49766	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:18:02.048736095 CET	443	49766	142.250.186.132	192.168.2.16
Nov 5, 2024 21:18:02.049097061 CET	443	49766	142.250.186.132	192.168.2.16
Nov 5, 2024 21:18:02.049499989 CET	49766	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:18:02.049561024 CET	443	49766	142.250.186.132	192.168.2.16
Nov 5, 2024 21:18:02.049685001 CET	49766	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:18:02.049716949 CET	49766	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:18:02.049753904 CET	443	49766	142.250.186.132	192.168.2.16
Nov 5, 2024 21:18:02.066581011 CET	443	49765	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:02.066968918 CET	49765	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:02.066986084 CET	443	49765	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:02.068063021 CET	443	49765	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:02.068133116 CET	49765	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:02.068515062 CET	49765	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:02.068583012 CET	443	49765	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:02.068651915 CET	49765	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:02.068659067 CET	443	49765	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:02.114938021 CET	49765	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:02.311145067 CET	443	49766	142.250.186.132	192.168.2.16
Nov 5, 2024 21:18:02.311837912 CET	49766	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:18:02.311886072 CET	443	49766	142.250.186.132	192.168.2.16
Nov 5, 2024 21:18:02.311940908 CET	49766	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:18:02.314027071 CET	49722	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:02.314045906 CET	443	49722	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:02.314408064 CET	49767	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:02.314421892 CET	443	49767	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:02.314471006 CET	49767	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:02.314755917 CET	49767	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:02.314769983 CET	443	49767	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:02.336709023 CET	443	49765	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:02.336751938 CET	443	49765	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:02.336854935 CET	49765	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:02.336864948 CET	443	49765	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:02.337588072 CET	49765	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:02.337646008 CET	443	49765	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:02.337790966 CET	49765	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:03.007044077 CET	49768	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:18:03.007137060 CET	443	49768	142.250.186.132	192.168.2.16
Nov 5, 2024 21:18:03.007232904 CET	49768	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:18:03.007474899 CET	49768	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:18:03.007487059 CET	443	49768	142.250.186.132	192.168.2.16
Nov 5, 2024 21:18:03.168262959 CET	443	49767	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:03.168587923 CET	49767	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:03.168622971 CET	443	49767	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:03.169662952 CET	443	49767	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:03.169751883 CET	49767	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:03.173027039 CET	49767	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:03.173113108 CET	443	49767	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:03.173291922 CET	49767	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:03.173300028 CET	443	49767	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:03.213835955 CET	49767	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:03.431904078 CET	443	49767	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:03.431957006 CET	443	49767	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:03.432020903 CET	49767	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:03.432039976 CET	443	49767	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:03.432607889 CET	49767	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:03.432638884 CET	443	49767	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:03.432691097 CET	49767	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:03.866789103 CET	443	49768	142.250.186.132	192.168.2.16
Nov 5, 2024 21:18:03.867279053 CET	49768	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:18:03.867300987 CET	443	49768	142.250.186.132	192.168.2.16
Nov 5, 2024 21:18:03.868366003 CET	443	49768	142.250.186.132	192.168.2.16
Nov 5, 2024 21:18:03.868443966 CET	49768	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:18:03.868860006 CET	49768	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:18:03.868913889 CET	443	49768	142.250.186.132	192.168.2.16
Nov 5, 2024 21:18:03.869028091 CET	49768	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:18:03.869033098 CET	443	49768	142.250.186.132	192.168.2.16
Nov 5, 2024 21:18:03.869090080 CET	49768	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:18:03.869106054 CET	443	49768	142.250.186.132	192.168.2.16
Nov 5, 2024 21:18:03.916766882 CET	49768	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:18:04.143435955 CET	443	49768	142.250.186.132	192.168.2.16
Nov 5, 2024 21:18:04.144012928 CET	49768	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:18:04.144073963 CET	443	49768	142.250.186.132	192.168.2.16
Nov 5, 2024 21:18:04.144138098 CET	49768	443	192.168.2.16	142.250.186.132
Nov 5, 2024 21:18:04.146580935 CET	49769	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:04.146619081 CET	443	49769	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:04.146738052 CET	49769	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:04.147021055 CET	49769	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:04.147034883 CET	443	49769	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:05.786639929 CET	443	49769	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:05.786989927 CET	49769	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:05.787007093 CET	443	49769	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:05.788100958 CET	443	49769	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:05.788186073 CET	49769	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:05.788456917 CET	49769	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:05.788522005 CET	443	49769	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:05.788604021 CET	49769	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:05.788614988 CET	443	49769	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:05.837795019 CET	49769	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:06.462748051 CET	443	49769	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:06.462805986 CET	443	49769	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:06.462882996 CET	49769	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:06.462902069 CET	443	49769	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:06.463330984 CET	49769	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:06.463346004 CET	443	49769	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:06.463363886 CET	443	49769	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:06.463406086 CET	49769	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:06.463458061 CET	49769	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:29.609682083 CET	49770	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:29.609709024 CET	443	49770	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:29.609782934 CET	49770	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:29.610034943 CET	49770	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:29.610048056 CET	443	49770	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:30.222501040 CET	443	49770	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:30.222857952 CET	49770	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:30.222882032 CET	443	49770	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:30.223215103 CET	443	49770	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:30.223522902 CET	49770	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:30.223582983 CET	443	49770	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:30.223659992 CET	49770	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:30.223742008 CET	49770	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:30.223771095 CET	443	49770	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:30.223870993 CET	49770	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:30.223897934 CET	443	49770	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:30.570401907 CET	443	49770	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:30.570489883 CET	443	49770	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:30.570558071 CET	49770	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:30.570575953 CET	443	49770	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:30.570715904 CET	443	49770	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:30.570775986 CET	49770	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:30.570792913 CET	443	49770	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:30.570802927 CET	443	49770	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:30.570842981 CET	49770	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:30.571017981 CET	49770	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:30.571033955 CET	443	49770	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:30.573918104 CET	49771	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:30.573967934 CET	443	49771	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:30.574052095 CET	49771	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:30.574302912 CET	49771	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:30.574318886 CET	443	49771	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:31.178052902 CET	443	49771	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:31.178399086 CET	49771	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:31.178416014 CET	443	49771	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:31.178764105 CET	443	49771	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:31.179086924 CET	49771	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:31.179152966 CET	443	49771	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:31.179219961 CET	49771	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:31.223328114 CET	443	49771	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:31.320502043 CET	443	49771	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:31.320579052 CET	443	49771	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:31.320650101 CET	49771	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:31.321337938 CET	49771	443	192.168.2.16	104.18.95.41
Nov 5, 2024 21:18:31.321355104 CET	443	49771	104.18.95.41	192.168.2.16
Nov 5, 2024 21:18:35.594235897 CET	49772	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:35.594280005 CET	443	49772	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:35.594356060 CET	49772	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:35.594495058 CET	49773	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:35.594537020 CET	443	49773	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:35.594583988 CET	49773	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:35.594897032 CET	49772	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:35.594911098 CET	443	49772	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:35.595113039 CET	49773	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:35.595124960 CET	443	49773	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:36.254489899 CET	443	49772	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:36.254810095 CET	49772	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:36.254827976 CET	443	49772	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:36.255178928 CET	443	49772	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:36.255475998 CET	49772	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:36.255536079 CET	443	49772	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:36.255616903 CET	49772	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:36.255682945 CET	49772	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:36.255695105 CET	443	49772	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:36.257198095 CET	443	49773	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:36.257384062 CET	49773	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:36.257411003 CET	443	49773	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:36.257932901 CET	443	49773	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:36.258193016 CET	49773	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:36.258266926 CET	443	49773	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:36.301675081 CET	49773	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:36.892134905 CET	443	49772	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:36.893070936 CET	49772	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:36.893094063 CET	443	49772	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:36.893158913 CET	49772	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:36.895730972 CET	49773	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:36.939383984 CET	443	49773	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:37.441170931 CET	443	49773	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:37.441239119 CET	443	49773	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:37.441267967 CET	49773	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:37.441273928 CET	443	49773	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:37.441288948 CET	443	49773	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:37.441303968 CET	443	49773	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:37.441320896 CET	49773	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:37.441329002 CET	443	49773	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:37.441364050 CET	49773	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:37.441369057 CET	443	49773	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:37.441863060 CET	443	49773	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:37.441920042 CET	49773	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:37.441925049 CET	443	49773	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:37.442042112 CET	443	49773	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:37.442099094 CET	49773	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:37.442406893 CET	49773	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:37.442420006 CET	443	49773	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:37.703442097 CET	49774	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:37.703478098 CET	443	49774	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:37.703561068 CET	49774	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:37.705775023 CET	49775	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:37.705830097 CET	443	49775	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:37.705895901 CET	49775	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:37.708192110 CET	49774	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:37.708209991 CET	443	49774	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:37.708328962 CET	49775	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:37.708345890 CET	443	49775	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:38.357965946 CET	443	49774	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:38.358279943 CET	49774	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:38.358293056 CET	443	49774	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:38.359376907 CET	443	49774	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:38.359451056 CET	49774	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:38.360486984 CET	49774	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:38.360567093 CET	443	49774	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:38.360657930 CET	49774	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:38.360666990 CET	443	49774	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:38.372625113 CET	443	49775	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:38.372885942 CET	49775	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:38.372911930 CET	443	49775	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:38.374385118 CET	443	49775	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:38.374450922 CET	49775	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:38.374737978 CET	49775	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:38.374823093 CET	443	49775	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:38.408750057 CET	49774	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:38.424712896 CET	49775	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:38.424745083 CET	443	49775	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:38.472872019 CET	49775	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:38.745827913 CET	443	49774	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:38.745855093 CET	443	49774	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:38.745889902 CET	443	49774	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:38.745903015 CET	443	49774	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:38.745917082 CET	443	49774	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:38.745935917 CET	49774	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:38.745959997 CET	443	49774	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:38.745976925 CET	49774	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:38.746011019 CET	49774	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:38.747420073 CET	443	49774	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:38.747438908 CET	443	49774	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:38.747529030 CET	49774	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:38.747536898 CET	443	49774	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:38.747595072 CET	49774	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:38.861566067 CET	443	49774	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:38.861591101 CET	443	49774	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:38.861717939 CET	49774	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:38.861735106 CET	443	49774	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:38.861783028 CET	49774	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:38.862200022 CET	443	49774	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:38.862215042 CET	443	49774	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:38.862272978 CET	49774	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:38.862278938 CET	443	49774	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:38.862318039 CET	49774	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:38.863909006 CET	443	49774	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:38.863929033 CET	443	49774	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:38.863977909 CET	49774	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:38.863985062 CET	443	49774	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:38.864010096 CET	49774	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:38.864032984 CET	49774	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:38.904831886 CET	443	49774	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:38.904853106 CET	443	49774	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:38.904939890 CET	49774	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:38.904953957 CET	443	49774	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:38.905005932 CET	49774	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:38.977152109 CET	443	49774	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:38.977171898 CET	443	49774	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:38.977288008 CET	49774	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:38.977300882 CET	443	49774	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:38.977344990 CET	49774	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:38.978112936 CET	443	49774	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:38.978128910 CET	443	49774	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:38.978183031 CET	443	49774	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:38.978199959 CET	49774	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:38.978207111 CET	443	49774	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:38.978224039 CET	49774	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:38.978256941 CET	49774	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:38.978262901 CET	443	49774	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:38.978296995 CET	443	49774	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:38.978307009 CET	49774	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:38.978334904 CET	49774	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:38.978517056 CET	49774	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:38.978530884 CET	443	49774	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:39.002214909 CET	49776	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:39.002252102 CET	443	49776	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:39.002336025 CET	49776	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:39.002907038 CET	49776	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:39.002919912 CET	443	49776	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:39.003690958 CET	49777	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:39.003740072 CET	443	49777	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:39.003808975 CET	49777	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:39.004056931 CET	49777	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:39.004074097 CET	443	49777	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:39.242371082 CET	49778	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:39.242403030 CET	443	49778	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:39.242495060 CET	49778	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:39.242729902 CET	49778	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:39.242742062 CET	443	49778	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:39.663634062 CET	443	49777	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:39.663976908 CET	49777	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:39.664005995 CET	443	49777	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:39.665075064 CET	443	49777	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:39.665154934 CET	49777	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:39.665419102 CET	49777	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:39.665486097 CET	443	49777	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:39.665570021 CET	49777	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:39.665570021 CET	49777	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:39.665580034 CET	443	49777	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:39.684377909 CET	443	49776	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:39.684732914 CET	49776	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:39.684763908 CET	443	49776	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:39.685153961 CET	443	49776	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:39.685518026 CET	49776	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:39.685592890 CET	443	49776	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:39.685679913 CET	49776	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:39.707343102 CET	443	49777	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:39.713711977 CET	49777	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:39.727366924 CET	443	49776	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:39.898662090 CET	443	49778	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:39.899077892 CET	49778	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:39.899107933 CET	443	49778	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:39.900578976 CET	443	49778	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:39.900664091 CET	49778	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:39.901104927 CET	49778	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:39.901165009 CET	443	49778	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:39.901302099 CET	49778	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:39.901314020 CET	443	49778	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:39.952704906 CET	49778	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.071587086 CET	443	49776	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.071696997 CET	443	49776	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.071768999 CET	49776	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.076591969 CET	49776	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.076607943 CET	443	49776	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.288005114 CET	443	49778	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.288028955 CET	443	49778	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.288036108 CET	443	49778	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.288053036 CET	443	49778	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.288059950 CET	443	49778	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.288079977 CET	443	49778	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.288132906 CET	49778	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.288141966 CET	443	49778	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.288182974 CET	49778	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.289211035 CET	443	49778	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.289227962 CET	443	49778	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.289275885 CET	49778	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.289283991 CET	443	49778	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.289350986 CET	49778	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.331609964 CET	443	49777	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.331650019 CET	443	49777	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.331672907 CET	443	49777	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.331680059 CET	443	49777	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.331691027 CET	443	49777	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.331763983 CET	49777	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.331785917 CET	443	49777	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.331836939 CET	49777	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.333201885 CET	443	49777	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.333231926 CET	443	49777	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.333276987 CET	49777	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.333283901 CET	443	49777	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.333328962 CET	49777	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.352073908 CET	49780	443	192.168.2.16	152.199.21.175
Nov 5, 2024 21:18:40.352109909 CET	443	49780	152.199.21.175	192.168.2.16
Nov 5, 2024 21:18:40.352166891 CET	49780	443	192.168.2.16	152.199.21.175
Nov 5, 2024 21:18:40.352663994 CET	49780	443	192.168.2.16	152.199.21.175
Nov 5, 2024 21:18:40.352686882 CET	443	49780	152.199.21.175	192.168.2.16
Nov 5, 2024 21:18:40.404898882 CET	443	49778	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.404921055 CET	443	49778	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.405028105 CET	49778	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.405039072 CET	443	49778	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.405090094 CET	49778	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.406424046 CET	443	49778	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.406443119 CET	443	49778	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.406506062 CET	49778	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.406513929 CET	443	49778	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.406555891 CET	49778	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.407430887 CET	443	49778	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.407448053 CET	443	49778	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.407527924 CET	49778	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.407536030 CET	443	49778	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.407578945 CET	49778	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.432575941 CET	443	49778	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.432595015 CET	443	49778	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.432743073 CET	49778	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.432751894 CET	443	49778	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.432843924 CET	49778	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.448859930 CET	443	49777	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.448901892 CET	443	49777	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.448978901 CET	443	49777	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.449003935 CET	49777	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.449043989 CET	49777	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.450431108 CET	49777	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.450455904 CET	443	49777	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.456425905 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.456468105 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.456535101 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.456934929 CET	49775	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.457269907 CET	49782	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.457297087 CET	443	49782	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.457345963 CET	49782	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.457551956 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.457566977 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.457969904 CET	49782	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.457983017 CET	443	49782	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.499363899 CET	443	49775	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.522113085 CET	443	49778	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.522138119 CET	443	49778	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.522248030 CET	49778	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.522257090 CET	443	49778	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.522306919 CET	49778	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.522384882 CET	443	49778	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.522403002 CET	443	49778	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.522449970 CET	49778	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.522455931 CET	443	49778	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.522495985 CET	49778	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.523577929 CET	443	49778	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.523614883 CET	443	49778	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.523664951 CET	49778	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.523669004 CET	443	49778	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.523679972 CET	443	49778	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.523691893 CET	49778	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.523719072 CET	49778	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.523857117 CET	49778	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.523866892 CET	443	49778	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.605360985 CET	49783	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.605415106 CET	443	49783	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.605540037 CET	49783	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.605839014 CET	49783	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.605853081 CET	443	49783	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.856139898 CET	443	49775	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.856175900 CET	443	49775	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.856184959 CET	443	49775	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.856201887 CET	443	49775	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.856225014 CET	443	49775	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.856240988 CET	443	49775	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.856260061 CET	49775	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.856290102 CET	443	49775	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.856302977 CET	49775	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.856345892 CET	49775	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.857204914 CET	443	49775	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.857215881 CET	443	49775	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.857237101 CET	443	49775	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.857275963 CET	49775	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.857284069 CET	443	49775	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.857302904 CET	49775	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.857321024 CET	49775	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.977905989 CET	443	49775	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.977965117 CET	443	49775	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.978015900 CET	49775	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.978039026 CET	443	49775	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.978055954 CET	49775	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.978087902 CET	49775	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.979773045 CET	443	49775	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.979813099 CET	443	49775	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.979852915 CET	49775	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.979859114 CET	443	49775	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.979885101 CET	49775	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.979907036 CET	49775	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.982182026 CET	443	49775	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.982225895 CET	443	49775	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.982255936 CET	49775	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.982260942 CET	443	49775	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.982290030 CET	49775	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.982316971 CET	49775	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.983952999 CET	443	49775	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.983995914 CET	443	49775	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.984028101 CET	49775	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.984038115 CET	443	49775	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:40.984062910 CET	49775	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:40.984081030 CET	49775	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.094115973 CET	443	49775	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.094166040 CET	443	49775	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.094225883 CET	49775	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.094238043 CET	443	49775	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.094305992 CET	49775	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.094543934 CET	49775	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.094569921 CET	443	49775	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.137775898 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.138241053 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.138263941 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.138577938 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.139004946 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.139062881 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.139242887 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.142671108 CET	443	49782	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.142930984 CET	49782	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.142951965 CET	443	49782	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.143299103 CET	443	49782	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.143599033 CET	49782	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.143661022 CET	443	49782	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.143774033 CET	49782	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.183326006 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.187329054 CET	443	49782	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.284540892 CET	443	49783	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.284903049 CET	49783	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.284923077 CET	443	49783	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.286010027 CET	443	49783	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.286086082 CET	49783	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.287197113 CET	49783	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.287296057 CET	443	49783	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.287370920 CET	49783	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.287380934 CET	443	49783	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.332700968 CET	49783	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.389214039 CET	443	49780	152.199.21.175	192.168.2.16
Nov 5, 2024 21:18:41.389547110 CET	49780	443	192.168.2.16	152.199.21.175
Nov 5, 2024 21:18:41.389561892 CET	443	49780	152.199.21.175	192.168.2.16
Nov 5, 2024 21:18:41.390558958 CET	443	49780	152.199.21.175	192.168.2.16
Nov 5, 2024 21:18:41.390641928 CET	49780	443	192.168.2.16	152.199.21.175
Nov 5, 2024 21:18:41.391695023 CET	49780	443	192.168.2.16	152.199.21.175
Nov 5, 2024 21:18:41.391746998 CET	443	49780	152.199.21.175	192.168.2.16
Nov 5, 2024 21:18:41.444698095 CET	49780	443	192.168.2.16	152.199.21.175
Nov 5, 2024 21:18:41.444720984 CET	443	49780	152.199.21.175	192.168.2.16
Nov 5, 2024 21:18:41.492738008 CET	49780	443	192.168.2.16	152.199.21.175
Nov 5, 2024 21:18:41.529953957 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.529970884 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.530002117 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.530045033 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.530066013 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.530076027 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.530107975 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.531032085 CET	443	49782	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.531052113 CET	443	49782	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.531066895 CET	443	49782	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.531135082 CET	49782	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.531158924 CET	443	49782	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.531208038 CET	49782	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.531729937 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.531744957 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.531805038 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.531814098 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.531846046 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.532311916 CET	443	49782	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.532330036 CET	443	49782	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.532371998 CET	49782	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.532380104 CET	443	49782	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.532403946 CET	49782	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.532414913 CET	49782	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.610256910 CET	443	49783	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.610281944 CET	443	49783	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.610367060 CET	443	49783	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.610409021 CET	49783	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.610440016 CET	49783	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.611923933 CET	49783	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.611944914 CET	443	49783	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.647080898 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.647119045 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.647217035 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.647239923 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.647293091 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.648227930 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.648252964 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.648313999 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.648324966 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.648370981 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.649642944 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.649660110 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.649713993 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.649724007 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.649761915 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.649863958 CET	443	49782	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.649883032 CET	443	49782	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.649955988 CET	49782	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.649981022 CET	443	49782	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.650023937 CET	49782	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.650361061 CET	443	49782	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.650417089 CET	49782	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.650424004 CET	443	49782	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.650434017 CET	443	49782	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.650479078 CET	49782	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.650660038 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.650676012 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.650770903 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.650782108 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.650818110 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.650876999 CET	49782	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.650892973 CET	443	49782	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.653975010 CET	49785	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.654028893 CET	443	49785	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.654120922 CET	49785	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.654361963 CET	49785	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.654377937 CET	443	49785	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.764238119 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.764259100 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.764334917 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.764353037 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.764390945 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.764518023 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.764533043 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.764569044 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.764575958 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.764596939 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.764628887 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.765681028 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.765700102 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.765753031 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.765759945 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.765805006 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.766423941 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.766447067 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.766484022 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.766490936 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.766514063 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.766531944 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.767206907 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.767225027 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.767281055 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.767287970 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.767329931 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.768167973 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.768193007 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.768246889 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.768251896 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.768290043 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.769021034 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.769042969 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.769087076 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.769094944 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.769121885 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.769135952 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.798202991 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.798219919 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.798326015 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.798346043 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.798383951 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.881447077 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.881463051 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.881548882 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.881568909 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.881613016 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.881794930 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.881814003 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.881863117 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.881870985 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.881912947 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.882540941 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.882555962 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.882618904 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.882627010 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.882659912 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.882755995 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.882771015 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.882810116 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.882817030 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.882838964 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.882860899 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.886420965 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.886436939 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.886499882 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.886507988 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.886552095 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.888709068 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.888725996 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.888776064 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.888782978 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.888797045 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.888819933 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.888820887 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.888832092 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.888847113 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.888878107 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.888881922 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.888900995 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.888917923 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.888938904 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.888946056 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.888959885 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.888959885 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.888982058 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.888983011 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.888991117 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.889005899 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.889039993 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.889050961 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.889062881 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.889113903 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.889134884 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.889172077 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.889755964 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.889770031 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.889815092 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.889822960 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.889834881 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.889863014 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.889998913 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.890012980 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.890052080 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.890058041 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.890079975 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.890100002 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.890671968 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.890685081 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.890757084 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.890763998 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.890801907 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.914850950 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.914922953 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.914941072 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.914982080 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.915220022 CET	49781	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.915235996 CET	443	49781	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.918045998 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.918073893 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.918162107 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.918381929 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.918387890 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.925045967 CET	49787	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.925090075 CET	443	49787	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:41.925184011 CET	49787	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.925368071 CET	49787	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:41.925383091 CET	443	49787	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:42.315423012 CET	443	49785	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:42.315712929 CET	49785	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:42.315735102 CET	443	49785	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:42.316221952 CET	443	49785	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:42.316525936 CET	49785	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:42.316657066 CET	49785	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:42.316657066 CET	443	49785	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:42.359342098 CET	443	49785	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:42.364666939 CET	49785	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:42.566632986 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:42.566934109 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:42.566946030 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:42.567239046 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:42.567648888 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:42.567692995 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:42.567814112 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:42.581742048 CET	443	49787	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:42.582293987 CET	49787	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:42.582357883 CET	443	49787	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:42.582762957 CET	443	49787	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:42.583131075 CET	49787	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:42.583209991 CET	443	49787	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:42.583268881 CET	49787	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:42.611335993 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:42.623343945 CET	443	49787	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:42.694756985 CET	443	49785	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:42.694787979 CET	443	49785	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:42.694813013 CET	443	49785	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:42.694828033 CET	443	49785	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:42.694844961 CET	443	49785	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:42.694977045 CET	49785	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:42.694977045 CET	49785	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:42.694996119 CET	443	49785	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:42.695043087 CET	49785	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:42.696176052 CET	443	49785	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:42.696197987 CET	443	49785	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:42.696242094 CET	49785	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:42.696248055 CET	443	49785	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:42.696265936 CET	49785	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:42.696290016 CET	49785	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:42.812421083 CET	443	49785	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:42.812465906 CET	443	49785	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:42.812517881 CET	49785	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:42.812526941 CET	443	49785	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:42.812695980 CET	49785	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:42.813142061 CET	443	49785	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:42.813209057 CET	49785	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:42.813214064 CET	443	49785	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:42.813338041 CET	443	49785	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:42.813386917 CET	49785	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:42.813455105 CET	49785	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:42.813467979 CET	443	49785	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.899846077 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.899866104 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.899880886 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.899939060 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.899946928 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.899996042 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.900013924 CET	443	49787	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.900036097 CET	443	49787	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.900051117 CET	443	49787	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.900103092 CET	49787	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.900129080 CET	443	49787	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.900178909 CET	49787	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.902273893 CET	443	49787	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.902290106 CET	443	49787	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.902360916 CET	49787	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.902365923 CET	443	49787	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.902406931 CET	49787	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.902476072 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.902492046 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.902616024 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.902621984 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.902668953 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.903700113 CET	443	49787	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.903716087 CET	443	49787	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.903769970 CET	49787	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.903776884 CET	443	49787	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.903821945 CET	49787	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.906173944 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.906197071 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.906256914 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.906264067 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.906308889 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.907238007 CET	443	49787	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.907248020 CET	443	49787	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.907329082 CET	49787	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.907335997 CET	443	49787	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.907383919 CET	49787	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.908303976 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.908319950 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.908462048 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.908467054 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.908519983 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.909161091 CET	443	49787	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.909224033 CET	49787	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.909229994 CET	443	49787	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.909245968 CET	443	49787	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.909291983 CET	49787	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.911264896 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.911282063 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.911326885 CET	443	49787	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.911343098 CET	443	49787	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.911344051 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.911350012 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.911393881 CET	49787	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.911401987 CET	443	49787	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.911423922 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.911451101 CET	49787	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.912441015 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.912460089 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.912549019 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.912553072 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.912607908 CET	443	49787	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.912611961 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.912667036 CET	49787	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.912704945 CET	443	49787	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.912755966 CET	49787	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.914721012 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.914741039 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.914751053 CET	443	49787	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.914764881 CET	443	49787	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.914834976 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.914839029 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.914841890 CET	49787	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.914846897 CET	443	49787	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.914892912 CET	49787	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.915028095 CET	443	49787	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.915055037 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.915091991 CET	443	49787	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.915132999 CET	49787	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.915360928 CET	49787	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.915371895 CET	443	49787	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.915771961 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.915833950 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.915843964 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.915895939 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.917335033 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.917350054 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.917443991 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.917448997 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.917463064 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.917495966 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.917795897 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.917809010 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.917869091 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.917874098 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.917922974 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.920550108 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.920563936 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.920660019 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.920666933 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.920706034 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.920790911 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.920804977 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.920849085 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.920854092 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.920913935 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.922745943 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.922759056 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.922821045 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.922825098 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.922863960 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.923048019 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.923063993 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.923110962 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.923115969 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.923158884 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.923427105 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.923445940 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.923496008 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.923501015 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.923541069 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.923618078 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.923634052 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.923677921 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.923681974 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.923728943 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.924566031 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.924580097 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.924668074 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.924673080 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.924731016 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.924838066 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.924851894 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.924894094 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.924899101 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.924994946 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.925718069 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.925734043 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.925770044 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.925774097 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.925813913 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.925873041 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.925889015 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.925901890 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.925905943 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.925930977 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.925965071 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.926459074 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.926471949 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.926534891 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.926542044 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.926585913 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.926623106 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.926636934 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.926645994 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.926659107 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.926676035 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.926680088 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.926712036 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.926758051 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.927341938 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.927359104 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.927453995 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.927459002 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.927508116 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.927588940 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.927603006 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.927642107 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.927649975 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.927666903 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.927690029 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.928006887 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.928021908 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.928072929 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.928076982 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.928123951 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.928226948 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.928242922 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.928299904 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.928303957 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.928312063 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.928343058 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.928792000 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.928807020 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.928849936 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.928853035 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.928863049 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.928925037 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.928982973 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.928982973 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.929193974 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.929228067 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.929297924 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.929526091 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.929537058 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:43.929667950 CET	49786	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:43.929675102 CET	443	49786	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:44.100290060 CET	49789	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:44.100334883 CET	443	49789	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:44.100414038 CET	49789	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:44.100660086 CET	49789	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:44.100672960 CET	443	49789	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:44.588669062 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:44.588959932 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:44.588982105 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:44.589309931 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:44.589605093 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:44.589662075 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:44.589881897 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:44.631334066 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:44.770433903 CET	443	49789	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:44.770740986 CET	49789	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:44.770752907 CET	443	49789	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:44.771795034 CET	443	49789	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:44.771867990 CET	49789	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:44.772803068 CET	49789	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:44.772864103 CET	443	49789	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:44.772973061 CET	49789	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:44.772979021 CET	443	49789	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:44.827697992 CET	49789	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:44.995275974 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:44.995304108 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:44.995326996 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:44.995385885 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:44.995399952 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:44.995450974 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:44.997060061 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:44.997076035 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:44.997128963 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:44.997136116 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:44.997176886 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.081403017 CET	443	49789	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.081428051 CET	443	49789	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.081537962 CET	49789	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.081552982 CET	443	49789	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.081599951 CET	49789	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.081614971 CET	443	49789	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.081686020 CET	443	49789	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.081732035 CET	49789	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.082227945 CET	49789	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.082243919 CET	443	49789	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.082252026 CET	49789	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.082294941 CET	49789	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.112129927 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.112154007 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.112240076 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.112252951 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.112299919 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.113394976 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.113409996 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.113468885 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.113476992 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.113518000 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.114984989 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.115001917 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.115111113 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.115117073 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.115159035 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.137258053 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.137276888 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.137370110 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.137378931 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.137424946 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.229564905 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.229587078 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.229728937 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.229754925 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.229811907 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.229890108 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.229903936 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.229948044 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.229954958 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.230006933 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.231157064 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.231172085 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.231232882 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.231244087 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.231281042 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.231867075 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.231880903 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.231988907 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.232002020 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.232047081 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.232995987 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.233011007 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.233064890 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.233072996 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.233118057 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.233762026 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.233777046 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.233828068 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.233834982 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.233880043 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.252006054 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.252023935 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.252098083 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.252104998 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.252144098 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.258498907 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.258513927 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.258593082 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.258599997 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.258666039 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.347945929 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.347968102 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.348046064 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.348056078 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.348087072 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.348114014 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.348387003 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.348402023 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.348452091 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.348459005 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.348500967 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.349292040 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.349307060 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.349359989 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.349368095 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.349421978 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.349816084 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.349831104 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.349885941 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.349893093 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.349941015 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.354924917 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.354940891 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.354999065 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.355005980 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.355052948 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.355329990 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.355345964 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.355400085 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.355408907 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.355463028 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.356106043 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.356121063 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.356173992 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.356180906 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.356225967 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.357058048 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.357076883 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.357135057 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.357142925 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.357187986 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.357959986 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.357975960 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.358028889 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.358036041 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.358083963 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.358508110 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.358521938 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.358578920 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.358586073 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.358642101 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.359153986 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.359185934 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.359216928 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.359229088 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.359245062 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.359245062 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.359292984 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.359457016 CET	49788	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.359471083 CET	443	49788	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.362210035 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.362231970 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.362303972 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.362541914 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.362550974 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.375695944 CET	49791	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.375737906 CET	443	49791	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.375811100 CET	49791	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.376003981 CET	49791	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.376020908 CET	443	49791	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.377295971 CET	49792	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.377332926 CET	443	49792	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.377393007 CET	49792	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.377571106 CET	49793	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.377615929 CET	443	49793	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.377665997 CET	49793	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.377770901 CET	49792	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.377782106 CET	443	49792	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:45.377919912 CET	49793	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:45.377940893 CET	443	49793	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.028418064 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.028779984 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.028791904 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.029128075 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.029431105 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.029481888 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.029613972 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.034476042 CET	443	49792	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.034821033 CET	49792	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.034832001 CET	443	49792	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.035172939 CET	443	49792	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.035614967 CET	49792	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.035662889 CET	443	49792	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.035778999 CET	49792	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.036397934 CET	443	49793	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.036613941 CET	49793	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.036640882 CET	443	49793	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.037789106 CET	443	49793	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.037854910 CET	49793	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.038158894 CET	49793	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.038249969 CET	443	49793	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.038315058 CET	49793	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.038321018 CET	443	49793	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.045296907 CET	443	49791	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.045523882 CET	49791	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.045540094 CET	443	49791	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.046701908 CET	443	49791	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.047065020 CET	49791	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.047199011 CET	49791	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.047205925 CET	443	49791	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.047247887 CET	443	49791	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.071326971 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.079327106 CET	443	49792	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.088694096 CET	49793	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.088696957 CET	49791	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.351106882 CET	443	49793	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.351129055 CET	443	49793	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.351200104 CET	49793	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.351211071 CET	443	49793	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.351255894 CET	49793	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.352092981 CET	49793	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.352116108 CET	443	49793	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.354849100 CET	49795	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.354876995 CET	443	49795	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.354950905 CET	49795	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.355182886 CET	49795	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.355199099 CET	443	49795	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.358560085 CET	443	49791	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.358586073 CET	443	49791	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.358663082 CET	443	49791	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.358660936 CET	49791	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.358707905 CET	49791	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.359968901 CET	49791	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.359994888 CET	443	49791	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.362498999 CET	49796	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.362536907 CET	443	49796	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.362632036 CET	49796	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.362848043 CET	49796	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.362864017 CET	443	49796	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.364927053 CET	443	49792	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.364957094 CET	443	49792	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.365019083 CET	49792	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.365026951 CET	443	49792	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.365067005 CET	49792	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.365072012 CET	443	49792	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.365108967 CET	49792	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.365744114 CET	49792	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.365756989 CET	443	49792	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.367818117 CET	49797	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.367866039 CET	443	49797	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.367944002 CET	49797	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.368129015 CET	49797	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.368161917 CET	443	49797	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.391663074 CET	49798	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.391696930 CET	443	49798	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.391781092 CET	49798	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.392060041 CET	49799	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.392112017 CET	443	49799	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.392179012 CET	49799	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.392349005 CET	49798	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.392369032 CET	443	49798	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.392514944 CET	49799	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.392546892 CET	443	49799	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.419199944 CET	49800	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.419228077 CET	443	49800	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.419306993 CET	49800	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.419619083 CET	49801	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.419675112 CET	443	49801	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.419785023 CET	49801	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.420129061 CET	49802	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.420137882 CET	443	49802	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.420196056 CET	49802	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.421317101 CET	49800	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.421327114 CET	443	49800	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.421632051 CET	49801	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.421658039 CET	443	49801	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.421912909 CET	49802	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.421927929 CET	443	49802	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.489737034 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.489769936 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.489785910 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.489900112 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.489912033 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.489967108 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.491921902 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.491944075 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.492012024 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.492019892 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.492069006 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.609380007 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.609402895 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.610661983 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.610709906 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.610713959 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.610729933 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.610742092 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.610795021 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.611644983 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.611666918 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.611711979 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.611718893 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.611743927 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.613379955 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.613399029 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.613466978 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.613475084 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.657716990 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.728108883 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.728128910 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.728240967 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.728256941 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.728307962 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.728739977 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.728755951 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.728826046 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.728833914 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.728892088 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.729592085 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.729607105 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.729655027 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.729661942 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.729712009 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.731892109 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.731909037 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.731957912 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.731965065 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.732007027 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.732379913 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.732395887 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.732446909 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.732454062 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.732503891 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.733045101 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.733059883 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.733115911 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.733123064 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.733164072 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.846052885 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.846081018 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.846117020 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.846165895 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.846230984 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.846241951 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.846280098 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.846920013 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.846941948 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.846983910 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.846993923 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.847004890 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.847412109 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.847435951 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.847470045 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.847476959 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.847487926 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.847829103 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.847850084 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.847892046 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.847898960 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.847934008 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.848114014 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.848134995 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.848186016 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.848193884 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.848212004 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.848526001 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.848543882 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.848597050 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.848606110 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.848633051 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.848870039 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.848891020 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.848932981 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.848939896 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.848949909 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.849344015 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.849359989 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.849404097 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.849414110 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.849427938 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.850620031 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.850646019 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.850848913 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.850862026 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.851136923 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.851171970 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.851393938 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:46.852962971 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.853776932 CET	49790	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:46.853810072 CET	443	49790	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.019980907 CET	443	49796	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.020096064 CET	443	49795	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.020289898 CET	49796	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.020313025 CET	443	49796	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.020405054 CET	49795	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.020431042 CET	443	49795	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.020705938 CET	443	49796	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.020797014 CET	443	49795	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.021038055 CET	49796	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.021110058 CET	443	49796	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.021325111 CET	49795	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.021387100 CET	443	49795	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.021477938 CET	49796	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.021538973 CET	49795	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.040741920 CET	443	49799	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.041142941 CET	49799	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.041168928 CET	443	49799	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.041507959 CET	443	49799	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.042006969 CET	49799	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.042071104 CET	443	49799	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.042206049 CET	49799	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.049516916 CET	443	49798	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.049678087 CET	443	49797	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.049839973 CET	49798	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.049859047 CET	443	49798	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.049967051 CET	49797	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.049985886 CET	443	49797	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.050244093 CET	443	49798	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.050617933 CET	49798	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.050688028 CET	443	49798	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.050789118 CET	49798	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.051064968 CET	443	49797	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.051140070 CET	49797	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.051409960 CET	49797	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.051482916 CET	443	49797	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.051517963 CET	49797	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.063333035 CET	443	49795	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.063347101 CET	443	49796	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.078205109 CET	443	49801	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.078511000 CET	49801	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.078540087 CET	443	49801	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.079421043 CET	443	49802	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.079545021 CET	443	49801	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.079637051 CET	49801	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.079646111 CET	49802	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.079674959 CET	443	49802	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.079977036 CET	49801	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.080027103 CET	443	49801	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.080156088 CET	49801	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.080164909 CET	443	49801	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.081111908 CET	443	49802	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.081172943 CET	49802	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.081428051 CET	49802	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.081505060 CET	443	49802	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.081542015 CET	49802	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.086738110 CET	443	49800	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.086977959 CET	49800	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.086992979 CET	443	49800	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.087331057 CET	443	49799	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.088449001 CET	443	49800	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.088512897 CET	49800	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.088848114 CET	49800	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.088946104 CET	49800	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.088953018 CET	443	49800	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.088984966 CET	443	49800	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.091332912 CET	443	49798	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.099339008 CET	443	49797	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.103229046 CET	49797	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.103245020 CET	443	49797	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.123327017 CET	443	49802	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.134701967 CET	49802	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.134701967 CET	49800	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.134721994 CET	443	49802	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.134735107 CET	443	49800	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.148670912 CET	49801	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.150269032 CET	49797	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.182687044 CET	49802	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.182687044 CET	49800	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.355489016 CET	443	49795	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.355510950 CET	443	49795	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.355583906 CET	443	49795	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.355598927 CET	49795	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.355670929 CET	49795	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.356650114 CET	49795	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.356671095 CET	443	49795	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.389354944 CET	443	49796	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.389381886 CET	443	49796	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.389451027 CET	443	49796	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.389476061 CET	49796	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.389537096 CET	49796	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.399507046 CET	49796	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.399525881 CET	443	49796	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.488291979 CET	443	49802	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.488375902 CET	443	49802	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.488437891 CET	49802	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.490854025 CET	443	49798	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.490881920 CET	443	49798	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.490946054 CET	443	49798	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.490967989 CET	49798	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.490997076 CET	49798	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.492440939 CET	49802	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.492460012 CET	443	49802	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.494920969 CET	49798	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.494935989 CET	443	49798	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.499115944 CET	49803	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.499166965 CET	443	49803	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.499255896 CET	49803	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.499752998 CET	49804	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.499799967 CET	443	49804	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.499867916 CET	49804	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.500134945 CET	49803	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.500147104 CET	443	49803	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.500356913 CET	49804	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.500375986 CET	443	49804	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.502489090 CET	443	49797	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.502511024 CET	443	49797	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.502517939 CET	443	49797	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.502582073 CET	49797	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.502588987 CET	443	49797	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.502645016 CET	49797	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.503453970 CET	443	49801	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.503475904 CET	443	49801	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.503525972 CET	443	49801	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.503525972 CET	49801	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.503568888 CET	49801	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.511926889 CET	49801	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.511941910 CET	443	49801	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.512200117 CET	49797	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.512221098 CET	443	49797	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.517741919 CET	49805	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.517775059 CET	443	49805	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.517851114 CET	49805	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.518060923 CET	49805	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.518074036 CET	443	49805	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.519579887 CET	443	49800	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.519666910 CET	443	49800	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.519714117 CET	49800	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.520776987 CET	49800	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.520790100 CET	443	49800	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.523374081 CET	49806	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.523428917 CET	443	49806	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.523488045 CET	49806	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.523698092 CET	49806	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.523718119 CET	443	49806	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.614190102 CET	443	49799	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.614221096 CET	443	49799	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.614240885 CET	443	49799	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.614315033 CET	49799	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.614356041 CET	443	49799	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.614373922 CET	443	49799	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.614409924 CET	49799	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.614425898 CET	49799	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.615329027 CET	49799	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.615349054 CET	443	49799	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.617907047 CET	49807	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.617944956 CET	443	49807	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:47.618027925 CET	49807	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.618220091 CET	49807	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:47.618233919 CET	443	49807	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.161078930 CET	443	49804	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.161434889 CET	49804	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:48.161462069 CET	443	49804	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.164711952 CET	443	49805	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.164977074 CET	49805	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:48.164999008 CET	443	49805	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.165334940 CET	443	49803	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.165534019 CET	49803	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:48.165549994 CET	443	49803	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.165884972 CET	443	49803	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.166188955 CET	49803	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:48.166213036 CET	443	49805	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.166251898 CET	443	49803	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.166284084 CET	49805	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:48.166342974 CET	49803	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:48.166568041 CET	49805	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:48.166645050 CET	443	49805	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.166687965 CET	49805	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:48.170908928 CET	443	49804	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.171212912 CET	49804	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:48.171281099 CET	443	49804	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.171325922 CET	49804	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:48.189873934 CET	443	49806	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.190119028 CET	49806	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:48.190146923 CET	443	49806	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.191174984 CET	443	49806	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.191239119 CET	49806	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:48.191513062 CET	49806	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:48.191571951 CET	443	49806	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.191644907 CET	49806	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:48.191652060 CET	443	49806	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.207351923 CET	443	49803	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.211329937 CET	443	49805	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.214653015 CET	49804	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:48.214657068 CET	49805	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:48.214664936 CET	443	49804	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.214682102 CET	443	49805	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.246697903 CET	49806	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:48.262665033 CET	49805	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:48.289598942 CET	443	49807	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.289861917 CET	49807	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:48.289877892 CET	443	49807	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.290885925 CET	443	49807	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.290958881 CET	49807	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:48.291258097 CET	49807	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:48.291338921 CET	443	49807	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.291399002 CET	49807	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:48.291409016 CET	443	49807	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.342650890 CET	49807	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:48.435841084 CET	443	49805	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.435863018 CET	443	49805	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.435920954 CET	49805	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:48.435939074 CET	443	49805	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.435955048 CET	443	49805	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.436007977 CET	49805	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:48.436621904 CET	49805	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:48.436636925 CET	443	49805	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.463021040 CET	443	49803	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.463116884 CET	443	49803	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.463174105 CET	49803	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:48.463800907 CET	49803	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:48.463814974 CET	443	49803	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.486263037 CET	443	49804	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.486294031 CET	443	49804	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.486357927 CET	49804	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:48.486370087 CET	443	49804	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.486424923 CET	49804	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:48.487051964 CET	49804	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:48.487066031 CET	443	49804	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.505007029 CET	443	49806	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.505139112 CET	443	49806	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.508593082 CET	49806	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:48.508593082 CET	49806	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:48.668747902 CET	443	49807	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.668771982 CET	443	49807	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.668806076 CET	443	49807	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.668816090 CET	443	49807	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.668827057 CET	443	49807	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.668854952 CET	49807	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:48.668875933 CET	443	49807	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.668889999 CET	49807	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:48.668905020 CET	443	49807	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.668929100 CET	49807	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:48.668957949 CET	49807	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:48.670095921 CET	49807	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:48.670123100 CET	443	49807	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:48.819650888 CET	49806	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:48.819694042 CET	443	49806	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:50.479715109 CET	49808	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:50.479773045 CET	443	49808	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:50.479855061 CET	49808	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:50.480123997 CET	49808	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:50.480137110 CET	443	49808	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:51.060925961 CET	49809	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:51.060971022 CET	443	49809	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:51.061090946 CET	49809	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:51.061328888 CET	49809	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:51.061343908 CET	443	49809	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:51.138830900 CET	443	49808	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:51.139133930 CET	49808	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:51.139152050 CET	443	49808	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:51.139498949 CET	443	49808	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:51.139930010 CET	49808	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:51.140006065 CET	443	49808	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:51.140072107 CET	49808	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:51.187335014 CET	443	49808	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:51.433736086 CET	443	49808	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:51.433767080 CET	443	49808	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:51.433784008 CET	443	49808	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:51.433830023 CET	49808	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:51.433845997 CET	443	49808	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:51.433875084 CET	49808	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:51.433906078 CET	49808	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:51.524468899 CET	443	49808	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:51.524519920 CET	443	49808	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:51.524569035 CET	443	49808	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:51.524827957 CET	49808	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:51.524913073 CET	49808	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:51.525089025 CET	49808	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:51.525103092 CET	443	49808	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:51.527888060 CET	49810	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:51.527920008 CET	443	49810	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:51.527995110 CET	49810	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:51.528255939 CET	49810	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:51.528266907 CET	443	49810	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:51.810528994 CET	49811	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:51.810587883 CET	443	49811	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:51.810725927 CET	49811	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:51.810939074 CET	49811	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:51.810950994 CET	443	49811	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:52.074145079 CET	443	49809	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:52.074549913 CET	49809	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:52.074564934 CET	443	49809	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:52.075283051 CET	443	49809	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:52.075660944 CET	49809	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:52.075769901 CET	443	49809	216.58.206.36	192.168.2.16
Nov 5, 2024 21:18:52.124670982 CET	49809	443	192.168.2.16	216.58.206.36
Nov 5, 2024 21:18:52.184756994 CET	443	49810	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:52.185288906 CET	49810	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:52.185306072 CET	443	49810	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:52.185652018 CET	443	49810	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:52.186001062 CET	49810	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:52.186055899 CET	443	49810	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:52.186145067 CET	49810	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:52.227341890 CET	443	49810	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:52.467709064 CET	443	49811	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:52.469229937 CET	49811	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:52.469252110 CET	443	49811	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:52.469619989 CET	443	49811	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:52.471496105 CET	49811	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:52.471575022 CET	443	49811	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:52.473555088 CET	49811	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:52.519324064 CET	443	49811	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:52.571225882 CET	443	49810	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:52.571260929 CET	443	49810	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:52.571276903 CET	443	49810	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:52.571377993 CET	49810	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:52.571391106 CET	443	49810	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:52.571444988 CET	49810	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:52.572276115 CET	443	49810	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:52.572335005 CET	49810	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:52.572339058 CET	443	49810	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:52.572379112 CET	49810	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:52.572386026 CET	443	49810	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:52.572426081 CET	49810	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:52.572516918 CET	49810	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:52.572530031 CET	443	49810	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:52.727494955 CET	443	49811	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:52.727605104 CET	443	49811	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:52.727761984 CET	49811	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:52.728461981 CET	49811	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:52.728481054 CET	443	49811	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:52.731108904 CET	49813	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:52.731158018 CET	443	49813	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:52.731237888 CET	49813	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:52.731448889 CET	49813	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:52.731463909 CET	443	49813	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:53.388571978 CET	443	49813	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:53.388866901 CET	49813	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:53.388895988 CET	443	49813	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:53.389241934 CET	443	49813	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:53.389540911 CET	49813	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:53.389590979 CET	443	49813	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:53.389682055 CET	49813	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:53.435333967 CET	443	49813	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:53.660058022 CET	443	49813	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:53.660166979 CET	443	49813	3.17.16.61	192.168.2.16
Nov 5, 2024 21:18:53.660232067 CET	49813	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:53.661282063 CET	49813	443	192.168.2.16	3.17.16.61
Nov 5, 2024 21:18:53.661302090 CET	443	49813	3.17.16.61	192.168.2.16

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 5, 2024 21:17:46.152213097 CET	53	53642	1.1.1.1	192.168.2.16
Nov 5, 2024 21:17:46.172437906 CET	53	58883	1.1.1.1	192.168.2.16
Nov 5, 2024 21:17:47.660495043 CET	53	61205	1.1.1.1	192.168.2.16
Nov 5, 2024 21:17:48.719255924 CET	138	138	192.168.2.16	192.168.2.255
Nov 5, 2024 21:17:49.905101061 CET	61164	53	192.168.2.16	1.1.1.1
Nov 5, 2024 21:17:49.905240059 CET	63343	53	192.168.2.16	1.1.1.1
Nov 5, 2024 21:17:50.133536100 CET	53	61164	1.1.1.1	192.168.2.16
Nov 5, 2024 21:17:50.136626959 CET	53	63343	1.1.1.1	192.168.2.16
Nov 5, 2024 21:17:50.999581099 CET	63091	53	192.168.2.16	1.1.1.1
Nov 5, 2024 21:17:50.999705076 CET	57785	53	192.168.2.16	1.1.1.1
Nov 5, 2024 21:17:51.010931015 CET	53	57785	1.1.1.1	192.168.2.16
Nov 5, 2024 21:17:51.011025906 CET	53	63091	1.1.1.1	192.168.2.16
Nov 5, 2024 21:17:52.262451887 CET	59808	53	192.168.2.16	1.1.1.1
Nov 5, 2024 21:17:52.262631893 CET	64635	53	192.168.2.16	1.1.1.1
Nov 5, 2024 21:17:52.262978077 CET	58461	53	192.168.2.16	1.1.1.1
Nov 5, 2024 21:17:52.263099909 CET	63001	53	192.168.2.16	1.1.1.1
Nov 5, 2024 21:17:52.263699055 CET	58670	53	192.168.2.16	1.1.1.1
Nov 5, 2024 21:17:52.263868093 CET	63504	53	192.168.2.16	1.1.1.1
Nov 5, 2024 21:17:52.269706964 CET	53	59808	1.1.1.1	192.168.2.16
Nov 5, 2024 21:17:52.270447969 CET	53	63001	1.1.1.1	192.168.2.16
Nov 5, 2024 21:17:52.270492077 CET	53	58461	1.1.1.1	192.168.2.16
Nov 5, 2024 21:17:52.271460056 CET	53	58670	1.1.1.1	192.168.2.16
Nov 5, 2024 21:17:52.271497965 CET	53	63504	1.1.1.1	192.168.2.16
Nov 5, 2024 21:17:52.271609068 CET	53	64635	1.1.1.1	192.168.2.16
Nov 5, 2024 21:17:53.182689905 CET	60263	53	192.168.2.16	1.1.1.1
Nov 5, 2024 21:17:53.184149027 CET	58766	53	192.168.2.16	1.1.1.1
Nov 5, 2024 21:17:53.189610958 CET	53	60263	1.1.1.1	192.168.2.16
Nov 5, 2024 21:17:53.191255093 CET	53	58766	1.1.1.1	192.168.2.16
Nov 5, 2024 21:17:53.418598890 CET	63174	53	192.168.2.16	1.1.1.1
Nov 5, 2024 21:17:53.419332981 CET	49266	53	192.168.2.16	1.1.1.1
Nov 5, 2024 21:17:53.425776005 CET	53	63174	1.1.1.1	192.168.2.16
Nov 5, 2024 21:17:53.426557064 CET	53	49266	1.1.1.1	192.168.2.16
Nov 5, 2024 21:17:53.579338074 CET	65123	53	192.168.2.16	1.1.1.1
Nov 5, 2024 21:17:53.579509974 CET	52941	53	192.168.2.16	1.1.1.1
Nov 5, 2024 21:17:53.588697910 CET	53	52941	1.1.1.1	192.168.2.16
Nov 5, 2024 21:17:53.805501938 CET	53	65123	1.1.1.1	192.168.2.16
Nov 5, 2024 21:17:54.083570957 CET	52973	53	192.168.2.16	1.1.1.1
Nov 5, 2024 21:17:54.083802938 CET	62827	53	192.168.2.16	1.1.1.1
Nov 5, 2024 21:17:54.091371059 CET	53	62827	1.1.1.1	192.168.2.16
Nov 5, 2024 21:17:54.091614962 CET	53	52973	1.1.1.1	192.168.2.16
Nov 5, 2024 21:17:54.092055082 CET	54716	53	192.168.2.16	1.1.1.1
Nov 5, 2024 21:17:54.092354059 CET	58879	53	192.168.2.16	1.1.1.1
Nov 5, 2024 21:17:54.099541903 CET	53	58879	1.1.1.1	192.168.2.16
Nov 5, 2024 21:17:54.099792004 CET	53	54716	1.1.1.1	192.168.2.16
Nov 5, 2024 21:17:55.194583893 CET	55854	53	192.168.2.16	1.1.1.1
Nov 5, 2024 21:17:55.194725990 CET	58379	53	192.168.2.16	1.1.1.1
Nov 5, 2024 21:17:55.201431990 CET	53	55854	1.1.1.1	192.168.2.16
Nov 5, 2024 21:17:55.201519012 CET	53	58379	1.1.1.1	192.168.2.16
Nov 5, 2024 21:17:55.307132006 CET	53	55344	1.1.1.1	192.168.2.16
Nov 5, 2024 21:18:04.436306000 CET	53	63285	1.1.1.1	192.168.2.16
Nov 5, 2024 21:18:23.482703924 CET	53	50348	1.1.1.1	192.168.2.16
Nov 5, 2024 21:18:37.454701900 CET	65313	53	192.168.2.16	1.1.1.1
Nov 5, 2024 21:18:37.454865932 CET	55375	53	192.168.2.16	1.1.1.1
Nov 5, 2024 21:18:37.683538914 CET	53	55375	1.1.1.1	192.168.2.16
Nov 5, 2024 21:18:37.702663898 CET	53	65313	1.1.1.1	192.168.2.16
Nov 5, 2024 21:18:38.981417894 CET	65196	53	192.168.2.16	1.1.1.1
Nov 5, 2024 21:18:38.981574059 CET	62150	53	192.168.2.16	1.1.1.1
Nov 5, 2024 21:18:38.989875078 CET	53	62150	1.1.1.1	192.168.2.16
Nov 5, 2024 21:18:39.241528988 CET	53	65196	1.1.1.1	192.168.2.16
Nov 5, 2024 21:18:40.075501919 CET	59446	53	192.168.2.16	1.1.1.1
Nov 5, 2024 21:18:40.075709105 CET	62024	53	192.168.2.16	1.1.1.1
Nov 5, 2024 21:18:40.342677116 CET	59975	53	192.168.2.16	1.1.1.1
Nov 5, 2024 21:18:40.342967987 CET	51834	53	192.168.2.16	1.1.1.1
Nov 5, 2024 21:18:40.349829912 CET	53	59975	1.1.1.1	192.168.2.16
Nov 5, 2024 21:18:40.350507975 CET	53	51834	1.1.1.1	192.168.2.16
Nov 5, 2024 21:18:40.455296040 CET	61394	53	192.168.2.16	1.1.1.1
Nov 5, 2024 21:18:40.455600023 CET	57503	53	192.168.2.16	1.1.1.1
Nov 5, 2024 21:18:40.570944071 CET	53	61394	1.1.1.1	192.168.2.16
Nov 5, 2024 21:18:40.683600903 CET	53	57503	1.1.1.1	192.168.2.16
Nov 5, 2024 21:18:43.951102018 CET	56593	53	192.168.2.16	1.1.1.1
Nov 5, 2024 21:18:43.951260090 CET	53486	53	192.168.2.16	1.1.1.1
Nov 5, 2024 21:18:44.067779064 CET	53	56593	1.1.1.1	192.168.2.16
Nov 5, 2024 21:18:44.180876017 CET	53	53486	1.1.1.1	192.168.2.16
Nov 5, 2024 21:18:46.150137901 CET	53	62002	1.1.1.1	192.168.2.16
Nov 5, 2024 21:18:46.242177963 CET	53	59787	1.1.1.1	192.168.2.16

