Edit tour

Windows Analysis Report
https://flowto.it/8tooc2sec?fc=0

Overview

General Information

Sample URL:	https://flowto.it/8tooc2sec?fc=0
Analysis ID:	1582415
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Classification

Process Tree

System is w10x64native

chrome.exe (PID: 3320 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: BB7C48CDDDE076E7EB44022520F40F77)

chrome.exe (PID: 840 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-subproc-heap-profiling --field-trial-handle=2204,i,14339181054727634091,385674495665761904,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20240909-180142.416000 --mojo-platform-channel-handle=2216 /prefetch:3 MD5: BB7C48CDDDE076E7EB44022520F40F77)

chrome.exe (PID: 6908 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://flowto.it/8tooc2sec?fc=0" MD5: BB7C48CDDDE076E7EB44022520F40F77)

cleanup

HTTP traffic detected: POST /recaptcha/api2/reload?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-aliveContent-Length: 8997sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128"Content-Type: application/x-protobuffersec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.google.comX-Client-Data: CI+2yQEIorbJAQipncoBCMD2ygEIkqHLAQic/swBCIWgzQEIrJ7OAQjkr84BCMO2zgEIvbnOAQjtvM4BCLu9zgEI1r3OAQjMv84BGMHLzAEYva7OARidsc4BSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1bAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: NID=517=i4E8sm-BN75bnGkPw4VW8uy51aQ8ounjntfNX2fu8MFJNuIvCX0dRBy-XkHqHwKOVFSSaC2nqfULsnHhY3TzIXHWC90jS3Wi2BINtQIDr1LJvZE4Ud-byTNL9Q04Nd1-ydmJvrWYY5vORspW6soJ1bMj20dq8UvPjgkw2sOvmuTUanqu

Source: global traffic	TCP traffic: 192.168.11.20:62851 -> 239.255.255.250:1900
Source: global traffic	TCP traffic: 192.168.11.20:62851 -> 239.255.255.250:1900
Source: global traffic	TCP traffic: 192.168.11.20:62851 -> 239.255.255.250:1900
Source: global traffic	TCP traffic: 192.168.11.20:62851 -> 239.255.255.250:1900

Source: chromecache_66.1.dr, chromecache_69.1.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_66.1.dr, chromecache_69.1.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_66.1.dr, chromecache_69.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_66.1.dr, chromecache_69.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_66.1.dr, chromecache_69.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_69.1.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_69.1.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_66.1.dr, chromecache_69.1.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_66.1.dr, chromecache_69.1.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_66.1.dr, chromecache_69.1.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_58.1.dr, chromecache_61.1.dr, chromecache_66.1.dr, chromecache_69.1.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_66.1.dr, chromecache_69.1.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__.
Source: chromecache_58.1.dr, chromecache_55.1.dr, chromecache_61.1.dr, chromecache_57.1.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49697
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49694
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: classification engine

Classification label: mal48.win@17/43@10/7

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\scoped_dir3320_913412916

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-subproc-heap-profiling --field-trial-handle=2204,i,14339181054727634091,385674495665761904,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20240909-180142.416000 --mojo-platform-channel-handle=2216 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://flowto.it/8tooc2sec?fc=0"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-subproc-heap-profiling --field-trial-handle=2204,i,14339181054727634091,385674495665761904,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20240909-180142.416000 --mojo-platform-channel-handle=2216 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\scoped_dir3320_913412916			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_BITS_3320_863175494			Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	2 Masquerading	OS Credential Dumping	1 Network Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://flowto.it/8tooc2sec?fc=0	100%	Avira URL Cloud	phishing

Source	Detection	Scanner	Label	Link
https://www.gstatic.c..?/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__.	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
google.com	142.250.217.206	true	false	high
flowcode.com	104.18.35.227	true	false	high
www.google.com	192.178.50.68	true	false	high
flowto.it	172.64.149.159	true	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://www.google.com/recaptcha/api2/bframe?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	false	high
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=normal&s=V8uk3gXjSxveyP10lsiPTzr4dRJy6ZtZWNETJWzBePJuAB3dILOrmDA5KRrf-WyLe9WVi8m7vKehGKvRgIpDuM13tyq5EWynopbjpK7j5Nh9fXD7vZYUTUp99E0YhfHdB56c-40-lfodJGTO6HPBgt1Lcy15v0N3GbW19-ohagr730LW1YCwHMh-iAQ7CAoQvj5wsfKzTwbMIH7kuiEfW7E68IEg6D3_czVD6QR8DMzYTVPOhYx4meurunowsucYpt0EzfP8vsUZ79JKERyaXd0QAyLoqqg&cb=au63nuisgap	false	high
https://www.google.com/recaptcha/api2/reload?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	false	high
https://www.google.com/sorry/index?continue=https://google.com/amp/web1.mlp-pe.com%3Ffce_id%3Dc5023f68-6cd8-4695-8d96-ef06a705cb58&q=EgRmgZnuGLDbyrsGIjCafytzTqN3e51BjWxsNClAy8uz54vRDPSHaWFgiv41s7JPNCztuhekCtRcp5sUtIsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	false	high
https://google.com/amp/web1.mlp-pe.com?fce_id=c5023f68-6cd8-4695-8d96-ef06a705cb58	false	high
https://www.google.com/recaptcha/api.js	false	high
https://www.google.com/recaptcha/api2/payload?p=06AFcWeA5PGsWoCQ-Ax2uVHRLLgFialWVuYNfvEN3KAX9DvGoNNLsavd7FN9mD0jMMSxzjPQKpxI93wwqlONMTVJhrYgPF_bdTbYJ5k1gliF_ZWleCQjv6VooVeIde7ADLMJvZsbl3At03Jz_01YuOULnqDKscaXTDPXnEEVv678Kq2DKie028ax2gNrhGgwnjUN4iFFrZz9h7&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	false	high
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF	false	high
https://www.google.com/js/bg/GaYUpI3TM2ZeJrJuY6shdNLJBEVQZd83XqI1ZKo9ZSY.js	false	high
https://www.google.com/favicon.ico	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://play.google.com/log?format=json&hasfast=true	chromecache_69.1.dr	false		high
https://www.gstatic.c..?/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__.	chromecache_66.1.dr, chromecache_69.1.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_66.1.dr, chromecache_69.1.dr	false		high
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_66.1.dr, chromecache_69.1.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_66.1.dr, chromecache_69.1.dr	false		high
https://support.google.com/recaptcha#6262736	chromecache_66.1.dr, chromecache_69.1.dr	false		high
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_66.1.dr, chromecache_69.1.dr	false		high
https://www.google.com/recaptcha/api2/	chromecache_58.1.dr, chromecache_61.1.dr, chromecache_66.1.dr, chromecache_69.1.dr	false		high
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_66.1.dr, chromecache_69.1.dr	false		high
https://cloud.google.com/contact	chromecache_66.1.dr, chromecache_69.1.dr	false		high
https://support.google.com/recaptcha	chromecache_69.1.dr	false		high
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_66.1.dr, chromecache_69.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
192.178.50.68	www.google.com	United States	15169	GOOGLEUS	false
142.250.217.206	google.com	United States	15169	GOOGLEUS	false
172.64.149.159	flowto.it	United States	13335	CLOUDFLARENETUS	false
104.18.35.227	flowcode.com	United States	13335	CLOUDFLARENETUS	false
142.250.64.196	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.11.20

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1582415
Start date and time:	2024-12-30 15:24:41 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 51s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://flowto.it/8tooc2sec?fc=0
Analysis system description:	Windows 10 64 bit 20H2 Native physical Machine for testing VM-aware malware (Office 2019, Chrome 128, Firefox 91, Adobe Reader DC 21, Java 8 Update 301
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@17/43@10/7

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, conhost.exe, TextInputHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.64.131, 142.250.189.142, 173.194.215.84, 142.250.217.174, 142.250.217.238, 192.178.50.46, 142.250.64.238, 142.250.189.131, 142.250.64.195, 192.178.50.42, 142.250.64.234, 172.217.15.202, 172.217.2.202, 142.250.217.234, 192.178.50.74, 142.250.64.170, 142.250.189.138, 142.250.217.202, 172.217.165.202, 142.250.217.170, 142.250.64.202, 142.250.217.163, 142.250.64.206, 172.217.15.206, 142.251.35.238, 142.250.64.138, 142.251.35.234, 199.232.214.172, 142.250.64.227, 172.217.3.78
Excluded domains from analysis (whitelisted): accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, www.googleapis.com, dns.msftncsi.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, www.gstatic.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://flowto.it/8tooc2sec?fc=0

Input	Output
URL: https://flowto.it Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://flowto.it
URL: https://www.google.com/sorry/index?continue=https://google.com/amp/web1.mlp-pe.com%3Ffce_id%3Dc5023f68-6cd8-4695-8d96-ef06a705cb58&q=EgRmgZnuGLDbyrsGIjCafytzTqN3e51BjWxsNClAy8uz54vRDPSHaWFgiv41s7JPNCztuhekCtRcp5sUtIsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "This network is blocked due to unaddressed abuse complaints about malicious behavior. This page checks to see if it's really a human sending the requests and not a robot coming from this network.", "prominent_button_name": "I'm not a robot", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.google.com/sorry/index?continue=https://google.com/amp/web1.mlp-pe.com%3Ffce_id%3Dc5023f68-6cd8-4695-8d96-ef06a705cb58&q=EgRmgZnuGLDbyrsGIjCafytzTqN3e51BjWxsNClAy8uz54vRDPSHaWFgiv41s7JPNCztuhekCtRcp5sUtIsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "This network is blocked due to unaddressed abuse complaints about malicious behavior. This page checks to see if it's really a human sending the requests and not a robot coming from this network.", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.google.com/sorry/index?continue=https://google.com/amp/web1.mlp-pe.com%3Ffce_id%3Dc5023f68-6cd8-4695-8d96-ef06a705cb58&q=EgRmgZnuGLDbyrsGIjCafytzTqN3e51BjWxsNClAy8uz54vRDPSHaWFgiv41s7JPNCztuhekCtRcp5sUtIsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0 Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://www.google.com/sorry/index?continue=https://google.com/amp/web1.mlp-pe.com%3Ffce_id%3Dc5023f68-6cd8-4695-8d96-ef06a705cb58&q=EgRmgZnuGLDbyrsGIjCafytzTqN3e51BjWxsNClAy8uz54vRDPSHaWFgiv41s7JPNCztuhekCtRcp5sUtIsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0 Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://www.google.com/sorry/index?continue=https://google.com/amp/web1.mlp-pe.com%3Ffce_id%3Dc5023f68-6cd8-4695-8d96-ef06a705cb58&q=EgRmgZnuGLDbyrsGIjCafytzTqN3e51BjWxsNClAy8uz54vRDPSHaWFgiv41s7JPNCztuhekCtRcp5sUtIsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "This network is blocked due to unaddressed abuse complaints about malicious behavior. This page checks to see if it's really a human sending the requests and not a robot coming from this network.", "prominent_button_name": "I'm not a robot", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.google.com/sorry/index?continue=https://google.com/amp/web1.mlp-pe.com%3Ffce_id%3Dc5023f68-6cd8-4695-8d96-ef06a705cb58&q=EgRmgZnuGLDbyrsGIjCafytzTqN3e51BjWxsNClAy8uz54vRDPSHaWFgiv41s7JPNCztuhekCtRcp5sUtIsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0 Model: Joe Sandbox AI	{ "brands": [ "Google" ] }
	{ "brands": [ "Google" ] }
URL: https://www.google.com/sorry/index?continue=https://google.com/amp/web1.mlp-pe.com%3Ffce_id%3Dc5023f68-6cd8-4695-8d96-ef06a705cb58&q=EgRmgZnuGLDbyrsGIjCafytzTqN3e51BjWxsNClAy8uz54vRDPSHaWFgiv41s7JPNCztuhekCtRcp5sUtIsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0 Model: Joe Sandbox AI	```json{ "legit_domain": "google.com", "classification": "wellknown", "reasons": [ "The URL 'www.google.com' matches the legitimate domain name for the brand 'Google'.", "Google is a well-known brand with a strong online presence.", "There are no suspicious elements in the URL such as misspellings, extra characters, or unusual domain extensions." ], "riskscore": 1}
URL: www.google.com Brands: Google Input Fields: unknown
URL: https://www.google.com/sorry/index?continue=https://google.com/amp/web1.mlp-pe.com%3Ffce_id%3Dc5023f68-6cd8-4695-8d96-ef06a705cb58&q=EgRmgZnuGLDbyrsGIjCafytzTqN3e51BjWxsNClAy8uz54vRDPSHaWFgiv41s7JPNCztuhekCtRcp5sUtIsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0 Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.google.com/sorry/index?continue=https://google.com/amp/web1.mlp-pe.com%3Ffce_id%3Dc5023f68-6cd8-4695-8d96-ef06a705cb58&q=EgRmgZnuGLDbyrsGIjCafytzTqN3e51BjWxsNClAy8uz54vRDPSHaWFgiv41s7JPNCztuhekCtRcp5sUtIsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0 Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://www.google.com/sorry/index?continue=https://google.com/amp/web1.mlp-pe.com%3Ffce_id%3Dc5023f68-6cd8-4695-8d96-ef06a705cb58&q=EgRmgZnuGLDbyrsGIjCafytzTqN3e51BjWxsNClAy8uz54vRDPSHaWFgiv41s7JPNCztuhekCtRcp5sUtIsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0 Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "VERIFY", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.google.com/sorry/index?continue=https://google.com/amp/web1.mlp-pe.com%3Ffce_id%3Dc5023f68-6cd8-4695-8d96-ef06a705cb58&q=EgRmgZnuGLDbyrsGIjCafytzTqN3e51BjWxsNClAy8uz54vRDPSHaWFgiv41s7JPNCztuhekCtRcp5sUtIsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0 Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18300)
Category:	dropped
Size (bytes):	18920
Entropy (8bit):	5.648118877162723
Encrypted:	false
SSDEEP:	384:byXIWN4tQu5vxh+g+k4Q/NOLxMgTy3e9naesPB8wEy1tj1GKxR:by4ft1N+u/NOOupaeEHPGW
MD5:	46074F20715B2E1D71813FE06D27F940
SHA1:	0A1F5FA5E8EE3161EE0A7FCF754FEA35A4D6C3F5
SHA-256:	19A614A48DD333665E26B26E63AB2174D2C904455065DF375EA23564AA3D6526
SHA-512:	0A3A595CFD90F343A04FAC3F108CF283F935F8C8FE6C0FF6DBCD581F24F8CD20792EA4097865E69427B95C2DF3060D7CE8E4B9373BD31D787F2CEB8D47E1C02A
Malicious:	false
Reputation:	low
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var P=function(H){return H},u=this\|\|self,x=function(H,r){if((r=(H=null,u).trustedTypes,!r)\|\|!r.createPolicy)return H;try{H=r.createPolicy("bg",{createHTML:P,createScript:P,createScriptURL:P})}catch(c){u.console&&u.console.error(c.message)}return H};(0,eval)(function(H,r){return(r=x())&&H.eval(r.createScript("1"))===1?function(c){return r.createScript(c)}:function(c){return""+c}}(u)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var g=function(H,r,c,x,y,u,G,D){if(!c.GC&&(u=void 0,r&&r[0]===C&&(H=r[1],u=r[2],r=void 0),y=k(c,84),y.length==0&&(x=k(c,90)>>3,y.push(H,x>>8&255,x&255),u!=void 0&&y.push(u&255)),H="",r&&(r.message&&(H+=r.message),r.stack&&(H+=":"+r.stack)),r=k(c,218),r[0]>3)){c.i=(r=(H=(r[0]-=(H=H.slice(0,(r[0]\|0)-3),(H.length\|0)+3),i6(H)),c).i,c);try{c.hL?(D=(D=k(c,2))&&D[D.length-1]\|\|95,(G=k

Chrome Cache Entry: 51

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
URL:	https://www.google.com/favicon.ico
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 52

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	600
Entropy (8bit):	7.391634169810707
Encrypted:	false
SSDEEP:	12:6v/7OEUT9vceKKNtY3kM8O+mucROzZbJOAjPBE2Iq8AnxT9:bTdcVIM8tfHzzjy2IdKT9
MD5:	0F2A4639B8A4CB30C76E8333C00D30A6
SHA1:	57E273A270BB864970D747C74B3F0A7C8E515B13
SHA-256:	44B988703019CD6BFA86C91840FECF2A42B611B364E3EEA2F4EB63BF62714E98
SHA-512:	3EA72C7E8702D2E9D94B0FAA6FA095A33AB8BC6EC2891F8B3165CE29A9CCF2114FAEF424FA03FD4B9D06785326284C1BB2087CE05E249CCAC65418361BFA7C51
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..M+.Q.....&/....&......6...\|.I..).o.I.X..#.@.bb.D.'5....m...=..y........{....<.P..;.H......f...3l...M.I...j2.....3..1x..S......9..<m...E.'F'.. ...M.j...C..c.5.-..F..3H./F!.."V.e.i.}.Y....../.rw...@...].rp...`CQo(.....J...u.".!E...$.^$...k....b....@.^.;.u5........H/Q{..$..'..........w...r.+xS.uR..J.......GD.O./.. G7..l...J.t.3.S...N.7...e..s.-Jlj)..5E....E.;8w4.k..=.li.G...1.c....p,T6;....1.oW.%.2,..Z..a...*m.s}T1F....Hr.1......<x0.....-.i......IEND.B`.

Chrome Cache Entry: 53

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	665
Entropy (8bit):	7.42832670119013
Encrypted:	false
SSDEEP:	12:6v/7OEUelyuRs56fyKgIEInu5VLJBZInmJhd/3VqQXD8GBm1:belFRs56fuIEIu5VNBZInMTICfBO
MD5:	07BF314AAB04047B9E9A959EE6F63DA3
SHA1:	17BEF6602672E2FD9956381E01356245144003E5
SHA-256:	55EAF62CB05DA20088DC12B39D7D254D046CB1FD61DDF3AE641F1439EFD0A5EE
SHA-512:	2A1D4EBC7FBA6951881FD1DDA745480B504E14E3ADAC3B27EC5CF4045DE14FF030D45DDA99DC056285C7980446BA0FC37F489B7534BE46107B21BD43CEE87BA0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/info_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..W..DA.=.6O...H.,E.............b.....C.1...1..EbLPI.W......H..s.z5.:..._.d.0.u.......j.x.R..._.v..R...1..ir..`.yn..R..j.h./y..l......(`..5....l.E..0......B^......F.....F....Y\|p..._,p.............(3^.r.P.O......;<....z.,..yF....N..x.MS...Q.C%......D8G.+......oOk...)T..}\|..e...G.....'.R..G.Z.T}7(...&..@...G....$PGYv...A.c.]d....N..'.4b...R.%..)2Yd..b.M..^@.M....^.:h.N(dP*t..RQ%.o...{.vGH..S._".@./...g.....]...?..h..E.,r.m.%."."W.6G..t...->....q\.Kc.t"^......Kj~{l..C..).y..><@\|yB....=c.............!...<....IEND.B`.

Chrome Cache Entry: 54

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.8035671313969885
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKFcM6Qaxp3T2TjWaee:PLKdXNQKFtaxZT2TjL
MD5:	C206147C7CAE99642A4F8A2C640A0019
SHA1:	8C32B7B7E0807BBE85E5C8C94F87AFEA31EEDC40
SHA-256:	6F55ADBECCE78B9C566F8DC830177DC91782702FF35F213F009FC2B902E25603
SHA-512:	0D94AA53B801AC69A9BB4A7DF4FC0E00B6FFD1C5668A6FEE4EFC11986B7F516EB27A8A0197C0106A4295ACD5F63C222EA2F1BD9431BF2D689672AC91C5528EB6
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js');

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTI4LjAuNjYxMy4xMjASGQk8dqZYMe7mkRIFDVNaR8UhNPMsUJv-EH0=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	102
Entropy (8bit):	4.8035671313969885
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKFcM6Qaxp3T2TjWaee:PLKdXNQKFtaxZT2TjL
MD5:	C206147C7CAE99642A4F8A2C640A0019
SHA1:	8C32B7B7E0807BBE85E5C8C94F87AFEA31EEDC40
SHA-256:	6F55ADBECCE78B9C566F8DC830177DC91782702FF35F213F009FC2B902E25603
SHA-512:	0D94AA53B801AC69A9BB4A7DF4FC0E00B6FFD1C5668A6FEE4EFC11986B7F516EB27A8A0197C0106A4295ACD5F63C222EA2F1BD9431BF2D689672AC91C5528EB6
Malicious:	false
Reputation:	low
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js');

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1434), with no line terminators
Category:	downloaded
Size (bytes):	1434
Entropy (8bit):	5.765556935416344
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtFtD1INxsLqJ:VKEctKo7LmvtUjPKtX7ftD1INOLrwUnG
MD5:	764EE6309BF4800054E4A2A67DEB3575
SHA1:	2FFD2FDA8E49AD861B75DE1E5ED583D8CE1D5B0A
SHA-256:	652E8677AEC33767D2A5F229384F79B4F526104BF7E94D7D258070F94743C3CC
SHA-512:	4333F5A85D3085C54ACF34632CFDD57CF7EEA2D539C5CEFC1DBD07A6486083CAC1C1DA6BADB9743FD01BCDEE63AEFB187074A6BF7AB945BC897E227E1C4F5C6D
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepend(m)

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	665
Entropy (8bit):	7.42832670119013
Encrypted:	false
SSDEEP:	12:6v/7OEUelyuRs56fyKgIEInu5VLJBZInmJhd/3VqQXD8GBm1:belFRs56fuIEIu5VNBZInMTICfBO
MD5:	07BF314AAB04047B9E9A959EE6F63DA3
SHA1:	17BEF6602672E2FD9956381E01356245144003E5
SHA-256:	55EAF62CB05DA20088DC12B39D7D254D046CB1FD61DDF3AE641F1439EFD0A5EE
SHA-512:	2A1D4EBC7FBA6951881FD1DDA745480B504E14E3ADAC3B27EC5CF4045DE14FF030D45DDA99DC056285C7980446BA0FC37F489B7534BE46107B21BD43CEE87BA0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..W..DA.=.6O...H.,E.............b.....C.1...1..EbLPI.W......H..s.z5.:..._.d.0.u.......j.x.R..._.v..R...1..ir..`.yn..R..j.h./y..l......(`..5....l.E..0......B^......F.....F....Y\|p..._,p.............(3^.r.P.O......;<....z.,..yF....N..x.MS...Q.C%......D8G.+......oOk...)T..}\|..e...G.....'.R..G.Z.T}7(...&..@...G....$PGYv...A.c.]d....N..'.4b...R.%..)2Yd..b.M..^@.M....^.:h.N(dP*t..RQ%.o...{.vGH..S._".@./...g.....]...?..h..E.,r.m.%."."W.6G..t...->....q\.Kc.t"^......Kj~{l..C..).y..><@\|yB....=c.............!...<....IEND.B`.

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1434), with no line terminators
Category:	dropped
Size (bytes):	1434
Entropy (8bit):	5.765556935416344
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtFtD1INxsLqJ:VKEctKo7LmvtUjPKtX7ftD1INOLrwUnG
MD5:	764EE6309BF4800054E4A2A67DEB3575
SHA1:	2FFD2FDA8E49AD861B75DE1E5ED583D8CE1D5B0A
SHA-256:	652E8677AEC33767D2A5F229384F79B4F526104BF7E94D7D258070F94743C3CC
SHA-512:	4333F5A85D3085C54ACF34632CFDD57CF7EEA2D539C5CEFC1DBD07A6486083CAC1C1DA6BADB9743FD01BCDEE63AEFB187074A6BF7AB945BC897E227E1C4F5C6D
Malicious:	false
Reputation:	low
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepend(m)

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	37087
Entropy (8bit):	7.957792591531745
Encrypted:	false
SSDEEP:	768:ayESD2W+L9c9JIg3aRB99keWHCIxuxPQ25U/T7BwNQrQBM:agkiIg3aRB99fIWI26BwS9
MD5:	9D98437BB4ECDDFA40AB025C256FC9A3
SHA1:	0AA32B1DBCF07C0377B855119498029BA3AA8DD3
SHA-256:	D32E4D7D18560B0B20D52E6922632D5D7C3C91BD7C470905A6F380E2FFF77C8E
SHA-512:	E63E05E13ED6EE42EE7CC256D818DBD9F05A31A03674964C4B4AB8B6AE094020295E129BDDA416251421165620F01D0BE6FA7F1C42DCCB0D9C66E7E3986F5B5D
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/payload?p=06AFcWeA5PGsWoCQ-Ax2uVHRLLgFialWVuYNfvEN3KAX9DvGoNNLsavd7FN9mD0jMMSxzjPQKpxI93wwqlONMTVJhrYgPF_bdTbYJ5k1gliF_ZWleCQjv6VooVeIde7ADLMJvZsbl3At03Jz_01YuOULnqDKscaXTDPXnEEVv678Kq2DKie028ax2gNrhGgwnjUN4iFFrZz9h7&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................,.,.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..8....n....rk*..O..B.[D.9.+k....c#!R.e..d..X~...<O.I.-.yq.......p9.+.oc.Ks.h#'.Z.."...'lh..H.w>..?.O... 5..6x.s....'.3M.rH6.YM ..A.....o.MY...H...0.W...8.h..x&I%a..l..\~..D....s..........?...vls<_h=s;.1..d...\v(%..)k)....K...~4.%....c$c..p..]...k..P....)@.d..U..54...@....n...................r....c:....?g...=\|....H_...E[".S=..b...,>%.....Hf...c..I..?I.u.3.

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	600
Entropy (8bit):	7.391634169810707
Encrypted:	false
SSDEEP:	12:6v/7OEUT9vceKKNtY3kM8O+mucROzZbJOAjPBE2Iq8AnxT9:bTdcVIM8tfHzzjy2IdKT9
MD5:	0F2A4639B8A4CB30C76E8333C00D30A6
SHA1:	57E273A270BB864970D747C74B3F0A7C8E515B13
SHA-256:	44B988703019CD6BFA86C91840FECF2A42B611B364E3EEA2F4EB63BF62714E98
SHA-512:	3EA72C7E8702D2E9D94B0FAA6FA095A33AB8BC6EC2891F8B3165CE29A9CCF2114FAEF424FA03FD4B9D06785326284C1BB2087CE05E249CCAC65418361BFA7C51
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/refresh_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..M+.Q.....&/....&......6...\|.I..).o.I.X..#.@.bb.D.'5....m...=..y........{....<.P..;.H......f...3l...M.I...j2.....3..1x..S......9..<m...E.'F'.. ...M.j...C..c.5.-..F..3H./F!.."V.e.i.}.Y....../.rw...@...].rp...`CQo(.....J...u.".!E...$.^$...k....b....@.^.;.u5........H/Q{..$..'..........w...r.+xS.uR..J.......GD.O./.. G7..l...J.t.3.S...N.7...e..s.-Jlj)..5E....E.;8w4.k..=.li.G...1.c....p,T6;....1.oW.%.2,..Z..a...*m.s}T1F....Hr.1......<x0.....-.i......IEND.B`.