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 5, 2024 21:18:40.686311007 CET	192.168.2.16	1.1.1.1	c25e	(Port unreachable)	Destination Unreachable
Nov 5, 2024 21:18:44.180977106 CET	192.168.2.16	1.1.1.1	c276	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 5, 2024 21:17:49.905101061 CET	192.168.2.16	1.1.1.1	0xc78d	Standard query (0)	login.nuriapsicologia.com	A (IP address)	IN (0x0001)	false
Nov 5, 2024 21:17:49.905240059 CET	192.168.2.16	1.1.1.1	0x5a5d	Standard query (0)	login.nuriapsicologia.com	65	IN (0x0001)	false
Nov 5, 2024 21:17:50.999581099 CET	192.168.2.16	1.1.1.1	0x45a6	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 5, 2024 21:17:50.999705076 CET	192.168.2.16	1.1.1.1	0xd6ac	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 5, 2024 21:17:52.262451887 CET	192.168.2.16	1.1.1.1	0x4a15	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 5, 2024 21:17:52.262631893 CET	192.168.2.16	1.1.1.1	0x823c	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Nov 5, 2024 21:17:52.262978077 CET	192.168.2.16	1.1.1.1	0xd80f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 5, 2024 21:17:52.263099909 CET	192.168.2.16	1.1.1.1	0xcafb	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 5, 2024 21:17:52.263699055 CET	192.168.2.16	1.1.1.1	0xc11a	Standard query (0)	unpkg.com	A (IP address)	IN (0x0001)	false
Nov 5, 2024 21:17:52.263868093 CET	192.168.2.16	1.1.1.1	0xfe8d	Standard query (0)	unpkg.com	65	IN (0x0001)	false
Nov 5, 2024 21:17:53.182689905 CET	192.168.2.16	1.1.1.1	0x6108	Standard query (0)	unpkg.com	A (IP address)	IN (0x0001)	false
Nov 5, 2024 21:17:53.184149027 CET	192.168.2.16	1.1.1.1	0x80af	Standard query (0)	unpkg.com	65	IN (0x0001)	false
Nov 5, 2024 21:17:53.418598890 CET	192.168.2.16	1.1.1.1	0x22e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 5, 2024 21:17:53.419332981 CET	192.168.2.16	1.1.1.1	0x5e0e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 5, 2024 21:17:53.579338074 CET	192.168.2.16	1.1.1.1	0xa0c	Standard query (0)	login.nuriapsicologia.com	A (IP address)	IN (0x0001)	false
Nov 5, 2024 21:17:53.579509974 CET	192.168.2.16	1.1.1.1	0x86b0	Standard query (0)	login.nuriapsicologia.com	65	IN (0x0001)	false
Nov 5, 2024 21:17:54.083570957 CET	192.168.2.16	1.1.1.1	0xae3e	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 5, 2024 21:17:54.083802938 CET	192.168.2.16	1.1.1.1	0x7507	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Nov 5, 2024 21:17:54.092055082 CET	192.168.2.16	1.1.1.1	0xac6e	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 5, 2024 21:17:54.092354059 CET	192.168.2.16	1.1.1.1	0x1a95	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Nov 5, 2024 21:17:55.194583893 CET	192.168.2.16	1.1.1.1	0x403e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 5, 2024 21:17:55.194725990 CET	192.168.2.16	1.1.1.1	0x4ef	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 5, 2024 21:18:37.454701900 CET	192.168.2.16	1.1.1.1	0xafab	Standard query (0)	61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com	A (IP address)	IN (0x0001)	false
Nov 5, 2024 21:18:37.454865932 CET	192.168.2.16	1.1.1.1	0x2b46	Standard query (0)	61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com	65	IN (0x0001)	false
Nov 5, 2024 21:18:38.981417894 CET	192.168.2.16	1.1.1.1	0xa272	Standard query (0)	61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com	A (IP address)	IN (0x0001)	false
Nov 5, 2024 21:18:38.981574059 CET	192.168.2.16	1.1.1.1	0x79fe	Standard query (0)	61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com	65	IN (0x0001)	false
Nov 5, 2024 21:18:40.075501919 CET	192.168.2.16	1.1.1.1	0xa3d3	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Nov 5, 2024 21:18:40.075709105 CET	192.168.2.16	1.1.1.1	0xded6	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false
Nov 5, 2024 21:18:40.342677116 CET	192.168.2.16	1.1.1.1	0x18d3	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Nov 5, 2024 21:18:40.342967987 CET	192.168.2.16	1.1.1.1	0xb2ac	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Nov 5, 2024 21:18:40.455296040 CET	192.168.2.16	1.1.1.1	0xcd63	Standard query (0)	6c6f67696e2e6c6976652e636f6d.nuriapsicologia.com	A (IP address)	IN (0x0001)	false
Nov 5, 2024 21:18:40.455600023 CET	192.168.2.16	1.1.1.1	0x75cd	Standard query (0)	6c6f67696e2e6c6976652e636f6d.nuriapsicologia.com	65	IN (0x0001)	false
Nov 5, 2024 21:18:43.951102018 CET	192.168.2.16	1.1.1.1	0x9c3d	Standard query (0)	706f7274616c2e6d6963726f736f66746f6e6c696e652e636f6d.nuriapsicologia.com	A (IP address)	IN (0x0001)	false
Nov 5, 2024 21:18:43.951260090 CET	192.168.2.16	1.1.1.1	0x433f	Standard query (0)	706f7274616c2e6d6963726f736f66746f6e6c696e652e636f6d.nuriapsicologia.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 5, 2024 21:17:50.133536100 CET	1.1.1.1	192.168.2.16	0xc78d	No error (0)	login.nuriapsicologia.com		3.17.16.61	A (IP address)	IN (0x0001)	false
Nov 5, 2024 21:17:51.010931015 CET	1.1.1.1	192.168.2.16	0xd6ac	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 5, 2024 21:17:51.011025906 CET	1.1.1.1	192.168.2.16	0x45a6	No error (0)	www.google.com		216.58.206.36	A (IP address)	IN (0x0001)	false
Nov 5, 2024 21:17:52.269706964 CET	1.1.1.1	192.168.2.16	0x4a15	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Nov 5, 2024 21:17:52.269706964 CET	1.1.1.1	192.168.2.16	0x4a15	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Nov 5, 2024 21:17:52.270447969 CET	1.1.1.1	192.168.2.16	0xcafb	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 5, 2024 21:17:52.270492077 CET	1.1.1.1	192.168.2.16	0xd80f	No error (0)	www.google.com		172.217.16.132	A (IP address)	IN (0x0001)	false
Nov 5, 2024 21:17:52.271460056 CET	1.1.1.1	192.168.2.16	0xc11a	No error (0)	unpkg.com		104.17.246.203	A (IP address)	IN (0x0001)	false
Nov 5, 2024 21:17:52.271460056 CET	1.1.1.1	192.168.2.16	0xc11a	No error (0)	unpkg.com		104.17.249.203	A (IP address)	IN (0x0001)	false
Nov 5, 2024 21:17:52.271460056 CET	1.1.1.1	192.168.2.16	0xc11a	No error (0)	unpkg.com		104.17.248.203	A (IP address)	IN (0x0001)	false
Nov 5, 2024 21:17:52.271460056 CET	1.1.1.1	192.168.2.16	0xc11a	No error (0)	unpkg.com		104.17.247.203	A (IP address)	IN (0x0001)	false
Nov 5, 2024 21:17:52.271460056 CET	1.1.1.1	192.168.2.16	0xc11a	No error (0)	unpkg.com		104.17.245.203	A (IP address)	IN (0x0001)	false
Nov 5, 2024 21:17:52.271497965 CET	1.1.1.1	192.168.2.16	0xfe8d	No error (0)	unpkg.com			65	IN (0x0001)	false
Nov 5, 2024 21:17:52.271609068 CET	1.1.1.1	192.168.2.16	0x823c	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Nov 5, 2024 21:17:53.189610958 CET	1.1.1.1	192.168.2.16	0x6108	No error (0)	unpkg.com		104.17.248.203	A (IP address)	IN (0x0001)	false
Nov 5, 2024 21:17:53.189610958 CET	1.1.1.1	192.168.2.16	0x6108	No error (0)	unpkg.com		104.17.249.203	A (IP address)	IN (0x0001)	false
Nov 5, 2024 21:17:53.189610958 CET	1.1.1.1	192.168.2.16	0x6108	No error (0)	unpkg.com		104.17.246.203	A (IP address)	IN (0x0001)	false
Nov 5, 2024 21:17:53.189610958 CET	1.1.1.1	192.168.2.16	0x6108	No error (0)	unpkg.com		104.17.247.203	A (IP address)	IN (0x0001)	false
Nov 5, 2024 21:17:53.189610958 CET	1.1.1.1	192.168.2.16	0x6108	No error (0)	unpkg.com		104.17.245.203	A (IP address)	IN (0x0001)	false
Nov 5, 2024 21:17:53.191255093 CET	1.1.1.1	192.168.2.16	0x80af	No error (0)	unpkg.com			65	IN (0x0001)	false
Nov 5, 2024 21:17:53.425776005 CET	1.1.1.1	192.168.2.16	0x22e	No error (0)	www.google.com		216.58.206.36	A (IP address)	IN (0x0001)	false
Nov 5, 2024 21:17:53.426557064 CET	1.1.1.1	192.168.2.16	0x5e0e	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 5, 2024 21:17:53.805501938 CET	1.1.1.1	192.168.2.16	0xa0c	No error (0)	login.nuriapsicologia.com		3.17.16.61	A (IP address)	IN (0x0001)	false
Nov 5, 2024 21:17:54.091371059 CET	1.1.1.1	192.168.2.16	0x7507	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Nov 5, 2024 21:17:54.091614962 CET	1.1.1.1	192.168.2.16	0xae3e	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Nov 5, 2024 21:17:54.091614962 CET	1.1.1.1	192.168.2.16	0xae3e	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Nov 5, 2024 21:17:54.099541903 CET	1.1.1.1	192.168.2.16	0x1a95	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Nov 5, 2024 21:17:54.099792004 CET	1.1.1.1	192.168.2.16	0xac6e	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Nov 5, 2024 21:17:54.099792004 CET	1.1.1.1	192.168.2.16	0xac6e	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Nov 5, 2024 21:17:55.201431990 CET	1.1.1.1	192.168.2.16	0x403e	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Nov 5, 2024 21:17:55.201519012 CET	1.1.1.1	192.168.2.16	0x4ef	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 5, 2024 21:18:37.702663898 CET	1.1.1.1	192.168.2.16	0xafab	No error (0)	61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com		3.17.16.61	A (IP address)	IN (0x0001)	false
Nov 5, 2024 21:18:39.241528988 CET	1.1.1.1	192.168.2.16	0xa272	No error (0)	61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com		3.17.16.61	A (IP address)	IN (0x0001)	false
Nov 5, 2024 21:18:40.083621979 CET	1.1.1.1	192.168.2.16	0xded6	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 5, 2024 21:18:40.083837986 CET	1.1.1.1	192.168.2.16	0xa3d3	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 5, 2024 21:18:40.349829912 CET	1.1.1.1	192.168.2.16	0x18d3	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 5, 2024 21:18:40.349829912 CET	1.1.1.1	192.168.2.16	0x18d3	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 5, 2024 21:18:40.349829912 CET	1.1.1.1	192.168.2.16	0x18d3	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Nov 5, 2024 21:18:40.350219965 CET	1.1.1.1	192.168.2.16	0x859f	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 5, 2024 21:18:40.350219965 CET	1.1.1.1	192.168.2.16	0x859f	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 5, 2024 21:18:40.350507975 CET	1.1.1.1	192.168.2.16	0xb2ac	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 5, 2024 21:18:40.350507975 CET	1.1.1.1	192.168.2.16	0xb2ac	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 5, 2024 21:18:40.570944071 CET	1.1.1.1	192.168.2.16	0xcd63	No error (0)	6c6f67696e2e6c6976652e636f6d.nuriapsicologia.com		3.17.16.61	A (IP address)	IN (0x0001)	false
Nov 5, 2024 21:18:44.067779064 CET	1.1.1.1	192.168.2.16	0x9c3d	No error (0)	706f7274616c2e6d6963726f736f66746f6e6c696e652e636f6d.nuriapsicologia.com		3.17.16.61	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

fs.microsoft.com

slscr.update.microsoft.com

https:

challenges.cloudflare.com

unpkg.com

www.google.com

61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com

6c6f67696e2e6c6976652e636f6d.nuriapsicologia.com

706f7274616c2e6d6963726f736f66746f6e6c696e652e636f6d.nuriapsicologia.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.16	49702	2.23.194.22	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:16:51 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-05 20:16:51 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=246561 Date: Tue, 05 Nov 2024 20:16:51 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.16	49705	2.23.194.22	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:16:52 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-05 20:16:52 UTC	487	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=246555 Date: Tue, 05 Nov 2024 20:16:52 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-05 20:16:52 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49707	20.190.159.75	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:16:55 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2024-11-05 20:16:55 UTC	3592	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-11-05 20:16:55 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Tue, 05 Nov 2024 20:15:55 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C538_BAY x-ms-request-id: 02d830dd-83a9-4145-a5cb-148b8b669ec8 PPServer: PPV: 30 H: PH1PEPF00011FED V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Tue, 05 Nov 2024 20:16:54 GMT Connection: close Content-Length: 11392
2024-11-05 20:16:55 UTC	11392	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49708	20.190.159.75	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:16:56 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-11-05 20:16:56 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-11-05 20:16:57 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Tue, 05 Nov 2024 20:15:57 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C538_SN1 x-ms-request-id: 413094e1-1b53-4ceb-8c19-30b2c6a7f354 PPServer: PPV: 30 H: SN1PEPF0002FA5B V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Tue, 05 Nov 2024 20:16:56 GMT Connection: close Content-Length: 11412
2024-11-05 20:16:57 UTC	11412	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49709	20.190.159.75	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:16:58 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-11-05 20:16:58 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-11-05 20:16:58 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Tue, 05 Nov 2024 20:15:58 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C538_BAY x-ms-request-id: 24151501-be95-4a34-9d92-e3f154abea99 PPServer: PPV: 30 H: PH1PEPF00011EFE V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Tue, 05 Nov 2024 20:16:58 GMT Connection: close Content-Length: 11412
2024-11-05 20:16:58 UTC	11412	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49711	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:16:59 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=pVUlNGnV+b1mfpf&MD=c9yZPbEh HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-05 20:16:59 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 8a21fd03-7aeb-4800-8a9f-a00a3e522f18 MS-RequestId: 95e5510f-4c0e-4347-b3a5-2b263c616513 MS-CV: 6L66vDzi0Eut62dl.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 05 Nov 2024 20:16:58 GMT Connection: close Content-Length: 24490
2024-11-05 20:16:59 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-05 20:16:59 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49712	20.190.159.75	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:16:59 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4762 Host: login.live.com
2024-11-05 20:16:59 UTC	4762	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-11-05 20:17:00 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Tue, 05 Nov 2024 20:16:00 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C538_BAY x-ms-request-id: d248fc77-33d4-4bb9-95da-aaf252bcd870 PPServer: PPV: 30 H: PH1PEPF00018BCA V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Tue, 05 Nov 2024 20:16:59 GMT Connection: close Content-Length: 10197
2024-11-05 20:17:00 UTC	10197	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49713	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:17:37 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=pVUlNGnV+b1mfpf&MD=c9yZPbEh HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-05 20:17:37 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: e32d0107-594b-4fe7-ad3b-5c0a5ee4e1a7 MS-RequestId: 6466f385-3645-472f-81e9-c70404256c57 MS-CV: K8aC1XfCs06Jscxl.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 05 Nov 2024 20:17:36 GMT Connection: close Content-Length: 30005
2024-11-05 20:17:37 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-05 20:17:37 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49719	3.17.16.61	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:17:50 UTC	674	OUT	GET / HTTP/1.1 Host: login.nuriapsicologia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-05 20:17:50 UTC	167	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 05 Nov 2024 20:17:50 GMT Content-Type: text/html; charset=utf-8 Content-Length: 379 Connection: close
2024-11-05 20:17:50 UTC	379	IN	Data Raw: 0a 20 20 20 20 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 66 6f 72 6d 20 69 64 3d 22 73 75 62 41 63 74 22 20 61 63 74 69 6f 6e 3d 22 76 6d 69 64 64 6c 65 39 39 39 39 22 20 6d 65 74 68 6f 64 3d 22 50 4f 53 54 22 3e 0a 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 68 69 6e 74 49 64 22 20 6e 61 6d 65 3d 22 68 69 6e 74 22 20 76 61 6c 75 65 3d 22 22 3e 0a 20 20 20 20 3c 2f 66 6f 72 6d 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 69 66 28 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 2e 73 75 62 73 74 72 69 6e 67 28 31 29 29 7b 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e Data Ascii: <html> <body> <form id="subAct" action="vmiddle9999" method="POST"> <input type="hidden" id="hintId" name="hint" value=""> </form> </body> </html> <script> if(location.hash.substring(1)){ document.getElemen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49720	3.17.16.61	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:17:50 UTC	850	OUT	POST /vmiddle9999 HTTP/1.1 Host: login.nuriapsicologia.com Connection: keep-alive Content-Length: 37 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://login.nuriapsicologia.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://login.nuriapsicologia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-05 20:17:50 UTC	37	OUT	Data Raw: 68 69 6e 74 3d 72 70 65 74 72 69 6e 69 25 34 30 61 6c 6c 69 61 6e 63 65 62 61 6e 6b 74 65 78 61 73 2e 63 6f 6d Data Ascii: hint=rpetrini%40alliancebanktexas.com
2024-11-05 20:17:52 UTC	169	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 05 Nov 2024 20:17:51 GMT Content-Type: text/html; charset=utf-8 Content-Length: 56316 Connection: close
2024-11-05 20:17:52 UTC	16215	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 09 3c 73 74 79 6c 65 3e 0a 09 09 62 6f 64 79 20 7b 0a 09 09 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 09 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 29 3b 0a 09 09 09 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 76 65 72 3b 0a 09 09 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 72 3b 0a 09 09 09 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 09 09 09 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 09 Data Ascii: <html><head><meta name="viewport" content="width=device-width, initial-scale=1.0"><style>body {margin: 0;background-image: url();background-size: cover;background-position: center;display: flex;justify-content: center;
2024-11-05 20:17:52 UTC	16384	IN	Data Raw: 56 34 66 31 35 62 6b 72 70 25 30 44 25 30 41 4e 78 55 6d 46 43 59 55 4a 69 35 31 44 75 38 64 45 52 2f 32 77 45 68 68 51 6d 48 69 6c 33 50 69 69 49 47 4d 6c 30 55 58 4a 6b 70 5a 34 69 58 6d 71 57 78 6e 58 6c 62 47 54 4d 2f 4b 45 74 65 50 69 4a 50 73 57 34 74 47 43 7a 77 66 25 30 44 25 30 41 58 79 63 69 76 6d 4c 2f 79 76 61 38 61 53 4c 6e 66 46 65 46 43 52 48 6e 50 68 51 6d 52 42 51 6d 46 43 5a 45 46 43 5a 51 6d 4a 68 44 59 57 4c 36 64 33 36 75 6f 6f 57 54 7a 78 71 5a 32 36 39 70 6d 68 74 31 2f 46 64 79 37 39 2f 4a 25 30 44 25 30 41 73 61 73 77 6f 54 44 52 36 38 4c 45 39 4e 4e 4a 6e 2f 4b 77 53 47 46 43 59 65 4b 58 5a 59 6e 66 48 64 43 76 76 34 39 63 38 4c 68 34 6f 54 6b 71 36 38 77 2f 39 4f 56 38 75 37 53 30 74 46 74 45 66 4d 49 2b 74 57 69 30 4b 4a 50 4a Data Ascii: V4f15bkrp%0D%0ANxUmFCYUJi51Du8dER/2wEhhQmHil3PiiIGMl0UXJkpZ4iXmqWxnXlbGTM/KEtePiJPsW4tGCzwf%0D%0AXycivmL/yva8aSLnfFeFCRHnPhQmRBQmFCZEFCZQmJhDYWL6d36uooWTzxqZ269pmht1/Fdy79/J%0D%0AsaswoTDR68LE9NNJn/KwSGFCYeKXZYnfHdCvv49c8Lh4oTkq68w/9OV8u7S0tFtEfMI+tWi0KJPJ
2024-11-05 20:17:52 UTC	16384	IN	Data Raw: 54 6d 4b 68 72 76 53 74 4d 77 4c 54 59 43 42 64 52 6d 42 42 52 6d 4b 44 44 25 30 44 25 30 41 46 2f 34 4b 45 7a 50 57 74 75 33 65 45 58 46 79 4a 54 64 58 5a 2b 33 73 67 34 51 61 4e 6a 68 79 7a 6e 39 55 38 54 47 71 4d 44 47 62 63 56 57 59 32 50 47 78 2f 61 33 61 48 6f 53 75 72 71 37 65 79 69 38 37 6d 78 51 6d 71 74 51 30 25 30 44 25 30 41 7a 51 4d 72 33 4f 42 38 67 35 6e 72 78 50 48 2b 6f 41 6f 33 66 52 2f 58 78 37 6d 59 76 4f 33 6a 62 79 50 69 48 41 57 49 58 63 72 68 62 64 76 75 50 73 64 6a 35 32 32 31 6a 64 46 34 50 4c 36 6e 73 31 34 6e 7a 72 76 2f 57 4e 6e 61 25 30 44 25 30 41 4f 57 64 58 50 7a 38 36 6f 2f 46 54 6d 4b 68 72 76 53 74 4d 77 4c 54 59 43 42 64 52 6d 42 42 52 6d 4b 44 44 46 2f 34 4b 45 2f 4d 5a 35 37 2b 75 61 4f 4e 6d 76 4a 4d 50 52 6a 2f 5a Data Ascii: TmKhrvStMwLTYCBdRmBBRmKDD%0D%0AF/4KEzPWtu3eEXFyJTdXZ+3sg4QaNjhyzn9U8TGqMDGbcVWY2PGx/a3aHoSurq7eyi87mxQmqtQ0%0D%0AzQMr3OB8g5nrxPH+oAo3fR/Xx7mYvO3jbyPiHAWIXcrhbdvuPsdj5221jdF4PL6ns14nzrv/WNna%0D%0AOWdXPz86o/FTmKhrvStMwLTYCBdRmBBRmKDDF/4KE/MZ57+uaONmvJMPRj/Z
2024-11-05 20:17:52 UTC	7333	IN	Data Raw: 41 74 6d 33 33 4e 73 76 31 47 59 31 47 6c 79 38 46 6c 34 68 59 6a 59 68 33 54 50 35 43 2f 66 78 4b 66 77 74 4c 49 66 4b 35 25 30 44 25 30 41 35 65 31 53 35 64 39 6c 64 6f 65 74 6c 47 54 4b 57 35 34 69 34 73 6b 52 38 61 61 4b 31 2f 61 46 4b 66 2f 74 58 79 33 2f 6c 70 7a 7a 6b 35 71 6d 75 59 58 72 50 65 6a 46 75 57 71 66 55 6d 54 4d 4f 62 39 78 63 6d 33 56 31 58 50 51 25 30 44 25 30 41 7a 79 4c 69 59 2b 57 74 6f 79 6d 6c 65 79 38 76 4c 2b 39 6c 39 76 67 56 4e 73 4a 46 46 43 5a 45 46 43 59 41 41 4b 70 2b 55 4c 56 37 7a 76 6c 32 35 51 46 30 52 4c 77 2b 49 6a 37 62 77 51 64 57 5a 30 38 65 39 6e 39 6f 38 6d 72 31 25 30 44 25 30 41 67 31 4e 4b 64 32 7a 62 39 72 4a 6d 45 4f 6f 38 37 34 78 47 6f 39 75 6b 6c 4a 34 51 45 53 2f 4c 4f 58 38 79 49 72 37 62 77 51 32 39 Data Ascii: Atm33Nsv1GY1Gly8Fl4hYjYh3TP5C/fxKfwtLIfK5%0D%0A5e1S5d9ldoetlGTKW54i4skR8aaK1/aFKf/tXy3/lpzzk5qmuYXrPejFuWqfUmTMOb9xcm3V1XPQ%0D%0AzyLiY+Wtoymley8vL+9l9vgVNsJFFCZEFCYAAKp+ULV7zvl25QF0RLw+Ij7bwQdWZ08e9n9o8mr1%0D%0Ag1NKd2zb9rJmEOo874xGo9uklJ4QES/LOX8yIr7bwQ29