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18300)
Category:	downloaded
Size (bytes):	18920
Entropy (8bit):	5.648118877162723
Encrypted:	false
SSDEEP:	384:byXIWN4tQu5vxh+g+k4Q/NOLxMgTy3e9naesPB8wEy1tj1GKxR:by4ft1N+u/NOOupaeEHPGW
MD5:	46074F20715B2E1D71813FE06D27F940
SHA1:	0A1F5FA5E8EE3161EE0A7FCF754FEA35A4D6C3F5
SHA-256:	19A614A48DD333665E26B26E63AB2174D2C904455065DF375EA23564AA3D6526
SHA-512:	0A3A595CFD90F343A04FAC3F108CF283F935F8C8FE6C0FF6DBCD581F24F8CD20792EA4097865E69427B95C2DF3060D7CE8E4B9373BD31D787F2CEB8D47E1C02A
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/GaYUpI3TM2ZeJrJuY6shdNLJBEVQZd83XqI1ZKo9ZSY.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var P=function(H){return H},u=this\|\|self,x=function(H,r){if((r=(H=null,u).trustedTypes,!r)\|\|!r.createPolicy)return H;try{H=r.createPolicy("bg",{createHTML:P,createScript:P,createScriptURL:P})}catch(c){u.console&&u.console.error(c.message)}return H};(0,eval)(function(H,r){return(r=x())&&H.eval(r.createScript("1"))===1?function(c){return r.createScript(c)}:function(c){return""+c}}(u)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var g=function(H,r,c,x,y,u,G,D){if(!c.GC&&(u=void 0,r&&r[0]===C&&(H=r[1],u=r[2],r=void 0),y=k(c,84),y.length==0&&(x=k(c,90)>>3,y.push(H,x>>8&255,x&255),u!=void 0&&y.push(u&255)),H="",r&&(r.message&&(H+=r.message),r.stack&&(H+=":"+r.stack)),r=k(c,218),r[0]>3)){c.i=(r=(H=(r[0]-=(H=H.slice(0,(r[0]\|0)-3),(H.length\|0)+3),i6(H)),c).i,c);try{c.hL?(D=(D=k(c,2))&&D[D.length-1]\|\|95,(G=k

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (654)
Category:	dropped
Size (bytes):	560258
Entropy (8bit):	5.668859512958225
Encrypted:	false
SSDEEP:	6144:QStgGd8JmYx0sb6h8YfALjbBksK8ecdy7FdzZA96fcJ2fL2iJ5B7lXaqy2:Gn8hALjbispecknzXfIKhX7
MD5:	19DDAC3BE88EDA2C8263C5D52FA7F6BD
SHA1:	C81720778F57C56244C72CE6EF402BB4DE5F9619
SHA-256:	B261530F05E272E18B5B5C86D860C4979C82B5B6C538E1643B3C94FC9BA76DD6
SHA-512:	393015B8C7F14D5D4BDB9CCEED7CD1477A7DB07BC7C40BAE7D0A48A2ADFA7D56F9D1C3E4EC05C92FDE152E72FFA6B75D8BF724E1F63F9BC21421125667AFB05C
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var X=function(){return[function(N,a,U,y,A,l,z){if((l=["toString",6,"constructor"],N&71)==N)if(typeof U==="string")z={buffer:Z[11](17,1,a,U),qH:!1};else if(Array.isArray(U))z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===Uint8Array)z={buffer:U,qH:!1};else if(U[l[2]]===ArrayBuffer)z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===WC)z={buffer:r[9](25,a,null,U)\|\|new Uint8Array(0),qH:!0};else if(U instanceof Uint8Array)z={buffer:new Uint8Array(U.buffer,U.byteOffset,U.byteLength),qH:!1};else throw Error("Type not convertible to a Uint8Array, expected a Uint8Array, an ArrayBuffer, a base64 encoded string, a Byt

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15340, version 1.0
Category:	downloaded
Size (bytes):	15340
Entropy (8bit):	7.983406336508752
Encrypted:	false
SSDEEP:	384:F2gPJde0V2iGrQyD8b3k/tigCdeNqOUd47SH0tsGm:4gPVV2NQE8b3ldeNWH0Wb
MD5:	19B7A0ADFDD4F808B53AF7E2CE2AD4E5
SHA1:	81D5D4C7B5035AD10CCE63CF7100295E0C51FDDA
SHA-256:	C912A9CE0C3122D4B2B29AD26BFE06B0390D1A5BDAA5D6128692C0BEFD1DFBBD
SHA-512:	49DA16000687AC81FC4CA9E9112BDCA850BB9F32E0AF2FE751ABC57A8E9C3382451B50998CEB9DE56FC4196F1DC7EF46BBA47933FC47EB4538124870B7630036
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
Preview:	wOF2......;........d..;..........................d..z..J.`..L.Z..<.....\..`..^...x.6.$..6. ..\|. ..8..z%......Q.{..q...FF.kd .8.(..d..).!C...Y.JA...r. ..GH8F......nW...".2&....2<..+C...p...b..SC.......J......z.-..Q..#6&1zUe../\...l.....<.....9s...E~.]B-..B.wY..o......Q..A.F..1j.......-.`P% .. ,..@1.0..~.....WWW.d.u<c{..^.R.+..w....&.........A......+C....(.N.....0.~..0.J.;.Nu..7....]..m.H.....[h.GL3....?)....c.H...2.3.}y........SXI\|..iVN'%E.D.W....r..<`....i....6;E$.....U.$j.@...._.......R2....WS...k.vz.R.'a9!^...N....h.._.....c.%."..S.2.16B...o.2}.pmU[.\|.LI....2.....OWQLO1-....s..8.(...".\|6...6R.. ..M-.zO.}w)..v..mXxX...c..3#.+.v....F`.Z;.zQ.......r,....Yo.....g.h....+.....O.3Y..)Y.8.!....elX......._.3.}k~u.{ C..H.z..FP........@...d..)T.R...L.H.J.j.@..............$...E......y...3.b...I.h u.+%.HA.\..9..8..X.!....gx...].:..V..C...._..X..!....6..)...GM:E.....O.Z.}k.;.T.k..D.k.O..D5.r..."......?..T.Q.A...CF...3g.5.Dn<.QPy..G..1.9..Q..0..

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 98 x 90, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	11174
Entropy (8bit):	7.97758318268209
Encrypted:	false
SSDEEP:	192:b4JEM/GnDNmhq6mokMiqF/RhAUYaYL39w/RA1A4m63ux+9Tyv7RyRJgBHWHOYa7z:b4b4ghdiqFJyVpr9A63p9TG0RCZWH/K
MD5:	A4741C6089E163F0E5C0CDB2C698A03E
SHA1:	03B190C8D9350802CBABBCCD2757CFF1FB7115F0
SHA-256:	C9685B413894B0647B42EDF9CAC1FC0B2ED044C1FE238D843B9CA3D29DB1B805
SHA-512:	8F16410EDBC8893D9982CCAA1F2BA73BB1E7189B8101CE8EF3167D4663E5580A0BD2462295052A5DD86FA83AB3A0C4ED889204052951F8C6FA71E564D3EDCAFB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...b...Z...........+mIDATx..O.a.A.3.....@....YY.5`......#B...\|...)F3S..8..H._.......N......v..i..k{D..r..wKhO...V$..XD..(...4]8......t...Q..f!C.{...o.:.sNJ!.~R.....GFG.$.o.a..m...S.a...("..uu1....h......V...).....V...+....@rd9b.. ........5..7.]...........,CD./.......K.; ......v......H..`..$.p.E.I/.{....5....`..........O_...H.c.."G.Jp}LB.....OU.$..%....=..+..P` .....vR..^.._...a. ..vX.LIH..-..F..x.?......bRr..@.1....b...`#.L".........\|....M.8$....IV.9s...;.WL....Q......8..h.....HIje.....a{.......:\...U.."...AYs.f.:.?RU.C5.,......Q.j..y...Nx.J....1.>.>-R.L.>.q?.H;.Z`.o...}...sN....k.........P.&>w.0".u.$.l.W2.q.=I.H......2.......I.H.x..> [.,.t7..$$....W.`..D..#).......sfv..A_.....{....cy-..H.x.U5...Ew`....JxB..\.o..\|........)..?~..D.A/...y0.%.D.;...0.K..d.v......;..x6B...Hg^E.6..~....g...'-.5.].c.[C2.$A.......!..b.d..U..$w:/.$B. )..P....Hq..3.!.l}]y.....`..s>.7.t.P.s.%d..E{M.m.....$.%...v..W..T:-........... 0....D4a".K...

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (654)
Category:	downloaded
Size (bytes):	560258
Entropy (8bit):	5.668859512958225
Encrypted:	false
SSDEEP:	6144:QStgGd8JmYx0sb6h8YfALjbBksK8ecdy7FdzZA96fcJ2fL2iJ5B7lXaqy2:Gn8hALjbispecknzXfIKhX7
MD5:	19DDAC3BE88EDA2C8263C5D52FA7F6BD
SHA1:	C81720778F57C56244C72CE6EF402BB4DE5F9619
SHA-256:	B261530F05E272E18B5B5C86D860C4979C82B5B6C538E1643B3C94FC9BA76DD6
SHA-512:	393015B8C7F14D5D4BDB9CCEED7CD1477A7DB07BC7C40BAE7D0A48A2ADFA7D56F9D1C3E4EC05C92FDE152E72FFA6B75D8BF724E1F63F9BC21421125667AFB05C
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var X=function(){return[function(N,a,U,y,A,l,z){if((l=["toString",6,"constructor"],N&71)==N)if(typeof U==="string")z={buffer:Z[11](17,1,a,U),qH:!1};else if(Array.isArray(U))z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===Uint8Array)z={buffer:U,qH:!1};else if(U[l[2]]===ArrayBuffer)z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===WC)z={buffer:r[9](25,a,null,U)\|\|new Uint8Array(0),qH:!0};else if(U instanceof Uint8Array)z={buffer:new Uint8Array(U.buffer,U.byteOffset,U.byteLength),qH:!1};else throw Error("Type not convertible to a Uint8Array, expected a Uint8Array, an ArrayBuffer, a base64 encoded string, a Byt

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 98 x 90, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	11174
Entropy (8bit):	7.97758318268209
Encrypted:	false
SSDEEP:	192:b4JEM/GnDNmhq6mokMiqF/RhAUYaYL39w/RA1A4m63ux+9Tyv7RyRJgBHWHOYa7z:b4b4ghdiqFJyVpr9A63p9TG0RCZWH/K
MD5:	A4741C6089E163F0E5C0CDB2C698A03E
SHA1:	03B190C8D9350802CBABBCCD2757CFF1FB7115F0
SHA-256:	C9685B413894B0647B42EDF9CAC1FC0B2ED044C1FE238D843B9CA3D29DB1B805
SHA-512:	8F16410EDBC8893D9982CCAA1F2BA73BB1E7189B8101CE8EF3167D4663E5580A0BD2462295052A5DD86FA83AB3A0C4ED889204052951F8C6FA71E564D3EDCAFB
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/canonical_car.png
Preview:	.PNG........IHDR...b...Z...........+mIDATx..O.a.A.3.....@....YY.5`......#B...\|...)F3S..8..H._.......N......v..i..k{D..r..wKhO...V$..XD..(...4]8......t...Q..f!C.{...o.:.sNJ!.~R.....GFG.$.o.a..m...S.a...("..uu1....h......V...).....V...+....@rd9b.. ........5..7.]...........,CD./.......K.; ......v......H..`..$.p.E.I/.{....5....`..........O_...H.c.."G.Jp}LB.....OU.$..%....=..+..P` .....vR..^.._...a. ..vX.LIH..-..F..x.?......bRr..@.1....b...`#.L".........\|....M.8$....IV.9s...;.WL....Q......8..h.....HIje.....a{.......:\...U.."...AYs.f.:.?RU.C5.,......Q.j..y...Nx.J....1.>.>-R.L.>.q?.H;.Z`.o...}...sN....k.........P.&>w.0".u.$.l.W2.q.=I.H......2.......I.H.x..> [.,.t7..$$....W.`..D..#).......sfv..A_.....{....cy-..H.x.U5...Ew`....JxB..\.o..\|........)..?~..D.A/...y0.%.D.;...0.K..d.v......;..x6B...Hg^E.6..~....g...'-.5.].c.[C2.$A.......!..b.d..U..$w:/.$B. )..P....Hq..3.!.l}]y.....`..s>.7.t.P.s.%d..E{M.m.....$.%...v..W..T:-........... 0....D4a".K...

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	37087
Entropy (8bit):	7.957792591531745
Encrypted:	false
SSDEEP:	768:ayESD2W+L9c9JIg3aRB99keWHCIxuxPQ25U/T7BwNQrQBM:agkiIg3aRB99fIWI26BwS9
MD5:	9D98437BB4ECDDFA40AB025C256FC9A3
SHA1:	0AA32B1DBCF07C0377B855119498029BA3AA8DD3
SHA-256:	D32E4D7D18560B0B20D52E6922632D5D7C3C91BD7C470905A6F380E2FFF77C8E
SHA-512:	E63E05E13ED6EE42EE7CC256D818DBD9F05A31A03674964C4B4AB8B6AE094020295E129BDDA416251421165620F01D0BE6FA7F1C42DCCB0D9C66E7E3986F5B5D
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................,.,.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..8....n....rk*..O..B.[D.9.+k....c#!R.e..d..X~...<O.I.-.yq.......p9.+.oc.Ks.h#'.Z.."...'lh..H.w>..?.O... 5..6x.s....'.3M.rH6.YM ..A.....o.MY...H...0.W...8.h..x&I%a..l..\~..D....s..........?...vls<_h=s;.1..d...\v(%..)k)....K...~4.%....c$c..p..]...k..P....)@.d..U..54...@....n...................r....c:....?g...=\|....H_...E[".S=..b...,>%.....Hf...c..I..?I.u.3.

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	530
Entropy (8bit):	7.2576396280117494
Encrypted:	false
SSDEEP:	12:6v/7OEUhUxzPKmghSn8nazyk+k8/OzxQcxNMvVb:bhUxzlvWkT8FcxK1
MD5:	88E0F42C9FA4F94AA8BCD54D1685C180
SHA1:	5AD9D47A49B82718BAA3BE88550A0B3350270C42
SHA-256:	89C62095126FCA89EA1511CF35B49B8306162946B0C26D6F60C5506C51D85992
SHA-512:	FAFF842E9FF4CC838EC3C724E95EEE6D36B2F8C768DC23E48669E28FC5C19AA24B1B34CF1DBCBE877B3537D6A325B4C35AF440C2B6D58F6A77A04A208D9296F8
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/audio_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX...JBA.....E-R... (#..-*$.}.%.Kt.A..Dx.I...AF.Q.4.......-.6..?.m:.,.......Q..D.L..e4..2.D..8)j4:......&>.s......p?......9.o5>.][H.}...&L.%.xh{~K.J\|.b..N..HMp....f.}dd..S..4%...$dK..!..Z..NNs.W&g..Fn....p...w..Ut...E\.e.......6......M.F...X.L......em.....R#'..%....j$/..-......@.l."..M.\|....OtW.H.,.-.~W`Z.s8..W...B...C-.8"H....6......9...A..aO.1`.M..A..eA.{...-...U.,.W........IEND.B`.

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	78685
Entropy (8bit):	6.020282308187139
Encrypted:	false
SSDEEP:	1536:OfGNbFoZJSUYOOaLnAW8+IcTOIQbkhXwW5vxM:mGRFauOxLA/+IcTOuXK
MD5:	6AEC8CFD5D3A790339DC627F9F1229B5
SHA1:	B6C8CFFE38E1015DD8595F2DD1A92435E2795874
SHA-256:	80583FA3C83831A9E036EBA0500D1B9C0D30892D0701F1617E0FAFAF5AEAA2CA
SHA-512:	4279E479C860007D04CD6FF0B8C45131C18D87420CD5CEB5C727A7DDBFB4206D007069102D643DA97C3BF01D0B756A2EF4662C8E39B6969FC154DE3C763B1EFC
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAAIGNIUk0AAHomAACAhAAA+gAAAIDoAAB1MAAA6mAAADqYAAAXcJy6UTwAAAAGYktHRAD/AP8A/6C9p5MAAHq9SURBVHja7Z15fFTl9f/fd9ZM9n1PgCyEXSSRNYKCgAuiIipuVSuudavV1tq6W/WrtnWrrZbWDZUqUqUoCoIEQhBI2JesELKvM9mTWe7c3x83d5xAlkky8fv92ft5vfKC19znOWfuZ571POc5B1SoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKHifwGCRqsTNFrdj6VPq9XqtNofT9+wvutQyEyad8t9IaPPntFUd