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49725	104.18.95.41	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:17:52 UTC	584	OUT	GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.nuriapsicologia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-05 20:17:53 UTC	386	IN	HTTP/1.1 302 Found Date: Tue, 05 Nov 2024 20:17:52 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/22755d9a86c9/api.js Server: cloudflare CF-RAY: 8ddf87a1e863a918-DFW alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49724	104.17.246.203	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:17:52 UTC	537	OUT	GET /bowser@2.7.0/es5.js HTTP/1.1 Host: unpkg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.nuriapsicologia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-05 20:17:53 UTC	575	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 20:17:52 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * cache-control: public, max-age=31536000 last-modified: Sat, 26 Oct 1985 08:15:00 GMT etag: W/"5ff9-qIexTHX9DwBh9dpOfXrboe/0aqI" via: 1.1 fly.io fly-request-id: 01JB3QJG7RGH0TPH4NY5FCGF4V-dfw CF-Cache-Status: HIT Age: 914407 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8ddf87a1e9d9477a-DFW
2024-11-05 20:17:53 UTC	794	IN	Data Raw: 35 66 66 39 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 62 6f 77 73 65 72 3d 74 28 29 3a 65 2e 62 6f 77 73 65 72 3d 74 28 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 Data Ascii: 5ff9!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.bowser=t():e.bowser=t()}(this,(function(){return function(e){var t={};function r(
2024-11-05 20:17:53 UTC	1369	IN	Data Raw: 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 69 2c 22 64 65 66 61 75 6c 74 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 65 7d 29 2c 32 26 74 26 26 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 29 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 72 2e 64 28 69 2c 6e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 5b 74 5d 7d 2e 62 69 6e 64 28 6e 75 6c 6c 2c 6e 29 29 3b 72 65 74 75 72 6e 20 69 7d 2c 72 2e 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 64 65 66 61 75 6c 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 3b 72 65 74 75 72 6e 20 72 2e 64 28 74 2c 22 61 22 2c Data Ascii: t.defineProperty(i,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var n in e)r.d(i,n,function(t){return e[t]}.bind(null,n));return i},r.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return r.d(t,"a",
2024-11-05 20:17:53 UTC	1369	IN	Data Raw: 22 4d 6f 6a 61 76 65 22 3b 63 61 73 65 20 31 35 3a 72 65 74 75 72 6e 22 43 61 74 61 6c 69 6e 61 22 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 7d 7d 2c 65 2e 67 65 74 41 6e 64 72 6f 69 64 56 65 72 73 69 6f 6e 4e 61 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 73 70 6c 69 74 28 22 2e 22 29 2e 73 70 6c 69 63 65 28 30 2c 32 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 70 61 72 73 65 49 6e 74 28 65 2c 31 30 29 7c 7c 30 7d 29 29 3b 69 66 28 74 2e 70 75 73 68 28 30 29 2c 21 28 31 3d 3d 3d 74 5b 30 5d 26 26 74 5b 31 5d 3c 35 29 29 72 65 74 75 72 6e 20 31 3d 3d 3d 74 5b 30 5d 26 26 74 5b 31 5d 3c 36 3f 22 43 75 70 63 61 6b 65 22 3a 31 3d 3d 3d 74 5b 30 5d 26 26 74 5b 31 5d 3e 3d 36 3f 22 44 6f 6e 75 74 22 Data Ascii: "Mojave";case 15:return"Catalina";default:return}},e.getAndroidVersionName=function(e){var t=e.split(".").splice(0,2).map((function(e){return parseInt(e,10)\|\|0}));if(t.push(0),!(1===t[0]&&t[1]<5))return 1===t[0]&&t[1]<6?"Cupcake":1===t[0]&&t[1]>=6?"Donut"
2024-11-05 20:17:53 UTC	1369	IN	Data Raw: 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 65 66 61 75 6c 74 7d 2c 31 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 2c 74 2e 45 4e 47 49 4e 45 5f 4d 41 50 3d 74 2e 4f 53 5f 4d 41 50 3d 74 2e 50 4c 41 54 46 4f 52 4d 53 5f 4d 41 50 3d 74 2e 42 52 4f 57 53 45 52 5f 4d 41 50 3d 74 2e 42 52 4f 57 53 45 52 5f 41 4c 49 41 53 45 53 5f 4d 41 50 3d 76 6f 69 64 20 30 3b 74 2e 42 52 4f 57 53 45 52 5f 41 4c 49 41 53 45 53 5f 4d 41 50 3d 7b 22 41 6d 61 7a 6f 6e 20 53 69 6c 6b 22 3a 22 61 6d 61 7a 6f 6e 5f 73 69 6c 6b 22 2c 22 41 6e 64 72 6f 69 64 20 42 72 6f 77 73 65 72 22 3a 22 61 6e 64 72 6f 69 64 22 2c 42 61 64 61 3a 22 62 61 64 61 22 2c 42 6c 61 63 6b 42 65 72 72 79 3a 22 62 6c Data Ascii: e.exports=t.default},18:function(e,t,r){"use strict";t.__esModule=!0,t.ENGINE_MAP=t.OS_MAP=t.PLATFORMS_MAP=t.BROWSER_MAP=t.BROWSER_ALIASES_MAP=void 0;t.BROWSER_ALIASES_MAP={"Amazon Silk":"amazon_silk","Android Browser":"android",Bada:"bada",BlackBerry:"bl
2024-11-05 20:17:53 UTC	1369	IN	Data Raw: 74 3a 22 4f 70 65 72 61 20 43 6f 61 73 74 22 2c 70 68 61 6e 74 6f 6d 6a 73 3a 22 50 68 61 6e 74 6f 6d 4a 53 22 2c 70 75 66 66 69 6e 3a 22 50 75 66 66 69 6e 22 2c 71 75 70 7a 69 6c 6c 61 3a 22 51 75 70 5a 69 6c 6c 61 22 2c 71 71 3a 22 51 51 20 42 72 6f 77 73 65 72 22 2c 71 71 6c 69 74 65 3a 22 51 51 20 42 72 6f 77 73 65 72 20 4c 69 74 65 22 2c 73 61 66 61 72 69 3a 22 53 61 66 61 72 69 22 2c 73 61 69 6c 66 69 73 68 3a 22 53 61 69 6c 66 69 73 68 22 2c 73 61 6d 73 75 6e 67 5f 69 6e 74 65 72 6e 65 74 3a 22 53 61 6d 73 75 6e 67 20 49 6e 74 65 72 6e 65 74 20 66 6f 72 20 41 6e 64 72 6f 69 64 22 2c 73 65 61 6d 6f 6e 6b 65 79 3a 22 53 65 61 4d 6f 6e 6b 65 79 22 2c 73 6c 65 69 70 6e 69 72 3a 22 53 6c 65 69 70 6e 69 72 22 2c 73 77 69 6e 67 3a 22 53 77 69 6e 67 22 2c Data Ascii: t:"Opera Coast",phantomjs:"PhantomJS",puffin:"Puffin",qupzilla:"QupZilla",qq:"QQ Browser",qqlite:"QQ Browser Lite",safari:"Safari",sailfish:"Sailfish",samsung_internet:"Samsung Internet for Android",seamonkey:"SeaMonkey",sleipnir:"Sleipnir",swing:"Swing",
2024-11-05 20:17:53 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 73 2e 42 52 4f 57 53 45 52 5f 4d 41 50 7d 7d 2c 7b 6b 65 79 3a 22 45 4e 47 49 4e 45 5f 4d 41 50 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 2e 45 4e 47 49 4e 45 5f 4d 41 50 7d 7d 2c 7b 6b 65 79 3a 22 4f 53 5f 4d 41 50 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 2e 4f 53 5f 4d 41 50 7d 7d 2c 7b 6b 65 79 3a 22 50 4c 41 54 46 4f 52 4d 53 5f 4d 41 50 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 2e 50 4c 41 54 46 4f 52 4d 53 5f 4d 41 50 7d 7d 5d 2c 28 72 3d 6e 75 6c 6c 29 26 26 6f 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 72 29 2c 69 26 26 6f 28 74 2c 69 29 2c 65 7d 28 29 3b 74 2e 64 65 66 61 75 6c 74 3d 61 2c 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 65 Data Ascii: return s.BROWSER_MAP}},{key:"ENGINE_MAP",get:function(){return s.ENGINE_MAP}},{key:"OS_MAP",get:function(){return s.OS_MAP}},{key:"PLATFORMS_MAP",get:function(){return s.PLATFORMS_MAP}}],(r=null)&&o(t.prototype,r),i&&o(t,i),e}();t.default=a,e.exports=t.de
2024-11-05 20:17:53 UTC	1369	IN	Data Raw: 76 65 72 73 69 6f 6e 7d 2c 74 2e 67 65 74 4f 53 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 73 65 64 52 65 73 75 6c 74 2e 6f 73 3f 74 68 69 73 2e 70 61 72 73 65 64 52 65 73 75 6c 74 2e 6f 73 3a 74 68 69 73 2e 70 61 72 73 65 4f 53 28 29 7d 2c 74 2e 70 61 72 73 65 4f 53 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 70 61 72 73 65 64 52 65 73 75 6c 74 2e 6f 73 3d 7b 7d 3b 76 61 72 20 74 3d 6e 2e 64 65 66 61 75 6c 74 2e 66 69 6e 64 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 74 65 73 74 29 72 65 74 75 72 6e 20 74 2e 74 65 73 74 28 65 29 3b 69 66 28 74 2e 74 65 73 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 Data Ascii: version},t.getOS=function(){return this.parsedResult.os?this.parsedResult.os:this.parseOS()},t.parseOS=function(){var e=this;this.parsedResult.os={};var t=n.default.find((function(t){if("function"==typeof t.test)return t.test(e);if(t.test instanceof Array
2024-11-05 20:17:53 UTC	1369	IN	Data Raw: 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7c 7c 22 22 3a 74 68 69 73 2e 67 65 74 45 6e 67 69 6e 65 28 29 2e 6e 61 6d 65 7c 7c 22 22 7d 2c 74 2e 70 61 72 73 65 45 6e 67 69 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 70 61 72 73 65 64 52 65 73 75 6c 74 2e 65 6e 67 69 6e 65 3d 7b 7d 3b 76 61 72 20 74 3d 6f 2e 64 65 66 61 75 6c 74 2e 66 69 6e 64 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 74 65 73 74 29 72 65 74 75 72 6e 20 74 2e 74 65 73 74 28 65 29 3b 69 66 28 74 2e 74 65 73 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 72 65 74 75 72 6e 20 74 2e 74 65 73 74 2e 73 6f 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e Data Ascii: .toLowerCase()\|\|"":this.getEngine().name\|\|""},t.parseEngine=function(){var e=this;this.parsedResult.engine={};var t=o.default.find((function(t){if("function"==typeof t.test)return t.test(e);if(t.test instanceof Array)return t.test.some((function(t){return
2024-11-05 20:17:53 UTC	1369	IN	Data Raw: 72 73 69 6f 6e 28 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 22 3e 22 3d 3d 3d 65 5b 30 5d 7c 7c 22 3c 22 3d 3d 3d 65 5b 30 5d 3f 28 72 3d 65 2e 73 75 62 73 74 72 28 31 29 2c 22 3d 22 3d 3d 3d 65 5b 31 5d 3f 28 69 3d 21 30 2c 72 3d 65 2e 73 75 62 73 74 72 28 32 29 29 3a 74 3d 5b 5d 2c 22 3e 22 3d 3d 3d 65 5b 30 5d 3f 74 2e 70 75 73 68 28 31 29 3a 74 2e 70 75 73 68 28 2d 31 29 29 3a 22 3d 22 3d 3d 3d 65 5b 30 5d 3f 72 3d 65 2e 73 75 62 73 74 72 28 31 29 3a 22 7e 22 3d 3d 3d 65 5b 30 5d 26 26 28 69 3d 21 30 2c 72 3d 65 2e 73 75 62 73 74 72 28 31 29 29 2c 74 2e 69 6e 64 65 78 4f 66 28 61 2e 64 65 66 61 75 6c 74 2e 63 6f 6d 70 61 72 65 56 65 72 73 69 6f 6e 73 28 6e 2c 72 2c 69 29 29 3e 2d 31 7d 2c 74 2e 69 73 4f Data Ascii: rsion();if("string"==typeof n)return">"===e[0]\|\|"<"===e[0]?(r=e.substr(1),"="===e[1]?(i=!0,r=e.substr(2)):t=[],">"===e[0]?t.push(1):t.push(-1)):"="===e[0]?r=e.substr(1):"~"===e[0]&&(i=!0,r=e.substr(1)),t.indexOf(a.default.compareVersions(n,r,i))>-1},t.isO
2024-11-05 20:17:53 UTC	1369	IN	Data Raw: 2e 76 65 72 73 69 6f 6e 3d 72 29 2c 74 7d 7d 2c 7b 74 65 73 74 3a 5b 2f 53 61 6d 73 75 6e 67 42 72 6f 77 73 65 72 2f 69 5d 2c 64 65 73 63 72 69 62 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 6e 61 6d 65 3a 22 53 61 6d 73 75 6e 67 20 49 6e 74 65 72 6e 65 74 20 66 6f 72 20 41 6e 64 72 6f 69 64 22 7d 2c 72 3d 6e 2e 64 65 66 61 75 6c 74 2e 67 65 74 46 69 72 73 74 4d 61 74 63 68 28 73 2c 65 29 7c 7c 6e 2e 64 65 66 61 75 6c 74 2e 67 65 74 46 69 72 73 74 4d 61 74 63 68 28 2f 28 3f 3a 53 61 6d 73 75 6e 67 42 72 6f 77 73 65 72 29 5b 5c 73 2f 5d 28 5c 64 2b 28 5c 2e 3f 5f 3f 5c 64 2b 29 2b 29 2f 69 2c 65 29 3b 72 65 74 75 72 6e 20 72 26 26 28 74 2e 76 65 72 73 69 6f 6e 3d 72 29 2c 74 7d 7d 2c 7b 74 65 73 74 3a 5b 2f 57 68 61 6c 65 2f 69 5d 2c 64 Data Ascii: .version=r),t}},{test:[/SamsungBrowser/i],describe:function(e){var t={name:"Samsung Internet for Android"},r=n.default.getFirstMatch(s,e)\|\|n.default.getFirstMatch(/(?:SamsungBrowser)[\s/](\d+(\.?_?\d+)+)/i,e);return r&&(t.version=r),t}},{test:[/Whale/i],d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49723	172.217.16.132	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:17:53 UTC	680	OUT	GET /recaptcha/api.js?render=6LejiXUqAAAAAFaG20PrbDcf0UifxwSgI18CUBuN HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.nuriapsicologia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-05 20:17:53 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Tue, 05 Nov 2024 20:17:53 GMT Date: Tue, 05 Nov 2024 20:17:53 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-05 20:17:53 UTC	629	IN	Data Raw: 35 62 63 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 5bc/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-11-05 20:17:53 UTC	846	IN	Data Raw: 56 2b 78 4e 45 43 50 64 4c 42 56 65 59 66 66 78 72 4d 38 54 6d 5a 54 36 52 41 72 57 47 51 56 43 4a 30 4c 52 69 76 44 37 67 6c 63 41 55 41 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 64 57 56 39 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f Data Ascii: V+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.coo
2024-11-05 20:17:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49721	3.17.16.61	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:17:53 UTC	606	OUT	GET /vmiddle9999 HTTP/1.1 Host: login.nuriapsicologia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.nuriapsicologia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-05 20:17:53 UTC	166	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 05 Nov 2024 20:17:53 GMT Content-Type: text/html; charset=utf-8 Content-Length: 46 Connection: close
2024-11-05 20:17:53 UTC	46	IN	Data Raw: 3c 68 31 3e 50 6c 65 61 73 65 20 41 6c 6c 6f 77 20 43 6f 6f 6b 69 65 73 20 42 65 66 6f 72 65 20 41 63 63 65 73 73 69 6e 67 3c 2f 68 31 3e Data Ascii: <h1>Please Allow Cookies Before Accessing</h1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49726	104.18.95.41	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:17:53 UTC	568	OUT	GET /turnstile/v0/b/22755d9a86c9/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.nuriapsicologia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-05 20:17:53 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 20:17:53 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47672 Connection: close accept-ranges: bytes last-modified: Mon, 28 Oct 2024 19:08:47 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8ddf87a6dfa94608-DFW alt-svc: h3=":443"; ma=86400
2024-11-05 20:17:53 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 6c 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 67 29 2c 75 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 66 29 7b 6e 28 66 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 75 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 75 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,r,n,o,c,l,g){try{var h=e[l](g),u=h.value}catch(f){n(f);return}h.done?r(u):Promise.resolve(u).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var l=e.apply(r,n);funct
2024-11-05 20:17:53 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 53 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2024-11-05 20:17:53 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 6a 74 28 65 29 7c 7c 71 74 28 65 2c 72 29 7c 7c 47 74 28 65 2c 72 29 7c 7c 7a 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return jt(e)\|\|qt(e,r)\|\|Gt(e,r)\|\|zt()}function D(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(l[0
2024-11-05 20:17:53 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 59 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Yt=300020;var De=300030;var Ve=300031;var q;(fu
2024-11-05 20:17:53 UTC	1369	IN	Data Raw: 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 24 7c 7c 28 24 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 Data Ascii: .NEVER="never",e.MANUAL="manual",e.AUTO="auto"})($\|\|($={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var
2024-11-05 20:17:53 UTC	1369	IN	Data Raw: 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 6c 77 61 79 73 22 2c 22 65 78 65 63 75 74 65 22 2c 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 51 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 74 72 75 65 22 2c 22 66 61 6c 73 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 72 65 6e 64 65 72 22 2c 22 65 78 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 24 74 3d 33 30 30 2c 4a 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 68 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 Data Ascii: }function gt(e){return M(["always","execute","interaction-only"],e)}function Qt(e){return M(["true","false"],e)}function yt(e){return M(["render","execute"],e)}var $t=300,Jt=10;function ht(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(
2024-11-05 20:17:53 UTC	1369	IN	Data Raw: 29 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 72 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 45 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 73 69 7a 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 6c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 66 29 7d 76 61 72 20 52 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 6c 2c 67 3d 4d 28 6b 72 2c 28 6c 3d 28 72 3d 65 2e 64 Data Ascii: ).concat(e,"/").concat(r,"/").concat(n.theme,"/").concat(E,"/").concat(n.size,"/").concat(n.language,"/").concat(f)}var Rt=function(e){var r,n,o=window.innerWidth<400,c=e.state===Se.FAILURE_FEEDBACK\|\|e.state===Se.FAILURE_HAVING_TROUBLES,l,g=M(kr,(l=(r=e.d
2024-11-05 20:17:53 UTC	1369	IN	Data Raw: 73 68 61 6d 29 72 65 74 75 72 6e 21 31 3b 69 66 28 74 79 70 65 6f 66 20 50 72 6f 78 79 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 49 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 67 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 Data Ascii: sham)return!1;if(typeof Proxy=="function")return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function Ie(e,r,n){return je()?Ie=Reflect.construct:Ie=function(c,l,g){var h=[null];h.push.apply
2024-11-05 20:17:53 UTC	1369	IN	Data Raw: 63 61 6c 6c 28 74 68 69 73 2c 6f 29 2c 4d 65 28 42 65 28 6c 29 2c 22 63 6f 64 65 22 2c 76 6f 69 64 20 30 29 2c 6c 2e 6e 61 6d 65 3d 22 54 75 72 6e 73 74 69 6c 65 45 72 72 6f 72 22 2c 6c 2e 63 6f 64 65 3d 63 2c 6c 7d 72 65 74 75 72 6e 20 6e 7d 28 71 65 28 45 72 72 6f 72 29 29 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 72 29 7b 76 61 72 20 6e 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 64 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 29 7b 72 65 74 Data Ascii: call(this,o),Me(Be(l),"code",void 0),l.name="TurnstileError",l.code=c,l}return n}(qe(Error));function m(e,r){var n="[Cloudflare Turnstile] ".concat(e,".");throw new dr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function ze(e){ret
2024-11-05 20:17:53 UTC	1369	IN	Data Raw: 64 69 76 22 29 3b 75 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 66 69 78 65 64 22 2c 75 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 36 22 2c 75 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 75 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 2c 75 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 30 22 2c 75 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 22 2c 75 2e 73 74 79 6c 65 2e 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 75 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 75 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 75 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 Data Ascii: div");u.style.position="fixed",u.style.zIndex="2147483646",u.style.width="100vw",u.style.height="100vh",u.style.top="0",u.style.left="0",u.style.transformOrigin="center center",u.style.overflowX="hidden",u.style.overflowY="auto",u.style.background="rgba(0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49727	104.17.248.203	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:17:53 UTC	352	OUT	GET /bowser@2.7.0/es5.js HTTP/1.1 Host: unpkg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-05 20:17:53 UTC	575	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 20:17:53 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * cache-control: public, max-age=31536000 last-modified: Sat, 26 Oct 1985 08:15:00 GMT etag: W/"5ff9-qIexTHX9DwBh9dpOfXrboe/0aqI" via: 1.1 fly.io fly-request-id: 01JB3QJG7RGH0TPH4NY5FCGF4V-dfw CF-Cache-Status: HIT Age: 914408 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8ddf87a7c8a7e803-DFW
2024-11-05 20:17:53 UTC	794	IN	Data Raw: 35 66 66 39 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 62 6f 77 73 65 72 3d 74 28 29 3a 65 2e 62 6f 77 73 65 72 3d 74 28 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 Data Ascii: 5ff9!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.bowser=t():e.bowser=t()}(this,(function(){return function(e){var t={};function r(
2024-11-05 20:17:53 UTC	1369	IN	Data Raw: 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 69 2c 22 64 65 66 61 75 6c 74 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 65 7d 29 2c 32 26 74 26 26 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 29 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 72 2e 64 28 69 2c 6e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 5b 74 5d 7d 2e 62 69 6e 64 28 6e 75 6c 6c 2c 6e 29 29 3b 72 65 74 75 72 6e 20 69 7d 2c 72 2e 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 64 65 66 61 75 6c 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 3b 72 65 74 75 72 6e 20 72 2e 64 28 74 2c 22 61 22 2c Data Ascii: t.defineProperty(i,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var n in e)r.d(i,n,function(t){return e[t]}.bind(null,n));return i},r.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return r.d(t,"a",
2024-11-05 20:17:53 UTC	1369	IN	Data Raw: 22 4d 6f 6a 61 76 65 22 3b 63 61 73 65 20 31 35 3a 72 65 74 75 72 6e 22 43 61 74 61 6c 69 6e 61 22 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 7d 7d 2c 65 2e 67 65 74 41 6e 64 72 6f 69 64 56 65 72 73 69 6f 6e 4e 61 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 73 70 6c 69 74 28 22 2e 22 29 2e 73 70 6c 69 63 65 28 30 2c 32 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 70 61 72 73 65 49 6e 74 28 65 2c 31 30 29 7c 7c 30 7d 29 29 3b 69 66 28 74 2e 70 75 73 68 28 30 29 2c 21 28 31 3d 3d 3d 74 5b 30 5d 26 26 74 5b 31 5d 3c 35 29 29 72 65 74 75 72 6e 20 31 3d 3d 3d 74 5b 30 5d 26 26 74 5b 31 5d 3c 36 3f 22 43 75 70 63 61 6b 65 22 3a 31 3d 3d 3d 74 5b 30 5d 26 26 74 5b 31 5d 3e 3d 36 3f 22 44 6f 6e 75 74 22 Data Ascii: "Mojave";case 15:return"Catalina";default:return}},e.getAndroidVersionName=function(e){var t=e.split(".").splice(0,2).map((function(e){return parseInt(e,10)\|\|0}));if(t.push(0),!(1===t[0]&&t[1]<5))return 1===t[0]&&t[1]<6?"Cupcake":1===t[0]&&t[1]>=6?"Donut"
2024-11-05 20:17:53 UTC	1369	IN	Data Raw: 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 65 66 61 75 6c 74 7d 2c 31 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 2c 74 2e 45 4e 47 49 4e 45 5f 4d 41 50 3d 74 2e 4f 53 5f 4d 41 50 3d 74 2e 50 4c 41 54 46 4f 52 4d 53 5f 4d 41 50 3d 74 2e 42 52 4f 57 53 45 52 5f 4d 41 50 3d 74 2e 42 52 4f 57 53 45 52 5f 41 4c 49 41 53 45 53 5f 4d 41 50 3d 76 6f 69 64 20 30 3b 74 2e 42 52 4f 57 53 45 52 5f 41 4c 49 41 53 45 53 5f 4d 41 50 3d 7b 22 41 6d 61 7a 6f 6e 20 53 69 6c 6b 22 3a 22 61 6d 61 7a 6f 6e 5f 73 69 6c 6b 22 2c 22 41 6e 64 72 6f 69 64 20 42 72 6f 77 73 65 72 22 3a 22 61 6e 64 72 6f 69 64 22 2c 42 61 64 61 3a 22 62 61 64 61 22 2c 42 6c 61 63 6b 42 65 72 72 79 3a 22 62 6c Data Ascii: e.exports=t.default},18:function(e,t,r){"use strict";t.__esModule=!0,t.ENGINE_MAP=t.OS_MAP=t.PLATFORMS_MAP=t.BROWSER_MAP=t.BROWSER_ALIASES_MAP=void 0;t.BROWSER_ALIASES_MAP={"Amazon Silk":"amazon_silk","Android Browser":"android",Bada:"bada",BlackBerry:"bl
2024-11-05 20:17:53 UTC	1369	IN	Data Raw: 74 3a 22 4f 70 65 72 61 20 43 6f 61 73 74 22 2c 70 68 61 6e 74 6f 6d 6a 73 3a 22 50 68 61 6e 74 6f 6d 4a 53 22 2c 70 75 66 66 69 6e 3a 22 50 75 66 66 69 6e 22 2c 71 75 70 7a 69 6c 6c 61 3a 22 51 75 70 5a 69 6c 6c 61 22 2c 71 71 3a 22 51 51 20 42 72 6f 77 73 65 72 22 2c 71 71 6c 69 74 65 3a 22 51 51 20 42 72 6f 77 73 65 72 20 4c 69 74 65 22 2c 73 61 66 61 72 69 3a 22 53 61 66 61 72 69 22 2c 73 61 69 6c 66 69 73 68 3a 22 53 61 69 6c 66 69 73 68 22 2c 73 61 6d 73 75 6e 67 5f 69 6e 74 65 72 6e 65 74 3a 22 53 61 6d 73 75 6e 67 20 49 6e 74 65 72 6e 65 74 20 66 6f 72 20 41 6e 64 72 6f 69 64 22 2c 73 65 61 6d 6f 6e 6b 65 79 3a 22 53 65 61 4d 6f 6e 6b 65 79 22 2c 73 6c 65 69 70 6e 69 72 3a 22 53 6c 65 69 70 6e 69 72 22 2c 73 77 69 6e 67 3a 22 53 77 69 6e 67 22 2c Data Ascii: t:"Opera Coast",phantomjs:"PhantomJS",puffin:"Puffin",qupzilla:"QupZilla",qq:"QQ Browser",qqlite:"QQ Browser Lite",safari:"Safari",sailfish:"Sailfish",samsung_internet:"Samsung Internet for Android",seamonkey:"SeaMonkey",sleipnir:"Sleipnir",swing:"Swing",
2024-11-05 20:17:53 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 73 2e 42 52 4f 57 53 45 52 5f 4d 41 50 7d 7d 2c 7b 6b 65 79 3a 22 45 4e 47 49 4e 45 5f 4d 41 50 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 2e 45 4e 47 49 4e 45 5f 4d 41 50 7d 7d 2c 7b 6b 65 79 3a 22 4f 53 5f 4d 41 50 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 2e 4f 53 5f 4d 41 50 7d 7d 2c 7b 6b 65 79 3a 22 50 4c 41 54 46 4f 52 4d 53 5f 4d 41 50 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 2e 50 4c 41 54 46 4f 52 4d 53 5f 4d 41 50 7d 7d 5d 2c 28 72 3d 6e 75 6c 6c 29 26 26 6f 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 72 29 2c 69 26 26 6f 28 74 2c 69 29 2c 65 7d 28 29 3b 74 2e 64 65 66 61 75 6c 74 3d 61 2c 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 65 Data Ascii: return s.BROWSER_MAP}},{key:"ENGINE_MAP",get:function(){return s.ENGINE_MAP}},{key:"OS_MAP",get:function(){return s.OS_MAP}},{key:"PLATFORMS_MAP",get:function(){return s.PLATFORMS_MAP}}],(r=null)&&o(t.prototype,r),i&&o(t,i),e}();t.default=a,e.exports=t.de
2024-11-05 20:17:53 UTC	1369	IN	Data Raw: 76 65 72 73 69 6f 6e 7d 2c 74 2e 67 65 74 4f 53 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 73 65 64 52 65 73 75 6c 74 2e 6f 73 3f 74 68 69 73 2e 70 61 72 73 65 64 52 65 73 75 6c 74 2e 6f 73 3a 74 68 69 73 2e 70 61 72 73 65 4f 53 28 29 7d 2c 74 2e 70 61 72 73 65 4f 53 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 70 61 72 73 65 64 52 65 73 75 6c 74 2e 6f 73 3d 7b 7d 3b 76 61 72 20 74 3d 6e 2e 64 65 66 61 75 6c 74 2e 66 69 6e 64 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 74 65 73 74 29 72 65 74 75 72 6e 20 74 2e 74 65 73 74 28 65 29 3b 69 66 28 74 2e 74 65 73 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 Data Ascii: version},t.getOS=function(){return this.parsedResult.os?this.parsedResult.os:this.parseOS()},t.parseOS=function(){var e=this;this.parsedResult.os={};var t=n.default.find((function(t){if("function"==typeof t.test)return t.test(e);if(t.test instanceof Array
2024-11-05 20:17:53 UTC	1369	IN	Data Raw: 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7c 7c 22 22 3a 74 68 69 73 2e 67 65 74 45 6e 67 69 6e 65 28 29 2e 6e 61 6d 65 7c 7c 22 22 7d 2c 74 2e 70 61 72 73 65 45 6e 67 69 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 70 61 72 73 65 64 52 65 73 75 6c 74 2e 65 6e 67 69 6e 65 3d 7b 7d 3b 76 61 72 20 74 3d 6f 2e 64 65 66 61 75 6c 74 2e 66 69 6e 64 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 74 65 73 74 29 72 65 74 75 72 6e 20 74 2e 74 65 73 74 28 65 29 3b 69 66 28 74 2e 74 65 73 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 72 65 74 75 72 6e 20 74 2e 74 65 73 74 2e 73 6f 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e Data Ascii: .toLowerCase()\|\|"":this.getEngine().name\|\|""},t.parseEngine=function(){var e=this;this.parsedResult.engine={};var t=o.default.find((function(t){if("function"==typeof t.test)return t.test(e);if(t.test instanceof Array)return t.test.some((function(t){return
2024-11-05 20:17:53 UTC	1369	IN	Data Raw: 72 73 69 6f 6e 28 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 22 3e 22 3d 3d 3d 65 5b 30 5d 7c 7c 22 3c 22 3d 3d 3d 65 5b 30 5d 3f 28 72 3d 65 2e 73 75 62 73 74 72 28 31 29 2c 22 3d 22 3d 3d 3d 65 5b 31 5d 3f 28 69 3d 21 30 2c 72 3d 65 2e 73 75 62 73 74 72 28 32 29 29 3a 74 3d 5b 5d 2c 22 3e 22 3d 3d 3d 65 5b 30 5d 3f 74 2e 70 75 73 68 28 31 29 3a 74 2e 70 75 73 68 28 2d 31 29 29 3a 22 3d 22 3d 3d 3d 65 5b 30 5d 3f 72 3d 65 2e 73 75 62 73 74 72 28 31 29 3a 22 7e 22 3d 3d 3d 65 5b 30 5d 26 26 28 69 3d 21 30 2c 72 3d 65 2e 73 75 62 73 74 72 28 31 29 29 2c 74 2e 69 6e 64 65 78 4f 66 28 61 2e 64 65 66 61 75 6c 74 2e 63 6f 6d 70 61 72 65 56 65 72 73 69 6f 6e 73 28 6e 2c 72 2c 69 29 29 3e 2d 31 7d 2c 74 2e 69 73 4f Data Ascii: rsion();if("string"==typeof n)return">"===e[0]\|\|"<"===e[0]?(r=e.substr(1),"="===e[1]?(i=!0,r=e.substr(2)):t=[],">"===e[0]?t.push(1):t.push(-1)):"="===e[0]?r=e.substr(1):"~"===e[0]&&(i=!0,r=e.substr(1)),t.indexOf(a.default.compareVersions(n,r,i))>-1},t.isO
2024-11-05 20:17:54 UTC	1369	IN	Data Raw: 2e 76 65 72 73 69 6f 6e 3d 72 29 2c 74 7d 7d 2c 7b 74 65 73 74 3a 5b 2f 53 61 6d 73 75 6e 67 42 72 6f 77 73 65 72 2f 69 5d 2c 64 65 73 63 72 69 62 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 6e 61 6d 65 3a 22 53 61 6d 73 75 6e 67 20 49 6e 74 65 72 6e 65 74 20 66 6f 72 20 41 6e 64 72 6f 69 64 22 7d 2c 72 3d 6e 2e 64 65 66 61 75 6c 74 2e 67 65 74 46 69 72 73 74 4d 61 74 63 68 28 73 2c 65 29 7c 7c 6e 2e 64 65 66 61 75 6c 74 2e 67 65 74 46 69 72 73 74 4d 61 74 63 68 28 2f 28 3f 3a 53 61 6d 73 75 6e 67 42 72 6f 77 73 65 72 29 5b 5c 73 2f 5d 28 5c 64 2b 28 5c 2e 3f 5f 3f 5c 64 2b 29 2b 29 2f 69 2c 65 29 3b 72 65 74 75 72 6e 20 72 26 26 28 74 2e 76 65 72 73 69 6f 6e 3d 72 29 2c 74 7d 7d 2c 7b 74 65 73 74 3a 5b 2f 57 68 61 6c 65 2f 69 5d 2c 64 Data Ascii: .version=r),t}},{test:[/SamsungBrowser/i],describe:function(e){var t={name:"Samsung Internet for Android"},r=n.default.getFirstMatch(s,e)\|\|n.default.getFirstMatch(/(?:SamsungBrowser)[\s/](\d+(\.?_?\d+)+)/i,e);return r&&(t.version=r),t}},{test:[/Whale/i],d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49729	216.58.206.36	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:17:54 UTC	495	OUT	GET /recaptcha/api.js?render=6LejiXUqAAAAAFaG20PrbDcf0UifxwSgI18CUBuN HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-05 20:17:54 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Tue, 05 Nov 2024 20:17:54 GMT Date: Tue, 05 Nov 2024 20:17:54 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-05 20:17:54 UTC	629	IN	Data Raw: 35 62 63 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 5bc/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-11-05 20:17:54 UTC	846	IN	Data Raw: 56 2b 78 4e 45 43 50 64 4c 42 56 65 59 66 66 78 72 4d 38 54 6d 5a 54 36 52 41 72 57 47 51 56 43 4a 30 4c 52 69 76 44 37 67 6c 63 41 55 41 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 64 57 56 39 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f Data Ascii: V+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.coo
2024-11-05 20:17:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49731	3.17.16.61	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:17:54 UTC	360	OUT	GET /vmiddle9999 HTTP/1.1 Host: login.nuriapsicologia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-05 20:17:54 UTC	166	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 05 Nov 2024 20:17:54 GMT Content-Type: text/html; charset=utf-8 Content-Length: 46 Connection: close
2024-11-05 20:17:54 UTC	46	IN	Data Raw: 3c 68 31 3e 50 6c 65 61 73 65 20 41 6c 6c 6f 77 20 43 6f 6f 6b 69 65 73 20 42 65 66 6f 72 65 20 41 63 63 65 73 73 69 6e 67 3c 2f 68 31 3e Data Ascii: <h1>Please Allow Cookies Before Accessing</h1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49732	104.18.95.41	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:17:54 UTC	383	OUT	GET /turnstile/v0/b/22755d9a86c9/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-05 20:17:54 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 20:17:54 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47672 Connection: close accept-ranges: bytes last-modified: Mon, 28 Oct 2024 19:08:47 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8ddf87ad48acddab-DFW alt-svc: h3=":443"; ma=86400
2024-11-05 20:17:54 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 6c 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 67 29 2c 75 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 66 29 7b 6e 28 66 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 75 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 75 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,r,n,o,c,l,g){try{var h=e[l](g),u=h.value}catch(f){n(f);return}h.done?r(u):Promise.resolve(u).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var l=e.apply(r,n);funct
2024-11-05 20:17:54 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 53 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2024-11-05 20:17:54 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 6a 74 28 65 29 7c 7c 71 74 28 65 2c 72 29 7c 7c 47 74 28 65 2c 72 29 7c 7c 7a 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return jt(e)\|\|qt(e,r)\|\|Gt(e,r)\|\|zt()}function D(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(l[0
2024-11-05 20:17:54 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 59 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Yt=300020;var De=300030;var Ve=300031;var q;(fu
2024-11-05 20:17:54 UTC	1369	IN	Data Raw: 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 24 7c 7c 28 24 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 Data Ascii: .NEVER="never",e.MANUAL="manual",e.AUTO="auto"})($\|\|($={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var
2024-11-05 20:17:54 UTC	1369	IN	Data Raw: 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 6c 77 61 79 73 22 2c 22 65 78 65 63 75 74 65 22 2c 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 51 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 74 72 75 65 22 2c 22 66 61 6c 73 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 72 65 6e 64 65 72 22 2c 22 65 78 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 24 74 3d 33 30 30 2c 4a 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 68 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 Data Ascii: }function gt(e){return M(["always","execute","interaction-only"],e)}function Qt(e){return M(["true","false"],e)}function yt(e){return M(["render","execute"],e)}var $t=300,Jt=10;function ht(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(
2024-11-05 20:17:54 UTC	1369	IN	Data Raw: 29 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 72 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 45 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 73 69 7a 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 6c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 66 29 7d 76 61 72 20 52 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 6c 2c 67 3d 4d 28 6b 72 2c 28 6c 3d 28 72 3d 65 2e 64 Data Ascii: ).concat(e,"/").concat(r,"/").concat(n.theme,"/").concat(E,"/").concat(n.size,"/").concat(n.language,"/").concat(f)}var Rt=function(e){var r,n,o=window.innerWidth<400,c=e.state===Se.FAILURE_FEEDBACK\|\|e.state===Se.FAILURE_HAVING_TROUBLES,l,g=M(kr,(l=(r=e.d
2024-11-05 20:17:54 UTC	1369	IN	Data Raw: 73 68 61 6d 29 72 65 74 75 72 6e 21 31 3b 69 66 28 74 79 70 65 6f 66 20 50 72 6f 78 79 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 49 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 67 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 Data Ascii: sham)return!1;if(typeof Proxy=="function")return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function Ie(e,r,n){return je()?Ie=Reflect.construct:Ie=function(c,l,g){var h=[null];h.push.apply
2024-11-05 20:17:54 UTC	1369	IN	Data Raw: 63 61 6c 6c 28 74 68 69 73 2c 6f 29 2c 4d 65 28 42 65 28 6c 29 2c 22 63 6f 64 65 22 2c 76 6f 69 64 20 30 29 2c 6c 2e 6e 61 6d 65 3d 22 54 75 72 6e 73 74 69 6c 65 45 72 72 6f 72 22 2c 6c 2e 63 6f 64 65 3d 63 2c 6c 7d 72 65 74 75 72 6e 20 6e 7d 28 71 65 28 45 72 72 6f 72 29 29 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 72 29 7b 76 61 72 20 6e 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 64 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 29 7b 72 65 74 Data Ascii: call(this,o),Me(Be(l),"code",void 0),l.name="TurnstileError",l.code=c,l}return n}(qe(Error));function m(e,r){var n="[Cloudflare Turnstile] ".concat(e,".");throw new dr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function ze(e){ret
2024-11-05 20:17:54 UTC	1369	IN	Data Raw: 64 69 76 22 29 3b 75 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 66 69 78 65 64 22 2c 75 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 36 22 2c 75 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 75 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 2c 75 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 30 22 2c 75 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 22 2c 75 2e 73 74 79 6c 65 2e 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 75 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 75 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 75 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 Data Ascii: div");u.style.position="fixed",u.style.zIndex="2147483646",u.style.width="100vw",u.style.height="100vh",u.style.top="0",u.style.left="0",u.style.transformOrigin="center center",u.style.overflowX="hidden",u.style.overflowY="auto",u.style.background="rgba(0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49733	104.18.95.41	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:17:54 UTC	808	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/5cjyd/0x4AAAAAAAzPhqrNyZFP3elb/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://login.nuriapsicologia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-05 20:17:54 UTC	1362	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 20:17:54 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 26468 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2024-11-05 20:17:54 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 64 64 66 38 37 61 64 35 38 66 33 36 63 32 35 2d 44 46 57 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8ddf87ad58f36c25-DFWalt-svc: h3=":443"; ma=86400
2024-11-05 20:17:54 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-11-05 20:17:54 UTC	1369	IN	Data Raw: 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 Data Ascii: dding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiase
2024-11-05 20:17:54 UTC	1369	IN	Data Raw: 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 Data Ascii: stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#
2024-11-05 20:17:54 UTC	1369	IN	Data Raw: 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d Data Ascii: enge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dark #challenge-
2024-11-05 20:17:54 UTC	1369	IN	Data Raw: 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 Data Ascii: k .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-helper-loop-li
2024-11-05 20:17:54 UTC	1369	IN	Data Raw: 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 7d 74 6f 7b 66 69 6c 6c 3a 23 Data Ascii: ffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de1303}to{fill:#
2024-11-05 20:17:54 UTC	1369	IN	Data Raw: 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6c 6f 67 6f 7b 68 65 Data Ascii: flow:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-compact #logo{he
2024-11-05 20:17:54 UTC	1369	IN	Data Raw: 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 2d 73 74 61 72 74 3b 6a 75 73 74 69 Data Ascii: .rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:flex-start;justi
2024-11-05 20:17:54 UTC	1369	IN	Data Raw: 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 33 70 78 3b 73 74 72 6f 6b 65 2d 6c Data Ascii: text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width:3px;stroke-l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49734	104.18.95.41	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:17:55 UTC	730	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ddf87ad58f36c25&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/5cjyd/0x4AAAAAAAzPhqrNyZFP3elb/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-05 20:17:55 UTC	331	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 20:17:55 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 120584 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8ddf87b42c3ee722-DFW alt-svc: h3=":443"; ma=86400
2024-11-05 20:17:55 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 48 50 55 62 6a 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.HPUbj2={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconce
2024-11-05 20:17:55 UTC	1369	IN	Data Raw: 69 64 5f 64 6f 6d 61 69 6e 22 3a 22 49 6e 76 61 6c 69 64 25 32 30 64 6f 6d 61 69 6e 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 72 65 66 72 65 73 68 22 3a 22 52 65 66 72 65 73 68 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 61 69 6c 75 72 65 22 3a 22 45 72 72 6f 72 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 73 75 63 63 65 73 73 22 3a 22 53 75 63 63 65 73 73 25 32 31 22 2c 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 5f 61 6c 77 61 79 73 5f 70 61 73 73 22 3a 22 54 65 73 74 69 6e 67 25 32 30 6f 6e 6c 79 25 32 43 25 32 30 61 6c 77 61 79 73 25 32 30 70 61 73 Data Ascii: id_domain":"Invalid%20domain.%20Contact%20the%20Site%20Administrator%20if%20this%20problem%20persists.","turnstile_refresh":"Refresh","turnstile_failure":"Error","turnstile_success":"Success%21","testing_only_always_pass":"Testing%20only%2C%20always%20pas
2024-11-05 20:17:55 UTC	1369	IN	Data Raw: 28 31 33 31 31 29 29 2f 36 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 4b 28 36 33 32 29 29 2f 37 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 4b 28 36 37 39 29 29 2f 38 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 4b 28 33 31 38 29 29 2f 39 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 4b 28 39 37 34 29 29 2f 31 30 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 4b 28 39 39 36 29 29 2f 31 31 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 4b 28 31 36 34 39 29 29 2f 31 32 2c 66 3d 3d 3d 64 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 37 36 35 36 37 38 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 4c 28 37 36 39 29 5d 2c 65 4d 5b 67 4c 28 Data Ascii: (1311))/6(-parseInt(gK(632))/7)+-parseInt(gK(679))/8(-parseInt(gK(318))/9)+-parseInt(gK(974))/10*(-parseInt(gK(996))/11)+-parseInt(gK(1649))/12,f===d)break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,765678),eM=this\|\|self,eN=eM[gL(769)],eM[gL(
2024-11-05 20:17:55 UTC	1369	IN	Data Raw: 28 69 2c 44 29 29 3f 73 28 6f 5b 68 46 28 31 32 31 35 29 5d 28 69 2c 44 29 2c 45 29 3a 46 7c 7c 6f 5b 68 46 28 38 36 34 29 5d 28 73 2c 69 2b 44 2c 68 5b 44 5d 29 29 3a 73 28 6f 5b 68 46 28 34 33 36 29 5d 28 69 2c 44 29 2c 45 29 2c 43 2b 2b 29 3b 72 65 74 75 72 6e 20 6a 3b 66 75 6e 63 74 69 6f 6e 20 73 28 47 2c 48 2c 68 45 29 7b 68 45 3d 62 2c 4f 62 6a 65 63 74 5b 68 45 28 33 34 32 29 5d 5b 68 45 28 32 39 31 29 5d 5b 68 45 28 31 32 31 30 29 5d 28 6a 2c 48 29 7c 7c 28 6a 5b 48 5d 3d 5b 5d 29 2c 6a 5b 48 5d 5b 68 45 28 38 31 35 29 5d 28 47 29 7d 7d 2c 66 70 3d 67 4c 28 31 30 31 32 29 5b 67 4c 28 31 36 32 30 29 5d 28 27 3b 27 29 2c 66 71 3d 66 70 5b 67 4c 28 31 38 30 29 5d 5b 67 4c 28 31 35 31 32 29 5d 28 66 70 29 2c 65 4d 5b 67 4c 28 31 31 39 32 29 5d 3d 66 Data Ascii: (i,D))?s(o[hF(1215)](i,D),E):F\|\|o[hF(864)](s,i+D,h[D])):s(o[hF(436)](i,D),E),C++);return j;function s(G,H,hE){hE=b,Object[hE(342)][hE(291)][hE(1210)](j,H)\|\|(j[H]=[]),j[H][hE(815)](G)}},fp=gL(1012)[gL(1620)](';'),fq=fp[gL(180)][gL(1512)](fp),eM[gL(1192)]=f
2024-11-05 20:17:55 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 68 3e 69 7d 2c 27 58 48 6e 55 77 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 67 71 41 62 6e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 65 6a 46 4d 53 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 52 45 4b 74 71 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 58 48 50 6e 63 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 48 71 63 67 7a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 6e 56 69 67 6d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 70 Data Ascii: eturn h>i},'XHnUw':function(h,i){return h-i},'gqAbn':function(h,i){return h&i},'ejFMS':function(h,i){return h==i},'REKtq':function(h,i){return h==i},'XHPnc':function(h,i){return h<i},'Hqcgz':function(h,i){return i==h},'nVigm':function(h,i){return h==i},'p
2024-11-05 20:17:55 UTC	1369	IN	Data Raw: 35 2c 64 5b 68 4c 28 31 32 37 39 29 5d 28 4f 2c 31 29 29 2c 49 3d 3d 64 5b 68 4c 28 31 36 31 29 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 68 4c 28 38 31 35 29 5d 28 64 5b 68 4c 28 37 32 35 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4f 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 44 2d 2d 2c 30 3d 3d 44 26 26 28 44 3d 4d 61 74 68 5b 68 4c 28 31 33 32 38 29 5d 28 32 2c 46 29 2c 46 2b 2b 29 2c 64 65 6c 65 74 65 20 42 5b 43 5d 7d 65 6c 73 65 20 66 6f 72 28 4f 3d 78 5b 43 5d 2c 73 3d 30 3b 64 5b 68 4c 28 33 38 33 29 5d 28 73 2c 46 29 3b 48 3d 64 5b 68 4c 28 39 35 35 29 5d 28 64 5b 68 4c 28 31 33 32 35 29 5d 28 48 2c 31 29 2c 4f 26 31 29 2c 49 3d 3d 64 5b 68 4c 28 38 35 33 29 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 68 4c 28 38 31 35 29 5d 28 64 5b 68 4c 28 31 Data Ascii: 5,d[hL(1279)](O,1)),I==d[hL(161)](j,1)?(I=0,G[hL(815)](d[hL(725)](o,H)),H=0):I++,O>>=1,s++);}D--,0==D&&(D=Math[hL(1328)](2,F),F++),delete B[C]}else for(O=x[C],s=0;d[hL(383)](s,F);H=d[hL(955)](d[hL(1325)](H,1),O&1),I==d[hL(853)](j,1)?(I=0,G[hL(815)](d[hL(1
2024-11-05 20:17:55 UTC	1369	IN	Data Raw: 7d 2c 27 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 68 4e 2c 69 29 7b 72 65 74 75 72 6e 20 68 4e 3d 68 49 2c 69 3d 7b 27 56 49 4e 68 57 27 3a 66 75 6e 63 74 69 6f 6e 28 6a 2c 6b 2c 68 4d 29 7b 72 65 74 75 72 6e 20 68 4d 3d 62 2c 64 5b 68 4d 28 31 32 39 39 29 5d 28 6a 2c 6b 29 7d 7d 2c 68 4e 28 39 37 30 29 21 3d 3d 68 4e 28 31 33 34 32 29 3f 64 5b 68 4e 28 31 32 31 36 29 5d 28 6e 75 6c 6c 2c 68 29 3f 27 27 3a 27 27 3d 3d 68 3f 6e 75 6c 6c 3a 66 2e 69 28 68 5b 68 4e 28 38 35 32 29 5d 2c 33 32 37 36 38 2c 66 75 6e 63 74 69 6f 6e 28 6a 2c 68 4f 29 7b 72 65 74 75 72 6e 20 68 4f 3d 68 4e 2c 68 5b 68 4f 28 37 34 32 29 5d 28 6a 29 7d 29 3a 69 5b 68 4e 28 33 35 38 29 5d 28 65 2c 66 29 7d 2c 27 69 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 68 50 2c 73 2c 78 Data Ascii: },'j':function(h,hN,i){return hN=hI,i={'VINhW':function(j,k,hM){return hM=b,d[hM(1299)](j,k)}},hN(970)!==hN(1342)?d[hN(1216)](null,h)?'':''==h?null:f.i(h[hN(852)],32768,function(j,hO){return hO=hN,h[hO(742)](j)}):i[hN(358)](e,f)},'i':function(i,j,o,hP,s,x
2024-11-05 20:17:55 UTC	1369	IN	Data Raw: 28 30 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 44 5b 68 50 28 38 31 35 29 5d 28 4d 29 2c 73 5b 42 2b 2b 5d 3d 45 2b 4d 5b 68 50 28 32 30 36 29 5d 28 30 29 2c 78 2d 2d 2c 45 3d 4d 2c 64 5b 68 50 28 32 37 37 29 5d 28 30 2c 78 29 26 26 28 78 3d 4d 61 74 68 5b 68 50 28 31 33 32 38 29 5d 28 32 2c 43 29 2c 43 2b 2b 29 7d 7d 7d 2c 67 3d 7b 7d 2c 67 5b 68 49 28 38 39 34 29 5d 3d 66 2e 68 2c 67 7d 28 29 2c 65 4d 5b 67 4c 28 36 30 30 29 5d 3d 21 5b 5d 2c 65 4d 5b 67 4c 28 34 32 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 69 61 29 7b 69 66 28 69 61 3d 67 4c 2c 65 4d 5b 69 61 28 36 30 30 29 5d 29 72 65 74 75 72 6e 3b 65 4d 5b 69 61 28 36 30 30 29 5d 3d 21 21 5b 5d 7d 2c 66 79 3d 30 2c 65 4e 5b 67 4c 28 31 32 31 39 29 5d 3d 3d 3d 67 4c 28 38 38 32 29 3f 65 Data Ascii: (0);else return null;D[hP(815)](M),s[B++]=E+M[hP(206)](0),x--,E=M,d[hP(277)](0,x)&&(x=Math[hP(1328)](2,C),C++)}}},g={},g[hI(894)]=f.h,g}(),eM[gL(600)]=![],eM[gL(424)]=function(ia){if(ia=gL,eM[ia(600)])return;eM[ia(600)]=!![]},fy=0,eN[gL(1219)]===gL(882)?e
2024-11-05 20:17:55 UTC	1369	IN	Data Raw: 36 29 29 29 7b 66 6f 72 28 69 3d 65 5b 69 71 28 31 31 30 39 29 5d 5b 69 71 28 31 36 32 30 29 5d 28 27 7c 27 29 2c 6a 3d 30 3b 21 21 5b 5d 3b 29 7b 73 77 69 74 63 68 28 69 5b 6a 2b 2b 5d 29 7b 63 61 73 65 27 30 27 3a 69 66 28 21 6b 29 72 65 74 75 72 6e 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 27 3a 52 5b 69 71 28 34 37 39 29 5d 69 6e 73 74 61 6e 63 65 6f 66 20 53 3f 61 68 5b 69 71 28 34 37 39 29 5d 3d 61 69 5b 69 71 28 31 32 37 36 29 5d 28 61 6a 5b 69 71 28 34 37 39 29 5d 2c 61 6b 5b 69 71 28 31 30 30 33 29 5d 28 61 6c 5b 69 71 28 34 37 39 29 5d 29 29 3a 61 6d 5b 69 71 28 34 37 39 29 5d 3d 61 6e 5b 69 71 28 31 32 37 36 29 5d 28 61 6f 5b 69 71 28 34 37 39 29 5d 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 32 27 3a 6b 3d 6e 65 77 20 61 62 5b 28 69 Data Ascii: 6))){for(i=e[iq(1109)][iq(1620)]('\|'),j=0;!![];){switch(i[j++]){case'0':if(!k)return;continue;case'1':R[iq(479)]instanceof S?ah[iq(479)]=ai[iq(1276)](aj[iq(479)],ak[iq(1003)](al[iq(479)])):am[iq(479)]=an[iq(1276)](ao[iq(479)]);continue;case'2':k=new ab[(i
2024-11-05 20:17:55 UTC	1369	IN	Data Raw: 2c 27 63 66 43 68 6c 4f 75 74 27 3a 65 4d 5b 69 71 28 31 32 34 39 29 5d 5b 69 71 28 37 31 30 29 5d 2c 27 63 66 43 68 6c 4f 75 74 53 27 3a 65 4d 5b 69 71 28 31 32 34 39 29 5d 5b 69 71 28 32 30 38 29 5d 2c 27 63 6f 64 65 27 3a 69 71 28 39 30 36 29 2c 27 72 63 56 27 3a 65 4d 5b 69 71 28 31 32 34 39 29 5d 5b 69 71 28 31 34 31 38 29 5d 7d 2c 27 2a 27 29 29 7d 2c 67 29 7d 2c 65 4d 5b 67 4c 28 31 33 37 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 69 72 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 29 7b 6b 3d 28 69 72 3d 67 4c 2c 6a 3d 7b 7d 2c 6a 5b 69 72 28 34 31 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 7d 2c 6a 5b 69 72 28 37 37 33 29 5d 3d Data Ascii: ,'cfChlOut':eM[iq(1249)][iq(710)],'cfChlOutS':eM[iq(1249)][iq(208)],'code':iq(906),'rcV':eM[iq(1249)][iq(1418)]},'*'))},g)},eM[gL(1372)]=function(g,h,i,ir,j,k,l,m,n,o,s,x,B,C,D,E,F){k=(ir=gL,j={},j[ir(410)]=function(G,H){return G instanceof H},j[ir(773)]=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49735	104.18.95.41	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:17:55 UTC	742	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/5cjyd/0x4AAAAAAAzPhqrNyZFP3elb/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-05 20:17:55 UTC	240	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 20:17:55 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8ddf87b439f2e922-DFW alt-svc: h3=":443"; ma=86400
2024-11-05 20:17:55 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49737	142.250.186.132	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:17:56 UTC	968	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LejiXUqAAAAAFaG20PrbDcf0UifxwSgI18CUBuN&co=aHR0cHM6Ly9sb2dpbi5udXJpYXBzaWNvbG9naWEuY29tOjQ0Mw..&hl=en&v=-ZG7BC9TxCVEbzIO2m429usb&size=invisible&cb=zfh74mtnhpaf HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://login.nuriapsicologia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-05 20:17:56 UTC	1161	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 20:17:56 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-Qgl2vTQrv2Xnq6yxlWXBpw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-05 20:17:56 UTC	217	IN	Data Raw: 35 37 39 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 Data Ascii: 579d<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text
2024-11-05 20:17:56 UTC	1378	IN	Data Raw: 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 41 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 Data Ascii: /css">/* cyrillic-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0
2024-11-05 20:17:56 UTC	1378	IN	Data Raw: 55 2b 30 33 32 39 2c 20 55 2b 31 45 41 30 2d 31 45 46 39 2c 20 55 2b 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 42 41 2c 20 55 2b 30 32 42 44 Data Ascii: U+0329, U+1EA0-1EF9, U+20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02BA, U+02BD
2024-11-05 20:17:56 UTC	1378	IN	Data Raw: 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 Data Ascii: t-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto';
2024-11-05 20:17:56 UTC	1378	IN	Data Raw: 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a Data Ascii: m/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}
2024-11-05 20:17:56 UTC	1378	IN	Data Raw: 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d 30 31 36 39 2c 20 55 2b 30 31 41 30 2d 30 31 41 31 2c 20 55 2b 30 31 41 46 2d 30 31 42 30 2c 20 55 2b 30 33 30 30 2d 30 33 30 31 2c 20 55 2b 30 33 30 33 2d 30 33 30 34 2c 20 55 2b 30 33 30 38 2d 30 Data Ascii: : normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0
2024-11-05 20:17:56 UTC	1378	IN	Data Raw: 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 2d 5a 47 37 42 43 39 54 78 43 56 45 62 7a 49 4f 32 6d 34 32 39 75 73 62 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 51 67 6c 32 76 54 51 72 76 32 58 6e 71 36 79 78 6c 57 58 42 70 77 22 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 72 63 2d 61 6e 63 68 6f 72 2d 61 6c 65 72 74 22 20 63 6c 61 73 73 3d 22 72 63 2d 61 6e 63 68 6f 72 2d 61 6c 65 72 74 22 3e 3c 2f 64 69 76 3e 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d Data Ascii: text/javascript" src="https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__en.js" nonce="Qgl2vTQrv2Xnq6yxlWXBpw"> </script></head><body><div id="rc-anchor-alert" class="rc-anchor-alert"></div><input type="hidden" id=
2024-11-05 20:17:56 UTC	1378	IN	Data Raw: 68 30 63 74 32 41 39 4d 50 4c 5a 42 49 41 5a 6c 52 37 70 45 6a 30 5a 4e 56 44 52 41 76 52 53 42 65 4d 53 77 6d 62 37 72 36 6c 64 47 6d 70 56 47 50 72 38 38 56 45 6a 44 58 76 75 6e 62 74 65 50 41 54 4d 4a 79 4f 42 79 6c 34 39 46 4f 67 4b 67 6f 45 32 54 6a 46 75 39 78 30 51 66 4f 4d 43 49 5a 53 6d 34 50 35 61 62 41 61 2d 63 2d 66 71 66 4c 77 35 45 44 32 5f 32 70 52 36 45 78 6c 70 47 62 33 4e 72 44 32 35 67 70 4d 32 70 6a 4a 4f 45 46 62 6e 46 59 59 62 73 61 74 4a 6c 59 76 79 6f 4f 52 39 75 77 73 47 4a 6b 51 4d 79 44 73 65 4e 72 61 70 5f 6f 77 64 51 4e 4c 30 6c 53 33 76 41 5f 31 6e 55 2d 69 49 42 74 6c 30 31 79 69 48 74 65 62 63 78 52 6c 75 4e 4a 46 58 6a 45 6f 57 71 5f 48 43 52 4b 32 58 54 45 79 59 39 68 73 63 72 72 32 46 64 32 38 78 71 49 6a 70 4f 4b 7a 36 Data Ascii: h0ct2A9MPLZBIAZlR7pEj0ZNVDRAvRSBeMSwmb7r6ldGmpVGPr88VEjDXvunbtePATMJyOByl49FOgKgoE2TjFu9x0QfOMCIZSm4P5abAa-c-fqfLw5ED2_2pR6ExlpGb3NrD25gpM2pjJOEFbnFYYbsatJlYvyoOR9uwsGJkQMyDseNrap_owdQNL0lS3vA_1nU-iIBtl01yiHtebcxRluNJFXjEoWq_HCRK2XTEyY9hscrr2Fd28xqIjpOKz6
2024-11-05 20:17:56 UTC	1378	IN	Data Raw: 65 6d 5a 61 57 6b 35 4b 63 32 4a 53 5a 6d 52 50 4e 57 52 4a 63 56 6c 33 55 55 31 6c 54 33 64 35 55 6d 31 78 62 7a 68 5a 4e 55 4a 49 65 6d 56 55 63 56 56 51 55 32 64 6c 4f 46 46 58 5a 32 39 4a 62 44 6c 6b 61 6a 6c 74 5a 55 31 35 4d 32 39 56 63 43 73 7a 4e 7a 46 4e 55 32 67 72 59 58 56 55 4f 55 52 61 57 46 68 7a 4e 6c 42 32 64 53 74 74 53 46 4e 61 56 57 59 72 5a 7a 56 42 55 46 67 78 62 45 70 55 56 32 68 69 61 31 64 58 52 7a 59 32 54 45 31 6a 54 30 70 74 56 33 68 33 55 57 70 6d 62 57 64 73 5a 45 49 34 61 6a 55 72 55 6a 56 50 52 6b 63 35 54 57 4e 4f 55 57 63 30 64 6b 56 44 63 43 74 6f 59 58 4d 30 4d 57 31 49 59 56 46 47 5a 48 46 61 64 32 56 58 62 45 70 6d 52 30 45 72 56 46 4a 58 55 58 6b 30 52 46 68 69 55 54 4e 79 53 32 30 34 63 6a 67 33 56 79 74 76 57 54 46 Data Ascii: emZaWk5Kc2JSZmRPNWRJcVl3UU1lT3d5Um1xbzhZNUJIemVUcVVQU2dlOFFXZ29JbDlkajltZU15M29VcCszNzFNU2grYXVUOURaWFhzNlB2dSttSFNaVWYrZzVBUFgxbEpUV2hia1dXRzY2TE1jT0ptV3h3UWpmbWdsZEI4ajUrUjVPRkc5TWNOUWc0dkVDcCtoYXM0MW1IYVFGZHFad2VXbEpmR0ErVFJXUXk0RFhiUTNyS204cjg3VytvWTF
2024-11-05 20:17:56 UTC	1378	IN	Data Raw: 56 4c 53 6d 4a 75 4d 6d 56 77 4e 55 4a 59 63 30 70 6c 4f 44 68 32 54 46 56 61 64 6d 30 76 53 32 63 34 4e 47 52 4a 4d 31 4e 71 62 33 67 79 4f 57 45 31 64 45 6c 4b 4f 58 46 44 61 7a 5a 75 57 55 78 6e 53 55 74 43 4d 48 70 4c 62 6d 74 51 53 7a 45 79 64 47 39 55 4f 58 70 42 59 54 6c 54 51 6d 78 43 52 31 68 6e 51 56 6f 7a 59 54 46 6e 4d 55 73 72 62 57 74 34 4d 44 5a 46 63 44 45 31 64 47 45 34 55 6b 74 78 53 6b 68 49 63 6b 59 34 59 33 4e 57 63 7a 56 49 4f 45 56 73 55 79 39 70 59 54 52 4c 4d 30 64 53 55 6c 5a 74 57 6e 4e 35 52 47 38 35 59 6c 6c 5a 65 53 74 47 4e 45 34 79 55 58 52 78 61 55 5a 79 65 56 67 77 51 6b 64 73 56 6b 6c 79 64 57 55 72 4e 7a 68 59 51 6a 4a 6c 56 6c 59 7a 52 44 4a 48 53 47 67 35 4b 32 4a 6f 55 48 6c 75 63 32 56 72 5a 53 74 31 57 57 70 6e 4b Data Ascii: VLSmJuMmVwNUJYc0plODh2TFVadm0vS2c4NGRJM1Nqb3gyOWE1dElKOXFDazZuWUxnSUtCMHpLbmtQSzEydG9UOXpBYTlTQmxCR1hnQVozYTFnMUsrbWt4MDZFcDE1dGE4UktxSkhIckY4Y3NWczVIOEVsUy9pYTRLM0dSUlZtWnN5RG85YllZeStGNE4yUXRxaUZyeVgwQkdsVklydWUrNzhYQjJlVlYzRDJHSGg5K2JoUHluc2VrZSt1WWpnK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49739	104.18.95.41	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:17:56 UTC	385	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-05 20:17:56 UTC	240	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 20:17:56 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8ddf87b8ed342e73-DFW alt-svc: h3=":443"; ma=86400
2024-11-05 20:17:56 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49740	104.18.95.41	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:17:56 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ddf87ad58f36c25&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-05 20:17:57 UTC	331	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 20:17:56 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 122878 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8ddf87bb09aa2e75-DFW alt-svc: h3=":443"; ma=86400
2024-11-05 20:17:57 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 48 50 55 62 6a 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.HPUbj2={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.terms":"https%3A%2
2024-11-05 20:17:57 UTC	1369	IN	Data Raw: 70 61 73 73 22 3a 22 54 65 73 74 69 6e 67 25 32 30 6f 6e 6c 79 25 32 43 25 32 30 61 6c 77 61 79 73 25 32 30 70 61 73 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 73 75 63 63 65 73 73 22 3a 22 53 75 63 63 65 73 73 25 32 31 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 6f 76 65 72 72 75 6e 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 74 75 63 6b 25 32 30 68 65 72 65 25 33 46 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 74 69 6d 65 6f 75 74 22 3a 22 54 69 6d 65 64 25 32 30 6f 75 74 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 72 65 66 72 65 73 68 22 3a 22 52 65 66 72 65 73 68 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 65 6e 64 25 32 30 46 65 65 64 62 61 63 6b 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 65 78 70 Data Ascii: pass":"Testing%20only%2C%20always%20pass.","turnstile_success":"Success%21","turnstile_overrun_description":"Stuck%20here%3F","turnstile_timeout":"Timed%20out","turnstile_refresh":"Refresh","turnstile_feedback_description":"Send%20Feedback","turnstile_exp
2024-11-05 20:17:57 UTC	1369	IN	Data Raw: 28 31 37 32 30 29 29 2f 36 2a 28 70 61 72 73 65 49 6e 74 28 67 4b 28 39 39 33 29 29 2f 37 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 4b 28 34 37 30 29 29 2f 38 2a 28 70 61 72 73 65 49 6e 74 28 67 4b 28 35 30 38 29 29 2f 39 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 4b 28 31 36 36 34 29 29 2f 31 30 2b 70 61 72 73 65 49 6e 74 28 67 4b 28 31 36 30 32 29 29 2f 31 31 2c 66 3d 3d 3d 64 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 34 31 35 34 30 34 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 4c 28 31 38 31 37 29 5d 2c 65 4d 5b 67 4c 28 38 35 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 4d 2c 64 2c 65 2c 66 2c 67 Data Ascii: (1720))/6(parseInt(gK(993))/7)+-parseInt(gK(470))/8(parseInt(gK(508))/9)+-parseInt(gK(1664))/10+parseInt(gK(1602))/11,f===d)break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,415404),eM=this\|\|self,eN=eM[gL(1817)],eM[gL(858)]=function(gM,d,e,f,g
2024-11-05 20:17:57 UTC	1369	IN	Data Raw: 28 31 32 31 32 29 5d 29 3b 69 66 28 6d 3d 69 7c 7c 67 4f 28 31 37 33 32 29 2c 6e 3d 65 4d 5b 67 4f 28 35 33 35 29 5d 5b 67 4f 28 34 32 33 29 5d 3f 6b 5b 67 4f 28 31 33 35 30 29 5d 28 6b 5b 67 4f 28 31 33 35 30 29 5d 28 27 68 2f 27 2c 65 4d 5b 67 4f 28 35 33 35 29 5d 5b 67 4f 28 34 32 33 29 5d 29 2c 27 2f 27 29 3a 27 27 2c 6f 3d 6b 5b 67 4f 28 31 33 35 30 29 5d 28 6b 5b 67 4f 28 31 30 39 33 29 5d 28 6b 5b 67 4f 28 31 33 35 30 29 5d 28 6b 5b 67 4f 28 31 30 39 33 29 5d 28 6b 5b 67 4f 28 31 34 33 35 29 5d 2b 6e 2c 67 4f 28 31 30 30 35 29 29 2b 31 2c 67 4f 28 31 33 36 32 29 29 2b 65 4d 5b 67 4f 28 35 33 35 29 5d 5b 67 4f 28 31 38 35 34 29 5d 2c 27 2f 27 29 2b 65 4d 5b 67 4f 28 35 33 35 29 5d 2e 63 48 2b 27 2f 27 2c 65 4d 5b 67 4f 28 35 33 35 29 5d 5b 67 4f 28 Data Ascii: (1212)]);if(m=i\|\|gO(1732),n=eM[gO(535)][gO(423)]?k[gO(1350)](k[gO(1350)]('h/',eM[gO(535)][gO(423)]),'/'):'',o=k[gO(1350)](k[gO(1093)](k[gO(1350)](k[gO(1093)](k[gO(1435)]+n,gO(1005))+1,gO(1362))+eM[gO(535)][gO(1854)],'/')+eM[gO(535)].cH+'/',eM[gO(535)][gO(
2024-11-05 20:17:57 UTC	1369	IN	Data Raw: 31 36 36 39 29 5d 3d 67 52 28 34 38 34 29 2c 6b 3d 6a 2c 6c 3d 65 5b 67 52 28 37 32 32 29 5d 28 29 2c 6d 3d 67 52 28 36 31 32 29 2c 6c 5b 67 52 28 31 37 36 32 29 5d 28 6d 29 3e 2d 31 29 3f 65 4d 5b 67 52 28 31 30 35 34 29 5d 28 66 75 6e 63 74 69 6f 6e 28 67 53 29 7b 67 53 3d 67 52 2c 65 4d 5b 67 53 28 38 35 38 29 5d 28 29 7d 2c 31 65 33 29 3a 28 6e 3d 7b 7d 2c 6e 5b 67 52 28 31 34 36 31 29 5d 3d 65 2c 6e 5b 67 52 28 31 31 30 33 29 5d 3d 66 2c 6e 5b 67 52 28 31 34 31 39 29 5d 3d 67 2c 6e 5b 67 52 28 38 31 39 29 5d 3d 68 2c 6e 5b 67 52 28 31 32 31 32 29 5d 3d 69 2c 6f 3d 6e 2c 65 4d 5b 67 52 28 31 30 35 34 29 5d 28 66 75 6e 63 74 69 6f 6e 28 67 54 29 7b 69 66 28 67 54 3d 67 52 2c 67 54 28 31 30 37 30 29 3d 3d 3d 6b 5b 67 54 28 31 35 30 33 29 5d 29 7b 69 66 Data Ascii: 1669)]=gR(484),k=j,l=e[gR(722)](),m=gR(612),l[gR(1762)](m)>-1)?eM[gR(1054)](function(gS){gS=gR,eM[gS(858)]()},1e3):(n={},n[gR(1461)]=e,n[gR(1103)]=f,n[gR(1419)]=g,n[gR(819)]=h,n[gR(1212)]=i,o=n,eM[gR(1054)](function(gT){if(gT=gR,gT(1070)===k[gT(1503)]){if
2024-11-05 20:17:57 UTC	1369	IN	Data Raw: 2c 27 65 71 70 59 72 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 3e 67 7d 2c 27 41 6c 68 51 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 67 3d 3d 3d 66 7d 2c 27 77 6f 66 6f 4c 27 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 28 29 7d 7d 2c 64 3d 65 4d 5b 69 77 28 35 33 35 29 5d 5b 69 77 28 31 65 33 29 5d 7c 7c 31 65 34 2c 65 3d 63 5b 69 77 28 31 34 30 35 29 5d 28 66 52 29 2c 21 65 4d 5b 69 77 28 31 37 38 36 29 5d 26 26 21 66 74 28 29 26 26 21 65 4d 5b 69 77 28 31 31 30 35 29 5d 5b 69 77 28 31 32 32 38 29 5d 26 26 63 5b 69 77 28 31 32 33 37 29 5d 28 65 2d 66 51 2c 64 29 29 3f 63 5b 69 77 28 31 37 35 37 29 5d 28 69 77 28 39 33 33 29 2c 69 77 28 39 33 31 29 29 3f 28 67 3d 7b 7d 2c 67 5b Data Ascii: ,'eqpYr':function(f,g){return f>g},'AlhQk':function(f,g){return g===f},'wofoL':function(f){return f()}},d=eM[iw(535)][iw(1e3)]\|\|1e4,e=c[iw(1405)](fR),!eM[iw(1786)]&&!ft()&&!eM[iw(1105)][iw(1228)]&&c[iw(1237)](e-fQ,d))?c[iw(1757)](iw(933),iw(931))?(g={},g[
2024-11-05 20:17:57 UTC	1369	IN	Data Raw: 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 7d 2c 68 3d 3d 3d 6e 75 6c 6c 7c 7c 6f 5b 6a 34 28 31 36 38 35 29 5d 28 76 6f 69 64 20 30 2c 68 29 29 72 65 74 75 72 6e 20 6a 3b 66 6f 72 28 78 3d 6f 5b 6a 34 28 35 36 39 29 5d 28 67 73 2c 68 29 2c 67 5b 6a 34 28 31 33 33 32 29 5d 5b 6a 34 28 31 33 32 33 29 5d 26 26 28 78 3d 78 5b 6a 34 28 31 32 37 36 29 5d 28 67 5b 6a 34 28 31 33 33 32 29 5d 5b 6a 34 28 31 33 32 33 29 5d 28 68 29 29 29 2c 78 3d 67 5b 6a 34 28 31 37 33 34 29 5d 5b 6a 34 28 31 31 39 31 29 5d 26 26 67 5b 6a 34 28 35 36 31 29 5d 3f 67 5b 6a 34 28 31 37 33 34 29 5d 5b 6a 34 28 31 31 39 31 29 5d 28 6e 65 77 20 67 5b 28 6a 34 28 35 36 31 29 29 5d 28 78 29 29 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 6a 36 2c 48 29 7b 66 6f 72 28 6a 36 3d 6a 34 2c Data Ascii: n(G,H){return G+H}},h===null\|\|o[j4(1685)](void 0,h))return j;for(x=o[j4(569)](gs,h),g[j4(1332)][j4(1323)]&&(x=x[j4(1276)](g[j4(1332)][j4(1323)](h))),x=g[j4(1734)][j4(1191)]&&g[j4(561)]?g[j4(1734)][j4(1191)](new g[(j4(561))](x)):function(G,j6,H){for(j6=j4,
2024-11-05 20:17:57 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 6a 70 29 7b 69 66 28 6a 70 3d 67 4c 2c 65 4d 5b 6a 70 28 37 37 33 29 5d 29 72 65 74 75 72 6e 3b 65 4d 5b 6a 70 28 37 37 33 29 5d 3d 21 21 5b 5d 7d 2c 67 42 3d 30 2c 65 4e 5b 67 4c 28 35 35 37 29 5d 3d 3d 3d 67 4c 28 31 32 32 39 29 3f 65 4e 5b 67 4c 28 31 35 36 30 29 5d 28 67 4c 28 38 39 37 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 67 45 2c 30 29 7d 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 67 45 2c 30 29 2c 67 46 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 6a 7a 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 66 6f 72 28 6a 7a 3d 67 4c 2c 67 3d 7b 7d 2c 67 5b 6a 7a 28 31 32 38 36 29 5d 3d 6a 7a 28 34 32 34 29 2c 67 5b 6a 7a 28 31 38 30 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 29 7b 72 65 74 75 72 6e 20 6e Data Ascii: unction(jp){if(jp=gL,eM[jp(773)])return;eM[jp(773)]=!![]},gB=0,eN[gL(557)]===gL(1229)?eN[gL(1560)](gL(897),function(){setTimeout(gE,0)}):setTimeout(gE,0),gF=function(f,jz,g,h,i,j,k,l,m){for(jz=gL,g={},g[jz(1286)]=jz(424),g[jz(1807)]=function(n,s){return n
2024-11-05 20:17:57 UTC	1369	IN	Data Raw: 64 62 6e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 72 50 79 6d 7a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 4a 6d 79 71 51 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 56 66 6b 54 73 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 43 73 6b 6c 62 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 55 69 70 67 73 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 7c 68 7d 2c 27 43 51 78 54 73 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 7a 4d 7a 5a 77 27 3a 66 75 6e 63 74 69 6f 6e Data Ascii: dbn':function(h,i){return h<i},'rPymz':function(h,i){return h-i},'JmyqQ':function(h,i){return h(i)},'VfkTs':function(h,i){return h(i)},'Csklb':function(h,i){return i==h},'Uipgs':function(h,i){return i\|h},'CQxTs':function(h,i){return h(i)},'zMzZw':function
2024-11-05 20:17:57 UTC	1369	IN	Data Raw: 5b 6a 43 28 34 34 32 29 5d 28 69 5b 6a 43 28 31 36 39 33 29 5d 28 69 5b 6a 43 28 31 34 30 38 29 5d 28 6f 2c 32 35 35 29 2d 6c 2c 6b 25 36 35 35 33 35 29 2c 36 35 35 33 35 29 2c 32 35 35 29 29 29 29 3b 72 65 74 75 72 6e 20 6d 5b 6a 43 28 35 30 39 29 5d 28 27 27 29 7d 7d 2c 27 67 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 6a 4f 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 2c 4e 2c 50 2c 51 2c 52 2c 55 2c 56 2c 53 2c 54 29 7b 69 66 28 6a 4f 3d 6a 42 2c 73 3d 7b 27 63 43 68 6e 65 27 3a 66 75 6e 63 74 69 6f 6e 28 4f 2c 50 2c 6a 48 29 7b 72 65 74 75 72 6e 20 6a 48 3d 62 2c 64 5b 6a 48 28 39 31 37 29 5d 28 4f 2c 50 29 7d 2c 27 57 69 46 63 6f 27 3a 66 75 6e 63 74 69 6f 6e 28 4f 2c 50 29 7b 72 65 74 75 72 6e 20 4f 2a Data Ascii: [jC(442)](i[jC(1693)](i[jC(1408)](o,255)-l,k%65535),65535),255))));return m[jC(509)]('')}},'g':function(i,j,o,jO,s,x,B,C,D,E,F,G,H,I,J,K,L,M,N,P,Q,R,U,V,S,T){if(jO=jB,s={'cChne':function(O,P,jH){return jH=b,d[jH(917)](O,P)},'WiFco':function(O,P){return O*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49745	104.18.95.41	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:17:57 UTC	1149	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/327534660:1730834845:xB-X5yMQwnEzWyfOsx7a_gc-vUOi2RR5kk_BobmozzY/8ddf87ad58f36c25/.T7TKrt9wrxElaOPQwbGCCRFdzx7EdER96MDTZyI7OE-1730837874-1.1.1.1-w1VUtYFQyOaPeGAutG8NnTuZyILjccRMIz3R2IKDpfCOHSVV7p1SBpaHe7mt.dJk HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3072 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: .T7TKrt9wrxElaOPQwbGCCRFdzx7EdER96MDTZyI7OE-1730837874-1.1.1.1-w1VUtYFQyOaPeGAutG8NnTuZyILjccRMIz3R2IKDpfCOHSVV7p1SBpaHe7mt.dJk sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/5cjyd/0x4AAAAAAAzPhqrNyZFP3elb/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-05 20:17:57 UTC	3072	OUT	Data Raw: 76 5f 38 64 64 66 38 37 61 64 35 38 66 33 36 63 32 35 3d 37 4d 24 54 65 54 62 54 42 54 6d 54 2d 54 58 43 67 49 43 67 65 34 44 65 44 7a 55 5a 44 55 67 44 34 32 7a 79 4d 4f 67 59 32 67 25 32 62 34 2b 79 68 24 44 69 2b 32 35 4e 62 67 79 30 72 54 67 65 63 51 50 67 68 4a 4f 44 6b 67 6d 34 55 7a 6a 4e 53 67 55 50 67 6f 4f 44 59 62 2b 67 34 4f 67 5a 67 42 71 6f 2d 70 66 4f 42 65 32 57 54 44 34 35 50 6d 67 50 65 44 35 67 70 4d 32 67 6e 42 54 45 76 74 67 4b 6c 6a 51 78 41 4a 78 59 37 73 73 53 54 67 4a 34 67 44 48 4a 58 67 58 50 67 54 24 67 55 71 34 37 58 54 58 33 44 69 4d 4b 79 4e 37 33 57 6d 72 6e 67 32 74 7a 54 55 48 76 38 53 4f 67 24 48 7a 32 6d 77 6d 4c 67 44 32 42 67 4f 44 64 67 55 7a 47 70 55 7a 67 46 46 55 43 65 6e 67 69 67 32 32 7a 39 50 43 33 67 44 6d 43 Data Ascii: v_8ddf87ad58f36c25=7M$TeTbTBTmT-TXCgICge4DeDzUZDUgD42zyMOgY2g%2b4+yh$Di+25Nbgy0rTgecQPghJODkgm4UzjNSgUPgoODYb+g4OgZgBqo-pfOBe2WTD45PmgPeD5gpM2gnBTEvtgKljQxAJxY7ssSTgJ4gDHJXgXPgT$gUq47XTX3DiMKyN73Wmrng2tzTUHv8SOg$Hz2mwmLgD2BgODdgUzGpUzgFFUCengig22z9PC3gDmC
2024-11-05 20:17:57 UTC	747	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 20:17:57 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 149708 Connection: close cf-chl-gen: aWdoZ6D7pbrPO+QWMASE62Ng9IPwnN63As255DbWhuDqAPTuE+fJzJA+OcA5esoN5ThmrRt2/wIg0WoXg9JqaA90IxdXzB6XhsCzqzm5oCPDeHtq+Fn4TAu4fdVAYe2w2lI9uV1Yuf9vVkUgraEbrv5Igtyjv2UbfTukPTnnKB6cdIkXII2LI/7szz1iB2//mbt4ldJgsPyJ/Xm6SRki+KYFzRVjytV4KhSX9OqOXclgwEGJMPN4I1sS0bZGgklABLq4WWz1BizyMprqGUUkbXxL7CWD/TFkoyE9kUC1XRXQdgT6KnvvnoszObk2YSP2lNLuNTIGJLa7AKFuwKfvnT3i+NB9P/UPh6+m6jy/cRYzazHUKV3nWWHW+5JhYe7rMSruVZXVtkHzCncKBPLNhV4zSBdz6wIcP+FNMisTMbUd6uYrYI7OTHaIEoIc1nsRQhrTdx9i1YfHzLZj7cCF3FsxlXKHWVGdijS6/+Wjmpm3gsk=$OZ8IBZe3jN/dgcqo Server: cloudflare CF-RAY: 8ddf87bc18386c32-DFW alt-svc: h3=":443"; ma=86400
2024-11-05 20:17:57 UTC	622	IN	Data Raw: 69 6c 52 67 66 46 39 69 5a 6f 32 4e 5a 5a 46 4f 56 57 74 76 59 58 61 4e 69 33 42 33 65 35 64 37 63 58 4a 78 63 6e 32 69 6b 5a 36 6f 67 59 64 32 6f 57 75 6d 67 34 65 30 73 49 4f 75 69 71 69 35 64 72 65 46 6e 4b 61 64 77 48 4e 2f 77 4c 47 32 76 38 4c 4a 77 6f 61 44 75 38 57 37 71 36 79 4e 70 35 36 4c 71 70 2b 34 78 4c 72 4a 72 4e 69 70 30 70 71 64 77 4e 4c 65 74 62 76 46 6f 4e 33 48 70 65 61 69 79 36 6e 72 71 75 69 71 37 39 32 74 74 65 44 6f 7a 50 54 6b 32 4e 76 54 37 74 6a 68 34 66 66 6b 2b 39 49 48 31 74 2f 2b 41 77 69 2f 41 77 66 4a 37 65 38 42 38 75 38 4a 46 77 6f 45 44 76 44 71 36 42 37 38 36 50 6a 74 49 42 66 65 4a 41 6a 2b 2f 66 49 61 34 77 44 6b 4c 76 67 48 43 41 77 6e 42 67 49 72 4e 2f 55 6a 50 44 33 34 45 45 41 71 4c 44 77 64 49 51 34 53 48 6a 34 Data Ascii: ilRgfF9iZo2NZZFOVWtvYXaNi3B3e5d7cXJxcn2ikZ6ogYd2oWumg4e0sIOuiqi5dreFnKadwHN/wLG2v8LJwoaDu8W7q6yNp56Lqp+4xLrJrNip0pqdwNLetbvFoN3Hpeaiy6nrquiq792tteDozPTk2NvT7tjh4ffk+9IH1t/+Awi/AwfJ7e8B8u8JFwoEDvDq6B786PjtIBfeJAj+/fIa4wDkLvgHCAwnBgIrN/UjPD34EEAqLDwdIQ4SHj4
2024-11-05 20:17:57 UTC	1369	IN	Data Raw: 38 72 54 6c 59 2f 57 54 63 7a 59 6c 4a 6a 4a 57 4a 49 4f 57 77 32 55 44 6c 69 58 45 35 44 50 69 30 7a 51 30 56 59 55 33 74 75 56 44 64 70 56 32 74 34 62 47 4a 6b 63 48 39 47 56 6d 6c 48 58 6d 52 48 69 49 70 2f 69 57 46 79 62 33 39 58 62 31 69 48 64 59 78 78 69 6f 79 57 6e 32 2b 44 63 46 2b 66 66 33 36 66 65 48 2b 66 59 47 56 71 70 49 4f 63 6b 4c 43 7a 62 6f 75 43 64 58 4b 5a 6b 4b 79 66 6d 73 43 43 66 61 4f 35 67 72 65 53 79 5a 65 32 7a 4a 33 48 70 73 65 68 69 74 43 69 72 73 58 4b 32 4b 79 4d 31 38 79 74 6c 62 4f 74 7a 36 36 32 31 74 6a 4f 34 74 69 35 75 64 75 33 34 62 6e 6a 38 62 33 62 78 71 2f 6f 39 39 65 33 79 73 72 55 30 66 6a 74 35 2b 76 4b 76 2f 44 30 39 4f 44 6a 42 64 38 43 42 2b 4d 46 31 75 58 6e 35 50 49 48 34 42 41 57 37 66 6a 74 36 77 58 61 2b Data Ascii: 8rTlY/WTczYlJjJWJIOWw2UDliXE5DPi0zQ0VYU3tuVDdpV2t4bGJkcH9GVmlHXmRHiIp/iWFyb39Xb1iHdYxxioyWn2+DcF+ff36feH+fYGVqpIOckLCzbouCdXKZkKyfmsCCfaO5greSyZe2zJ3HpsehitCirsXK2KyM18ytlbOtz6621tjO4ti5udu34bnj8b3bxq/o99e3ysrU0fjt5+vKv/D09ODjBd8CB+MF1uXn5PIH4BAW7fjt6wXa+
2024-11-05 20:17:57 UTC	1369	IN	Data Raw: 33 48 31 35 64 4a 45 41 39 4a 45 5a 67 57 47 31 72 63 69 6c 67 54 55 64 72 65 46 52 59 4d 33 42 5a 58 55 6b 39 57 6d 42 65 67 47 31 69 51 46 4a 6f 61 59 42 46 62 57 70 35 69 49 75 44 54 47 79 4b 6c 34 6c 6c 6c 47 57 4a 64 49 75 52 62 35 74 75 6e 58 31 79 6f 6f 46 6d 59 58 53 47 5a 48 65 71 70 36 32 48 68 57 79 62 66 4c 4b 4a 71 5a 69 4a 65 6d 32 6e 73 36 36 66 76 34 79 4f 73 34 47 30 70 37 69 68 71 4a 66 46 78 4b 43 4c 75 4d 71 61 73 4a 2f 4a 7a 39 4b 79 30 36 71 4d 7a 38 62 4d 72 72 32 74 6d 62 6e 4e 76 37 66 53 77 72 6a 43 36 4d 72 67 70 36 44 41 37 4b 79 77 78 71 2b 74 78 71 2f 75 38 37 43 79 30 2b 76 4b 37 75 32 38 31 4e 54 37 2b 50 6a 34 31 66 6a 36 41 77 55 48 32 66 37 71 32 65 6a 4f 46 65 30 46 44 4f 6e 73 45 78 4d 59 46 64 41 52 47 51 48 55 48 42 Data Ascii: 3H15dJEA9JEZgWG1rcilgTUdreFRYM3BZXUk9WmBegG1iQFJoaYBFbWp5iIuDTGyKl4lllGWJdIuRb5tunX1yooFmYXSGZHeqp62HhWybfLKJqZiJem2ns66fv4yOs4G0p7ihqJfFxKCLuMqasJ/Jz9Ky06qMz8bMrr2tmbnNv7fSwrjC6Mrgp6DA7Kywxq+txq/u87Cy0+vK7u281NT7+Pj41fj6AwUH2f7q2ejOFe0FDOnsExMYFdARGQHUHB
2024-11-05 20:17:57 UTC	1369	IN	Data Raw: 4b 56 35 49 62 32 51 35 61 6b 78 70 62 6a 35 76 52 30 35 61 4d 54 74 6e 56 54 64 61 61 6c 35 2b 68 54 31 62 65 46 64 43 69 47 6d 46 67 49 46 6e 62 32 52 6b 55 49 71 48 67 57 4f 47 5a 35 6d 48 61 5a 6d 4c 57 6c 78 71 65 34 4b 45 66 48 4b 43 65 57 47 4b 65 59 61 4f 6d 6d 61 77 6a 6d 6d 43 73 35 36 6f 73 5a 56 34 70 37 6c 75 6d 6e 36 4c 6f 59 39 2b 67 61 2b 36 6e 37 66 46 70 34 53 2f 6a 4a 75 61 78 37 36 6d 76 63 7a 56 76 37 66 57 77 73 4c 4b 31 39 4b 34 76 4b 72 4f 72 73 4b 39 77 39 48 45 6e 71 66 70 78 38 65 2b 71 39 66 71 79 65 4c 49 35 61 7a 56 77 4f 66 75 78 4e 72 4f 7a 66 76 34 79 4e 50 31 77 50 6a 2b 42 39 49 46 42 4d 59 4d 76 51 62 6b 34 51 50 37 35 41 58 72 37 39 37 6f 7a 68 62 73 37 39 6f 46 47 66 44 5a 37 76 45 5a 2b 50 4d 58 38 43 51 65 39 68 54 Data Ascii: KV5Ib2Q5akxpbj5vR05aMTtnVTdaal5+hT1beFdCiGmFgIFnb2RkUIqHgWOGZ5mHaZmLWlxqe4KEfHKCeWGKeYaOmmawjmmCs56osZV4p7lumn6LoY9+ga+6n7fFp4S/jJuax76mvczVv7fWwsLK19K4vKrOrsK9w9HEnqfpx8e+q9fqyeLI5azVwOfuxNrOzfv4yNP1wPj+B9IFBMYMvQbk4QP75AXr797ozhbs79oFGfDZ7vEZ+PMX8CQe9hT
2024-11-05 20:17:57 UTC	1369	IN	Data Raw: 47 30 30 53 44 39 57 55 32 39 62 61 57 52 47 57 54 73 2f 66 6e 68 5a 62 6a 78 47 64 6e 56 56 56 6f 64 71 62 49 42 77 57 6d 6d 42 63 34 74 2b 62 31 39 55 67 58 52 53 64 47 78 58 55 56 4b 65 67 32 43 52 67 36 56 68 6b 6e 79 70 65 71 75 65 6c 70 43 4a 71 35 4a 79 73 34 57 78 64 5a 65 47 67 72 69 52 6b 36 39 2b 76 71 75 62 6d 70 37 47 67 70 69 6a 77 63 61 49 78 73 32 39 78 73 2b 48 7a 38 37 50 7a 70 2f 4c 74 35 4b 52 71 70 50 51 32 4e 7a 53 75 4c 50 61 77 64 37 55 31 37 58 41 70 38 71 2b 31 65 72 61 77 4d 71 72 77 4e 2b 79 38 75 44 6e 75 4e 4c 30 30 75 65 38 33 75 2f 66 2f 66 54 75 35 67 6a 43 78 67 54 64 36 67 30 48 79 4f 6b 4b 44 4e 44 62 45 2f 58 49 44 42 58 31 45 42 44 54 33 50 6f 64 36 68 76 30 38 68 59 42 33 52 48 65 47 50 4c 33 2b 68 77 65 4c 75 67 6f Data Ascii: G00SD9WU29baWRGWTs/fnhZbjxGdnVVVodqbIBwWmmBc4t+b19UgXRSdGxXUVKeg2CRg6VhknypequelpCJq5Jys4WxdZeGgriRk69+vqubmp7GgpijwcaIxs29xs+Hz87Pzp/Lt5KRqpPQ2NzSuLPawd7U17XAp8q+1erawMqrwN+y8uDnuNL00ue83u/f/fTu5gjCxgTd6g0HyOkKDNDbE/XIDBX1EBDT3Pod6hv08hYB3RHeGPL3+hweLugo
2024-11-05 20:17:57 UTC	1369	IN	Data Raw: 64 47 64 33 67 36 66 56 35 67 64 6c 39 61 59 6c 6c 5a 58 34 5a 31 57 58 56 46 59 6c 6c 74 6a 6d 56 68 57 33 79 4b 68 55 35 54 54 31 6c 77 6c 34 56 6d 56 35 74 54 6f 33 47 59 63 36 46 64 6f 36 47 54 66 4b 79 42 71 34 46 39 66 6e 35 7a 71 4b 57 51 71 4b 69 51 73 58 71 58 74 59 5a 39 69 35 47 69 6e 35 53 38 78 4a 54 43 68 36 69 57 6f 63 76 4b 71 72 69 70 78 49 2b 6c 73 37 62 51 72 73 4f 59 75 73 75 37 32 64 44 4b 77 75 4b 36 34 63 4b 7a 30 4c 72 55 33 74 6e 64 31 75 54 70 32 75 47 38 33 72 48 6f 77 2b 7a 58 39 65 4f 35 74 76 72 76 76 77 48 57 75 50 72 76 38 75 62 33 32 67 72 67 39 67 54 65 42 2f 72 63 45 4e 49 48 43 41 49 4f 30 65 49 45 35 78 4d 47 43 77 72 32 36 74 66 66 45 78 33 6a 4a 78 45 55 4b 67 73 45 2b 43 51 4d 34 53 50 72 37 75 6b 6b 48 69 77 48 4e Data Ascii: dGd3g6fV5gdl9aYllZX4Z1WXVFYlltjmVhW3yKhU5TT1lwl4VmV5tTo3GYc6Fdo6GTfKyBq4F9fn5zqKWQqKiQsXqXtYZ9i5Gin5S8xJTCh6iWocvKqripxI+ls7bQrsOYusu72dDKwuK64cKz0LrU3tnd1uTp2uG83rHow+zX9eO5tvrvvwHWuPrv8ub32grg9gTeB/rcENIHCAIO0eIE5xMGCwr26tffEx3jJxEUKgsE+CQM4SPr7ukkHiwHN
2024-11-05 20:17:57 UTC	1369	IN	Data Raw: 38 55 48 70 55 66 44 74 33 55 34 5a 58 68 58 70 33 57 55 56 71 58 70 47 45 62 32 46 6f 67 6f 35 74 6d 57 6c 7a 6a 6e 4f 5a 56 70 53 4a 66 5a 4b 56 6a 6d 57 69 5a 34 43 6a 71 6f 57 75 72 59 64 75 63 59 65 50 6e 32 79 7a 6a 48 4a 34 6a 35 75 64 64 37 75 75 77 58 65 58 75 33 36 52 6c 33 37 49 6c 4d 4b 37 71 70 6d 4b 75 37 71 63 7a 36 2f 4d 30 73 57 73 70 4d 6d 6e 75 64 76 47 7a 71 37 61 79 72 36 61 73 4c 32 36 72 37 6a 46 30 36 4c 63 37 4d 37 76 37 63 72 6f 78 61 7a 4c 35 38 50 32 72 37 53 36 7a 4c 79 34 36 74 43 39 30 74 37 36 31 67 66 76 35 65 48 47 36 4f 7a 4d 42 2f 44 6a 34 4f 62 4f 37 65 72 2b 43 66 6b 4d 47 75 73 64 43 69 44 59 31 67 30 6a 4a 52 45 6a 34 2f 7a 66 47 53 6f 6e 42 43 48 2b 43 53 48 2b 36 69 4d 57 49 67 59 6b 39 75 73 57 4e 66 6f 34 39 43 Data Ascii: 8UHpUfDt3U4ZXhXp3WUVqXpGEb2Fogo5tmWlzjnOZVpSJfZKVjmWiZ4CjqoWurYducYePn2yzjHJ4j5udd7uuwXeXu36Rl37IlMK7qpmKu7qcz6/M0sWspMmnudvGzq7ayr6asL26r7jF06Lc7M7v7croxazL58P2r7S6zLy46tC90t761gfv5eHG6OzMB/Dj4ObO7er+CfkMGusdCiDY1g0jJREj4/zfGSonBCH+CSH+6iMWIgYk9usWNfo49C
2024-11-05 20:17:57 UTC	1369	IN	Data Raw: 51 6d 52 6f 68 55 4e 33 62 47 71 44 6a 57 75 4b 6b 33 4a 4f 64 59 78 50 6c 47 4e 79 65 6d 71 63 69 6e 31 39 6b 58 71 6b 64 4b 4a 69 6e 36 4a 6b 6a 47 56 74 6e 70 70 36 71 49 4e 78 6a 5a 57 66 6f 61 79 33 70 4a 53 4b 75 5a 53 76 66 35 2b 71 6a 72 2b 32 73 61 4b 57 6f 73 5a 39 7a 61 43 45 76 63 54 50 79 38 6d 4d 70 71 47 69 78 36 61 72 79 36 6e 54 30 37 2b 37 34 64 4b 69 34 39 2f 6e 36 4b 66 48 31 64 50 58 34 4f 58 48 7a 2f 43 6b 72 4c 36 77 35 74 44 42 7a 65 33 70 30 39 48 50 38 65 71 38 33 4d 4d 42 41 74 51 48 78 76 6e 54 41 64 6a 64 36 51 77 45 2b 51 38 45 36 39 34 42 30 65 76 7a 34 67 2f 74 48 78 48 31 37 4f 72 78 46 50 72 74 33 68 63 6d 47 66 51 44 4b 76 67 58 36 69 4d 6b 4e 41 76 76 41 67 6f 59 39 44 51 71 46 66 62 34 44 54 30 4c 51 79 38 78 4a 44 45 Data Ascii: QmRohUN3bGqDjWuKk3JOdYxPlGNyemqcin19kXqkdKJin6JkjGVtnpp6qINxjZWfoay3pJSKuZSvf5+qjr+2saKWosZ9zaCEvcTPy8mMpqGix6ary6nT07+74dKi49/n6KfH1dPX4OXHz/CkrL6w5tDBze3p09HP8eq83MMBAtQHxvnTAdjd6QwE+Q8E694B0evz4g/tHxH17OrxFPrt3hcmGfQDKvgX6iMkNAvvAgoY9DQqFfb4DT0LQy8xJDE
2024-11-05 20:17:57 UTC	1369	IN	Data Raw: 6c 5a 5a 68 47 4e 36 59 32 42 32 56 6d 43 42 57 4a 64 56 65 31 6c 58 69 70 6c 36 62 34 75 68 67 4a 46 6a 67 34 4f 56 6f 70 64 38 61 34 75 43 68 36 4f 30 74 57 65 30 67 61 57 7a 73 6e 69 49 6d 4b 32 33 66 71 70 39 6d 37 57 2b 78 49 43 2f 71 70 75 66 7a 63 6d 58 6d 59 6d 4b 6a 4e 44 53 74 49 2f 47 72 73 4f 75 71 72 48 62 32 61 66 50 6c 2b 4b 37 74 2b 53 38 77 2b 4f 6b 35 4d 43 37 36 38 54 50 35 36 2f 73 34 72 2f 32 7a 4f 2f 48 79 63 79 79 78 73 7a 33 37 38 37 52 76 2b 2f 2b 33 41 54 2b 78 51 6a 69 34 41 34 50 41 51 2f 36 7a 66 72 77 43 4d 2f 71 37 51 6a 58 43 65 6b 4f 2f 64 66 72 37 4f 73 52 33 66 54 76 33 65 44 34 4b 76 59 61 46 52 30 4c 4b 52 41 7a 43 77 63 55 4e 51 38 50 47 68 4c 32 4c 41 67 79 46 44 67 4d 4d 78 38 61 48 43 51 6a 48 68 59 6b 45 30 55 69 Data Ascii: lZZhGN6Y2B2VmCBWJdVe1lXipl6b4uhgJFjg4OVopd8a4uCh6O0tWe0gaWzsniImK23fqp9m7W+xIC/qpufzcmXmYmKjNDStI/GrsOuqrHb2afPl+K7t+S8w+Ok5MC768TP56/s4r/2zO/Hycyyxsz3787Rv+/+3AT+xQji4A4PAQ/6zfrwCM/q7QjXCekO/dfr7OsR3fTv3eD4KvYaFR0LKRAzCwcUNQ8PGhL2LAgyFDgMMx8aHCQjHhYkE0Ui