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	530
Entropy (8bit):	7.2576396280117494
Encrypted:	false
SSDEEP:	12:6v/7OEUhUxzPKmghSn8nazyk+k8/OzxQcxNMvVb:bhUxzlvWkT8FcxK1
MD5:	88E0F42C9FA4F94AA8BCD54D1685C180
SHA1:	5AD9D47A49B82718BAA3BE88550A0B3350270C42
SHA-256:	89C62095126FCA89EA1511CF35B49B8306162946B0C26D6F60C5506C51D85992
SHA-512:	FAFF842E9FF4CC838EC3C724E95EEE6D36B2F8C768DC23E48669E28FC5C19AA24B1B34CF1DBCBE877B3537D6A325B4C35AF440C2B6D58F6A77A04A208D9296F8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX...JBA.....E-R... (#..-*$.}.%.Kt.A..Dx.I...AF.Q.4.......-.6..?.m:.,.......Q..D.L..e4..2.D..8)j4:......&>.s......p?......9.o5>.][H.}...&L.%.xh{~K.J\|.b..N..HMp....f.}dd..S..4%...$dK..!..Z..NNs.W&g..Fn....p...w..Ut...E\.e.......6......M.F...X.L......em.....R#'..%....j$/..-......@.l."..M.\|....OtW.H.,.-.~W`Z.s8..W...B...C-.8"H....6......9...A..aO.1`.M..A..eA.{...-...U.,.W........IEND.B`.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 30, 2024 15:26:52.915637970 CET	49718	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:26:52.915657997 CET	443	49718	192.178.50.68	192.168.11.20
Dec 30, 2024 15:26:52.915894032 CET	49718	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:26:52.916187048 CET	49718	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:26:52.916193008 CET	443	49718	192.178.50.68	192.168.11.20
Dec 30, 2024 15:26:53.392189980 CET	443	49718	192.178.50.68	192.168.11.20
Dec 30, 2024 15:26:53.392541885 CET	49718	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:26:53.392549992 CET	443	49718	192.178.50.68	192.168.11.20
Dec 30, 2024 15:26:53.393495083 CET	443	49718	192.178.50.68	192.168.11.20
Dec 30, 2024 15:26:53.393663883 CET	49718	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:26:53.394459009 CET	49718	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:26:53.394562006 CET	443	49718	192.178.50.68	192.168.11.20
Dec 30, 2024 15:26:53.440466881 CET	49718	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:26:53.440488100 CET	443	49718	192.178.50.68	192.168.11.20
Dec 30, 2024 15:26:53.487307072 CET	49718	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:26:53.896645069 CET	49719	443	192.168.11.20	172.64.149.159
Dec 30, 2024 15:26:53.896660089 CET	443	49719	172.64.149.159	192.168.11.20
Dec 30, 2024 15:26:53.896855116 CET	49720	443	192.168.11.20	172.64.149.159
Dec 30, 2024 15:26:53.896872044 CET	443	49720	172.64.149.159	192.168.11.20
Dec 30, 2024 15:26:53.896878004 CET	49719	443	192.168.11.20	172.64.149.159
Dec 30, 2024 15:26:53.897047043 CET	49720	443	192.168.11.20	172.64.149.159
Dec 30, 2024 15:26:53.897106886 CET	49719	443	192.168.11.20	172.64.149.159
Dec 30, 2024 15:26:53.897116899 CET	443	49719	172.64.149.159	192.168.11.20
Dec 30, 2024 15:26:53.897288084 CET	49720	443	192.168.11.20	172.64.149.159
Dec 30, 2024 15:26:53.897300005 CET	443	49720	172.64.149.159	192.168.11.20
Dec 30, 2024 15:26:54.619019032 CET	443	49720	172.64.149.159	192.168.11.20
Dec 30, 2024 15:26:54.619380951 CET	443	49720	172.64.149.159	192.168.11.20
Dec 30, 2024 15:26:54.619537115 CET	49720	443	192.168.11.20	172.64.149.159
Dec 30, 2024 15:26:54.619544983 CET	443	49720	172.64.149.159	192.168.11.20
Dec 30, 2024 15:26:54.621541023 CET	49720	443	192.168.11.20	172.64.149.159
Dec 30, 2024 15:26:54.621546030 CET	443	49720	172.64.149.159	192.168.11.20
Dec 30, 2024 15:26:54.621665955 CET	49720	443	192.168.11.20	172.64.149.159
Dec 30, 2024 15:26:54.621669054 CET	443	49720	172.64.149.159	192.168.11.20
Dec 30, 2024 15:26:54.621789932 CET	49720	443	192.168.11.20	172.64.149.159
Dec 30, 2024 15:26:54.621792078 CET	443	49720	172.64.149.159	192.168.11.20
Dec 30, 2024 15:26:54.623575926 CET	443	49719	172.64.149.159	192.168.11.20
Dec 30, 2024 15:26:54.623886108 CET	443	49719	172.64.149.159	192.168.11.20
Dec 30, 2024 15:26:54.624062061 CET	49719	443	192.168.11.20	172.64.149.159
Dec 30, 2024 15:26:54.624068975 CET	443	49719	172.64.149.159	192.168.11.20
Dec 30, 2024 15:26:54.624588966 CET	49719	443	192.168.11.20	172.64.149.159
Dec 30, 2024 15:26:54.624594927 CET	443	49719	172.64.149.159	192.168.11.20
Dec 30, 2024 15:26:54.751315117 CET	443	49720	172.64.149.159	192.168.11.20
Dec 30, 2024 15:26:54.751697063 CET	49720	443	192.168.11.20	172.64.149.159
Dec 30, 2024 15:26:54.751703978 CET	443	49720	172.64.149.159	192.168.11.20
Dec 30, 2024 15:26:54.753611088 CET	443	49719	172.64.149.159	192.168.11.20
Dec 30, 2024 15:26:54.804447889 CET	49719	443	192.168.11.20	172.64.149.159
Dec 30, 2024 15:26:54.880886078 CET	443	49720	172.64.149.159	192.168.11.20
Dec 30, 2024 15:26:54.922385931 CET	49720	443	192.168.11.20	172.64.149.159
Dec 30, 2024 15:26:54.922399998 CET	443	49720	172.64.149.159	192.168.11.20
Dec 30, 2024 15:26:54.971335888 CET	49720	443	192.168.11.20	172.64.149.159
Dec 30, 2024 15:26:55.057800055 CET	49721	443	192.168.11.20	104.18.35.227
Dec 30, 2024 15:26:55.057818890 CET	443	49721	104.18.35.227	192.168.11.20
Dec 30, 2024 15:26:55.058111906 CET	49721	443	192.168.11.20	104.18.35.227
Dec 30, 2024 15:26:55.058494091 CET	49721	443	192.168.11.20	104.18.35.227
Dec 30, 2024 15:26:55.058504105 CET	443	49721	104.18.35.227	192.168.11.20
Dec 30, 2024 15:26:55.783319950 CET	443	49721	104.18.35.227	192.168.11.20
Dec 30, 2024 15:26:55.783498049 CET	443	49721	104.18.35.227	192.168.11.20
Dec 30, 2024 15:26:55.783683062 CET	49721	443	192.168.11.20	104.18.35.227
Dec 30, 2024 15:26:55.783701897 CET	443	49721	104.18.35.227	192.168.11.20
Dec 30, 2024 15:26:55.785598040 CET	49721	443	192.168.11.20	104.18.35.227
Dec 30, 2024 15:26:55.785660982 CET	443	49721	104.18.35.227	192.168.11.20
Dec 30, 2024 15:26:55.785669088 CET	49721	443	192.168.11.20	104.18.35.227
Dec 30, 2024 15:26:55.785676003 CET	443	49721	104.18.35.227	192.168.11.20
Dec 30, 2024 15:26:55.785725117 CET	49721	443	192.168.11.20	104.18.35.227
Dec 30, 2024 15:26:55.785728931 CET	443	49721	104.18.35.227	192.168.11.20
Dec 30, 2024 15:26:55.914700031 CET	443	49721	104.18.35.227	192.168.11.20
Dec 30, 2024 15:26:55.915179014 CET	49721	443	192.168.11.20	104.18.35.227
Dec 30, 2024 15:26:55.915199995 CET	443	49721	104.18.35.227	192.168.11.20
Dec 30, 2024 15:26:56.099591017 CET	443	49721	104.18.35.227	192.168.11.20
Dec 30, 2024 15:26:56.140048981 CET	49721	443	192.168.11.20	104.18.35.227
Dec 30, 2024 15:26:56.232095003 CET	49722	443	192.168.11.20	142.250.217.206
Dec 30, 2024 15:26:56.232117891 CET	443	49722	142.250.217.206	192.168.11.20
Dec 30, 2024 15:26:56.232397079 CET	49722	443	192.168.11.20	142.250.217.206
Dec 30, 2024 15:26:56.232609034 CET	49722	443	192.168.11.20	142.250.217.206
Dec 30, 2024 15:26:56.232620001 CET	443	49722	142.250.217.206	192.168.11.20
Dec 30, 2024 15:26:56.706444979 CET	443	49722	142.250.217.206	192.168.11.20
Dec 30, 2024 15:26:56.706864119 CET	49722	443	192.168.11.20	142.250.217.206
Dec 30, 2024 15:26:56.706871986 CET	443	49722	142.250.217.206	192.168.11.20
Dec 30, 2024 15:26:56.707818031 CET	443	49722	142.250.217.206	192.168.11.20
Dec 30, 2024 15:26:56.708007097 CET	49722	443	192.168.11.20	142.250.217.206
Dec 30, 2024 15:26:56.708833933 CET	49722	443	192.168.11.20	142.250.217.206
Dec 30, 2024 15:26:56.708846092 CET	49722	443	192.168.11.20	142.250.217.206
Dec 30, 2024 15:26:56.708933115 CET	443	49722	142.250.217.206	192.168.11.20
Dec 30, 2024 15:26:56.755043983 CET	49722	443	192.168.11.20	142.250.217.206
Dec 30, 2024 15:26:56.755050898 CET	443	49722	142.250.217.206	192.168.11.20
Dec 30, 2024 15:26:56.806355953 CET	49722	443	192.168.11.20	142.250.217.206
Dec 30, 2024 15:26:57.346148968 CET	443	49722	142.250.217.206	192.168.11.20
Dec 30, 2024 15:26:57.346580982 CET	443	49722	142.250.217.206	192.168.11.20
Dec 30, 2024 15:26:57.346801996 CET	49722	443	192.168.11.20	142.250.217.206
Dec 30, 2024 15:26:57.347106934 CET	49722	443	192.168.11.20	142.250.217.206
Dec 30, 2024 15:26:57.347150087 CET	443	49722	142.250.217.206	192.168.11.20
Dec 30, 2024 15:26:57.348273993 CET	49718	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:26:57.394248009 CET	443	49718	192.178.50.68	192.168.11.20
Dec 30, 2024 15:26:57.567945004 CET	443	49718	192.178.50.68	192.168.11.20
Dec 30, 2024 15:26:57.568120956 CET	443	49718	192.178.50.68	192.168.11.20
Dec 30, 2024 15:26:57.568214893 CET	443	49718	192.178.50.68	192.168.11.20
Dec 30, 2024 15:26:57.568324089 CET	49718	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:26:57.568377972 CET	443	49718	192.178.50.68	192.168.11.20
Dec 30, 2024 15:26:57.568555117 CET	49718	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:26:57.568640947 CET	49718	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:26:57.568754911 CET	443	49718	192.178.50.68	192.168.11.20
Dec 30, 2024 15:26:57.568905115 CET	49718	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:26:57.591136932 CET	49723	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:26:57.591247082 CET	443	49723	192.178.50.68	192.168.11.20
Dec 30, 2024 15:26:57.591458082 CET	49723	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:26:57.591840029 CET	49723	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:26:57.591892958 CET	443	49723	192.178.50.68	192.168.11.20
Dec 30, 2024 15:26:58.070749044 CET	443	49723	192.178.50.68	192.168.11.20
Dec 30, 2024 15:26:58.071259022 CET	49723	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:26:58.071302891 CET	443	49723	192.178.50.68	192.168.11.20
Dec 30, 2024 15:26:58.074738979 CET	443	49723	192.178.50.68	192.168.11.20
Dec 30, 2024 15:26:58.074965000 CET	49723	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:26:58.075813055 CET	49723	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:26:58.075962067 CET	49723	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:26:58.076149940 CET	443	49723	192.178.50.68	192.168.11.20
Dec 30, 2024 15:26:58.123744965 CET	49723	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:26:58.123785973 CET	443	49723	192.178.50.68	192.168.11.20
Dec 30, 2024 15:26:58.173901081 CET	49723	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:26:58.348969936 CET	443	49723	192.178.50.68	192.168.11.20
Dec 30, 2024 15:26:58.349143982 CET	443	49723	192.178.50.68	192.168.11.20
Dec 30, 2024 15:26:58.349262953 CET	443	49723	192.178.50.68	192.168.11.20
Dec 30, 2024 15:26:58.349370956 CET	49723	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:26:58.349595070 CET	49723	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:26:58.349869967 CET	49723	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:26:58.349880934 CET	443	49723	192.178.50.68	192.168.11.20
Dec 30, 2024 15:26:58.483079910 CET	49724	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:26:58.483124971 CET	443	49724	142.250.64.196	192.168.11.20
Dec 30, 2024 15:26:58.483351946 CET	49724	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:26:58.483640909 CET	49724	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:26:58.483665943 CET	443	49724	142.250.64.196	192.168.11.20
Dec 30, 2024 15:26:58.960860968 CET	443	49724	142.250.64.196	192.168.11.20
Dec 30, 2024 15:26:58.961225033 CET	49724	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:26:58.961267948 CET	443	49724	142.250.64.196	192.168.11.20
Dec 30, 2024 15:26:58.964704990 CET	443	49724	142.250.64.196	192.168.11.20
Dec 30, 2024 15:26:58.965056896 CET	49724	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:26:58.965193987 CET	49724	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:26:58.965244055 CET	49724	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:26:58.965486050 CET	443	49724	142.250.64.196	192.168.11.20
Dec 30, 2024 15:26:59.008626938 CET	49724	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:26:59.008670092 CET	443	49724	142.250.64.196	192.168.11.20
Dec 30, 2024 15:26:59.057962894 CET	49724	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:26:59.239732981 CET	443	49724	142.250.64.196	192.168.11.20
Dec 30, 2024 15:26:59.239861012 CET	443	49724	142.250.64.196	192.168.11.20
Dec 30, 2024 15:26:59.239927053 CET	443	49724	142.250.64.196	192.168.11.20
Dec 30, 2024 15:26:59.240021944 CET	49724	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:26:59.240375996 CET	49724	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:26:59.240391970 CET	443	49724	142.250.64.196	192.168.11.20
Dec 30, 2024 15:26:59.992202044 CET	49726	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:26:59.992260933 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:26:59.992564917 CET	49726	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:26:59.992958069 CET	49726	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:26:59.992997885 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:00.468386889 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:00.468812943 CET	49726	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:00.468843937 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:00.469780922 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:00.470273018 CET	49726	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:00.470375061 CET	49726	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:00.470513105 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:00.510339975 CET	49726	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:00.759634972 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:00.759658098 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:00.759834051 CET	49726	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:00.759840012 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:00.759915113 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:00.760032892 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:00.760094881 CET	49726	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:00.760103941 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:00.760257006 CET	49726	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:00.760267973 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:00.769067049 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:00.769265890 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:00.769349098 CET	49726	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:00.769364119 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:00.769588947 CET	49726	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:00.778449059 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:00.826469898 CET	49726	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:00.889355898 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:00.893946886 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:00.894144058 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:00.894279003 CET	49726	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:00.894292116 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:00.894551992 CET	49726	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:00.903415918 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:00.912765980 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:00.912839890 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:00.913038015 CET	49726	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:00.913049936 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:00.913274050 CET	49726	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:00.922230005 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:00.931582928 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:00.931797028 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:00.931844950 CET	49726	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:00.931857109 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:00.932044983 CET	49726	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:00.940551043 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:00.949611902 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:00.949814081 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:00.949843884 CET	49726	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:00.949856997 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:00.950088978 CET	49726	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:00.958621025 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:00.967487097 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:00.967598915 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:00.967742920 CET	49726	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:00.967756033 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:00.967992067 CET	49726	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:00.976489067 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:00.985954046 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:00.986068964 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:00.986190081 CET	49726	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:00.986207008 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:00.986438990 CET	49726	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:01.018851995 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:01.022849083 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:01.022993088 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:01.023068905 CET	49726	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:01.023082972 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:01.023257971 CET	49726	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:01.030569077 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:01.030667067 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:01.030802965 CET	49726	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:01.031050920 CET	49726	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:01.031059980 CET	443	49726	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:01.890439034 CET	49731	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:01.890484095 CET	443	49731	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:01.890646935 CET	49731	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:01.891011000 CET	49731	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:01.891041994 CET	443	49731	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:02.194917917 CET	49733	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:02.194935083 CET	443	49733	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:02.195106030 CET	49733	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:02.195450068 CET	49733	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:02.195461035 CET	443	49733	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:02.368992090 CET	443	49731	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:02.369386911 CET	49731	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:02.369417906 CET	443	49731	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:02.370351076 CET	443	49731	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:02.370784998 CET	49731	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:02.370831013 CET	49731	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:02.371005058 CET	443	49731	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:02.411959887 CET	49731	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:02.631845951 CET	443	49731	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:02.631881952 CET	443	49731	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:02.632059097 CET	49731	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:02.632074118 CET	443	49731	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:02.632195950 CET	443	49731	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:02.632348061 CET	443	49731	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:02.632431984 CET	49731	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:02.632450104 CET	443	49731	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:02.632538080 CET	443	49731	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:02.632589102 CET	49731	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:02.632599115 CET	443	49731	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:02.632733107 CET	49731	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:02.632742882 CET	443	49731	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:02.641280890 CET	443	49731	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:02.641527891 CET	49731	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:02.641542912 CET	443	49731	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:02.673850060 CET	443	49733	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:02.674253941 CET	49733	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:02.674293995 CET	443	49733	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:02.675164938 CET	443	49733	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:02.675569057 CET	49733	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:02.675659895 CET	49733	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:02.675817013 CET	443	49733	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:02.694407940 CET	49731	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:02.694438934 CET	443	49731	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:02.728406906 CET	49733	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:02.745918036 CET	49731	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:02.761312008 CET	443	49731	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:02.765942097 CET	443	49731	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:02.766007900 CET	443	49731	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:02.766217947 CET	49731	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:02.766246080 CET	443	49731	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:02.766390085 CET	49731	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:02.775538921 CET	443	49731	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:02.775645971 CET	443	49731	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:02.775748968 CET	49731	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:02.777609110 CET	49731	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:02.777642012 CET	443	49731	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:02.780203104 CET	49736	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:02.780246973 CET	443	49736	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:02.780452013 CET	49736	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:02.780786991 CET	49736	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:02.780812979 CET	443	49736	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:02.902168036 CET	49737	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:02.902228117 CET	443	49737	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:02.902443886 CET	49737	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:02.902740955 CET	49737	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:02.902765036 CET	443	49737	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:02.955254078 CET	443	49733	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:02.955568075 CET	443	49733	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:02.955873013 CET	49733	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:02.956397057 CET	49733	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:02.956429005 CET	443	49733	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:02.957989931 CET	49738	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:02.958045959 CET	443	49738	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:02.958214998 CET	49738	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:02.958586931 CET	49738	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:02.958621025 CET	443	49738	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:03.254179001 CET	443	49736	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:03.254692078 CET	49736	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:03.254714966 CET	443	49736	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:03.255512953 CET	443	49736	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:03.256036043 CET	49736	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:03.256119967 CET	49736	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:03.256231070 CET	443	49736	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:03.307111979 CET	49736	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:03.378216028 CET	443	49737	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:03.378626108 CET	49737	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:03.378645897 CET	443	49737	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:03.379165888 CET	443	49737	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:03.379621029 CET	49737	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:03.379728079 CET	443	49737	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:03.379863024 CET	49739	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:03.379894018 CET	443	49739	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:03.379961014 CET	49737	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:03.380029917 CET	49739	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:03.380361080 CET	49739	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:03.380378962 CET	443	49739	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:03.422260046 CET	443	49737	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:03.437442064 CET	443	49738	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:03.438036919 CET	49738	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:03.438052893 CET	443	49738	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:03.438549042 CET	443	49738	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:03.439292908 CET	49738	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:03.439435005 CET	443	49738	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:03.439675093 CET	49738	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:03.482245922 CET	443	49738	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:03.518062115 CET	443	49736	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:03.518197060 CET	443	49736	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:03.518254042 CET	443	49736	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:03.518383980 CET	49736	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:03.518403053 CET	443	49736	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:03.518497944 CET	443	49736	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:03.518501997 CET	49736	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:03.518521070 CET	443	49736	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:03.518713951 CET	443	49736	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:03.518733978 CET	49736	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:03.518748045 CET	443	49736	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:03.518866062 CET	49736	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:03.518878937 CET	443	49736	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:03.527607918 CET	443	49736	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:03.527875900 CET	49736	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:03.527889967 CET	443	49736	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:03.573016882 CET	49736	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:03.573044062 CET	443	49736	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:03.614075899 CET	49736	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:03.642188072 CET	443	49737	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:03.642277002 CET	443	49737	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:03.642309904 CET	443	49737	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:03.642467976 CET	49737	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:03.642493010 CET	443	49737	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:03.642663002 CET	49737	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:03.642673969 CET	443	49737	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:03.642760038 CET	443	49737	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:03.642915010 CET	49737	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:03.643735886 CET	49737	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:03.643760920 CET	443	49737	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:03.645479918 CET	49740	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:03.645515919 CET	443	49740	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:03.645801067 CET	49740	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:03.646054029 CET	49740	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:03.646075010 CET	443	49740	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:03.647540092 CET	443	49736	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:03.652317047 CET	443	49736	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:03.652390957 CET	443	49736	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:03.652548075 CET	49736	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:03.652573109 CET	443	49736	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:03.652730942 CET	49736	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:03.661751986 CET	443	49736	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:03.661871910 CET	443	49736	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:03.662067890 CET	49736	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:03.662194014 CET	49736	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:03.662230968 CET	443	49736	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:03.717428923 CET	443	49738	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:03.717663050 CET	443	49738	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:03.717823029 CET	49738	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:03.718316078 CET	49738	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:03.718349934 CET	443	49738	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:03.855158091 CET	443	49739	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:03.855611086 CET	49739	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:03.855648041 CET	443	49739	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:03.856600046 CET	443	49739	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:03.857023954 CET	49739	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:03.857163906 CET	49739	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:03.857204914 CET	443	49739	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:03.897310972 CET	49739	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:04.118251085 CET	443	49740	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:04.118684053 CET	49740	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:04.118716955 CET	443	49740	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:04.119748116 CET	443	49740	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:04.120273113 CET	49740	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:04.120381117 CET	49740	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:04.120503902 CET	443	49740	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:04.135495901 CET	443	49739	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:04.135580063 CET	443	49739	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:04.135766983 CET	49739	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:04.135802031 CET	443	49739	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:04.135819912 CET	443	49739	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:04.135986090 CET	49739	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:04.136007071 CET	443	49739	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:04.136250973 CET	443	49739	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:04.136420012 CET	49739	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:04.136442900 CET	443	49739	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:04.140474081 CET	443	49739	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:04.140630960 CET	49739	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:04.140707970 CET	49739	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:04.140739918 CET	443	49739	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:04.164443016 CET	49740	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:04.380557060 CET	443	49740	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:04.380680084 CET	443	49740	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:04.380774021 CET	443	49740	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:04.381021023 CET	443	49740	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:04.381021976 CET	49740	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:04.381035089 CET	443	49740	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:04.381091118 CET	443	49740	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:04.381213903 CET	49740	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:04.381408930 CET	49740	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:04.381611109 CET	49740	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:04.381618977 CET	443	49740	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:11.945538998 CET	49744	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:11.945610046 CET	443	49744	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:11.945745945 CET	49744	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:11.946090937 CET	49744	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:11.946130991 CET	443	49744	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:12.421483040 CET	443	49744	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:12.421817064 CET	49744	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:12.421847105 CET	443	49744	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:12.422797918 CET	443	49744	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:12.423216105 CET	49744	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:12.423316956 CET	49744	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:12.423368931 CET	49744	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:12.423418999 CET	49744	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:12.423444986 CET	443	49744	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:12.471771002 CET	49744	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:12.489327908 CET	80	49679	192.229.211.108	192.168.11.20
Dec 30, 2024 15:27:12.489639044 CET	49679	80	192.168.11.20	192.229.211.108
Dec 30, 2024 15:27:12.744900942 CET	443	49744	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:12.744939089 CET	443	49744	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:12.745201111 CET	49744	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:12.745215893 CET	443	49744	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:12.745273113 CET	443	49744	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:12.745393038 CET	443	49744	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:12.745459080 CET	443	49744	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:12.745469093 CET	49744	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:12.745481014 CET	443	49744	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:12.745645046 CET	49744	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:12.745652914 CET	443	49744	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:12.745943069 CET	49744	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:12.754240036 CET	443	49744	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:12.763645887 CET	443	49744	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:12.763926983 CET	49744	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:12.763947010 CET	443	49744	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:12.806643009 CET	49744	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:12.825295925 CET	80	49680	192.229.211.108	192.168.11.20
Dec 30, 2024 15:27:12.825468063 CET	49680	80	192.168.11.20	192.229.211.108
Dec 30, 2024 15:27:12.874587059 CET	443	49744	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:12.879331112 CET	443	49744	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:12.879429102 CET	443	49744	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:12.879652977 CET	49744	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:12.879678965 CET	443	49744	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:12.879807949 CET	49744	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:12.888756990 CET	443	49744	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:12.889017105 CET	443	49744	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:12.889204979 CET	49744	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:12.889353991 CET	49744	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:12.889374971 CET	443	49744	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:12.890731096 CET	49745	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:12.890762091 CET	443	49745	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:12.891027927 CET	49745	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:12.891344070 CET	49745	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:12.891364098 CET	443	49745	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:12.908941031 CET	49750	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:12.908984900 CET	443	49750	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:12.909138918 CET	49750	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:12.909440041 CET	49750	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:12.909452915 CET	443	49750	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:13.365633965 CET	443	49745	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:13.365976095 CET	49745	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:13.366012096 CET	443	49745	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:13.366991997 CET	443	49745	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:13.367432117 CET	49745	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:13.367506981 CET	49745	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:13.367669106 CET	443	49745	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:13.381700993 CET	443	49750	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:13.382102966 CET	49750	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:13.382121086 CET	443	49750	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:13.382618904 CET	443	49750	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:13.383080959 CET	49750	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:13.383127928 CET	49750	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:13.383141994 CET	443	49750	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:13.383209944 CET	443	49750	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:13.421761036 CET	49745	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:13.438879013 CET	49750	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:13.647582054 CET	443	49745	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:13.647629023 CET	443	49745	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:13.647846937 CET	49745	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:13.647861958 CET	443	49745	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:13.648648024 CET	443	49745	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:13.648808956 CET	49745	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:13.648880959 CET	49745	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:13.648880959 CET	49745	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:13.648900032 CET	443	49745	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:13.649030924 CET	49745	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:13.659276962 CET	443	49750	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:13.659420013 CET	443	49750	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:13.659466028 CET	443	49750	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:13.659523964 CET	443	49750	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:13.659595966 CET	49750	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:13.659615993 CET	443	49750	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:13.659678936 CET	49750	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:13.659778118 CET	443	49750	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:13.659858942 CET	443	49750	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:13.660029888 CET	443	49750	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:13.660039902 CET	49750	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:13.660054922 CET	443	49750	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:13.660185099 CET	49750	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:13.668450117 CET	443	49750	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:13.668610096 CET	49750	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:13.668627977 CET	443	49750	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:13.722404003 CET	49750	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:13.722424030 CET	443	49750	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:13.772351980 CET	49750	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:13.788341999 CET	443	49750	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:13.792794943 CET	443	49750	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:13.792964935 CET	443	49750	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:13.793035984 CET	49750	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:13.793056011 CET	443	49750	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:13.793319941 CET	49750	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:13.802318096 CET	443	49750	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:13.811660051 CET	443	49750	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:13.811707973 CET	443	49750	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:13.811882019 CET	49750	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:13.811902046 CET	443	49750	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:13.812040091 CET	49750	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:13.821002007 CET	443	49750	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:13.830413103 CET	443	49750	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:13.830493927 CET	443	49750	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:13.830527067 CET	49750	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:13.830547094 CET	443	49750	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:13.830873013 CET	49750	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:13.839525938 CET	443	49750	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:13.848654985 CET	443	49750	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:13.848885059 CET	49750	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:13.848907948 CET	443	49750	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:13.857472897 CET	443	49750	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:13.857795000 CET	49750	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:13.857811928 CET	443	49750	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:13.866434097 CET	443	49750	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:13.866602898 CET	443	49750	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:13.866652966 CET	49750	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:13.866755009 CET	49750	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:13.866921902 CET	49750	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:13.866940975 CET	443	49750	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:13.868805885 CET	49757	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:13.868838072 CET	443	49757	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:13.869098902 CET	49757	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:13.869424105 CET	49757	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:13.869446039 CET	443	49757	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:14.342845917 CET	443	49757	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:14.343362093 CET	49757	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:14.343400002 CET	443	49757	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:14.344475985 CET	443	49757	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:14.344892025 CET	49757	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:14.344991922 CET	49757	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:14.345181942 CET	443	49757	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:14.399847031 CET	49757	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:14.622667074 CET	443	49757	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:14.622781038 CET	443	49757	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:14.622864962 CET	443	49757	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:14.622934103 CET	443	49757	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:14.622991085 CET	49757	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:14.623039961 CET	443	49757	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:14.623143911 CET	49757	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:14.623173952 CET	443	49757	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:14.623382092 CET	49757	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:14.623399973 CET	443	49757	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:14.623667955 CET	49757	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:14.631848097 CET	443	49757	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:14.641349077 CET	443	49757	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:14.641619921 CET	49757	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:14.641657114 CET	443	49757	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:14.696703911 CET	49757	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:14.751315117 CET	443	49757	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:14.755892038 CET	443	49757	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:14.755955935 CET	443	49757	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:14.756150007 CET	49757	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:14.756182909 CET	443	49757	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:14.756409883 CET	49757	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:14.765271902 CET	443	49757	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:14.774621010 CET	443	49757	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:14.774750948 CET	443	49757	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:14.774801016 CET	49757	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:14.774836063 CET	443	49757	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:14.775084972 CET	49757	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:14.784012079 CET	443	49757	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:14.793384075 CET	443	49757	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:14.793457031 CET	443	49757	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:14.793715954 CET	49757	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:14.793747902 CET	443	49757	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:14.794033051 CET	49757	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:14.802375078 CET	443	49757	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:14.811309099 CET	443	49757	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:14.811479092 CET	49757	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:14.811511040 CET	443	49757	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:14.820396900 CET	443	49757	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:14.820683956 CET	49757	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:14.820719004 CET	443	49757	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:14.829240084 CET	443	49757	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:14.829426050 CET	443	49757	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:14.829499006 CET	49757	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:14.829701900 CET	49757	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:14.829834938 CET	49757	443	192.168.11.20	142.250.64.196
Dec 30, 2024 15:27:14.829869986 CET	443	49757	142.250.64.196	192.168.11.20
Dec 30, 2024 15:27:22.360979080 CET	443	49697	4.152.199.46	192.168.11.20
Dec 30, 2024 15:27:22.360989094 CET	443	49697	4.152.199.46	192.168.11.20
Dec 30, 2024 15:27:22.360996008 CET	443	49697	4.152.199.46	192.168.11.20
Dec 30, 2024 15:27:22.361219883 CET	49697	443	192.168.11.20	4.152.199.46
Dec 30, 2024 15:27:22.361287117 CET	49697	443	192.168.11.20	4.152.199.46
Dec 30, 2024 15:27:22.518014908 CET	443	49697	4.152.199.46	192.168.11.20
Dec 30, 2024 15:27:27.744334936 CET	49709	443	192.168.11.20	23.50.112.63
Dec 30, 2024 15:27:28.039499998 CET	49694	443	192.168.11.20	52.159.126.152
Dec 30, 2024 15:27:28.199143887 CET	443	49694	52.159.126.152	192.168.11.20
Dec 30, 2024 15:27:28.242037058 CET	49694	443	192.168.11.20	52.159.126.152
Dec 30, 2024 15:27:28.445218086 CET	49710	80	192.168.11.20	172.217.165.195
Dec 30, 2024 15:27:28.445319891 CET	49707	80	192.168.11.20	199.232.210.172
Dec 30, 2024 15:27:28.574678898 CET	80	49710	172.217.165.195	192.168.11.20
Dec 30, 2024 15:27:28.574966908 CET	49710	80	192.168.11.20	172.217.165.195
Dec 30, 2024 15:27:28.586227894 CET	80	49707	199.232.210.172	192.168.11.20
Dec 30, 2024 15:27:28.586297989 CET	80	49707	199.232.210.172	192.168.11.20
Dec 30, 2024 15:27:28.586478949 CET	49707	80	192.168.11.20	199.232.210.172
Dec 30, 2024 15:27:39.767815113 CET	49719	443	192.168.11.20	172.64.149.159
Dec 30, 2024 15:27:39.767860889 CET	443	49719	172.64.149.159	192.168.11.20
Dec 30, 2024 15:27:39.924372911 CET	49720	443	192.168.11.20	172.64.149.159
Dec 30, 2024 15:27:39.924413919 CET	443	49720	172.64.149.159	192.168.11.20
Dec 30, 2024 15:27:41.107850075 CET	49721	443	192.168.11.20	104.18.35.227
Dec 30, 2024 15:27:41.107927084 CET	443	49721	104.18.35.227	192.168.11.20
Dec 30, 2024 15:27:52.844604969 CET	49765	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:52.844635010 CET	443	49765	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:52.844909906 CET	49765	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:52.845258951 CET	49765	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:52.845271111 CET	443	49765	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:53.318305969 CET	443	49765	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:53.318805933 CET	49765	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:53.318851948 CET	443	49765	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:53.319189072 CET	443	49765	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:53.319645882 CET	49765	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:53.319706917 CET	443	49765	192.178.50.68	192.168.11.20
Dec 30, 2024 15:27:53.379076958 CET	49765	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:27:56.526037931 CET	49719	443	192.168.11.20	172.64.149.159
Dec 30, 2024 15:27:56.526154995 CET	443	49719	172.64.149.159	192.168.11.20
Dec 30, 2024 15:27:56.526371956 CET	49719	443	192.168.11.20	172.64.149.159
Dec 30, 2024 15:28:03.320156097 CET	443	49765	192.178.50.68	192.168.11.20
Dec 30, 2024 15:28:03.320276022 CET	443	49765	192.178.50.68	192.168.11.20
Dec 30, 2024 15:28:03.320467949 CET	49765	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:28:04.533286095 CET	49765	443	192.168.11.20	192.178.50.68
Dec 30, 2024 15:28:04.533298016 CET	443	49765	192.178.50.68	192.168.11.20
Dec 30, 2024 15:28:07.262949944 CET	443	49708	23.45.49.159	192.168.11.20
Dec 30, 2024 15:28:07.262985945 CET	443	49708	23.45.49.159	192.168.11.20
Dec 30, 2024 15:28:07.263134003 CET	49708	443	192.168.11.20	23.45.49.159
Dec 30, 2024 15:28:07.325171947 CET	443	49672	23.50.112.8	192.168.11.20
Dec 30, 2024 15:28:07.325228930 CET	443	49672	23.50.112.8	192.168.11.20
Dec 30, 2024 15:28:07.325392008 CET	49672	443	192.168.11.20	23.50.112.8
Dec 30, 2024 15:28:07.325392008 CET	49672	443	192.168.11.20	23.50.112.8

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 30, 2024 15:26:40.134457111 CET	137	137	192.168.11.20	192.168.11.255
Dec 30, 2024 15:26:40.870775938 CET	137	137	192.168.11.20	192.168.11.255
Dec 30, 2024 15:26:41.635833025 CET	137	137	192.168.11.20	192.168.11.255
Dec 30, 2024 15:26:48.212143898 CET	62851	1900	192.168.11.20	239.255.255.250
Dec 30, 2024 15:26:48.306361914 CET	53	53070	1.1.1.1	192.168.11.20
Dec 30, 2024 15:26:48.341774940 CET	53	58825	1.1.1.1	192.168.11.20
Dec 30, 2024 15:26:49.213999987 CET	62851	1900	192.168.11.20	239.255.255.250
Dec 30, 2024 15:26:49.278918028 CET	53	58646	1.1.1.1	192.168.11.20
Dec 30, 2024 15:26:50.214833021 CET	62851	1900	192.168.11.20	239.255.255.250
Dec 30, 2024 15:26:50.785712004 CET	53	59234	1.1.1.1	192.168.11.20
Dec 30, 2024 15:26:51.230266094 CET	62851	1900	192.168.11.20	239.255.255.250
Dec 30, 2024 15:26:52.784996033 CET	59686	53	192.168.11.20	1.1.1.1
Dec 30, 2024 15:26:52.785064936 CET	49551	53	192.168.11.20	1.1.1.1
Dec 30, 2024 15:26:52.914489985 CET	53	49551	1.1.1.1	192.168.11.20
Dec 30, 2024 15:26:52.914983988 CET	53	59686	1.1.1.1	192.168.11.20
Dec 30, 2024 15:26:53.763159990 CET	53194	53	192.168.11.20	1.1.1.1
Dec 30, 2024 15:26:53.763277054 CET	57050	53	192.168.11.20	1.1.1.1
Dec 30, 2024 15:26:53.895123959 CET	53	53194	1.1.1.1	192.168.11.20
Dec 30, 2024 15:26:53.896140099 CET	53	57050	1.1.1.1	192.168.11.20
Dec 30, 2024 15:26:54.924401045 CET	64126	53	192.168.11.20	1.1.1.1
Dec 30, 2024 15:26:54.924444914 CET	55626	53	192.168.11.20	1.1.1.1
Dec 30, 2024 15:26:55.056391001 CET	53	64126	1.1.1.1	192.168.11.20
Dec 30, 2024 15:26:55.057132006 CET	53	55626	1.1.1.1	192.168.11.20
Dec 30, 2024 15:26:56.101737976 CET	52300	53	192.168.11.20	1.1.1.1
Dec 30, 2024 15:26:56.101871967 CET	60907	53	192.168.11.20	1.1.1.1
Dec 30, 2024 15:26:56.230990887 CET	53	52300	1.1.1.1	192.168.11.20
Dec 30, 2024 15:26:56.231539011 CET	53	60907	1.1.1.1	192.168.11.20
Dec 30, 2024 15:26:58.351852894 CET	57834	53	192.168.11.20	1.1.1.1
Dec 30, 2024 15:26:58.351936102 CET	63873	53	192.168.11.20	1.1.1.1
Dec 30, 2024 15:26:58.481081009 CET	53	57834	1.1.1.1	192.168.11.20
Dec 30, 2024 15:26:58.482460022 CET	53	63873	1.1.1.1	192.168.11.20
Dec 30, 2024 15:26:58.482748032 CET	53	55699	1.1.1.1	192.168.11.20
Dec 30, 2024 15:27:00.103393078 CET	53	54819	1.1.1.1	192.168.11.20
Dec 30, 2024 15:27:00.224512100 CET	53	59388	1.1.1.1	192.168.11.20
Dec 30, 2024 15:27:05.958244085 CET	138	138	192.168.11.20	192.168.11.255
Dec 30, 2024 15:27:10.833823919 CET	53	55332	1.1.1.1	192.168.11.20
Dec 30, 2024 15:27:17.891765118 CET	53	64468	1.1.1.1	192.168.11.20
Dec 30, 2024 15:27:32.883734941 CET	53	60031	1.1.1.1	192.168.11.20
Dec 30, 2024 15:27:48.321888924 CET	53	50945	1.1.1.1	192.168.11.20
Dec 30, 2024 15:27:58.635998011 CET	53	52511	1.1.1.1	192.168.11.20

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 30, 2024 15:26:52.784996033 CET	192.168.11.20	1.1.1.1	0x379f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 30, 2024 15:26:52.785064936 CET	192.168.11.20	1.1.1.1	0xaa5a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 30, 2024 15:26:53.763159990 CET	192.168.11.20	1.1.1.1	0x2ad8	Standard query (0)	flowto.it	A (IP address)	IN (0x0001)	false
Dec 30, 2024 15:26:53.763277054 CET	192.168.11.20	1.1.1.1	0x2571	Standard query (0)	flowto.it	65	IN (0x0001)	false
Dec 30, 2024 15:26:54.924401045 CET	192.168.11.20	1.1.1.1	0xa5b5	Standard query (0)	flowcode.com	A (IP address)	IN (0x0001)	false
Dec 30, 2024 15:26:54.924444914 CET	192.168.11.20	1.1.1.1	0xf8b	Standard query (0)	flowcode.com	65	IN (0x0001)	false
Dec 30, 2024 15:26:56.101737976 CET	192.168.11.20	1.1.1.1	0x65d6	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Dec 30, 2024 15:26:56.101871967 CET	192.168.11.20	1.1.1.1	0x51c7	Standard query (0)	google.com	65	IN (0x0001)	false
Dec 30, 2024 15:26:58.351852894 CET	192.168.11.20	1.1.1.1	0x2a1b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 30, 2024 15:26:58.351936102 CET	192.168.11.20	1.1.1.1	0x127c	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Dec 30, 2024 15:26:52.914489985 CET	1.1.1.1	192.168.11.20	0xaa5a	No error (0)	www.google.com		65	IN (0x0001)	false
Dec 30, 2024 15:26:52.914983988 CET	1.1.1.1	192.168.11.20	0x379f	No error (0)	www.google.com	192.178.50.68	A (IP address)	IN (0x0001)	false
Dec 30, 2024 15:26:53.895123959 CET	1.1.1.1	192.168.11.20	0x2ad8	No error (0)	flowto.it	172.64.149.159	A (IP address)	IN (0x0001)	false
Dec 30, 2024 15:26:53.895123959 CET	1.1.1.1	192.168.11.20	0x2ad8	No error (0)	flowto.it	104.18.38.97	A (IP address)	IN (0x0001)	false
Dec 30, 2024 15:26:53.896140099 CET	1.1.1.1	192.168.11.20	0x2571	No error (0)	flowto.it		65	IN (0x0001)	false
Dec 30, 2024 15:26:55.056391001 CET	1.1.1.1	192.168.11.20	0xa5b5	No error (0)	flowcode.com	104.18.35.227	A (IP address)	IN (0x0001)	false
Dec 30, 2024 15:26:55.056391001 CET	1.1.1.1	192.168.11.20	0xa5b5	No error (0)	flowcode.com	172.64.152.29	A (IP address)	IN (0x0001)	false
Dec 30, 2024 15:26:55.057132006 CET	1.1.1.1	192.168.11.20	0xf8b	No error (0)	flowcode.com		65	IN (0x0001)	false
Dec 30, 2024 15:26:56.230990887 CET	1.1.1.1	192.168.11.20	0x65d6	No error (0)	google.com	142.250.217.206	A (IP address)	IN (0x0001)	false
Dec 30, 2024 15:26:56.231539011 CET	1.1.1.1	192.168.11.20	0x51c7	No error (0)	google.com		65	IN (0x0001)	false
Dec 30, 2024 15:26:58.481081009 CET	1.1.1.1	192.168.11.20	0x2a1b	No error (0)	www.google.com	142.250.64.196	A (IP address)	IN (0x0001)	false
Dec 30, 2024 15:26:58.482460022 CET	1.1.1.1	192.168.11.20	0x127c	No error (0)	www.google.com		65	IN (0x0001)	false