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49747	104.18.95.41	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:17:58 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/327534660:1730834845:xB-X5yMQwnEzWyfOsx7a_gc-vUOi2RR5kk_BobmozzY/8ddf87ad58f36c25/.T7TKrt9wrxElaOPQwbGCCRFdzx7EdER96MDTZyI7OE-1730837874-1.1.1.1-w1VUtYFQyOaPeGAutG8NnTuZyILjccRMIz3R2IKDpfCOHSVV7p1SBpaHe7mt.dJk HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-05 20:17:58 UTC	379	IN	HTTP/1.1 404 Not Found Date: Tue, 05 Nov 2024 20:17:58 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: D80QrrbUUfByjKde4b1rs939HERg8HmM3tg=$aSRLdXVqOVej9ZtR Server: cloudflare CF-RAY: 8ddf87c38a61e97a-DFW alt-svc: h3=":443"; ma=86400
2024-11-05 20:17:58 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49748	104.18.95.41	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:17:58 UTC	785	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8ddf87ad58f36c25/1730837877154/HKWyE_ZfKu9md8g HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/5cjyd/0x4AAAAAAAzPhqrNyZFP3elb/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-05 20:17:58 UTC	200	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 20:17:58 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8ddf87c4ff054802-DFW alt-svc: h3=":443"; ma=86400
2024-11-05 20:17:58 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 11 08 02 00 00 00 10 65 68 7e 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR2eh~IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49749	142.250.186.132	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:17:59 UTC	859	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=-ZG7BC9TxCVEbzIO2m429usb HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LejiXUqAAAAAFaG20PrbDcf0UifxwSgI18CUBuN&co=aHR0cHM6Ly9sb2dpbi5udXJpYXBzaWNvbG9naWEuY29tOjQ0Mw..&hl=en&v=-ZG7BC9TxCVEbzIO2m429usb&size=invisible&cb=zfh74mtnhpaf Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-05 20:17:59 UTC	917	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Expires: Tue, 05 Nov 2024 20:17:59 GMT Date: Tue, 05 Nov 2024 20:17:59 GMT Cache-Control: private, max-age=300 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Cross-Origin-Resource-Policy: same-site Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-05 20:17:59 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 2d 5a 47 37 42 43 39 54 78 43 56 45 62 7a 49 4f 32 6d 34 32 39 75 73 62 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__en.js');
2024-11-05 20:17:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49751	142.250.186.132	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:17:59 UTC	847	OUT	GET /js/bg/cqfQemrLspdjtnXuw8mwA1tdif22jf6i2OdjlhRc508.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LejiXUqAAAAAFaG20PrbDcf0UifxwSgI18CUBuN&co=aHR0cHM6Ly9sb2dpbi5udXJpYXBzaWNvbG9naWEuY29tOjQ0Mw..&hl=en&v=-ZG7BC9TxCVEbzIO2m429usb&size=invisible&cb=zfh74mtnhpaf Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-05 20:17:59 UTC	810	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18915 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 05 Nov 2024 18:52:35 GMT Expires: Wed, 05 Nov 2025 18:52:35 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 28 Oct 2024 09:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 5124 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-05 20:17:59 UTC	568	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 50 3d 66 75 6e 63 74 69 6f 6e 28 4f 29 7b 72 65 74 75 72 6e 20 4f 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 4f 2c 68 29 7b 69 66 28 68 3d 28 4f 3d 6e 75 6c 6c 2c 54 29 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 21 68 7c 7c 21 68 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 4f 3b 74 72 79 7b 4f 3d 68 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 50 2c 63 72 65 61 74 65 53 63 72 69 70 Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var P=function(O){return O},l=function(O,h){if(h=(O=null,T).trustedTypes,!h\|\|!h.createPolicy)return O;try{O=h.createPolicy("bg",{createHTML:P,createScrip
2024-11-05 20:17:59 UTC	1378	IN	Data Raw: 43 27 2c 0a 27 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 6d 3d 7b 70 61 73 73 69 76 65 3a 74 72 75 65 2c 63 61 70 74 75 72 65 3a 74 72 75 65 7d 2c 4f 5f 3d 66 75 6e 63 74 69 6f 6e 28 4f 2c 68 2c 50 29 7b 72 65 74 75 72 6e 20 4f 2e 6f 35 28 66 75 6e 63 74 69 6f 6e 28 54 29 7b 50 3d 54 7d 2c 66 61 6c 73 65 2c 68 29 2c 50 7d 2c 68 50 3d 66 75 6e 63 74 69 6f 6e 28 4f 2c 68 29 7b 72 65 74 75 72 6e 20 41 5b 4f 5d 28 41 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 6c 65 6e 67 74 68 3a 68 2c 73 74 61 63 6b 3a 68 2c 64 6f 63 75 6d 65 6e 74 3a 68 2c 70 61 72 65 6e 74 3a 68 2c 73 70 6c 69 63 65 3a 68 2c 66 6c 6f 6f 72 3a 68 2c 63 61 6c 6c 3a 68 2c 70 6f 70 3a 68 2c 70 Data Ascii: C',' SPDX-License-Identifier: Apache-2.0','*/','var m={passive:true,capture:true},O_=function(O,h,P){return O.o5(function(T){P=T},false,h),P},hP=function(O,h){return A[O](A.prototype,{length:h,stack:h,document:h,parent:h,splice:h,floor:h,call:h,pop:h,p
2024-11-05 20:17:59 UTC	1378	IN	Data Raw: 6e 20 66 61 6c 73 65 3b 72 65 74 75 72 6e 20 68 2e 4f 3d 28 47 28 68 2c 28 54 3d 70 28 4f 3f 33 33 35 3a 34 33 2c 28 68 2e 4c 66 3d 50 2c 68 29 29 2c 34 33 29 2c 68 2e 58 29 2c 68 2e 4b 2e 70 75 73 68 28 5b 57 65 2c 54 2c 4f 3f 50 2b 31 3a 50 2c 68 2e 43 2c 68 2e 59 5d 29 2c 64 29 2c 74 72 75 65 7d 2c 63 65 3d 66 75 6e 63 74 69 6f 6e 28 4f 2c 68 29 7b 72 65 74 75 72 6e 20 4f 5b 68 5d 3c 3c 32 34 7c 4f 5b 28 68 7c 30 29 2b 31 5d 3c 3c 31 36 7c 4f 5b 28 68 7c 30 29 2b 32 5d 3c 3c 38 7c 4f 5b 28 68 7c 30 29 2b 33 5d 7d 2c 5a 3d 66 75 6e 63 74 69 6f 6e 28 4f 2c 68 2c 50 2c 54 2c 6c 2c 45 29 7b 69 66 28 4f 2e 4b 2e 6c 65 6e 67 74 68 29 7b 4f 2e 41 3d 21 28 4f 2e 41 26 26 22 3a 54 51 52 3a 54 51 52 3a 22 28 29 2c 30 29 2c 4f 2e 4d 31 3d 50 3b 74 72 79 7b 6c 3d Data Ascii: n false;return h.O=(G(h,(T=p(O?335:43,(h.Lf=P,h)),43),h.X),h.K.push([We,T,O?P+1:P,h.C,h.Y]),d),true},ce=function(O,h){return O[h]<<24\|O[(h\|0)+1]<<16\|O[(h\|0)+2]<<8\|O[(h\|0)+3]},Z=function(O,h,P,T,l,E){if(O.K.length){O.A=!(O.A&&":TQR:TQR:"(),0),O.M1=P;try{l=
2024-11-05 20:17:59 UTC	1378	IN	Data Raw: 50 29 7b 72 65 74 75 72 6e 28 50 3d 41 5b 68 2e 56 5d 28 68 2e 59 39 29 2c 50 5b 68 2e 56 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4f 7d 2c 50 29 2e 63 6f 6e 63 61 74 3d 66 75 6e 63 74 69 6f 6e 28 54 29 7b 4f 3d 54 7d 2c 50 7d 2c 56 72 3d 66 75 6e 63 74 69 6f 6e 28 4f 2c 68 2c 50 2c 54 29 7b 72 65 74 75 72 6e 28 47 28 50 2c 28 70 6f 28 68 2c 28 28 54 3d 70 28 34 33 2c 50 29 2c 50 2e 48 29 26 26 54 3c 50 2e 58 3f 28 47 28 50 2c 34 33 2c 50 2e 58 29 2c 41 50 28 50 2c 4f 29 29 3a 47 28 50 2c 34 33 2c 4f 29 2c 50 29 29 2c 34 33 29 2c 54 29 2c 70 29 28 32 37 39 2c 50 29 7d 2c 7a 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 4f 29 7b 72 65 74 75 72 6e 20 4f 2e 42 3f 65 6e 28 4f 2e 47 2c 4f 29 3a 52 28 38 2c 4f 2c 74 72 75 65 29 7d 2c 47 69 3d 66 75 6e Data Ascii: P){return(P=A[h.V](h.Y9),P[h.V]=function(){return O},P).concat=function(T){O=T},P},Vr=function(O,h,P,T){return(G(P,(po(h,((T=p(43,P),P.H)&&T<P.X?(G(P,43,P.X),AP(P,O)):G(P,43,O),P)),43),T),p)(279,P)},z,g=function(O){return O.B?en(O.G,O):R(8,O,true)},Gi=fun
2024-11-05 20:17:59 UTC	1378	IN	Data Raw: 79 7b 69 66 28 28 6c 3d 76 6f 69 64 20 30 2c 68 29 2e 42 29 54 3d 65 6e 28 68 2e 42 2c 68 29 3b 65 6c 73 65 7b 69 66 28 50 3d 70 28 34 33 2c 68 29 2c 50 3e 3d 45 29 62 72 65 61 6b 3b 54 3d 28 6c 3d 49 28 28 47 28 68 2c 33 33 35 2c 50 29 2c 68 29 29 2c 70 29 28 6c 2c 68 29 7d 4b 28 66 61 6c 73 65 2c 28 54 26 26 54 5b 52 59 5d 26 32 30 34 38 3f 54 28 68 2c 4f 29 3a 53 28 5b 55 2c 32 31 2c 6c 5d 2c 68 2c 30 29 2c 68 29 2c 4f 2c 66 61 6c 73 65 29 7d 63 61 74 63 68 28 79 29 7b 70 28 31 32 37 2c 68 29 3f 53 28 79 2c 68 2c 32 32 29 3a 47 28 68 2c 31 32 37 2c 79 29 7d 69 66 28 21 4f 29 7b 69 66 28 68 2e 65 45 29 7b 70 6f 28 34 37 36 37 35 32 31 36 32 35 37 32 2c 28 68 2e 50 2d 2d 2c 68 29 29 3b 72 65 74 75 72 6e 7d 53 28 5b 55 2c 33 33 5d 2c 68 2c 30 29 7d 7d 63 Data Ascii: y{if((l=void 0,h).B)T=en(h.B,h);else{if(P=p(43,h),P>=E)break;T=(l=I((G(h,335,P),h)),p)(l,h)}K(false,(T&&T[RY]&2048?T(h,O):S([U,21,l],h,0),h),O,false)}catch(y){p(127,h)?S(y,h,22):G(h,127,y)}if(!O){if(h.eE){po(476752162572,(h.P--,h));return}S([U,33],h,0)}}c
2024-11-05 20:17:59 UTC	1378	IN	Data Raw: 74 68 3b 6c 2b 2b 29 74 72 79 7b 50 3d 4f 2e 75 5b 6c 5d 2c 50 5b 30 5d 5b 50 5b 31 5d 5d 28 50 5b 32 5d 29 7d 63 61 74 63 68 28 45 29 7b 7d 7d 63 61 74 63 68 28 45 29 7b 7d 28 30 2c 68 5b 31 5d 29 28 66 75 6e 63 74 69 6f 6e 28 45 2c 79 29 7b 4f 2e 6f 35 28 45 2c 74 72 75 65 2c 79 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 45 29 7b 4a 28 5b 52 59 5d 2c 28 45 3d 21 4f 2e 4b 2e 6c 65 6e 67 74 68 2c 4f 29 29 2c 45 26 26 5a 28 4f 2c 66 61 6c 73 65 2c 74 72 75 65 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 45 29 7b 72 65 74 75 72 6e 20 4f 2e 54 6c 28 45 29 7d 2c 28 6c 3d 28 4f 2e 75 3d 5b 5d 2c 4f 2e 6f 28 29 29 2c 66 75 6e 63 74 69 6f 6e 28 45 29 7b 72 65 74 75 72 6e 20 4f 2e 4f 44 28 45 29 7d 29 29 2c 4f 2e 4c 2b 3d 4f 2e 6f 28 29 2d 6c 7d 65 6c 73 65 7b 69 66 28 54 3d 3d Data Ascii: th;l++)try{P=O.u[l],P[0][P[1]](P[2])}catch(E){}}catch(E){}(0,h[1])(function(E,y){O.o5(E,true,y)},function(E){J([RY],(E=!O.K.length,O)),E&&Z(O,false,true)},function(E){return O.Tl(E)},(l=(O.u=[],O.o()),function(E){return O.OD(E)})),O.L+=O.o()-l}else{if(T==
2024-11-05 20:17:59 UTC	1378	IN	Data Raw: 31 30 2c 4f 2c 28 78 28 31 34 36 2c 28 78 28 33 36 2c 28 78 28 28 47 28 28 78 28 31 32 32 2c 4f 2c 28 78 28 33 32 2c 28 47 28 4f 2c 28 78 28 33 39 32 2c 4f 2c 28 78 28 34 38 2c 28 47 28 28 28 47 28 4f 2c 37 36 2c 28 78 28 34 33 32 2c 4f 2c 28 78 28 31 34 35 2c 28 78 28 33 36 38 2c 28 47 28 4f 2c 31 35 30 2c 28 28 4f 2e 41 6e 3d 28 78 28 33 36 37 2c 28 78 28 34 32 30 2c 4f 2c 28 78 28 32 35 31 2c 28 47 28 4f 2c 31 32 37 2c 28 47 28 4f 2c 28 47 28 4f 2c 28 78 28 32 31 38 2c 4f 2c 28 47 28 4f 2c 31 30 39 2c 28 78 28 35 30 33 2c 4f 2c 28 47 28 4f 2c 33 33 35 2c 28 47 28 4f 2c 34 33 2c 28 28 4f 2e 62 67 6f 64 6e 64 3d 28 4f 2e 6c 61 61 6e 74 66 3d 5b 5d 2c 28 4f 2e 6b 75 79 64 71 73 3d 5b 5d 2c 4f 29 2e 63 70 6e 71 6a 6e 3d 22 22 2c 30 29 2c 4f 29 2e 55 26 26 Data Ascii: 10,O,(x(146,(x(36,(x((G((x(122,O,(x(32,(G(O,(x(392,O,(x(48,(G(((G(O,76,(x(432,O,(x(145,(x(368,(G(O,150,((O.An=(x(367,(x(420,O,(x(251,(G(O,127,(G(O,(G(O,(x(218,O,(G(O,109,(x(503,O,(G(O,335,(G(O,43,((O.bgodnd=(O.laantf=[],(O.kuydqs=[],O).cpnqjn="",0),O).U&&
2024-11-05 20:17:59 UTC	1378	IN	Data Raw: 49 28 4e 29 2c 4e 29 29 2c 57 29 2c 22 22 2b 70 28 63 2c 4e 29 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 4e 2c 63 2c 57 2c 65 2c 59 29 7b 63 3d 28 59 3d 28 57 3d 70 28 28 65 3d 28 59 3d 28 65 3d 28 63 3d 28 57 3d 49 28 4e 29 2c 49 28 4e 29 29 2c 49 29 28 4e 29 2c 49 28 4e 29 29 2c 70 29 28 65 2c 4e 29 2c 57 29 2c 4e 2e 46 29 2c 70 28 59 2c 4e 29 29 2c 70 28 63 2c 4e 29 29 2c 57 21 3d 3d 30 26 26 28 65 3d 77 4c 28 65 2c 59 2c 4e 2c 31 2c 57 2c 63 29 2c 57 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 63 2c 65 2c 6d 29 2c 47 28 4e 2c 31 35 30 2c 5b 57 2c 63 2c 65 5d 29 29 7d 29 29 2c 34 39 29 2c 5b 32 30 34 38 5d 29 2c 4f 29 2c 66 75 6e 63 74 69 6f 6e 28 4e 29 7b 51 72 28 34 2c 4e 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 4e 2c 63 2c 57 2c 65 29 7b 47 28 Data Ascii: I(N),N)),W),""+p(c,N))}),function(N,c,W,e,Y){c=(Y=(W=p((e=(Y=(e=(c=(W=I(N),I(N)),I)(N),I(N)),p)(e,N),W),N.F),p(Y,N)),p(c,N)),W!==0&&(e=wL(e,Y,N,1,W,c),W.addEventListener(c,e,m),G(N,150,[W,c,e]))})),49),[2048]),O),function(N){Qr(4,N)}),function(N,c,W,e){G(
2024-11-05 20:17:59 UTC	1378	IN	Data Raw: 28 63 3d 49 28 4e 29 2c 63 29 2c 4e 2e 46 29 2c 4e 5b 30 5d 29 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 4e 5b 31 5d 2c 4e 5b 32 5d 2c 6d 29 7d 29 2c 78 29 28 32 35 36 2c 4f 2c 66 75 6e 63 74 69 6f 6e 28 4e 2c 63 2c 57 2c 65 2c 59 2c 56 29 7b 4b 28 74 72 75 65 2c 4e 2c 63 2c 66 61 6c 73 65 29 7c 7c 28 59 3d 6e 6f 28 4e 2e 46 29 2c 63 3d 59 2e 52 35 2c 57 3d 59 2e 42 6d 2c 56 3d 59 2e 6a 2c 59 3d 59 2e 68 6e 2c 65 3d 56 2e 6c 65 6e 67 74 68 2c 63 3d 65 3d 3d 30 3f 6e 65 77 20 63 5b 57 5d 3a 65 3d 3d 31 3f 6e 65 77 20 63 5b 57 5d 28 56 5b 30 5d 29 3a 65 3d 3d 32 3f 6e 65 77 20 63 5b 57 5d 28 56 5b 30 5d 2c 56 5b 31 5d 29 3a 65 3d 3d 33 3f 6e 65 77 20 63 5b 57 5d 28 56 5b 30 5d 2c 56 5b 31 5d 2c 56 5b 32 5d 29 3a 65 3d 3d 34 3f 6e 65 77 Data Ascii: (c=I(N),c),N.F),N[0]).removeEventListener(N[1],N[2],m)}),x)(256,O,function(N,c,W,e,Y,V){K(true,N,c,false)\|\|(Y=no(N.F),c=Y.R5,W=Y.Bm,V=Y.j,Y=Y.hn,e=V.length,c=e==0?new c[W]:e==1?new c[W](V[0]):e==2?new c[W](V[0],V[1]):e==3?new c[W](V[0],V[1],V[2]):e==4?new
2024-11-05 20:17:59 UTC	1378	IN	Data Raw: 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 4f 2e 63 61 6c 6c 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3b 72 65 74 75 72 6e 20 50 7d 2c 4c 6f 3d 66 75 6e 63 74 69 6f 6e 28 4f 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 50 28 29 7b 74 68 69 73 2e 4a 3d 28 74 68 69 73 2e 6e 3d 30 2c 5b 5d 29 7d 72 65 74 75 72 6e 5b 66 75 6e 63 74 69 6f 6e 28 54 29 7b 4f 2e 55 44 28 54 29 2c 68 2e 55 44 28 54 29 7d 2c 28 68 3d 28 4f 3d 28 50 2e 70 72 6f 74 6f 74 79 70 65 2e 55 44 3d 28 50 2e 70 72 6f 74 6f 74 79 70 65 2e 64 4a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 6e 3d 3d 3d 30 29 72 65 74 75 72 6e 5b 30 2c 30 5d 3b 72 65 74 75 72 6e 5b 28 74 68 69 73 2e 4a 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 54 2c 6c 29 7b Data Ascii: tion"&&typeof O.call=="undefined")return"object";return P},Lo=function(O,h){function P(){this.J=(this.n=0,[])}return[function(T){O.UD(T),h.UD(T)},(h=(O=(P.prototype.UD=(P.prototype.dJ=function(){if(this.n===0)return[0,0];return[(this.J.sort(function(T,l){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49754	104.18.95.41	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:17:59 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8ddf87ad58f36c25/1730837877154/HKWyE_ZfKu9md8g HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-05 20:17:59 UTC	200	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 20:17:59 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8ddf87cb2d4c6b47-DFW alt-svc: h3=":443"; ma=86400
2024-11-05 20:17:59 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 11 08 02 00 00 00 10 65 68 7e 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR2eh~IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49755	104.18.95.41	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:17:59 UTC	814	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/8ddf87ad58f36c25/1730837877159/686a63288e80937efcc7ab73aa81a04a52a55e0263dfebe58234a39e066f115a/m1eskK5g1IF4Lja HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/5cjyd/0x4AAAAAAAzPhqrNyZFP3elb/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-05 20:17:59 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Tue, 05 Nov 2024 20:17:59 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-11-05 20:17:59 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 61 47 70 6a 4b 49 36 41 6b 33 37 38 78 36 74 7a 71 6f 47 67 53 6c 4b 6c 58 67 4a 6a 33 2d 76 6c 67 6a 53 6a 6e 67 5a 76 45 56 6f 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gaGpjKI6Ak378x6tzqoGgSlKlXgJj3-vlgjSjngZvEVoAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-11-05 20:17:59 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49759	3.17.16.61	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:00 UTC	606	OUT	GET /favicon.ico HTTP/1.1 Host: login.nuriapsicologia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.nuriapsicologia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-05 20:18:00 UTC	166	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 05 Nov 2024 20:18:00 GMT Content-Type: text/html; charset=utf-8 Content-Length: 46 Connection: close
2024-11-05 20:18:00 UTC	46	IN	Data Raw: 3c 68 31 3e 50 6c 65 61 73 65 20 41 6c 6c 6f 77 20 43 6f 6f 6b 69 65 73 20 42 65 66 6f 72 65 20 41 63 63 65 73 73 69 6e 67 3c 2f 68 31 3e Data Ascii: <h1>Please Allow Cookies Before Accessing</h1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49757	216.58.206.36	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:00 UTC	491	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=-ZG7BC9TxCVEbzIO2m429usb HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-05 20:18:00 UTC	917	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Expires: Tue, 05 Nov 2024 20:18:00 GMT Date: Tue, 05 Nov 2024 20:18:00 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-05 20:18:00 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 2d 5a 47 37 42 43 39 54 78 43 56 45 62 7a 49 4f 32 6d 34 32 39 75 73 62 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__en.js');
2024-11-05 20:18:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49758	216.58.206.36	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:00 UTC	483	OUT	GET /js/bg/cqfQemrLspdjtnXuw8mwA1tdif22jf6i2OdjlhRc508.js HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-05 20:18:00 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18915 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 05 Nov 2024 15:59:56 GMT Expires: Wed, 05 Nov 2025 15:59:56 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 28 Oct 2024 09:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 15484 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-05 20:18:00 UTC	567	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 50 3d 66 75 6e 63 74 69 6f 6e 28 4f 29 7b 72 65 74 75 72 6e 20 4f 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 4f 2c 68 29 7b 69 66 28 68 3d 28 4f 3d 6e 75 6c 6c 2c 54 29 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 21 68 7c 7c 21 68 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 4f 3b 74 72 79 7b 4f 3d 68 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 50 2c 63 72 65 61 74 65 53 63 72 69 70 Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var P=function(O){return O},l=function(O,h){if(h=(O=null,T).trustedTypes,!h\|\|!h.createPolicy)return O;try{O=h.createPolicy("bg",{createHTML:P,createScrip
2024-11-05 20:18:00 UTC	1378	IN	Data Raw: 4c 43 27 2c 0a 27 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 6d 3d 7b 70 61 73 73 69 76 65 3a 74 72 75 65 2c 63 61 70 74 75 72 65 3a 74 72 75 65 7d 2c 4f 5f 3d 66 75 6e 63 74 69 6f 6e 28 4f 2c 68 2c 50 29 7b 72 65 74 75 72 6e 20 4f 2e 6f 35 28 66 75 6e 63 74 69 6f 6e 28 54 29 7b 50 3d 54 7d 2c 66 61 6c 73 65 2c 68 29 2c 50 7d 2c 68 50 3d 66 75 6e 63 74 69 6f 6e 28 4f 2c 68 29 7b 72 65 74 75 72 6e 20 41 5b 4f 5d 28 41 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 6c 65 6e 67 74 68 3a 68 2c 73 74 61 63 6b 3a 68 2c 64 6f 63 75 6d 65 6e 74 3a 68 2c 70 61 72 65 6e 74 3a 68 2c 73 70 6c 69 63 65 3a 68 2c 66 6c 6f 6f 72 3a 68 2c 63 61 6c 6c 3a 68 2c 70 6f 70 3a 68 2c Data Ascii: LC',' SPDX-License-Identifier: Apache-2.0','*/','var m={passive:true,capture:true},O_=function(O,h,P){return O.o5(function(T){P=T},false,h),P},hP=function(O,h){return A[O](A.prototype,{length:h,stack:h,document:h,parent:h,splice:h,floor:h,call:h,pop:h,
2024-11-05 20:18:00 UTC	1378	IN	Data Raw: 72 6e 20 66 61 6c 73 65 3b 72 65 74 75 72 6e 20 68 2e 4f 3d 28 47 28 68 2c 28 54 3d 70 28 4f 3f 33 33 35 3a 34 33 2c 28 68 2e 4c 66 3d 50 2c 68 29 29 2c 34 33 29 2c 68 2e 58 29 2c 68 2e 4b 2e 70 75 73 68 28 5b 57 65 2c 54 2c 4f 3f 50 2b 31 3a 50 2c 68 2e 43 2c 68 2e 59 5d 29 2c 64 29 2c 74 72 75 65 7d 2c 63 65 3d 66 75 6e 63 74 69 6f 6e 28 4f 2c 68 29 7b 72 65 74 75 72 6e 20 4f 5b 68 5d 3c 3c 32 34 7c 4f 5b 28 68 7c 30 29 2b 31 5d 3c 3c 31 36 7c 4f 5b 28 68 7c 30 29 2b 32 5d 3c 3c 38 7c 4f 5b 28 68 7c 30 29 2b 33 5d 7d 2c 5a 3d 66 75 6e 63 74 69 6f 6e 28 4f 2c 68 2c 50 2c 54 2c 6c 2c 45 29 7b 69 66 28 4f 2e 4b 2e 6c 65 6e 67 74 68 29 7b 4f 2e 41 3d 21 28 4f 2e 41 26 26 22 3a 54 51 52 3a 54 51 52 3a 22 28 29 2c 30 29 2c 4f 2e 4d 31 3d 50 3b 74 72 79 7b 6c Data Ascii: rn false;return h.O=(G(h,(T=p(O?335:43,(h.Lf=P,h)),43),h.X),h.K.push([We,T,O?P+1:P,h.C,h.Y]),d),true},ce=function(O,h){return O[h]<<24\|O[(h\|0)+1]<<16\|O[(h\|0)+2]<<8\|O[(h\|0)+3]},Z=function(O,h,P,T,l,E){if(O.K.length){O.A=!(O.A&&":TQR:TQR:"(),0),O.M1=P;try{l
2024-11-05 20:18:00 UTC	1378	IN	Data Raw: 2c 50 29 7b 72 65 74 75 72 6e 28 50 3d 41 5b 68 2e 56 5d 28 68 2e 59 39 29 2c 50 5b 68 2e 56 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4f 7d 2c 50 29 2e 63 6f 6e 63 61 74 3d 66 75 6e 63 74 69 6f 6e 28 54 29 7b 4f 3d 54 7d 2c 50 7d 2c 56 72 3d 66 75 6e 63 74 69 6f 6e 28 4f 2c 68 2c 50 2c 54 29 7b 72 65 74 75 72 6e 28 47 28 50 2c 28 70 6f 28 68 2c 28 28 54 3d 70 28 34 33 2c 50 29 2c 50 2e 48 29 26 26 54 3c 50 2e 58 3f 28 47 28 50 2c 34 33 2c 50 2e 58 29 2c 41 50 28 50 2c 4f 29 29 3a 47 28 50 2c 34 33 2c 4f 29 2c 50 29 29 2c 34 33 29 2c 54 29 2c 70 29 28 32 37 39 2c 50 29 7d 2c 7a 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 4f 29 7b 72 65 74 75 72 6e 20 4f 2e 42 3f 65 6e 28 4f 2e 47 2c 4f 29 3a 52 28 38 2c 4f 2c 74 72 75 65 29 7d 2c 47 69 3d 66 75 Data Ascii: ,P){return(P=A[h.V](h.Y9),P[h.V]=function(){return O},P).concat=function(T){O=T},P},Vr=function(O,h,P,T){return(G(P,(po(h,((T=p(43,P),P.H)&&T<P.X?(G(P,43,P.X),AP(P,O)):G(P,43,O),P)),43),T),p)(279,P)},z,g=function(O){return O.B?en(O.G,O):R(8,O,true)},Gi=fu
2024-11-05 20:18:00 UTC	1378	IN	Data Raw: 72 79 7b 69 66 28 28 6c 3d 76 6f 69 64 20 30 2c 68 29 2e 42 29 54 3d 65 6e 28 68 2e 42 2c 68 29 3b 65 6c 73 65 7b 69 66 28 50 3d 70 28 34 33 2c 68 29 2c 50 3e 3d 45 29 62 72 65 61 6b 3b 54 3d 28 6c 3d 49 28 28 47 28 68 2c 33 33 35 2c 50 29 2c 68 29 29 2c 70 29 28 6c 2c 68 29 7d 4b 28 66 61 6c 73 65 2c 28 54 26 26 54 5b 52 59 5d 26 32 30 34 38 3f 54 28 68 2c 4f 29 3a 53 28 5b 55 2c 32 31 2c 6c 5d 2c 68 2c 30 29 2c 68 29 2c 4f 2c 66 61 6c 73 65 29 7d 63 61 74 63 68 28 79 29 7b 70 28 31 32 37 2c 68 29 3f 53 28 79 2c 68 2c 32 32 29 3a 47 28 68 2c 31 32 37 2c 79 29 7d 69 66 28 21 4f 29 7b 69 66 28 68 2e 65 45 29 7b 70 6f 28 34 37 36 37 35 32 31 36 32 35 37 32 2c 28 68 2e 50 2d 2d 2c 68 29 29 3b 72 65 74 75 72 6e 7d 53 28 5b 55 2c 33 33 5d 2c 68 2c 30 29 7d 7d Data Ascii: ry{if((l=void 0,h).B)T=en(h.B,h);else{if(P=p(43,h),P>=E)break;T=(l=I((G(h,335,P),h)),p)(l,h)}K(false,(T&&T[RY]&2048?T(h,O):S([U,21,l],h,0),h),O,false)}catch(y){p(127,h)?S(y,h,22):G(h,127,y)}if(!O){if(h.eE){po(476752162572,(h.P--,h));return}S([U,33],h,0)}}
2024-11-05 20:18:00 UTC	1378	IN	Data Raw: 67 74 68 3b 6c 2b 2b 29 74 72 79 7b 50 3d 4f 2e 75 5b 6c 5d 2c 50 5b 30 5d 5b 50 5b 31 5d 5d 28 50 5b 32 5d 29 7d 63 61 74 63 68 28 45 29 7b 7d 7d 63 61 74 63 68 28 45 29 7b 7d 28 30 2c 68 5b 31 5d 29 28 66 75 6e 63 74 69 6f 6e 28 45 2c 79 29 7b 4f 2e 6f 35 28 45 2c 74 72 75 65 2c 79 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 45 29 7b 4a 28 5b 52 59 5d 2c 28 45 3d 21 4f 2e 4b 2e 6c 65 6e 67 74 68 2c 4f 29 29 2c 45 26 26 5a 28 4f 2c 66 61 6c 73 65 2c 74 72 75 65 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 45 29 7b 72 65 74 75 72 6e 20 4f 2e 54 6c 28 45 29 7d 2c 28 6c 3d 28 4f 2e 75 3d 5b 5d 2c 4f 2e 6f 28 29 29 2c 66 75 6e 63 74 69 6f 6e 28 45 29 7b 72 65 74 75 72 6e 20 4f 2e 4f 44 28 45 29 7d 29 29 2c 4f 2e 4c 2b 3d 4f 2e 6f 28 29 2d 6c 7d 65 6c 73 65 7b 69 66 28 54 3d Data Ascii: gth;l++)try{P=O.u[l],P[0][P[1]](P[2])}catch(E){}}catch(E){}(0,h[1])(function(E,y){O.o5(E,true,y)},function(E){J([RY],(E=!O.K.length,O)),E&&Z(O,false,true)},function(E){return O.Tl(E)},(l=(O.u=[],O.o()),function(E){return O.OD(E)})),O.L+=O.o()-l}else{if(T=
2024-11-05 20:18:00 UTC	1378	IN	Data Raw: 31 31 30 2c 4f 2c 28 78 28 31 34 36 2c 28 78 28 33 36 2c 28 78 28 28 47 28 28 78 28 31 32 32 2c 4f 2c 28 78 28 33 32 2c 28 47 28 4f 2c 28 78 28 33 39 32 2c 4f 2c 28 78 28 34 38 2c 28 47 28 28 28 47 28 4f 2c 37 36 2c 28 78 28 34 33 32 2c 4f 2c 28 78 28 31 34 35 2c 28 78 28 33 36 38 2c 28 47 28 4f 2c 31 35 30 2c 28 28 4f 2e 41 6e 3d 28 78 28 33 36 37 2c 28 78 28 34 32 30 2c 4f 2c 28 78 28 32 35 31 2c 28 47 28 4f 2c 31 32 37 2c 28 47 28 4f 2c 28 47 28 4f 2c 28 78 28 32 31 38 2c 4f 2c 28 47 28 4f 2c 31 30 39 2c 28 78 28 35 30 33 2c 4f 2c 28 47 28 4f 2c 33 33 35 2c 28 47 28 4f 2c 34 33 2c 28 28 4f 2e 62 67 6f 64 6e 64 3d 28 4f 2e 6c 61 61 6e 74 66 3d 5b 5d 2c 28 4f 2e 6b 75 79 64 71 73 3d 5b 5d 2c 4f 29 2e 63 70 6e 71 6a 6e 3d 22 22 2c 30 29 2c 4f 29 2e 55 26 Data Ascii: 110,O,(x(146,(x(36,(x((G((x(122,O,(x(32,(G(O,(x(392,O,(x(48,(G(((G(O,76,(x(432,O,(x(145,(x(368,(G(O,150,((O.An=(x(367,(x(420,O,(x(251,(G(O,127,(G(O,(G(O,(x(218,O,(G(O,109,(x(503,O,(G(O,335,(G(O,43,((O.bgodnd=(O.laantf=[],(O.kuydqs=[],O).cpnqjn="",0),O).U&
2024-11-05 20:18:00 UTC	1378	IN	Data Raw: 3d 49 28 4e 29 2c 4e 29 29 2c 57 29 2c 22 22 2b 70 28 63 2c 4e 29 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 4e 2c 63 2c 57 2c 65 2c 59 29 7b 63 3d 28 59 3d 28 57 3d 70 28 28 65 3d 28 59 3d 28 65 3d 28 63 3d 28 57 3d 49 28 4e 29 2c 49 28 4e 29 29 2c 49 29 28 4e 29 2c 49 28 4e 29 29 2c 70 29 28 65 2c 4e 29 2c 57 29 2c 4e 2e 46 29 2c 70 28 59 2c 4e 29 29 2c 70 28 63 2c 4e 29 29 2c 57 21 3d 3d 30 26 26 28 65 3d 77 4c 28 65 2c 59 2c 4e 2c 31 2c 57 2c 63 29 2c 57 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 63 2c 65 2c 6d 29 2c 47 28 4e 2c 31 35 30 2c 5b 57 2c 63 2c 65 5d 29 29 7d 29 29 2c 34 39 29 2c 5b 32 30 34 38 5d 29 2c 4f 29 2c 66 75 6e 63 74 69 6f 6e 28 4e 29 7b 51 72 28 34 2c 4e 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 4e 2c 63 2c 57 2c 65 29 7b 47 Data Ascii: =I(N),N)),W),""+p(c,N))}),function(N,c,W,e,Y){c=(Y=(W=p((e=(Y=(e=(c=(W=I(N),I(N)),I)(N),I(N)),p)(e,N),W),N.F),p(Y,N)),p(c,N)),W!==0&&(e=wL(e,Y,N,1,W,c),W.addEventListener(c,e,m),G(N,150,[W,c,e]))})),49),[2048]),O),function(N){Qr(4,N)}),function(N,c,W,e){G
2024-11-05 20:18:00 UTC	1378	IN	Data Raw: 28 28 63 3d 49 28 4e 29 2c 63 29 2c 4e 2e 46 29 2c 4e 5b 30 5d 29 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 4e 5b 31 5d 2c 4e 5b 32 5d 2c 6d 29 7d 29 2c 78 29 28 32 35 36 2c 4f 2c 66 75 6e 63 74 69 6f 6e 28 4e 2c 63 2c 57 2c 65 2c 59 2c 56 29 7b 4b 28 74 72 75 65 2c 4e 2c 63 2c 66 61 6c 73 65 29 7c 7c 28 59 3d 6e 6f 28 4e 2e 46 29 2c 63 3d 59 2e 52 35 2c 57 3d 59 2e 42 6d 2c 56 3d 59 2e 6a 2c 59 3d 59 2e 68 6e 2c 65 3d 56 2e 6c 65 6e 67 74 68 2c 63 3d 65 3d 3d 30 3f 6e 65 77 20 63 5b 57 5d 3a 65 3d 3d 31 3f 6e 65 77 20 63 5b 57 5d 28 56 5b 30 5d 29 3a 65 3d 3d 32 3f 6e 65 77 20 63 5b 57 5d 28 56 5b 30 5d 2c 56 5b 31 5d 29 3a 65 3d 3d 33 3f 6e 65 77 20 63 5b 57 5d 28 56 5b 30 5d 2c 56 5b 31 5d 2c 56 5b 32 5d 29 3a 65 3d 3d 34 3f 6e 65 Data Ascii: ((c=I(N),c),N.F),N[0]).removeEventListener(N[1],N[2],m)}),x)(256,O,function(N,c,W,e,Y,V){K(true,N,c,false)\|\|(Y=no(N.F),c=Y.R5,W=Y.Bm,V=Y.j,Y=Y.hn,e=V.length,c=e==0?new c[W]:e==1?new c[W](V[0]):e==2?new c[W](V[0],V[1]):e==3?new c[W](V[0],V[1],V[2]):e==4?ne
2024-11-05 20:18:00 UTC	1378	IN	Data Raw: 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 4f 2e 63 61 6c 6c 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3b 72 65 74 75 72 6e 20 50 7d 2c 4c 6f 3d 66 75 6e 63 74 69 6f 6e 28 4f 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 50 28 29 7b 74 68 69 73 2e 4a 3d 28 74 68 69 73 2e 6e 3d 30 2c 5b 5d 29 7d 72 65 74 75 72 6e 5b 66 75 6e 63 74 69 6f 6e 28 54 29 7b 4f 2e 55 44 28 54 29 2c 68 2e 55 44 28 54 29 7d 2c 28 68 3d 28 4f 3d 28 50 2e 70 72 6f 74 6f 74 79 70 65 2e 55 44 3d 28 50 2e 70 72 6f 74 6f 74 79 70 65 2e 64 4a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 6e 3d 3d 3d 30 29 72 65 74 75 72 6e 5b 30 2c 30 5d 3b 72 65 74 75 72 6e 5b 28 74 68 69 73 2e 4a 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 54 2c 6c 29 Data Ascii: ction"&&typeof O.call=="undefined")return"object";return P},Lo=function(O,h){function P(){this.J=(this.n=0,[])}return[function(T){O.UD(T),h.UD(T)},(h=(O=(P.prototype.UD=(P.prototype.dJ=function(){if(this.n===0)return[0,0];return[(this.J.sort(function(T,l)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49760	142.250.186.132	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:00 UTC	952	OUT	POST /recaptcha/api2/reload?k=6LejiXUqAAAAAFaG20PrbDcf0UifxwSgI18CUBuN HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 11394 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-protobuffer Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LejiXUqAAAAAFaG20PrbDcf0UifxwSgI18CUBuN&co=aHR0cHM6Ly9sb2dpbi5udXJpYXBzaWNvbG9naWEuY29tOjQ0Mw..&hl=en&v=-ZG7BC9TxCVEbzIO2m429usb&size=invisible&cb=zfh74mtnhpaf Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-05 20:18:00 UTC	11394	OUT	Data Raw: 0a 18 2d 5a 47 37 42 43 39 54 78 43 56 45 62 7a 49 4f 32 6d 34 32 39 75 73 62 12 ce 0f 30 33 41 46 63 57 65 41 37 63 79 32 54 34 48 31 37 62 4a 72 72 65 6a 52 68 44 55 71 68 79 6e 69 55 6d 50 73 64 54 77 73 56 46 7a 43 50 4a 34 79 74 41 53 4c 32 77 2d 33 49 6a 71 37 62 47 35 62 42 32 4e 76 6a 79 46 51 6f 73 41 2d 36 61 71 77 72 6c 59 52 72 43 78 45 5a 45 6c 2d 4b 75 56 73 42 34 41 47 5f 41 46 65 59 56 51 44 4a 62 50 59 46 77 66 32 44 38 41 74 65 4a 55 57 5a 55 69 75 70 6e 62 36 58 47 68 48 42 75 4e 43 69 52 59 30 71 78 69 43 34 30 6c 67 73 69 4e 39 48 39 4b 30 77 32 53 70 70 2d 71 73 42 69 61 74 56 48 64 63 6c 70 37 79 76 4e 70 41 4e 78 4e 47 59 58 61 46 5a 4b 7a 46 5f 32 69 4e 38 2d 38 35 45 42 71 72 50 76 6c 62 58 69 54 36 78 42 30 6a 53 49 35 4b 61 53 Data Ascii: -ZG7BC9TxCVEbzIO2m429usb03AFcWeA7cy2T4H17bJrrejRhDUqhyniUmPsdTwsVFzCPJ4ytASL2w-3Ijq7bG5bB2NvjyFQosA-6aqwrlYRrCxEZEl-KuVsB4AG_AFeYVQDJbPYFwf2D8AteJUWZUiupnb6XGhHBuNCiRY0qxiC40lgsiN9H9K0w2Spp-qsBiatVHdclp7yvNpANxNGYXaFZKzF_2iN8-85EBqrPvlbXiT6xB0jSI5KaS
2024-11-05 20:18:01 UTC	1000	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Cross-Origin-Resource-Policy: same-site Date: Tue, 05 Nov 2024 20:18:00 GMT Server: ESF Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: _GRECAPTCHA=09ANOXeZxRYKRc1aa2_w0wE-Yy9K2C-RUruROR0Jvg39A0_jLe3gEEf8THt-zb2QpVM8lG9F5qjYpjQJvbWwYOkvw; Expires=Sun, 04-May-2025 20:18:00 GMT; Path=/recaptcha; Secure; HttpOnly; Priority=HIGH; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Expires: Tue, 05 Nov 2024 20:18:00 GMT Connection: close Transfer-Encoding: chunked
2024-11-05 20:18:01 UTC	378	IN	Data Raw: 33 36 32 61 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 35 35 44 44 69 63 6e 4a 64 47 73 61 77 4d 4d 7a 50 47 7a 4a 63 72 73 51 69 73 69 65 6c 55 70 57 42 6a 42 4a 75 37 6b 61 32 78 6c 4d 42 69 69 6c 32 2d 32 34 62 56 67 6d 6e 6b 48 57 4b 61 64 33 30 71 44 5a 63 5f 5a 5f 46 65 37 53 64 56 52 6a 4c 79 72 37 37 44 66 51 33 48 61 37 49 68 61 73 2d 44 37 37 49 36 4b 32 73 37 6f 75 4f 62 64 54 65 32 5a 5f 77 58 63 69 53 5a 55 6b 56 7a 4f 4a 6f 66 5a 6b 7a 41 65 4e 45 39 58 6a 34 52 67 66 6d 79 73 6b 42 49 6b 48 5f 58 42 43 58 5a 71 48 4b 69 33 47 74 75 53 7a 4e 51 6b 58 7a 33 76 4d 2d 56 75 6c 74 75 7a 6d 43 51 54 2d 64 2d 36 4b 71 69 56 52 6d 6e 51 6d 61 52 69 68 4e 64 74 41 30 49 66 4e 44 5f 6b 63 46 57 5f 54 73 65 74 47 5a 65 Data Ascii: 362a)]}'["rresp","03AFcWeA55DDicnJdGsawMMzPGzJcrsQisielUpWBjBJu7ka2xlMBiil2-24bVgmnkHWKad30qDZc_Z_Fe7SdVRjLyr77DfQ3Ha7Ihas-D77I6K2s7ouObdTe2Z_wXciSZUkVzOJofZkzAeNE9Xj4RgfmyskBIkH_XBCXZqHKi3GtuSzNQkXz3vM-VultuzmCQT-d-6KqiVRmnQmaRihNdtA0IfND_kcFW_TsetGZe
2024-11-05 20:18:01 UTC	1378	IN	Data Raw: 45 6c 4e 63 4f 6b 71 73 45 36 71 52 6e 4a 78 71 39 42 77 42 32 6b 78 4f 6a 6f 6f 74 35 2d 67 35 4e 71 7a 6f 71 67 41 6c 62 6c 56 68 4a 6a 4e 4b 52 6c 4a 64 62 38 55 6f 68 63 4f 70 4d 62 30 56 59 55 65 72 4e 74 59 2d 74 68 67 37 5a 37 6c 32 52 70 33 5a 6e 6c 55 59 73 64 43 66 7a 38 4f 32 6b 44 48 61 7a 44 50 37 59 42 6f 30 37 69 34 44 49 43 74 38 33 49 2d 45 77 64 42 6d 34 61 50 59 49 38 74 71 38 6c 58 4b 63 4f 7a 34 49 47 30 5a 38 4e 70 30 52 45 30 52 48 5a 39 4f 75 65 76 78 37 62 5a 57 4b 4f 2d 35 6e 53 49 56 48 4b 48 41 5a 55 73 4b 4a 72 50 49 70 6e 4b 54 75 5f 62 67 50 33 4b 76 6d 6b 61 75 61 74 45 75 2d 45 4c 48 6d 55 7a 6c 2d 52 4d 4b 5a 77 72 37 73 68 6c 43 57 75 76 75 62 31 74 78 34 56 41 4b 64 63 52 35 48 74 30 48 53 48 63 41 79 51 67 4c 45 58 4b Data Ascii: ElNcOkqsE6qRnJxq9BwB2kxOjoot5-g5NqzoqgAlblVhJjNKRlJdb8UohcOpMb0VYUerNtY-thg7Z7l2Rp3ZnlUYsdCfz8O2kDHazDP7YBo07i4DICt83I-EwdBm4aPYI8tq8lXKcOz4IG0Z8Np0RE0RHZ9Ouevx7bZWKO-5nSIVHKHAZUsKJrPIpnKTu_bgP3KvmkauatEu-ELHmUzl-RMKZwr7shlCWuvub1tx4VAKdcR5Ht0HSHcAyQgLEXK
2024-11-05 20:18:01 UTC	1378	IN	Data Raw: 65 45 52 59 49 4f 56 52 67 48 70 76 37 4e 4e 49 6b 6a 32 74 62 64 74 4a 6e 69 42 44 30 79 75 48 67 78 54 44 38 79 69 53 59 35 5f 32 5f 54 73 30 65 6c 6f 72 47 32 54 73 75 71 50 55 77 52 7a 45 35 69 59 72 4a 65 44 6a 32 6b 63 75 4c 6e 36 4e 38 57 47 53 37 47 62 37 46 50 4f 79 6a 47 4d 65 48 6e 76 32 2d 47 67 54 32 58 4b 51 36 4e 56 45 4e 77 77 45 4d 75 46 71 57 72 5a 34 53 46 77 41 63 62 69 39 36 6b 41 53 67 4c 5f 69 6d 37 4a 5a 31 71 70 77 47 48 4c 79 44 67 78 7a 41 41 43 75 33 47 30 49 52 6b 71 71 42 65 49 69 64 44 44 35 30 48 77 6e 72 31 56 6e 63 70 55 77 2d 38 6a 31 4b 45 61 73 63 79 6b 6f 76 4f 39 65 79 54 44 55 36 2d 47 32 57 6b 2d 4f 63 56 57 77 71 30 76 72 44 5f 76 51 72 32 6a 4f 71 75 47 6b 41 76 57 37 43 62 33 71 33 47 2d 76 5a 5f 4d 68 69 75 67 Data Ascii: eERYIOVRgHpv7NNIkj2tbdtJniBD0yuHgxTD8yiSY5_2_Ts0elorG2TsuqPUwRzE5iYrJeDj2kcuLn6N8WGS7Gb7FPOyjGMeHnv2-GgT2XKQ6NVENwwEMuFqWrZ4SFwAcbi96kASgL_im7JZ1qpwGHLyDgxzAACu3G0IRkqqBeIidDD50Hwnr1VncpUw-8j1KEascykovO9eyTDU6-G2Wk-OcVWwq0vrD_vQr2jOquGkAvW7Cb3q3G-vZ_Mhiug
2024-11-05 20:18:01 UTC	1378	IN	Data Raw: 55 39 75 52 6a 56 4f 54 45 46 32 53 6b 67 30 61 57 4a 46 63 55 35 79 53 57 49 33 57 44 42 76 52 55 46 61 63 48 64 71 57 57 78 31 5a 32 56 47 4d 6d 74 34 53 6d 35 57 51 32 6b 76 57 57 4a 6e 4c 31 49 31 4e 30 35 6d 63 43 39 6f 53 79 39 48 54 47 68 57 62 47 56 78 4e 58 4d 31 63 47 4e 77 4e 47 39 5a 56 47 39 57 53 47 52 52 52 55 55 31 4d 47 64 76 57 47 35 35 55 45 52 6e 52 57 73 77 64 57 78 6c 51 57 52 43 62 30 6f 78 55 6d 34 31 56 6d 78 43 51 30 63 34 65 48 52 43 52 44 56 30 52 32 70 59 56 46 64 59 53 55 30 30 55 57 78 50 57 55 39 30 5a 58 52 73 4e 47 4e 55 4c 33 56 6c 52 6d 30 34 4d 30 31 43 62 55 46 4e 65 56 46 59 65 46 46 57 63 48 52 34 57 6c 64 7a 62 33 4e 4e 52 57 35 4f 4d 57 56 76 62 6a 46 74 63 58 5a 4a 61 57 74 32 61 7a 42 69 62 58 41 72 4e 47 31 6f Data Ascii: U9uRjVOTEF2Skg0aWJFcU5ySWI3WDBvRUFacHdqWWx1Z2VGMmt4Sm5WQ2kvWWJnL1I1N05mcC9oSy9HTGhWbGVxNXM1cGNwNG9ZVG9WSGRRRUU1MGdvWG55UERnRWswdWxlQWRCb0oxUm41VmxCQ0c4eHRCRDV0R2pYVFdYSU00UWxPWU90ZXRsNGNUL3VlRm04M01CbUFNeVFYeFFWcHR4Wldzb3NNRW5OMWVvbjFtcXZJaWt2azBibXArNG1o
2024-11-05 20:18:01 UTC	1378	IN	Data Raw: 46 61 6b 31 50 63 47 4a 50 57 46 5a 33 61 6b 74 78 54 57 68 58 5a 30 56 52 65 44 4e 42 59 7a 42 75 4c 7a 52 51 64 55 6b 76 53 69 74 48 4d 69 39 46 62 58 56 30 64 54 42 6f 54 30 46 72 56 6e 64 70 4e 32 51 72 61 33 5a 77 4f 48 70 51 65 54 4e 6d 4d 6e 6b 32 51 58 4a 4d 55 6d 78 35 54 46 6c 4f 52 6e 51 30 52 45 64 53 56 6d 39 33 4e 6d 73 31 63 45 31 71 54 45 5a 5a 52 30 70 6f 65 57 68 69 5a 33 68 57 4d 45 78 72 53 45 64 69 55 31 46 69 5a 79 39 7a 4e 55 73 78 4d 56 70 44 4b 30 4e 74 55 6a 4e 5a 4d 47 35 7a 5a 30 35 36 62 57 35 4a 59 31 64 4b 62 55 49 78 4d 54 41 76 54 31 68 70 52 58 46 76 53 7a 4a 74 63 6b 52 76 64 44 4e 4a 63 7a 64 32 51 32 56 69 53 6a 59 72 57 45 64 61 56 6d 6c 5a 61 47 4e 56 62 31 5a 53 57 69 39 5a 51 58 4a 6a 4d 45 38 78 61 54 6c 68 4e 55 Data Ascii: Fak1PcGJPWFZ3aktxTWhXZ0VReDNBYzBuLzRQdUkvSitHMi9FbXV0dTBoT0FrVndpN2Qra3ZwOHpQeTNmMnk2QXJMUmx5TFlORnQ0REdSVm93Nms1cE1qTEZZR0poeWhiZ3hWMExrSEdiU1FiZy9zNUsxMVpDK0NtUjNZMG5zZ056bW5JY1dKbUIxMTAvT1hpRXFvSzJtckRvdDNJczd2Q2ViSjYrWEdaVmlZaGNVb1ZSWi9ZQXJjME8xaTlhNU
2024-11-05 20:18:01 UTC	1378	IN	Data Raw: 54 64 44 4f 45 68 4e 64 32 46 36 61 32 5a 48 55 57 74 31 52 33 46 42 64 30 46 49 61 45 38 77 61 30 56 6c 53 31 67 76 4b 31 45 79 4e 56 70 48 53 48 68 75 63 79 74 34 52 43 39 57 53 6b 4a 6a 5a 6e 41 32 54 6b 35 7a 56 6a 6b 7a 5a 44 42 4b 59 69 39 45 4d 55 5a 5a 56 32 4e 46 63 44 4e 68 63 6d 5a 77 61 33 56 50 62 56 51 77 4e 30 74 53 52 6e 5a 4f 61 6a 63 7a 61 31 6c 49 5a 55 4d 31 56 47 45 34 4e 6e 52 79 55 31 4e 55 59 54 64 68 4f 43 38 35 57 47 6c 49 52 6d 4e 75 61 58 52 68 55 33 63 31 52 56 52 73 56 6c 64 68 4d 6b 39 59 55 6a 4d 34 4d 58 42 7a 64 58 6b 30 4b 30 31 51 62 54 5a 33 63 53 39 4e 62 31 64 57 64 6a 45 32 63 55 63 77 62 57 35 4a 57 54 55 34 5a 47 31 7a 5a 46 68 4a 54 47 4a 36 53 45 34 34 52 30 64 4a 61 45 4d 79 57 6b 56 61 51 7a 5a 78 51 6c 64 6e Data Ascii: TdDOEhNd2F6a2ZHUWt1R3FBd0FIaE8wa0VlS1gvK1EyNVpHSHhucyt4RC9WSkJjZnA2Tk5zVjkzZDBKYi9EMUZZV2NFcDNhcmZwa3VPbVQwN0tSRnZOajcza1lIZUM1VGE4NnRyU1NUYTdhOC85WGlIRmNuaXRhU3c1RVRsVldhMk9YUjM4MXBzdXk0K01QbTZ3cS9Nb1dWdjE2cUcwbW5JWTU4ZG1zZFhJTGJ6SE44R0dJaEMyWkVaQzZxQldn
2024-11-05 20:18:01 UTC	1378	IN	Data Raw: 48 55 30 64 6b 52 57 46 75 64 57 46 6c 59 31 4a 7a 4e 46 4e 78 57 57 78 74 56 30 78 44 63 44 4e 50 56 45 78 43 54 47 46 35 59 7a 68 52 54 6a 6c 31 4e 30 4e 79 4e 55 34 76 4e 45 70 4d 63 6d 4a 52 53 48 46 6e 5a 55 52 77 59 56 56 74 4e 47 52 34 52 6d 6f 72 65 6a 42 6b 4d 6d 68 71 54 57 6c 4f 63 32 52 44 4d 6d 6f 76 54 30 74 49 53 43 74 6f 53 48 70 44 54 6c 68 36 62 58 68 59 54 57 64 77 63 6c 64 6c 54 31 52 36 63 6d 56 47 65 54 4a 76 59 6e 64 33 4e 54 6b 31 4b 30 68 51 4e 47 70 6d 65 44 56 49 55 30 31 47 57 47 45 72 63 44 68 6a 59 30 64 43 54 6e 4a 78 56 47 56 49 4c 30 49 78 4d 32 68 6a 4e 47 35 53 53 7a 46 36 57 6d 46 4d 4e 6d 5a 51 64 45 35 31 51 6b 6c 47 61 45 39 49 62 6b 6f 79 62 54 4e 77 56 6a 64 70 53 6b 52 74 54 7a 4a 6a 5a 6b 78 52 53 30 64 30 55 32 Data Ascii: HU0dkRWFudWFlY1JzNFNxWWxtV0xDcDNPVExCTGF5YzhRTjl1N0NyNU4vNEpMcmJRSHFnZURwYVVtNGR4RmorejBkMmhqTWlOc2RDMmovT0tISCtoSHpDTlh6bXhYTWdwcldlT1R6cmVGeTJvYnd3NTk1K0hQNGpmeDVIU01GWGErcDhjY0dCTnJxVGVIL0IxM2hjNG5SSzF6WmFMNmZQdE51QklGaE9IbkoybTNwVjdpSkRtTzJjZkxRS0d0U2
2024-11-05 20:18:01 UTC	1378	IN	Data Raw: 48 42 55 57 45 70 49 52 6d 39 53 65 44 42 47 64 44 42 7a 4b 31 67 34 63 6d 46 46 62 30 77 77 65 6e 52 4c 62 7a 4a 69 5a 58 70 30 56 47 49 30 57 44 4e 72 53 33 68 33 65 46 6f 30 4f 47 39 35 63 6b 4e 58 54 32 52 61 64 54 52 79 54 43 39 48 4e 46 46 70 4e 32 35 32 59 6e 4a 6e 53 58 56 55 5a 47 46 7a 55 54 49 78 52 45 31 32 57 6c 6f 72 63 44 46 34 5a 56 45 78 61 45 31 78 62 45 70 44 59 54 56 4b 51 33 6c 58 59 6a 63 35 55 48 68 50 4e 32 6b 78 52 32 73 77 5a 57 74 56 4f 46 42 53 56 6d 78 6d 61 7a 4e 76 55 6a 4a 45 4d 45 6c 72 4c 32 34 79 5a 31 49 7a 56 31 4a 4c 59 56 4a 6c 4e 6d 4e 6e 51 56 5a 33 4e 30 52 58 63 48 45 72 5a 32 4a 5a 4e 6a 4a 73 4d 55 5a 50 56 32 64 31 65 45 78 6c 52 6d 31 4f 63 48 5a 4e 64 31 4e 31 5a 44 52 55 62 69 39 44 52 55 39 72 4d 30 39 72 Data Ascii: HBUWEpIRm9SeDBGdDBzK1g4cmFFb0wwenRLbzJiZXp0VGI0WDNrS3h3eFo0OG95ckNXT2RadTRyTC9HNFFpN252YnJnSXVUZGFzUTIxRE12WlorcDF4ZVExaE1xbEpDYTVKQ3lXYjc5UHhPN2kxR2swZWtVOFBSVmxmazNvUjJEMElrL24yZ1IzV1JLYVJlNmNnQVZ3N0RXcHErZ2JZNjJsMUZPV2d1eExlRm1OcHZNd1N1ZDRUbi9DRU9rM09r
2024-11-05 20:18:01 UTC	1378	IN	Data Raw: 68 52 6e 70 46 59 33 56 32 62 57 52 55 52 58 55 35 59 7a 6c 33 63 32 4e 44 62 47 6f 33 5a 57 35 70 4e 46 52 33 51 31 4a 47 59 30 39 59 53 30 46 55 63 6d 70 75 53 44 67 72 57 56 4e 4f 55 32 5a 4d 53 31 5a 75 54 53 39 54 53 57 31 6c 52 6a 56 45 63 56 52 34 51 33 6c 69 57 6a 68 69 52 48 6c 35 61 7a 4a 69 52 55 52 30 65 58 70 56 51 6b 46 59 51 33 46 34 56 56 56 56 64 54 49 32 51 55 70 6a 63 6a 64 36 56 45 45 31 52 57 39 35 54 47 68 79 51 55 6c 33 4c 79 39 34 53 47 78 6b 64 6d 6f 31 54 6b 56 36 51 57 68 6f 59 6c 56 48 65 6d 52 55 53 57 6c 52 5a 33 51 79 55 56 56 47 53 47 56 49 62 30 56 5a 57 6d 70 55 56 55 78 47 5a 33 4e 57 4e 55 31 33 55 32 6c 5a 4b 31 64 79 59 57 64 31 62 32 5a 57 57 47 31 50 65 47 70 42 59 33 67 7a 59 6d 67 31 55 56 59 35 56 45 31 6a 63 54 Data Ascii: hRnpFY3V2bWRURXU5Yzl3c2NDbGo3ZW5pNFR3Q1JGY09YS0FUcmpuSDgrWVNOU2ZMS1ZuTS9TSW1lRjVEcVR4Q3liWjhiRHl5azJiRUR0eXpVQkFYQ3F4VVVVdTI2QUpjcjd6VEE1RW95TGhyQUl3Ly94SGxkdmo1TkV6QWhoYlVHemRUSWlRZ3QyUVVGSGVIb0VZWmpUVUxGZ3NWNU13U2lZK1dyYWd1b2ZWWG1PeGpBY3gzYmg1UVY5VE1jcT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	49761	104.18.95.41	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:00 UTC	1150	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/327534660:1730834845:xB-X5yMQwnEzWyfOsx7a_gc-vUOi2RR5kk_BobmozzY/8ddf87ad58f36c25/.T7TKrt9wrxElaOPQwbGCCRFdzx7EdER96MDTZyI7OE-1730837874-1.1.1.1-w1VUtYFQyOaPeGAutG8NnTuZyILjccRMIz3R2IKDpfCOHSVV7p1SBpaHe7mt.dJk HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 31825 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: .T7TKrt9wrxElaOPQwbGCCRFdzx7EdER96MDTZyI7OE-1730837874-1.1.1.1-w1VUtYFQyOaPeGAutG8NnTuZyILjccRMIz3R2IKDpfCOHSVV7p1SBpaHe7mt.dJk sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/5cjyd/0x4AAAAAAAzPhqrNyZFP3elb/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-05 20:18:00 UTC	16384	OUT	Data Raw: 76 5f 38 64 64 66 38 37 61 64 35 38 66 33 36 63 32 35 3d 37 4d 24 54 6c 42 44 79 47 6d 47 50 47 44 48 44 59 67 6e 67 49 25 32 62 32 44 78 67 55 66 2b 6b 67 38 54 6d 24 67 6b 67 4d 54 55 65 44 42 67 24 54 6d 4d 55 4e 67 53 62 67 55 4f 62 48 42 50 67 6f 54 54 35 24 67 69 4b 67 32 68 67 72 51 38 65 54 67 5a 47 34 44 76 46 42 35 44 44 4e 67 7a 54 32 6d 67 42 62 62 63 54 61 67 4b 54 64 4e 67 6e 56 24 55 46 67 6f 62 54 44 56 55 76 6b 35 30 67 74 54 2b 65 47 47 65 58 67 55 59 66 6d 4b 34 55 56 72 67 67 46 48 7a 34 68 31 69 24 67 4b 2d 49 6d 67 42 58 44 24 46 69 41 67 44 35 62 71 77 5a 44 72 2b 49 61 67 6d 65 41 6c 72 4e 48 67 44 72 4e 70 70 72 75 65 47 48 67 68 54 44 56 45 6a 41 62 56 41 34 4c 57 4f 48 67 56 62 63 53 65 76 61 45 6f 4f 45 58 6b 46 50 75 33 48 61 Data Ascii: v_8ddf87ad58f36c25=7M$TlBDyGmGPGDHDYgngI%2b2DxgUf+kg8Tm$gkgMTUeDBg$TmMUNgSbgUObHBPgoTT5$giKg2hgrQ8eTgZG4DvFB5DDNgzT2mgBbbcTagKTdNgnV$UFgobTDVUvk50gtT+eGGeXgUYfmK4UVrggFHz4h1i$gK-ImgBXD$FiAgD5bqwZDr+IagmeAlrNHgDrNpprueGHghTDVEjAbVA4LWOHgVbcSevaEoOEXkFPu3Ha
2024-11-05 20:18:00 UTC	15441	OUT	Data Raw: 36 72 36 56 61 69 4d 69 6d 5a 24 44 48 67 46 65 39 67 55 54 67 48 44 65 67 61 67 45 61 69 4f 67 47 67 73 4f 67 54 55 4e 67 77 4d 35 48 67 4f 67 4c 61 49 34 67 42 67 77 54 42 67 55 62 67 56 43 51 24 42 50 67 56 67 32 78 55 59 67 6b 54 32 65 42 56 67 53 54 55 65 44 73 67 55 54 42 4d 42 62 67 78 7a 50 36 64 33 54 61 67 44 36 64 24 67 5a 67 35 54 55 36 75 4e 67 37 59 55 36 75 45 61 42 57 4e 32 67 71 54 31 7a 42 2b 67 4d 67 6a 69 44 4f 44 6a 67 32 24 44 4d 44 42 67 4f 47 44 50 67 50 54 77 65 44 59 67 70 54 2b 67 42 63 4f 5a 67 57 65 44 66 54 2d 54 42 67 44 38 67 33 54 32 54 44 56 67 5a 51 53 67 42 31 75 74 4f 44 34 42 2d 47 44 71 44 68 67 31 75 6d 73 56 24 67 4e 6d 5a 54 50 47 67 68 67 77 54 37 24 77 50 44 45 6e 24 48 55 4b 67 54 4f 2b 54 67 59 44 4e 54 41 34 Data Ascii: 6r6VaiMimZ$DHgFe9gUTgHDegagEaiOgGgsOgTUNgwM5HgOgLaI4gBgwTBgUbgVCQ$BPgVg2xUYgkT2eBVgSTUeDsgUTBMBbgxzP6d3TagD6d$gZg5TU6uNg7YU6uEaBWN2gqT1zB+gMgjiDODjg2$DMDBgOGDPgPTweDYgpT+gBcOZgWeDfT-TBgD8g3T2TDVgZQSgB1utOD4B-GDqDhg1umsV$gNmZTPGghgwT7$wPDEn$HUKgTO+TgYDNTA4
2024-11-05 20:18:01 UTC	330	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 20:18:00 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26360 Connection: close cf-chl-gen: fA9P+tgMkp6HIuXWGUc11mWj2jc8+x6hMLBbBSKPRYdUmMJeRH7+u4INL+K/cuOxjDqHcWQZzK7D7E3+$dpaja5TXpvt77nlC Server: cloudflare CF-RAY: 8ddf87d2bdc2e7cf-DFW alt-svc: h3=":443"; ma=86400
2024-11-05 20:18:01 UTC	1039	IN	Data Raw: 69 6c 52 67 66 46 36 49 57 6f 6d 4b 64 45 61 4c 6b 47 36 42 6c 35 68 61 56 46 70 31 6b 58 56 65 65 5a 57 58 65 70 4b 5a 6e 34 4b 48 68 4b 75 73 68 34 70 75 72 32 6c 7a 67 34 4f 33 6f 5a 4b 68 68 4b 79 6d 75 62 71 6e 66 58 36 36 6c 6f 36 41 76 34 53 39 74 36 65 45 76 38 65 4d 75 35 76 47 6b 63 75 53 76 35 4f 4a 77 38 48 48 71 64 76 4a 74 4e 43 34 6f 61 32 37 32 4a 37 58 75 4f 54 61 6f 71 75 39 77 38 32 6f 79 37 76 79 37 4b 72 4d 39 66 44 53 74 4f 71 35 79 72 62 50 79 62 76 75 75 41 58 36 76 74 6e 34 39 76 58 5a 78 4f 77 45 32 67 37 4e 7a 77 63 4c 38 76 48 7a 42 66 62 7a 44 52 73 4f 43 42 4c 30 37 75 77 69 41 65 7a 38 38 53 51 58 34 69 67 4d 41 77 4c 32 48 75 63 45 36 44 4c 38 43 77 77 51 4b 77 6f 47 4c 7a 76 35 4a 30 42 42 2f 42 52 45 4c 6a 42 41 49 53 55 Data Ascii: ilRgfF6IWomKdEaLkG6Bl5haVFp1kXVeeZWXepKZn4KHhKush4pur2lzg4O3oZKhhKymubqnfX66lo6Av4S9t6eEv8eMu5vGkcuSv5OJw8HHqdvJtNC4oa272J7XuOTaoqu9w82oy7vy7KrM9fDStOq5yrbPybvuuAX6vtn49vXZxOwE2g7NzwcL8vHzBfbzDRsOCBL07uwiAez88SQX4igMAwL2HucE6DL8CwwQKwoGLzv5J0BB/BRELjBAISU
2024-11-05 20:18:01 UTC	1369	IN	Data Raw: 4f 67 35 70 57 56 6e 4a 70 6c 61 42 33 6f 70 4f 51 64 70 46 6c 70 6d 52 6b 61 31 36 63 69 36 5a 37 67 6d 32 6b 63 61 4b 53 64 4b 61 49 71 4c 75 4b 69 70 69 52 71 6e 65 7a 6a 70 36 66 66 49 46 2b 6e 61 71 43 79 38 57 72 70 6f 72 51 6a 74 43 73 6f 59 69 6a 70 6f 2f 61 6c 61 66 64 6d 74 4b 58 31 5a 36 36 72 64 43 2b 34 63 6d 36 73 35 32 2b 33 4f 53 35 34 75 72 66 77 36 33 4a 7a 4c 48 6c 74 38 66 4f 35 66 62 39 79 41 47 2b 31 2b 4f 2f 2b 39 36 35 43 50 59 4d 42 77 4c 4c 44 63 67 4d 42 2f 4c 69 35 67 72 71 37 78 4c 70 46 78 4c 6f 36 50 51 4f 37 65 6f 65 33 76 59 48 33 69 4d 6b 41 68 37 6d 39 66 55 77 35 51 2f 71 4a 44 41 54 4c 44 45 58 44 53 6a 7a 50 66 73 4c 50 52 59 34 2b 52 38 75 49 44 70 44 4a 55 67 2b 52 44 68 4c 4c 46 41 4f 4c 30 46 45 53 69 6b 4d 52 6a Data Ascii: Og5pWVnJplaB3opOQdpFlpmRka16ci6Z7gm2kcaKSdKaIqLuKipiRqnezjp6ffIF+naqCy8WrporQjtCsoYijpo/alafdmtKX1Z66rdC+4cm6s52+3OS54urfw63JzLHlt8fO5fb9yAG+1+O/+965CPYMBwLLDcgMB/Li5grq7xLpFxLo6PQO7eoe3vYH3iMkAh7m9fUw5Q/qJDATLDEXDSjzPfsLPRY4+R8uIDpDJUg+RDhLLFAOL0FESikMRj
2024-11-05 20:18:01 UTC	1369	IN	Data Raw: 6e 71 47 4a 6c 6f 4e 68 6b 46 2b 6d 6f 70 4f 49 71 32 56 74 6a 49 78 69 70 61 4b 48 5a 6d 2b 47 66 34 65 6a 6b 58 4b 4c 6a 4b 36 38 69 6f 46 2f 77 35 79 33 74 63 47 6f 6c 4c 69 4b 6e 71 4f 6e 6d 61 4b 6b 69 4b 72 45 6b 72 65 6f 72 74 4b 4d 75 63 79 64 30 4e 65 38 33 62 32 33 73 38 53 39 30 72 71 6e 31 74 66 4d 37 65 6e 63 71 64 44 78 79 2b 72 47 37 61 6d 34 38 64 76 59 32 4e 72 66 76 38 44 2b 41 50 7a 44 37 75 54 6f 76 2b 44 43 41 2f 55 49 79 4f 54 59 2f 75 45 42 46 64 50 4d 38 74 62 52 38 66 72 6c 35 2b 59 56 44 66 45 50 48 66 72 64 33 76 77 49 43 50 62 34 44 67 73 6b 45 52 41 61 38 66 45 4d 44 43 51 6b 4d 79 77 4d 46 42 51 48 42 78 67 69 43 77 33 38 42 45 4d 6a 4b 41 49 33 51 69 49 73 52 30 68 48 4c 43 74 52 4c 54 49 52 51 52 67 58 51 6a 6c 46 54 54 56 Data Ascii: nqGJloNhkF+mopOIq2VtjIxipaKHZm+Gf4ejkXKLjK68ioF/w5y3tcGolLiKnqOnmaKkiKrEkreortKMucyd0Ne83b23s8S90rqn1tfM7encqdDxy+rG7am48dvY2Nrfv8D+APzD7uTov+DCA/UIyOTY/uEBFdPM8tbR8frl5+YVDfEPHfrd3vwICPb4DgskERAa8fEMDCQkMywMFBQHBxgiCw38BEMjKAI3QiIsR0hHLCtRLTIRQRgXQjlFTTV
2024-11-05 20:18:01 UTC	1369	IN	Data Raw: 61 65 46 65 57 6d 49 5a 49 4f 66 61 34 53 64 68 49 46 6c 72 34 32 6f 73 5a 6c 33 63 4b 61 76 72 59 36 55 6d 62 36 71 64 61 2b 75 6c 63 47 5a 65 37 61 32 71 63 50 4a 7a 73 47 73 7a 70 79 6e 69 34 32 6c 31 4e 69 56 75 71 61 79 71 4c 2b 31 71 74 69 35 74 74 54 47 35 39 48 57 71 72 7a 55 7a 4b 66 63 37 36 7a 4a 79 75 71 7a 7a 4f 54 71 75 4f 62 46 75 4c 32 77 76 2b 7a 73 34 76 6e 57 7a 64 6b 46 35 66 34 42 41 39 2f 74 44 76 66 73 32 38 6a 74 41 75 30 57 41 2b 66 56 42 2f 44 59 31 50 37 57 47 78 4c 64 39 39 73 58 34 41 54 31 46 67 49 42 44 51 45 72 4c 53 44 75 4a 68 41 6d 43 50 51 58 4b 75 38 57 39 6a 55 76 47 67 35 41 4e 79 4d 54 39 68 6b 6f 46 43 41 68 4b 52 73 4b 54 79 34 66 53 67 77 39 49 54 55 53 52 6a 42 4a 54 56 68 4c 53 31 4a 62 4f 7a 31 66 57 52 78 50 Data Ascii: aeFeWmIZIOfa4SdhIFlr42osZl3cKavrY6Umb6qda+ulcGZe7a2qcPJzsGszpyni42l1NiVuqayqL+1qti5ttTG59HWqrzUzKfc76zJyuqzzOTquObFuL2wv+zs4vnWzdkF5f4BA9/tDvfs28jtAu0WA+fVB/DY1P7WGxLd99sX4AT1FgIBDQErLSDuJhAmCPQXKu8W9jUvGg5ANyMT9hkoFCAhKRsKTy4fSgw9ITUSRjBJTVhLS1JbOz1fWRxP
2024-11-05 20:18:01 UTC	1369	IN	Data Raw: 57 57 6f 6f 2b 43 6f 59 69 55 63 6f 46 2f 6c 33 53 50 6d 33 47 54 64 58 79 5a 6a 61 44 41 72 62 71 55 76 37 2b 39 78 70 79 37 75 38 71 66 67 63 6e 48 70 49 7a 4a 31 6f 7a 44 30 36 53 6e 6d 71 79 76 71 4d 66 4f 31 38 76 56 35 4e 7a 45 74 4f 54 4a 77 4e 69 6d 34 4d 47 6e 7a 2f 4b 6f 76 76 4c 57 35 65 44 6f 36 65 50 71 39 66 47 30 79 75 76 58 41 73 75 37 32 74 67 42 38 4d 4c 64 36 4d 4c 73 43 65 72 4f 2f 52 41 50 31 4f 33 31 45 2f 66 31 44 68 73 63 43 4e 67 4c 49 51 76 75 48 78 49 50 39 41 6b 44 45 67 6a 72 43 68 59 4e 35 2f 41 4d 36 68 2f 39 46 67 55 33 37 78 58 79 42 66 63 61 44 50 63 63 49 68 49 37 45 78 34 6b 47 52 73 79 4b 69 45 32 4b 68 34 6c 50 7a 77 69 4d 52 34 7a 44 31 64 5a 4d 6a 63 59 52 54 67 72 4b 52 35 4f 48 55 46 62 52 55 56 6a 59 6b 6b 69 4e Data Ascii: WWoo+CoYiUcoF/l3SPm3GTdXyZjaDArbqUv7+9xpy7u8qfgcnHpIzJ1ozD06SnmqyvqMfO18vV5NzEtOTJwNim4MGnz/KovvLW5eDo6ePq9fG0yuvXAsu72tgB8MLd6MLsCerO/RAP1O31E/f1DhscCNgLIQvuHxIP9AkDEgjrChYN5/AM6h/9FgU37xXyBfcaDPccIhI7Ex4kGRsyKiE2Kh4lPzwiMR4zD1dZMjcYRTgrKR5OHUFbRUVjYkkiN
2024-11-05 20:18:01 UTC	1369	IN	Data Raw: 51 6e 5a 4f 50 73 70 69 46 6c 72 71 61 6b 6f 5a 2b 6e 59 75 77 74 59 79 66 6e 70 4f 6c 6b 35 4b 72 76 70 66 4d 6e 36 32 69 6d 73 53 4b 69 38 6a 52 77 62 50 4e 6b 36 2b 35 30 62 79 34 76 75 48 65 72 62 33 44 78 4d 50 45 6f 75 62 4e 75 36 62 64 79 63 79 2f 30 36 76 41 39 64 50 4b 77 39 4c 45 7a 63 58 58 32 39 44 4b 38 74 76 58 7a 66 58 6a 2b 74 50 68 77 62 37 6e 44 67 76 78 37 2b 2f 67 35 66 48 7a 37 2f 66 31 44 68 50 35 39 2f 76 73 2f 66 73 57 32 2f 66 78 41 79 63 48 2f 76 4c 71 43 76 63 64 49 76 67 4d 43 77 41 53 41 50 34 59 4b 77 51 35 44 42 6f 50 42 7a 48 32 39 7a 55 2f 49 69 4d 6a 42 79 67 59 41 7a 38 75 4b 6b 49 74 49 69 34 4b 45 43 63 76 56 69 55 74 4e 30 77 30 4e 43 73 33 56 6a 49 71 4c 31 59 75 4d 7a 39 57 4e 7a 73 7a 5a 6a 63 37 53 55 68 42 4b 43 Data Ascii: QnZOPspiFlrqakoZ+nYuwtYyfnpOlk5KrvpfMn62imsSKi8jRwbPNk6+50by4vuHerb3DxMPEoubNu6bdycy/06vA9dPKw9LEzcXX29DK8tvXzfXj+tPhwb7nDgvx7+/g5fHz7/f1DhP59/vs/fsW2/fxAycH/vLqCvcdIvgMCwASAP4YKwQ5DBoPBzH29zU/IiMjBygYAz8uKkItIi4KECcvViUtN0w0NCs3VjIqL1YuMz9WNzszZjc7SUhBKC
2024-11-05 20:18:01 UTC	1369	IN	Data Raw: 68 34 53 5a 6c 6e 61 51 6e 4a 2b 31 6b 4a 36 6a 66 71 53 6c 70 37 32 63 6d 36 6e 42 6e 4c 69 73 78 61 53 39 73 71 4f 67 73 37 57 52 78 72 61 37 30 64 71 35 76 62 2b 77 76 73 47 64 6f 38 4c 43 6f 73 6a 47 79 62 75 34 79 38 37 50 77 4e 44 51 36 63 7a 48 31 74 61 37 30 74 6e 62 39 74 62 64 33 39 6a 67 34 64 4c 79 35 65 58 58 35 4f 66 6f 78 67 76 6d 37 77 62 77 37 75 37 4f 39 41 4c 32 39 2f 44 34 2b 64 62 38 39 2f 30 57 39 50 4d 44 38 77 58 2b 43 42 37 30 43 51 72 6d 4b 77 77 4f 36 52 38 52 45 77 50 33 44 78 59 49 43 52 51 61 44 41 6b 62 47 2f 6f 64 47 79 49 36 46 53 51 6d 4a 77 67 32 4b 6b 49 5a 49 43 38 67 49 54 41 79 44 7a 45 76 4e 7a 68 58 4f 44 6b 57 53 7a 67 2b 47 31 73 38 51 56 6f 78 51 30 68 65 51 56 56 48 4a 30 31 4a 54 57 55 30 55 6c 4e 45 55 56 42 Data Ascii: h4SZlnaQnJ+1kJ6jfqSlp72cm6nBnLisxaS9sqOgs7WRxra70dq5vb+wvsGdo8LCosjGybu4y87PwNDQ6czH1ta70tnb9tbd39jg4dLy5eXX5Ofoxgvm7wbw7u7O9AL29/D4+db89/0W9PMD8wX+CB70CQrmKwwO6R8REwP3DxYICRQaDAkbG/odGyI6FSQmJwg2KkIZIC8gITAyDzEvNzhXODkWSzg+G1s8QVoxQ0heQVVHJ01JTWU0UlNEUVB
2024-11-05 20:18:01 UTC	1369	IN	Data Raw: 35 4f 4f 75 70 4f 57 66 5a 50 43 6e 36 4f 39 78 71 57 6f 73 4b 4b 71 30 71 2b 54 70 62 47 34 71 72 4c 5a 6d 70 75 74 75 63 43 79 75 75 4c 57 77 72 57 79 30 64 2f 47 32 63 53 2f 76 38 72 61 7a 63 76 6a 35 64 44 50 39 75 72 48 31 65 33 55 7a 74 50 58 32 4e 50 54 33 75 37 68 34 75 4c 2b 31 39 33 43 36 2b 6e 6e 44 77 50 66 34 77 58 66 44 75 76 79 45 68 48 78 39 4f 50 59 37 65 72 72 47 76 73 56 47 2f 50 33 42 41 67 64 41 79 73 4e 43 2f 37 6c 47 69 59 50 49 7a 4d 45 43 51 51 59 46 68 51 37 38 77 77 51 43 7a 63 51 46 53 41 6b 50 52 39 48 50 79 63 63 41 6a 5a 47 4b 7a 38 5a 49 43 49 67 4e 44 49 77 56 30 63 6f 4c 68 4a 53 4f 79 38 71 58 7a 77 33 56 6b 52 43 51 47 63 78 4f 44 73 32 61 30 68 44 59 57 64 41 51 7a 35 7a 54 30 74 71 57 46 5a 55 65 33 64 4d 54 30 70 2f Data Ascii: 5OOupOWfZPCn6O9xqWosKKq0q+TpbG4qrLZmputucCyuuLWwrWy0d/G2cS/v8razcvj5dDP9urH1e3UztPX2NPT3u7h4uL+193C6+nnDwPf4wXfDuvyEhHx9OPY7errGvsVG/P3BAgdAysNC/7lGiYPIzMECQQYFhQ78wwQCzcQFSAkPR9HPyccAjZGKz8ZICIgNDIwV0coLhJSOy8qXzw3VkRCQGcxODs2a0hDYWdAQz5zT0tqWFZUe3dMT0p/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	49762	3.17.16.61	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:01 UTC	360	OUT	GET /favicon.ico HTTP/1.1 Host: login.nuriapsicologia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-05 20:18:01 UTC	166	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 05 Nov 2024 20:18:01 GMT Content-Type: text/html; charset=utf-8 Content-Length: 46 Connection: close
2024-11-05 20:18:01 UTC	46	IN	Data Raw: 3c 68 31 3e 50 6c 65 61 73 65 20 41 6c 6c 6f 77 20 43 6f 6f 6b 69 65 73 20 42 65 66 6f 72 65 20 41 63 63 65 73 73 69 6e 67 3c 2f 68 31 3e Data Ascii: <h1>Please Allow Cookies Before Accessing</h1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49764	104.18.95.41	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:01 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/327534660:1730834845:xB-X5yMQwnEzWyfOsx7a_gc-vUOi2RR5kk_BobmozzY/8ddf87ad58f36c25/.T7TKrt9wrxElaOPQwbGCCRFdzx7EdER96MDTZyI7OE-1730837874-1.1.1.1-w1VUtYFQyOaPeGAutG8NnTuZyILjccRMIz3R2IKDpfCOHSVV7p1SBpaHe7mt.dJk HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-05 20:18:01 UTC	379	IN	HTTP/1.1 404 Not Found Date: Tue, 05 Nov 2024 20:18:01 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: NsYGxLEaWNdRYDtHzBGhN8n3MWQYU6ME4NI=$q9cvmwKmnX8ituxt cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8ddf87d97f2b315f-DFW alt-svc: h3=":443"; ma=86400
2024-11-05 20:18:01 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	49766	142.250.186.132	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:02 UTC	1056	OUT	POST /recaptcha/api2/clr?k=6LejiXUqAAAAAFaG20PrbDcf0UifxwSgI18CUBuN HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 2113 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-protobuf Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LejiXUqAAAAAFaG20PrbDcf0UifxwSgI18CUBuN&co=aHR0cHM6Ly9sb2dpbi5udXJpYXBzaWNvbG9naWEuY29tOjQ0Mw..&hl=en&v=-ZG7BC9TxCVEbzIO2m429usb&size=invisible&cb=zfh74mtnhpaf Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANOXeZxRYKRc1aa2_w0wE-Yy9K2C-RUruROR0Jvg39A0_jLe3gEEf8THt-zb2QpVM8lG9F5qjYpjQJvbWwYOkvw
2024-11-05 20:18:02 UTC	2113	OUT	Data Raw: 0a 28 36 4c 65 6a 69 58 55 71 41 41 41 41 41 46 61 47 32 30 50 72 62 44 63 66 30 55 69 66 78 77 53 67 49 31 38 43 55 42 75 4e 12 ce 0f 30 33 41 46 63 57 65 41 37 63 79 32 54 34 48 31 37 62 4a 72 72 65 6a 52 68 44 55 71 68 79 6e 69 55 6d 50 73 64 54 77 73 56 46 7a 43 50 4a 34 79 74 41 53 4c 32 77 2d 33 49 6a 71 37 62 47 35 62 42 32 4e 76 6a 79 46 51 6f 73 41 2d 36 61 71 77 72 6c 59 52 72 43 78 45 5a 45 6c 2d 4b 75 56 73 42 34 41 47 5f 41 46 65 59 56 51 44 4a 62 50 59 46 77 66 32 44 38 41 74 65 4a 55 57 5a 55 69 75 70 6e 62 36 58 47 68 48 42 75 4e 43 69 52 59 30 71 78 69 43 34 30 6c 67 73 69 4e 39 48 39 4b 30 77 32 53 70 70 2d 71 73 42 69 61 74 56 48 64 63 6c 70 37 79 76 4e 70 41 4e 78 4e 47 59 58 61 46 5a 4b 7a 46 5f 32 69 4e 38 2d 38 35 45 42 71 72 50 76 Data Ascii: (6LejiXUqAAAAAFaG20PrbDcf0UifxwSgI18CUBuN03AFcWeA7cy2T4H17bJrrejRhDUqhyniUmPsdTwsVFzCPJ4ytASL2w-3Ijq7bG5bB2NvjyFQosA-6aqwrlYRrCxEZEl-KuVsB4AG_AFeYVQDJbPYFwf2D8AteJUWZUiupnb6XGhHBuNCiRY0qxiC40lgsiN9H9K0w2Spp-qsBiatVHdclp7yvNpANxNGYXaFZKzF_2iN8-85EBqrPv
2024-11-05 20:18:02 UTC	657	IN	HTTP/1.1 200 OK Content-Type: application/binary Access-Control-Allow-Origin: https://www.google.com Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Date: Tue, 05 Nov 2024 20:18:02 GMT Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	49765	216.58.206.36	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:02 UTC	606	OUT	GET /recaptcha/api2/reload?k=6LejiXUqAAAAAFaG20PrbDcf0UifxwSgI18CUBuN HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANOXeZxRYKRc1aa2_w0wE-Yy9K2C-RUruROR0Jvg39A0_jLe3gEEf8THt-zb2QpVM8lG9F5qjYpjQJvbWwYOkvw
2024-11-05 20:18:02 UTC	743	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 20:18:02 GMT Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Allow: POST Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-05 20:18:02 UTC	635	IN	Data Raw: 36 38 30 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f Data Ascii: 680<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 405 (Bad Request)!!1</title><style>*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{backgro
2024-11-05 20:18:02 UTC	1036	IN	Data Raw: 69 64 74 68 3a 37 37 32 70 78 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 Data Ascii: idth:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#log
2024-11-05 20:18:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.16	49767	216.58.206.36	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:03 UTC	603	OUT	GET /recaptcha/api2/clr?k=6LejiXUqAAAAAFaG20PrbDcf0UifxwSgI18CUBuN HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANOXeZxRYKRc1aa2_w0wE-Yy9K2C-RUruROR0Jvg39A0_jLe3gEEf8THt-zb2QpVM8lG9F5qjYpjQJvbWwYOkvw
2024-11-05 20:18:03 UTC	743	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 20:18:03 GMT Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Allow: POST Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-05 20:18:03 UTC	635	IN	Data Raw: 36 38 30 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f Data Ascii: 680<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 405 (Bad Request)!!1</title><style>*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{backgro
2024-11-05 20:18:03 UTC	1036	IN	Data Raw: 69 64 74 68 3a 37 37 32 70 78 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 Data Ascii: idth:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#log
2024-11-05 20:18:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	49768	142.250.186.132	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:03 UTC	1056	OUT	POST /recaptcha/api2/bcn?k=6LejiXUqAAAAAFaG20PrbDcf0UifxwSgI18CUBuN HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 8395 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-protobuf Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LejiXUqAAAAAFaG20PrbDcf0UifxwSgI18CUBuN&co=aHR0cHM6Ly9sb2dpbi5udXJpYXBzaWNvbG9naWEuY29tOjQ0Mw..&hl=en&v=-ZG7BC9TxCVEbzIO2m429usb&size=invisible&cb=zfh74mtnhpaf Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANOXeZxRYKRc1aa2_w0wE-Yy9K2C-RUruROR0Jvg39A0_jLe3gEEf8THt-zb2QpVM8lG9F5qjYpjQJvbWwYOkvw
2024-11-05 20:18:03 UTC	8395	OUT	Data Raw: 0a c8 41 0a 18 2d 5a 47 37 42 43 39 54 78 43 56 45 62 7a 49 4f 32 6d 34 32 39 75 73 62 12 ce 0f 30 33 41 46 63 57 65 41 37 63 79 32 54 34 48 31 37 62 4a 72 72 65 6a 52 68 44 55 71 68 79 6e 69 55 6d 50 73 64 54 77 73 56 46 7a 43 50 4a 34 79 74 41 53 4c 32 77 2d 33 49 6a 71 37 62 47 35 62 42 32 4e 76 6a 79 46 51 6f 73 41 2d 36 61 71 77 72 6c 59 52 72 43 78 45 5a 45 6c 2d 4b 75 56 73 42 34 41 47 5f 41 46 65 59 56 51 44 4a 62 50 59 46 77 66 32 44 38 41 74 65 4a 55 57 5a 55 69 75 70 6e 62 36 58 47 68 48 42 75 4e 43 69 52 59 30 71 78 69 43 34 30 6c 67 73 69 4e 39 48 39 4b 30 77 32 53 70 70 2d 71 73 42 69 61 74 56 48 64 63 6c 70 37 79 76 4e 70 41 4e 78 4e 47 59 58 61 46 5a 4b 7a 46 5f 32 69 4e 38 2d 38 35 45 42 71 72 50 76 6c 62 58 69 54 36 78 42 30 6a 53 49 35 Data Ascii: A-ZG7BC9TxCVEbzIO2m429usb03AFcWeA7cy2T4H17bJrrejRhDUqhyniUmPsdTwsVFzCPJ4ytASL2w-3Ijq7bG5bB2NvjyFQosA-6aqwrlYRrCxEZEl-KuVsB4AG_AFeYVQDJbPYFwf2D8AteJUWZUiupnb6XGhHBuNCiRY0qxiC40lgsiN9H9K0w2Spp-qsBiatVHdclp7yvNpANxNGYXaFZKzF_2iN8-85EBqrPvlbXiT6xB0jSI5
2024-11-05 20:18:04 UTC	604	IN	HTTP/1.1 200 OK Content-Type: application/binary Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Resource-Policy: same-site Date: Tue, 05 Nov 2024 20:18:04 GMT Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.16	49769	216.58.206.36	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:05 UTC	603	OUT	GET /recaptcha/api2/bcn?k=6LejiXUqAAAAAFaG20PrbDcf0UifxwSgI18CUBuN HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANOXeZxRYKRc1aa2_w0wE-Yy9K2C-RUruROR0Jvg39A0_jLe3gEEf8THt-zb2QpVM8lG9F5qjYpjQJvbWwYOkvw
2024-11-05 20:18:06 UTC	743	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 05 Nov 2024 20:18:05 GMT Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Allow: POST Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-05 20:18:06 UTC	635	IN	Data Raw: 36 38 30 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f Data Ascii: 680<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 405 (Bad Request)!!1</title><style>*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{backgro
2024-11-05 20:18:06 UTC	1036	IN	Data Raw: 69 64 74 68 3a 37 37 32 70 78 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 Data Ascii: idth:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#log
2024-11-05 20:18:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.16	49770	104.18.95.41	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:30 UTC	1150	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/327534660:1730834845:xB-X5yMQwnEzWyfOsx7a_gc-vUOi2RR5kk_BobmozzY/8ddf87ad58f36c25/.T7TKrt9wrxElaOPQwbGCCRFdzx7EdER96MDTZyI7OE-1730837874-1.1.1.1-w1VUtYFQyOaPeGAutG8NnTuZyILjccRMIz3R2IKDpfCOHSVV7p1SBpaHe7mt.dJk HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 34237 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: .T7TKrt9wrxElaOPQwbGCCRFdzx7EdER96MDTZyI7OE-1730837874-1.1.1.1-w1VUtYFQyOaPeGAutG8NnTuZyILjccRMIz3R2IKDpfCOHSVV7p1SBpaHe7mt.dJk sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/5cjyd/0x4AAAAAAAzPhqrNyZFP3elb/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-05 20:18:30 UTC	16384	OUT	Data Raw: 76 5f 38 64 64 66 38 37 61 64 35 38 66 33 36 63 32 35 3d 37 4d 24 54 6c 42 44 79 47 6d 47 50 47 44 48 44 59 67 6e 67 49 25 32 62 32 44 78 67 55 66 2b 6b 67 38 54 6d 24 67 6b 67 4d 54 55 65 44 42 67 24 54 6d 4d 55 4e 67 53 62 67 55 4f 62 48 42 50 67 6f 54 54 35 24 67 69 4b 67 32 68 67 72 51 38 65 54 67 5a 47 34 44 76 46 42 35 44 44 4e 67 7a 54 32 6d 67 42 62 62 63 54 61 67 4b 54 64 4e 67 6e 56 24 55 46 67 6f 62 54 44 56 55 76 6b 35 30 67 74 54 2b 65 47 47 65 58 67 55 59 66 6d 4b 34 55 56 72 67 67 46 48 7a 34 68 31 69 24 67 4b 2d 49 6d 67 42 58 44 24 46 69 41 67 44 35 62 71 77 5a 44 72 2b 49 61 67 6d 65 41 6c 72 4e 48 67 44 72 4e 70 70 72 75 65 47 48 67 68 54 44 56 45 6a 41 62 56 41 34 4c 57 4f 48 67 56 62 63 53 65 76 61 45 6f 4f 45 58 6b 46 50 75 33 48 61 Data Ascii: v_8ddf87ad58f36c25=7M$TlBDyGmGPGDHDYgngI%2b2DxgUf+kg8Tm$gkgMTUeDBg$TmMUNgSbgUObHBPgoTT5$giKg2hgrQ8eTgZG4DvFB5DDNgzT2mgBbbcTagKTdNgnV$UFgobTDVUvk50gtT+eGGeXgUYfmK4UVrggFHz4h1i$gK-ImgBXD$FiAgD5bqwZDr+IagmeAlrNHgDrNpprueGHghTDVEjAbVA4LWOHgVbcSevaEoOEXkFPu3Ha
2024-11-05 20:18:30 UTC	16384	OUT	Data Raw: 36 72 36 56 61 69 4d 69 6d 5a 24 44 48 67 46 65 39 67 55 54 67 48 44 65 67 61 67 45 61 69 4f 67 47 67 73 4f 67 54 55 4e 67 77 4d 35 48 67 4f 67 4c 61 49 34 67 42 67 77 54 42 67 55 62 67 56 43 51 24 42 50 67 56 67 32 78 55 59 67 6b 54 32 65 42 56 67 53 54 55 65 44 73 67 55 54 42 4d 42 62 67 78 7a 50 36 64 33 54 61 67 44 36 64 24 67 5a 67 35 54 55 36 75 4e 67 37 59 55 36 75 45 61 42 57 4e 32 67 71 54 31 7a 42 2b 67 4d 67 6a 69 44 4f 44 6a 67 32 24 44 4d 44 42 67 4f 47 44 50 67 50 54 77 65 44 59 67 70 54 2b 67 42 63 4f 5a 67 57 65 44 66 54 2d 54 42 67 44 38 67 33 54 32 54 44 56 67 5a 51 53 67 42 31 75 74 4f 44 34 42 2d 47 44 71 44 68 67 31 75 6d 73 56 24 67 4e 6d 5a 54 50 47 67 68 67 77 54 37 24 77 50 44 45 6e 24 48 55 4b 67 54 4f 2b 54 67 59 44 4e 54 41 34 Data Ascii: 6r6VaiMimZ$DHgFe9gUTgHDegagEaiOgGgsOgTUNgwM5HgOgLaI4gBgwTBgUbgVCQ$BPgVg2xUYgkT2eBVgSTUeDsgUTBMBbgxzP6d3TagD6d$gZg5TU6uNg7YU6uEaBWN2gqT1zB+gMgjiDODjg2$DMDBgOGDPgPTweDYgpT+gBcOZgWeDfT-TBgD8g3T2TDVgZQSgB1utOD4B-GDqDhg1umsV$gNmZTPGghgwT7$wPDEn$HUKgTO+TgYDNTA4
2024-11-05 20:18:30 UTC	1469	OUT	Data Raw: 63 68 7a 55 24 44 65 55 61 67 45 47 24 48 67 45 64 44 51 4a 65 78 69 67 74 72 71 67 42 7a 74 5a 50 37 48 55 4a 67 7a 4e 38 24 55 79 6e 78 70 57 65 66 4f 34 4a 47 42 68 6c 46 67 77 34 77 4d 67 6a 67 55 24 77 31 55 43 66 6a 4c 65 34 44 56 67 59 2d 70 4f 44 35 67 71 77 4b 57 77 66 67 33 54 6d 68 48 75 2b 50 2b 4b 48 53 4f 4c 4d 44 64 62 42 6d 67 77 34 49 24 57 4a 78 72 34 50 6f 48 45 58 51 7a 32 71 61 4b 6c 73 47 74 42 78 66 64 43 65 37 4d 46 31 43 65 67 6d 65 42 67 58 6c 54 70 4f 42 32 67 4f 4d 44 65 42 45 34 56 54 31 38 53 55 54 4c 34 44 65 55 4a 67 2d 56 58 4f 67 6a 54 46 6a 32 43 70 57 6e 6e 69 79 5a 77 63 34 79 6f 79 39 2d 68 6e 59 67 42 4c 4d 48 77 59 43 49 55 56 75 67 33 54 69 54 67 46 67 6b 48 37 6d 44 4a 58 32 45 4e 79 57 4c 35 78 58 6a 43 78 62 4b Data Ascii: chzU$DeUagEG$HgEdDQJexigtrqgBztZP7HUJgzN8$UynxpWefO4JGBhlFgw4wMgjgU$w1UCfjLe4DVgY-pOD5gqwKWwfg3TmhHu+P+KHSOLMDdbBmgw4I$WJxr4PoHEXQz2qaKlsGtBxfdCe7MF1CegmeBgXlTpOB2gOMDeBE4VT18SUTL4DeUJg-VXOgjTFj2CpWnniyZwc4yoy9-hnYgBLMHwYCIUVug3TiTgFgkH7mDJX2ENyWL5xXjCxbK
2024-11-05 20:18:30 UTC	1300	IN	HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 20:18:30 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4552 Connection: close cf-chl-out-s: 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 [TRUNCATED]
2024-11-05 20:18:30 UTC	233	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 51 78 39 32 78 2f 68 56 75 6f 4e 63 41 61 30 4b 49 5a 75 34 4c 71 34 54 44 42 7a 6b 61 34 65 78 53 45 69 42 2b 50 56 71 4a 43 50 39 76 2f 30 7a 79 48 4e 74 6e 44 51 32 30 59 70 54 54 31 77 54 68 2f 7a 62 68 79 64 37 6e 5a 67 37 56 68 76 6c 2b 43 59 71 74 5a 38 37 47 57 47 72 35 62 68 74 54 65 43 67 6f 74 62 67 39 46 4f 38 50 74 37 55 4e 75 36 79 51 79 51 3d 24 59 76 73 62 6e 47 6b 63 54 31 43 33 42 35 47 77 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 64 64 66 38 38 38 62 34 63 62 64 64 64 62 33 2d 44 46 57 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: cf-chl-out: Qx92x/hVuoNcAa0KIZu4Lq4TDBzka4exSEiB+PVqJCP9v/0zyHNtnDQ20YpTT1wTh/zbhyd7nZg7Vhvl+CYqtZ87GWGr5bhtTeCgotbg9FO8Pt7UNu6yQyQ=$YvsbnGkcT1C3B5GwServer: cloudflareCF-RAY: 8ddf888b4cbdddb3-DFWalt-svc: h3=":443"; ma=86400
2024-11-05 20:18:30 UTC	1205	IN	Data Raw: 69 6c 52 67 66 46 36 49 57 6f 6d 4b 64 45 61 4c 6b 47 36 42 6c 35 68 61 5a 58 5a 32 61 32 42 74 66 46 75 41 6a 35 43 44 68 46 74 6c 67 5a 32 67 62 70 75 77 68 36 61 68 71 6d 2b 4b 6c 6e 56 32 74 58 56 35 65 72 6d 6f 6a 58 4f 37 75 33 32 38 67 5a 53 7a 77 4b 71 69 76 62 32 4b 67 63 48 46 6b 70 4b 6e 79 73 2f 53 32 64 4b 57 6c 5a 54 4e 76 64 50 66 30 72 65 75 6d 37 71 76 33 74 69 31 33 75 4c 67 76 64 37 71 77 63 66 52 72 4f 58 31 73 63 37 48 30 72 6a 52 37 65 75 36 2f 4d 73 42 2f 74 4d 42 42 51 49 49 33 4d 54 62 31 4d 76 72 34 51 44 6f 42 4f 59 46 33 42 4c 33 43 41 66 30 35 75 77 52 32 52 48 62 44 66 6b 69 45 43 4d 6d 42 2f 77 45 47 76 58 68 35 2f 67 43 4d 66 6b 7a 44 69 59 44 37 53 49 58 43 77 59 6f 4a 66 59 7a 48 55 41 64 50 41 38 7a 45 77 45 2b 4d 54 30 Data Ascii: ilRgfF6IWomKdEaLkG6Bl5haZXZ2a2BtfFuAj5CDhFtlgZ2gbpuwh6ahqm+KlnV2tXV5ermojXO7u328gZSzwKqivb2KgcHFkpKnys/S2dKWlZTNvdPf0reum7qv3ti13uLgvd7qwcfRrOX1sc7H0rjR7eu6/MsB/tMBBQII3MTb1Mvr4QDoBOYF3BL3CAf05uwR2RHbDfkiECMmB/wEGvXh5/gCMfkzDiYD7SIXCwYoJfYzHUAdPA8zEwE+MT0
2024-11-05 20:18:30 UTC	1369	IN	Data Raw: 4f 30 4a 38 42 50 78 35 74 73 61 2b 68 50 72 36 4e 66 62 38 39 62 39 42 41 45 6e 42 76 59 6c 34 67 73 48 2f 41 77 54 41 43 66 72 2f 53 73 4a 39 52 73 57 2b 78 77 58 48 52 45 7a 4c 54 68 44 50 68 4e 46 47 2f 6f 53 47 43 77 58 4b 77 63 64 44 7a 49 4e 4e 55 42 41 4a 43 45 57 4d 52 52 58 48 44 30 56 48 44 34 2f 4b 7a 55 35 52 6b 52 46 50 45 59 6b 4e 54 70 49 5a 46 46 67 57 30 41 39 4c 46 49 78 59 32 52 6c 53 6a 51 39 57 58 4d 2f 53 32 78 4c 65 6c 42 6c 50 31 52 62 5a 6d 6c 55 58 32 31 48 62 46 70 39 59 48 52 4c 67 56 43 54 59 58 68 56 68 33 79 4b 62 46 78 35 67 49 47 62 6d 48 4e 66 6c 35 69 46 5a 48 6c 73 6a 4a 31 39 6f 58 75 41 6b 47 75 54 6c 58 65 42 67 34 6c 38 70 59 74 32 75 36 32 4d 77 71 2b 4e 73 70 53 68 67 61 57 45 6f 61 6d 33 6e 4a 44 4a 72 38 58 4c Data Ascii: O0J8BPx5tsa+hPr6Nfb89b9BAEnBvYl4gsH/AwTACfr/SsJ9RsW+xwXHREzLThDPhNFG/oSGCwXKwcdDzINNUBAJCEWMRRXHD0VHD4/KzU5RkRFPEYkNTpIZFFgW0A9LFIxY2RlSjQ9WXM/S2xLelBlP1RbZmlUX21HbFp9YHRLgVCTYXhVh3yKbFx5gIGbmHNfl5iFZHlsjJ19oXuAkGuTlXeBg4l8pYt2u62Mwq+NspShgaWEoam3nJDJr8XL
2024-11-05 20:18:30 UTC	1369	IN	Data Raw: 50 4f 42 78 72 59 36 68 50 38 47 68 59 56 34 79 55 46 49 69 67 62 41 66 6b 66 41 51 38 76 36 67 30 65 4e 43 55 79 4e 67 6f 30 44 76 67 35 4e 77 70 41 4f 77 45 34 2b 7a 77 46 45 77 52 45 52 41 55 45 53 6a 68 45 54 30 30 51 45 56 4e 47 52 54 51 70 47 69 4e 63 4e 31 77 75 4f 46 6c 4b 59 53 45 32 4a 54 4a 69 53 6a 5a 69 62 45 68 66 4c 57 68 45 5a 47 74 6b 54 32 6b 7a 61 46 64 70 4f 55 35 63 4f 48 42 2f 53 6f 4a 38 51 55 35 32 66 46 4a 2f 59 57 4e 59 57 6e 75 47 58 55 4f 43 63 30 70 7a 5a 57 46 73 6b 59 2b 54 6c 4a 65 59 68 31 6d 54 6e 59 74 2b 67 33 42 2f 6d 57 64 36 64 49 69 6b 62 4a 2b 70 62 32 32 62 66 36 46 6f 6d 48 57 45 70 33 47 4f 74 36 79 31 6c 72 43 39 71 37 43 6b 75 35 65 77 68 73 53 48 79 4d 37 44 73 4d 54 45 77 4b 53 79 6a 38 57 53 30 4e 6e 50 71 Data Ascii: POBxrY6hP8GhYV4yUFIigbAfkfAQ8v6g0eNCUyNgo0Dvg5NwpAOwE4+zwFEwRERAUESjhET00QEVNGRTQpGiNcN1wuOFlKYSE2JTJiSjZibEhfLWhEZGtkT2kzaFdpOU5cOHB/SoJ8QU52fFJ/YWNYWnuGXUOCc0pzZWFskY+TlJeYh1mTnYt+g3B/mWd6dIikbJ+pb22bf6FomHWEp3GOt6y1lrC9q7Cku5ewhsSHyM7DsMTEwKSyj8WS0NnPq
2024-11-05 20:18:30 UTC	609	IN	Data Raw: 59 31 65 45 69 44 77 49 64 48 53 51 6c 37 43 51 59 41 69 66 72 4c 41 59 74 4d 50 4d 72 36 6a 41 4e 4a 50 63 7a 46 6a 41 4c 4f 42 6f 39 42 45 45 43 49 69 46 47 43 55 41 34 52 53 59 69 52 30 51 6b 56 44 49 56 54 42 5a 61 47 52 68 4c 45 31 41 56 53 44 46 5a 57 54 4a 6c 59 6c 34 6c 55 31 30 70 4a 54 6f 67 55 45 39 78 4a 47 42 46 4b 79 68 4f 59 44 6c 32 57 32 78 70 65 48 5a 38 61 6e 4a 55 54 6d 42 38 5a 31 4f 4a 68 31 74 30 61 49 56 4d 62 30 71 46 64 49 43 51 6b 59 52 70 54 31 43 44 56 6c 69 61 6e 48 61 4e 6e 6c 36 56 58 31 78 33 6b 49 4f 6b 61 4b 47 5a 6e 35 64 2b 72 4b 69 62 6a 57 65 6b 61 59 61 68 71 6f 79 31 64 37 43 57 76 48 36 35 6c 4c 43 37 75 4a 65 61 6c 4c 75 72 74 59 72 43 69 71 72 49 77 73 43 38 70 35 47 2f 7a 5a 57 61 30 39 32 57 6e 64 7a 49 31 5a Data Ascii: Y1eEiDwIdHSQl7CQYAifrLAYtMPMr6jANJPczFjALOBo9BEECIiFGCUA4RSYiR0QkVDIVTBZaGRhLE1AVSDFZWTJlYl4lU10pJTogUE9xJGBFKyhOYDl2W2xpeHZ8anJUTmB8Z1OJh1t0aIVMb0qFdICQkYRpT1CDVlianHaNnl6VX1x3kIOkaKGZn5d+rKibjWekaYahqoy1d7CWvH65lLC7uJealLurtYrCiqrIwsC8p5G/zZWa092WndzI1Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.16	49771	104.18.95.41	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:31 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/327534660:1730834845:xB-X5yMQwnEzWyfOsx7a_gc-vUOi2RR5kk_BobmozzY/8ddf87ad58f36c25/.T7TKrt9wrxElaOPQwbGCCRFdzx7EdER96MDTZyI7OE-1730837874-1.1.1.1-w1VUtYFQyOaPeGAutG8NnTuZyILjccRMIz3R2IKDpfCOHSVV7p1SBpaHe7mt.dJk HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-05 20:18:31 UTC	379	IN	HTTP/1.1 404 Not Found Date: Tue, 05 Nov 2024 20:18:31 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: MOhLqx4YiRMD+un5zXKy4744SO7ifn6OmDs=$QuZUh4Zc0UyEr3Br cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8ddf88914cbd4774-DFW alt-svc: h3=":443"; ma=86400
2024-11-05 20:18:31 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.16	49772	3.17.16.61	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:36 UTC	852	OUT	POST /vstart88888 HTTP/1.1 Host: login.nuriapsicologia.com Connection: keep-alive Content-Length: 7607 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://login.nuriapsicologia.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://login.nuriapsicologia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-05 20:18:36 UTC	7607	OUT	Data Raw: 68 69 6e 74 3d 37 32 37 30 36 35 37 34 37 32 36 39 36 65 36 39 34 30 36 31 36 63 36 63 36 39 36 31 36 65 36 33 36 35 36 32 36 31 36 65 36 62 37 34 36 35 37 38 36 31 37 33 32 65 36 33 36 66 36 64 26 67 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 6f 6e 73 65 3d 33 30 33 33 34 31 34 36 36 33 35 37 36 35 34 31 33 35 33 35 34 34 34 34 36 39 36 33 36 65 34 61 36 34 34 37 37 33 36 31 37 37 34 64 34 64 37 61 35 30 34 37 37 61 34 61 36 33 37 32 37 33 35 31 36 39 37 33 36 39 36 35 36 63 35 35 37 30 35 37 34 32 36 61 34 32 34 61 37 35 33 37 36 62 36 31 33 32 37 38 36 63 34 64 34 32 36 39 36 39 36 63 33 32 32 64 33 32 33 34 36 32 35 36 36 37 36 64 36 65 36 62 34 38 35 37 34 62 36 31 36 34 33 33 33 30 37 31 34 34 35 61 36 33 35 66 35 61 35 66 34 36 36 35 33 37 35 33 Data Ascii: hint=7270657472696e6940616c6c69616e636562616e6b74657861732e636f6d&g-recaptcha-response=30334146635765413535444469636e4a64477361774d4d7a50477a4a63727351697369656c557057426a424a75376b6132786c4d4269696c322d32346256676d6e6b48574b6164333071445a635f5a5f46653753
2024-11-05 20:18:36 UTC	343	IN	HTTP/1.1 302 FOUND Server: nginx/1.18.0 (Ubuntu) Date: Tue, 05 Nov 2024 20:18:36 GMT Content-Type: text/html; charset=utf-8 Content-Length: 13 Connection: close Location: https://login.nuriapsicologia.com/?login_hint=rpetrini@alliancebanktexas.com Set-Cookie: vfff9080=3137332e3235342e3235302e3736; Domain=nuriapsicologia.com; Path=
2024-11-05 20:18:36 UTC	13	IN	Data Raw: 3c 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e Data Ascii: <span></span>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.16	49773	3.17.16.61	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:36 UTC	815	OUT	GET /?login_hint=rpetrini@alliancebanktexas.com HTTP/1.1 Host: login.nuriapsicologia.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://login.nuriapsicologia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vfff9080=3137332e3235342e3235302e3736
2024-11-05 20:18:37 UTC	1583	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 05 Nov 2024 20:18:37 GMT Content-Type: text/html; charset=utf-8 Content-Length: 23250 Connection: close Cache-Control: no-store, no-cache Pragma: no-cache Expires: -1 Vary: Accept-Encoding, Cookie P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: f5b42cc4-e97f-4fb5-8bf5-4de3bebe8900 x-ms-ests-server: 2.1.19343.4 - NCUS ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+san"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P Referrer-Policy: strict-origin-when-cross-origin Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Set-Cookie: esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFerIU6xy-AGQXzi4Jfj11wrHhLxvb3bmkmIjt-b7b3M1Ukdlwv-nEm6BQiHOp20Mp3i5-LIstAKH_OgpHLmtqJOB_rgBVhBcaExYBE43EdRnv5h4TGoe1YqjR0Rf_thFGNrmINI51ABr9Q07-C8rgwsD0HX1JYOWRhc1XLT4_JFnUgAA; Secure; Path=/ Set-Cookie: esctx-UjXf3avDMXI=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeRDL25y76xPm56I_NETtCDfvssYkDfWdsvPku9YGf0xxRvn_MRmRTvk0KpnJwK2EfY1c4WDOsVEQAkTtwWw67T-m8_eZm8QIuyGnsEogSw---rLC7SWWUDMLofslWbKtzjOVO29zJM0LJoXzZQzF8dSAA; Secure; Path=/ Set-Cookie: fpc=Ap6Hglam49RKrH-hsTA8Uos; Secure; Path=/ Set-Cookie: stsservicecookie=estsfd; Secure; Path=/ Set-Cookie: x-ms-gateway-slice=estsfd; Secure; Path=/ Set-Cookie: session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I; Domain=nuriapsicologia.com; HttpOnly; Path=/
2024-11-05 20:18:37 UTC	14801	IN	Data Raw: 0d 0a 0d 0a 3c 21 2d 2d 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e Data Ascii: ... Copyright (C) Microsoft Corporation. All rights reserved. --><!DOCTYPE html><html><head> <title>Redirecting</title> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta http-equiv="X-UA-Compatible" conten
2024-11-05 20:18:37 UTC	8449	IN	Data Raw: 6d 61 6e 64 4c 6f 61 64 65 64 22 29 2c 65 2e 4c 6f 61 64 28 72 2c 74 29 2c 24 3d 21 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 69 66 28 76 2e 24 57 65 62 57 61 74 73 6f 6e 29 7b 69 66 28 76 2e 24 57 65 62 57 61 74 73 6f 6e 2e 69 73 50 72 6f 78 79 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 74 28 29 7d 6d 2e 77 68 65 6e 28 22 24 57 65 62 57 61 74 73 6f 6e 2e 66 75 6c 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 3b 62 2e 6c 65 6e 67 74 68 3e 30 3b 29 7b 76 61 72 20 65 3d 62 2e 73 68 69 66 74 28 29 3b 65 26 26 76 2e 24 57 65 62 57 61 74 73 6f 6e 5b 65 2e 63 6d 64 4e 61 6d 65 5d 2e 61 70 70 6c 79 28 76 2e 24 57 65 62 57 61 74 73 6f 6e 2c 65 2e 61 72 67 73 29 7d 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 69 66 28 21 76 2e 24 57 65 62 57 61 Data Ascii: mandLoaded"),e.Load(r,t),$=!0}}function r(){if(v.$WebWatson){if(v.$WebWatson.isProxy){return void t()}m.when("$WebWatson.full",function(){for(;b.length>0;){var e=b.shift();e&&v.$WebWatson[e.cmdName].apply(v.$WebWatson,e.args)}})}}function t(){if(!v.$WebWa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.16	49774	3.17.16.61	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:38 UTC	733	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1 Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.nuriapsicologia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
2024-11-05 20:18:38 UTC	969	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 05 Nov 2024 20:18:38 GMT Content-Type: application/x-javascript Content-Length: 142367 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2227345 Cache-Control: public, max-age=31536000 Content-MD5: m5bMCfnonQM0ui+8IrUZeg== Etag: 0x8DCE31CBE97473C Last-Modified: Wed, 02 Oct 2024 19:59:37 GMT Vary: Accept-Encoding, Cookie X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 21e5fa71-001e-00cb-457d-1b579b000000 x-ms-version: 2009-09-19 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Set-Cookie: session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I; Domain=nuriapsicologia.com; HttpOnly; Path=/
2024-11-05 20:18:38 UTC	15415	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-11-05 20:18:38 UTC	16384	IN	Data Raw: 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 65 61 64 22 29 5b 30 5d 2c 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 74 79 6c 65 22 29 3b 74 2e 69 6e 6e 65 72 48 54 4d 4c 3d 27 40 6d 65 64 69 61 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 20 61 63 74 69 76 65 29 20 7b 20 20 2e 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 2d 64 65 74 65 63 74 69 6f 6e 3a 3a 62 65 66 6f 72 65 20 7b 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 22 61 63 74 69 76 65 22 3b 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 20 7d 7d 40 6d 65 64 69 61 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 20 62 6c 61 63 6b 2d 6f 6e 2d 77 68 69 74 65 29 20 7b 20 20 2e 68 69 67 68 2d 63 6f 6e 74 Data Ascii: ent.getElementsByTagName("head")[0],t=document.createElement("style");t.innerHTML='@media (-ms-high-contrast: active) { .high-contrast-detection::before { content: "active"; display: none; }}@media (-ms-high-contrast: black-on-white) { .high-cont
2024-11-05 20:18:38 UTC	16384	IN	Data Raw: 45 6d 70 74 79 3a 31 30 30 39 2c 4f 54 43 49 6e 76 61 6c 69 64 3a 31 30 31 30 2c 4e 6f 74 45 6e 6f 75 67 68 50 72 6f 6f 66 73 3a 31 30 31 33 2c 50 68 6f 6e 65 45 6d 70 74 79 3a 31 30 31 35 2c 46 65 64 55 73 65 72 3a 31 30 31 36 2c 46 65 64 55 73 65 72 43 6f 6e 66 6c 69 63 74 3a 31 30 31 37 2c 46 65 64 55 73 65 72 49 6e 76 69 74 65 42 6c 6f 63 6b 65 64 3a 31 30 31 38 2c 45 6d 70 74 79 46 69 65 6c 64 73 3a 31 30 32 30 2c 50 68 6f 6e 65 48 61 73 53 70 65 63 69 61 6c 43 68 61 72 73 3a 31 30 32 31 2c 41 75 74 6f 56 65 72 69 66 79 4e 6f 43 6f 64 65 53 65 6e 74 3a 31 30 32 32 2c 50 72 6f 6f 66 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 45 6d 70 74 79 3a 31 30 32 33 2c 50 72 6f 6f 66 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 49 6e 76 61 6c 69 64 3a 31 30 32 34 2c 54 4f 54 50 Data Ascii: Empty:1009,OTCInvalid:1010,NotEnoughProofs:1013,PhoneEmpty:1015,FedUser:1016,FedUserConflict:1017,FedUserInviteBlocked:1018,EmptyFields:1020,PhoneHasSpecialChars:1021,AutoVerifyNoCodeSent:1022,ProofConfirmationEmpty:1023,ProofConfirmationInvalid:1024,TOTP
2024-11-05 20:18:38 UTC	16384	IN	Data Raw: 22 3d 3d 3d 74 3f 74 68 69 73 2e 70 63 28 65 29 3a 74 68 69 73 2e 67 62 28 65 2c 74 29 3a 74 68 69 73 2e 71 63 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 6e 75 6c 6c 21 3d 3d 74 26 26 74 2e 73 26 26 74 2e 73 28 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 71 64 2c 72 3d 6e 5b 41 5d 3b 72 2e 72 61 7c 7c 28 74 68 69 73 2e 51 62 26 26 74 68 69 73 2e 6d 62 5b 74 5d 3f 28 6e 2e 75 63 28 74 2c 65 2c 74 68 69 73 2e 6d 62 5b 74 5d 29 2c 74 68 69 73 2e 6d 62 5b 74 5d 3d 6e 75 6c 6c 2c 2d 2d 74 68 69 73 2e 51 62 29 3a 72 2e 49 5b 74 5d 7c 7c 6e 2e 75 63 28 74 2c 65 2c 72 2e 4a 3f 7b 64 61 3a 65 7d 3a 6e 2e 24 63 28 65 29 29 2c 65 2e 4a 61 26 26 65 2e 67 64 28 29 29 7d 76 61 72 20 68 2c 67 2c 6d 2c 76 2c 62 Data Ascii: "===t?this.pc(e):this.gb(e,t):this.qc(e)}function f(e,t){null!==t&&t.s&&t.s()}function p(e,t){var n=this.qd,r=n[A];r.ra\|\|(this.Qb&&this.mb[t]?(n.uc(t,e,this.mb[t]),this.mb[t]=null,--this.Qb):r.I[t]\|\|n.uc(t,e,r.J?{da:e}:n.$c(e)),e.Ja&&e.gd())}var h,g,m,v,b
2024-11-05 20:18:38 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 21 74 68 69 73 2e 65 71 75 61 6c 69 74 79 43 6f 6d 70 61 72 65 72 7c 7c 21 74 68 69 73 2e 65 71 75 61 6c 69 74 79 43 6f 6d 70 61 72 65 72 28 65 2c 74 29 7d 2c 74 6f 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 7d 2c 65 78 74 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 65 26 26 53 2e 61 2e 50 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3d 53 2e 54 61 5b 65 5d 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 26 26 28 74 3d 72 28 74 2c 6e 29 7c 7c 74 29 7d 29 29 2c 74 7d 7d 3b 53 2e 4c 28 45 2c 22 69 6e 69 74 22 2c 45 2e 71 62 29 Data Ascii: unction(e,t){return!this.equalityComparer\|\|!this.equalityComparer(e,t)},toString:function(){return"[object Object]"},extend:function(e){var t=this;return e&&S.a.P(e,(function(e,n){var r=S.Ta[e];"function"==typeof r&&(t=r(t,n)\|\|t)})),t}};S.L(E,"init",E.qb)
2024-11-05 20:18:38 UTC	16384	IN	Data Raw: 65 61 29 2c 53 2e 62 28 22 76 69 72 74 75 61 6c 45 6c 65 6d 65 6e 74 73 2e 65 6d 70 74 79 4e 6f 64 65 22 2c 53 2e 68 2e 45 61 29 2c 53 2e 62 28 22 76 69 72 74 75 61 6c 45 6c 65 6d 65 6e 74 73 2e 69 6e 73 65 72 74 41 66 74 65 72 22 2c 53 2e 68 2e 57 62 29 2c 53 2e 62 28 22 76 69 72 74 75 61 6c 45 6c 65 6d 65 6e 74 73 2e 70 72 65 70 65 6e 64 22 2c 53 2e 68 2e 56 63 29 2c 53 2e 62 28 22 76 69 72 74 75 61 6c 45 6c 65 6d 65 6e 74 73 2e 73 65 74 44 6f 6d 4e 6f 64 65 43 68 69 6c 64 72 65 6e 22 2c 53 2e 68 2e 76 61 29 2c 53 2e 67 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 64 3d 7b 7d 7d 2c 53 2e 61 2e 65 78 74 65 6e 64 28 53 2e 67 61 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 6e 6f 64 65 48 61 73 42 69 6e 64 69 6e 67 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 Data Ascii: ea),S.b("virtualElements.emptyNode",S.h.Ea),S.b("virtualElements.insertAfter",S.h.Wb),S.b("virtualElements.prepend",S.h.Vc),S.b("virtualElements.setDomNodeChildren",S.h.va),S.ga=function(){this.nd={}},S.a.extend(S.ga.prototype,{nodeHasBindings:function(e)
2024-11-05 20:18:38 UTC	16384	IN	Data Raw: 3f 61 2e 65 78 74 65 6e 64 28 6e 75 6c 6c 2c 66 29 3a 61 29 2c 68 26 26 53 2e 53 2e 71 61 28 29 26 26 28 75 3d 53 2e 61 2e 43 61 28 53 2e 68 2e 63 68 69 6c 64 4e 6f 64 65 73 28 65 29 2c 21 30 29 29 2c 70 3f 28 68 7c 7c 53 2e 68 2e 76 61 28 65 2c 53 2e 61 2e 43 61 28 75 29 29 2c 53 2e 4f 61 28 6f 2c 65 29 29 3a 28 53 2e 68 2e 45 61 28 65 29 2c 63 7c 7c 53 2e 69 2e 6d 61 28 65 2c 53 2e 69 2e 48 29 29 2c 73 3d 70 29 7d 29 2c 6e 75 6c 6c 2c 7b 6c 3a 65 7d 29 2c 7b 63 6f 6e 74 72 6f 6c 73 44 65 73 63 65 6e 64 61 6e 74 42 69 6e 64 69 6e 67 73 3a 21 30 7d 7d 7d 2c 53 2e 6d 2e 52 61 5b 65 5d 3d 21 31 2c 53 2e 68 2e 65 61 5b 65 5d 3d 21 30 7d 65 28 22 69 66 22 29 2c 65 28 22 69 66 6e 6f 74 22 2c 21 31 2c 21 30 29 2c 65 28 22 77 69 74 68 22 2c 21 30 29 7d 28 29 2c Data Ascii: ?a.extend(null,f):a),h&&S.S.qa()&&(u=S.a.Ca(S.h.childNodes(e),!0)),p?(h\|\|S.h.va(e,S.a.Ca(u)),S.Oa(o,e)):(S.h.Ea(e),c\|\|S.i.ma(e,S.i.H)),s=p)}),null,{l:e}),{controlsDescendantBindings:!0}}},S.m.Ra[e]=!1,S.h.ea[e]=!0}e("if"),e("ifnot",!1,!0),e("with",!0)}(),
2024-11-05 20:18:38 UTC	16384	IN	Data Raw: 5b 6f 5d 3b 68 3d 43 2c 6f 2b 2b 29 53 2e 68 2e 57 62 28 72 2c 43 2c 68 29 3b 21 70 2e 45 64 26 26 75 26 26 28 75 28 70 2e 41 61 2c 70 2e 59 2c 70 2e 70 62 29 2c 70 2e 45 64 3d 21 30 2c 68 3d 70 2e 59 5b 70 2e 59 2e 6c 65 6e 67 74 68 2d 31 5d 29 7d 66 6f 72 28 6d 26 26 72 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 21 3d 6d 26 26 6d 2e 66 6f 63 75 73 28 29 2c 66 28 73 2e 62 65 66 6f 72 65 52 65 6d 6f 76 65 2c 54 29 2c 4f 3d 30 3b 4f 3c 54 2e 6c 65 6e 67 74 68 3b 2b 2b 4f 29 54 5b 4f 5d 2e 41 61 3d 6e 3b 66 28 73 2e 61 66 74 65 72 4d 6f 76 65 2c 41 29 2c 66 28 73 2e 61 66 74 65 72 41 64 64 2c 5f 29 7d 7d 28 29 2c 53 2e 62 28 22 75 74 69 6c 73 2e 73 65 74 44 6f 6d 4e 6f 64 65 43 68 69 6c 64 72 65 6e 46 72 6f 6d 41 72 Data Ascii: [o];h=C,o++)S.h.Wb(r,C,h);!p.Ed&&u&&(u(p.Aa,p.Y,p.pb),p.Ed=!0,h=p.Y[p.Y.length-1])}for(m&&r.ownerDocument.activeElement!=m&&m.focus(),f(s.beforeRemove,T),O=0;O<T.length;++O)T[O].Aa=n;f(s.afterMove,A),f(s.afterAdd,_)}}(),S.b("utils.setDomNodeChildrenFromAr
2024-11-05 20:18:38 UTC	12264	IN	Data Raw: 67 65 2e 22 29 2c 7b 72 65 64 69 72 65 63 74 55 72 6c 3a 76 28 29 7d 7d 29 29 2e 74 68 65 6e 28 6e 75 6c 6c 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 2e 77 72 69 74 65 28 67 2e 61 61 64 53 73 6f 2c 65 2e 74 6f 43 6f 6f 6b 69 65 53 74 72 69 6e 67 28 29 2c 21 6f 29 2c 62 28 22 45 72 72 6f 72 3a 20 22 2b 65 2e 74 6f 53 74 72 69 6e 67 28 29 29 2c 73 2e 72 65 6a 65 63 74 28 65 29 7d 29 29 29 2c 65 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 26 26 21 65 2e 72 65 64 69 72 65 63 74 55 72 6c 3f 73 2e 72 65 6a 65 63 74 28 22 73 69 6c 65 6e 74 50 75 6c 6c 46 61 69 6c 65 64 22 29 3a 65 7d 29 29 2e 74 68 65 6e 28 53 2c 43 29 2e 74 68 65 6e 28 6e 75 6c 6c 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 Data Ascii: ge."),{redirectUrl:v()}})).then(null,(function(e){return f.write(g.aadSso,e.toCookieString(),!o),b("Error: "+e.toString()),s.reject(e)}))),e.then((function(e){return t&&!e.redirectUrl?s.reject("silentPullFailed"):e})).then(S,C).then(null,(function(e){retu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.16	49777	3.17.16.61	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:39 UTC	1442	OUT	GET /?login_hint=rpetrini@alliancebanktexas.com&sso_reload=true HTTP/1.1 Host: login.nuriapsicologia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://login.nuriapsicologia.com/?login_hint=rpetrini@alliancebanktexas.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vfff9080=3137332e3235342e3235302e3736; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFerIU6xy-AGQXzi4Jfj11wrHhLxvb3bmkmIjt-b7b3M1Ukdlwv-nEm6BQiHOp20Mp3i5-LIstAKH_OgpHLmtqJOB_rgBVhBcaExYBE43EdRnv5h4TGoe1YqjR0Rf_thFGNrmINI51ABr9Q07-C8rgwsD0HX1JYOWRhc1XLT4_JFnUgAA; esctx-UjXf3avDMXI=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeRDL25y76xPm56I_NETtCDfvssYkDfWdsvPku9YGf0xxRvn_MRmRTvk0KpnJwK2EfY1c4WDOsVEQAkTtwWw67T-m8_eZm8QIuyGnsEogSw---rLC7SWWUDMLofslWbKtzjOVO29zJM0LJoXzZQzF8dSAA; fpc=Ap6Hglam49RKrH-hsTA8Uos; stsservicecookie=estsfd; x-ms-gateway-slice=estsfd; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2024-11-05 20:18:40 UTC	1973	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 05 Nov 2024 20:18:40 GMT Content-Type: text/html; charset=utf-8 Content-Length: 43912 Connection: close Cache-Control: no-store, no-cache Pragma: no-cache Expires: -1 Vary: Accept-Encoding, Cookie Link: <https://aadcdn.msftauth.net>; rel=preconnect; crossorigin,<https://aadcdn.msftauth.net>; rel=dns-prefetch,<https://aadcdn.msauth.net>; rel=dns-prefetch X-DNS-Prefetch-Control: on P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 31826a65-ea1a-4c48-b723-d923b9261a00 x-ms-ests-server: 2.1.19343.4 - SCUS ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+san"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P Referrer-Policy: strict-origin-when-cross-origin Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Set-Cookie: esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeFvJnNYXtTqQoL-tUH46Y0TKpKrmOWtc-MiOq9Xa8nJie4YbYf8mIV5BpXeUM_Uu4BMQxJDmz-FTL_qYnZAwPWSHoryrhOPuN-3B1uWtfn-3UjsrYmrYnyfKgkCHfwOlZv-asVOpfYQR_yvD3KTGhLCWTZZPrKILWE2YPEmyaUXcgAA; Secure; Path=/ Set-Cookie: esctx-HcU2kOM6Zsc=AQABCQEAAADW6jl31mB3T7ugrWTT8pFe-7Dc73x77BTnPBdPxJMuZDTFwkulpec87VfptUgPhBkE9R39VdqVix24rxeh_96qoXqTop35z8t4juRuh7UQ7psHU5pHFwdMuLgk1mdRIjsUdHMLri1LcaeUsbhY8ElEENOCEz3Fs_hN5eBa8JkbRyAA; Secure; Path=/ Set-Cookie: buid=1.AQQAqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAAAEAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFe1RTDrRP4CwcCcTaAwJJUXjaypfIw4AeQLshkbF9C4mz8RENbt-ZvtO6YVgehDRP5ihI5ZauwptNk8zdiVuFsG09WwROimmu2d7AjwYj5NbogAA; Secure; Path=/ Set-Cookie: fpc=Ap6Hglam49RKrH-hsTA8Uou4vjNwAQAAAJ90vN4OAAAA; Secure; Path=/ Set-Cookie: x-ms-gateway-slice=estsfd; Secure; Path=/ Set-Cookie: session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I; Domain=nuriapsicologia.com; HttpOnly; Path=/
2024-11-05 20:18:40 UTC	14411	IN	Data Raw: 0d 0a 0d 0a 3c 21 2d 2d 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 63 6c 61 73 73 3d 22 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 69 67 6e 20 69 6e 20 74 6f 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 Data Ascii: ... Copyright (C) Microsoft Corporation. All rights reserved. --><!DOCTYPE html><html dir="ltr" class="" lang="en"><head> <title>Sign in to your account</title> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
2024-11-05 20:18:40 UTC	16384	IN	Data Raw: 33 77 5a 77 43 69 49 49 31 6e 56 72 54 47 71 72 4b 55 75 49 57 36 59 32 64 41 34 59 50 44 42 4e 66 4c 5a 6c 59 5f 6f 57 78 45 35 59 54 49 76 6b 62 37 31 76 59 49 4e 35 37 4a 32 74 52 73 63 6b 32 48 34 77 4d 42 70 73 62 45 48 4c 51 74 6a 2d 58 37 33 64 59 78 66 50 72 2d 39 58 49 63 52 69 79 62 6e 6d 4d 6d 6d 2d 64 49 69 76 33 70 66 36 5a 6b 44 79 53 5f 76 55 6d 6a 77 42 75 55 6b 74 5a 71 58 43 6c 2d 73 4b 79 36 31 34 53 42 61 76 43 32 41 42 70 53 72 66 51 52 4c 72 4a 4b 47 47 55 30 72 77 5a 65 38 45 41 69 61 36 49 66 35 71 49 5f 4d 6e 4a 48 68 5f 77 64 57 44 4e 32 47 78 48 75 43 7a 72 6c 77 71 4f 6e 58 63 75 47 6d 64 36 34 69 35 77 30 51 69 67 69 62 31 32 39 4c 4d 77 57 72 65 62 72 6b 45 71 72 44 50 54 74 42 39 31 46 64 66 37 41 39 35 52 73 4a 48 30 6d 48 Data Ascii: 3wZwCiII1nVrTGqrKUuIW6Y2dA4YPDBNfLZlY_oWxE5YTIvkb71vYIN57J2tRsck2H4wMBpsbEHLQtj-X73dYxfPr-9XIcRiybnmMmm-dIiv3pf6ZkDyS_vUmjwBuUktZqXCl-sKy614SBavC2ABpSrfQRLrJKGGU0rwZe8EAia6If5qI_MnJHh_wdWDN2GxHuCzrlwqOnXcuGmd64i5w0Qigib129LMwWrebrkEqrDPTtB91Fdf7A95RsJH0mH
2024-11-05 20:18:40 UTC	13117	IN	Data Raw: 29 7b 72 65 74 75 72 6e 21 30 7d 7d 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 72 29 7b 69 66 28 65 28 29 2e 66 54 65 6e 61 6e 74 42 72 61 6e 64 69 6e 67 43 64 6e 41 64 64 45 76 65 6e 74 48 61 6e 64 6c 65 72 73 29 7b 76 61 72 20 74 3d 64 28 24 2c 72 29 3f 24 3a 62 3b 69 66 28 21 28 74 26 26 74 2e 6c 65 6e 67 74 68 3e 31 29 29 7b 72 65 74 75 72 6e 20 72 7d 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 0a 69 66 28 2d 31 21 3d 3d 72 2e 69 6e 64 65 78 4f 66 28 74 5b 6e 5d 29 29 7b 76 61 72 20 6f 3d 74 5b 6e 2b 31 3c 74 2e 6c 65 6e 67 74 68 3f 6e 2b 31 3a 30 5d 2c 69 3d 72 2e 73 75 62 73 74 72 69 6e 67 28 74 5b 6e 5d 2e 6c 65 6e 67 74 68 29 3b 72 65 74 75 72 6e 22 68 74 74 70 73 3a 2f 2f 22 21 3d 3d 74 Data Ascii: ){return!0}}}return!1}function l(r){if(e().fTenantBrandingCdnAddEventHandlers){var t=d($,r)?$:b;if(!(t&&t.length>1)){return r}for(var n=0;n<t.length;n++){if(-1!==r.indexOf(t[n])){var o=t[n+1<t.length?n+1:0],i=r.substring(t[n].length);return"https://"!==t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.16	49776	3.17.16.61	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:39 UTC	1290	OUT	GET /favicon.ico HTTP/1.1 Host: login.nuriapsicologia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.nuriapsicologia.com/?login_hint=rpetrini@alliancebanktexas.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vfff9080=3137332e3235342e3235302e3736; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFerIU6xy-AGQXzi4Jfj11wrHhLxvb3bmkmIjt-b7b3M1Ukdlwv-nEm6BQiHOp20Mp3i5-LIstAKH_OgpHLmtqJOB_rgBVhBcaExYBE43EdRnv5h4TGoe1YqjR0Rf_thFGNrmINI51ABr9Q07-C8rgwsD0HX1JYOWRhc1XLT4_JFnUgAA; esctx-UjXf3avDMXI=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeRDL25y76xPm56I_NETtCDfvssYkDfWdsvPku9YGf0xxRvn_MRmRTvk0KpnJwK2EfY1c4WDOsVEQAkTtwWw67T-m8_eZm8QIuyGnsEogSw---rLC7SWWUDMLofslWbKtzjOVO29zJM0LJoXzZQzF8dSAA; fpc=Ap6Hglam49RKrH-hsTA8Uos; stsservicecookie=estsfd; x-ms-gateway-slice=estsfd; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2024-11-05 20:18:40 UTC	927	IN	HTTP/1.1 404 NOT FOUND Server: nginx/1.18.0 (Ubuntu) Date: Tue, 05 Nov 2024 20:18:39 GMT Content-Type: text/html Content-Length: 0 Connection: close Cache-Control: private P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 490ba5ed-e060-410c-8237-df80099c6a00 x-ms-ests-server: 2.1.19343.4 - SCUS ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+san"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P Referrer-Policy: strict-origin-when-cross-origin Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Set-Cookie: x-ms-gateway-slice=estsfd; Secure; Path=/ Vary: Cookie Set-Cookie: session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I; Domain=nuriapsicologia.com; HttpOnly; Path=/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.16	49778	3.17.16.61	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:39 UTC	549	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1 Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
2024-11-05 20:18:40 UTC	969	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 05 Nov 2024 20:18:40 GMT Content-Type: application/x-javascript Content-Length: 142367 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2227347 Cache-Control: public, max-age=31536000 Content-MD5: m5bMCfnonQM0ui+8IrUZeg== Etag: 0x8DCE31CBE97473C Last-Modified: Wed, 02 Oct 2024 19:59:37 GMT Vary: Accept-Encoding, Cookie X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 21e5fa71-001e-00cb-457d-1b579b000000 x-ms-version: 2009-09-19 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Set-Cookie: session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I; Domain=nuriapsicologia.com; HttpOnly; Path=/
2024-11-05 20:18:40 UTC	15415	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-11-05 20:18:40 UTC	16384	IN	Data Raw: 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 65 61 64 22 29 5b 30 5d 2c 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 74 79 6c 65 22 29 3b 74 2e 69 6e 6e 65 72 48 54 4d 4c 3d 27 40 6d 65 64 69 61 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 20 61 63 74 69 76 65 29 20 7b 20 20 2e 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 2d 64 65 74 65 63 74 69 6f 6e 3a 3a 62 65 66 6f 72 65 20 7b 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 22 61 63 74 69 76 65 22 3b 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 20 7d 7d 40 6d 65 64 69 61 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 20 62 6c 61 63 6b 2d 6f 6e 2d 77 68 69 74 65 29 20 7b 20 20 2e 68 69 67 68 2d 63 6f 6e 74 Data Ascii: ent.getElementsByTagName("head")[0],t=document.createElement("style");t.innerHTML='@media (-ms-high-contrast: active) { .high-contrast-detection::before { content: "active"; display: none; }}@media (-ms-high-contrast: black-on-white) { .high-cont
2024-11-05 20:18:40 UTC	16384	IN	Data Raw: 45 6d 70 74 79 3a 31 30 30 39 2c 4f 54 43 49 6e 76 61 6c 69 64 3a 31 30 31 30 2c 4e 6f 74 45 6e 6f 75 67 68 50 72 6f 6f 66 73 3a 31 30 31 33 2c 50 68 6f 6e 65 45 6d 70 74 79 3a 31 30 31 35 2c 46 65 64 55 73 65 72 3a 31 30 31 36 2c 46 65 64 55 73 65 72 43 6f 6e 66 6c 69 63 74 3a 31 30 31 37 2c 46 65 64 55 73 65 72 49 6e 76 69 74 65 42 6c 6f 63 6b 65 64 3a 31 30 31 38 2c 45 6d 70 74 79 46 69 65 6c 64 73 3a 31 30 32 30 2c 50 68 6f 6e 65 48 61 73 53 70 65 63 69 61 6c 43 68 61 72 73 3a 31 30 32 31 2c 41 75 74 6f 56 65 72 69 66 79 4e 6f 43 6f 64 65 53 65 6e 74 3a 31 30 32 32 2c 50 72 6f 6f 66 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 45 6d 70 74 79 3a 31 30 32 33 2c 50 72 6f 6f 66 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 49 6e 76 61 6c 69 64 3a 31 30 32 34 2c 54 4f 54 50 Data Ascii: Empty:1009,OTCInvalid:1010,NotEnoughProofs:1013,PhoneEmpty:1015,FedUser:1016,FedUserConflict:1017,FedUserInviteBlocked:1018,EmptyFields:1020,PhoneHasSpecialChars:1021,AutoVerifyNoCodeSent:1022,ProofConfirmationEmpty:1023,ProofConfirmationInvalid:1024,TOTP
2024-11-05 20:18:40 UTC	16384	IN	Data Raw: 22 3d 3d 3d 74 3f 74 68 69 73 2e 70 63 28 65 29 3a 74 68 69 73 2e 67 62 28 65 2c 74 29 3a 74 68 69 73 2e 71 63 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 6e 75 6c 6c 21 3d 3d 74 26 26 74 2e 73 26 26 74 2e 73 28 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 71 64 2c 72 3d 6e 5b 41 5d 3b 72 2e 72 61 7c 7c 28 74 68 69 73 2e 51 62 26 26 74 68 69 73 2e 6d 62 5b 74 5d 3f 28 6e 2e 75 63 28 74 2c 65 2c 74 68 69 73 2e 6d 62 5b 74 5d 29 2c 74 68 69 73 2e 6d 62 5b 74 5d 3d 6e 75 6c 6c 2c 2d 2d 74 68 69 73 2e 51 62 29 3a 72 2e 49 5b 74 5d 7c 7c 6e 2e 75 63 28 74 2c 65 2c 72 2e 4a 3f 7b 64 61 3a 65 7d 3a 6e 2e 24 63 28 65 29 29 2c 65 2e 4a 61 26 26 65 2e 67 64 28 29 29 7d 76 61 72 20 68 2c 67 2c 6d 2c 76 2c 62 Data Ascii: "===t?this.pc(e):this.gb(e,t):this.qc(e)}function f(e,t){null!==t&&t.s&&t.s()}function p(e,t){var n=this.qd,r=n[A];r.ra\|\|(this.Qb&&this.mb[t]?(n.uc(t,e,this.mb[t]),this.mb[t]=null,--this.Qb):r.I[t]\|\|n.uc(t,e,r.J?{da:e}:n.$c(e)),e.Ja&&e.gd())}var h,g,m,v,b
2024-11-05 20:18:40 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 21 74 68 69 73 2e 65 71 75 61 6c 69 74 79 43 6f 6d 70 61 72 65 72 7c 7c 21 74 68 69 73 2e 65 71 75 61 6c 69 74 79 43 6f 6d 70 61 72 65 72 28 65 2c 74 29 7d 2c 74 6f 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 7d 2c 65 78 74 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 65 26 26 53 2e 61 2e 50 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3d 53 2e 54 61 5b 65 5d 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 26 26 28 74 3d 72 28 74 2c 6e 29 7c 7c 74 29 7d 29 29 2c 74 7d 7d 3b 53 2e 4c 28 45 2c 22 69 6e 69 74 22 2c 45 2e 71 62 29 Data Ascii: unction(e,t){return!this.equalityComparer\|\|!this.equalityComparer(e,t)},toString:function(){return"[object Object]"},extend:function(e){var t=this;return e&&S.a.P(e,(function(e,n){var r=S.Ta[e];"function"==typeof r&&(t=r(t,n)\|\|t)})),t}};S.L(E,"init",E.qb)
2024-11-05 20:18:40 UTC	16384	IN	Data Raw: 65 61 29 2c 53 2e 62 28 22 76 69 72 74 75 61 6c 45 6c 65 6d 65 6e 74 73 2e 65 6d 70 74 79 4e 6f 64 65 22 2c 53 2e 68 2e 45 61 29 2c 53 2e 62 28 22 76 69 72 74 75 61 6c 45 6c 65 6d 65 6e 74 73 2e 69 6e 73 65 72 74 41 66 74 65 72 22 2c 53 2e 68 2e 57 62 29 2c 53 2e 62 28 22 76 69 72 74 75 61 6c 45 6c 65 6d 65 6e 74 73 2e 70 72 65 70 65 6e 64 22 2c 53 2e 68 2e 56 63 29 2c 53 2e 62 28 22 76 69 72 74 75 61 6c 45 6c 65 6d 65 6e 74 73 2e 73 65 74 44 6f 6d 4e 6f 64 65 43 68 69 6c 64 72 65 6e 22 2c 53 2e 68 2e 76 61 29 2c 53 2e 67 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 64 3d 7b 7d 7d 2c 53 2e 61 2e 65 78 74 65 6e 64 28 53 2e 67 61 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 6e 6f 64 65 48 61 73 42 69 6e 64 69 6e 67 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 Data Ascii: ea),S.b("virtualElements.emptyNode",S.h.Ea),S.b("virtualElements.insertAfter",S.h.Wb),S.b("virtualElements.prepend",S.h.Vc),S.b("virtualElements.setDomNodeChildren",S.h.va),S.ga=function(){this.nd={}},S.a.extend(S.ga.prototype,{nodeHasBindings:function(e)
2024-11-05 20:18:40 UTC	16384	IN	Data Raw: 3f 61 2e 65 78 74 65 6e 64 28 6e 75 6c 6c 2c 66 29 3a 61 29 2c 68 26 26 53 2e 53 2e 71 61 28 29 26 26 28 75 3d 53 2e 61 2e 43 61 28 53 2e 68 2e 63 68 69 6c 64 4e 6f 64 65 73 28 65 29 2c 21 30 29 29 2c 70 3f 28 68 7c 7c 53 2e 68 2e 76 61 28 65 2c 53 2e 61 2e 43 61 28 75 29 29 2c 53 2e 4f 61 28 6f 2c 65 29 29 3a 28 53 2e 68 2e 45 61 28 65 29 2c 63 7c 7c 53 2e 69 2e 6d 61 28 65 2c 53 2e 69 2e 48 29 29 2c 73 3d 70 29 7d 29 2c 6e 75 6c 6c 2c 7b 6c 3a 65 7d 29 2c 7b 63 6f 6e 74 72 6f 6c 73 44 65 73 63 65 6e 64 61 6e 74 42 69 6e 64 69 6e 67 73 3a 21 30 7d 7d 7d 2c 53 2e 6d 2e 52 61 5b 65 5d 3d 21 31 2c 53 2e 68 2e 65 61 5b 65 5d 3d 21 30 7d 65 28 22 69 66 22 29 2c 65 28 22 69 66 6e 6f 74 22 2c 21 31 2c 21 30 29 2c 65 28 22 77 69 74 68 22 2c 21 30 29 7d 28 29 2c Data Ascii: ?a.extend(null,f):a),h&&S.S.qa()&&(u=S.a.Ca(S.h.childNodes(e),!0)),p?(h\|\|S.h.va(e,S.a.Ca(u)),S.Oa(o,e)):(S.h.Ea(e),c\|\|S.i.ma(e,S.i.H)),s=p)}),null,{l:e}),{controlsDescendantBindings:!0}}},S.m.Ra[e]=!1,S.h.ea[e]=!0}e("if"),e("ifnot",!1,!0),e("with",!0)}(),
2024-11-05 20:18:40 UTC	16384	IN	Data Raw: 5b 6f 5d 3b 68 3d 43 2c 6f 2b 2b 29 53 2e 68 2e 57 62 28 72 2c 43 2c 68 29 3b 21 70 2e 45 64 26 26 75 26 26 28 75 28 70 2e 41 61 2c 70 2e 59 2c 70 2e 70 62 29 2c 70 2e 45 64 3d 21 30 2c 68 3d 70 2e 59 5b 70 2e 59 2e 6c 65 6e 67 74 68 2d 31 5d 29 7d 66 6f 72 28 6d 26 26 72 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 21 3d 6d 26 26 6d 2e 66 6f 63 75 73 28 29 2c 66 28 73 2e 62 65 66 6f 72 65 52 65 6d 6f 76 65 2c 54 29 2c 4f 3d 30 3b 4f 3c 54 2e 6c 65 6e 67 74 68 3b 2b 2b 4f 29 54 5b 4f 5d 2e 41 61 3d 6e 3b 66 28 73 2e 61 66 74 65 72 4d 6f 76 65 2c 41 29 2c 66 28 73 2e 61 66 74 65 72 41 64 64 2c 5f 29 7d 7d 28 29 2c 53 2e 62 28 22 75 74 69 6c 73 2e 73 65 74 44 6f 6d 4e 6f 64 65 43 68 69 6c 64 72 65 6e 46 72 6f 6d 41 72 Data Ascii: [o];h=C,o++)S.h.Wb(r,C,h);!p.Ed&&u&&(u(p.Aa,p.Y,p.pb),p.Ed=!0,h=p.Y[p.Y.length-1])}for(m&&r.ownerDocument.activeElement!=m&&m.focus(),f(s.beforeRemove,T),O=0;O<T.length;++O)T[O].Aa=n;f(s.afterMove,A),f(s.afterAdd,_)}}(),S.b("utils.setDomNodeChildrenFromAr
2024-11-05 20:18:40 UTC	12264	IN	Data Raw: 67 65 2e 22 29 2c 7b 72 65 64 69 72 65 63 74 55 72 6c 3a 76 28 29 7d 7d 29 29 2e 74 68 65 6e 28 6e 75 6c 6c 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 2e 77 72 69 74 65 28 67 2e 61 61 64 53 73 6f 2c 65 2e 74 6f 43 6f 6f 6b 69 65 53 74 72 69 6e 67 28 29 2c 21 6f 29 2c 62 28 22 45 72 72 6f 72 3a 20 22 2b 65 2e 74 6f 53 74 72 69 6e 67 28 29 29 2c 73 2e 72 65 6a 65 63 74 28 65 29 7d 29 29 29 2c 65 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 26 26 21 65 2e 72 65 64 69 72 65 63 74 55 72 6c 3f 73 2e 72 65 6a 65 63 74 28 22 73 69 6c 65 6e 74 50 75 6c 6c 46 61 69 6c 65 64 22 29 3a 65 7d 29 29 2e 74 68 65 6e 28 53 2c 43 29 2e 74 68 65 6e 28 6e 75 6c 6c 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 Data Ascii: ge."),{redirectUrl:v()}})).then(null,(function(e){return f.write(g.aadSso,e.toCookieString(),!o),b("Error: "+e.toString()),s.reject(e)}))),e.then((function(e){return t&&!e.redirectUrl?s.reject("silentPullFailed"):e})).then(S,C).then(null,(function(e){retu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.16	49775	3.17.16.61	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:40 UTC	758	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css HTTP/1.1 Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://login.nuriapsicologia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
2024-11-05 20:18:40 UTC	953	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 05 Nov 2024 20:18:40 GMT Content-Type: text/css Content-Length: 113378 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 3514469 Cache-Control: public, max-age=31536000 Content-MD5: 8N6amNvfqMAnQs5tkvslJA== Etag: 0x8DCDDAB171F8006 Last-Modified: Wed, 25 Sep 2024 21:43:27 GMT Vary: Accept-Encoding, Cookie X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: ab3b2467-e01e-006f-53c9-0fc0df000000 x-ms-version: 2009-09-19 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Set-Cookie: session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I; Domain=nuriapsicologia.com; HttpOnly; Path=/
2024-11-05 20:18:40 UTC	15431	IN	Data Raw: 2f 2a 21 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2a 2f 2f 2a 21 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 Data Ascii: /! Copyright (C) Microsoft Corporation. All rights reserved. //*!------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------This file is based on or incorporates material from the projects listed
2024-11-05 20:18:40 UTC	16384	IN	Data Raw: 6f 6c 2d 6d 64 2d 34 2c 2e 63 6f 6c 2d 6c 67 2d 34 2c 2e 63 6f 6c 2d 78 73 2d 35 2c 2e 63 6f 6c 2d 73 6d 2d 35 2c 2e 63 6f 6c 2d 6d 64 2d 35 2c 2e 63 6f 6c 2d 6c 67 2d 35 2c 2e 63 6f 6c 2d 78 73 2d 36 2c 2e 63 6f 6c 2d 73 6d 2d 36 2c 2e 63 6f 6c 2d 6d 64 2d 36 2c 2e 63 6f 6c 2d 6c 67 2d 36 2c 2e 63 6f 6c 2d 78 73 2d 37 2c 2e 63 6f 6c 2d 73 6d 2d 37 2c 2e 63 6f 6c 2d 6d 64 2d 37 2c 2e 63 6f 6c 2d 6c 67 2d 37 2c 2e 63 6f 6c 2d 78 73 2d 38 2c 2e 63 6f 6c 2d 73 6d 2d 38 2c 2e 63 6f 6c 2d 6d 64 2d 38 2c 2e 63 6f 6c 2d 6c 67 2d 38 2c 2e 63 6f 6c 2d 78 73 2d 39 2c 2e 63 6f 6c 2d 73 6d 2d 39 2c 2e 63 6f 6c 2d 6d 64 2d 39 2c 2e 63 6f 6c 2d 6c 67 2d 39 2c 2e 63 6f 6c 2d 78 73 2d 31 30 2c 2e 63 6f 6c 2d 73 6d 2d 31 30 2c 2e 63 6f 6c 2d 6d 64 2d 31 30 2c 2e 63 6f 6c Data Ascii: ol-md-4,.col-lg-4,.col-xs-5,.col-sm-5,.col-md-5,.col-lg-5,.col-xs-6,.col-sm-6,.col-md-6,.col-lg-6,.col-xs-7,.col-sm-7,.col-md-7,.col-lg-7,.col-xs-8,.col-sm-8,.col-md-8,.col-lg-8,.col-xs-9,.col-sm-9,.col-md-9,.col-lg-9,.col-xs-10,.col-sm-10,.col-md-10,.col
2024-11-05 20:18:40 UTC	16384	IN	Data Raw: 2e 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 78 6c 2d 70 75 73 68 2d 32 33 7b 6c 65 66 74 3a 39 35 2e 38 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 6c 2d 70 75 73 68 2d 32 34 7b 6c 65 66 74 3a 31 30 30 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 2e 31 36 36 36 37 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 2e 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 32 2e 35 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 2e 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f Data Ascii: .66667%}.col-xl-push-23{left:95.83333%}.col-xl-push-24{left:100%}.col-xl-offset-0{margin-left:0}.col-xl-offset-1{margin-left:4.16667%}.col-xl-offset-2{margin-left:8.33333%}.col-xl-offset-3{margin-left:12.5%}.col-xl-offset-4{margin-left:16.66667%}.col-xl-o
2024-11-05 20:18:40 UTC	16384	IN	Data Raw: 74 3a 31 31 30 70 78 7d 2e 70 65 72 73 6f 6e 2e 70 65 72 73 6f 6e 2d 6d 65 64 69 75 6d 20 2e 70 65 72 73 6f 6e 2d 67 72 61 70 68 69 63 7b 77 69 64 74 68 3a 31 30 30 70 78 3b 68 65 69 67 68 74 3a 31 30 30 70 78 7d 2e 70 65 72 73 6f 6e 2e 70 65 72 73 6f 6e 2d 6c 61 72 67 65 7b 77 69 64 74 68 3a 32 31 30 70 78 3b 68 65 69 67 68 74 3a 32 31 30 70 78 7d 2e 70 65 72 73 6f 6e 2e 70 65 72 73 6f 6e 2d 6c 61 72 67 65 20 2e 70 65 72 73 6f 6e 2d 67 72 61 70 68 69 63 7b 77 69 64 74 68 3a 32 30 30 70 78 3b 68 65 69 67 68 74 3a 32 30 30 70 78 7d 2e 70 65 72 73 6f 6e 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 30 30 7d 74 61 62 6c 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 Data Ascii: t:110px}.person.person-medium .person-graphic{width:100px;height:100px}.person.person-large{width:210px;height:210px}.person.person-large .person-graphic{width:200px;height:200px}.person:focus{outline-style:none;border-color:#000}table{background-color:tr
2024-11-05 20:18:40 UTC	16384	IN	Data Raw: 72 74 61 6e 74 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 34 30 30 70 78 29 7b 2e 76 69 73 69 62 6c 65 2d 78 6c 2d 69 6e 6c 69 6e 65 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 34 30 30 70 78 29 7b 2e 76 69 73 69 62 6c 65 2d 78 6c 2d 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 34 30 30 70 78 29 7b 2e 68 69 64 64 65 6e 2d 78 6c 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 65 67 6f 65 20 Data Ascii: rtant}}@media (min-width:1400px){.visible-xl-inline{display:inline !important}}@media (min-width:1400px){.visible-xl-inline-block{display:inline-block !important}}@media (min-width:1400px){.hidden-xl{display:none !important}}@font-face{font-family:"Segoe
2024-11-05 20:18:40 UTC	16384	IN	Data Raw: 66 74 3a 30 7d 2e 62 74 6e 2c 62 75 74 74 6f 6e 2c 69 6e 70 75 74 5b 74 79 70 65 3d 27 62 75 74 74 6f 6e 27 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 27 73 75 62 6d 69 74 27 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 27 72 65 73 65 74 27 5d 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 33 32 70 78 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 63 63 63 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 32 29 3b 6d 69 6e 2d 77 69 64 74 68 3a 31 30 38 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 7d 2e 62 74 6e 2d 68 6f 76 65 72 2c 2e 62 74 6e 3a 68 6f 76 65 72 2c 62 75 74 74 6f 6e 3a 68 6f 76 65 72 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 3a 68 6f Data Ascii: ft:0}.btn,button,input[type='button'],input[type='submit'],input[type='reset']{min-height:32px;border:none;background-color:#ccc;background-color:rgba(0,0,0,0.2);min-width:108px;line-height:normal}.btn-hover,.btn:hover,button:hover,input[type="button"]:ho
2024-11-05 20:18:41 UTC	16027	IN	Data Raw: 22 2c 22 45 73 74 72 61 6e 67 65 6c 6f 20 45 64 65 73 73 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 48 69 6d 61 6c 61 79 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4e 65 77 20 54 61 69 20 4c 75 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 50 68 61 67 73 50 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 54 61 69 20 4c 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 69 20 42 61 69 74 69 22 2c 22 4d 6f 6e 67 6f 6c 69 61 6e 20 42 61 69 74 69 22 2c 22 4d 56 20 42 6f 6c 69 22 2c 22 4d 79 61 6e 6d 61 72 20 54 65 78 74 22 2c 22 43 61 6d 62 72 69 61 20 4d 61 74 68 22 7d 2e 74 69 74 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 32 35 72 65 6d 3b 6d 61 72 67 69 6e Data Ascii: ","Estrangelo Edessa","Microsoft Himalaya","Microsoft New Tai Lue","Microsoft PhagsPa","Microsoft Tai Le","Microsoft Yi Baiti","Mongolian Baiti","MV Boli","Myanmar Text","Cambria Math"}.title{margin-bottom:20px;margin-top:20px;margin-bottom:1.25rem;margin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.16	49781	3.17.16.61	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:41 UTC	735	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_IzDt-l0Cuie0gYRUoEk15w2.js HTTP/1.1 Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.nuriapsicologia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
2024-11-05 20:18:41 UTC	969	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 05 Nov 2024 20:18:41 GMT Content-Type: application/x-javascript Content-Length: 449972 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2477819 Cache-Control: public, max-age=31536000 Content-MD5: FH5pMpu6b85N3p947XewnA== Etag: 0x8DCE4DDC9563CC2 Last-Modified: Sat, 05 Oct 2024 01:33:59 GMT Vary: Accept-Encoding, Cookie X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1193cf1e-b01e-0048-0636-1949f9000000 x-ms-version: 2009-09-19 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Set-Cookie: session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I; Domain=nuriapsicologia.com; HttpOnly; Path=/
2024-11-05 20:18:41 UTC	15415	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-11-05 20:18:41 UTC	16384	IN	Data Raw: 3a 22 38 30 30 34 39 43 32 32 22 2c 50 50 5f 45 5f 49 4e 4c 49 4e 45 4c 4f 47 49 4e 5f 49 4e 56 41 4c 49 44 5f 53 4d 53 3a 22 38 30 30 34 33 34 45 31 22 2c 50 50 5f 45 5f 49 4e 4c 49 4e 45 4c 4f 47 49 4e 5f 49 4e 56 41 4c 49 44 5f 41 4c 54 3a 22 38 30 30 34 33 34 45 32 22 2c 50 50 5f 45 5f 50 52 45 56 49 4f 55 53 5f 50 41 53 53 57 4f 52 44 3a 22 38 30 30 34 31 30 31 33 22 2c 50 50 5f 45 5f 48 49 50 5f 56 41 4c 49 44 41 54 49 4f 4e 5f 57 52 4f 4e 47 3a 22 38 30 30 34 35 35 30 35 22 2c 50 50 5f 45 5f 48 49 50 5f 56 41 4c 49 44 41 54 49 4f 4e 5f 45 52 52 4f 52 5f 46 41 54 41 4c 3a 22 38 30 30 34 35 35 33 37 22 2c 50 50 5f 45 5f 48 49 50 5f 56 41 4c 49 44 41 54 49 4f 4e 5f 45 52 52 4f 52 5f 55 4e 41 55 54 48 45 4e 54 49 43 41 54 45 44 3a 22 38 30 30 34 35 35 Data Ascii: :"80049C22",PP_E_INLINELOGIN_INVALID_SMS:"800434E1",PP_E_INLINELOGIN_INVALID_ALT:"800434E2",PP_E_PREVIOUS_PASSWORD:"80041013",PP_E_HIP_VALIDATION_WRONG:"80045505",PP_E_HIP_VALIDATION_ERROR_FATAL:"80045537",PP_E_HIP_VALIDATION_ERROR_UNAUTHENTICATED:"800455
2024-11-05 20:18:41 UTC	16384	IN	Data Raw: 69 67 68 43 6f 6e 74 72 61 73 74 3a 2d 31 21 3d 3d 5b 27 22 61 63 74 69 76 65 22 27 2c 27 22 62 6c 61 63 6b 22 27 2c 27 22 77 68 69 74 65 22 27 5d 2e 69 6e 64 65 78 4f 66 28 69 29 2c 74 68 65 6d 65 3a 61 7d 7d 2c 67 65 74 48 69 67 68 43 6f 6e 74 72 61 73 74 54 68 65 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 6e 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 6e 2c 74 2c 69 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 52 65 67 45 78 70 28 22 5e 72 67 62 61 3f 5c 5c 28 22 2b 6e 2b 22 2c 5c 5c 73 3f 22 2b 74 2b 22 2c 5c 5c 73 3f 22 2b 69 2b 22 28 2c 5c 5c 73 3f 5c 5c 64 2b 5c 5c 2e 3f 5c 5c 64 2a 29 3f 5c 5c 29 24 22 2c 22 69 22 29 2e 74 65 73 74 28 65 2e 74 72 69 6d 28 29 29 7d 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 6e Data Ascii: ighContrast:-1!==['"active"','"black"','"white"'].indexOf(i),theme:a}},getHighContrastTheme:function(){function e(e,n,t){function i(e,n,t,i){return new RegExp("^rgba?\$"+n+",\\s?"+t+",\\s?"+i+"(,\\s?\\d+\\.?\\d*)?\$$","i").test(e.trim())}for(var a=0;a<n
2024-11-05 20:18:41 UTC	16384	IN	Data Raw: 61 63 65 28 2f 22 5b 5e 22 5c 5c 5c 6e 5c 72 5d 2a 22 7c 74 72 75 65 7c 66 61 6c 73 65 7c 6e 75 6c 6c 7c 2d 3f 5c 64 2b 28 3f 3a 5c 2e 5c 64 2a 29 3f 28 3f 3a 5b 65 45 5d 5b 2b 5c 2d 5d 3f 5c 64 2b 29 3f 2f 67 2c 22 5d 22 29 2e 72 65 70 6c 61 63 65 28 2f 28 3f 3a 5e 7c 3a 7c 2c 29 28 3f 3a 5c 73 2a 5c 5b 29 2b 2f 67 2c 22 22 29 29 29 72 65 74 75 72 6e 20 6a 3d 65 76 61 6c 28 22 28 22 2b 74 65 78 74 2b 22 29 22 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 76 69 76 65 72 3f 77 61 6c 6b 28 7b 22 22 3a 6a 7d 2c 22 22 29 3a 6a 3b 74 68 72 6f 77 20 6e 65 77 20 53 79 6e 74 61 78 45 72 72 6f 72 28 22 4a 53 4f 4e 2e 70 61 72 73 65 22 29 7d 29 2c 67 6c 6f 62 61 6c 2e 4a 53 4f 4e 3d 4a 53 4f 4e 2c 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d Data Ascii: ace(/"[^"\\\n\r]"\|true\|false\|null\|-?\d+(?:\.\d)?(?:[eE][+\-]?\d+)?/g,"]").replace(/(?:^\|:\|,)(?:\s*\[)+/g,"")))return j=eval("("+text+")"),"function"==typeof reviver?walk({"":j},""):j;throw new SyntaxError("JSON.parse")}),global.JSON=JSON,module.exports=
2024-11-05 20:18:41 UTC	16384	IN	Data Raw: 75 65 73 74 50 61 72 61 6d 3d 7b 55 73 65 72 6e 61 6d 65 3a 22 6c 6f 67 69 6e 22 2c 50 75 72 70 6f 73 65 3a 22 70 75 72 70 6f 73 65 22 2c 46 6c 6f 77 54 6f 6b 65 6e 3a 22 66 6c 6f 77 74 6f 6b 65 6e 22 2c 43 61 6e 61 72 79 46 6c 6f 77 54 6f 6b 65 6e 3a 22 63 61 6e 61 72 79 46 6c 6f 77 54 6f 6b 65 6e 22 2c 43 68 61 6e 6e 65 6c 3a 22 63 68 61 6e 6e 65 6c 22 2c 55 49 4d 6f 64 65 3a 22 55 49 4d 6f 64 65 22 2c 50 68 6f 6e 65 43 6f 75 6e 74 72 79 3a 22 4d 6f 62 69 6c 65 43 6f 75 6e 74 72 79 22 2c 50 68 6f 6e 65 43 6f 75 6e 74 72 79 43 6f 64 65 3a 22 4d 6f 62 69 6c 65 43 43 22 2c 55 6e 61 75 74 68 53 65 73 73 69 6f 6e 49 64 3a 22 75 61 69 64 22 2c 50 72 6f 6f 66 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 3a 22 50 72 6f 6f 66 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 22 7d 2c Data Ascii: uestParam={Username:"login",Purpose:"purpose",FlowToken:"flowtoken",CanaryFlowToken:"canaryFlowToken",Channel:"channel",UIMode:"UIMode",PhoneCountry:"MobileCountry",PhoneCountryCode:"MobileCC",UnauthSessionId:"uaid",ProofConfirmation:"ProofConfirmation"},
2024-11-05 20:18:41 UTC	16384	IN	Data Raw: 3a 6d 2e 47 6f 6f 67 6c 65 2c 72 65 64 69 72 65 63 74 55 72 6c 3a 72 2e 47 6f 6f 67 6c 65 52 65 64 69 72 65 63 74 55 72 6c 7d 3a 5b 5d 2c 74 2e 48 61 73 46 61 63 65 62 6f 6f 6b 46 65 64 26 26 73 3f 7b 63 72 65 64 54 79 70 65 3a 6d 2e 46 61 63 65 62 6f 6f 6b 2c 72 65 64 69 72 65 63 74 55 72 6c 3a 73 2e 46 61 63 65 62 6f 6f 6b 52 65 64 69 72 65 63 74 55 72 6c 7d 3a 5b 5d 2c 74 2e 48 61 73 41 63 63 65 73 73 50 61 73 73 3f 7b 63 72 65 64 54 79 70 65 3a 6d 2e 41 63 63 65 73 73 50 61 73 73 7d 3a 5b 5d 2c 74 2e 48 61 73 56 65 72 69 66 69 61 62 6c 65 43 72 65 64 65 6e 74 69 61 6c 26 26 6e 65 3f 7b 63 72 65 64 54 79 70 65 3a 6d 2e 56 65 72 69 66 69 61 62 6c 65 43 72 65 64 65 6e 74 69 61 6c 7d 3a 5b 5d 2c 74 2e 48 61 73 51 72 43 6f 64 65 50 69 6e 26 26 6a 65 26 26 Data Ascii: :m.Google,redirectUrl:r.GoogleRedirectUrl}:[],t.HasFacebookFed&&s?{credType:m.Facebook,redirectUrl:s.FacebookRedirectUrl}:[],t.HasAccessPass?{credType:m.AccessPass}:[],t.HasVerifiableCredential&&ne?{credType:m.VerifiableCredential}:[],t.HasQrCodePin&&je&&
2024-11-05 20:18:41 UTC	16384	IN	Data Raw: 70 72 65 76 65 6e 74 45 78 74 65 72 6e 61 6c 57 72 69 74 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 6e 28 29 2c 69 3d 65 2e 6f 62 73 65 72 76 61 62 6c 65 28 74 29 2e 65 78 74 65 6e 64 28 7b 6e 6f 74 69 66 79 3a 22 61 6c 77 61 79 73 22 7d 29 3b 72 65 74 75 72 6e 20 65 2e 70 75 72 65 43 6f 6d 70 75 74 65 64 28 7b 72 65 61 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 28 29 7d 2c 77 72 69 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 21 3d 3d 74 26 26 69 28 74 29 7d 7d 29 2e 65 78 74 65 6e 64 28 7b 6e 6f 74 69 66 79 3a 22 61 6c 77 61 79 73 22 7d 29 7d 2c 65 2e 65 78 74 65 6e 64 65 72 73 2e 66 6c 6f 77 54 6f 6b 65 6e 55 70 64 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 70 75 72 65 43 6f Data Ascii: preventExternalWrite=function(n){var t=n(),i=e.observable(t).extend({notify:"always"});return e.pureComputed({read:function(){return i()},write:function(e){e!==t&&i(t)}}).extend({notify:"always"})},e.extenders.flowTokenUpdate=function(n,t){return e.pureCo
2024-11-05 20:18:41 UTC	16384	IN	Data Raw: 65 2e 50 61 72 74 6e 65 72 43 61 6e 61 72 79 56 61 6c 69 64 61 74 69 6f 6e 7d 7d 2c 63 3d 6c 2e 50 61 72 74 6e 65 72 43 61 6e 61 72 79 53 63 65 6e 61 72 69 6f 3d 7b 55 6e 64 65 66 69 6e 65 64 3a 30 2c 46 69 64 6f 3a 31 7d 2c 64 3d 6c 2e 43 61 6e 61 72 79 56 61 6c 69 64 61 74 69 6f 6e 53 75 63 63 65 73 73 41 63 74 69 6f 6e 3d 7b 53 77 69 74 63 68 56 69 65 77 3a 31 2c 52 65 64 69 72 65 63 74 3a 32 7d 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 76 61 72 20 6e 3d 65 2c 74 3d 6e 2e 73 45 78 74 65 72 6e 61 6c 43 61 6e 61 72 79 2c 75 3d 6e 2e 75 72 6c 43 61 6e 61 72 79 56 61 6c 69 64 61 74 69 6f 6e 2c 70 3d 21 21 6e 2e 73 52 65 6d 6f 74 65 43 6f 6e 6e 65 63 74 41 70 70 4e 61 6d 65 2c 66 3d 21 21 6e 2e 66 49 73 52 65 6d 6f 74 65 43 6f 6e 6e 65 63 74 53 69 67 6e Data Ascii: e.PartnerCanaryValidation}},c=l.PartnerCanaryScenario={Undefined:0,Fido:1},d=l.CanaryValidationSuccessAction={SwitchView:1,Redirect:2};function l(e){var n=e,t=n.sExternalCanary,u=n.urlCanaryValidation,p=!!n.sRemoteConnectAppName,f=!!n.fIsRemoteConnectSign
2024-11-05 20:18:41 UTC	16384	IN	Data Raw: 20 74 3d 5b 5d 2c 61 3d 5b 5d 2c 6f 3d 7b 7d 2c 72 3d 30 3b 72 65 74 75 72 6e 20 69 2e 75 74 69 6c 73 2e 61 72 72 61 79 46 6f 72 45 61 63 68 28 6e 2e 74 65 6d 70 6c 61 74 65 4e 6f 64 65 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3b 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 6e 75 6c 6c 21 3d 3d 28 6e 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 76 69 65 77 69 64 22 29 29 26 26 28 74 2e 70 75 73 68 28 65 29 2c 61 2e 70 75 73 68 28 69 2e 6f 62 73 65 72 76 61 62 6c 65 28 29 29 2c 6e 3d 69 73 4e 61 4e 28 6e 29 3f 6e 3a 70 61 72 73 65 49 6e 74 28 6e 29 2c 6f 5b 6e 5d 3d 7b 69 6e 64 65 78 3a 72 2b 2b 2c 6d 65 74 61 64 61 74 61 3a 53 28 65 29 7d 29 7d 29 29 2c 6e 65 77 20 43 28 65 2c 74 2c 61 2c 6f 29 7d 7d 2c 74 65 6d Data Ascii: t=[],a=[],o={},r=0;return i.utils.arrayForEach(n.templateNodes,(function(e){var n;1===e.nodeType&&null!==(n=e.getAttribute("data-viewid"))&&(t.push(e),a.push(i.observable()),n=isNaN(n)?n:parseInt(n),o[n]={index:r++,metadata:S(e)})})),new C(e,t,a,o)}},tem
2024-11-05 20:18:41 UTC	16384	IN	Data Raw: 20 74 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 6e 29 7b 69 66 28 65 29 69 66 28 38 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 6e 75 6c 6c 21 3d 28 74 3d 43 2e 61 61 2e 55 63 28 65 2e 6e 6f 64 65 56 61 6c 75 65 29 29 26 26 6e 2e 70 75 73 68 28 7b 75 64 3a 65 2c 4b 64 3a 74 7d 29 3b 65 6c 73 65 20 69 66 28 31 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 66 6f 72 28 76 61 72 20 74 3d 30 2c 69 3d 65 2e 63 68 69 6c 64 4e 6f 64 65 73 2c 61 3d 69 2e 6c 65 6e 67 74 68 3b 74 3c 61 3b 74 2b 2b 29 73 28 69 5b 74 5d 2c 6e 29 7d 28 65 2c 74 29 3b 66 6f 72 28 76 61 72 20 69 3d 30 2c 61 3d 74 2e 6c 65 6e 67 74 68 3b 69 3c 61 3b 69 2b 2b 29 7b 76 61 72 20 6f 3d 74 5b 69 5d 2e 75 64 2c 72 3d 5b 6f 5d 3b 6e 26 26 43 2e 61 2e 4e 62 28 72 2c 6e 29 2c 43 2e 61 61 2e 62 64 Data Ascii: t=[];!function s(e,n){if(e)if(8==e.nodeType)null!=(t=C.aa.Uc(e.nodeValue))&&n.push({ud:e,Kd:t});else if(1==e.nodeType)for(var t=0,i=e.childNodes,a=i.length;t<a;t++)s(i[t],n)}(e,t);for(var i=0,a=t.length;i<a;i++){var o=t[i].ud,r=[o];n&&C.a.Nb(r,n),C.aa.bd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.16	49782	3.17.16.61	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:41 UTC	754	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1 Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.nuriapsicologia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
2024-11-05 20:18:41 UTC	968	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 05 Nov 2024 20:18:41 GMT Content-Type: application/x-javascript Content-Length: 57443 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 6031033 Cache-Control: public, max-age=31536000 Content-MD5: wheuNbhZLcnx5oBIfa0JTw== Etag: 0x8DCC6D4DD76DEA7 Last-Modified: Tue, 27 Aug 2024 20:14:33 GMT Vary: Accept-Encoding, Cookie X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e3715235-101e-00bb-1ae5-f83bc5000000 x-ms-version: 2009-09-19 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Set-Cookie: session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I; Domain=nuriapsicologia.com; HttpOnly; Path=/
2024-11-05 20:18:41 UTC	15416	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 69 5b 6e 5d 29 72 65 74 75 72 6e 20 69 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 69 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 69 2c 6f 2e 70 3d 22 22 2c 6f 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 69 29 7b 69 28 32 29 3b 76 61 72 20 6e 3d 69 28 31 29 2c 74 3d 69 28 35 29 2c 72 3d 69 28 36 29 2c 61 3d 72 2e 53 74 72 69 6e Data Ascii: !function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.Strin
2024-11-05 20:18:41 UTC	16384	IN	Data Raw: 65 20 68 61 73 20 65 78 70 69 72 65 64 2e 22 2c 65 2e 43 54 5f 56 43 5f 53 54 52 5f 50 6f 6c 6c 69 6e 67 44 65 6e 69 65 64 5f 54 69 74 6c 65 3d 22 50 72 65 73 65 6e 74 61 74 69 6f 6e 20 65 72 72 6f 72 22 2c 65 2e 43 54 5f 56 43 5f 53 54 52 5f 50 6f 6c 6c 69 6e 67 44 65 6e 69 65 64 5f 44 65 73 63 72 69 70 74 69 6f 6e 3d 22 54 68 65 72 65 20 77 61 73 20 61 6e 20 65 72 72 6f 72 20 70 72 65 73 65 6e 74 69 6e 67 20 79 6f 75 72 20 56 65 72 69 66 69 65 64 20 49 44 2e 22 2c 65 2e 43 54 5f 56 43 5f 53 54 52 5f 53 75 63 63 65 73 73 5f 54 69 74 6c 65 3d 22 53 75 63 63 65 73 73 66 75 6c 6c 79 20 76 65 72 69 66 69 65 64 22 2c 65 2e 43 54 5f 56 43 5f 53 54 52 5f 53 75 63 63 65 73 73 5f 44 65 73 63 72 69 70 74 69 6f 6e 3d 22 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 22 Data Ascii: e has expired.",e.CT_VC_STR_PollingDenied_Title="Presentation error",e.CT_VC_STR_PollingDenied_Description="There was an error presenting your Verified ID.",e.CT_VC_STR_Success_Title="Successfully verified",e.CT_VC_STR_Success_Description="Redirecting..."
2024-11-05 20:18:41 UTC	16384	IN	Data Raw: 3d 22 45 6d 61 69 6c 20 61 64 64 72 65 73 73 22 2c 65 2e 53 54 52 5f 53 53 53 55 5f 53 69 67 6e 75 70 5f 4c 69 6e 6b 3d 22 4e 6f 20 61 63 63 6f 75 6e 74 3f 20 43 72 65 61 74 65 20 6f 6e 65 22 2c 65 2e 53 54 52 5f 53 53 53 55 5f 46 6f 72 67 6f 74 50 61 73 73 77 6f 72 64 3d 22 46 6f 72 67 6f 74 20 70 61 73 73 77 6f 72 64 3f 22 2c 65 2e 53 54 52 5f 53 53 53 55 5f 42 61 63 6b 54 6f 4c 6f 67 69 6e 5f 4c 69 6e 6b 3d 22 48 61 76 65 20 61 6e 20 61 63 63 6f 75 6e 74 3f 20 53 69 67 6e 20 69 6e 20 69 6e 73 74 65 61 64 22 2c 65 2e 53 54 52 5f 53 53 53 55 5f 53 69 67 6e 49 6e 5f 48 65 61 64 65 72 44 65 73 63 72 69 70 74 69 6f 6e 3d 22 53 69 67 6e 20 69 6e 20 74 6f 20 61 63 63 65 73 73 20 7b 30 7d 22 2c 0a 65 2e 53 54 52 5f 53 53 53 55 5f 53 69 67 6e 55 70 5f 48 65 61 Data Ascii: ="Email address",e.STR_SSSU_Signup_Link="No account? Create one",e.STR_SSSU_ForgotPassword="Forgot password?",e.STR_SSSU_BackToLogin_Link="Have an account? Sign in instead",e.STR_SSSU_SignIn_HeaderDescription="Sign in to access {0}",e.STR_SSSU_SignUp_Hea
2024-11-05 20:18:41 UTC	9259	IN	Data Raw: 30 35 30 30 22 2c 41 63 63 65 73 73 50 61 73 73 42 6c 6f 63 6b 65 64 42 79 50 6f 6c 69 63 79 3a 22 31 33 30 35 30 32 22 2c 49 6e 76 61 6c 69 64 41 63 63 65 73 73 50 61 73 73 3a 22 31 33 30 35 30 33 22 2c 41 63 63 65 73 73 50 61 73 73 45 78 70 69 72 65 64 3a 22 31 33 30 35 30 34 22 2c 41 63 63 65 73 73 50 61 73 73 41 6c 72 65 61 64 79 55 73 65 64 3a 22 31 33 30 35 30 35 22 2c 50 75 62 6c 69 63 49 64 65 6e 74 69 66 69 65 72 53 61 73 42 65 67 69 6e 43 61 6c 6c 52 65 74 72 69 61 62 6c 65 45 72 72 6f 72 3a 22 31 33 31 30 30 31 22 2c 50 75 62 6c 69 63 49 64 65 6e 74 69 66 69 65 72 41 75 74 68 55 73 65 72 4e 6f 74 41 6c 6c 6f 77 65 64 42 79 50 6f 6c 69 63 79 3a 22 31 33 31 30 31 30 22 2c 50 75 62 6c 69 63 49 64 65 6e 74 69 66 69 65 72 53 61 73 42 65 67 69 6e 43 Data Ascii: 0500",AccessPassBlockedByPolicy:"130502",InvalidAccessPass:"130503",AccessPassExpired:"130504",AccessPassAlreadyUsed:"130505",PublicIdentifierSasBeginCallRetriableError:"131001",PublicIdentifierAuthUserNotAllowedByPolicy:"131010",PublicIdentifierSasBeginC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.16	49783	3.17.16.61	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:41 UTC	816	OUT	GET /Me.htm?v=3 HTTP/1.1 Host: 6c6f67696e2e6c6976652e636f6d.nuriapsicologia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://login.nuriapsicologia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
2024-11-05 20:18:41 UTC	833	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 05 Nov 2024 20:18:41 GMT Content-Type: text/html; charset=utf-8 Content-Length: 3889 Connection: close Cache-Control: max-age=315360000 Expires: Fri, 03 Nov 2034 20:18:41 GMT Vary: Accept-Encoding, Cookie P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C520_BAY x-ms-request-id: 58c719fa-8acd-4f8a-9e4d-336ddcd20327 PPServer: PPV: 30 H: PH1PEPF0001B856 V: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Set-Cookie: MSPRequ=id=N&lt=1730837921&co=1; Secure; Path=/ Set-Cookie: uaid=9dd9892c30414ff99ccf3673055d726f; Secure; Path=/ Set-Cookie: session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I; Domain=nuriapsicologia.com; HttpOnly; Path=/
2024-11-05 20:18:41 UTC	3889	IN	Data Raw: 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 65 29 74 5b 73 5d 3d 65 5b 73 5d 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 6e 29 7b 69 66 28 73 5b 6e 5d 29 72 65 74 75 72 6e 20 73 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 73 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 65 29 2c 69 2e 6c 6f 61 64 65 64 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 73 3d 7b 7d 3b 72 65 74 75 72 6e 20 65 2e 6d 3d 74 Data Ascii: <script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.16	49785	3.17.16.61	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:42 UTC	570	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1 Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
2024-11-05 20:18:42 UTC	968	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 05 Nov 2024 20:18:42 GMT Content-Type: application/x-javascript Content-Length: 57443 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 6031034 Cache-Control: public, max-age=31536000 Content-MD5: wheuNbhZLcnx5oBIfa0JTw== Etag: 0x8DCC6D4DD76DEA7 Last-Modified: Tue, 27 Aug 2024 20:14:33 GMT Vary: Accept-Encoding, Cookie X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e3715235-101e-00bb-1ae5-f83bc5000000 x-ms-version: 2009-09-19 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Set-Cookie: session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I; Domain=nuriapsicologia.com; HttpOnly; Path=/
2024-11-05 20:18:42 UTC	15416	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 69 5b 6e 5d 29 72 65 74 75 72 6e 20 69 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 69 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 69 2c 6f 2e 70 3d 22 22 2c 6f 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 69 29 7b 69 28 32 29 3b 76 61 72 20 6e 3d 69 28 31 29 2c 74 3d 69 28 35 29 2c 72 3d 69 28 36 29 2c 61 3d 72 2e 53 74 72 69 6e Data Ascii: !function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.Strin
2024-11-05 20:18:42 UTC	16384	IN	Data Raw: 65 20 68 61 73 20 65 78 70 69 72 65 64 2e 22 2c 65 2e 43 54 5f 56 43 5f 53 54 52 5f 50 6f 6c 6c 69 6e 67 44 65 6e 69 65 64 5f 54 69 74 6c 65 3d 22 50 72 65 73 65 6e 74 61 74 69 6f 6e 20 65 72 72 6f 72 22 2c 65 2e 43 54 5f 56 43 5f 53 54 52 5f 50 6f 6c 6c 69 6e 67 44 65 6e 69 65 64 5f 44 65 73 63 72 69 70 74 69 6f 6e 3d 22 54 68 65 72 65 20 77 61 73 20 61 6e 20 65 72 72 6f 72 20 70 72 65 73 65 6e 74 69 6e 67 20 79 6f 75 72 20 56 65 72 69 66 69 65 64 20 49 44 2e 22 2c 65 2e 43 54 5f 56 43 5f 53 54 52 5f 53 75 63 63 65 73 73 5f 54 69 74 6c 65 3d 22 53 75 63 63 65 73 73 66 75 6c 6c 79 20 76 65 72 69 66 69 65 64 22 2c 65 2e 43 54 5f 56 43 5f 53 54 52 5f 53 75 63 63 65 73 73 5f 44 65 73 63 72 69 70 74 69 6f 6e 3d 22 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 22 Data Ascii: e has expired.",e.CT_VC_STR_PollingDenied_Title="Presentation error",e.CT_VC_STR_PollingDenied_Description="There was an error presenting your Verified ID.",e.CT_VC_STR_Success_Title="Successfully verified",e.CT_VC_STR_Success_Description="Redirecting..."
2024-11-05 20:18:42 UTC	16384	IN	Data Raw: 3d 22 45 6d 61 69 6c 20 61 64 64 72 65 73 73 22 2c 65 2e 53 54 52 5f 53 53 53 55 5f 53 69 67 6e 75 70 5f 4c 69 6e 6b 3d 22 4e 6f 20 61 63 63 6f 75 6e 74 3f 20 43 72 65 61 74 65 20 6f 6e 65 22 2c 65 2e 53 54 52 5f 53 53 53 55 5f 46 6f 72 67 6f 74 50 61 73 73 77 6f 72 64 3d 22 46 6f 72 67 6f 74 20 70 61 73 73 77 6f 72 64 3f 22 2c 65 2e 53 54 52 5f 53 53 53 55 5f 42 61 63 6b 54 6f 4c 6f 67 69 6e 5f 4c 69 6e 6b 3d 22 48 61 76 65 20 61 6e 20 61 63 63 6f 75 6e 74 3f 20 53 69 67 6e 20 69 6e 20 69 6e 73 74 65 61 64 22 2c 65 2e 53 54 52 5f 53 53 53 55 5f 53 69 67 6e 49 6e 5f 48 65 61 64 65 72 44 65 73 63 72 69 70 74 69 6f 6e 3d 22 53 69 67 6e 20 69 6e 20 74 6f 20 61 63 63 65 73 73 20 7b 30 7d 22 2c 0a 65 2e 53 54 52 5f 53 53 53 55 5f 53 69 67 6e 55 70 5f 48 65 61 Data Ascii: ="Email address",e.STR_SSSU_Signup_Link="No account? Create one",e.STR_SSSU_ForgotPassword="Forgot password?",e.STR_SSSU_BackToLogin_Link="Have an account? Sign in instead",e.STR_SSSU_SignIn_HeaderDescription="Sign in to access {0}",e.STR_SSSU_SignUp_Hea
2024-11-05 20:18:42 UTC	9259	IN	Data Raw: 30 35 30 30 22 2c 41 63 63 65 73 73 50 61 73 73 42 6c 6f 63 6b 65 64 42 79 50 6f 6c 69 63 79 3a 22 31 33 30 35 30 32 22 2c 49 6e 76 61 6c 69 64 41 63 63 65 73 73 50 61 73 73 3a 22 31 33 30 35 30 33 22 2c 41 63 63 65 73 73 50 61 73 73 45 78 70 69 72 65 64 3a 22 31 33 30 35 30 34 22 2c 41 63 63 65 73 73 50 61 73 73 41 6c 72 65 61 64 79 55 73 65 64 3a 22 31 33 30 35 30 35 22 2c 50 75 62 6c 69 63 49 64 65 6e 74 69 66 69 65 72 53 61 73 42 65 67 69 6e 43 61 6c 6c 52 65 74 72 69 61 62 6c 65 45 72 72 6f 72 3a 22 31 33 31 30 30 31 22 2c 50 75 62 6c 69 63 49 64 65 6e 74 69 66 69 65 72 41 75 74 68 55 73 65 72 4e 6f 74 41 6c 6c 6f 77 65 64 42 79 50 6f 6c 69 63 79 3a 22 31 33 31 30 31 30 22 2c 50 75 62 6c 69 63 49 64 65 6e 74 69 66 69 65 72 53 61 73 42 65 67 69 6e 43 Data Ascii: 0500",AccessPassBlockedByPolicy:"130502",InvalidAccessPass:"130503",AccessPassExpired:"130504",AccessPassAlreadyUsed:"130505",PublicIdentifierSasBeginCallRetriableError:"131001",PublicIdentifierAuthUserNotAllowedByPolicy:"131010",PublicIdentifierSasBeginC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.16	49786	3.17.16.61	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:42 UTC	551	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_IzDt-l0Cuie0gYRUoEk15w2.js HTTP/1.1 Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
2024-11-05 20:18:43 UTC	969	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 05 Nov 2024 20:18:42 GMT Content-Type: application/x-javascript Content-Length: 449972 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2477820 Cache-Control: public, max-age=31536000 Content-MD5: FH5pMpu6b85N3p947XewnA== Etag: 0x8DCE4DDC9563CC2 Last-Modified: Sat, 05 Oct 2024 01:33:59 GMT Vary: Accept-Encoding, Cookie X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1193cf1e-b01e-0048-0636-1949f9000000 x-ms-version: 2009-09-19 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Set-Cookie: session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I; Domain=nuriapsicologia.com; HttpOnly; Path=/
2024-11-05 20:18:43 UTC	15415	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-11-05 20:18:43 UTC	16384	IN	Data Raw: 3a 22 38 30 30 34 39 43 32 32 22 2c 50 50 5f 45 5f 49 4e 4c 49 4e 45 4c 4f 47 49 4e 5f 49 4e 56 41 4c 49 44 5f 53 4d 53 3a 22 38 30 30 34 33 34 45 31 22 2c 50 50 5f 45 5f 49 4e 4c 49 4e 45 4c 4f 47 49 4e 5f 49 4e 56 41 4c 49 44 5f 41 4c 54 3a 22 38 30 30 34 33 34 45 32 22 2c 50 50 5f 45 5f 50 52 45 56 49 4f 55 53 5f 50 41 53 53 57 4f 52 44 3a 22 38 30 30 34 31 30 31 33 22 2c 50 50 5f 45 5f 48 49 50 5f 56 41 4c 49 44 41 54 49 4f 4e 5f 57 52 4f 4e 47 3a 22 38 30 30 34 35 35 30 35 22 2c 50 50 5f 45 5f 48 49 50 5f 56 41 4c 49 44 41 54 49 4f 4e 5f 45 52 52 4f 52 5f 46 41 54 41 4c 3a 22 38 30 30 34 35 35 33 37 22 2c 50 50 5f 45 5f 48 49 50 5f 56 41 4c 49 44 41 54 49 4f 4e 5f 45 52 52 4f 52 5f 55 4e 41 55 54 48 45 4e 54 49 43 41 54 45 44 3a 22 38 30 30 34 35 35 Data Ascii: :"80049C22",PP_E_INLINELOGIN_INVALID_SMS:"800434E1",PP_E_INLINELOGIN_INVALID_ALT:"800434E2",PP_E_PREVIOUS_PASSWORD:"80041013",PP_E_HIP_VALIDATION_WRONG:"80045505",PP_E_HIP_VALIDATION_ERROR_FATAL:"80045537",PP_E_HIP_VALIDATION_ERROR_UNAUTHENTICATED:"800455
2024-11-05 20:18:43 UTC	16384	IN	Data Raw: 69 67 68 43 6f 6e 74 72 61 73 74 3a 2d 31 21 3d 3d 5b 27 22 61 63 74 69 76 65 22 27 2c 27 22 62 6c 61 63 6b 22 27 2c 27 22 77 68 69 74 65 22 27 5d 2e 69 6e 64 65 78 4f 66 28 69 29 2c 74 68 65 6d 65 3a 61 7d 7d 2c 67 65 74 48 69 67 68 43 6f 6e 74 72 61 73 74 54 68 65 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 6e 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 6e 2c 74 2c 69 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 52 65 67 45 78 70 28 22 5e 72 67 62 61 3f 5c 5c 28 22 2b 6e 2b 22 2c 5c 5c 73 3f 22 2b 74 2b 22 2c 5c 5c 73 3f 22 2b 69 2b 22 28 2c 5c 5c 73 3f 5c 5c 64 2b 5c 5c 2e 3f 5c 5c 64 2a 29 3f 5c 5c 29 24 22 2c 22 69 22 29 2e 74 65 73 74 28 65 2e 74 72 69 6d 28 29 29 7d 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 6e Data Ascii: ighContrast:-1!==['"active"','"black"','"white"'].indexOf(i),theme:a}},getHighContrastTheme:function(){function e(e,n,t){function i(e,n,t,i){return new RegExp("^rgba?\$"+n+",\\s?"+t+",\\s?"+i+"(,\\s?\\d+\\.?\\d*)?\$$","i").test(e.trim())}for(var a=0;a<n
2024-11-05 20:18:43 UTC	16384	IN	Data Raw: 61 63 65 28 2f 22 5b 5e 22 5c 5c 5c 6e 5c 72 5d 2a 22 7c 74 72 75 65 7c 66 61 6c 73 65 7c 6e 75 6c 6c 7c 2d 3f 5c 64 2b 28 3f 3a 5c 2e 5c 64 2a 29 3f 28 3f 3a 5b 65 45 5d 5b 2b 5c 2d 5d 3f 5c 64 2b 29 3f 2f 67 2c 22 5d 22 29 2e 72 65 70 6c 61 63 65 28 2f 28 3f 3a 5e 7c 3a 7c 2c 29 28 3f 3a 5c 73 2a 5c 5b 29 2b 2f 67 2c 22 22 29 29 29 72 65 74 75 72 6e 20 6a 3d 65 76 61 6c 28 22 28 22 2b 74 65 78 74 2b 22 29 22 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 76 69 76 65 72 3f 77 61 6c 6b 28 7b 22 22 3a 6a 7d 2c 22 22 29 3a 6a 3b 74 68 72 6f 77 20 6e 65 77 20 53 79 6e 74 61 78 45 72 72 6f 72 28 22 4a 53 4f 4e 2e 70 61 72 73 65 22 29 7d 29 2c 67 6c 6f 62 61 6c 2e 4a 53 4f 4e 3d 4a 53 4f 4e 2c 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d Data Ascii: ace(/"[^"\\\n\r]"\|true\|false\|null\|-?\d+(?:\.\d)?(?:[eE][+\-]?\d+)?/g,"]").replace(/(?:^\|:\|,)(?:\s*\[)+/g,"")))return j=eval("("+text+")"),"function"==typeof reviver?walk({"":j},""):j;throw new SyntaxError("JSON.parse")}),global.JSON=JSON,module.exports=
2024-11-05 20:18:43 UTC	16384	IN	Data Raw: 75 65 73 74 50 61 72 61 6d 3d 7b 55 73 65 72 6e 61 6d 65 3a 22 6c 6f 67 69 6e 22 2c 50 75 72 70 6f 73 65 3a 22 70 75 72 70 6f 73 65 22 2c 46 6c 6f 77 54 6f 6b 65 6e 3a 22 66 6c 6f 77 74 6f 6b 65 6e 22 2c 43 61 6e 61 72 79 46 6c 6f 77 54 6f 6b 65 6e 3a 22 63 61 6e 61 72 79 46 6c 6f 77 54 6f 6b 65 6e 22 2c 43 68 61 6e 6e 65 6c 3a 22 63 68 61 6e 6e 65 6c 22 2c 55 49 4d 6f 64 65 3a 22 55 49 4d 6f 64 65 22 2c 50 68 6f 6e 65 43 6f 75 6e 74 72 79 3a 22 4d 6f 62 69 6c 65 43 6f 75 6e 74 72 79 22 2c 50 68 6f 6e 65 43 6f 75 6e 74 72 79 43 6f 64 65 3a 22 4d 6f 62 69 6c 65 43 43 22 2c 55 6e 61 75 74 68 53 65 73 73 69 6f 6e 49 64 3a 22 75 61 69 64 22 2c 50 72 6f 6f 66 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 3a 22 50 72 6f 6f 66 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 22 7d 2c Data Ascii: uestParam={Username:"login",Purpose:"purpose",FlowToken:"flowtoken",CanaryFlowToken:"canaryFlowToken",Channel:"channel",UIMode:"UIMode",PhoneCountry:"MobileCountry",PhoneCountryCode:"MobileCC",UnauthSessionId:"uaid",ProofConfirmation:"ProofConfirmation"},
2024-11-05 20:18:43 UTC	16384	IN	Data Raw: 3a 6d 2e 47 6f 6f 67 6c 65 2c 72 65 64 69 72 65 63 74 55 72 6c 3a 72 2e 47 6f 6f 67 6c 65 52 65 64 69 72 65 63 74 55 72 6c 7d 3a 5b 5d 2c 74 2e 48 61 73 46 61 63 65 62 6f 6f 6b 46 65 64 26 26 73 3f 7b 63 72 65 64 54 79 70 65 3a 6d 2e 46 61 63 65 62 6f 6f 6b 2c 72 65 64 69 72 65 63 74 55 72 6c 3a 73 2e 46 61 63 65 62 6f 6f 6b 52 65 64 69 72 65 63 74 55 72 6c 7d 3a 5b 5d 2c 74 2e 48 61 73 41 63 63 65 73 73 50 61 73 73 3f 7b 63 72 65 64 54 79 70 65 3a 6d 2e 41 63 63 65 73 73 50 61 73 73 7d 3a 5b 5d 2c 74 2e 48 61 73 56 65 72 69 66 69 61 62 6c 65 43 72 65 64 65 6e 74 69 61 6c 26 26 6e 65 3f 7b 63 72 65 64 54 79 70 65 3a 6d 2e 56 65 72 69 66 69 61 62 6c 65 43 72 65 64 65 6e 74 69 61 6c 7d 3a 5b 5d 2c 74 2e 48 61 73 51 72 43 6f 64 65 50 69 6e 26 26 6a 65 26 26 Data Ascii: :m.Google,redirectUrl:r.GoogleRedirectUrl}:[],t.HasFacebookFed&&s?{credType:m.Facebook,redirectUrl:s.FacebookRedirectUrl}:[],t.HasAccessPass?{credType:m.AccessPass}:[],t.HasVerifiableCredential&&ne?{credType:m.VerifiableCredential}:[],t.HasQrCodePin&&je&&
2024-11-05 20:18:43 UTC	16384	IN	Data Raw: 70 72 65 76 65 6e 74 45 78 74 65 72 6e 61 6c 57 72 69 74 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 6e 28 29 2c 69 3d 65 2e 6f 62 73 65 72 76 61 62 6c 65 28 74 29 2e 65 78 74 65 6e 64 28 7b 6e 6f 74 69 66 79 3a 22 61 6c 77 61 79 73 22 7d 29 3b 72 65 74 75 72 6e 20 65 2e 70 75 72 65 43 6f 6d 70 75 74 65 64 28 7b 72 65 61 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 28 29 7d 2c 77 72 69 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 21 3d 3d 74 26 26 69 28 74 29 7d 7d 29 2e 65 78 74 65 6e 64 28 7b 6e 6f 74 69 66 79 3a 22 61 6c 77 61 79 73 22 7d 29 7d 2c 65 2e 65 78 74 65 6e 64 65 72 73 2e 66 6c 6f 77 54 6f 6b 65 6e 55 70 64 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 70 75 72 65 43 6f Data Ascii: preventExternalWrite=function(n){var t=n(),i=e.observable(t).extend({notify:"always"});return e.pureComputed({read:function(){return i()},write:function(e){e!==t&&i(t)}}).extend({notify:"always"})},e.extenders.flowTokenUpdate=function(n,t){return e.pureCo
2024-11-05 20:18:43 UTC	16384	IN	Data Raw: 65 2e 50 61 72 74 6e 65 72 43 61 6e 61 72 79 56 61 6c 69 64 61 74 69 6f 6e 7d 7d 2c 63 3d 6c 2e 50 61 72 74 6e 65 72 43 61 6e 61 72 79 53 63 65 6e 61 72 69 6f 3d 7b 55 6e 64 65 66 69 6e 65 64 3a 30 2c 46 69 64 6f 3a 31 7d 2c 64 3d 6c 2e 43 61 6e 61 72 79 56 61 6c 69 64 61 74 69 6f 6e 53 75 63 63 65 73 73 41 63 74 69 6f 6e 3d 7b 53 77 69 74 63 68 56 69 65 77 3a 31 2c 52 65 64 69 72 65 63 74 3a 32 7d 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 76 61 72 20 6e 3d 65 2c 74 3d 6e 2e 73 45 78 74 65 72 6e 61 6c 43 61 6e 61 72 79 2c 75 3d 6e 2e 75 72 6c 43 61 6e 61 72 79 56 61 6c 69 64 61 74 69 6f 6e 2c 70 3d 21 21 6e 2e 73 52 65 6d 6f 74 65 43 6f 6e 6e 65 63 74 41 70 70 4e 61 6d 65 2c 66 3d 21 21 6e 2e 66 49 73 52 65 6d 6f 74 65 43 6f 6e 6e 65 63 74 53 69 67 6e Data Ascii: e.PartnerCanaryValidation}},c=l.PartnerCanaryScenario={Undefined:0,Fido:1},d=l.CanaryValidationSuccessAction={SwitchView:1,Redirect:2};function l(e){var n=e,t=n.sExternalCanary,u=n.urlCanaryValidation,p=!!n.sRemoteConnectAppName,f=!!n.fIsRemoteConnectSign
2024-11-05 20:18:43 UTC	16384	IN	Data Raw: 20 74 3d 5b 5d 2c 61 3d 5b 5d 2c 6f 3d 7b 7d 2c 72 3d 30 3b 72 65 74 75 72 6e 20 69 2e 75 74 69 6c 73 2e 61 72 72 61 79 46 6f 72 45 61 63 68 28 6e 2e 74 65 6d 70 6c 61 74 65 4e 6f 64 65 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3b 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 6e 75 6c 6c 21 3d 3d 28 6e 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 76 69 65 77 69 64 22 29 29 26 26 28 74 2e 70 75 73 68 28 65 29 2c 61 2e 70 75 73 68 28 69 2e 6f 62 73 65 72 76 61 62 6c 65 28 29 29 2c 6e 3d 69 73 4e 61 4e 28 6e 29 3f 6e 3a 70 61 72 73 65 49 6e 74 28 6e 29 2c 6f 5b 6e 5d 3d 7b 69 6e 64 65 78 3a 72 2b 2b 2c 6d 65 74 61 64 61 74 61 3a 53 28 65 29 7d 29 7d 29 29 2c 6e 65 77 20 43 28 65 2c 74 2c 61 2c 6f 29 7d 7d 2c 74 65 6d Data Ascii: t=[],a=[],o={},r=0;return i.utils.arrayForEach(n.templateNodes,(function(e){var n;1===e.nodeType&&null!==(n=e.getAttribute("data-viewid"))&&(t.push(e),a.push(i.observable()),n=isNaN(n)?n:parseInt(n),o[n]={index:r++,metadata:S(e)})})),new C(e,t,a,o)}},tem
2024-11-05 20:18:43 UTC	16384	IN	Data Raw: 20 74 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 6e 29 7b 69 66 28 65 29 69 66 28 38 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 6e 75 6c 6c 21 3d 28 74 3d 43 2e 61 61 2e 55 63 28 65 2e 6e 6f 64 65 56 61 6c 75 65 29 29 26 26 6e 2e 70 75 73 68 28 7b 75 64 3a 65 2c 4b 64 3a 74 7d 29 3b 65 6c 73 65 20 69 66 28 31 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 66 6f 72 28 76 61 72 20 74 3d 30 2c 69 3d 65 2e 63 68 69 6c 64 4e 6f 64 65 73 2c 61 3d 69 2e 6c 65 6e 67 74 68 3b 74 3c 61 3b 74 2b 2b 29 73 28 69 5b 74 5d 2c 6e 29 7d 28 65 2c 74 29 3b 66 6f 72 28 76 61 72 20 69 3d 30 2c 61 3d 74 2e 6c 65 6e 67 74 68 3b 69 3c 61 3b 69 2b 2b 29 7b 76 61 72 20 6f 3d 74 5b 69 5d 2e 75 64 2c 72 3d 5b 6f 5d 3b 6e 26 26 43 2e 61 2e 4e 62 28 72 2c 6e 29 2c 43 2e 61 61 2e 62 64 Data Ascii: t=[];!function s(e,n){if(e)if(8==e.nodeType)null!=(t=C.aa.Uc(e.nodeValue))&&n.push({ud:e,Kd:t});else if(1==e.nodeType)for(var t=0,i=e.childNodes,a=i.length;t<a;t++)s(i[t],n)}(e,t);for(var i=0,a=t.length;i<a;i++){var o=t[i].ud,r=[o];n&&C.a.Nb(r,n),C.aa.bd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.16	49787	3.17.16.61	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:42 UTC	717	OUT	GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1 Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.nuriapsicologia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
2024-11-05 20:18:43 UTC	970	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 05 Nov 2024 20:18:42 GMT Content-Type: application/x-javascript Content-Length: 190152 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 19479535 Cache-Control: public, max-age=31536000 Content-MD5: wegr9xrdYirQ87+FcvY0/A== Etag: 0x8DB5D44A2CEB430 Last-Modified: Thu, 25 May 2023 17:22:37 GMT Vary: Accept-Encoding, Cookie X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: aaa781e7-f01e-0024-7095-7e671d000000 x-ms-version: 2009-09-19 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Set-Cookie: session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I; Domain=nuriapsicologia.com; HttpOnly; Path=/
2024-11-05 20:18:43 UTC	15414	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 74 65 6c 65 6d 65 74 72 79 5f 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 74 65 6c 65 6d 65 74 72 79 5f 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 5d 2c 5b 2c 2c 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 22 56 61 6c 75 65 4b 69 6e 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 65 7d 29 29 2c 6e 2e 64 28 74 2c 22 45 76 65 6e 74 4c 61 74 65 6e 63 79 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 61 7d 29 29 2c 6e 2e 64 28 74 2c 22 45 76 65 6e 74 50 65 72 73 69 73 74 65 6e 63 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 62 7d Data Ascii: (window.telemetry_webpackJsonp=window.telemetry_webpackJsonp\|\|[]).push([[2],[,,,function(e,t,n){"use strict";n.r(t),n.d(t,"ValueKind",(function(){return r.e})),n.d(t,"EventLatency",(function(){return r.a})),n.d(t,"EventPersistence",(function(){return r.b}
2024-11-05 20:18:43 UTC	16384	IN	Data Raw: 64 28 74 2c 22 43 6c 6f 75 64 45 78 74 4b 65 79 73 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 2e 62 7d 29 29 2c 6e 2e 64 28 74 2c 22 4c 6f 63 45 78 74 4b 65 79 73 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 2e 67 7d 29 29 3b 76 61 72 20 61 3d 6e 28 32 31 29 3b 6e 2e 64 28 74 2c 22 41 70 70 6c 69 63 61 74 69 6f 6e 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 61 7d 29 29 2c 6e 2e 64 28 74 2c 22 64 65 66 61 75 6c 74 46 6c 69 67 68 74 49 64 4e 61 6d 65 53 70 61 63 65 73 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 62 7d 29 29 3b 76 61 72 20 6f 3d 6e 28 32 37 29 3b 6e 2e 64 28 74 2c 22 43 6c 6f 75 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 2e Data Ascii: d(t,"CloudExtKeys",(function(){return i.b})),n.d(t,"LocExtKeys",(function(){return i.g}));var a=n(21);n.d(t,"Application",(function(){return a.a})),n.d(t,"defaultFlightIdNameSpaces",(function(){return a.b}));var o=n(27);n.d(t,"Cloud",(function(){return o.
2024-11-05 20:18:43 UTC	16384	IN	Data Raw: 72 6f 75 70 2c 63 3d 74 2e 69 64 2c 75 3d 74 2e 69 73 4d 61 6e 75 61 6c 2c 73 3d 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 4f 62 6a 65 63 74 28 53 2e 64 29 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 74 6f 49 6e 74 65 72 66 61 63 65 28 29 7d 29 29 7c 7c 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 28 65 3d 7b 76 65 72 3a 22 34 2e 30 22 7d 29 2e 65 78 63 65 70 74 69 6f 6e 73 3d 73 2c 65 2e 73 65 76 65 72 69 74 79 4c 65 76 65 6c 3d 61 2c 65 2e 70 72 6f 70 65 72 74 69 65 73 3d 72 2c 65 2e 6d 65 61 73 75 72 65 6d 65 6e 74 73 3d 69 2c 65 2e 70 72 6f 62 6c 65 6d 47 72 6f 75 70 3d 6f 2c 65 2e 69 64 3d 63 2c 65 2e 69 73 4d 61 6e 75 61 6c 3d 75 2c 65 7d 2c 65 2e 43 72 65 61 74 65 53 69 6d 70 6c 65 45 78 63 65 70 74 69 6f Data Ascii: roup,c=t.id,u=t.isManual,s=n instanceof Array&&Object(S.d)(n,(function(e){return e.toInterface()}))\|\|void 0;return(e={ver:"4.0"}).exceptions=s,e.severityLevel=a,e.properties=r,e.measurements=i,e.problemGroup=o,e.id=c,e.isManual=u,e},e.CreateSimpleExceptio
2024-11-05 20:18:43 UTC	16384	IN	Data Raw: 2c 72 29 7b 76 61 72 20 69 3d 74 2e 65 78 63 65 70 74 69 6f 6e 7c 7c 74 2e 65 72 72 6f 72 7c 7c 6e 65 77 20 45 72 72 6f 72 28 22 6e 6f 74 5f 73 70 65 63 69 66 69 65 64 22 29 2c 61 3d 65 65 28 6e 65 77 20 76 65 28 65 2e 64 69 61 67 4c 6f 67 28 29 2c 69 2c 74 2e 70 72 6f 70 65 72 74 69 65 73 7c 7c 6e 2c 74 2e 6d 65 61 73 75 72 65 6d 65 6e 74 73 2c 74 2e 73 65 76 65 72 69 74 79 4c 65 76 65 6c 2c 74 2e 69 64 29 2e 74 6f 49 6e 74 65 72 66 61 63 65 28 29 2c 76 65 2e 64 61 74 61 54 79 70 65 2c 76 65 2e 65 6e 76 65 6c 6f 70 65 54 79 70 65 2c 65 2e 64 69 61 67 4c 6f 67 28 29 2c 6e 2c 72 29 3b 65 2e 63 6f 72 65 2e 74 72 61 63 6b 28 61 29 7d 2c 65 2e 74 72 61 63 6b 45 78 63 65 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 74 26 26 21 74 2e 65 78 63 65 Data Ascii: ,r){var i=t.exception\|\|t.error\|\|new Error("not_specified"),a=ee(new ve(e.diagLog(),i,t.properties\|\|n,t.measurements,t.severityLevel,t.id).toInterface(),ve.dataType,ve.envelopeType,e.diagLog(),n,r);e.core.track(a)},e.trackException=function(t,n){t&&!t.exce
2024-11-05 20:18:43 UTC	16384	IN	Data Raw: 6d 65 22 2c 21 30 29 2c 72 2e 73 63 72 6f 6c 6c 44 65 70 74 68 3d 65 2e 73 63 72 6f 6c 6c 44 65 70 74 68 7c 7c 74 68 69 73 2e 5f 6d 61 78 53 63 72 6f 6c 6c 2e 76 2e 74 6f 53 74 72 69 6e 67 28 29 2b 22 2f 22 2b 69 2e 74 6f 53 74 72 69 6e 67 28 29 2c 72 2e 76 70 48 65 69 67 68 74 3d 64 74 28 29 2e 68 2c 72 2e 76 53 63 72 6f 6c 6c 4f 66 66 73 65 74 3d 65 2e 76 53 63 72 6f 6c 6c 4f 66 66 73 65 74 7c 7c 74 68 69 73 2e 5f 6d 61 78 53 63 72 6f 6c 6c 2e 76 2c 63 2e 76 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 28 62 2e 6e 29 28 29 2c 6f 3d 61 3f 61 2e 74 69 6d 69 6e 67 3a 6e 75 6c 6c 3b 6f 26 26 6f 2e 6c 6f 61 64 45 76 65 6e 74 53 74 61 72 74 26 26 6f 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 26 26 6f 2e 6c 6f 61 64 45 76 65 6e 74 53 74 61 72 74 3e 30 26 26 Data Ascii: me",!0),r.scrollDepth=e.scrollDepth\|\|this._maxScroll.v.toString()+"/"+i.toString(),r.vpHeight=dt().h,r.vScrollOffset=e.vScrollOffset\|\|this._maxScroll.v,c.v){var a=Object(b.n)(),o=a?a.timing:null;o&&o.loadEventStart&&o.navigationStart&&o.loadEventStart>0&&
2024-11-05 20:18:43 UTC	16384	IN	Data Raw: 59 6f 75 20 6d 75 73 74 20 70 72 6f 76 69 64 65 20 61 20 63 6f 6e 66 69 67 20 6f 62 6a 65 63 74 21 22 29 2c 6e 2e 63 68 61 6e 6e 65 6c 73 26 26 6e 2e 63 68 61 6e 6e 65 6c 73 2e 6c 65 6e 67 74 68 3e 30 29 7b 66 6f 72 28 76 61 72 20 75 3d 21 31 2c 73 3d 30 3b 73 3c 6e 2e 63 68 61 6e 6e 65 6c 73 5b 30 5d 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 69 66 28 6e 2e 63 68 61 6e 6e 65 6c 73 5b 30 5d 5b 73 5d 2e 69 64 65 6e 74 69 66 69 65 72 3d 3d 3d 69 2e 69 64 65 6e 74 69 66 69 65 72 29 7b 75 3d 21 30 3b 62 72 65 61 6b 7d 75 7c 7c 6e 2e 63 68 61 6e 6e 65 6c 73 5b 30 5d 2e 70 75 73 68 28 69 29 7d 65 6c 73 65 20 6e 2e 63 68 61 6e 6e 65 6c 73 3d 5b 5b 69 5d 5d 3b 76 61 72 20 6c 3d 6e 2e 65 78 74 65 6e 73 69 6f 6e 43 6f 6e 66 69 67 3d 6e 2e 65 78 74 65 6e 73 69 6f 6e 43 6f Data Ascii: You must provide a config object!"),n.channels&&n.channels.length>0){for(var u=!1,s=0;s<n.channels[0].length;s++)if(n.channels[0][s].identifier===i.identifier){u=!0;break}u\|\|n.channels[0].push(i)}else n.channels=[[i]];var l=n.extensionConfig=n.extensionCo
2024-11-05 20:18:43 UTC	16384	IN	Data Raw: 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 44 61 74 65 5d 22 21 3d 3d 4f 5b 61 2e 63 5d 28 65 29 29 7d 76 61 72 20 55 3d 67 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 21 3d 3d 4f 5b 61 2e 63 5d 28 65 29 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 56 28 65 29 7b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 45 72 72 6f 72 5d 22 21 3d 3d 4f 5b 61 2e 63 5d 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 72 65 74 75 72 6e 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 29 7b 72 65 74 75 72 6e 22 62 6f Data Ascii: (!e\|\|"[object Date]"!==O[a.c](e))}var U=g\|\|function(e){return!(!e\|\|"[object Array]"!==O[a.c](e))};function V(e){return!(!e\|\|"[object Error]"!==O[a.c](e))}function F(e){return"string"==typeof e}function B(e){return"number"==typeof e}function H(e){return"bo
2024-11-05 20:18:43 UTC	16384	IN	Data Raw: 45 76 74 73 22 2c 65 7d 28 29 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 74 68 69 73 2e 63 74 78 3d 7b 7d 2c 4f 62 6a 65 63 74 28 72 2e 61 29 28 65 2c 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 63 72 65 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 75 28 65 2c 74 2c 6e 29 7d 2c 65 2e 66 69 72 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 28 65 5b 69 2e 64 5d 28 29 2c 74 26 26 4f 62 6a 65 63 74 28 61 2e 70 29 28 74 5b 6f 2e 6d 5d 29 26 26 74 5b 6f 2e 6d 5d 28 65 29 29 7d 2c 65 5b 69 2e 4b 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 74 26 26 28 28 65 2e 63 74 78 3d 65 2e 63 74 78 7c 7c 7b 7d 29 5b 74 5d 3d 6e 29 7d 2c 65 5b 69 2e 6b 5d 3d 66 75 Data Ascii: Evts",e}(),s=function(){function e(t){this.ctx={},Object(r.a)(e,this,(function(e){e.create=function(e,t,n){return new u(e,t,n)},e.fire=function(e){e&&(e[i.d](),t&&Object(a.p)(t[o.m])&&t[o.m](e))},e[i.K]=function(t,n){t&&((e.ctx=e.ctx\|\|{})[t]=n)},e[i.k]=fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.16	49788	3.17.16.61	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:44 UTC	758	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1 Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.nuriapsicologia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
2024-11-05 20:18:44 UTC	969	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 05 Nov 2024 20:18:44 GMT Content-Type: application/x-javascript Content-Length: 406986 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2401924 Cache-Control: public, max-age=31536000 Content-MD5: LT++1t3XGfzBv7UAthL87A== Etag: 0x8DCBD52F37806EC Last-Modified: Thu, 15 Aug 2024 17:51:54 GMT Vary: Accept-Encoding, Cookie X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 65922266-e01e-001d-5be7-19c790000000 x-ms-version: 2009-09-19 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Set-Cookie: session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I; Domain=nuriapsicologia.com; HttpOnly; Path=/
2024-11-05 20:18:44 UTC	15415	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-11-05 20:18:44 UTC	16384	IN	Data Raw: 63 74 22 3b 76 61 72 20 6e 3d 72 28 36 35 36 29 2c 6f 3d 72 28 35 34 34 29 2c 69 3d 72 28 35 35 33 29 2c 73 3d 72 28 38 31 38 29 3b 74 2e 65 78 70 6f 72 74 73 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 28 22 5f 5f 70 72 6f 74 6f 5f 5f 22 69 6e 7b 7d 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 65 3d 21 31 2c 72 3d 7b 7d 3b 74 72 79 7b 28 74 3d 6e 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 5f 5f 70 72 6f 74 6f 5f 5f 22 2c 22 73 65 74 22 29 29 28 72 2c 5b 5d 29 2c 65 3d 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 7d 63 61 74 63 68 28 75 29 7b 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 29 7b 72 65 74 75 72 6e 20 69 28 72 29 2c 73 28 6e 29 2c 6f 28 72 29 3f 28 65 3f 74 28 72 2c 6e Data Ascii: ct";var n=r(656),o=r(544),i=r(553),s=r(818);t.exports=Object.setPrototypeOf\|\|("__proto__"in{}?function(){var t,e=!1,r={};try{(t=n(Object.prototype,"__proto__","set"))(r,[]),e=r instanceof Array}catch(u){}return function(r,n){return i(r),s(n),o(r)?(e?t(r,n
2024-11-05 20:18:45 UTC	16384	IN	Data Raw: 2c 7b 6b 65 79 3a 22 77 61 6c 6b 43 6f 6d 6d 65 6e 74 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 77 61 6c 6b 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 69 66 28 22 63 6f 6d 6d 65 6e 74 22 3d 3d 3d 65 2e 74 79 70 65 29 72 65 74 75 72 6e 20 74 28 65 2c 72 29 7d 29 29 7d 7d 2c 7b 6b 65 79 3a 22 77 61 6c 6b 44 65 63 6c 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 65 3f 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 3f 74 68 69 73 2e 77 61 6c 6b 28 28 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 29 7b 69 66 28 22 64 65 63 6c 22 3d 3d 3d 72 2e 74 79 70 65 26 26 74 2e 74 65 73 74 28 72 2e 70 72 6f 70 29 29 72 65 74 75 72 6e 20 65 28 72 2c 6e 29 7d 29 29 3a Data Ascii: ,{key:"walkComments",value:function(t){return this.walk((function(e,r){if("comment"===e.type)return t(e,r)}))}},{key:"walkDecls",value:function(t,e){return e?t instanceof RegExp?this.walk((function(r,n){if("decl"===r.type&&t.test(r.prop))return e(r,n)})):
2024-11-05 20:18:45 UTC	16384	IN	Data Raw: 42 75 66 66 65 72 28 65 29 29 7b 76 61 72 20 72 3d 30 7c 70 28 65 2e 6c 65 6e 67 74 68 29 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 28 74 3d 75 28 74 2c 72 29 29 2e 6c 65 6e 67 74 68 7c 7c 65 2e 63 6f 70 79 28 74 2c 30 2c 30 2c 72 29 2c 74 7d 69 66 28 65 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 26 26 65 2e 62 75 66 66 65 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 7c 7c 22 6c 65 6e 67 74 68 22 69 6e 20 65 29 72 65 74 75 72 6e 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 2e 6c 65 6e 67 74 68 7c 7c 28 6e 3d 65 2e 6c 65 6e 67 74 68 29 21 3d 6e 3f 75 28 74 2c 30 29 3a 68 28 74 2c 65 29 3b 69 66 28 22 42 75 66 66 65 72 22 3d 3d 3d 65 2e 74 79 70 65 26 26 69 28 65 Data Ascii: Buffer(e)){var r=0\|p(e.length);return 0===(t=u(t,r)).length\|\|e.copy(t,0,0,r),t}if(e){if("undefined"!=typeof ArrayBuffer&&e.buffer instanceof ArrayBuffer\|\|"length"in e)return"number"!=typeof e.length\|\|(n=e.length)!=n?u(t,0):h(t,e);if("Buffer"===e.type&&i(e
2024-11-05 20:18:45 UTC	16384	IN	Data Raw: 26 28 6e 3d 74 2e 6c 65 6e 67 74 68 2d 65 2b 72 29 3b 76 61 72 20 6f 2c 69 3d 6e 2d 72 3b 69 66 28 74 68 69 73 3d 3d 3d 74 26 26 72 3c 65 26 26 65 3c 6e 29 66 6f 72 28 6f 3d 69 2d 31 3b 6f 3e 3d 30 3b 2d 2d 6f 29 74 5b 6f 2b 65 5d 3d 74 68 69 73 5b 6f 2b 72 5d 3b 65 6c 73 65 20 69 66 28 69 3c 31 65 33 7c 7c 21 61 2e 54 59 50 45 44 5f 41 52 52 41 59 5f 53 55 50 50 4f 52 54 29 66 6f 72 28 6f 3d 30 3b 6f 3c 69 3b 2b 2b 6f 29 74 5b 6f 2b 65 5d 3d 74 68 69 73 5b 6f 2b 72 5d 3b 65 6c 73 65 20 55 69 6e 74 38 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 2e 63 61 6c 6c 28 74 2c 74 68 69 73 2e 73 75 62 61 72 72 61 79 28 72 2c 72 2b 69 29 2c 65 29 3b 72 65 74 75 72 6e 20 69 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e Data Ascii: &(n=t.length-e+r);var o,i=n-r;if(this===t&&r<e&&e<n)for(o=i-1;o>=0;--o)t[o+e]=this[o+r];else if(i<1e3\|\|!a.TYPED_ARRAY_SUPPORT)for(o=0;o<i;++o)t[o+e]=this[o+r];else Uint8Array.prototype.set.call(t,this.subarray(r,r+i),e);return i},a.prototype.fill=function
2024-11-05 20:18:45 UTC	16384	IN	Data Raw: 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 44 65 72 69 76 65 64 20 63 6f 6e 73 74 72 75 63 74 6f 72 73 20 6d 61 79 20 6f 6e 6c 79 20 72 65 74 75 72 6e 20 6f 62 6a 65 63 74 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 74 7d 28 74 29 7d 28 74 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 74 3d 21 42 6f 6f Data Ascii: ;if(void 0!==e)throw new TypeError("Derived constructors may only return object or undefined");return function(t){if(void 0===t)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return t}(t)}(t,function(){try{var t=!Boo
2024-11-05 20:18:45 UTC	16384	IN	Data Raw: 69 63 74 22 3b 76 61 72 20 6e 3b 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 2c 65 5b 22 64 65 66 61 75 6c 74 22 5d 3d 76 6f 69 64 20 30 3b 76 61 72 20 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 76 61 72 20 72 3b 72 65 74 75 72 6e 28 72 3d 74 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 7c 7c 74 68 69 73 29 2e 74 79 70 65 3d 22 64 65 63 6c 22 2c 72 7d 72 65 74 75 72 6e 20 72 3d 74 2c 28 65 3d 6e 29 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 72 2e 70 72 6f 74 6f 74 79 70 65 29 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 65 2c 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 72 2c 6e 7d 28 28 28 6e 3d 72 28 37 32 37 29 29 26 26 6e 2e 5f 5f 65 73 4d Data Ascii: ict";var n;e.__esModule=!0,e["default"]=void 0;var o=function(t){var e,r;function n(e){var r;return(r=t.call(this,e)\|\|this).type="decl",r}return r=t,(e=n).prototype=Object.create(r.prototype),e.prototype.constructor=e,e.__proto__=r,n}(((n=r(727))&&n.__esM
2024-11-05 20:18:45 UTC	16384	IN	Data Raw: 20 72 3f 61 28 65 2c 72 28 74 29 29 3a 65 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 65 78 70 6f 72 74 73 3d 5b 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 2c 22 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 22 2c 22 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 22 2c 22 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 22 2c 22 74 6f 4c 6f 63 61 6c 65 53 74 72 69 6e 67 22 2c 22 74 6f 53 74 72 69 6e 67 22 2c 22 76 61 6c 75 65 4f 66 22 5d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 7b 7d 3b 6e 5b 72 28 35 34 36 29 28 22 74 6f 53 74 72 69 6e 67 54 61 67 22 29 5d 3d 22 7a 22 2c 74 2e 65 78 70 6f 72 74 73 3d 22 5b 6f 62 6a 65 63 74 20 7a 5d Data Ascii: r?a(e,r(t)):e}},function(t,e,r){"use strict";t.exports=["constructor","hasOwnProperty","isPrototypeOf","propertyIsEnumerable","toLocaleString","toString","valueOf"]},function(t,e,r){"use strict";var n={};n[r(546)("toStringTag")]="z",t.exports="[object z]
2024-11-05 20:18:45 UTC	16384	IN	Data Raw: 65 74 75 72 6e 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 74 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 74 7d 29 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 65 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6e 3d 65 5b 72 5d 3b 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 6e 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 6e 26 26 28 6e 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 Data Ascii: eturn t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t})(t)}function o(t,e){for(var r=0;r<e.length;r++){var n=e[r];n.enumerable=n.enumerable\|\|!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProper
2024-11-05 20:18:45 UTC	16384	IN	Data Raw: 2e 6d 61 70 2e 69 6e 6c 69 6e 65 7c 7c 28 6f 2e 6d 61 70 2e 69 6e 6c 69 6e 65 3d 21 31 29 2c 6f 2e 6d 61 70 2e 70 72 65 76 3d 72 2e 6d 61 70 29 3b 65 6c 73 65 7b 76 61 72 20 61 3d 75 5b 22 64 65 66 61 75 6c 74 22 5d 3b 6f 2e 73 79 6e 74 61 78 26 26 28 61 3d 6f 2e 73 79 6e 74 61 78 2e 70 61 72 73 65 29 2c 6f 2e 70 61 72 73 65 72 26 26 28 61 3d 6f 2e 70 61 72 73 65 72 29 2c 61 2e 70 61 72 73 65 26 26 28 61 3d 61 2e 70 61 72 73 65 29 3b 74 72 79 7b 69 3d 61 28 72 2c 6f 29 7d 63 61 74 63 68 28 63 29 7b 74 68 69 73 2e 65 72 72 6f 72 3d 63 7d 7d 74 68 69 73 2e 72 65 73 75 6c 74 3d 6e 65 77 20 73 5b 22 64 65 66 61 75 6c 74 22 5d 28 65 2c 69 2c 6f 29 7d 76 61 72 20 65 2c 72 2c 61 2c 6c 3d 74 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 6c 2e 77 61 72 6e Data Ascii: .map.inline\|\|(o.map.inline=!1),o.map.prev=r.map);else{var a=u["default"];o.syntax&&(a=o.syntax.parse),o.parser&&(a=o.parser),a.parse&&(a=a.parse);try{i=a(r,o)}catch(c){this.error=c}}this.result=new s["default"](e,i,o)}var e,r,a,l=t.prototype;return l.warn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.16	49789	3.17.16.61	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:44 UTC	865	OUT	GET /Prefetch/Prefetch.aspx HTTP/1.1 Host: 706f7274616c2e6d6963726f736f66746f6e6c696e652e636f6d.nuriapsicologia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://login.nuriapsicologia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
2024-11-05 20:18:45 UTC	767	IN	HTTP/1.1 404 NOT FOUND Server: nginx/1.18.0 (Ubuntu) Date: Tue, 05 Nov 2024 20:18:45 GMT Content-Type: text/html Content-Length: 4017 Connection: close Cache-Control: no-store, no-cache x-ms-correlation-id: 4bd604ab-d34b-4558-8ae8-301f6a3af01a X-UA-Compatible: IE=Edge X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 8CF7515CF9214B128F793D1409B812A3 Ref B: CH1AA2020618049 Ref C: 2024-11-05T20:18:44Z Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Set-Cookie: s.SessID=bf196d2f-a402-4c3c-9b0f-2952300b9be4; Secure; Path=/ Set-Cookie: x-portal-routekey=cus; Secure; Path=/ Vary: Cookie Set-Cookie: session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I; Domain=nuriapsicologia.com; HttpOnly; Path=/
2024-11-05 20:18:45 UTC	4017	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 46 69 6c Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>404 - Fil

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.16	49790	3.17.16.61	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:46 UTC	574	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1 Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
2024-11-05 20:18:46 UTC	969	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 05 Nov 2024 20:18:46 GMT Content-Type: application/x-javascript Content-Length: 406986 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2401926 Cache-Control: public, max-age=31536000 Content-MD5: LT++1t3XGfzBv7UAthL87A== Etag: 0x8DCBD52F37806EC Last-Modified: Thu, 15 Aug 2024 17:51:54 GMT Vary: Accept-Encoding, Cookie X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 65922266-e01e-001d-5be7-19c790000000 x-ms-version: 2009-09-19 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Set-Cookie: session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I; Domain=nuriapsicologia.com; HttpOnly; Path=/
2024-11-05 20:18:46 UTC	15415	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-11-05 20:18:46 UTC	16384	IN	Data Raw: 63 74 22 3b 76 61 72 20 6e 3d 72 28 36 35 36 29 2c 6f 3d 72 28 35 34 34 29 2c 69 3d 72 28 35 35 33 29 2c 73 3d 72 28 38 31 38 29 3b 74 2e 65 78 70 6f 72 74 73 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 28 22 5f 5f 70 72 6f 74 6f 5f 5f 22 69 6e 7b 7d 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 65 3d 21 31 2c 72 3d 7b 7d 3b 74 72 79 7b 28 74 3d 6e 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 5f 5f 70 72 6f 74 6f 5f 5f 22 2c 22 73 65 74 22 29 29 28 72 2c 5b 5d 29 2c 65 3d 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 7d 63 61 74 63 68 28 75 29 7b 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 29 7b 72 65 74 75 72 6e 20 69 28 72 29 2c 73 28 6e 29 2c 6f 28 72 29 3f 28 65 3f 74 28 72 2c 6e Data Ascii: ct";var n=r(656),o=r(544),i=r(553),s=r(818);t.exports=Object.setPrototypeOf\|\|("__proto__"in{}?function(){var t,e=!1,r={};try{(t=n(Object.prototype,"__proto__","set"))(r,[]),e=r instanceof Array}catch(u){}return function(r,n){return i(r),s(n),o(r)?(e?t(r,n
2024-11-05 20:18:46 UTC	16384	IN	Data Raw: 2c 7b 6b 65 79 3a 22 77 61 6c 6b 43 6f 6d 6d 65 6e 74 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 77 61 6c 6b 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 69 66 28 22 63 6f 6d 6d 65 6e 74 22 3d 3d 3d 65 2e 74 79 70 65 29 72 65 74 75 72 6e 20 74 28 65 2c 72 29 7d 29 29 7d 7d 2c 7b 6b 65 79 3a 22 77 61 6c 6b 44 65 63 6c 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 65 3f 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 3f 74 68 69 73 2e 77 61 6c 6b 28 28 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 29 7b 69 66 28 22 64 65 63 6c 22 3d 3d 3d 72 2e 74 79 70 65 26 26 74 2e 74 65 73 74 28 72 2e 70 72 6f 70 29 29 72 65 74 75 72 6e 20 65 28 72 2c 6e 29 7d 29 29 3a Data Ascii: ,{key:"walkComments",value:function(t){return this.walk((function(e,r){if("comment"===e.type)return t(e,r)}))}},{key:"walkDecls",value:function(t,e){return e?t instanceof RegExp?this.walk((function(r,n){if("decl"===r.type&&t.test(r.prop))return e(r,n)})):
2024-11-05 20:18:46 UTC	16384	IN	Data Raw: 42 75 66 66 65 72 28 65 29 29 7b 76 61 72 20 72 3d 30 7c 70 28 65 2e 6c 65 6e 67 74 68 29 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 28 74 3d 75 28 74 2c 72 29 29 2e 6c 65 6e 67 74 68 7c 7c 65 2e 63 6f 70 79 28 74 2c 30 2c 30 2c 72 29 2c 74 7d 69 66 28 65 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 26 26 65 2e 62 75 66 66 65 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 7c 7c 22 6c 65 6e 67 74 68 22 69 6e 20 65 29 72 65 74 75 72 6e 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 2e 6c 65 6e 67 74 68 7c 7c 28 6e 3d 65 2e 6c 65 6e 67 74 68 29 21 3d 6e 3f 75 28 74 2c 30 29 3a 68 28 74 2c 65 29 3b 69 66 28 22 42 75 66 66 65 72 22 3d 3d 3d 65 2e 74 79 70 65 26 26 69 28 65 Data Ascii: Buffer(e)){var r=0\|p(e.length);return 0===(t=u(t,r)).length\|\|e.copy(t,0,0,r),t}if(e){if("undefined"!=typeof ArrayBuffer&&e.buffer instanceof ArrayBuffer\|\|"length"in e)return"number"!=typeof e.length\|\|(n=e.length)!=n?u(t,0):h(t,e);if("Buffer"===e.type&&i(e
2024-11-05 20:18:46 UTC	16384	IN	Data Raw: 26 28 6e 3d 74 2e 6c 65 6e 67 74 68 2d 65 2b 72 29 3b 76 61 72 20 6f 2c 69 3d 6e 2d 72 3b 69 66 28 74 68 69 73 3d 3d 3d 74 26 26 72 3c 65 26 26 65 3c 6e 29 66 6f 72 28 6f 3d 69 2d 31 3b 6f 3e 3d 30 3b 2d 2d 6f 29 74 5b 6f 2b 65 5d 3d 74 68 69 73 5b 6f 2b 72 5d 3b 65 6c 73 65 20 69 66 28 69 3c 31 65 33 7c 7c 21 61 2e 54 59 50 45 44 5f 41 52 52 41 59 5f 53 55 50 50 4f 52 54 29 66 6f 72 28 6f 3d 30 3b 6f 3c 69 3b 2b 2b 6f 29 74 5b 6f 2b 65 5d 3d 74 68 69 73 5b 6f 2b 72 5d 3b 65 6c 73 65 20 55 69 6e 74 38 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 2e 63 61 6c 6c 28 74 2c 74 68 69 73 2e 73 75 62 61 72 72 61 79 28 72 2c 72 2b 69 29 2c 65 29 3b 72 65 74 75 72 6e 20 69 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e Data Ascii: &(n=t.length-e+r);var o,i=n-r;if(this===t&&r<e&&e<n)for(o=i-1;o>=0;--o)t[o+e]=this[o+r];else if(i<1e3\|\|!a.TYPED_ARRAY_SUPPORT)for(o=0;o<i;++o)t[o+e]=this[o+r];else Uint8Array.prototype.set.call(t,this.subarray(r,r+i),e);return i},a.prototype.fill=function
2024-11-05 20:18:46 UTC	16384	IN	Data Raw: 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 44 65 72 69 76 65 64 20 63 6f 6e 73 74 72 75 63 74 6f 72 73 20 6d 61 79 20 6f 6e 6c 79 20 72 65 74 75 72 6e 20 6f 62 6a 65 63 74 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 74 7d 28 74 29 7d 28 74 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 74 3d 21 42 6f 6f Data Ascii: ;if(void 0!==e)throw new TypeError("Derived constructors may only return object or undefined");return function(t){if(void 0===t)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return t}(t)}(t,function(){try{var t=!Boo
2024-11-05 20:18:46 UTC	16384	IN	Data Raw: 69 63 74 22 3b 76 61 72 20 6e 3b 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 2c 65 5b 22 64 65 66 61 75 6c 74 22 5d 3d 76 6f 69 64 20 30 3b 76 61 72 20 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 76 61 72 20 72 3b 72 65 74 75 72 6e 28 72 3d 74 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 7c 7c 74 68 69 73 29 2e 74 79 70 65 3d 22 64 65 63 6c 22 2c 72 7d 72 65 74 75 72 6e 20 72 3d 74 2c 28 65 3d 6e 29 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 72 2e 70 72 6f 74 6f 74 79 70 65 29 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 65 2c 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 72 2c 6e 7d 28 28 28 6e 3d 72 28 37 32 37 29 29 26 26 6e 2e 5f 5f 65 73 4d Data Ascii: ict";var n;e.__esModule=!0,e["default"]=void 0;var o=function(t){var e,r;function n(e){var r;return(r=t.call(this,e)\|\|this).type="decl",r}return r=t,(e=n).prototype=Object.create(r.prototype),e.prototype.constructor=e,e.__proto__=r,n}(((n=r(727))&&n.__esM
2024-11-05 20:18:46 UTC	16384	IN	Data Raw: 20 72 3f 61 28 65 2c 72 28 74 29 29 3a 65 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 65 78 70 6f 72 74 73 3d 5b 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 2c 22 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 22 2c 22 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 22 2c 22 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 22 2c 22 74 6f 4c 6f 63 61 6c 65 53 74 72 69 6e 67 22 2c 22 74 6f 53 74 72 69 6e 67 22 2c 22 76 61 6c 75 65 4f 66 22 5d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 7b 7d 3b 6e 5b 72 28 35 34 36 29 28 22 74 6f 53 74 72 69 6e 67 54 61 67 22 29 5d 3d 22 7a 22 2c 74 2e 65 78 70 6f 72 74 73 3d 22 5b 6f 62 6a 65 63 74 20 7a 5d Data Ascii: r?a(e,r(t)):e}},function(t,e,r){"use strict";t.exports=["constructor","hasOwnProperty","isPrototypeOf","propertyIsEnumerable","toLocaleString","toString","valueOf"]},function(t,e,r){"use strict";var n={};n[r(546)("toStringTag")]="z",t.exports="[object z]
2024-11-05 20:18:46 UTC	16384	IN	Data Raw: 65 74 75 72 6e 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 74 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 74 7d 29 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 65 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6e 3d 65 5b 72 5d 3b 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 6e 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 6e 26 26 28 6e 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 Data Ascii: eturn t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t})(t)}function o(t,e){for(var r=0;r<e.length;r++){var n=e[r];n.enumerable=n.enumerable\|\|!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProper
2024-11-05 20:18:46 UTC	16384	IN	Data Raw: 2e 6d 61 70 2e 69 6e 6c 69 6e 65 7c 7c 28 6f 2e 6d 61 70 2e 69 6e 6c 69 6e 65 3d 21 31 29 2c 6f 2e 6d 61 70 2e 70 72 65 76 3d 72 2e 6d 61 70 29 3b 65 6c 73 65 7b 76 61 72 20 61 3d 75 5b 22 64 65 66 61 75 6c 74 22 5d 3b 6f 2e 73 79 6e 74 61 78 26 26 28 61 3d 6f 2e 73 79 6e 74 61 78 2e 70 61 72 73 65 29 2c 6f 2e 70 61 72 73 65 72 26 26 28 61 3d 6f 2e 70 61 72 73 65 72 29 2c 61 2e 70 61 72 73 65 26 26 28 61 3d 61 2e 70 61 72 73 65 29 3b 74 72 79 7b 69 3d 61 28 72 2c 6f 29 7d 63 61 74 63 68 28 63 29 7b 74 68 69 73 2e 65 72 72 6f 72 3d 63 7d 7d 74 68 69 73 2e 72 65 73 75 6c 74 3d 6e 65 77 20 73 5b 22 64 65 66 61 75 6c 74 22 5d 28 65 2c 69 2c 6f 29 7d 76 61 72 20 65 2c 72 2c 61 2c 6c 3d 74 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 6c 2e 77 61 72 6e Data Ascii: .map.inline\|\|(o.map.inline=!1),o.map.prev=r.map);else{var a=u["default"];o.syntax&&(a=o.syntax.parse),o.parser&&(a=o.parser),a.parse&&(a=a.parse);try{i=a(r,o)}catch(c){this.error=c}}this.result=new s["default"](e,i,o)}var e,r,a,l=t.prototype;return l.warn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.16	49792	3.17.16.61	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:46 UTC	756	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pidpdisambiguation_8e15caf4c90cec4857ee.js HTTP/1.1 Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.nuriapsicologia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
2024-11-05 20:18:46 UTC	967	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 05 Nov 2024 20:18:46 GMT Content-Type: application/x-javascript Content-Length: 7007 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 6690590 Cache-Control: public, max-age=31536000 Content-MD5: n6824/eT5oqDVI7uViKiIg== Etag: 0x8DCBD52F3CBE31D Last-Modified: Thu, 15 Aug 2024 17:51:55 GMT Vary: Accept-Encoding, Cookie X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 211aca94-601e-005b-09e6-f26df5000000 x-ms-version: 2009-09-19 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Set-Cookie: session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I; Domain=nuriapsicologia.com; HttpOnly; Path=/
2024-11-05 20:18:46 UTC	7007	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.16	49793	3.17.16.61	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:46 UTC	808	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.nuriapsicologia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
2024-11-05 20:18:46 UTC	918	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 05 Nov 2024 20:18:46 GMT Content-Type: image/gif Content-Length: 2672 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 6635502 Cache-Control: public, max-age=31536000 Content-MD5: Fm3lNHEmUlOrOkVt7+baIw== Etag: 0x8DB5C3F4982FD30 Last-Modified: Wed, 24 May 2023 10:11:48 GMT X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 7deb65d5-101e-00b5-7666-f3c7dc000000 x-ms-version: 2009-09-19 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Vary: Cookie Set-Cookie: session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I; Domain=nuriapsicologia.com; HttpOnly; Path=/
2024-11-05 20:18:46 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.16	49791	3.17.16.61	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:46 UTC	802	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.nuriapsicologia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
2024-11-05 20:18:46 UTC	918	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 05 Nov 2024 20:18:46 GMT Content-Type: image/gif Content-Length: 3620 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 3438703 Cache-Control: public, max-age=31536000 Content-MD5: tUCo5RgDcZLjLE/li/Lbqw== Etag: 0x8DB5C3F492F3EE5 Last-Modified: Wed, 24 May 2023 10:11:48 GMT X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 28e0e82f-601e-00ba-6379-102f52000000 x-ms-version: 2009-09-19 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Vary: Cookie Set-Cookie: session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I; Domain=nuriapsicologia.com; HttpOnly; Path=/
2024-11-05 20:18:46 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.16	49796	3.17.16.61	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:47 UTC	564	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
2024-11-05 20:18:47 UTC	918	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 05 Nov 2024 20:18:47 GMT Content-Type: image/gif Content-Length: 2672 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 6635503 Cache-Control: public, max-age=31536000 Content-MD5: Fm3lNHEmUlOrOkVt7+baIw== Etag: 0x8DB5C3F4982FD30 Last-Modified: Wed, 24 May 2023 10:11:48 GMT X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 7deb65d5-101e-00b5-7666-f3c7dc000000 x-ms-version: 2009-09-19 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Vary: Cookie Set-Cookie: session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I; Domain=nuriapsicologia.com; HttpOnly; Path=/
2024-11-05 20:18:47 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.16	49795	3.17.16.61	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:47 UTC	558	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
2024-11-05 20:18:47 UTC	918	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 05 Nov 2024 20:18:47 GMT Content-Type: image/gif Content-Length: 3620 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 3438704 Cache-Control: public, max-age=31536000 Content-MD5: tUCo5RgDcZLjLE/li/Lbqw== Etag: 0x8DB5C3F492F3EE5 Last-Modified: Wed, 24 May 2023 10:11:48 GMT X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 28e0e82f-601e-00ba-6379-102f52000000 x-ms-version: 2009-09-19 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Vary: Cookie Set-Cookie: session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I; Domain=nuriapsicologia.com; HttpOnly; Path=/
2024-11-05 20:18:47 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.16	49799	3.17.16.61	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:47 UTC	789	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.nuriapsicologia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
2024-11-05 20:18:47 UTC	922	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 05 Nov 2024 20:18:47 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 3690602 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Etag: 0x8D8731240E548EB Last-Modified: Sun, 18 Oct 2020 03:02:30 GMT X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: f22fb049-e01e-00f9-3c2f-0ec90e000000 x-ms-version: 2009-09-19 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Vary: Cookie Set-Cookie: session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I; Domain=nuriapsicologia.com; HttpOnly; Path=/
2024-11-05 20:18:47 UTC	15462	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-11-05 20:18:47 UTC	1712	IN	Data Raw: 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 Data Ascii: ( @{L"P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.16	49798	3.17.16.61	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:47 UTC	802	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.nuriapsicologia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
2024-11-05 20:18:47 UTC	957	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 05 Nov 2024 20:18:47 GMT Content-Type: image/svg+xml Content-Length: 1864 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 19479591 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Etag: 0x8DB5C3F466DE917 Last-Modified: Wed, 24 May 2023 10:11:43 GMT Vary: Accept-Encoding, Cookie X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 621a00fd-a01e-006d-6395-7ec71f000000 x-ms-version: 2009-09-19 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Set-Cookie: session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I; Domain=nuriapsicologia.com; HttpOnly; Path=/
2024-11-05 20:18:47 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.16	49797	3.17.16.61	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:47 UTC	572	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pidpdisambiguation_8e15caf4c90cec4857ee.js HTTP/1.1 Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
2024-11-05 20:18:47 UTC	967	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 05 Nov 2024 20:18:47 GMT Content-Type: application/x-javascript Content-Length: 7007 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 6690591 Cache-Control: public, max-age=31536000 Content-MD5: n6824/eT5oqDVI7uViKiIg== Etag: 0x8DCBD52F3CBE31D Last-Modified: Thu, 15 Aug 2024 17:51:55 GMT Vary: Accept-Encoding, Cookie X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 211aca94-601e-005b-09e6-f26df5000000 x-ms-version: 2009-09-19 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Set-Cookie: session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I; Domain=nuriapsicologia.com; HttpOnly; Path=/
2024-11-05 20:18:47 UTC	7007	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.16	49801	3.17.16.61	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:47 UTC	803	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.nuriapsicologia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
2024-11-05 20:18:47 UTC	957	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 05 Nov 2024 20:18:47 GMT Content-Type: image/svg+xml Content-Length: 3651 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 19479517 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Etag: 0x8DB5C3F495F4B8C Last-Modified: Wed, 24 May 2023 10:11:48 GMT Vary: Accept-Encoding, Cookie X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 718d206f-801e-007f-0e95-7e2139000000 x-ms-version: 2009-09-19 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Set-Cookie: session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I; Domain=nuriapsicologia.com; HttpOnly; Path=/
2024-11-05 20:18:47 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.16	49802	3.17.16.61	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:47 UTC	807	OUT	GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1 Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.nuriapsicologia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
2024-11-05 20:18:47 UTC	956	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 05 Nov 2024 20:18:47 GMT Content-Type: image/svg+xml Content-Length: 1378 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 7265025 Cache-Control: public, max-age=31536000 Content-MD5: b2jpiB3xj44lGrV9V4Yjmw== Etag: 0x8DB5C3F4A04A56D Last-Modified: Wed, 24 May 2023 10:11:49 GMT Vary: Accept-Encoding, Cookie X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 581926f3-a01e-0051-75ac-ed57a0000000 x-ms-version: 2009-09-19 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Set-Cookie: session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I; Domain=nuriapsicologia.com; HttpOnly; Path=/
2024-11-05 20:18:47 UTC	1378	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 23 65 36 65 36 65 36 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 63 69 72 63 6c 65 20 63 6c 61 73 73 3d 22 61 22 20 63 78 3d 22 32 34 22 20 63 79 3d 22 32 34 22 20 72 3d 22 32 34 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 33 32 2e 35 2c 31 34 41 31 2e 34 39 32 2c 31 2e 34 39 32 2c 30 2c 30 2c 31 2c 33 34 2c 31 35 2e 35 56 33 38 2e 35 41 31 2e 34 39 34 2c 31 2e 34 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:#e6e6e6;}.b{fill:#404040;}</style></defs><circle class="a" cx="24" cy="24" r="24"/><path class="b" d="M32.5,14A1.492,1.492,0,0,1,34,15.5V38.5A1.494,1.4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.16	49800	3.17.16.61	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:47 UTC	807	OUT	GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1 Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.nuriapsicologia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
2024-11-05 20:18:47 UTC	956	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 05 Nov 2024 20:18:47 GMT Content-Type: image/svg+xml Content-Length: 379 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 19479409 Cache-Control: public, max-age=31536000 Content-MD5: hHpCErmbkHbuOTKLJM0wrw== Etag: 0x8DB5C3F4A4E2B5D Last-Modified: Wed, 24 May 2023 10:11:50 GMT Vary: Accept-Encoding, Cookie X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: b2047e0f-a01e-00f9-2395-7e8c60000000 x-ms-version: 2009-09-19 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Set-Cookie: session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I; Domain=nuriapsicologia.com; HttpOnly; Path=/
2024-11-05 20:18:47 UTC	379	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 32 34 22 20 63 79 3d 22 32 34 22 20 72 3d 22 32 34 22 20 66 69 6c 6c 3d 22 23 65 36 65 36 65 36 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 33 2e 34 34 2c 33 36 68 31 2e 39 32 61 38 2e 36 34 2c 38 2e 36 34 2c 30 2c 31 2c 31 2c 31 37 2e 32 38 2c 30 68 31 2e 39 32 61 31 30 2e 35 37 33 2c 31 30 2e 35 37 33 2c 30 2c 30 2c 30 2d 36 2e 35 36 39 2d 39 2e 37 37 31 2c 37 2e 36 38 2c 37 2e 36 38 2c 30 2c 31 2c 30 2d 37 2e 39 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><circle cx="24" cy="24" r="24" fill="#e6e6e6"/><path d="M13.44,36h1.92a8.64,8.64,0,1,1,17.28,0h1.92a10.573,10.573,0,0,0-6.569-9.771,7.68,7.68,0,1,0-7.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.16	49803	3.17.16.61	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:48 UTC	563	OUT	GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1 Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
2024-11-05 20:18:48 UTC	956	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 05 Nov 2024 20:18:48 GMT Content-Type: image/svg+xml Content-Length: 1378 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 7265026 Cache-Control: public, max-age=31536000 Content-MD5: b2jpiB3xj44lGrV9V4Yjmw== Etag: 0x8DB5C3F4A04A56D Last-Modified: Wed, 24 May 2023 10:11:49 GMT Vary: Accept-Encoding, Cookie X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 581926f3-a01e-0051-75ac-ed57a0000000 x-ms-version: 2009-09-19 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Set-Cookie: session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I; Domain=nuriapsicologia.com; HttpOnly; Path=/
2024-11-05 20:18:48 UTC	1378	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 23 65 36 65 36 65 36 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 63 69 72 63 6c 65 20 63 6c 61 73 73 3d 22 61 22 20 63 78 3d 22 32 34 22 20 63 79 3d 22 32 34 22 20 72 3d 22 32 34 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 33 32 2e 35 2c 31 34 41 31 2e 34 39 32 2c 31 2e 34 39 32 2c 30 2c 30 2c 31 2c 33 34 2c 31 35 2e 35 56 33 38 2e 35 41 31 2e 34 39 34 2c 31 2e 34 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:#e6e6e6;}.b{fill:#404040;}</style></defs><circle class="a" cx="24" cy="24" r="24"/><path class="b" d="M32.5,14A1.492,1.492,0,0,1,34,15.5V38.5A1.494,1.4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.16	49805	3.17.16.61	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:48 UTC	558	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
2024-11-05 20:18:48 UTC	957	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 05 Nov 2024 20:18:48 GMT Content-Type: image/svg+xml Content-Length: 1864 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 19479592 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Etag: 0x8DB5C3F466DE917 Last-Modified: Wed, 24 May 2023 10:11:43 GMT Vary: Accept-Encoding, Cookie X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 621a00fd-a01e-006d-6395-7ec71f000000 x-ms-version: 2009-09-19 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Set-Cookie: session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I; Domain=nuriapsicologia.com; HttpOnly; Path=/
2024-11-05 20:18:48 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.16	49804	3.17.16.61	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:48 UTC	559	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
2024-11-05 20:18:48 UTC	957	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 05 Nov 2024 20:18:48 GMT Content-Type: image/svg+xml Content-Length: 3651 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 19479518 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Etag: 0x8DB5C3F495F4B8C Last-Modified: Wed, 24 May 2023 10:11:48 GMT Vary: Accept-Encoding, Cookie X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 718d206f-801e-007f-0e95-7e2139000000 x-ms-version: 2009-09-19 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Set-Cookie: session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I; Domain=nuriapsicologia.com; HttpOnly; Path=/
2024-11-05 20:18:48 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.16	49806	3.17.16.61	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:48 UTC	563	OUT	GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1 Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
2024-11-05 20:18:48 UTC	956	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 05 Nov 2024 20:18:48 GMT Content-Type: image/svg+xml Content-Length: 379 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 19479410 Cache-Control: public, max-age=31536000 Content-MD5: hHpCErmbkHbuOTKLJM0wrw== Etag: 0x8DB5C3F4A4E2B5D Last-Modified: Wed, 24 May 2023 10:11:50 GMT Vary: Accept-Encoding, Cookie X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: b2047e0f-a01e-00f9-2395-7e8c60000000 x-ms-version: 2009-09-19 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Set-Cookie: session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I; Domain=nuriapsicologia.com; HttpOnly; Path=/
2024-11-05 20:18:48 UTC	379	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 32 34 22 20 63 79 3d 22 32 34 22 20 72 3d 22 32 34 22 20 66 69 6c 6c 3d 22 23 65 36 65 36 65 36 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 33 2e 34 34 2c 33 36 68 31 2e 39 32 61 38 2e 36 34 2c 38 2e 36 34 2c 30 2c 31 2c 31 2c 31 37 2e 32 38 2c 30 68 31 2e 39 32 61 31 30 2e 35 37 33 2c 31 30 2e 35 37 33 2c 30 2c 30 2c 30 2d 36 2e 35 36 39 2d 39 2e 37 37 31 2c 37 2e 36 38 2c 37 2e 36 38 2c 30 2c 31 2c 30 2d 37 2e 39 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><circle cx="24" cy="24" r="24" fill="#e6e6e6"/><path d="M13.44,36h1.92a8.64,8.64,0,1,1,17.28,0h1.92a10.573,10.573,0,0,0-6.569-9.771,7.68,7.68,0,1,0-7.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.16	49807	3.17.16.61	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:48 UTC	545	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
2024-11-05 20:18:48 UTC	922	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 05 Nov 2024 20:18:48 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 3690603 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Etag: 0x8D8731240E548EB Last-Modified: Sun, 18 Oct 2020 03:02:30 GMT X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: f22fb049-e01e-00f9-3c2f-0ec90e000000 x-ms-version: 2009-09-19 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Vary: Cookie Set-Cookie: session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I; Domain=nuriapsicologia.com; HttpOnly; Path=/
2024-11-05 20:18:48 UTC	15462	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-11-05 20:18:48 UTC	1712	IN	Data Raw: 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 Data Ascii: ( @{L"P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.16	49808	3.17.16.61	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:51 UTC	747	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_ppassword_89db715e3340a2e8ecd8.js HTTP/1.1 Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.nuriapsicologia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
2024-11-05 20:18:51 UTC	968	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 05 Nov 2024 20:18:51 GMT Content-Type: application/x-javascript Content-Length: 26668 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 7020691 Cache-Control: public, max-age=31536000 Content-MD5: SMJ5Ru2UEObX0bOUP7nOGw== Etag: 0x8DCBD52F3E2FAB3 Last-Modified: Thu, 15 Aug 2024 17:51:55 GMT Vary: Accept-Encoding, Cookie X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 58049fe0-f01e-008c-43e5-efe969000000 x-ms-version: 2009-09-19 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Set-Cookie: session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I; Domain=nuriapsicologia.com; HttpOnly; Path=/
2024-11-05 20:18:51 UTC	15416	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-11-05 20:18:51 UTC	11252	IN	Data Raw: 6b 6f 20 2d 2d 5c 78 33 65 5c 6e 5c 6e 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 3a 20 75 6e 73 61 66 65 5f 70 61 67 65 44 65 73 63 72 69 70 74 69 6f 6e 20 2d 2d 5c 78 33 65 5c 6e 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 20 74 65 78 74 2d 62 6f 64 79 22 3e 5c 6e 20 20 20 20 3c 64 69 76 20 69 64 3d 22 70 61 73 73 77 6f 72 64 44 65 73 63 22 20 63 6c 61 73 73 3d 22 77 72 61 70 2d 63 6f 6e 74 65 6e 74 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 74 65 78 74 3a 20 75 6e 73 61 66 65 5f 70 61 67 65 44 65 73 63 72 69 70 74 69 6f 6e 22 3e 3c 2f 64 69 76 3e 5c 6e 3c 2f 64 69 76 3e 5c 6e 5c 78 33 63 21 2d 2d 20 2f 6b 6f 20 2d 2d 5c 78 33 65 5c 6e 5c 6e 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 22 3e 5c 6e 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d Data Ascii: ko --\x3e\n\n\x3c!-- ko if: unsafe_pageDescription --\x3e\n<div class="row text-body">\n <div id="passwordDesc" class="wrap-content" data-bind="text: unsafe_pageDescription"></div>\n</div>\n\x3c!-- /ko --\x3e\n\n<div class="row">\n <div class="form-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.16	49810	3.17.16.61	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:52 UTC	563	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_ppassword_89db715e3340a2e8ecd8.js HTTP/1.1 Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
2024-11-05 20:18:52 UTC	968	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 05 Nov 2024 20:18:52 GMT Content-Type: application/x-javascript Content-Length: 26668 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 7020692 Cache-Control: public, max-age=31536000 Content-MD5: SMJ5Ru2UEObX0bOUP7nOGw== Etag: 0x8DCBD52F3E2FAB3 Last-Modified: Thu, 15 Aug 2024 17:51:55 GMT Vary: Accept-Encoding, Cookie X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 58049fe0-f01e-008c-43e5-efe969000000 x-ms-version: 2009-09-19 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Set-Cookie: session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I; Domain=nuriapsicologia.com; HttpOnly; Path=/
2024-11-05 20:18:52 UTC	15416	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-11-05 20:18:52 UTC	11252	IN	Data Raw: 6b 6f 20 2d 2d 5c 78 33 65 5c 6e 5c 6e 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 3a 20 75 6e 73 61 66 65 5f 70 61 67 65 44 65 73 63 72 69 70 74 69 6f 6e 20 2d 2d 5c 78 33 65 5c 6e 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 20 74 65 78 74 2d 62 6f 64 79 22 3e 5c 6e 20 20 20 20 3c 64 69 76 20 69 64 3d 22 70 61 73 73 77 6f 72 64 44 65 73 63 22 20 63 6c 61 73 73 3d 22 77 72 61 70 2d 63 6f 6e 74 65 6e 74 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 74 65 78 74 3a 20 75 6e 73 61 66 65 5f 70 61 67 65 44 65 73 63 72 69 70 74 69 6f 6e 22 3e 3c 2f 64 69 76 3e 5c 6e 3c 2f 64 69 76 3e 5c 6e 5c 78 33 63 21 2d 2d 20 2f 6b 6f 20 2d 2d 5c 78 33 65 5c 6e 5c 6e 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 22 3e 5c 6e 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d Data Ascii: ko --\x3e\n\n\x3c!-- ko if: unsafe_pageDescription --\x3e\n<div class="row text-body">\n <div id="passwordDesc" class="wrap-content" data-bind="text: unsafe_pageDescription"></div>\n</div>\n\x3c!-- /ko --\x3e\n\n<div class="row">\n <div class="form-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.16	49811	3.17.16.61	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:52 UTC	799	OUT	GET /shared/1.0/content/images/arrow_left_43280e0ba671a1d8b5e34f1931c4fe4b.svg HTTP/1.1 Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.nuriapsicologia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
2024-11-05 20:18:52 UTC	955	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 05 Nov 2024 20:18:52 GMT Content-Type: image/svg+xml Content-Length: 513 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 7265030 Cache-Control: public, max-age=31536000 Content-MD5: TjUQkZ0p0Y7rbj6LJofS9Q== Etag: 0x8DB5C3F45F17088 Last-Modified: Wed, 24 May 2023 10:11:42 GMT Vary: Accept-Encoding, Cookie X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: b3353729-401e-001f-60ac-ed3263000000 x-ms-version: 2009-09-19 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Set-Cookie: session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I; Domain=nuriapsicologia.com; HttpOnly; Path=/
2024-11-05 20:18:52 UTC	513	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 31 38 2c 31 31 2e 35 37 38 76 2e 38 34 34 48 37 2e 36 31 37 6c 33 2e 39 32 31 2c 33 2e 39 32 38 2d 2e 35 39 34 2e 35 39 34 4c 36 2c 31 32 6c 34 2e 39 34 34 2d 34 2e 39 34 34 2e 35 39 34 2e 35 39 34 4c 37 2e 36 31 37 2c 31 31 2e 35 37 38 5a 22 20 66 69 6c 6c 3d 22 23 34 30 34 30 34 30 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 30 2e 39 34 34 2c 37 2e 30 35 36 6c 2e 35 39 34 2e 35 39 34 4c 37 2e 36 31 37 2c 31 31 2e 35 37 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><title>assets</title><path d="M18,11.578v.844H7.617l3.921,3.928-.594.594L6,12l4.944-4.944.594.594L7.617,11.578Z" fill="#404040"/><path d="M10.944,7.056l.594.594L7.617,11.57