HTTP Request Dependency Graph

google.com

www.google.com

https:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.11.20	49722	142.250.217.206	443	840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 14:26:56 UTC	917	OUT	GET /amp/web1.mlp-pe.com?fce_id=c5023f68-6cd8-4695-8d96-ef06a705cb58 HTTP/1.1 Host: google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=517=i4E8sm-BN75bnGkPw4VW8uy51aQ8ounjntfNX2fu8MFJNuIvCX0dRBy-XkHqHwKOVFSSaC2nqfULsnHhY3TzIXHWC90jS3Wi2BINtQIDr1LJvZE4Ud-byTNL9Q04Nd1-ydmJvrWYY5vORspW6soJ1bMj20dq8UvPjgkw2sOvmuTUanqu
2024-12-30 14:26:57 UTC	1035	IN	HTTP/1.1 302 Found Location: https://www.google.com/sorry/index?continue=https://google.com/amp/web1.mlp-pe.com%3Ffce_id%3Dc5023f68-6cd8-4695-8d96-ef06a705cb58&q=EgRmgZnuGLDbyrsGIjCafytzTqN3e51BjWxsNClAy8uz54vRDPSHaWFgiv41s7JPNCztuhekCtRcp5sUtIsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM x-hallmonitor-challenge: CgsIsdvKuwYQkburfxIEZoGZ7g Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-gLtvbDOqdEwVkAHVeMvHwQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Permissions-Policy: unload=() Date: Mon, 30 Dec 2024 14:26:57 GMT Server: gws Content-Length: 461 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-30 14:26:57 UTC	220	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 6f 72 72 79 2f 69 6e 64 65 78 3f 63 6f 6e 74 69 6e 75 65 3d 68 74 74 70 73 3a 2f 2f Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.com/sorry/index?continue=https://
2024-12-30 14:26:57 UTC	241	IN	Data Raw: 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 6d 70 2f 77 65 62 31 2e 6d 6c 70 2d 70 65 2e 63 6f 6d 25 33 46 66 63 65 5f 69 64 25 33 44 63 35 30 32 33 66 36 38 2d 36 63 64 38 2d 34 36 39 35 2d 38 64 39 36 2d 65 66 30 36 61 37 30 35 63 62 35 38 26 61 6d 70 3b 71 3d 45 67 52 6d 67 5a 6e 75 47 4c 44 62 79 72 73 47 49 6a 43 61 66 79 74 7a 54 71 4e 33 65 35 31 42 6a 57 78 73 4e 43 6c 41 79 38 75 7a 35 34 76 52 44 50 53 48 61 57 46 67 69 76 34 31 73 37 4a 50 4e 43 7a 74 75 68 65 6b 43 74 52 63 70 35 73 55 74 49 73 79 41 58 4a 4b 47 56 4e 50 55 6c 4a 5a 58 30 46 43 56 56 4e 4a 56 6b 56 66 54 6b 56 55 58 30 31 46 55 31 4e 42 52 30 56 61 41 55 4d 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: google.com/amp/web1.mlp-pe.com%3Ffce_id%3Dc5023f68-6cd8-4695-8d96-ef06a705cb58&q=EgRmgZnuGLDbyrsGIjCafytzTqN3e51BjWxsNClAy8uz54vRDPSHaWFgiv41s7JPNCztuhekCtRcp5sUtIsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.11.20	49718	192.178.50.68	443	840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 14:26:57 UTC	1095	OUT	GET /sorry/index?continue=https://google.com/amp/web1.mlp-pe.com%3Ffce_id%3Dc5023f68-6cd8-4695-8d96-ef06a705cb58&q=EgRmgZnuGLDbyrsGIjCafytzTqN3e51BjWxsNClAy8uz54vRDPSHaWFgiv41s7JPNCztuhekCtRcp5sUtIsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1 Host: www.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=517=i4E8sm-BN75bnGkPw4VW8uy51aQ8ounjntfNX2fu8MFJNuIvCX0dRBy-XkHqHwKOVFSSaC2nqfULsnHhY3TzIXHWC90jS3Wi2BINtQIDr1LJvZE4Ud-byTNL9Q04Nd1-ydmJvrWYY5vORspW6soJ1bMj20dq8UvPjgkw2sOvmuTUanqu
2024-12-30 14:26:57 UTC	356	IN	HTTP/1.1 429 Too Many Requests Date: Mon, 30 Dec 2024 14:26:57 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html Server: HTTP server (unknown) Content-Length: 3256 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-30 14:26:57 UTC	899	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 74 69 74 6c 65 3e 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 6d 70 2f 77 65 62 31 2e 6d 6c 70 2d 70 65 2e 63 6f 6d 3f 66 63 65 5f 69 64 3d 63 35 30 32 33 66 36 38 2d 36 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"><meta name="viewport" content="initial-scale=1"><title>https://google.com/amp/web1.mlp-pe.com?fce_id=c5023f68-6
2024-12-30 14:26:57 UTC	1255	IN	Data Raw: 20 64 65 66 65 72 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 76 61 72 20 73 75 62 6d 69 74 43 61 6c 6c 62 61 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 28 72 65 73 70 6f 6e 73 65 29 20 7b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 61 70 74 63 68 61 2d 66 6f 72 6d 27 29 2e 73 75 62 6d 69 74 28 29 3b 7d 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 64 69 76 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 22 20 63 6c 61 73 73 3d 22 67 2d 72 65 63 61 70 74 63 68 61 22 20 64 61 74 61 2d 73 69 74 65 6b 65 79 3d 22 36 4c 66 77 75 79 55 54 41 41 41 41 41 4f 41 6d 6f 53 30 66 64 71 69 6a 43 32 50 62 62 64 48 34 6b 6a 71 36 32 59 31 62 22 20 64 61 74 61 2d 63 61 6c 6c 62 61 63 6b 3d 22 73 75 62 6d 69 74 43 61 6c 6c 62 61 63 6b 22 20 64 Data Ascii: defer></script><script>var submitCallback = function(response) {document.getElementById('captcha-form').submit();};</script><div id="recaptcha" class="g-recaptcha" data-sitekey="6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b" data-callback="submitCallback" d
2024-12-30 14:26:57 UTC	1102	IN	Data Raw: 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 65 65 3b 20 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 20 6d 61 72 67 69 6e 3a 30 20 30 20 31 35 70 78 20 30 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 65 6d 3b 22 3e 0a 54 68 69 73 20 70 61 67 65 20 61 70 70 65 61 72 73 20 77 68 65 6e 20 47 6f 6f 67 6c 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 64 65 74 65 63 74 73 20 72 65 71 75 65 73 74 73 20 63 6f 6d 69 6e 67 20 66 72 6f 6d 20 79 6f 75 72 20 63 6f 6d 70 75 74 65 72 20 6e 65 74 77 6f 72 6b 20 77 68 69 63 68 20 61 70 70 65 61 72 20 74 6f 20 62 65 20 69 6e 20 76 69 6f 6c 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 3c 61 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 6f 6c 69 63 69 65 73 2f 74 65 72 6d 73 2f 22 3e 54 Data Ascii: background-color:#eee; padding:10px; margin:0 0 15px 0; line-height:1.4em;">This page appears when Google automatically detects requests coming from your computer network which appear to be in violation of the <a href="//www.google.com/policies/terms/">T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.11.20	49723	192.178.50.68	443	840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 14:26:58 UTC	1104	OUT	GET /recaptcha/api.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CI+2yQEIorbJAQipncoBCMD2ygEIkqHLAQic/swBCIWgzQEIrJ7OAQjkr84BCMO2zgEIvbnOAQjtvM4BCLu9zgEI1r3OAQjMv84BGMHLzAEYva7OARidsc4B Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/sorry/index?continue=https://google.com/amp/web1.mlp-pe.com%3Ffce_id%3Dc5023f68-6cd8-4695-8d96-ef06a705cb58&q=EgRmgZnuGLDbyrsGIjCafytzTqN3e51BjWxsNClAy8uz54vRDPSHaWFgiv41s7JPNCztuhekCtRcp5sUtIsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=517=i4E8sm-BN75bnGkPw4VW8uy51aQ8ounjntfNX2fu8MFJNuIvCX0dRBy-XkHqHwKOVFSSaC2nqfULsnHhY3TzIXHWC90jS3Wi2BINtQIDr1LJvZE4Ud-byTNL9Q04Nd1-ydmJvrWYY5vORspW6soJ1bMj20dq8UvPjgkw2sOvmuTUanqu
2024-12-30 14:26:58 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Mon, 30 Dec 2024 14:26:58 GMT Date: Mon, 30 Dec 2024 14:26:58 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-30 14:26:58 UTC	506	IN	Data Raw: 35 39 61 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 59a/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-12-30 14:26:58 UTC	935	IN	Data Raw: 28 27 6d 65 74 61 27 29 3b 6d 2e 68 74 74 70 45 71 75 69 76 3d 27 6f 72 69 67 69 6e 2d 74 72 69 61 6c 27 3b 6d 2e 63 6f 6e 74 65 6e 74 3d 27 41 2f 6b 61 72 67 54 46 79 6b 38 4d 52 35 75 65 72 61 76 63 7a 65 66 2f 77 49 6c 54 6b 62 56 6b 31 71 58 51 65 73 70 33 39 6e 56 2b 78 4e 45 43 50 64 4c 42 56 65 59 66 66 78 72 4d 38 54 6d 5a 54 36 52 41 72 57 47 51 56 43 4a 30 4c 52 69 76 44 37 67 6c 63 41 55 41 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c Data Ascii: ('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJl
2024-12-30 14:26:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.11.20	49724	142.250.64.196	443	840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 14:26:58 UTC	631	OUT	GET /recaptcha/api.js HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Accept: / X-Client-Data: CI+2yQEIorbJAQipncoBCMD2ygEIkqHLAQic/swBCIWgzQEI1r3OARjBy8wB Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=517=i4E8sm-BN75bnGkPw4VW8uy51aQ8ounjntfNX2fu8MFJNuIvCX0dRBy-XkHqHwKOVFSSaC2nqfULsnHhY3TzIXHWC90jS3Wi2BINtQIDr1LJvZE4Ud-byTNL9Q04Nd1-ydmJvrWYY5vORspW6soJ1bMj20dq8UvPjgkw2sOvmuTUanqu
2024-12-30 14:26:59 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Mon, 30 Dec 2024 14:26:59 GMT Date: Mon, 30 Dec 2024 14:26:59 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-30 14:26:59 UTC	506	IN	Data Raw: 35 39 61 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 59a/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-12-30 14:26:59 UTC	935	IN	Data Raw: 28 27 6d 65 74 61 27 29 3b 6d 2e 68 74 74 70 45 71 75 69 76 3d 27 6f 72 69 67 69 6e 2d 74 72 69 61 6c 27 3b 6d 2e 63 6f 6e 74 65 6e 74 3d 27 41 2f 6b 61 72 67 54 46 79 6b 38 4d 52 35 75 65 72 61 76 63 7a 65 66 2f 77 49 6c 54 6b 62 56 6b 31 71 58 51 65 73 70 33 39 6e 56 2b 78 4e 45 43 50 64 4c 42 56 65 59 66 66 78 72 4d 38 54 6d 5a 54 36 52 41 72 57 47 51 56 43 4a 30 4c 52 69 76 44 37 67 6c 63 41 55 41 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c Data Ascii: ('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJl
2024-12-30 14:26:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.11.20	49726	192.178.50.68	443	840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 14:27:00 UTC	1710	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=normal&s=V8uk3gXjSxveyP10lsiPTzr4dRJy6ZtZWNETJWzBePJuAB3dILOrmDA5KRrf-WyLe9WVi8m7vKehGKvRgIpDuM13tyq5EWynopbjpK7j5Nh9fXD7vZYUTUp99E0YhfHdB56c-40-lfodJGTO6HPBgt1Lcy15v0N3GbW19-ohagr730LW1YCwHMh-iAQ7CAoQvj5wsfKzTwbMIH7kuiEfW7E68IEg6D3_czVD6QR8DMzYTVPOhYx4meurunowsucYpt0EzfP8vsUZ79JKERyaXd0QAyLoqqg&cb=au63nuisgap HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CI+2yQEIorbJAQipncoBCMD2ygEIkqHLAQic/swBCIWgzQEIrJ7OAQjkr84BCMO2zgEIvbnOAQjtvM4BCLu9zgEI1r3OAQjMv84BGMHLzAEYva7OARidsc4B Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.google.com/sorry/index?continue=https://google.com/amp/web1.mlp-pe.com%3Ffce_id%3Dc5023f68-6cd8-4695-8d96-ef06a705cb58&q=EgRmgZnuGLDbyrsGIjCafytzTqN3e51BjWxsNClAy8uz54vRDPSHaWFgiv41s7JPNCztuhekCtRcp5sUtIsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=517=i4E8sm-BN75bnGkPw4VW8uy51aQ8ounjntfNX2fu8MFJNuIvCX0dRBy-XkHqHwKOVFSSaC2nqfULsnHhY3TzIXHWC90jS3Wi2BINtQIDr1LJvZE4Ud-byTNL9Q04Nd1-ydmJvrWYY5vORspW6soJ1bMj20dq8UvPjgkw2sOvmuTUanqu
2024-12-30 14:27:00 UTC	1161	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 30 Dec 2024 14:27:00 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-pJDrZMJDI6MuUrB5pSoQWA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-30 14:27:00 UTC	94	IN	Data Raw: 35 37 63 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 Data Ascii: 57cb<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="
2024-12-30 14:27:00 UTC	1255	IN	Data Raw: 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 Data Ascii: text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic
2024-12-30 14:27:00 UTC	1255	IN	Data Raw: 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 57 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d 30 31 36 39 2c 20 55 2b 30 31 41 30 2d 30 31 41 31 2c 20 55 2b 30 31 41 46 2d 30 31 42 30 2c 20 55 2b 30 33 30 30 2d 30 33 30 31 2c 20 55 2b 30 33 30 33 2d 30 33 30 34 2c 20 55 2b 30 33 30 38 2d 30 33 30 39 2c 20 55 2b 30 33 32 33 2c 20 55 2b 30 33 32 39 2c 20 55 Data Ascii: eight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7WxKOzY.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U
2024-12-30 14:27:00 UTC	1255	IN	Data Raw: 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 41 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 41 42 63 34 45 73 41 2e 77 6f 66 66 Data Ascii: e-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff
2024-12-30 14:27:00 UTC	1255	IN	Data Raw: 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 68 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 42 41 2c 20 55 2b 30 32 42 44 2d 30 32 43 35 2c 20 55 2b 30 32 43 37 2d 30 32 43 43 2c 20 55 2b 30 32 43 45 2d 30 32 44 37 2c 20 55 2b 30 32 44 44 2d 30 32 46 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 Data Ascii: family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2) format('woff2'); unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U
2024-12-30 14:27:00 UTC	1255	IN	Data Raw: 30 2d 30 34 35 46 2c 20 55 2b 30 34 39 30 2d 30 34 39 31 2c 20 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b Data Ascii: 0-045F, U+0490-0491, U+04B0-04B1, U+2116;}/* greek-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfCBc4EsA.woff2) format('woff2'); unicode-range: U+
2024-12-30 14:27:00 UTC	1255	IN	Data Raw: 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 30 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 2d 41 37 46 46 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e Data Ascii: 20, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}/* latin */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2) format('woff2'); un
2024-12-30 14:27:00 UTC	1255	IN	Data Raw: 34 35 4b 57 51 4d 58 66 5a 36 73 6f 75 39 48 67 5a 64 2d 53 48 6a 65 53 30 55 38 39 46 71 57 55 76 32 36 48 65 37 5a 5a 74 77 4d 6e 52 73 58 70 37 39 46 39 72 46 61 4d 6d 55 73 66 75 42 75 72 32 45 6d 53 49 62 56 46 62 63 47 4c 62 6a 4f 54 5f 78 56 30 68 4a 32 31 74 48 43 4e 79 51 63 48 34 32 77 42 2d 35 67 30 64 61 56 77 78 67 38 33 62 56 54 64 6a 6b 5f 5f 37 39 57 76 46 57 7a 72 43 78 65 55 4a 57 31 55 33 51 6c 79 38 65 43 72 53 56 4a 71 5a 4d 69 6f 67 41 6e 58 4d 4f 68 6e 53 6a 54 6c 47 69 75 41 50 33 6f 35 36 72 31 42 63 35 72 68 35 6a 73 67 63 65 30 63 7a 4e 76 49 33 52 2d 49 55 63 4e 31 49 51 4c 45 65 78 52 53 77 4f 54 63 64 55 34 4a 69 2d 71 59 4b 4a 77 44 36 51 4a 36 77 30 31 72 61 49 6d 76 41 57 59 6a 6e 56 43 37 65 45 71 68 31 6d 61 49 57 38 42 Data Ascii: 45KWQMXfZ6sou9HgZd-SHjeS0U89FqWUv26He7ZZtwMnRsXp79F9rFaMmUsfuBur2EmSIbVFbcGLbjOT_xV0hJ21tHCNyQcH42wB-5g0daVwxg83bVTdjk__79WvFWzrCxeUJW1U3Qly8eCrSVJqZMiogAnXMOhnSjTlGiuAP3o56r1Bc5rh5jsgce0czNvI3R-IUcN1IQLEexRSwOTcdU4Ji-qYKJwD6QJ6w01raImvAWYjnVC7eEqh1maIW8B
2024-12-30 14:27:00 UTC	1255	IN	Data Raw: 38 31 38 34 35 67 5a 39 56 63 78 71 32 70 68 77 6d 6b 65 4d 35 59 36 58 57 58 48 4c 72 65 5f 6f 4a 49 65 44 59 61 5a 4c 7a 53 77 4c 45 62 53 41 6f 43 4b 57 79 6e 74 67 5a 32 77 5f 69 50 6e 74 55 72 41 43 47 61 7a 2d 72 68 55 72 63 56 4a 44 74 6f 63 5a 50 42 62 67 6a 66 37 4f 52 63 58 31 4e 50 45 66 6c 41 76 71 49 57 4a 4b 4f 76 64 48 61 4f 5a 57 76 79 50 75 46 5a 38 6e 36 61 76 43 69 2d 46 72 6b 30 59 52 59 41 6c 4d 4e 63 66 56 68 6d 78 7a 78 5a 62 65 47 53 6e 57 53 32 33 61 6f 57 2d 67 4f 6f 69 76 44 4f 76 33 67 4a 55 79 36 51 68 30 46 59 43 53 53 66 39 57 51 68 4b 43 4f 6a 33 51 5f 63 2d 63 79 54 6d 58 66 38 65 33 67 30 46 47 52 61 50 66 39 59 67 6e 72 6e 42 73 41 31 64 39 6e 72 50 52 62 57 34 30 54 37 41 4e 48 4c 31 71 48 44 64 79 66 4d 34 45 5f 31 61 Data Ascii: 81845gZ9Vcxq2phwmkeM5Y6XWXHLre_oJIeDYaZLzSwLEbSAoCKWyntgZ2w_iPntUrACGaz-rhUrcVJDtocZPBbgjf7ORcX1NPEflAvqIWJKOvdHaOZWvyPuFZ8n6avCi-Frk0YRYAlMNcfVhmxzxZbeGSnWS23aoW-gOoivDOv3gJUy6Qh0FYCSSf9WQhKCOj3Q_c-cyTmXf8e3g0FGRaPf9YgnrnBsA1d9nrPRbW40T7ANHL1qHDdyfM4E_1a
2024-12-30 14:27:00 UTC	1255	IN	Data Raw: 4d 7a 6c 35 4f 45 70 31 57 55 31 4f 4e 47 35 6a 63 6e 5a 55 52 57 4a 33 52 6a 4d 33 65 6a 5a 33 51 30 6f 31 55 56 56 32 53 45 68 6f 4d 32 68 35 4d 45 6c 49 65 47 59 7a 61 45 6b 79 52 30 70 68 51 6e 5a 58 64 57 51 78 4b 79 39 56 4d 32 56 44 4d 55 64 36 4d 55 4e 77 54 6d 4a 58 54 58 68 58 62 6e 5a 6f 4f 55 45 33 5a 56 68 6f 4d 31 55 72 57 53 39 79 59 6b 64 4f 52 30 4a 35 51 6e 4e 31 63 6a 49 72 57 6e 41 77 54 7a 42 4d 4e 58 4a 4a 4b 30 70 68 5a 33 4e 6c 59 6b 64 4c 62 6c 5a 42 53 7a 6c 43 52 6b 35 4a 63 30 77 77 59 33 6f 78 54 47 4a 6e 62 54 59 30 4d 31 45 34 57 58 6c 71 59 54 52 6f 62 47 52 34 54 6d 39 70 4e 45 31 30 56 55 73 31 52 55 31 73 61 6b 5a 49 4e 6c 59 30 51 33 42 4c 51 32 56 75 56 6b 5a 51 51 31 68 6c 54 55 74 36 65 48 70 30 63 47 74 6b 65 57 46 Data Ascii: Mzl5OEp1WU1ONG5jcnZURWJ3RjM3ejZ3Q0o1UVV2SEhoM2h5MElIeGYzaEkyR0phQnZXdWQxKy9VM2VDMUd6MUNwTmJXTXhXbnZoOUE3ZVhoM1UrWS9yYkdOR0J5QnN1cjIrWnAwTzBMNXJJK0phZ3NlYkdLblZBSzlCRk5Jc0wwY3oxTGJnbTY0M1E4WXlqYTRobGR4Tm9pNE10VUs1RU1sakZINlY0Q3BLQ2VuVkZQQ1hlTUt6eHp0cGtkeWF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.11.20	49731	192.178.50.68	443	840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 14:27:02 UTC	1362	OUT	GET /js/bg/GaYUpI3TM2ZeJrJuY6shdNLJBEVQZd83XqI1ZKo9ZSY.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CI+2yQEIorbJAQipncoBCMD2ygEIkqHLAQic/swBCIWgzQEIrJ7OAQjkr84BCMO2zgEIvbnOAQjtvM4BCLu9zgEI1r3OAQjMv84BGMHLzAEYva7OARidsc4B Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=normal&s=V8uk3gXjSxveyP10lsiPTzr4dRJy6ZtZWNETJWzBePJuAB3dILOrmDA5KRrf-WyLe9WVi8m7vKehGKvRgIpDuM13tyq5EWynopbjpK7j5Nh9fXD7vZYUTUp99E0YhfHdB56c-40-lfodJGTO6HPBgt1Lcy15v0N3GbW19-ohagr730LW1YCwHMh-iAQ7CAoQvj5wsfKzTwbMIH7kuiEfW7E68IEg6D3_czVD6QR8DMzYTVPOhYx4meurunowsucYpt0EzfP8vsUZ79JKERyaXd0QAyLoqqg&cb=au63nuisgap Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=517=i4E8sm-BN75bnGkPw4VW8uy51aQ8ounjntfNX2fu8MFJNuIvCX0dRBy-XkHqHwKOVFSSaC2nqfULsnHhY3TzIXHWC90jS3Wi2BINtQIDr1LJvZE4Ud-byTNL9Q04Nd1-ydmJvrWYY5vORspW6soJ1bMj20dq8UvPjgkw2sOvmuTUanqu
2024-12-30 14:27:02 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18920 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sun, 29 Dec 2024 20:22:56 GMT Expires: Mon, 29 Dec 2025 20:22:56 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 02 Dec 2024 19:00:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 65046 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-30 14:27:02 UTC	444	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 50 3d 66 75 6e 63 74 69 6f 6e 28 48 29 7b 72 65 74 75 72 6e 20 48 7d 2c 75 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 72 29 7b 69 66 28 28 72 3d 28 48 3d 6e 75 6c 6c 2c 75 29 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 21 72 29 7c 7c 21 72 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 48 3b 74 72 79 7b 48 3d 72 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var P=function(H){return H},u=this\|\|self,x=function(H,r){if((r=(H=null,u).trustedTypes,!r)\|\|!r.createPolicy)return H;try{H=r.createPolicy("bg",{createHTM
2024-12-30 14:27:02 UTC	1255	IN	Data Raw: 65 61 74 65 53 63 72 69 70 74 28 63 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 22 22 2b 63 7d 7d 28 75 29 28 41 72 72 61 79 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 37 38 32 34 7c 30 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 2b 5b 27 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 27 2c 0a 27 27 2c 0a 27 20 43 6f 70 79 72 69 67 68 74 20 47 6f 6f 67 6c 65 20 4c 4c 43 27 2c 0a 27 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 67 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 72 2c 63 2c 78 2c 79 2c 75 2c 47 2c 44 29 7b 69 66 28 21 63 2e 47 43 26 26 28 75 3d 76 6f 69 64 20 30 2c 72 26 26 72 5b 30 5d 3d 3d 3d 43 26 26 28 48 3d 72 5b 31 5d 2c 75 3d 72 5b 32 Data Ascii: eateScript(c)}:function(c){return""+c}}(u)(Array(Math.random()7824\|0).join("\n")+['(function(){/','',' Copyright Google LLC',' SPDX-License-Identifier: Apache-2.0','*/','var g=function(H,r,c,x,y,u,G,D){if(!c.GC&&(u=void 0,r&&r[0]===C&&(H=r[1],u=r[2
2024-12-30 14:27:02 UTC	1255	IN	Data Raw: 26 26 74 79 70 65 6f 66 20 48 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 21 48 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 28 22 73 70 6c 69 63 65 22 29 29 72 65 74 75 72 6e 22 61 72 72 61 79 22 3b 69 66 28 72 3d 3d 22 5b 6f 62 6a 65 63 74 20 46 75 6e 63 74 69 6f 6e 5d 22 7c 7c 74 79 70 65 6f 66 20 48 2e 63 61 6c 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 20 48 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 21 48 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 28 22 63 61 6c 6c 22 29 29 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 7d 65 6c 73 65 20 72 65 74 75 72 6e 22 6e Data Ascii: &&typeof H.propertyIsEnumerable!="undefined"&&!H.propertyIsEnumerable("splice"))return"array";if(r=="[object Function]"\|\|typeof H.call!="undefined"&&typeof H.propertyIsEnumerable!="undefined"&&!H.propertyIsEnumerable("call"))return"function"}else return"n
2024-12-30 14:27:02 UTC	1255	IN	Data Raw: 5b 36 5d 3c 3c 38 7c 48 5b 37 5d 29 2c 72 2e 70 75 73 68 28 48 5b 38 5d 3c 3c 32 34 7c 48 5b 39 5d 3c 3c 31 36 7c 48 5b 31 30 5d 3c 3c 38 7c 48 5b 31 31 5d 29 7d 2c 6b 50 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 72 29 7b 72 65 74 75 72 6e 20 58 5b 72 5d 28 58 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 66 6c 6f 6f 72 3a 48 2c 63 6f 6e 73 6f 6c 65 3a 48 2c 72 65 70 6c 61 63 65 3a 48 2c 70 6f 70 3a 48 2c 6c 65 6e 67 74 68 3a 48 2c 70 72 6f 74 6f 74 79 70 65 3a 48 2c 64 6f 63 75 6d 65 6e 74 3a 48 2c 63 61 6c 6c 3a 48 2c 73 70 6c 69 63 65 3a 48 2c 73 74 61 63 6b 3a 48 2c 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 3a 48 2c 70 61 72 65 6e 74 3a 48 7d 29 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 72 2c 63 29 7b 69 66 28 48 3d 3d 34 36 38 7c 7c 48 3d 3d 39 Data Ascii: [6]<<8\|H[7]),r.push(H[8]<<24\|H[9]<<16\|H[10]<<8\|H[11])},kP=function(H,r){return X[r](X.prototype,{floor:H,console:H,replace:H,pop:H,length:H,prototype:H,document:H,call:H,splice:H,stack:H,propertyIsEnumerable:H,parent:H})},v=function(H,r,c){if(H==468\|\|H==9
2024-12-30 14:27:02 UTC	1255	IN	Data Raw: 72 2c 78 2c 48 2c 75 2c 74 68 69 73 2c 79 29 7d 63 61 74 63 68 28 44 29 7b 68 28 44 2c 74 68 69 73 29 2c 48 28 66 75 6e 63 74 69 6f 6e 28 5a 29 7b 5a 28 47 2e 49 29 7d 29 7d 7d 2c 70 6e 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 74 68 69 73 2e 6e 3d 28 74 68 69 73 2e 55 3d 5b 5d 2c 30 29 7d 72 65 74 75 72 6e 5b 66 75 6e 63 74 69 6f 6e 28 78 29 7b 28 72 2e 51 45 28 78 29 2c 48 29 2e 51 45 28 78 29 7d 2c 28 48 3d 28 63 2e 70 72 6f 74 6f 74 79 70 65 2e 53 4c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 6e 3d 3d 3d 30 29 72 65 74 75 72 6e 5b 30 2c 30 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 55 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 78 2c 79 29 7b 72 65 74 75 72 6e 20 78 2d 79 7d 29 2c 5b 74 68 69 Data Ascii: r,x,H,u,this,y)}catch(D){h(D,this),H(function(Z){Z(G.I)})}},pn=function(H,r){function c(){this.n=(this.U=[],0)}return[function(x){(r.QE(x),H).QE(x)},(H=(c.prototype.SL=function(){if(this.n===0)return[0,0];return this.U.sort(function(x,y){return x-y}),[thi
2024-12-30 14:27:02 UTC	1255	IN	Data Raw: 29 29 2c 72 7d 2c 64 63 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 72 2c 63 2c 78 2c 79 2c 75 2c 47 2c 44 2c 5a 29 7b 66 6f 72 28 5a 3d 28 44 3d 28 75 2e 48 74 3d 6b 50 28 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 63 61 74 28 29 7d 7d 2c 28 75 2e 75 24 3d 75 5b 55 5d 2c 28 75 2e 50 74 3d 52 48 2c 75 29 2e 61 78 3d 67 63 2c 75 2e 53 29 29 2c 75 2e 67 4c 3d 58 5b 75 2e 53 5d 28 75 2e 48 74 2c 7b 76 61 6c 75 65 3a 7b 76 61 6c 75 65 3a 7b 7d 7d 7d 29 2c 30 29 2c 5b 5d 29 3b 44 3c 33 34 36 3b 44 2b 2b 29 5a 5b 44 5d 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 44 29 3b 69 66 28 28 75 2e 75 3d 28 63 3d 28 75 2e 59 3d 28 75 2e 56 3d 28 75 2e 76 74 3d 38 30 30 31 2c 28 75 2e 59 51 3d 66 75 6e 63 74 69 Data Ascii: )),r},dc=function(H,r,c,x,y,u,G,D,Z){for(Z=(D=(u.Ht=kP({get:function(){return this.concat()}},(u.u$=u[U],(u.Pt=RH,u).ax=gc,u.S)),u.gL=X[u.S](u.Ht,{value:{value:{}}}),0),[]);D<346;D++)Z[D]=String.fromCharCode(D);if((u.u=(c=(u.Y=(u.V=(u.vt=8001,(u.YQ=functi
2024-12-30 14:27:02 UTC	1255	IN	Data Raw: 28 4e 2c 50 2c 66 75 6e 63 74 69 6f 6e 28 4b 29 7b 72 65 74 75 72 6e 20 65 76 61 6c 28 4b 29 7d 28 76 24 28 6b 28 50 2e 69 2c 42 29 29 29 29 29 7d 2c 28 54 28 28 76 28 28 54 28 34 36 35 2c 28 76 28 32 2c 75 2c 28 54 28 31 34 2c 28 54 28 28 75 2e 44 44 3d 28 76 28 35 30 36 2c 75 2c 28 76 28 32 31 38 2c 28 28 54 28 32 31 35 2c 28 54 28 33 37 33 2c 28 54 28 34 31 39 2c 66 75 6e 63 74 69 6f 6e 28 50 29 7b 66 6e 28 50 2c 33 29 7d 2c 28 54 28 35 34 2c 28 54 28 32 39 33 2c 28 54 28 32 35 38 2c 28 54 28 34 34 31 2c 28 75 2e 6b 51 3d 28 54 28 36 36 2c 28 76 28 31 33 32 2c 28 54 28 36 38 2c 66 75 6e 63 74 69 6f 6e 28 50 29 7b 71 4c 28 31 2c 50 29 7d 2c 28 76 28 31 38 39 2c 75 2c 28 54 28 28 54 28 34 39 31 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 42 2c 4e 2c 4b 29 7b 42 Data Ascii: (N,P,function(K){return eval(K)}(v$(k(P.i,B)))))},(T((v((T(465,(v(2,u,(T(14,(T((u.DD=(v(506,u,(v(218,((T(215,(T(373,(T(419,function(P){fn(P,3)},(T(54,(T(293,(T(258,(T(441,(u.kQ=(T(66,(v(132,(T(68,function(P){qL(1,P)},(v(189,u,(T((T(491,function(P,B,N,K){B
2024-12-30 14:27:02 UTC	1255	IN	Data Raw: 4a 57 28 50 29 7c 30 29 29 25 42 2c 4b 2b 3d 5a 5b 45 5b 4e 5d 5d 3b 76 28 66 2c 50 2c 4b 29 7d 29 2c 75 29 2c 75 29 29 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 42 2c 4e 2c 4b 2c 53 29 7b 76 28 28 4e 3d 6b 28 28 4b 3d 28 42 3d 6b 28 50 2c 28 4b 3d 28 53 3d 4d 28 50 29 2c 42 3d 4d 28 50 29 2c 4d 28 50 29 29 2c 4e 3d 4d 28 50 29 2c 42 29 29 2c 6b 28 50 2c 4b 29 29 2c 50 29 2c 4e 29 2c 53 29 2c 50 2c 49 48 28 4e 2c 4b 2c 50 2c 42 29 29 7d 29 2c 75 29 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 42 2c 4e 2c 4b 2c 53 2c 45 2c 66 29 7b 69 66 28 21 74 28 74 72 75 65 2c 42 2c 74 72 75 65 2c 50 29 29 7b 69 66 28 75 36 28 28 4e 3d 28 66 3d 28 53 3d 28 42 3d 28 4e 3d 4d 28 28 53 3d 4d 28 28 66 3d 4d 28 28 42 3d 4d 28 50 29 2c 50 29 29 2c 50 29 29 2c 50 29 29 2c 6b 28 50 2c 42 29 Data Ascii: JW(P)\|0))%B,K+=Z[E[N]];v(f,P,K)}),u),u)),function(P,B,N,K,S){v((N=k((K=(B=k(P,(K=(S=M(P),B=M(P),M(P)),N=M(P),B)),k(P,K)),P),N),S),P,IH(N,K,P,B))}),u),function(P,B,N,K,S,E,f){if(!t(true,B,true,P)){if(u6((N=(f=(S=(B=(N=M((S=M((f=M((B=M(P),P)),P)),P)),k(P,B)
2024-12-30 14:27:02 UTC	1255	IN	Data Raw: 72 69 6e 67 28 32 29 2e 6c 65 6e 67 74 68 2c 53 3d 30 2c 5b 5d 29 3b 53 3c 42 3b 53 2b 2b 29 56 5b 53 5d 7c 7c 28 4e 5b 53 5d 3d 46 28 45 29 29 3b 66 6f 72 28 45 3d 30 3b 45 3c 42 3b 45 2b 2b 29 56 5b 45 5d 26 26 28 4e 5b 45 5d 3d 4d 28 50 29 29 3b 66 6f 72 28 4a 3d 5b 5d 3b 61 2d 2d 3b 29 4a 2e 70 75 73 68 28 6b 28 50 2c 4d 28 50 29 29 29 3b 54 28 66 2c 66 75 6e 63 74 69 6f 6e 28 70 2c 59 2c 7a 2c 6d 2c 48 24 29 7b 66 6f 72 28 7a 3d 28 59 3d 28 6d 3d 30 2c 5b 5d 29 2c 5b 5d 29 3b 6d 3c 42 3b 6d 2b 2b 29 7b 69 66 28 21 56 5b 48 24 3d 4e 5b 6d 5d 2c 6d 5d 29 7b 66 6f 72 28 3b 48 24 3e 3d 59 2e 6c 65 6e 67 74 68 3b 29 59 2e 70 75 73 68 28 4d 28 70 29 29 3b 48 24 3d 59 5b 48 24 5d 7d 7a 2e 70 75 73 68 28 48 24 29 7d 28 70 2e 56 3d 53 4a 28 70 2c 4a 2e 73 6c Data Ascii: ring(2).length,S=0,[]);S<B;S++)V[S]\|\|(N[S]=F(E));for(E=0;E<B;E++)V[E]&&(N[E]=M(P));for(J=[];a--;)J.push(k(P,M(P)));T(f,function(p,Y,z,m,H$){for(z=(Y=(m=0,[]),[]);m<B;m++){if(!V[H$=N[m],m]){for(;H$>=Y.length;)Y.push(M(p));H$=Y[H$]}z.push(H$)}(p.V=SJ(p,J.sl
2024-12-30 14:27:02 UTC	1255	IN	Data Raw: 75 29 7b 69 66 28 21 48 2e 49 29 7b 48 2e 50 2b 2b 3b 74 72 79 7b 66 6f 72 28 79 3d 28 78 3d 28 63 3d 48 2e 4e 2c 30 29 2c 76 6f 69 64 20 30 29 3b 2d 2d 72 3b 29 74 72 79 7b 69 66 28 75 3d 76 6f 69 64 20 30 2c 48 2e 56 29 79 3d 42 24 28 48 2e 56 2c 48 29 3b 65 6c 73 65 7b 69 66 28 28 78 3d 6b 28 48 2c 34 36 38 29 2c 78 29 3e 3d 63 29 62 72 65 61 6b 3b 79 3d 6b 28 48 2c 28 75 3d 28 76 28 39 30 2c 48 2c 78 29 2c 4d 28 48 29 29 2c 75 29 29 7d 74 28 66 61 6c 73 65 2c 28 79 26 26 79 5b 65 4a 5d 26 32 30 34 38 3f 79 28 48 2c 72 29 3a 67 28 30 2c 5b 43 2c 32 31 2c 75 5d 2c 48 29 2c 72 29 2c 66 61 6c 73 65 2c 48 29 7d 63 61 74 63 68 28 47 29 7b 6b 28 48 2c 34 39 33 29 3f 67 28 32 32 2c 47 2c 48 29 3a 76 28 34 39 33 2c 48 2c 47 29 7d 69 66 28 21 72 29 7b 69 66 28 Data Ascii: u){if(!H.I){H.P++;try{for(y=(x=(c=H.N,0),void 0);--r;)try{if(u=void 0,H.V)y=B$(H.V,H);else{if((x=k(H,468),x)>=c)break;y=k(H,(u=(v(90,H,x),M(H)),u))}t(false,(y&&y[eJ]&2048?y(H,r):g(0,[C,21,u],H),r),false,H)}catch(G){k(H,493)?g(22,G,H):v(493,H,G)}if(!r){if(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.11.20	49733	192.178.50.68	443	840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 14:27:02 UTC	1243	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF HTTP/1.1 Host: www.google.com Connection: keep-alive Accept: / X-Client-Data: CI+2yQEIorbJAQipncoBCMD2ygEIkqHLAQic/swBCIWgzQEIrJ7OAQjkr84BCMO2zgEIvbnOAQjtvM4BCLu9zgEI1r3OAQjMv84BGMHLzAEYva7OARidsc4B Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=normal&s=V8uk3gXjSxveyP10lsiPTzr4dRJy6ZtZWNETJWzBePJuAB3dILOrmDA5KRrf-WyLe9WVi8m7vKehGKvRgIpDuM13tyq5EWynopbjpK7j5Nh9fXD7vZYUTUp99E0YhfHdB56c-40-lfodJGTO6HPBgt1Lcy15v0N3GbW19-ohagr730LW1YCwHMh-iAQ7CAoQvj5wsfKzTwbMIH7kuiEfW7E68IEg6D3_czVD6QR8DMzYTVPOhYx4meurunowsucYpt0EzfP8vsUZ79JKERyaXd0QAyLoqqg&cb=au63nuisgap User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=517=i4E8sm-BN75bnGkPw4VW8uy51aQ8ounjntfNX2fu8MFJNuIvCX0dRBy-XkHqHwKOVFSSaC2nqfULsnHhY3TzIXHWC90jS3Wi2BINtQIDr1LJvZE4Ud-byTNL9Q04Nd1-ydmJvrWYY5vORspW6soJ1bMj20dq8UvPjgkw2sOvmuTUanqu
2024-12-30 14:27:02 UTC	917	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Expires: Mon, 30 Dec 2024 14:27:02 GMT Date: Mon, 30 Dec 2024 14:27:02 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-30 14:27:02 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 7a 49 72 69 69 6a 6e 33 75 6a 35 56 70 6b 6e 76 74 5f 4c 6e 66 4e 62 46 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js');
2024-12-30 14:27:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.11.20	49736	142.250.64.196	443	840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 14:27:03 UTC	667	OUT	GET /js/bg/GaYUpI3TM2ZeJrJuY6shdNLJBEVQZd83XqI1ZKo9ZSY.js HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Accept: / X-Client-Data: CI+2yQEIorbJAQipncoBCMD2ygEIkqHLAQic/swBCIWgzQEI1r3OARjBy8wB Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=517=i4E8sm-BN75bnGkPw4VW8uy51aQ8ounjntfNX2fu8MFJNuIvCX0dRBy-XkHqHwKOVFSSaC2nqfULsnHhY3TzIXHWC90jS3Wi2BINtQIDr1LJvZE4Ud-byTNL9Q04Nd1-ydmJvrWYY5vORspW6soJ1bMj20dq8UvPjgkw2sOvmuTUanqu
2024-12-30 14:27:03 UTC	812	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18920 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 25 Dec 2024 15:28:25 GMT Expires: Thu, 25 Dec 2025 15:28:25 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 02 Dec 2024 19:00:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 428318 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-30 14:27:03 UTC	443	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 50 3d 66 75 6e 63 74 69 6f 6e 28 48 29 7b 72 65 74 75 72 6e 20 48 7d 2c 75 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 72 29 7b 69 66 28 28 72 3d 28 48 3d 6e 75 6c 6c 2c 75 29 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 21 72 29 7c 7c 21 72 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 48 3b 74 72 79 7b 48 3d 72 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var P=function(H){return H},u=this\|\|self,x=function(H,r){if((r=(H=null,u).trustedTypes,!r)\|\|!r.createPolicy)return H;try{H=r.createPolicy("bg",{createHTM
2024-12-30 14:27:03 UTC	1255	IN	Data Raw: 72 65 61 74 65 53 63 72 69 70 74 28 63 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 22 22 2b 63 7d 7d 28 75 29 28 41 72 72 61 79 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 37 38 32 34 7c 30 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 2b 5b 27 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 27 2c 0a 27 27 2c 0a 27 20 43 6f 70 79 72 69 67 68 74 20 47 6f 6f 67 6c 65 20 4c 4c 43 27 2c 0a 27 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 67 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 72 2c 63 2c 78 2c 79 2c 75 2c 47 2c 44 29 7b 69 66 28 21 63 2e 47 43 26 26 28 75 3d 76 6f 69 64 20 30 2c 72 26 26 72 5b 30 5d 3d 3d 3d 43 26 26 28 48 3d 72 5b 31 5d 2c 75 3d 72 5b Data Ascii: reateScript(c)}:function(c){return""+c}}(u)(Array(Math.random()7824\|0).join("\n")+['(function(){/','',' Copyright Google LLC',' SPDX-License-Identifier: Apache-2.0','*/','var g=function(H,r,c,x,y,u,G,D){if(!c.GC&&(u=void 0,r&&r[0]===C&&(H=r[1],u=r[
2024-12-30 14:27:03 UTC	1255	IN	Data Raw: 22 26 26 74 79 70 65 6f 66 20 48 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 21 48 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 28 22 73 70 6c 69 63 65 22 29 29 72 65 74 75 72 6e 22 61 72 72 61 79 22 3b 69 66 28 72 3d 3d 22 5b 6f 62 6a 65 63 74 20 46 75 6e 63 74 69 6f 6e 5d 22 7c 7c 74 79 70 65 6f 66 20 48 2e 63 61 6c 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 20 48 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 21 48 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 28 22 63 61 6c 6c 22 29 29 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 7d 65 6c 73 65 20 72 65 74 75 72 6e 22 Data Ascii: "&&typeof H.propertyIsEnumerable!="undefined"&&!H.propertyIsEnumerable("splice"))return"array";if(r=="[object Function]"\|\|typeof H.call!="undefined"&&typeof H.propertyIsEnumerable!="undefined"&&!H.propertyIsEnumerable("call"))return"function"}else return"
2024-12-30 14:27:03 UTC	1255	IN	Data Raw: 48 5b 36 5d 3c 3c 38 7c 48 5b 37 5d 29 2c 72 2e 70 75 73 68 28 48 5b 38 5d 3c 3c 32 34 7c 48 5b 39 5d 3c 3c 31 36 7c 48 5b 31 30 5d 3c 3c 38 7c 48 5b 31 31 5d 29 7d 2c 6b 50 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 72 29 7b 72 65 74 75 72 6e 20 58 5b 72 5d 28 58 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 66 6c 6f 6f 72 3a 48 2c 63 6f 6e 73 6f 6c 65 3a 48 2c 72 65 70 6c 61 63 65 3a 48 2c 70 6f 70 3a 48 2c 6c 65 6e 67 74 68 3a 48 2c 70 72 6f 74 6f 74 79 70 65 3a 48 2c 64 6f 63 75 6d 65 6e 74 3a 48 2c 63 61 6c 6c 3a 48 2c 73 70 6c 69 63 65 3a 48 2c 73 74 61 63 6b 3a 48 2c 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 3a 48 2c 70 61 72 65 6e 74 3a 48 7d 29 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 72 2c 63 29 7b 69 66 28 48 3d 3d 34 36 38 7c 7c 48 3d 3d Data Ascii: H[6]<<8\|H[7]),r.push(H[8]<<24\|H[9]<<16\|H[10]<<8\|H[11])},kP=function(H,r){return X[r](X.prototype,{floor:H,console:H,replace:H,pop:H,length:H,prototype:H,document:H,call:H,splice:H,stack:H,propertyIsEnumerable:H,parent:H})},v=function(H,r,c){if(H==468\|\|H==
2024-12-30 14:27:03 UTC	1255	IN	Data Raw: 2c 72 2c 78 2c 48 2c 75 2c 74 68 69 73 2c 79 29 7d 63 61 74 63 68 28 44 29 7b 68 28 44 2c 74 68 69 73 29 2c 48 28 66 75 6e 63 74 69 6f 6e 28 5a 29 7b 5a 28 47 2e 49 29 7d 29 7d 7d 2c 70 6e 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 74 68 69 73 2e 6e 3d 28 74 68 69 73 2e 55 3d 5b 5d 2c 30 29 7d 72 65 74 75 72 6e 5b 66 75 6e 63 74 69 6f 6e 28 78 29 7b 28 72 2e 51 45 28 78 29 2c 48 29 2e 51 45 28 78 29 7d 2c 28 48 3d 28 63 2e 70 72 6f 74 6f 74 79 70 65 2e 53 4c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 6e 3d 3d 3d 30 29 72 65 74 75 72 6e 5b 30 2c 30 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 55 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 78 2c 79 29 7b 72 65 74 75 72 6e 20 78 2d 79 7d 29 2c 5b 74 68 Data Ascii: ,r,x,H,u,this,y)}catch(D){h(D,this),H(function(Z){Z(G.I)})}},pn=function(H,r){function c(){this.n=(this.U=[],0)}return[function(x){(r.QE(x),H).QE(x)},(H=(c.prototype.SL=function(){if(this.n===0)return[0,0];return this.U.sort(function(x,y){return x-y}),[th
2024-12-30 14:27:03 UTC	1255	IN	Data Raw: 30 29 29 2c 72 7d 2c 64 63 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 72 2c 63 2c 78 2c 79 2c 75 2c 47 2c 44 2c 5a 29 7b 66 6f 72 28 5a 3d 28 44 3d 28 75 2e 48 74 3d 6b 50 28 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 63 61 74 28 29 7d 7d 2c 28 75 2e 75 24 3d 75 5b 55 5d 2c 28 75 2e 50 74 3d 52 48 2c 75 29 2e 61 78 3d 67 63 2c 75 2e 53 29 29 2c 75 2e 67 4c 3d 58 5b 75 2e 53 5d 28 75 2e 48 74 2c 7b 76 61 6c 75 65 3a 7b 76 61 6c 75 65 3a 7b 7d 7d 7d 29 2c 30 29 2c 5b 5d 29 3b 44 3c 33 34 36 3b 44 2b 2b 29 5a 5b 44 5d 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 44 29 3b 69 66 28 28 75 2e 75 3d 28 63 3d 28 75 2e 59 3d 28 75 2e 56 3d 28 75 2e 76 74 3d 38 30 30 31 2c 28 75 2e 59 51 3d 66 75 6e 63 74 Data Ascii: 0)),r},dc=function(H,r,c,x,y,u,G,D,Z){for(Z=(D=(u.Ht=kP({get:function(){return this.concat()}},(u.u$=u[U],(u.Pt=RH,u).ax=gc,u.S)),u.gL=X[u.S](u.Ht,{value:{value:{}}}),0),[]);D<346;D++)Z[D]=String.fromCharCode(D);if((u.u=(c=(u.Y=(u.V=(u.vt=8001,(u.YQ=funct
2024-12-30 14:27:03 UTC	1255	IN	Data Raw: 76 28 4e 2c 50 2c 66 75 6e 63 74 69 6f 6e 28 4b 29 7b 72 65 74 75 72 6e 20 65 76 61 6c 28 4b 29 7d 28 76 24 28 6b 28 50 2e 69 2c 42 29 29 29 29 29 7d 2c 28 54 28 28 76 28 28 54 28 34 36 35 2c 28 76 28 32 2c 75 2c 28 54 28 31 34 2c 28 54 28 28 75 2e 44 44 3d 28 76 28 35 30 36 2c 75 2c 28 76 28 32 31 38 2c 28 28 54 28 32 31 35 2c 28 54 28 33 37 33 2c 28 54 28 34 31 39 2c 66 75 6e 63 74 69 6f 6e 28 50 29 7b 66 6e 28 50 2c 33 29 7d 2c 28 54 28 35 34 2c 28 54 28 32 39 33 2c 28 54 28 32 35 38 2c 28 54 28 34 34 31 2c 28 75 2e 6b 51 3d 28 54 28 36 36 2c 28 76 28 31 33 32 2c 28 54 28 36 38 2c 66 75 6e 63 74 69 6f 6e 28 50 29 7b 71 4c 28 31 2c 50 29 7d 2c 28 76 28 31 38 39 2c 75 2c 28 54 28 28 54 28 34 39 31 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 42 2c 4e 2c 4b 29 7b Data Ascii: v(N,P,function(K){return eval(K)}(v$(k(P.i,B)))))},(T((v((T(465,(v(2,u,(T(14,(T((u.DD=(v(506,u,(v(218,((T(215,(T(373,(T(419,function(P){fn(P,3)},(T(54,(T(293,(T(258,(T(441,(u.kQ=(T(66,(v(132,(T(68,function(P){qL(1,P)},(v(189,u,(T((T(491,function(P,B,N,K){
2024-12-30 14:27:03 UTC	1255	IN	Data Raw: 28 4a 57 28 50 29 7c 30 29 29 25 42 2c 4b 2b 3d 5a 5b 45 5b 4e 5d 5d 3b 76 28 66 2c 50 2c 4b 29 7d 29 2c 75 29 2c 75 29 29 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 42 2c 4e 2c 4b 2c 53 29 7b 76 28 28 4e 3d 6b 28 28 4b 3d 28 42 3d 6b 28 50 2c 28 4b 3d 28 53 3d 4d 28 50 29 2c 42 3d 4d 28 50 29 2c 4d 28 50 29 29 2c 4e 3d 4d 28 50 29 2c 42 29 29 2c 6b 28 50 2c 4b 29 29 2c 50 29 2c 4e 29 2c 53 29 2c 50 2c 49 48 28 4e 2c 4b 2c 50 2c 42 29 29 7d 29 2c 75 29 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 42 2c 4e 2c 4b 2c 53 2c 45 2c 66 29 7b 69 66 28 21 74 28 74 72 75 65 2c 42 2c 74 72 75 65 2c 50 29 29 7b 69 66 28 75 36 28 28 4e 3d 28 66 3d 28 53 3d 28 42 3d 28 4e 3d 4d 28 28 53 3d 4d 28 28 66 3d 4d 28 28 42 3d 4d 28 50 29 2c 50 29 29 2c 50 29 29 2c 50 29 29 2c 6b 28 50 2c 42 Data Ascii: (JW(P)\|0))%B,K+=Z[E[N]];v(f,P,K)}),u),u)),function(P,B,N,K,S){v((N=k((K=(B=k(P,(K=(S=M(P),B=M(P),M(P)),N=M(P),B)),k(P,K)),P),N),S),P,IH(N,K,P,B))}),u),function(P,B,N,K,S,E,f){if(!t(true,B,true,P)){if(u6((N=(f=(S=(B=(N=M((S=M((f=M((B=M(P),P)),P)),P)),k(P,B
2024-12-30 14:27:03 UTC	1255	IN	Data Raw: 74 72 69 6e 67 28 32 29 2e 6c 65 6e 67 74 68 2c 53 3d 30 2c 5b 5d 29 3b 53 3c 42 3b 53 2b 2b 29 56 5b 53 5d 7c 7c 28 4e 5b 53 5d 3d 46 28 45 29 29 3b 66 6f 72 28 45 3d 30 3b 45 3c 42 3b 45 2b 2b 29 56 5b 45 5d 26 26 28 4e 5b 45 5d 3d 4d 28 50 29 29 3b 66 6f 72 28 4a 3d 5b 5d 3b 61 2d 2d 3b 29 4a 2e 70 75 73 68 28 6b 28 50 2c 4d 28 50 29 29 29 3b 54 28 66 2c 66 75 6e 63 74 69 6f 6e 28 70 2c 59 2c 7a 2c 6d 2c 48 24 29 7b 66 6f 72 28 7a 3d 28 59 3d 28 6d 3d 30 2c 5b 5d 29 2c 5b 5d 29 3b 6d 3c 42 3b 6d 2b 2b 29 7b 69 66 28 21 56 5b 48 24 3d 4e 5b 6d 5d 2c 6d 5d 29 7b 66 6f 72 28 3b 48 24 3e 3d 59 2e 6c 65 6e 67 74 68 3b 29 59 2e 70 75 73 68 28 4d 28 70 29 29 3b 48 24 3d 59 5b 48 24 5d 7d 7a 2e 70 75 73 68 28 48 24 29 7d 28 70 2e 56 3d 53 4a 28 70 2c 4a 2e 73 Data Ascii: tring(2).length,S=0,[]);S<B;S++)V[S]\|\|(N[S]=F(E));for(E=0;E<B;E++)V[E]&&(N[E]=M(P));for(J=[];a--;)J.push(k(P,M(P)));T(f,function(p,Y,z,m,H$){for(z=(Y=(m=0,[]),[]);m<B;m++){if(!V[H$=N[m],m]){for(;H$>=Y.length;)Y.push(M(p));H$=Y[H$]}z.push(H$)}(p.V=SJ(p,J.s
2024-12-30 14:27:03 UTC	1255	IN	Data Raw: 2c 75 29 7b 69 66 28 21 48 2e 49 29 7b 48 2e 50 2b 2b 3b 74 72 79 7b 66 6f 72 28 79 3d 28 78 3d 28 63 3d 48 2e 4e 2c 30 29 2c 76 6f 69 64 20 30 29 3b 2d 2d 72 3b 29 74 72 79 7b 69 66 28 75 3d 76 6f 69 64 20 30 2c 48 2e 56 29 79 3d 42 24 28 48 2e 56 2c 48 29 3b 65 6c 73 65 7b 69 66 28 28 78 3d 6b 28 48 2c 34 36 38 29 2c 78 29 3e 3d 63 29 62 72 65 61 6b 3b 79 3d 6b 28 48 2c 28 75 3d 28 76 28 39 30 2c 48 2c 78 29 2c 4d 28 48 29 29 2c 75 29 29 7d 74 28 66 61 6c 73 65 2c 28 79 26 26 79 5b 65 4a 5d 26 32 30 34 38 3f 79 28 48 2c 72 29 3a 67 28 30 2c 5b 43 2c 32 31 2c 75 5d 2c 48 29 2c 72 29 2c 66 61 6c 73 65 2c 48 29 7d 63 61 74 63 68 28 47 29 7b 6b 28 48 2c 34 39 33 29 3f 67 28 32 32 2c 47 2c 48 29 3a 76 28 34 39 33 2c 48 2c 47 29 7d 69 66 28 21 72 29 7b 69 66 Data Ascii: ,u){if(!H.I){H.P++;try{for(y=(x=(c=H.N,0),void 0);--r;)try{if(u=void 0,H.V)y=B$(H.V,H);else{if((x=k(H,468),x)>=c)break;y=k(H,(u=(v(90,H,x),M(H)),u))}t(false,(y&&y[eJ]&2048?y(H,r):g(0,[C,21,u],H),r),false,H)}catch(G){k(H,493)?g(22,G,H):v(493,H,G)}if(!r){if