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.16	49813	3.17.16.61	443	1776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-05 20:18:53 UTC	555	OUT	GET /shared/1.0/content/images/arrow_left_43280e0ba671a1d8b5e34f1931c4fe4b.svg HTTP/1.1 Host: 61616463646e2e6d736674617574682e6e6574.nuriapsicologia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vfff9080=3137332e3235342e3235302e3736; session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I
2024-11-05 20:18:53 UTC	955	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 05 Nov 2024 20:18:53 GMT Content-Type: image/svg+xml Content-Length: 513 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 7265031 Cache-Control: public, max-age=31536000 Content-MD5: TjUQkZ0p0Y7rbj6LJofS9Q== Etag: 0x8DB5C3F45F17088 Last-Modified: Wed, 24 May 2023 10:11:42 GMT Vary: Accept-Encoding, Cookie X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: b3353729-401e-001f-60ac-ed3263000000 x-ms-version: 2009-09-19 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Set-Cookie: session=RrU2rdqQpnzUPXOxjwFQdLk6i2gxyye247JaO-uHb_I; Domain=nuriapsicologia.com; HttpOnly; Path=/
2024-11-05 20:18:53 UTC	513	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 31 38 2c 31 31 2e 35 37 38 76 2e 38 34 34 48 37 2e 36 31 37 6c 33 2e 39 32 31 2c 33 2e 39 32 38 2d 2e 35 39 34 2e 35 39 34 4c 36 2c 31 32 6c 34 2e 39 34 34 2d 34 2e 39 34 34 2e 35 39 34 2e 35 39 34 4c 37 2e 36 31 37 2c 31 31 2e 35 37 38 5a 22 20 66 69 6c 6c 3d 22 23 34 30 34 30 34 30 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 30 2e 39 34 34 2c 37 2e 30 35 36 6c 2e 35 39 34 2e 35 39 34 4c 37 2e 36 31 37 2c 31 31 2e 35 37 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><title>assets</title><path d="M18,11.578v.844H7.617l3.921,3.928-.594.594L6,12l4.944-4.944.594.594L7.617,11.578Z" fill="#404040"/><path d="M10.944,7.056l.594.594L7.617,11.57

Target ID:	0
Start time:	15:16:47
Start date:	05/11/2024
Path:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" /eml "C:\Users\user\Desktop\Alliance Bank Central Texas Open Benefits Enrollment.eml"
Imagebase:	0x7e0000
File size:	34'446'744 bytes
MD5 hash:	91A5292942864110ED734005B7E005C0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	15:16:49
Start date:	05/11/2024
Path:	C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "F592870C-2BBB-4F71-A566-7B6E6FD595EF" "9DD1B28C-6468-440C-8076-5403197F9CC1" "6848" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx"
Imagebase:	0x7ff7bba50000
File size:	710'048 bytes
MD5 hash:	EC652BEDD90E089D9406AFED89A8A8BD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	15:17:44
Start date:	05/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\AAEDGQMI\Alliance Bank Central Texas Eligible Finance Insurance Benefits Open Enrollment Plan.shtml
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	11
Start time:	15:17:44
Start date:	05/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=1960,i,6219065820707316075,16662043819558454010,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may encode data to make the content of command and control traffic more difficult to detect. Command and control (C2) information can be encoded using a standard data encoding system. Use of data encoding may adhere to existing protocol specifications and includes use of ASCII, Unicode, Base64, MIME, or other binary-to-text and character encoding systems.Some data encoding systems may also result in data compression, such as gzip.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may steal data by exfiltrating it over a different protocol than that of the existing command and control channel. The data may also be sent to an alternate network location from the main command and control server.
Tactics:	Exfiltration
Data Sources:	Application Log: Application Log Content, Cloud Storage: Cloud Storage Access, Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Google Workspace, IaaS, Linux, macOS, Network, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Alliance Bank Central Texas Open Benefits Enrollment.eml