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.11.20	49737	192.178.50.68	443	840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 14:27:03 UTC	1159	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CI+2yQEIorbJAQipncoBCMD2ygEIkqHLAQic/swBCIWgzQEIrJ7OAQjkr84BCMO2zgEIvbnOAQjtvM4BCLu9zgEI1r3OAQjMv84BGMHLzAEYva7OARidsc4B Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/sorry/index?continue=https://google.com/amp/web1.mlp-pe.com%3Ffce_id%3Dc5023f68-6cd8-4695-8d96-ef06a705cb58&q=EgRmgZnuGLDbyrsGIjCafytzTqN3e51BjWxsNClAy8uz54vRDPSHaWFgiv41s7JPNCztuhekCtRcp5sUtIsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=517=i4E8sm-BN75bnGkPw4VW8uy51aQ8ounjntfNX2fu8MFJNuIvCX0dRBy-XkHqHwKOVFSSaC2nqfULsnHhY3TzIXHWC90jS3Wi2BINtQIDr1LJvZE4Ud-byTNL9Q04Nd1-ydmJvrWYY5vORspW6soJ1bMj20dq8UvPjgkw2sOvmuTUanqu
2024-12-30 14:27:03 UTC	705	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 30 Dec 2024 13:04:36 GMT Expires: Tue, 07 Jan 2025 13:04:36 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 4947 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-30 14:27:03 UTC	550	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-12-30 14:27:03 UTC	1255	IN	Data Raw: ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 a6 75 ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff 0b be fb ff 05 bc fb ff b6 ec fe ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 aa 7b ff ff ff ff ff fd fd fd f9 fd fd fd db ff ff ff ff 35 c9 fc ff 0a b2 f9 ff 6b a4 f6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 eb Data Ascii: BBBBBuBBBBB{5k7R8F2Vb5C;I
2024-12-30 14:27:03 UTC	1255	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 fe fe fe 2f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 24 fd fd fd ea ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff eb f5 e7 ff 8f c6 7b ff 54 a9 36 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 7e be 67 ff dd ee d7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 ff ff ff 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd d3 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff c4 e1 b9 ff 5c ac 3e ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 Data Ascii: /${T6S4S4S4S4S4S4S4S4S4~g"\>S4S4S4S4S4S4S4S4S4S4S4S
2024-12-30 14:27:03 UTC	1255	IN	Data Raw: ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fa c8 aa ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBBBBBB}BBBBBBBBBBB}
2024-12-30 14:27:03 UTC	1115	IN	Data Raw: 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 81 8a f2 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 8a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 0b fd fd fd d5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b5 ba f7 ff 3e 4b eb ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 3f 4c eb ff ba bf f8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 26 fd fd fd eb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: C5C5C5C5C5C5C5C5C5C5C5C5C5C>K5C5C5C5C5C5C5C5C5C5C5C5C?L&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.11.20	49738	142.250.64.196	443	840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 14:27:03 UTC	675	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Accept: / X-Client-Data: CI+2yQEIorbJAQipncoBCMD2ygEIkqHLAQic/swBCIWgzQEI1r3OARjBy8wB Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=517=i4E8sm-BN75bnGkPw4VW8uy51aQ8ounjntfNX2fu8MFJNuIvCX0dRBy-XkHqHwKOVFSSaC2nqfULsnHhY3TzIXHWC90jS3Wi2BINtQIDr1LJvZE4Ud-byTNL9Q04Nd1-ydmJvrWYY5vORspW6soJ1bMj20dq8UvPjgkw2sOvmuTUanqu
2024-12-30 14:27:03 UTC	917	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Expires: Mon, 30 Dec 2024 14:27:03 GMT Date: Mon, 30 Dec 2024 14:27:03 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-30 14:27:03 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 7a 49 72 69 69 6a 6e 33 75 6a 35 56 70 6b 6e 76 74 5f 4c 6e 66 4e 62 46 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js');
2024-12-30 14:27:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.11.20	49739	192.178.50.68	443	840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 14:27:03 UTC	1348	OUT	GET /recaptcha/api2/bframe?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CI+2yQEIorbJAQipncoBCMD2ygEIkqHLAQic/swBCIWgzQEIrJ7OAQjkr84BCMO2zgEIvbnOAQjtvM4BCLu9zgEI1r3OAQjMv84BGMHLzAEYva7OARidsc4B Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.google.com/sorry/index?continue=https://google.com/amp/web1.mlp-pe.com%3Ffce_id%3Dc5023f68-6cd8-4695-8d96-ef06a705cb58&q=EgRmgZnuGLDbyrsGIjCafytzTqN3e51BjWxsNClAy8uz54vRDPSHaWFgiv41s7JPNCztuhekCtRcp5sUtIsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=517=i4E8sm-BN75bnGkPw4VW8uy51aQ8ounjntfNX2fu8MFJNuIvCX0dRBy-XkHqHwKOVFSSaC2nqfULsnHhY3TzIXHWC90jS3Wi2BINtQIDr1LJvZE4Ud-byTNL9Q04Nd1-ydmJvrWYY5vORspW6soJ1bMj20dq8UvPjgkw2sOvmuTUanqu
2024-12-30 14:27:04 UTC	1161	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 30 Dec 2024 14:27:04 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-rKfIrjgBZD8vYA7fNi94xQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-30 14:27:04 UTC	94	IN	Data Raw: 31 65 31 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 Data Ascii: 1e14<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="
2024-12-30 14:27:04 UTC	1255	IN	Data Raw: 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 Data Ascii: text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstati
2024-12-30 14:27:04 UTC	1255	IN	Data Raw: 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 57 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d 30 31 36 39 2c 20 55 2b 30 31 41 30 2d 30 31 41 31 2c 20 55 2b 30 31 41 46 2d 30 31 42 30 2c 20 55 2b 30 33 30 30 2d 30 33 30 31 2c 20 55 2b 30 33 30 33 2d 30 33 30 34 2c 20 55 2b 30 33 30 38 2d 30 33 30 39 2c 20 55 2b 30 33 32 33 2c 20 55 2b 30 33 32 39 2c 20 Data Ascii: weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7WxKOzY.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329,
2024-12-30 14:27:04 UTC	1255	IN	Data Raw: 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 41 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 41 42 63 34 45 73 41 2e 77 6f 66 Data Ascii: de-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fABc4EsA.wof
2024-12-30 14:27:04 UTC	1255	IN	Data Raw: 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 68 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 42 41 2c 20 55 2b 30 32 42 44 2d 30 32 43 35 2c 20 55 2b 30 32 43 37 2d 30 32 43 43 2c 20 55 2b 30 32 43 45 2d 30 32 44 37 2c 20 55 2b 30 32 44 44 2d 30 32 46 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 Data Ascii: -family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2) format('woff2'); unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308,
2024-12-30 14:27:04 UTC	1255	IN	Data Raw: 30 30 2d 30 34 35 46 2c 20 55 2b 30 34 39 30 2d 30 34 39 31 2c 20 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 Data Ascii: 00-045F, U+0490-0491, U+04B0-04B1, U+2116;}/* greek-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfCBc4EsA.woff2) format('woff2'); unicode-range: U
2024-12-30 14:27:04 UTC	1255	IN	Data Raw: 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 30 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 2d 41 37 46 46 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 Data Ascii: 020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}/* latin */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2) format('woff2'); u
2024-12-30 14:27:04 UTC	84	IN	Data Raw: 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 5d 5d 22 29 3b 0a 20 20 20 20 20 20 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: ,null,null,null,null,null,null,null,null,0]]"); </script></body></html>
2024-12-30 14:27:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.11.20	49740	142.250.64.196	443	840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 14:27:04 UTC	626	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Accept: / X-Client-Data: CI+2yQEIorbJAQipncoBCMD2ygEIkqHLAQic/swBCIWgzQEI1r3OARjBy8wB Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=517=i4E8sm-BN75bnGkPw4VW8uy51aQ8ounjntfNX2fu8MFJNuIvCX0dRBy-XkHqHwKOVFSSaC2nqfULsnHhY3TzIXHWC90jS3Wi2BINtQIDr1LJvZE4Ud-byTNL9Q04Nd1-ydmJvrWYY5vORspW6soJ1bMj20dq8UvPjgkw2sOvmuTUanqu
2024-12-30 14:27:04 UTC	705	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 30 Dec 2024 13:34:04 GMT Expires: Tue, 07 Jan 2025 13:34:04 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 3180 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-30 14:27:04 UTC	550	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-12-30 14:27:04 UTC	1255	IN	Data Raw: ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 a6 75 ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff 0b be fb ff 05 bc fb ff b6 ec fe ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 aa 7b ff ff ff ff ff fd fd fd f9 fd fd fd db ff ff ff ff 35 c9 fc ff 0a b2 f9 ff 6b a4 f6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 eb Data Ascii: BBBBBuBBBBB{5k7R8F2Vb5C;I
2024-12-30 14:27:04 UTC	1255	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 fe fe fe 2f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 24 fd fd fd ea ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff eb f5 e7 ff 8f c6 7b ff 54 a9 36 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 7e be 67 ff dd ee d7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 ff ff ff 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd d3 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff c4 e1 b9 ff 5c ac 3e ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 Data Ascii: /${T6S4S4S4S4S4S4S4S4S4~g"\>S4S4S4S4S4S4S4S4S4S4S4S
2024-12-30 14:27:04 UTC	1255	IN	Data Raw: ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fa c8 aa ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBBBBBB}BBBBBBBBBBB}
2024-12-30 14:27:04 UTC	1115	IN	Data Raw: 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 81 8a f2 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 8a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 0b fd fd fd d5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b5 ba f7 ff 3e 4b eb ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 3f 4c eb ff ba bf f8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 26 fd fd fd eb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: C5C5C5C5C5C5C5C5C5C5C5C5C5C>K5C5C5C5C5C5C5C5C5C5C5C5C?L&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.11.20	49744	192.178.50.68	443	840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 14:27:12 UTC	1104	OUT	POST /recaptcha/api2/reload?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 8997 sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128" Content-Type: application/x-protobuffer sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CI+2yQEIorbJAQipncoBCMD2ygEIkqHLAQic/swBCIWgzQEIrJ7OAQjkr84BCMO2zgEIvbnOAQjtvM4BCLu9zgEI1r3OAQjMv84BGMHLzAEYva7OARidsc4B Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=517=i4E8sm-BN75bnGkPw4VW8uy51aQ8ounjntfNX2fu8MFJNuIvCX0dRBy-XkHqHwKOVFSSaC2nqfULsnHhY3TzIXHWC90jS3Wi2BINtQIDr1LJvZE4Ud-byTNL9Q04Nd1-ydmJvrWYY5vORspW6soJ1bMj20dq8UvPjgkw2sOvmuTUanqu
2024-12-30 14:27:12 UTC	8997	OUT	Data Raw: 0a 18 7a 49 72 69 69 6a 6e 33 75 6a 35 56 70 6b 6e 76 74 5f 4c 6e 66 4e 62 46 12 f9 10 30 33 41 46 63 57 65 41 36 4f 4f 50 5a 5a 38 48 63 44 4e 37 52 63 43 75 67 7a 66 4a 34 39 79 57 58 49 54 42 6b 6c 53 58 43 37 67 6e 65 71 54 71 50 52 5a 30 30 51 30 48 48 38 55 68 35 55 2d 70 6d 50 6d 52 72 7a 51 46 49 35 33 4b 58 2d 71 4b 71 47 46 50 68 71 6a 30 57 6a 4b 4d 33 61 36 4d 70 35 31 4e 62 4c 6a 7a 47 2d 6f 37 6d 49 64 49 70 71 76 77 69 78 6e 35 33 67 62 42 44 32 32 57 6f 5a 52 4c 4a 75 55 64 5a 59 49 39 63 6d 39 4b 4d 37 4d 2d 61 34 46 35 4e 54 44 33 48 68 78 66 53 51 7a 4a 6a 30 42 69 70 71 30 49 53 5a 55 47 6a 41 50 59 36 53 79 52 65 6f 71 5f 4d 64 76 35 69 74 7a 39 39 6c 38 63 6f 78 76 4f 6b 48 6e 57 39 33 46 39 77 73 7a 59 58 6b 4f 6f 68 72 35 71 75 64 Data Ascii: zIriijn3uj5Vpknvt_LnfNbF03AFcWeA6OOPZZ8HcDN7RcCugzfJ49yWXITBklSXC7gneqTqPRZ00Q0HH8Uh5U-pmPmRrzQFI53KX-qKqGFPhqj0WjKM3a6Mp51NbLjzG-o7mIdIpqvwixn53gbBD22WoZRLJuUdZYI9cm9KM7M-a4F5NTD3HhxfSQzJj0Bipq0ISZUGjAPY6SyReoq_Mdv5itz99l8coxvOkHnW93F9wszYXkOohr5qud
2024-12-30 14:27:12 UTC	1000	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Resource-Policy: same-site Date: Mon, 30 Dec 2024 14:27:12 GMT Server: ESF Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: _GRECAPTCHA=09AJNbFneJCPg7VHoN4_ppju2HntmMMw87o_0eWcsHr-pV7HSAblcnQNxT-6ECJDlF-UzrYCBUbzEn6KDWvnW4rb4; Expires=Sat, 28-Jun-2025 14:27:12 GMT; Path=/recaptcha; Secure; HttpOnly; Priority=HIGH; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Expires: Mon, 30 Dec 2024 14:27:12 GMT Connection: close Transfer-Encoding: chunked
2024-12-30 14:27:12 UTC	255	IN	Data Raw: 34 30 32 64 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 34 77 43 55 62 38 6f 38 6a 6e 75 69 48 4b 70 4d 53 65 66 6e 35 5a 51 41 61 66 32 76 42 61 76 58 66 74 43 79 76 32 5a 50 4f 35 32 55 67 70 42 75 6d 65 64 66 35 65 63 5a 47 6c 33 61 32 36 33 5a 72 5f 59 44 34 58 41 70 42 6a 37 30 31 63 69 42 41 6b 42 68 77 69 64 59 39 47 39 58 36 4c 44 64 41 49 45 75 76 6d 52 67 7a 59 67 58 72 77 42 31 7a 52 75 72 59 33 55 4b 41 56 42 33 46 63 38 37 4f 4a 68 32 6f 41 54 4b 6a 57 4f 79 41 74 51 36 61 38 36 4a 66 35 6a 31 66 79 55 49 36 38 4e 46 69 53 68 35 75 33 62 53 48 35 6b 58 55 33 6f 41 42 5a 6a 73 6b 4c 4e 79 6c 52 74 48 4f 4e 44 51 48 53 4d 7a 53 34 4b 76 66 59 32 7a 56 44 33 51 74 77 39 65 6d 37 38 49 56 37 2d 41 68 6c 57 57 73 66 Data Ascii: 402d)]}'["rresp","03AFcWeA4wCUb8o8jnuiHKpMSefn5ZQAaf2vBavXftCyv2ZPO52UgpBumedf5ecZGl3a263Zr_YD4XApBj701ciBAkBhwidY9G9X6LDdAIEuvmRgzYgXrwB1zRurY3UKAVB3Fc87OJh2oATKjWOyAtQ6a86Jf5j1fyUI68NFiSh5u3bSH5kXU3oABZjskLNylRtHONDQHSMzS4KvfY2zVD3Qtw9em78IV7-AhlWWsf
2024-12-30 14:27:12 UTC	1255	IN	Data Raw: 66 6f 7a 6c 32 53 68 4f 4e 67 71 33 32 4d 4e 62 52 52 39 50 6e 67 62 79 4a 47 6c 78 62 67 45 6b 51 44 6f 32 54 76 4b 76 39 5f 4c 66 6f 54 54 58 4b 44 67 59 56 56 66 4d 43 61 7a 6b 36 37 55 57 33 32 30 41 70 41 6f 5f 4f 72 74 65 64 38 6e 4b 37 77 32 4f 78 76 30 37 72 49 55 69 4c 38 36 71 70 7a 6c 5f 39 51 36 6f 7a 4b 4f 36 50 34 74 57 6c 72 59 33 5f 39 4d 4b 31 35 71 36 47 4b 4b 51 4f 77 63 33 57 4d 38 59 38 46 61 54 43 46 4f 78 49 58 31 55 42 79 37 6e 56 6e 34 45 45 5a 7a 57 41 48 71 32 65 56 74 4c 73 2d 4f 6f 4a 42 48 53 36 31 64 37 6b 75 4c 63 42 5f 69 37 70 6f 50 30 6d 67 37 58 52 64 62 59 36 51 4c 7a 44 45 62 67 76 63 37 44 52 36 47 54 6d 38 75 68 61 64 6b 30 78 41 79 51 56 59 4d 56 77 35 4a 31 39 33 36 44 47 5f 6b 63 75 6c 62 6c 4d 45 64 66 6d 48 42 Data Ascii: fozl2ShONgq32MNbRR9PngbyJGlxbgEkQDo2TvKv9_LfoTTXKDgYVVfMCazk67UW320ApAo_Orted8nK7w2Oxv07rIUiL86qpzl_9Q6ozKO6P4tWlrY3_9MK15q6GKKQOwc3WM8Y8FaTCFOxIX1UBy7nVn4EEZzWAHq2eVtLs-OoJBHS61d7kuLcB_i7poP0mg7XRdbY6QLzDEbgvc7DR6GTm8uhadk0xAyQVYMVw5J1936DG_kculblMEdfmHB
2024-12-30 14:27:12 UTC	1255	IN	Data Raw: 53 47 67 48 34 4b 41 56 4d 7a 75 50 38 61 76 54 44 63 61 6c 51 77 4c 41 49 5a 37 57 66 35 30 76 6d 65 66 73 71 73 56 37 62 37 49 66 4a 77 6b 44 75 4f 4a 56 4e 70 49 37 63 4c 6c 4f 7a 73 30 73 69 47 46 6d 31 4b 73 5a 34 65 31 2d 37 4f 69 6c 33 62 62 66 38 62 6d 36 5a 68 5f 67 5f 46 46 32 4d 31 67 47 53 34 72 68 46 4b 70 71 4c 61 4c 79 50 4c 77 31 69 43 6b 77 68 49 47 34 74 53 6b 39 73 43 49 62 35 55 6e 6a 70 31 6d 42 31 58 6e 70 34 4d 4c 45 6c 30 57 5f 71 47 48 70 46 58 46 41 2d 4d 69 72 4d 5f 55 4e 6b 36 38 43 32 73 54 44 36 4b 31 7a 75 4c 56 5a 65 54 75 6c 74 30 38 6a 77 41 6a 45 6b 47 46 57 41 4e 42 42 69 76 37 6f 66 37 71 74 2d 43 47 6e 6a 49 39 4a 5f 49 47 62 59 6d 58 6c 4d 4b 54 68 6a 63 30 79 71 51 5a 46 34 32 77 6a 72 52 6d 78 63 77 6c 32 61 30 4b Data Ascii: SGgH4KAVMzuP8avTDcalQwLAIZ7Wf50vmefsqsV7b7IfJwkDuOJVNpI7cLlOzs0siGFm1KsZ4e1-7Oil3bbf8bm6Zh_g_FF2M1gGS4rhFKpqLaLyPLw1iCkwhIG4tSk9sCIb5Unjp1mB1Xnp4MLEl0W_qGHpFXFA-MirM_UNk68C2sTD6K1zuLVZeTult08jwAjEkGFWANBBiv7of7qt-CGnjI9J_IGbYmXlMKThjc0yqQZF42wjrRmxcwl2a0K
2024-12-30 14:27:12 UTC	1255	IN	Data Raw: 32 53 43 33 45 63 6a 67 7a 44 37 6e 77 6f 44 48 54 65 51 68 34 49 56 35 36 6c 4c 57 57 69 5f 48 33 69 67 76 42 79 58 4d 72 70 32 55 36 56 58 58 31 47 59 64 38 74 6e 44 48 6d 4a 64 43 4e 55 4a 54 6f 34 6b 50 51 52 78 36 62 77 61 47 61 6b 74 41 63 37 5a 53 53 35 4d 45 5f 54 31 65 77 33 79 57 36 35 64 66 77 46 39 4a 62 71 41 57 56 2d 38 77 4f 5f 48 56 4c 44 5f 4c 71 43 4f 72 61 4d 4d 4c 71 64 6b 58 4b 71 61 6e 58 76 36 68 73 34 67 48 48 7a 33 38 53 4d 76 4b 4c 30 64 61 31 78 5a 46 59 4f 46 33 32 41 43 33 75 2d 66 5a 55 47 32 45 48 50 4e 63 68 65 31 71 67 38 57 30 6d 69 69 30 39 74 48 61 4b 35 55 70 69 77 66 6f 76 59 43 70 57 32 59 55 68 56 75 79 42 44 57 56 73 73 62 30 62 35 34 55 46 4d 7a 4d 71 62 53 61 68 4c 6c 4c 6b 5f 67 58 63 4b 44 42 57 52 4b 44 31 6d Data Ascii: 2SC3EcjgzD7nwoDHTeQh4IV56lLWWi_H3igvByXMrp2U6VXX1GYd8tnDHmJdCNUJTo4kPQRx6bwaGaktAc7ZSS5ME_T1ew3yW65dfwF9JbqAWV-8wO_HVLD_LqCOraMMLqdkXKqanXv6hs4gHHz38SMvKL0da1xZFYOF32AC3u-fZUG2EHPNche1qg8W0mii09tHaK5UpiwfovYCpW2YUhVuyBDWVssb0b54UFMzMqbSahLlLk_gXcKDBWRKD1m
2024-12-30 14:27:12 UTC	1255	IN	Data Raw: 41 63 58 50 65 69 63 52 51 55 6a 63 62 6e 43 43 4f 6b 49 59 47 33 71 57 31 48 4e 37 76 79 42 50 38 31 79 67 76 74 69 52 5a 58 2d 37 58 66 6e 30 59 67 49 7a 36 75 64 6f 48 79 51 6f 4c 6d 6b 4c 66 49 77 77 32 48 69 37 62 74 50 71 30 49 41 34 73 31 41 38 63 78 62 55 6a 43 79 67 6d 59 55 39 73 50 6a 36 67 4b 4d 68 77 4d 65 65 59 45 4b 68 41 66 69 6a 65 6f 54 52 39 62 6e 2d 77 44 38 74 43 69 31 61 6d 73 41 69 68 6c 63 5f 71 56 44 54 52 38 64 66 76 4d 7a 77 48 65 50 4e 58 4d 51 42 73 50 71 79 34 7a 41 69 77 77 65 62 50 2d 45 34 6c 6f 35 7a 76 52 7a 5a 34 39 35 2d 64 49 43 6c 6f 4f 6d 61 6f 53 45 73 6a 55 63 67 70 4f 52 78 32 32 61 6e 31 43 55 79 5a 4b 30 4a 61 70 5a 68 7a 69 72 63 39 44 62 41 66 43 61 7a 69 35 32 57 48 33 53 6a 38 39 4f 42 74 33 2d 66 68 45 53 Data Ascii: AcXPeicRQUjcbnCCOkIYG3qW1HN7vyBP81ygvtiRZX-7Xfn0YgIz6udoHyQoLmkLfIww2Hi7btPq0IA4s1A8cxbUjCygmYU9sPj6gKMhwMeeYEKhAfijeoTR9bn-wD8tCi1amsAihlc_qVDTR8dfvMzwHePNXMQBsPqy4zAiwwebP-E4lo5zvRzZ495-dICloOmaoSEsjUcgpORx22an1CUyZK0JapZhzirc9DbAfCazi52WH3Sj89OBt3-fhES
2024-12-30 14:27:12 UTC	1255	IN	Data Raw: 4f 36 71 62 51 79 31 61 38 51 73 6f 43 74 61 4c 5a 37 63 71 47 57 73 7a 39 61 55 4a 64 4c 4e 34 70 74 43 67 31 72 62 41 7a 33 4e 6b 44 4e 2d 67 56 6d 5a 73 73 51 4e 50 45 35 43 49 76 61 34 69 51 36 78 53 48 71 6a 4f 75 62 47 33 67 79 72 4f 2d 76 79 58 38 59 74 72 32 74 6f 42 51 30 71 59 63 74 54 55 75 35 35 5f 68 5f 65 68 6b 64 54 2d 57 54 78 38 38 65 55 46 5a 59 51 77 66 4a 32 6f 4b 67 35 4d 64 38 69 49 2d 56 36 34 52 52 64 41 44 51 38 6c 6b 4c 58 65 32 77 67 68 6e 30 4e 73 6f 34 53 67 36 73 52 73 45 56 55 32 78 70 4e 50 69 35 46 33 65 50 49 49 49 43 76 2d 51 57 32 61 4e 71 76 46 47 35 78 54 67 6f 6e 70 69 2d 57 4c 4d 67 32 79 57 6c 7a 66 71 6e 46 4b 41 51 6c 44 67 77 54 54 35 72 62 75 49 67 4e 62 71 39 61 37 4f 6a 6c 36 6f 6b 47 30 6a 72 7a 33 62 50 31 Data Ascii: O6qbQy1a8QsoCtaLZ7cqGWsz9aUJdLN4ptCg1rbAz3NkDN-gVmZssQNPE5CIva4iQ6xSHqjOubG3gyrO-vyX8Ytr2toBQ0qYctTUu55_h_ehkdT-WTx88eUFZYQwfJ2oKg5Md8iI-V64RRdADQ8lkLXe2wghn0Nso4Sg6sRsEVU2xpNPi5F3ePIIICv-QW2aNqvFG5xTgonpi-WLMg2yWlzfqnFKAQlDgwTT5rbuIgNbq9a7Ojl6okG0jrz3bP1
2024-12-30 14:27:12 UTC	1255	IN	Data Raw: 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 48 59 56 6c 56 63 45 6b 7a 56 45 30 79 57 6d 56 4b 63 6b 70 31 57 54 5a 7a 61 47 52 4f 54 45 70 43 52 56 5a 52 57 6d 51 34 4d 31 68 78 53 54 46 61 53 32 38 35 57 6c 4e 5a 4c 6d 70 7a 22 2c 22 22 2c 22 55 6c 56 61 56 45 31 61 4b 30 6c 31 64 55 56 47 4e 30 6b 33 64 46 5a 5a 65 57 46 72 4d 6c 52 70 54 44 64 5a 51 55 4e 43 56 56 52 32 52 69 39 6c 57 55 30 72 53 44 45 30 61 7a 46 4a 51 30 70 73 59 32 56 32 55 6d 73 32 59 54 68 33 62 6b 64 79 63 32 35 43 53 45 5a 53 5a 57 70 55 59 6c 52 4d 63 46 56 48 4d 45 64 51 53 6e 42 34 4f 57 35 76 53 47 4e 59 59 31 70 68 54 6c 70 45 4f 55 6c 33 57 54 49 30 63 57 52 48 52 48 68 50 56 6e 70 4c 51 55 74 51 5a 6c 46 6e 52 6d 46 6d 53 32 46 44 54 32 Data Ascii: 3cuZ29vZ2xlLmNvbS9qcy9iZy9HYVlVcEkzVE0yWmVKckp1WTZzaGROTEpCRVZRWmQ4M1hxSTFaS285WlNZLmpz","","UlVaVE1aK0l1dUVGN0k3dFZZeWFrMlRpTDdZQUNCVVR2Ri9lWU0rSDE0azFJQ0psY2V2Ums2YTh3bkdyc25CSEZSZWpUYlRMcFVHMEdQSnB4OW5vSGNYY1phTlpEOUl3WTI0cWRHRHhPVnpLQUtQZlFnRmFmS2FDT2
2024-12-30 14:27:12 UTC	1255	IN	Data Raw: 5a 74 53 46 52 71 5a 57 6c 61 4f 54 41 32 52 48 42 48 57 57 31 31 55 48 6c 53 62 45 64 48 62 6d 64 4e 61 48 46 52 53 6a 68 74 65 58 56 49 54 55 52 4b 4f 47 70 55 5a 6b 56 70 4f 45 52 69 64 6d 74 35 56 6e 67 79 57 47 31 4c 59 31 4d 78 51 6c 4e 53 52 54 56 42 61 57 4a 43 55 56 64 71 53 6e 46 48 59 55 35 57 62 54 4e 33 4f 46 46 4a 55 6d 56 30 59 6e 52 5a 5a 58 51 34 57 47 64 73 4d 46 64 75 53 30 35 6d 53 6a 64 53 55 46 64 77 61 6a 64 43 55 47 64 61 55 44 4a 4d 52 57 77 31 62 43 38 72 56 58 70 52 59 30 78 36 4c 33 5a 75 5a 45 52 33 56 47 35 36 57 53 39 45 54 47 70 6a 51 6b 6c 6a 62 6a 4e 78 4e 6b 56 49 52 58 64 77 57 58 59 32 54 46 46 36 4b 7a 56 51 61 44 64 6f 63 6b 49 34 62 30 4a 61 5a 6b 46 7a 65 6c 5a 55 4e 57 4a 58 53 54 64 32 4f 55 6b 33 57 6e 52 34 59 Data Ascii: ZtSFRqZWlaOTA2RHBHWW11UHlSbEdHbmdNaHFRSjhteXVITURKOGpUZkVpOERidmt5VngyWG1LY1MxQlNSRTVBaWJCUVdqSnFHYU5WbTN3OFFJUmV0YnRZZXQ4WGdsMFduS05mSjdSUFdwajdCUGdaUDJMRWw1bC8rVXpRY0x6L3ZuZER3VG56WS9ETGpjQkljbjNxNkVIRXdwWXY2TFF6KzVQaDdockI4b0JaZkFzelZUNWJXSTd2OUk3WnR4Y
2024-12-30 14:27:12 UTC	1255	IN	Data Raw: 56 41 31 53 57 46 73 5a 54 6c 43 51 56 4e 68 63 58 45 31 59 55 6c 6e 55 6e 6c 4f 53 48 6f 32 59 7a 42 50 51 30 6c 32 57 47 38 77 56 56 4e 42 54 54 68 61 55 6e 6c 69 57 48 42 51 55 47 39 77 63 6d 39 43 56 55 6f 72 55 44 41 33 56 48 55 79 55 30 6c 45 56 6a 4a 79 5a 31 6c 72 65 6e 46 4a 4d 58 4d 78 64 47 70 69 61 48 42 56 55 43 74 6c 54 45 4a 50 64 58 68 68 54 30 39 56 61 58 46 6b 52 58 6b 30 55 58 5a 57 5a 44 5a 7a 4e 31 4e 43 56 6e 45 79 56 6d 64 70 53 54 56 30 57 57 5a 4b 63 6e 42 59 51 54 56 34 54 56 46 71 53 7a 52 5a 56 46 5a 36 5a 6d 6c 74 52 30 4e 79 5a 32 4e 45 51 57 52 45 53 7a 52 6a 64 32 74 70 55 46 70 4a 53 6d 70 68 63 6a 5a 44 53 45 56 52 62 6b 6c 6f 52 48 46 6a 51 55 45 7a 59 6a 67 35 61 32 64 7a 5a 33 46 46 56 6d 4a 57 53 31 52 35 52 33 59 76 Data Ascii: VA1SWFsZTlCQVNhcXE1YUlnUnlOSHo2YzBPQ0l2WG8wVVNBTThaUnliWHBQUG9wcm9CVUorUDA3VHUyU0lEVjJyZ1lrenFJMXMxdGpiaHBVUCtlTEJPdXhhT09VaXFkRXk0UXZWZDZzN1NCVnEyVmdpSTV0WWZKcnBYQTV4TVFqSzRZVFZ6ZmltR0NyZ2NEQWRESzRjd2tpUFpJSmphcjZDSEVRbkloRHFjQUEzYjg5a2dzZ3FFVmJWS1R5R3Yv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.11.20	49745	142.250.64.196	443	840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 14:27:13 UTC	782	OUT	GET /recaptcha/api2/reload?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Accept: / X-Client-Data: CI+2yQEIorbJAQipncoBCMD2ygEIkqHLAQic/swBCIWgzQEI1r3OARjBy8wB Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AJNbFneJCPg7VHoN4_ppju2HntmMMw87o_0eWcsHr-pV7HSAblcnQNxT-6ECJDlF-UzrYCBUbzEn6KDWvnW4rb4; NID=517=i4E8sm-BN75bnGkPw4VW8uy51aQ8ounjntfNX2fu8MFJNuIvCX0dRBy-XkHqHwKOVFSSaC2nqfULsnHhY3TzIXHWC90jS3Wi2BINtQIDr1LJvZE4Ud-byTNL9Q04Nd1-ydmJvrWYY5vORspW6soJ1bMj20dq8UvPjgkw2sOvmuTUanqu
2024-12-30 14:27:13 UTC	743	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 30 Dec 2024 14:27:13 GMT Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Allow: POST Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-30 14:27:13 UTC	512	IN	Data Raw: 36 38 30 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f Data Ascii: 680<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 405 (Bad Request)!!1</title><style>*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{backgro
2024-12-30 14:27:13 UTC	1159	IN	Data Raw: 20 32 32 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 70 72 65 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 70 72 65 2d 77 72 61 70 3b 7d 69 6e 73 7b 63 6f 6c 6f 72 3a 23 37 37 37 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 61 20 69 6d 67 7b 62 6f 72 64 65 72 3a 30 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 37 32 70 78 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f Data Ascii: 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/
2024-12-30 14:27:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.11.20	49750	192.178.50.68	443	840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 14:27:13 UTC	1385	OUT	GET /recaptcha/api2/payload?p=06AFcWeA5PGsWoCQ-Ax2uVHRLLgFialWVuYNfvEN3KAX9DvGoNNLsavd7FN9mD0jMMSxzjPQKpxI93wwqlONMTVJhrYgPF_bdTbYJ5k1gliF_ZWleCQjv6VooVeIde7ADLMJvZsbl3At03Jz_01YuOULnqDKscaXTDPXnEEVv678Kq2DKie028ax2gNrhGgwnjUN4iFFrZz9h7&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CI+2yQEIorbJAQipncoBCMD2ygEIkqHLAQic/swBCIWgzQEIrJ7OAQjkr84BCMO2zgEIvbnOAQjtvM4BCLu9zgEI1r3OAQjMv84BGMHLzAEYva7OARidsc4B Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AJNbFneJCPg7VHoN4_ppju2HntmMMw87o_0eWcsHr-pV7HSAblcnQNxT-6ECJDlF-UzrYCBUbzEn6KDWvnW4rb4; NID=517=i4E8sm-BN75bnGkPw4VW8uy51aQ8ounjntfNX2fu8MFJNuIvCX0dRBy-XkHqHwKOVFSSaC2nqfULsnHhY3TzIXHWC90jS3Wi2BINtQIDr1LJvZE4Ud-byTNL9Q04Nd1-ydmJvrWYY5vORspW6soJ1bMj20dq8UvPjgkw2sOvmuTUanqu
2024-12-30 14:27:13 UTC	681	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Mon, 30 Dec 2024 14:27:13 GMT Date: Mon, 30 Dec 2024 14:27:13 GMT Cache-Control: private, max-age=30 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Resource-Policy: same-site Transfer-Encoding: chunked Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-30 14:27:13 UTC	574	IN	Data Raw: 39 30 64 66 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 2c 01 2c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 90dfJFIFC!"$"$C,,"}!1AQa"q
2024-12-30 14:27:13 UTC	1255	IN	Data Raw: b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 d3 8a 38 fc 94 91 d7 6e e5 05 b7 1c 72 6b 2a ce 18 4f 8c ef 42 c6 98 5b 44 e8 a3 a9 39 ad 2b 6b 84 b8 d3 82 86 63 23 21 52 10 65 81 e4 64 e3 a7 e3 58 7e 1d 91 ee 3c 4f ab 49 12 2d b2 79 71 fc af f3 11 91 93 c6 70 39 ce 2b d5 6f 63 cd 4b 73 a2 68 23 27 fd 5a 7f df 22 ab 97 b6 27 6c 68 b2 9f 48 d3 77 3e 99 e8 3f 13 4f b9 fb 14 20 35 ed ca 36 78 1e 73 8c 1f a2 f4 27 e8 33 4d 17 72 48 36 da 59 4d 20 e8 1a 41 e4 a0 ff 00 be be 6f c9 4d 59 16 19 e4 48 fc ad bc 30 8f 57 1b 8f e4 38 fd 68 fb 04 78 26 49 25 61 d7 ef 6c 03 f0 5c 7e b9 a9 44 1a 84 bc cb 73 1d b8 fe ec 09 b9 87 fc 09 b8 3f f7 c8 a0 e9 76 Data Ascii: ?8nrk*OB[D9+kc#!RedX~<OI-yqp9+ocKsh#'Z"'lhHw>?O 56xs'3MrH6YM AoMYH0W8hx&I%al\~Ds?v
2024-12-30 14:27:13 UTC	1255	IN	Data Raw: 5e 58 de 1e d2 21 92 36 8b 5e 89 d5 01 65 89 d6 55 01 32 dc 10 41 c8 f9 ba 7e 55 51 7f ce bf af eb fa d0 25 ab d3 57 ff 00 03 f0 ff 00 87 29 db 49 62 f7 f7 42 f6 ca e5 63 65 6d 8a 19 47 cc 72 33 ca 9c 8c f1 db 8e 95 9f 15 e5 95 c3 f9 92 43 73 0a ee 52 64 40 1b 67 20 93 c8 c7 40 3d 32 71 d6 b5 db c3 d6 4d 22 cc fe 22 b3 79 62 93 71 79 9d c6 57 d0 e5 7e 5c 93 8e 3d 79 a7 3e 80 d2 45 6f 24 7a b6 9a 54 12 a5 56 f1 77 12 4f 19 18 c0 1c 81 df 39 ed d2 9d a3 2d 5a 23 de 7e e9 c9 dd a5 bc 31 01 0a cb 34 72 95 26 62 f9 60 31 c2 9e 84 7d 3b d4 f6 72 ea 4f 74 de 5c 72 49 9f 97 08 77 6f 39 27 6e 31 82 7e 51 8c d6 f9 f0 dc b1 4f 0c 90 dc d8 ca a8 bb b0 b3 82 3a 75 27 19 ea 73 54 9b 41 d6 9d 92 28 67 08 15 99 91 95 f0 d8 20 70 1f 23 39 e9 cf a5 35 38 35 69 68 4b e6 94 Data Ascii: ^X!6^eU2A~UQ%W)IbBcemGr3CsRd@g @=2qM""ybqyW~\=y>Eo$zTVwO9-Z#~14r&b`1};rOt\rIwo9'n1~QO:u'sTA(g p#9585ihK
2024-12-30 14:27:13 UTC	1255	IN	Data Raw: 3d df c1 fa 67 87 f4 0b f8 a7 d4 35 d9 ee 34 bb 6b 54 9a 1b 43 21 56 90 3b 0d ec bc 81 c6 ec e1 79 38 6e 6a 5d 5f c6 1e 0d bd d4 9b 44 f0 ee 91 f6 db 2c f9 f3 5b dd 8c ab b2 36 ec c6 b8 3c e1 5f 96 c8 e9 c5 6c 7e cf d2 5a ea 97 cd aa ea d6 56 d3 4c b6 71 d9 da b7 2e 60 54 5d a4 05 60 15 72 58 72 3b e7 35 c2 7c 4c b8 b7 9b e3 6b 0d 36 18 74 b3 e7 2c 4c d9 50 aa d8 c6 ee 38 e7 92 7d 47 19 35 95 3b c9 72 df fe 01 5e d1 46 cd eb fd 5f f4 3d 6a ea e0 40 ad 1d be d8 3c ad c3 6c 93 29 5c 20 da 31 90 7d 5b a8 af 08 d7 6e 93 54 f1 55 f6 ae 15 02 0b a6 48 56 34 ca c9 20 c6 0e 30 01 ed d3 bb 0e 2b b2 f8 93 ad de e9 ca b7 f0 ec 5b 7b eb 9c 89 24 7d aa 38 66 5c 74 00 1d c4 7e 7e f4 b1 e9 76 1e 27 b4 6d 46 2b 86 8c 24 41 02 db c8 ad b3 d1 41 03 3c 7c bf 37 4e bc 52 74 Data Ascii: =g54kTC!V;y8nj]_D,[6<_l~ZVLq.`T]`rXr;5\|Lk6t,LP8}G5;r^F_=j@<l)\ 1}[nTUHV4 0+[{$}8f\t~~v'mF+$AA<\|7NRt
2024-12-30 14:27:13 UTC	1255	IN	Data Raw: 79 ed 1b e5 28 d9 56 8c 7f 5f ca 93 67 bb 7e 55 7c c4 d8 ab b3 da 8d 95 6b 67 b9 fc a8 29 ee 7f 2a 39 82 c5 5d 94 9b 3d aa d7 97 f5 fc a9 3c bf 73 f9 53 e6 0b 15 b6 7b 52 14 ab 5e 5f bf e9 41 4f f6 85 1c c2 b1 50 c7 c7 4a 61 8f 35 74 a7 fb 4b 4d d9 9f 4a 6a 42 b1 ce eb da 87 f6 05 dd 8e be d6 31 df 25 83 34 86 17 97 cb ce 70 a0 8e c4 82 47 18 39 ad af 02 f8 5e 5b 99 6e 66 b1 96 2b 69 26 3e 6e a1 a8 61 4d c4 b3 b8 de c8 a5 94 85 55 07 39 e4 f4 1c 57 31 f1 02 cd ae 75 2d 06 29 1f fd 1e 4b a3 1b c7 93 86 24 a9 07 f0 da 4e 7b 73 de b9 cb ad 7e 77 bd d5 1e d2 5b d8 e2 6b 96 91 11 e6 65 06 3e 40 61 b4 9c 8d a3 92 46 3a 7d 0e 35 66 a9 a7 2b 6e f4 37 8d e7 15 05 d0 f7 4d 0b 42 d1 6f 75 8d 43 4d d6 5d ef ae ad f0 ff 00 e9 53 34 9b e3 38 da c1 58 95 51 b7 d8 60 f5 Data Ascii: y(V_g~U\|kg)*9]=<sS{R^_AOPJa5tKMJjB1%4pG9^[nf+i&>naMU9W1u-)K$N{s~w[ke>@aF:}5f+n7MBouCM]S48XQ`
2024-12-30 14:27:13 UTC	1255	IN	Data Raw: 83 db 3c 80 4f d6 a2 b7 d2 63 9a 3f 36 49 d8 02 18 90 18 06 e4 1e 07 38 1c 7b 80 32 7f 1d 6b c8 84 4c 23 b9 e2 7e 58 15 52 e5 87 56 3b 73 9e a1 7a 9f 4a 6c 31 e2 70 4b 6e e4 2b 9c 28 03 ae e2 71 91 9c fd 38 c0 18 eb 42 f8 6e 89 b2 4b 6f 3e 86 75 bd b0 b6 95 4c 56 f1 be 24 1b 7f 75 c8 5c e0 37 24 72 49 3c f3 e9 81 4b 22 cf 13 72 92 42 fb 07 ce 18 83 b4 82 07 6e 38 1c e7 d7 f0 ab 49 11 9a 30 db d9 14 44 11 b7 82 4e 38 38 39 e0 f4 38 c7 af 6c 1a 45 62 a6 09 95 44 88 79 44 0d b4 93 81 bb 93 c8 1f 30 20 77 eb cf 5a 96 bf af eb fa ea 27 1d 5d ba 7a 14 5e 5d a1 8c 82 39 32 c8 1f ca 6c 95 40 72 c1 8e 78 ea a3 a1 24 73 eb 53 c7 77 6e 59 b6 46 9b 48 5f 2c c6 e3 70 8f 1d 31 d7 8e 9c f7 3d b1 cc 8f 19 56 06 58 e3 43 12 15 62 d1 12 bb 7a 0e 7e 99 c8 ef c5 17 09 e5 2e Data Ascii: <Oc?6I8{2kL#~XRV;szJl1pKn+(q8BnKo>uLV$u\7$rI<K"rBn8I0DN8898lEbDyD0 wZ']z^]92l@rx$sSwnYFH_,p1=VXCbz~.
2024-12-30 14:27:13 UTC	1255	IN	Data Raw: 31 04 00 98 cb 6d 75 e7 1c e3 3f 8d 5c d1 2c b4 d8 b5 e3 04 da 84 b9 0e ea 5c af 20 ae 08 0d 83 81 9f 50 4f 4c d5 0d 00 43 f6 c6 ba 9a cc dd 88 63 24 82 0a a9 21 72 1b d4 9f 94 e1 73 db df 15 ab ad cd a5 dd de cf 78 90 49 31 99 55 b3 bd 81 79 36 8f 30 f3 df 3e 84 f5 f7 15 2d a7 74 f5 fb 89 e5 bd 95 bf c8 da f1 64 fa bd 96 eb 2b 6d 2a f2 da 5b 76 0d 2c 87 e7 52 81 40 01 71 9e 3e 63 df a9 e8 49 cd 73 92 0f 16 dd 24 88 63 b9 c3 4a c0 a6 48 25 8e 4e 09 3d f3 d7 3d 31 9f 5a e9 7c 23 e4 cf a4 23 ee f2 8a 4c cc f9 66 da 70 41 dd 9d be 9b 4e 72 0f 22 b7 af ed c2 2c 72 3a 01 14 87 79 20 97 93 24 06 6c e4 64 63 3c 28 6e f9 34 9c a4 da 57 2a 2a eb 5d 3f af f8 73 cd 1b c3 ba f5 c6 e0 23 96 58 b6 99 3f 79 30 f9 7b 73 d7 1d c1 cf e5 5e d3 66 b6 f1 20 da 52 3b 63 21 2a Data Ascii: 1mu?\,\ POLCc$!rsxI1Uy60>-td+m[v,R@q>cIs$cJH%N==1Z\|##LfpANr",r:y $ldc<(n4W]?s#X?y0{s^f R;c!
2024-12-30 14:27:13 UTC	1255	IN	Data Raw: 5a bf 3f 7a 39 2d 3c ae 9e 85 18 e2 b0 f4 8f 11 ff 00 c2 4b 71 24 f7 9a ad fd d3 c6 d0 e1 96 ea 55 31 33 6e dc 03 06 07 3c 0e 79 a8 f6 7c ba c5 82 5c ce cc da f1 57 8d 7c 67 ab 24 3a 25 86 8d 7a b7 52 22 48 d1 5a db b9 99 f0 39 3c 0c ed dd cf 03 d2 a2 d2 1b c7 da 05 ca ea 57 7a 46 bf 0a aa a2 dc ab db 3b 0f 2c 00 72 77 2f 19 e9 db 19 c6 73 5e 6d a3 5f cd e2 2d 6e c7 4a bf f1 0e a1 79 1c b3 85 d9 2c b2 48 10 f4 dc 01 6e a0 67 d3 eb 5e 89 6b e0 28 2d af 60 ba 8f c4 f7 61 e1 72 c7 30 b9 c8 e7 8c 19 08 f4 14 fd 97 57 2d 49 4d 6d ca 74 fa bf 8f e2 d5 3c 2f aa 69 69 13 9b 99 2d 24 85 e5 58 64 55 52 cb 8e 72 b8 03 2c 07 5e f5 e7 be 0d 9b 52 10 db e9 3e 6c f0 ac 7b e6 11 00 57 78 90 05 20 91 cf a0 fc 71 df 15 d7 2e 85 3a bd cc 96 fa a6 8e cd 71 0a c7 31 bb d3 bc Data Ascii: Z?z9-<Kq$U13n<y\|\W\|g$:%zR"HZ9<WzF;,rw/s^m_-nJy,Hng^k(-`ar0W-IMmt</ii-$XdURr,^R>l{Wx q.:q1
2024-12-30 14:27:13 UTC	1255	IN	Data Raw: d4 b1 a8 87 cc f3 1c 92 cc 43 48 c3 04 15 23 e6 39 23 27 27 38 03 a1 ce 4d 21 40 ae 23 8d 0a cf 2b b1 2c a4 fc a0 0e e7 ae 4e 3b f3 95 3c 7a 4b 6f 75 fb b8 c0 0a e4 c8 a0 01 22 8d 8d 93 8e 47 d0 0c f4 c0 f7 22 96 b7 bc 7c bf af c0 b6 e5 c9 77 fd 7f 56 fe ba c6 5a e2 25 1e 6c 8a ae 1c 04 56 0c c7 27 8c 67 20 64 83 93 9c f7 fc 6a a4 ad 80 4c 6d 21 5f 96 53 09 23 00 80 70 a3 a6 0f d4 73 e9 56 a5 89 e1 8a 21 3c 72 8d 81 da 57 11 e3 71 c0 6e 4e 31 81 8e 3a f4 e9 50 fd a1 15 84 91 32 c8 a1 89 de 3a 86 27 be 39 e7 9e 7f 03 56 bb af eb b0 f6 df e5 fd 7d fb 8b 20 f3 e6 65 56 78 fa e5 4a ee 65 6c 8e 71 e8 01 eb d0 71 c5 53 95 91 8c 6a b0 24 ac d2 65 b6 63 82 54 fa 75 c6 41 3e 9c d5 b1 0a 4f 0b b4 88 80 82 43 c2 0a 60 e4 e0 67 3e a3 9e 9c e0 fb 54 12 dc ab 23 be d9 Data Ascii: CH#9#''8M!@#+,N;<zKou"G"\|wVZ%lV'g djLm!_S#psV!<rWqnN1:P2:'9V} eVxJelqqSj$ecTuA>OC`g>T#
2024-12-30 14:27:13 UTC	1255	IN	Data Raw: b1 cb 0d a4 1e 9d 3b 7e 35 da d8 78 42 2b 3d 39 1a ed e3 86 cf 69 5f 97 0c 00 3c 75 ea 39 ed f9 73 5a 2f ac d9 d9 44 20 d2 d5 25 48 f1 12 4b 2a 80 01 dd 85 63 c9 e5 71 df 80 6a 53 b4 5c 9e 9a db e6 ca 9c 5a 5f d7 f5 73 0e ea fa e6 fd ed e7 bc b8 fb 4b 44 15 4a 6e 2b 16 3a f9 9f 2f 41 d0 f7 e3 f1 aa f1 45 14 ea cd 0d b2 c9 d5 92 10 b9 cf 03 a8 e4 73 90 73 d3 a5 4b e7 5d 4f 1b 49 71 2b 79 8b 97 cb 2f 99 bd 70 72 73 fd ff 00 94 71 92 07 3d 2a 19 8b aa b9 96 eb f7 e1 1a 34 50 76 ae 06 32 a7 3d f0 5b 9e de 87 9a 1c 9a d9 ea 39 49 42 5a 7f 4c 8e 4d a4 b5 cc 72 a9 31 21 50 9f 2a 84 c6 79 e0 f6 04 80 4f a7 4a 4b bf 36 e1 d7 c9 54 f3 16 66 8d 63 47 cc 8d c8 38 eb 8e 3e 9c 92 39 e9 53 4a 21 86 cd 16 69 76 83 1e 32 14 2b 28 c0 0c 7e f6 46 10 8e 00 07 eb d9 93 dd 19 Data Ascii: ;~5xB+=9i_<u9sZ/D %HKcqjS\Z_sKDJn+:/AEssK]OIq+y/prsq=4Pv2=[9IBZLMr1!P*yOJK6TfcG8>9SJ!iv2+(~F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.11.20	49757	142.250.64.196	443	840	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-30 14:27:14 UTC	992	OUT	GET /recaptcha/api2/payload?p=06AFcWeA5PGsWoCQ-Ax2uVHRLLgFialWVuYNfvEN3KAX9DvGoNNLsavd7FN9mD0jMMSxzjPQKpxI93wwqlONMTVJhrYgPF_bdTbYJ5k1gliF_ZWleCQjv6VooVeIde7ADLMJvZsbl3At03Jz_01YuOULnqDKscaXTDPXnEEVv678Kq2DKie028ax2gNrhGgwnjUN4iFFrZz9h7&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Accept: / X-Client-Data: CI+2yQEIorbJAQipncoBCMD2ygEIkqHLAQic/swBCIWgzQEI1r3OARjBy8wB Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AJNbFneJCPg7VHoN4_ppju2HntmMMw87o_0eWcsHr-pV7HSAblcnQNxT-6ECJDlF-UzrYCBUbzEn6KDWvnW4rb4; NID=517=i4E8sm-BN75bnGkPw4VW8uy51aQ8ounjntfNX2fu8MFJNuIvCX0dRBy-XkHqHwKOVFSSaC2nqfULsnHhY3TzIXHWC90jS3Wi2BINtQIDr1LJvZE4Ud-byTNL9Q04Nd1-ydmJvrWYY5vORspW6soJ1bMj20dq8UvPjgkw2sOvmuTUanqu
2024-12-30 14:27:14 UTC	681	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Mon, 30 Dec 2024 14:27:14 GMT Date: Mon, 30 Dec 2024 14:27:14 GMT Cache-Control: private, max-age=30 Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Transfer-Encoding: chunked Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-30 14:27:14 UTC	574	IN	Data Raw: 39 30 64 66 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 2c 01 2c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 90dfJFIFC!"$"$C,,"}!1AQa"q
2024-12-30 14:27:14 UTC	1255	IN	Data Raw: b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 d3 8a 38 fc 94 91 d7 6e e5 05 b7 1c 72 6b 2a ce 18 4f 8c ef 42 c6 98 5b 44 e8 a3 a9 39 ad 2b 6b 84 b8 d3 82 86 63 23 21 52 10 65 81 e4 64 e3 a7 e3 58 7e 1d 91 ee 3c 4f ab 49 12 2d b2 79 71 fc af f3 11 91 93 c6 70 39 ce 2b d5 6f 63 cd 4b 73 a2 68 23 27 fd 5a 7f df 22 ab 97 b6 27 6c 68 b2 9f 48 d3 77 3e 99 e8 3f 13 4f b9 fb 14 20 35 ed ca 36 78 1e 73 8c 1f a2 f4 27 e8 33 4d 17 72 48 36 da 59 4d 20 e8 1a 41 e4 a0 ff 00 be be 6f c9 4d 59 16 19 e4 48 fc ad bc 30 8f 57 1b 8f e4 38 fd 68 fb 04 78 26 49 25 61 d7 ef 6c 03 f0 5c 7e b9 a9 44 1a 84 bc cb 73 1d b8 fe ec 09 b9 87 fc 09 b8 3f f7 c8 a0 e9 76 Data Ascii: ?8nrk*OB[D9+kc#!RedX~<OI-yqp9+ocKsh#'Z"'lhHw>?O 56xs'3MrH6YM AoMYH0W8hx&I%al\~Ds?v
2024-12-30 14:27:14 UTC	1255	IN	Data Raw: 5e 58 de 1e d2 21 92 36 8b 5e 89 d5 01 65 89 d6 55 01 32 dc 10 41 c8 f9 ba 7e 55 51 7f ce bf af eb fa d0 25 ab d3 57 ff 00 03 f0 ff 00 87 29 db 49 62 f7 f7 42 f6 ca e5 63 65 6d 8a 19 47 cc 72 33 ca 9c 8c f1 db 8e 95 9f 15 e5 95 c3 f9 92 43 73 0a ee 52 64 40 1b 67 20 93 c8 c7 40 3d 32 71 d6 b5 db c3 d6 4d 22 cc fe 22 b3 79 62 93 71 79 9d c6 57 d0 e5 7e 5c 93 8e 3d 79 a7 3e 80 d2 45 6f 24 7a b6 9a 54 12 a5 56 f1 77 12 4f 19 18 c0 1c 81 df 39 ed d2 9d a3 2d 5a 23 de 7e e9 c9 dd a5 bc 31 01 0a cb 34 72 95 26 62 f9 60 31 c2 9e 84 7d 3b d4 f6 72 ea 4f 74 de 5c 72 49 9f 97 08 77 6f 39 27 6e 31 82 7e 51 8c d6 f9 f0 dc b1 4f 0c 90 dc d8 ca a8 bb b0 b3 82 3a 75 27 19 ea 73 54 9b 41 d6 9d 92 28 67 08 15 99 91 95 f0 d8 20 70 1f 23 39 e9 cf a5 35 38 35 69 68 4b e6 94 Data Ascii: ^X!6^eU2A~UQ%W)IbBcemGr3CsRd@g @=2qM""ybqyW~\=y>Eo$zTVwO9-Z#~14r&b`1};rOt\rIwo9'n1~QO:u'sTA(g p#9585ihK
2024-12-30 14:27:14 UTC	1255	IN	Data Raw: 3d df c1 fa 67 87 f4 0b f8 a7 d4 35 d9 ee 34 bb 6b 54 9a 1b 43 21 56 90 3b 0d ec bc 81 c6 ec e1 79 38 6e 6a 5d 5f c6 1e 0d bd d4 9b 44 f0 ee 91 f6 db 2c f9 f3 5b dd 8c ab b2 36 ec c6 b8 3c e1 5f 96 c8 e9 c5 6c 7e cf d2 5a ea 97 cd aa ea d6 56 d3 4c b6 71 d9 da b7 2e 60 54 5d a4 05 60 15 72 58 72 3b e7 35 c2 7c 4c b8 b7 9b e3 6b 0d 36 18 74 b3 e7 2c 4c d9 50 aa d8 c6 ee 38 e7 92 7d 47 19 35 95 3b c9 72 df fe 01 5e d1 46 cd eb fd 5f f4 3d 6a ea e0 40 ad 1d be d8 3c ad c3 6c 93 29 5c 20 da 31 90 7d 5b a8 af 08 d7 6e 93 54 f1 55 f6 ae 15 02 0b a6 48 56 34 ca c9 20 c6 0e 30 01 ed d3 bb 0e 2b b2 f8 93 ad de e9 ca b7 f0 ec 5b 7b eb 9c 89 24 7d aa 38 66 5c 74 00 1d c4 7e 7e f4 b1 e9 76 1e 27 b4 6d 46 2b 86 8c 24 41 02 db c8 ad b3 d1 41 03 3c 7c bf 37 4e bc 52 74 Data Ascii: =g54kTC!V;y8nj]_D,[6<_l~ZVLq.`T]`rXr;5\|Lk6t,LP8}G5;r^F_=j@<l)\ 1}[nTUHV4 0+[{$}8f\t~~v'mF+$AA<\|7NRt
2024-12-30 14:27:14 UTC	1255	IN	Data Raw: 79 ed 1b e5 28 d9 56 8c 7f 5f ca 93 67 bb 7e 55 7c c4 d8 ab b3 da 8d 95 6b 67 b9 fc a8 29 ee 7f 2a 39 82 c5 5d 94 9b 3d aa d7 97 f5 fc a9 3c bf 73 f9 53 e6 0b 15 b6 7b 52 14 ab 5e 5f bf e9 41 4f f6 85 1c c2 b1 50 c7 c7 4a 61 8f 35 74 a7 fb 4b 4d d9 9f 4a 6a 42 b1 ce eb da 87 f6 05 dd 8e be d6 31 df 25 83 34 86 17 97 cb ce 70 a0 8e c4 82 47 18 39 ad af 02 f8 5e 5b 99 6e 66 b1 96 2b 69 26 3e 6e a1 a8 61 4d c4 b3 b8 de c8 a5 94 85 55 07 39 e4 f4 1c 57 31 f1 02 cd ae 75 2d 06 29 1f fd 1e 4b a3 1b c7 93 86 24 a9 07 f0 da 4e 7b 73 de b9 cb ad 7e 77 bd d5 1e d2 5b d8 e2 6b 96 91 11 e6 65 06 3e 40 61 b4 9c 8d a3 92 46 3a 7d 0e 35 66 a9 a7 2b 6e f4 37 8d e7 15 05 d0 f7 4d 0b 42 d1 6f 75 8d 43 4d d6 5d ef ae ad f0 ff 00 e9 53 34 9b e3 38 da c1 58 95 51 b7 d8 60 f5 Data Ascii: y(V_g~U\|kg)*9]=<sS{R^_AOPJa5tKMJjB1%4pG9^[nf+i&>naMU9W1u-)K$N{s~w[ke>@aF:}5f+n7MBouCM]S48XQ`
2024-12-30 14:27:14 UTC	1255	IN	Data Raw: 83 db 3c 80 4f d6 a2 b7 d2 63 9a 3f 36 49 d8 02 18 90 18 06 e4 1e 07 38 1c 7b 80 32 7f 1d 6b c8 84 4c 23 b9 e2 7e 58 15 52 e5 87 56 3b 73 9e a1 7a 9f 4a 6c 31 e2 70 4b 6e e4 2b 9c 28 03 ae e2 71 91 9c fd 38 c0 18 eb 42 f8 6e 89 b2 4b 6f 3e 86 75 bd b0 b6 95 4c 56 f1 be 24 1b 7f 75 c8 5c e0 37 24 72 49 3c f3 e9 81 4b 22 cf 13 72 92 42 fb 07 ce 18 83 b4 82 07 6e 38 1c e7 d7 f0 ab 49 11 9a 30 db d9 14 44 11 b7 82 4e 38 38 39 e0 f4 38 c7 af 6c 1a 45 62 a6 09 95 44 88 79 44 0d b4 93 81 bb 93 c8 1f 30 20 77 eb cf 5a 96 bf af eb fa ea 27 1d 5d ba 7a 14 5e 5d a1 8c 82 39 32 c8 1f ca 6c 95 40 72 c1 8e 78 ea a3 a1 24 73 eb 53 c7 77 6e 59 b6 46 9b 48 5f 2c c6 e3 70 8f 1d 31 d7 8e 9c f7 3d b1 cc 8f 19 56 06 58 e3 43 12 15 62 d1 12 bb 7a 0e 7e 99 c8 ef c5 17 09 e5 2e Data Ascii: <Oc?6I8{2kL#~XRV;szJl1pKn+(q8BnKo>uLV$u\7$rI<K"rBn8I0DN8898lEbDyD0 wZ']z^]92l@rx$sSwnYFH_,p1=VXCbz~.
2024-12-30 14:27:14 UTC	1255	IN	Data Raw: 31 04 00 98 cb 6d 75 e7 1c e3 3f 8d 5c d1 2c b4 d8 b5 e3 04 da 84 b9 0e ea 5c af 20 ae 08 0d 83 81 9f 50 4f 4c d5 0d 00 43 f6 c6 ba 9a cc dd 88 63 24 82 0a a9 21 72 1b d4 9f 94 e1 73 db df 15 ab ad cd a5 dd de cf 78 90 49 31 99 55 b3 bd 81 79 36 8f 30 f3 df 3e 84 f5 f7 15 2d a7 74 f5 fb 89 e5 bd 95 bf c8 da f1 64 fa bd 96 eb 2b 6d 2a f2 da 5b 76 0d 2c 87 e7 52 81 40 01 71 9e 3e 63 df a9 e8 49 cd 73 92 0f 16 dd 24 88 63 b9 c3 4a c0 a6 48 25 8e 4e 09 3d f3 d7 3d 31 9f 5a e9 7c 23 e4 cf a4 23 ee f2 8a 4c cc f9 66 da 70 41 dd 9d be 9b 4e 72 0f 22 b7 af ed c2 2c 72 3a 01 14 87 79 20 97 93 24 06 6c e4 64 63 3c 28 6e f9 34 9c a4 da 57 2a 2a eb 5d 3f af f8 73 cd 1b c3 ba f5 c6 e0 23 96 58 b6 99 3f 79 30 f9 7b 73 d7 1d c1 cf e5 5e d3 66 b6 f1 20 da 52 3b 63 21 2a Data Ascii: 1mu?\,\ POLCc$!rsxI1Uy60>-td+m[v,R@q>cIs$cJH%N==1Z\|##LfpANr",r:y $ldc<(n4W]?s#X?y0{s^f R;c!
2024-12-30 14:27:14 UTC	1255	IN	Data Raw: 5a bf 3f 7a 39 2d 3c ae 9e 85 18 e2 b0 f4 8f 11 ff 00 c2 4b 71 24 f7 9a ad fd d3 c6 d0 e1 96 ea 55 31 33 6e dc 03 06 07 3c 0e 79 a8 f6 7c ba c5 82 5c ce cc da f1 57 8d 7c 67 ab 24 3a 25 86 8d 7a b7 52 22 48 d1 5a db b9 99 f0 39 3c 0c ed dd cf 03 d2 a2 d2 1b c7 da 05 ca ea 57 7a 46 bf 0a aa a2 dc ab db 3b 0f 2c 00 72 77 2f 19 e9 db 19 c6 73 5e 6d a3 5f cd e2 2d 6e c7 4a bf f1 0e a1 79 1c b3 85 d9 2c b2 48 10 f4 dc 01 6e a0 67 d3 eb 5e 89 6b e0 28 2d af 60 ba 8f c4 f7 61 e1 72 c7 30 b9 c8 e7 8c 19 08 f4 14 fd 97 57 2d 49 4d 6d ca 74 fa bf 8f e2 d5 3c 2f aa 69 69 13 9b 99 2d 24 85 e5 58 64 55 52 cb 8e 72 b8 03 2c 07 5e f5 e7 be 0d 9b 52 10 db e9 3e 6c f0 ac 7b e6 11 00 57 78 90 05 20 91 cf a0 fc 71 df 15 d7 2e 85 3a bd cc 96 fa a6 8e cd 71 0a c7 31 bb d3 bc Data Ascii: Z?z9-<Kq$U13n<y\|\W\|g$:%zR"HZ9<WzF;,rw/s^m_-nJy,Hng^k(-`ar0W-IMmt</ii-$XdURr,^R>l{Wx q.:q1
2024-12-30 14:27:14 UTC	1255	IN	Data Raw: d4 b1 a8 87 cc f3 1c 92 cc 43 48 c3 04 15 23 e6 39 23 27 27 38 03 a1 ce 4d 21 40 ae 23 8d 0a cf 2b b1 2c a4 fc a0 0e e7 ae 4e 3b f3 95 3c 7a 4b 6f 75 fb b8 c0 0a e4 c8 a0 01 22 8d 8d 93 8e 47 d0 0c f4 c0 f7 22 96 b7 bc 7c bf af c0 b6 e5 c9 77 fd 7f 56 fe ba c6 5a e2 25 1e 6c 8a ae 1c 04 56 0c c7 27 8c 67 20 64 83 93 9c f7 fc 6a a4 ad 80 4c 6d 21 5f 96 53 09 23 00 80 70 a3 a6 0f d4 73 e9 56 a5 89 e1 8a 21 3c 72 8d 81 da 57 11 e3 71 c0 6e 4e 31 81 8e 3a f4 e9 50 fd a1 15 84 91 32 c8 a1 89 de 3a 86 27 be 39 e7 9e 7f 03 56 bb af eb b0 f6 df e5 fd 7d fb 8b 20 f3 e6 65 56 78 fa e5 4a ee 65 6c 8e 71 e8 01 eb d0 71 c5 53 95 91 8c 6a b0 24 ac d2 65 b6 63 82 54 fa 75 c6 41 3e 9c d5 b1 0a 4f 0b b4 88 80 82 43 c2 0a 60 e4 e0 67 3e a3 9e 9c e0 fb 54 12 dc ab 23 be d9 Data Ascii: CH#9#''8M!@#+,N;<zKou"G"\|wVZ%lV'g djLm!_S#psV!<rWqnN1:P2:'9V} eVxJelqqSj$ecTuA>OC`g>T#
2024-12-30 14:27:14 UTC	1255	IN	Data Raw: b1 cb 0d a4 1e 9d 3b 7e 35 da d8 78 42 2b 3d 39 1a ed e3 86 cf 69 5f 97 0c 00 3c 75 ea 39 ed f9 73 5a 2f ac d9 d9 44 20 d2 d5 25 48 f1 12 4b 2a 80 01 dd 85 63 c9 e5 71 df 80 6a 53 b4 5c 9e 9a db e6 ca 9c 5a 5f d7 f5 73 0e ea fa e6 fd ed e7 bc b8 fb 4b 44 15 4a 6e 2b 16 3a f9 9f 2f 41 d0 f7 e3 f1 aa f1 45 14 ea cd 0d b2 c9 d5 92 10 b9 cf 03 a8 e4 73 90 73 d3 a5 4b e7 5d 4f 1b 49 71 2b 79 8b 97 cb 2f 99 bd 70 72 73 fd ff 00 94 71 92 07 3d 2a 19 8b aa b9 96 eb f7 e1 1a 34 50 76 ae 06 32 a7 3d f0 5b 9e de 87 9a 1c 9a d9 ea 39 49 42 5a 7f 4c 8e 4d a4 b5 cc 72 a9 31 21 50 9f 2a 84 c6 79 e0 f6 04 80 4f a7 4a 4b bf 36 e1 d7 c9 54 f3 16 66 8d 63 47 cc 8d c8 38 eb 8e 3e 9c 92 39 e9 53 4a 21 86 cd 16 69 76 83 1e 32 14 2b 28 c0 0c 7e f6 46 10 8e 00 07 eb d9 93 dd 19 Data Ascii: ;~5xB+=9i_<u9sZ/D %HKcqjS\Z_sKDJn+:/AEssK]OIq+y/prsq=4Pv2=[9IBZLMr1!P*yOJK6TfcG8>9SJ!iv2+(~F