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\FORMS\FRMCACHE.DAT

C:\Users\user\AppData\Local\Microsoft\Office\16.0\AddInClassifierCache\OfficeSharedEntities.bin

C:\Users\user\AppData\Local\Microsoft\Office\16.0\AddInClassifierCache\OfficeSharedEntitiesUpdated.bin

C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\06395272-483E-4960-BC78-C46E1D2D8246

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-journal

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-shm

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-wal

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\AAEDGQMI\Alliance Bank Central Texas Eligible Finance Insurance Benefits Open Enrollment Plan (002).shtml

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\AAEDGQMI\Alliance Bank Central Texas Eligible Finance Insurance Benefits Open Enrollment Plan (002).shtml:Zone.Identifier

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\AAEDGQMI\Alliance Bank Central Texas Eligible Finance Insurance Benefits Open Enrollment Plan.shtml

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\AAEDGQMI\Alliance Bank Central Texas Eligible Finance Insurance Benefits Open Enrollment Plan.shtml:Zone.Identifier

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{1DA6EB74-6406-407F-B35D-B0B0B6990502}.tmp

C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1730837807554245300_975CC3DB-157F-4110-9F1D-D8F7832B883F.log

C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1730837807554887600_975CC3DB-157F-4110-9F1D-D8F7832B883F.log

C:\Users\user\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_16827_20130-20241105T1516470341-6848.etl

C:\Users\user\AppData\Roaming\Microsoft\Office\MSO3072.acl

C:\Users\user\AppData\Roaming\Microsoft\Outlook\NoEmail.srs

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Windows Analysis Report
Alliance Bank Central Texas Open Benefits Enrollment.eml