Target ID:	0
Start time:	09:26:45
Start date:	30/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff72f090000
File size:	2'742'376 bytes
MD5 hash:	BB7C48CDDDE076E7EB44022520F40F77
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	09:26:46
Start date:	30/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-subproc-heap-profiling --field-trial-handle=2204,i,14339181054727634091,385674495665761904,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20240909-180142.416000 --mojo-platform-channel-handle=2216 /prefetch:3
Imagebase:	0x7ff72f090000
File size:	2'742'376 bytes
MD5 hash:	BB7C48CDDDE076E7EB44022520F40F77
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	09:26:52
Start date:	30/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://flowto.it/8tooc2sec?fc=0"
Imagebase:	0x7ff72f090000
File size:	2'742'376 bytes
MD5 hash:	BB7C48CDDDE076E7EB44022520F40F77
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://www.google.com/sorry/index?continue=https://google.com/amp/web1.mlp-pe.com%3Ffce_id%3Dc5023f68-6cd8-4695-8d96-ef06a705cb58&q=EgRmgZnuGLDbyrsGIjCafytzTqN3e51BjWxsNClAy8uz54vRDPSHaWFgiv41s7JPNCztuhekCtRcp5sUtIsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	HTTP Parser: No favicon
Source: https://www.google.com/sorry/index?continue=https://google.com/amp/web1.mlp-pe.com%3Ffce_id%3Dc5023f68-6cd8-4695-8d96-ef06a705cb58&q=EgRmgZnuGLDbyrsGIjCafytzTqN3e51BjWxsNClAy8uz54vRDPSHaWFgiv41s7JPNCztuhekCtRcp5sUtIsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	HTTP Parser: No favicon
Source: https://www.google.com/sorry/index?continue=https://google.com/amp/web1.mlp-pe.com%3Ffce_id%3Dc5023f68-6cd8-4695-8d96-ef06a705cb58&q=EgRmgZnuGLDbyrsGIjCafytzTqN3e51BjWxsNClAy8uz54vRDPSHaWFgiv41s7JPNCztuhekCtRcp5sUtIsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	HTTP Parser: No favicon
Source: https://www.google.com/sorry/index?continue=https://google.com/amp/web1.mlp-pe.com%3Ffce_id%3Dc5023f68-6cd8-4695-8d96-ef06a705cb58&q=EgRmgZnuGLDbyrsGIjCafytzTqN3e51BjWxsNClAy8uz54vRDPSHaWFgiv41s7JPNCztuhekCtRcp5sUtIsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	HTTP Parser: No favicon
Source: https://www.google.com/sorry/index?continue=https://google.com/amp/web1.mlp-pe.com%3Ffce_id%3Dc5023f68-6cd8-4695-8d96-ef06a705cb58&q=EgRmgZnuGLDbyrsGIjCafytzTqN3e51BjWxsNClAy8uz54vRDPSHaWFgiv41s7JPNCztuhekCtRcp5sUtIsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	HTTP Parser: No favicon
Source: https://www.google.com/sorry/index?continue=https://google.com/amp/web1.mlp-pe.com%3Ffce_id%3Dc5023f68-6cd8-4695-8d96-ef06a705cb58&q=EgRmgZnuGLDbyrsGIjCafytzTqN3e51BjWxsNClAy8uz54vRDPSHaWFgiv41s7JPNCztuhekCtRcp5sUtIsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	HTTP Parser: No favicon
Source: https://www.google.com/sorry/index?continue=https://google.com/amp/web1.mlp-pe.com%3Ffce_id%3Dc5023f68-6cd8-4695-8d96-ef06a705cb58&q=EgRmgZnuGLDbyrsGIjCafytzTqN3e51BjWxsNClAy8uz54vRDPSHaWFgiv41s7JPNCztuhekCtRcp5sUtIsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	HTTP Parser: No favicon
Source: https://www.google.com/sorry/index?continue=https://google.com/amp/web1.mlp-pe.com%3Ffce_id%3Dc5023f68-6cd8-4695-8d96-ef06a705cb58&q=EgRmgZnuGLDbyrsGIjCafytzTqN3e51BjWxsNClAy8uz54vRDPSHaWFgiv41s7JPNCztuhekCtRcp5sUtIsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	HTTP Parser: No favicon
Source: https://www.google.com/sorry/index?continue=https://google.com/amp/web1.mlp-pe.com%3Ffce_id%3Dc5023f68-6cd8-4695-8d96-ef06a705cb58&q=EgRmgZnuGLDbyrsGIjCafytzTqN3e51BjWxsNClAy8uz54vRDPSHaWFgiv41s7JPNCztuhekCtRcp5sUtIsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	HTTP Parser: No favicon
Source: https://www.google.com/sorry/index?continue=https://google.com/amp/web1.mlp-pe.com%3Ffce_id%3Dc5023f68-6cd8-4695-8d96-ef06a705cb58&q=EgRmgZnuGLDbyrsGIjCafytzTqN3e51BjWxsNClAy8uz54vRDPSHaWFgiv41s7JPNCztuhekCtRcp5sUtIsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	HTTP Parser: No favicon

Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 4.152.199.46
Source: unknown	TCP traffic detected without corresponding DNS query: 4.152.199.46
Source: unknown	TCP traffic detected without corresponding DNS query: 23.50.112.63
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.165.195
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.165.195
Source: unknown	TCP traffic detected without corresponding DNS query: 23.45.49.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.50.112.8
Source: unknown	TCP traffic detected without corresponding DNS query: 23.50.112.8
Source: unknown	UDP traffic detected without corresponding DNS query: 239.255.255.250
Source: unknown	UDP traffic detected without corresponding DNS query: 239.255.255.250
Source: unknown	UDP traffic detected without corresponding DNS query: 239.255.255.250
Source: unknown	UDP traffic detected without corresponding DNS query: 239.255.255.250
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /amp/web1.mlp-pe.com?fce_id=c5023f68-6cd8-4695-8d96-ef06a705cb58 HTTP/1.1Host: google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: NID=517=i4E8sm-BN75bnGkPw4VW8uy51aQ8ounjntfNX2fu8MFJNuIvCX0dRBy-XkHqHwKOVFSSaC2nqfULsnHhY3TzIXHWC90jS3Wi2BINtQIDr1LJvZE4Ud-byTNL9Q04Nd1-ydmJvrWYY5vORspW6soJ1bMj20dq8UvPjgkw2sOvmuTUanqu
Source: global traffic	HTTP traffic detected: GET /sorry/index?continue=https://google.com/amp/web1.mlp-pe.com%3Ffce_id%3Dc5023f68-6cd8-4695-8d96-ef06a705cb58&q=EgRmgZnuGLDbyrsGIjCafytzTqN3e51BjWxsNClAy8uz54vRDPSHaWFgiv41s7JPNCztuhekCtRcp5sUtIsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1Host: www.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: NID=517=i4E8sm-BN75bnGkPw4VW8uy51aQ8ounjntfNX2fu8MFJNuIvCX0dRBy-XkHqHwKOVFSSaC2nqfULsnHhY3TzIXHWC90jS3Wi2BINtQIDr1LJvZE4Ud-byTNL9Q04Nd1-ydmJvrWYY5vORspW6soJ1bMj20dq8UvPjgkw2sOvmuTUanqu
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CI+2yQEIorbJAQipncoBCMD2ygEIkqHLAQic/swBCIWgzQEIrJ7OAQjkr84BCMO2zgEIvbnOAQjtvM4BCLu9zgEI1r3OAQjMv84BGMHLzAEYva7OARidsc4BSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/sorry/index?continue=https://google.com/amp/web1.mlp-pe.com%3Ffce_id%3Dc5023f68-6cd8-4695-8d96-ef06a705cb58&q=EgRmgZnuGLDbyrsGIjCafytzTqN3e51BjWxsNClAy8uz54vRDPSHaWFgiv41s7JPNCztuhekCtRcp5sUtIsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: NID=517=i4E8sm-BN75bnGkPw4VW8uy51aQ8ounjntfNX2fu8MFJNuIvCX0dRBy-XkHqHwKOVFSSaC2nqfULsnHhY3TzIXHWC90jS3Wi2BINtQIDr1LJvZE4Ud-byTNL9Q04Nd1-ydmJvrWYY5vORspW6soJ1bMj20dq8UvPjgkw2sOvmuTUanqu
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Accept: /X-Client-Data: CI+2yQEIorbJAQipncoBCMD2ygEIkqHLAQic/swBCIWgzQEI1r3OARjBy8wBSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: NID=517=i4E8sm-BN75bnGkPw4VW8uy51aQ8ounjntfNX2fu8MFJNuIvCX0dRBy-XkHqHwKOVFSSaC2nqfULsnHhY3TzIXHWC90jS3Wi2BINtQIDr1LJvZE4Ud-byTNL9Q04Nd1-ydmJvrWYY5vORspW6soJ1bMj20dq8UvPjgkw2sOvmuTUanqu
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=normal&s=V8uk3gXjSxveyP10lsiPTzr4dRJy6ZtZWNETJWzBePJuAB3dILOrmDA5KRrf-WyLe9WVi8m7vKehGKvRgIpDuM13tyq5EWynopbjpK7j5Nh9fXD7vZYUTUp99E0YhfHdB56c-40-lfodJGTO6HPBgt1Lcy15v0N3GbW19-ohagr730LW1YCwHMh-iAQ7CAoQvj5wsfKzTwbMIH7kuiEfW7E68IEg6D3_czVD6QR8DMzYTVPOhYx4meurunowsucYpt0EzfP8vsUZ79JKERyaXd0QAyLoqqg&cb=au63nuisgap HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CI+2yQEIorbJAQipncoBCMD2ygEIkqHLAQic/swBCIWgzQEIrJ7OAQjkr84BCMO2zgEIvbnOAQjtvM4BCLu9zgEI1r3OAQjMv84BGMHLzAEYva7OARidsc4BSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.google.com/sorry/index?continue=https://google.com/amp/web1.mlp-pe.com%3Ffce_id%3Dc5023f68-6cd8-4695-8d96-ef06a705cb58&q=EgRmgZnuGLDbyrsGIjCafytzTqN3e51BjWxsNClAy8uz54vRDPSHaWFgiv41s7JPNCztuhekCtRcp5sUtIsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: NID=517=i4E8sm-BN75bnGkPw4VW8uy51aQ8ounjntfNX2fu8MFJNuIvCX0dRBy-XkHqHwKOVFSSaC2nqfULsnHhY3TzIXHWC90jS3Wi2BINtQIDr1LJvZE4Ud-byTNL9Q04Nd1-ydmJvrWYY5vORspW6soJ1bMj20dq8UvPjgkw2sOvmuTUanqu
Source: global traffic	HTTP traffic detected: GET /js/bg/GaYUpI3TM2ZeJrJuY6shdNLJBEVQZd83XqI1ZKo9ZSY.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CI+2yQEIorbJAQipncoBCMD2ygEIkqHLAQic/swBCIWgzQEIrJ7OAQjkr84BCMO2zgEIvbnOAQjtvM4BCLu9zgEI1r3OAQjMv84BGMHLzAEYva7OARidsc4BSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=normal&s=V8uk3gXjSxveyP10lsiPTzr4dRJy6ZtZWNETJWzBePJuAB3dILOrmDA5KRrf-WyLe9WVi8m7vKehGKvRgIpDuM13tyq5EWynopbjpK7j5Nh9fXD7vZYUTUp99E0YhfHdB56c-40-lfodJGTO6HPBgt1Lcy15v0N3GbW19-ohagr730LW1YCwHMh-iAQ7CAoQvj5wsfKzTwbMIH7kuiEfW7E68IEg6D3_czVD6QR8DMzYTVPOhYx4meurunowsucYpt0EzfP8vsUZ79JKERyaXd0QAyLoqqg&cb=au63nuisgapAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: NID=517=i4E8sm-BN75bnGkPw4VW8uy51aQ8ounjntfNX2fu8MFJNuIvCX0dRBy-XkHqHwKOVFSSaC2nqfULsnHhY3TzIXHWC90jS3Wi2BINtQIDr1LJvZE4Ud-byTNL9Q04Nd1-ydmJvrWYY5vORspW6soJ1bMj20dq8UvPjgkw2sOvmuTUanqu
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF HTTP/1.1Host: www.google.comConnection: keep-aliveAccept: /X-Client-Data: CI+2yQEIorbJAQipncoBCMD2ygEIkqHLAQic/swBCIWgzQEIrJ7OAQjkr84BCMO2zgEIvbnOAQjtvM4BCLu9zgEI1r3OAQjMv84BGMHLzAEYva7OARidsc4BSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=normal&s=V8uk3gXjSxveyP10lsiPTzr4dRJy6ZtZWNETJWzBePJuAB3dILOrmDA5KRrf-WyLe9WVi8m7vKehGKvRgIpDuM13tyq5EWynopbjpK7j5Nh9fXD7vZYUTUp99E0YhfHdB56c-40-lfodJGTO6HPBgt1Lcy15v0N3GbW19-ohagr730LW1YCwHMh-iAQ7CAoQvj5wsfKzTwbMIH7kuiEfW7E68IEg6D3_czVD6QR8DMzYTVPOhYx4meurunowsucYpt0EzfP8vsUZ79JKERyaXd0QAyLoqqg&cb=au63nuisgapUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: NID=517=i4E8sm-BN75bnGkPw4VW8uy51aQ8ounjntfNX2fu8MFJNuIvCX0dRBy-XkHqHwKOVFSSaC2nqfULsnHhY3TzIXHWC90jS3Wi2BINtQIDr1LJvZE4Ud-byTNL9Q04Nd1-ydmJvrWYY5vORspW6soJ1bMj20dq8UvPjgkw2sOvmuTUanqu
Source: global traffic	HTTP traffic detected: GET /js/bg/GaYUpI3TM2ZeJrJuY6shdNLJBEVQZd83XqI1ZKo9ZSY.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Accept: /X-Client-Data: CI+2yQEIorbJAQipncoBCMD2ygEIkqHLAQic/swBCIWgzQEI1r3OARjBy8wBSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: NID=517=i4E8sm-BN75bnGkPw4VW8uy51aQ8ounjntfNX2fu8MFJNuIvCX0dRBy-XkHqHwKOVFSSaC2nqfULsnHhY3TzIXHWC90jS3Wi2BINtQIDr1LJvZE4Ud-byTNL9Q04Nd1-ydmJvrWYY5vORspW6soJ1bMj20dq8UvPjgkw2sOvmuTUanqu
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CI+2yQEIorbJAQipncoBCMD2ygEIkqHLAQic/swBCIWgzQEIrJ7OAQjkr84BCMO2zgEIvbnOAQjtvM4BCLu9zgEI1r3OAQjMv84BGMHLzAEYva7OARidsc4BSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/sorry/index?continue=https://google.com/amp/web1.mlp-pe.com%3Ffce_id%3Dc5023f68-6cd8-4695-8d96-ef06a705cb58&q=EgRmgZnuGLDbyrsGIjCafytzTqN3e51BjWxsNClAy8uz54vRDPSHaWFgiv41s7JPNCztuhekCtRcp5sUtIsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: NID=517=i4E8sm-BN75bnGkPw4VW8uy51aQ8ounjntfNX2fu8MFJNuIvCX0dRBy-XkHqHwKOVFSSaC2nqfULsnHhY3TzIXHWC90jS3Wi2BINtQIDr1LJvZE4Ud-byTNL9Q04Nd1-ydmJvrWYY5vORspW6soJ1bMj20dq8UvPjgkw2sOvmuTUanqu
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Accept: /X-Client-Data: CI+2yQEIorbJAQipncoBCMD2ygEIkqHLAQic/swBCIWgzQEI1r3OARjBy8wBSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: NID=517=i4E8sm-BN75bnGkPw4VW8uy51aQ8ounjntfNX2fu8MFJNuIvCX0dRBy-XkHqHwKOVFSSaC2nqfULsnHhY3TzIXHWC90jS3Wi2BINtQIDr1LJvZE4Ud-byTNL9Q04Nd1-ydmJvrWYY5vORspW6soJ1bMj20dq8UvPjgkw2sOvmuTUanqu
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CI+2yQEIorbJAQipncoBCMD2ygEIkqHLAQic/swBCIWgzQEIrJ7OAQjkr84BCMO2zgEIvbnOAQjtvM4BCLu9zgEI1r3OAQjMv84BGMHLzAEYva7OARidsc4BSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.google.com/sorry/index?continue=https://google.com/amp/web1.mlp-pe.com%3Ffce_id%3Dc5023f68-6cd8-4695-8d96-ef06a705cb58&q=EgRmgZnuGLDbyrsGIjCafytzTqN3e51BjWxsNClAy8uz54vRDPSHaWFgiv41s7JPNCztuhekCtRcp5sUtIsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: NID=517=i4E8sm-BN75bnGkPw4VW8uy51aQ8ounjntfNX2fu8MFJNuIvCX0dRBy-XkHqHwKOVFSSaC2nqfULsnHhY3TzIXHWC90jS3Wi2BINtQIDr1LJvZE4Ud-byTNL9Q04Nd1-ydmJvrWYY5vORspW6soJ1bMj20dq8UvPjgkw2sOvmuTUanqu
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Accept: /X-Client-Data: CI+2yQEIorbJAQipncoBCMD2ygEIkqHLAQic/swBCIWgzQEI1r3OARjBy8wBSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: NID=517=i4E8sm-BN75bnGkPw4VW8uy51aQ8ounjntfNX2fu8MFJNuIvCX0dRBy-XkHqHwKOVFSSaC2nqfULsnHhY3TzIXHWC90jS3Wi2BINtQIDr1LJvZE4Ud-byTNL9Q04Nd1-ydmJvrWYY5vORspW6soJ1bMj20dq8UvPjgkw2sOvmuTUanqu
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/reload?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Accept: /X-Client-Data: CI+2yQEIorbJAQipncoBCMD2ygEIkqHLAQic/swBCIWgzQEI1r3OARjBy8wBSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AJNbFneJCPg7VHoN4_ppju2HntmMMw87o_0eWcsHr-pV7HSAblcnQNxT-6ECJDlF-UzrYCBUbzEn6KDWvnW4rb4; NID=517=i4E8sm-BN75bnGkPw4VW8uy51aQ8ounjntfNX2fu8MFJNuIvCX0dRBy-XkHqHwKOVFSSaC2nqfULsnHhY3TzIXHWC90jS3Wi2BINtQIDr1LJvZE4Ud-byTNL9Q04Nd1-ydmJvrWYY5vORspW6soJ1bMj20dq8UvPjgkw2sOvmuTUanqu
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA5PGsWoCQ-Ax2uVHRLLgFialWVuYNfvEN3KAX9DvGoNNLsavd7FN9mD0jMMSxzjPQKpxI93wwqlONMTVJhrYgPF_bdTbYJ5k1gliF_ZWleCQjv6VooVeIde7ADLMJvZsbl3At03Jz_01YuOULnqDKscaXTDPXnEEVv678Kq2DKie028ax2gNrhGgwnjUN4iFFrZz9h7&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CI+2yQEIorbJAQipncoBCMD2ygEIkqHLAQic/swBCIWgzQEIrJ7OAQjkr84BCMO2zgEIvbnOAQjtvM4BCLu9zgEI1r3OAQjMv84BGMHLzAEYva7OARidsc4BSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1bAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AJNbFneJCPg7VHoN4_ppju2HntmMMw87o_0eWcsHr-pV7HSAblcnQNxT-6ECJDlF-UzrYCBUbzEn6KDWvnW4rb4; NID=517=i4E8sm-BN75bnGkPw4VW8uy51aQ8ounjntfNX2fu8MFJNuIvCX0dRBy-XkHqHwKOVFSSaC2nqfULsnHhY3TzIXHWC90jS3Wi2BINtQIDr1LJvZE4Ud-byTNL9Q04Nd1-ydmJvrWYY5vORspW6soJ1bMj20dq8UvPjgkw2sOvmuTUanqu
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA5PGsWoCQ-Ax2uVHRLLgFialWVuYNfvEN3KAX9DvGoNNLsavd7FN9mD0jMMSxzjPQKpxI93wwqlONMTVJhrYgPF_bdTbYJ5k1gliF_ZWleCQjv6VooVeIde7ADLMJvZsbl3At03Jz_01YuOULnqDKscaXTDPXnEEVv678Kq2DKie028ax2gNrhGgwnjUN4iFFrZz9h7&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Accept: /X-Client-Data: CI+2yQEIorbJAQipncoBCMD2ygEIkqHLAQic/swBCIWgzQEI1r3OARjBy8wBSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AJNbFneJCPg7VHoN4_ppju2HntmMMw87o_0eWcsHr-pV7HSAblcnQNxT-6ECJDlF-UzrYCBUbzEn6KDWvnW4rb4; NID=517=i4E8sm-BN75bnGkPw4VW8uy51aQ8ounjntfNX2fu8MFJNuIvCX0dRBy-XkHqHwKOVFSSaC2nqfULsnHhY3TzIXHWC90jS3Wi2BINtQIDr1LJvZE4Ud-byTNL9Q04Nd1-ydmJvrWYY5vORspW6soJ1bMj20dq8UvPjgkw2sOvmuTUanqu

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: flowto.it
Source: global traffic	DNS traffic detected: DNS query: flowcode.com
Source: global traffic	DNS traffic detected: DNS query: google.com

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of services running on remote hosts and local network infrastructure devices, including those that may be vulnerable to remote software exploitation. Common methods to acquire this information include port and/or vulnerability scans using tools that are brought onto a system.
Tactics:	Discovery
Data Sources:	Cloud Service: Cloud Service Enumeration, Command: Command Execution, Network Traffic: Network Traffic Flow
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://flowto.it/8tooc2sec?fc=0

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 50

Chrome Cache Entry: 51

Chrome Cache Entry: 52

Chrome Cache Entry: 53

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Windows Analysis Report
https://flowto.it/8tooc2sec?fc=0